High CPU usage by [ksoftirqd/0] but very low network load

Hi all,

I am experiencing high CPU usage by [ksoftirqd/0] and STAs are being kicked off the network.

Only 3 to 4 STA connected and usage is just regular traffic, facebook, youtube, slack and email.

This AP is NOT doing NAT, it's being used a dumbAP which is connected to linux router.

As you can see: sirq is 100% and [ksoftirqd/0] is 77%.

Mem: 129344K used, 124612K free, 752K shrd, 3960K buff, 12696K cached
CPU:   0% usr   0% sys   0% nic   0% idle   0% io   0% irq 100% sirq
Load average: 1.26 1.00 0.73 2/40 12835
  PID  PPID USER     STAT   VSZ %VSZ %CPU COMMAND
    7     2 root     RW       0   0%  77% [ksoftirqd/0]
 1558     1 root     S     4408   2%   8% /usr/sbin/hostapd -s -P /var/run/wifi-phy0.pid -B /var/run/ho
12835 12811 root     R     1200   0%   8% top -d2
12786     2 root     IW       0   0%   8% [kworker/0:0]
 1543     1 root     S     4364   2%   0% /usr/sbin/hostapd -s -P /var/run/wifi-phy1.pid -B /var/run/ho
  932     1 root     S     3684   1%   0% /usr/sbin/sshd -D
12809   932 root     S     3676   1%   0% sshd: root@pts/0
  879     1 root     S     1760   1%   0% /sbin/netifd
    1     0 root     S     1556   1%   0% /sbin/procd
  822     1 root     S     1280   1%   0% /sbin/logd -S 64
  482     1 root     S     1220   0%   0% /sbin/ubusd
12811 12809 root     S     1212   0%   0% -ash
 1201     1 root     S<    1204   0%   0% /usr/sbin/ntpd -n -N -S /usr/sbin/ntpd-hotplug -p 0.openwrt.p
 1161   879 root     S     1200   0%   0% udhcpc -p /var/run/udhcpc-br-lan.pid -s /lib/netifd/dhcp.scri
  500     1 root     S     1016   0%   0% /sbin/urngd
  483     1 root     S      912   0%   0% /sbin/askfirst /usr/libexec/login.sh
11400     2 root     IW       0   0%   0% [kworker/u2:2]
12766     2 root     IW       0   0%   0% [kworker/u2:1]
  196     2 root     SW       0   0%   0% [spi0]
  432     2 root     SWN      0   0%   0% [jffs2_gcd_mtd5]
  581     2 root     IW<      0   0%   0% [ath10k_wq]
  568     2 root     IW<      0   0%   0% [cfg80211]
  582     2 root     IW<      0   0%   0% [ath10k_aux_wq]
  366     2 root     IW<      0   0%   0% [kworker/0:1H]
   91     2 root     IW<      0   0%   0% [kblockd]
   89     2 root     IW<      0   0%   0% [crypto]
  127     2 root     SW       0   0%   0% [kswapd0]
  340     2 root     IW<      0   0%   0% [ipv6_addrconf]
   42     2 root     SW       0   0%   0% [oom_reaper]
    8     2 root     IW<      0   0%   0% [netns]
   86     2 root     IW<      0   0%   0% [writeback]
    6     2 root     IW<      0   0%   0% [mm_percpu_wq]
    2     0 root     SW       0   0%   0% [kthreadd]
    4     2 root     IW<      0   0%   0% [kworker/0:0H]
   88     2 root     SW       0   0%   0% [kcompactd0]
  359     2 root     IW<      0   0%   0% [dsa_ordered]
447     2 root     IW       0   0%   0% [kworker/0:2]

cat /proc/interrupts

           CPU0
  4:         39      MIPS   4  eth0
  5:  213867404      MIPS   5  eth1
  7:  338230957      MIPS   7  timer
 11:         26      MISC   3  ttyS0
 40:  687755401  AR724X PCI       ath10k_pci
 47:  475677693     dummy      ath9k
 48:          0     dummy      ehci_hcd:usb1
 49:          0     dummy      ehci_hcd:usb2
ERR:     240281

