我是新来的。雷竞技网站我设置了一个十六进制S与连接到USB的沃达丰mu5001 5G路由器和2个华硕RT AX92u设置为网状配置中的接入点。
Hex S被用作POE, 5g天线所在的阁楼没有电源。在正常配置下，一切都工作得很好，但沃达丰使用CGNAT，所以我想在十六进制上设置一个VPN，供单个设备(Playstation)使用。
这是一个陡峭的学习曲线，但我已经能够成功地将Express VPN (EX)设置为L2TP客户端，并且还设置了一个连接到azure中的Ubuntu对等体的Wireguard (WG)对等体进行比较。我的互联网连接大约是300/40，但如果禁用IPSEC, EX的最大速度约为80-100mbps，而WG的最大速度约为60mbps，当使用IOS或windows对等体时，这两个连接都超过150。这1/3的下载带宽是正常的路由器实现?CPU不会超过15%，内存也不会被刷爆。
奇怪的是，如果在Ookla速度测试中使用WG，有时下载工作正常，有时会挂起，无法完成，上传总是ok的，最高速度为40mpbs。
我已经阅读了许多文章，但最终决定创建一个路由表和一个基于策略的规则，将流量路由到接口。为了测试，我一次只激活了一组规则，并将停用所有防火墙规则和修改快速通道绑定到!路由标记<路由表>，因为我看到这可能有帮助，但它没有区别。
我已经发布了我的配置(不包括ipv6)，看看是否有什么我可以做的优化(我敢肯定有负载)
有什么建议吗?
代码:选择所有
# software id = 1XT1-WAN2 l雷竞技# # model = R雷电竞app下载官方版苹果B760iGS # serial number = /interface bridge add admin-mac=2C:C8:1B:90:73:F0 auto-mac=no comment=defconf name=bridge /interface lte set [find] name=Vodafone /interface l2tp-client add allow-fast-path=yes connect-to=uk-docklands-ubuntu-l2tp.xvnet.net \ disabled=no max-mtu=1360 name=Express user=mnwflr /interface wireguard add listen-port=51820 mtu=1200 name= wireguard /interface list add comment=defconf name=WAN addcomment=defconf name=LAN /interface无线安全配置文件set [find default=yes] supplicent -identity=MikroTik /ip热点配置文件set雷竞技网站 [find default=yes] html-directory=hotspot /ip pool add name=default-dhcp ranges=192.168.88.10-192.168.88.254 /ip dhcp-server add address-pool=default-dhcp interface=网桥名称=defconf /port set 0 name=serial0 /路由表add disabled=no fib name=use-Exp add disabled=no fib name=use-WG /interface网桥端口add bridge=bridge comment=defconfinterface=ether2 add bridge=bridge comment=defconf interface=ether3 add bridge=bridge comment=defconf interface=ether4 add bridge=bridge comment=defconf interface=ether5 add bridge=bridge comment=defconf interface=sfp1 add bridge=bridge interface=ether1 /ip邻居discovery-settings set discover-interface-list=LAN /interface detect-internet set detect-interface-list=all /interface list成员add comment=defconf interface=bridge list=LAN添加接口=Vodafone列表=WAN添加接口=Wireguard列表=WAN /interface wireguard peers add allowed-address=0.0.0.0/0 endpoint-address=20.117.233.19 endpoint-port=\ 51820 interface= wireguard persistent-keepalive=25s公共密钥=\ "wbvn3C8z9wu2xXUv2Vn/NedFSm2lUYL298XZLDGinzM=" /ip address add address= \ 192.168.88.1/24 comment=defconf interface=bridge network=\ 192.168.88.0 add address=10.100.100.3 disabled=yes interface= wireguard network=\ 10.100.100.0 /ip DHCP -client # DHCP client不能在slave或passthrough接口上运行!添加评论= = ether1 defconf接口/ ip dhcp服务器租赁添加地址= 192.168.88.214客户机id = 1:1c: 98: c1: c0:45: b9 mac地址= \ 1 c: 98: c1: c0:45: b9服务器= defconf添加地址= 192.168.88.209客户机id = 1: e6: ee: 51:47:45: ce mac地址= \ e6: ee: 51:47:45: ce服务器= defconf / ip dhcp服务器网络添加地址= 192.168.88.0/24评论= defconf dns服务器= 192.168.88.1网关= \ 192.168.88.1 / ip dns设置allow-remote-requests = yes / ip dns静态添加地址= 192.168.88.1评论= defconf name =路由器。lan /ip防火墙filter add action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untracked" add action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalid add action=accept chain=input comment="defconf: accept ICMP" protocol= ICMP add action=accept chain=input comment=\ "defconf: accept to local loopback (for CAPsMAN)" st-address=127.0.0.1 add action=drop chain=input comment="defconf: accept to local loopback (for CAPsMAN)"删除所有不来自LAN的“\ in-interface-list=!”LAN add action=accept chain=forward comment="defconf: accept in ipsec policy" \ ipsec-policy=in,ipsec add action=accept chain=forward comment="defconf: accept out ipsec policy" \ ipsec-policy=out,ipsec add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ connection-state= " established,related,new connection-type="" hw-offload=\ yes routing-mark=!use-WG add action=accept chain=forward comment=\ "defconf: accept established,related,untracked " connection-state=\ established,related,untracked " add action=drop chain=forward comment="defconf: drop invalid" \ connection-state=invalid " add action=drop chain=forward comment=\ "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ connection-state=new in-interface-list=WAN /ip firewall nat add action=masquerade chain=srcnat comment="defconf:化妆舞会“\ ipsec-policy =,没有out-interface-list = WAN添加行动=化装链= srcnat out-interface =沃达丰添加行动=化装链= srcnat out-interface =表达添加行动=化装链= srcnat out-interface = Wireguard / ip路由添加禁用= no dst-address = 0.0.0.0/0网关=表达路由表= use-Exp \ suppress-hw-offload =没有添加禁用=距离= 1 dst-address = 0.0.0.0/0网关= Wireguard pref-src = \”“路由表= = 30 suppress-hw-offload use-WG范围=没有target-scope = 10/路由规则add action=lookup disabled=no src-address=192.168.88.214/32 table=use-Exp