I would be surprised if there was something wrong. Not many sites can push more than 500 Mbps and the ones that can only do so at like 5 AM. It is CPU intensive to be the receiver of this much bandwidth, less so to pass through. I have a Comcast 800 Mbps plan but have never seen anywhere near that kind of download throughput. There is no practical consequence to that, though. I have FlexQoS enabled and max out between 350 to 450 Mbps from dslreports/speedtest, but I cannot tell if the the router CPU is the limitation or the speedtest site. I am happy with FlexQoS because I get A ratings for bufferbloat. Using a laptop with a fast CPU as an iPerf server, I get 600/400 over Wifi from my Apple devices, so WiFi is not a limitation. Just now I ran an Xfinity speedtest from the Ethernet connected laptop and got 586.6 Mbps/12.8 Mbps. I have never got much more than 350 Mbps from the router's speedtest. I don't see how AiProtection could impact bandwidth. By the way, FlexQoS needs AiProtection for it's categorization database.