OpenWRT info

version r10316-8bdf50e9af
compiled from snapshot
DISTRIB_REVISION='78e5018'
DISTRIB_TARGET='ar71xx/generic'
DISTRIB_ARCH='mips_24kc'
Compiled on = 2019-06-25

/etc/config/firewall


config defaults
    option syn_flood '1'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'REJECT'

config zone
    option name 'lan'
    list   network 'lan'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'ACCEPT'

config include
    option path '/etc/firewall.user'

/etc/config/network

config interface 'loopback'
	option ifname 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd11:bfbc:c18c::/48'

config interface 'service'
	option ifname 'eth0.1'
	option proto 'static'
	option ipaddr '192.168.100.1'
	option netmask '255.255.255.0'

config interface 'lan'
	option type 'bridge'
	option ifname 'eth1.2'
	option proto 'dhcp'

config interface 'private'
	option auto '1'
	option proto 'none'
	option type 'bridge'
	option ifname 'eth1.3'

config interface 'guest'
	option auto '1'
	option proto 'none'
	option type 'bridge'
	option ifname 'eth1.4'

config switch
	option name 'switch0'
	option reset '1'
	option enable_vlan '1'

config switch_vlan
	option device 'switch0'
	option vlan '1'
	option ports '2 0t'

config switch_vlan
	option device 'switch0'
	option vlan '2'
	option ports '1t 6t'

config switch_vlan
	option device 'switch0'
	option vlan '3'
	option ports '1t 6t'

config switch_vlan
	option device 'switch0'
	option vlan '4'
	option ports '1t 6t'

/etc/config/wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'pci0000:00/0000:00:00.0'
	option country 'US'
	option hwmode '11a'
	option htmode 'VHT40'
	option channel '36'
	option txpower '13'
	option basic_rate '12000 18000 24000 36000 48000 54000'
	option supported_rates '12000 18000 24000 36000 48000 54000'
	option log_level '3'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'platform/qca955x_wmac'
	option country 'US'
	option hwmode '11g'
	option htmode 'HT20'
	option channel '11'
	option txpower '13'
	option basic_rate '12000 18000 24000 36000 48000 54000'
	option supported_rates '12000 18000 24000 36000 48000 54000'
	option log_level '3'

config wifi-iface 'wlan0_ap'
	option mode 'ap'
	option device 'radio0'
	option network 'private'
	option ifname 'wlan0-ap'
	option ssid 'xxx'
	option encryption 'psk2'
	option key 'xxx'

config wifi-iface 'wlan1_ap'
	option mode 'ap'
	option device 'radio1'
	option network 'private'
	option ifname 'wlan1-ap'
	option ssid 'xxx'
	option encryption 'psk2'
	option key 'xxx'

It works well after restart, at least for more than two weeks.

Please let me know if any other information is needed.

Thanks :slight_smile:

Just noticed that when I restart only the WiFi everything is back to normal. I didn't have to restart the AP.

ath10k-firmware-qca9984-ct - 2018-10-10-d366b80d-1
kmod-ath - 4.14.129+4.19.32-1-2
kmod-ath10k-ct - 4.14.129+2019-06-13-a045b1ce-1
kmod-ath9k - 4.14.129+4.19.32-1-2
kmod-ath9k-common - 4.14.129+4.19.32-1-2

Try replacing the -ct ath10k with the mainline ath10k. Replace both the kmod and the firmware.

2 Likes

Thanks @mk24. I compiled a version with mainline ath10k firmware and kmod.

How can I test / reproduce this problem?

Thanks

Watch the memory in use. I see from your run of top that more than 128 MB of RAM was is in use. This should not be the case with a dumb AP. Something in ath10k-ct causes the kernel to allocate huge (for a wifi driver) amounts of RAM, which continues to increase over a period of time. That may be related to other instability-- or not.

1 Like

ath10k-ct is memory hungry, with only a single ath10k-ct interface 128 MB should be sufficient (with two, it wouldn't be anymore), but barely - ath10k has some mitigations to reduce buffers, ath10k-ct does not.

Memory on my device is 256MB.

Got it. I will test it for a few days and report back.

Thanks!

