MikroTik Tutorial 90 - Make Your Internet Faster with DNS Fasttracking

[@SimonJMudd]

If it is faster I would like to know by how much. That is do a test before and after to various sites and provide the DNS lookup timings so we can see how much difference this makes. Also if it makes so much difference it would suggest the router is under a lot of load which might imply upgrading to better hardware. As mentioned running a local DNS server or configuring the DNS lookups to be done via the Mikrotik router where they will be cached would probably also help here.

[@mjsun42]

is it necessary to specify the connection type of established and related for the fasttrack in order to be safe ?

[@andreadicioccio6658]

I don't have "queue tree"...how to set?

[@zanstkalkany2023]

i did that and worked for a few days, speed almost doubled but now its back to normal like before... any explanation?

[@Anavllama]

Hmm, I typically have to allow access to router DNS services on the input chain, are you saying this is only valid for DNS direct to external sources or for router DNS Services as well??

[@Mi_Fa_Volare]

Does it work with packet marks when I have defconf fasttrack rule on?

[@Bravin_Joshua]

hey your solution works pretty well but my concern is the allocated speeds I was to use does it bypass my capped speeds?

[@Martin-ot7xj]

Hi there, how we can set 2 wan on microtik, for example, we have 2 wan or 2 internet connection and we want to set it up these 2 internet connections on microtik, if 1 connection drop or stop working we have get Internet from secend wan or internet connection?

[@paulturner9444]

Hello. If I have set up load balancing for two WANs, will I still be able to set up this fasttracking for DNS or any other fasttracking?

[@boooozeed]

Do you have a solution for DNS cache poisoning?

[@jeremymaravilla6685]

Hi there, i'm having a problem when i try to watch live show on facebook it always buff and sometimes disconnect me from the streamer while when i'm connected to the main internet (not in mikrotek) i can watch it smoothly

[@Al3k5and3r]

is it safe? router can be attacked with 53 port (dns flood also). with fasttrack any firewall rule for unexpected/unrelated traffic (on 53 port) will not be working. Router is not safe.

[@Al3k5and3r]

@@orgind7778 Ну есть и интересные у него идеи, но это полный треш. Это урок как из микротика сделать TP-Link ))

[@Dr.AnonymousPro]

If you're not running a dns server, which in this video is not the case, there's nothing dangerous with having the port be fasttracked. The *destination* port is not inwardly available. Nothing is listening on it, besides, there's also a NAT masquerading all internal addressing.

[@johnbuchanan9700]

Great videos, thank you. Can you upload a video on connecting a MikroTik SXT LTE through a hAP AC2 router? Configuration of LTE 4G and so on?

[@KenpachiZakachi-pl9pl]

For me it doesn't show on que trees

[@rodneyyeo7744]

DNS is only tiny bits of information so not much to gain by fasttracking it. It are responses to your resolve requests and so statefull. Fasttrack should inspect the first package and time to time also packages in the stream. DNS exists in one or two packets returning so Fasttracking those is useless. Looking from your side it is also useless to fasttrack this traffic.

[@pencuriinshaf8822]

well, I think you are right about this, do u have another way to make internet fast on mikrotik?

[@chuyanzmytv3488]

can u teach me how to add for the queque tree you used.

[@Mi_Fa_Volare]

Can I specify it for certain MAC adressess?

[@teamturad5384]

Does it affect the config bandwidth of a router?

[@joes3989]

Can you use the same Filter Rule -> FastTrack for ICMP packets? Or is this better done using Mangle Rules? ... Amazing videos by the way! Greetings from UK!

[@Slawall]

Looks, that the resolving of the addresses is really faster, but is it really safe? Isn't it security break?

[@Elrevisor2k]

What about DNS cache?

[@eidzmerpigcaulan6664]

hello sir.. is this good for hotspot users?

[@niceguy235uk1]

Does this rule bypass the internal DNS cache?

[@foadysfah]

It seems so unfortunately… I cleared my DNS cache after adding these 2 rules, and no more entries were being added to the cache after this. So, in my opinion this is not worth it since you’re always piling the server instead of the router’s cache!

[@TITORANNY]

Hi sir! I'm newbie in mikrotik world. May I know if there is a way to bypass or improve my internet line connection which is under cgnat? My area is pretty congested thats why time to time my internet is getting slower and slower. Thanks in advance.

[@TKSJa]

If your ISP is congested then there is no way for you to bypass it.

[@TITORANNY]

@@TKSJa Hi again sir. I suspected that my isp is throttling my internet connection speed. Is there another way aside using vpn?

[@TKSJa]

@@TITORANNY I don't think so

[@TrivuzOfficial]

why the port is 53?

[@iahmedelbarbary]

are these rules work on CHR? , mikrotik says that CHR Doesn't support fasttrack ?

[@TKSJa]

No they don't

[@esantos999]

Can you leave both fasttrack rules at the bottom or is it better to move them up to the beginning for faster firewall processing?

[@EdVelez]

I dont know that it makes a difference. I am seeing UDP packets even though its at the bottom of the list past my drop actions which usually are the last thing you enter.

[@jefftee448]

I was going to ask the same question. Especially considering its a firewall rule, I believe it should be on top

[@elias1995ish]

hey man, thanks for the videos! Does this also bypass the queues for bandwidth? let's say I have an X device with an IP 192.168.1.124 and set a simple queue to only use 2mbps does this intervene or not?

[@رضوانمحمدحميدقاسم]

Thanks sir for your useful information but.. can I just be helped with my issue I got stuck with . Well actually I did exactly what was mentioned there but it exceeds user transfer limit .and I do not want that to happen I need to limit them was they are configured in user_manager ..one point here to add is that time limit is ok ..but transfer limit is just free although I limited them perfectly. Thank you again and hopefully you get my point right.

[@mesjidjamek]

can u help me setting my mikrotik?

[@matej_stepan]

This won't make a significant difference. You have to FastTrack all traffic in forward chain.

[@manoyensoy382]

where did 53 came from sir...im sorry im studying im not really good for this

[@KwikDELACRUZ]

same question here

[@Dr.AnonymousPro]

Look up "DNS ports" in Google.

[@liaqatsultani961]

thank you very much to share quit useful training i hope you share a video - how to configure BGP and set ASN on Mikrotik router CCR720

[@yamenhemo7883]

But maybe it will proceed hotspot accounting

[@paulkwameacquah7230]

Any security issue with this rule? and is there any workaround ?/

[@TKSJa]

None that I know of.

[@moetarded7757]

I wish I had more thumbs

[@afdevs3054]

That Was Awesome Dear

[@جديدتك]

Perfect

[@xpatriarch22]

Your making the router vulnerable for dns attack.

[@Martin-ot7xj]

Hi there, it was very useful and interesting video tutorial video. Thnx. Keep it up

[@kqabro]

Thanks It worked

[@screenieman]

awesome

[@frankmunoz8918]

friend, you can make a script to free the memory of the routerboard, I thank you.

[@zakirhossain3703]

* Thanks. ...

[@Mohammed.Burhan.Mohammed]

Thanks alot

[@usmanjutt7908]

am still waiting free radius

[@ccesarpenate]

Yep, me too!

[@qammars1977]

go for SAS Radius 100% free upto 100 clients.

[@ghanemabdualrahmanalrofaid9274]

انها خدعه ياشباب لا تصدقوه

[@Leath2007]

tnx so much