MikroTik Slow Internet & 100% CPU: FastTrack Solution

You’re paying for gigabit internet, but speed tests show a fraction of that. Your MikroTik router’s CPU is pinned at 100%. Before you blame your ISP or consider replacing the router, check whether FastTrack is enabled.

The Quick Diagnostic

Here’s the fastest way to identify the problem:

1. Run a speed test in your browser
2. Simultaneously, check CPU usage on your MikroTik (via WinBox or WebFig)
3. If CPU hits 100% during the test, you likely don’t have FastTrack configured

Budget MikroTik routers like the RB750 series have limited processing power. Without FastTrack, they process every single packet through all firewall rules—a CPU-intensive operation that creates a bottleneck.

What is FastTrack?

FastTrack is a RouterOS feature that accelerates packet processing for established connections. It works in three stages:

1. Session Registration

When a new connection starts, packets go through normal firewall processing. Rules are evaluated, NAT is applied, and connection tracking records the session.

2. Fast Path Creation

Once a session is established and matches FastTrack criteria, RouterOS creates a shortcut in the fast path cache. This simplified routing table bypasses most of the normal processing stack.

3. Accelerated Handling

Subsequent packets for that connection skip the slow path entirely. They bypass most firewall rules and go directly to their destination with minimal CPU involvement.

The result? Dramatically reduced CPU usage and significantly higher throughput.

Enabling FastTrack

Add these rules to your firewall configuration:

Via Terminal

/ip firewall filter add \
  chain=forward \
  connection-state=established,related \
  action=fasttrack-connection \
  comment="FastTrack - accelerate established connections"

Then ensure the rule is at the top of your forward chain:

/ip firewall filter move [find comment~"FastTrack"] 0

Via WinBox

1. Go to IP > Firewall > Filter Rules
2. Click the + button to add a new rule
3. Set:
   • Chain: forward
   • Connection State: check established and related
   • Action: fasttrack-connection
4. Add a comment for easy identification
5. Drag the rule to the top of the forward chain

Verifying FastTrack is Working

After adding the rule, verify it’s active:

Check Connection Tracking

/ip firewall connection print where fasttrack=yes

You should see connections with the fasttrack flag after generating some traffic.

Monitor Rule Counters

/ip firewall filter print stats where action=fasttrack-connection

The byte and packet counters should increase during normal usage.

Before and After Speed Test

Run speed tests before and after enabling FastTrack. On budget routers, you might see improvements from 200-400 Mbps to near-gigabit speeds.

What FastTrack Doesn’t Work With

FastTrack has limitations. It won’t accelerate traffic when using:

Simple Queues

Simple Queues require per-packet processing, which conflicts with FastTrack. If you need QoS, use Queue Trees with interface-based parent queues instead.

Certain Mangle Rules

Some mangle configurations interfere with FastTrack. If FastTrack isn’t activating, review your mangle rules.

IPsec Traffic

Encrypted VPN traffic can’t be fast-tracked because it requires full processing.

Bridge Filtering

If you’re filtering bridged traffic, FastTrack may not apply.

Troubleshooting FastTrack Issues

FastTrack Rule Shows Zero Counters

• Ensure the rule is at the very top of the forward chain
• Check that connection tracking is enabled
• Verify no conflicting mangle rules exist
• Restart the router after adding the rule

Still Seeing High CPU

• Check if Simple Queues are active (disable them temporarily to test)
• Look for other CPU-intensive features (IPsec, VPN processing, logging)
• Review connection tracking table size and limits

RouterOS Version Issues

Some older RouterOS versions have FastTrack bugs. Update to the latest stable version:

/system package update download
/system reboot

Performance Expectations

Here’s what various MikroTik models can achieve with FastTrack enabled:

Model	Without FastTrack	With FastTrack
RB750Gr3	200-400 Mbps	900+ Mbps
hAP ac2	300-500 Mbps	500-700 Mbps
RB4011	500-700 Mbps	900+ Mbps

Your results depend on packet sizes, traffic patterns, and specific firewall configuration.

The Bottom Line

FastTrack is the simplest way to dramatically improve MikroTik performance. One rule at the top of your forward chain lets most traffic bypass expensive firewall processing.

Before replacing your router or upgrading your hardware, add FastTrack. It’s a one-minute fix that can solve years of frustration with slow speeds.