Having an issue with mainline ath10k firmware and kmod

As soon as I connect a STA to 5GHz (ath10k), AP restarts. All I see in log file is:

AP has QCA9984 and I am using the same config files as above.

Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 IEEE 802.11: authentication OK (open system)
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 MLME: MLME-AUTHENTICATE.indication(04:f0:21:48:ae:d0,
OPEN_SYSTEM)
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 MLME: MLME-DELETEKEYS.request(04:f0:21:48:ae:d0)
Wed Aug  7 02:02:35 2019 daemon.info hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 IEEE 802.11: authenticated
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 IEEE 802.11: association OK (aid 1)
Wed Aug  7 02:02:35 2019 daemon.info hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 IEEE 802.11: associated (aid 1)
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 MLME: MLME-ASSOCIATE.indication(04:f0:21:48:ae:d0)
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 MLME: MLME-DELETEKEYS.request(04:f0:21:48:ae:d0)
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 IEEE 802.11: binding station to interface 'wlan0-ap'
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 WPA: event 1 notification
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 WPA: start authentication
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 IEEE 802.1X: unauthorizing port
Wed Aug  7 02:02:35 2019 daemon.debug hostapd: wlan0-ap: STA 04:f0:21:48:ae:d0 WPA: sending 1/4 msg of 4-Way Handshake

This does NOT happen when connecting to 2.4GHz (ath9K) or ath10k-ct firmware and kmod.

kernel - 4.14.134-1-233e5e02ef5e2b2e5ffd578903c35ca8
ath10k-firmware-qca9984 - 20190618-1
kmod-ath - 4.14.134+5.2-rc7-1-1
kmod-ath10k - 4.14.134+5.2-rc7-1-1
kmod-ath9k - 4.14.134+5.2-rc7-1-1
kmod-ath9k-common - 4.14.134+5.2-rc7-1-1

Should I move this to a new thread under "For Developers"?

Thanks

Still having the same issue:
sirq is 100% and devices are not able to connect.

Mem: 103432K used, 150524K free, 56K shrd, 3968K buff, 10752K cached
CPU:   0% usr   0% sys   0% nic   0% idle   0% io   0% irq 100% sirq
Load average: 1.03 0.71 0.31 3/41 2622
  PID  PPID USER     STAT   VSZ %VSZ %CPU COMMAND
    7     2 root     RW       0   0%  89% [ksoftirqd/0]
 2592     2 root     IW       0   0%   9% [kworker/0:1]
 2612   928 root     S     3684   1%   1% sshd: root@pts/0
 2622  2614 root     R     1208   0%   1% top -d2
    5     2 root     IW       0   0%   0% [kworker/u2:0]
 2431     1 root     S     4436   2%   0% /usr/sbin/hostapd -s -P /var/run/wifi-phy0.pid -B /var/run/hosta
  928     1 root     S     3692   1%   0% /usr/sbin/sshd -D
  875     1 root     S     1768   1%   0% /sbin/netifd
    1     0 root     S     1564   1%   0% /sbin/procd
  807     1 root     S     1244   0%   0% /sbin/logd -S 64
  482     1 root     S     1220   0%   0% /sbin/ubusd
 2614  2612 root     S     1220   0%   0% -ash
 1160     1 root     S<    1212   0%   0% /usr/sbin/ntpd -n -N -S /usr/sbin/ntpd-hotplug -p 0.openwrt.pool
 1126   875 root     S     1208   0%   0% udhcpc -p /var/run/udhcpc-eth1.2.pid -s /lib/netifd/dhcp.script
  500     1 root     S     1024   0%   0% /sbin/urngd
  483     1 root     S      920   0%   0% /sbin/askfirst /usr/libexec/login.sh
 2003     2 root     IW       0   0%   0% [kworker/u2:2]
 2226     2 root     IW       0   0%   0% [kworker/0:2]
  196     2 root     SW       0   0%   0% [spi0]
  432     2 root     SWN      0   0%   0% [jffs2_gcd_mtd5]
  568     2 root     IW<      0   0%   0% [cfg80211]
  581     2 root     IW<      0   0%   0% [ath10k_wq]
  366     2 root     IW<      0   0%   0% [kworker/0:1H]
  359     2 root     IW<      0   0%   0% [dsa_ordered]
  582     2 root     IW<      0   0%   0% [ath10k_aux_wq]
  127     2 root     SW       0   0%   0% [kswapd0]
   89     2 root     IW<      0   0%   0% [crypto]
   88     2 root     SW       0   0%   0% [kcompactd0]
   91     2 root     IW<      0   0%   0% [kblockd]
    8     2 root     IW<      0   0%   0% [netns]
   42     2 root     SW       0   0%   0% [oom_reaper]
    2     0 root     SW       0   0%   0% [kthreadd]
    4     2 root     IW<      0   0%   0% [kworker/0:0H]
    6     2 root     IW<      0   0%   0% [mm_percpu_wq]
   86     2 root     IW<      0   0%   0% [writeback]
  340     2 root     IW<      0   0%   0% [ipv6_addrconf]
 2608     2 root     IW       0   0%   0% [kworker/0:0]
609     2 root     IW       0   0%   0% [kworker/u2:1]

