Hi, I have looked for possible routing issues but this one kind of stumps me here is the setup. Client had an ASA5505 , ISP gave them a gigabit link (1Gx11M), when I arrived I tested with the old hardware to say speedtest and they get about 80Mbit down. I install the new piece of hardware(CCR1009-7G-1C-1S+) nothing fancy on the config and now it is only about 20Mbit.

Here is what I have tested, router to online btest server gets 972Mbit x 11Mbit
PC to (my)router btest is about 750Mbit
PC to btest server through router about the same

PC to internet to do anything about 20Mbit is as fast as anything will download, plus as an interesting side effect I normally drop my remote connection like things are timing out, they say on site that their VoIP phones are choppy now at times which I can fix with a queue I am sure .

I am just wondering what I am missing

Thanks

Need more info. Which ports are used, the configuration, the network diagram.

I am using the ether1 interface for the outside to the world and ether2 for the inside network.
I first started with the quickset option and just used NAT option.

since then I have added some queues to handle VoIP and such to try to help out but I havent heard if that has helped the phone problem or not but the download issue still exists.
viewtopic.php?t=73214

I went and tested some other things and it seems to be with TCP traffic I am guessing I show nice high bandwidth with UDP which is what I am guessing btest uses but when I use iperf through the router using TCP it is slow on downloads
Thanks again

/ip firewall filter
chain=input action=accept connection-state=established connection-type="" log=no log-prefix=""
chain=input action=accept connection-state=related log=no log-prefix=""
chain=input action=accept protocol=icmp log=no log-prefix=""
chain=input action=accept protocol=ipsec-esp log=no log-prefix=""
chain=input action=accept in-interface=ether2 log=no log-prefix=""
chain=input action=drop in-interface=ether1 log=no log-prefix=""
chain=forward action=accept connection-state=established log=no log-prefix=""
chain=forward action=accept connection-state=related log=no log-prefix=""
chain=forward action=drop connection-state=invalid log=no log-prefix=""

/ip firewall nat
chain=srcnat action=masquerade out-interface=ether1

/queue tree
add max-limit=5M name=LEVEL_A_UP parent=ether1 queue=default
add max-limit=100M name=LEVEL_A_DOWN parent=ether2 queue=default
add max-limit=5M name=LEVEL_B_UP parent=ether1 queue=default
add max-limit=100M name=LEVEL_B_DOWN parent=ether2 queue=default
add max-limit=9M name=LEVEL_C_UP parent=ether1 queue=default
add max-limit=750M name=LEVEL_C_DOWN parent=ether2 queue=default
add name=VOIP_U packet-mark=VOIP parent=LEVEL_A_UP priority=1 queue=default
add name=VOIP_D packet-mark=VOIP parent=LEVEL_A_DOWN priority=1 queue=default
add name=ACK_U packet-mark=ACK parent=LEVEL_B_UP priority=1 queue=default
add name=ACK_D packet-mark=ACK parent=LEVEL_B_DOWN priority=1 queue=default
add name=DNS_U packet-mark=DNS parent=LEVEL_B_UP priority=2 queue=default
add name=DNS_D packet-mark=DNS parent=LEVEL_B_DOWN priority=2 queue=default
add name=UDP_U packet-mark=UDP parent=LEVEL_B_UP priority=3 queue=default
add name=UDP_D packet-mark=UDP parent=LEVEL_B_DOWN priority=3 queue=default
add name=ICMP_U packet-mark=ICMP parent=LEVEL_B_UP priority=4 queue=default
add name=ICMP_D packet-mark=ICMP parent=LEVEL_B_DOWN priority=4 queue=default
add name=HTTP_U packet-mark=HTTP parent=LEVEL_C_UP priority=1 queue=default
add name=HTTP_D packet-mark=HTTP parent=LEVEL_C_DOWN priority=1 queue=default
add name=HTTP_BIG_U packet-mark=HTTP_BIG parent=LEVEL_C_UP priority=2 queue=default
add name=HTTP_BIG_D packet-mark=HTTP_BIG parent=LEVEL_C_DOWN priority=2 queue=default
add name=OTHER_U packet-mark=OTHER parent=LEVEL_C_UP priority=3 queue=default
add name=OTHER_D packet-mark=OTHER parent=LEVEL_C_DOWN priority=3 queue=default

Well I did this to the firewall rules and I still have the same speed, when I run the speedtest it is odd , I am connected remotely and it times out my connection to the router with winbox and my RDP connection but only is getting 12Mbit , when i use btest I can see 972. Even though the ASA was only getting in the 80s they want it back and remove this piece of equipment. I am not sure where the issue is honestly.

Well I am going to say it must be something on site, I have another one of those routers here and tested it and don't have any issues so I am going to have to make another site visit and see.
Thanks

If the link is 1000/11 then I can assume that the ack send back in TCP connections will congest your link. Also remove all the queues and see if you still have any issues.

How are you connecting from the ISP to the mikrotik?
This could be a speed / duplex mismatch. Recently had this issue where ISP handed off 100m duplex but equipment advertised 100m half duplex.
Secondly depending on what hardware they are using to hand off to you there is another potential issue. I recently had it where ISP is using Huawei routers throughout their backbone. They do bandwidth control by carrying out QOS on each port or sub interface. We would get for 150 mbps link max 40 mbps to a computer. What they found was depending on which syntax they used for entering qos on the interface it would either work 150mbps or would limit far below that. worth communicating with the isp and possibly running test without router connected.

I checked and enabled the half modes , didn't help but I went back and disabled the gigabit and went with 100 and it worked a little better I didn't get disconnected but it wasn't any faster.

I know You probably already did, but... Have you tested another ethernet cable? The problem with the full/half duplex is usually coming from a bent one. Loss of connections and the slow speed too. Check cables, connectors, try another one.

This kind of sounds similar to what I experienced with a rb3011. After 6 weeks it got worse. Turned out to be a faulty router. Replaced with a new one, copied config, problem solved.

Could it be a faulty rate limit on ISP side?
Try add a simple queue a bit below the max bandwidth of the link, to see if it's any better.
Maybe the old ASA had some rate limit configured in it. Also, if you have access to it, try to compare the configuration of interfaces.

I rule out a hw problem as btest with a local machine works well.

OK here is the update, I drive the 2 hrs to get there again so first I think I will hook up my laptop straight in and see, so I did I get 176x9, so I thinking something is going on. I brought another CCR1009 and just did a base config on it and got about the same numbers, I go out and test it on the owner's PC and it is like 20x4 so I take my laptop out there and get like 130x8.

After a lot of tinkering I just couldn't get their PCs to get close, I took the old ASA back and put it in and then I get 96x96 everywhere, then realizing there was a big issue, I was thinking 11 up but no at least 100 so I am still stumped, I even tried an RB750 which had close to the same results as the CCR1009 upload terrible, after many hours I put the ASA back in and left.

Oh the way home I thought maybe they have it provisioned on the ASA's MAC address, the ISP side has a Calix 717GE which I know nothing about but I would say it is up to the task.

I am going to try to get a hold of someone from the ISP and see what on earth.

After looking at the ISP page it looks like you can get a 1Gx1G for $79 a month wished I lived there.