This happens at random time. I am using:

ath10k-firmware-qca9984-ct - 2019-06-28-7651f5bb-1
kmod-ath - 4.14.134+5.2-rc7-1-1
kmod-ath10k-ct - 4.14.134+2019-06-13-f0aa8130-1
kmod-ath9k - 4.14.134+5.2-rc7-1-1
kmod-ath9k-common - 4.14.134+5.2-rc7-1-1

any advice? thanks!

What device are you using? There may be others that have seen (and possibly resolved) the issue on the same hardware.

Chipset: SoC QCA9558, QCA9984, switch QCA8337

Did anyone ever get to the bottom of this? I'm experiencing periods of high sirq% with:

    7     2 root     SW       0   0%   2% [ksoftirqd/0]
  378     2 root     IW       0   0%   2% [kworker/0:2]

at the top of my CPU users.

I'm using 19.07.2 on a WNDR 4300. I never had this problem with 18.06.x.

Any further info I can provide to help get to the bottom of it?

1 Like

Hi all, I came here because I started seeing ksoftirqd utilizing 87% of cpu on my device. Here is my information:

device: TP-Link Archer C7 v2
OS: OpenWRT 19.07.6
installed from official release firmware at http://downloads.openwrt.org/releases/19.07.6/targets/ath79/generic/openwrt-19.07.6-ath79-generic-tplink_archer-c7-v2-squashfs-sysupgrade.bin

CPU went from 74% idle to 0% idle, longterm load increased from 0.1 to 1.1, and IRQ 12 (phy1, the 2.4GHz radio) went from ~220 interrupts per second to ~83,000. Shortly after this, wireless clients on the 2.4GHz radio started disconnecting, which happened gradually over the course of about 20 minutes, going from 8 clients connected to 2 clients connected. The 5GHz radio and clients were unaffected.

I manually restarted the 2.4GHz radio from the LUCI gui, and within seconds, the CPU, load, and IRQs were back to normal, and all 2.4GHz client reconnected within 2 minutes.

dmesg and the system log don't show any kernel errors immediately preceding or during this time period.

Any idea what might be happening here?

I am seeing the same on two MT7621 devices (2C4T MIPS SoC). I'm monitoring them for uptime and wireless issues, but uptime reports load by default, so that's how it caught my eye.

These are three EAP235-Wall devices (MT7621), third one has the radio down. Others have clients connected (one or two at the most at this time). Clients are doing normal web browsing, no streaming.

 02:16:14 up 4 days,  5:13,  load average: 1.61, 1.66, 1.66
 02:16:14 up 2 days, 13:14,  load average: 1.50, 1.60, 1.65
 02:16:15 up 4 days,  3:27,  load average: 0.00, 0.00, 0.00

Htop reports one logical core being used for 100%, and top shows ksoftirqd/3 using 20% (which would be 80% on one of the four cores). Have not tried restarting hostapd yet. This is on 21.02 HEAD.

I have similar issue on RB962UiGS-5HacT2HnT (Mikrotik hAP ac; device is not officially supported because change is not merged yet https://github.com/openwrt/openwrt/pull/4176 but I build my own version), but in my case I use NAT. Same issue is on Openwrt 19.07.9, 21.02 and master branch.
During the speedtest, over 500 mbits (no metter if download/upload) with a cable, the ksoftirqd/0 is taking 100% of the CPU.
For release 21.02 and master, I use only installed packages defined in the .config file:

CONFIG_TARGET_ath79=y
CONFIG_TARGET_ath79_mikrotik=y
CONFIG_TARGET_MULTI_PROFILE=y
CONFIG_TARGET_DEVICE_ath79_mikrotik_DEVICE_mikrotik_routerboard-962uigs-5hact2hnt=y
CONFIG_TARGET_DEVICE_PACKAGES_ath79_mikrotik_DEVICE_mikrotik_routerboard-962uigs-5hact2hnt=""
CONFIG_TARGET_DEVICE_ath79_mikrotik_DEVICE_mikrotik_routerboard-lhg-2nd=y
CONFIG_TARGET_DEVICE_PACKAGES_ath79_mikrotik_DEVICE_mikrotik_routerboard-lhg-2nd=""
CONFIG_TARGET_DEVICE_ath79_mikrotik_DEVICE_mikrotik_routerboard-lhg-5nd=y
CONFIG_TARGET_DEVICE_PACKAGES_ath79_mikrotik_DEVICE_mikrotik_routerboard-lhg-5nd=""
CONFIG_TARGET_DEVICE_ath79_mikrotik_DEVICE_mikrotik_routerboard-wap-g-5hact2hnd=y
CONFIG_TARGET_DEVICE_PACKAGES_ath79_mikrotik_DEVICE_mikrotik_routerboard-wap-g-5hact2hnd=""
CONFIG_TARGET_DEVICE_ath79_mikrotik_DEVICE_mikrotik_routerboard-wapr-2nd=y
CONFIG_TARGET_DEVICE_PACKAGES_ath79_mikrotik_DEVICE_mikrotik_routerboard-wapr-2nd=""
CONFIG_ALL_KMODS=y
CONFIG_ALL_NONSHARED=y
CONFIG_DEVEL=y
CONFIG_TARGET_PER_DEVICE_ROOTFS=y
CONFIG_AUTOREMOVE=y
CONFIG_BPF_TOOLCHAIN_BUILD_LLVM=y
# CONFIG_BPF_TOOLCHAIN_NONE is not set
CONFIG_BUILDBOT=y
CONFIG_COLLECT_KERNEL_DEBUG=y
CONFIG_HAS_BPF_TOOLCHAIN=y
CONFIG_IB=y
CONFIG_KERNEL_BUILD_DOMAIN="buildhost"
CONFIG_KERNEL_BUILD_USER="builder"
CONFIG_MAKE_TOOLCHAIN=y
CONFIG_PACKAGE_bmon=y
CONFIG_PACKAGE_cgi-io=y
CONFIG_PACKAGE_confuse=y
CONFIG_PACKAGE_htop=y
CONFIG_PACKAGE_iperf3=y
CONFIG_PACKAGE_libbpf=m
CONFIG_PACKAGE_libelf=m
CONFIG_PACKAGE_libiwinfo-lua=y
CONFIG_PACKAGE_liblua=y
CONFIG_PACKAGE_liblucihttp=y
CONFIG_PACKAGE_liblucihttp-lua=y
CONFIG_PACKAGE_libncurses=y
CONFIG_PACKAGE_libnl-core=y
CONFIG_PACKAGE_libnl-route=y
CONFIG_PACKAGE_libubus-lua=y
CONFIG_PACKAGE_lua=y
CONFIG_PACKAGE_luci=y
CONFIG_PACKAGE_luci-app-firewall=y
CONFIG_PACKAGE_luci-app-opkg=y
CONFIG_PACKAGE_luci-base=y
CONFIG_PACKAGE_luci-lib-base=y
CONFIG_PACKAGE_luci-lib-ip=y
CONFIG_PACKAGE_luci-lib-jsonc=y
CONFIG_PACKAGE_luci-lib-nixio=y
CONFIG_PACKAGE_luci-mod-admin-full=y
CONFIG_PACKAGE_luci-mod-network=y
CONFIG_PACKAGE_luci-mod-status=y
CONFIG_PACKAGE_luci-mod-system=y
CONFIG_PACKAGE_luci-proto-ipv6=y
CONFIG_PACKAGE_luci-proto-ppp=y
CONFIG_PACKAGE_luci-ssl=y
CONFIG_PACKAGE_luci-theme-bootstrap=y
CONFIG_PACKAGE_px5g-wolfssl=y
CONFIG_PACKAGE_qosify=m
CONFIG_PACKAGE_rpcd=y
CONFIG_PACKAGE_rpcd-mod-file=y
CONFIG_PACKAGE_rpcd-mod-iwinfo=y
CONFIG_PACKAGE_rpcd-mod-luci=y
CONFIG_PACKAGE_rpcd-mod-rrdns=y
CONFIG_PACKAGE_tc-full=m
CONFIG_PACKAGE_tc-mod-iptables=m
CONFIG_PACKAGE_terminfo=y
CONFIG_PACKAGE_uhttpd=y
CONFIG_PACKAGE_uhttpd-mod-ubus=y
CONFIG_PACKAGE_zlib=m
CONFIG_REPRODUCIBLE_DEBUG_INFO=y
CONFIG_SDK=y
CONFIG_SDK_LLVM_BPF=y
CONFIG_TARGET_ALL_PROFILES=y
CONFIG_USE_LLVM_BUILD=y

For release 19.07.X nothing was additional instaled.
Each time, router was configured from scratch + enabled "Software flow offloading" and "Hardware flow offloading"

Configuration from openwrt build from master branch:

/etc/config/firewall


config defaults
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option synflood_protect '1'
	option flow_offloading '1'
	option flow_offloading_hw '1'

config zone
	option name 'lan'
	list network 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'

config zone
	option name 'wan'
	list network 'wan'
	list network 'wan6'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'

config forwarding
	option src 'lan'
	option dest 'wan'

config rule
	option name 'Allow-DHCP-Renew'
	option src 'wan'
	option proto 'udp'
	option dest_port '68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'Allow-Ping'
	option src 'wan'
	option proto 'icmp'
	option icmp_type 'echo-request'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-IGMP'
	option src 'wan'
	option proto 'igmp'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-DHCPv6'
	option src 'wan'
	option proto 'udp'
	option src_ip 'fc00::/6'
	option dest_ip 'fc00::/6'
	option dest_port '546'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-MLD'
	option src 'wan'
	option proto 'icmp'
	option src_ip 'fe80::/10'
	list icmp_type '130/0'
	list icmp_type '131/0'
	list icmp_type '132/0'
	list icmp_type '143/0'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Input'
	option src 'wan'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	list icmp_type 'router-solicitation'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'router-advertisement'
	list icmp_type 'neighbour-advertisement'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Forward'
	option src 'wan'
	option dest '*'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-IPSec-ESP'
	option src 'wan'
	option dest 'lan'
	option proto 'esp'
	option target 'ACCEPT'

config rule
	option name 'Allow-ISAKMP'
	option src 'wan'
	option dest 'lan'
	option dest_port '500'
	option proto 'udp'
	option target 'ACCEPT'

/etc/config/network


config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fded:7949:5479::/48'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'eth0.1'

config device
	option name 'eth0.1'
	option macaddr '74:4d:28:cf:8c:ac'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option netmask '255.255.255.0'
	option ip6assign '60'
	option ipaddr '192.168.88.1'

config device
	option name 'eth0.2'
	option macaddr '74:4d:28:cf:8c:ab'

config interface 'wan'
	option device 'eth0.2'
	option proto 'dhcp'

config interface 'wan6'
	option device 'eth0.2'
	option proto 'dhcpv6'

config switch
	option name 'switch0'
	option reset '1'
	option enable_vlan '1'

config switch_vlan
	option device 'switch0'
	option vlan '1'
	option ports '2 3 4 5 0t'

config switch_vlan
	option device 'switch0'
	option vlan '2'
	option ports '1 0t'

Did someone solve that issue?

Thanks for help,
Dan

Fallowing that advice I guess my router does not have enough "power" to process the packages. It gets 1 Gbps via ethernet connection, but with the wireless connection it gets much lower bandwidth.