Problemas Hotspot LOAD BALANCE + THUNDER CACHE

SENHORES BOM DIA, PRECISO DE UM HELP DE VCS. ESTOU COM O SEGUINTE PROBLEMA.. TENHO UMA RB 750GL + THUNDERCACHE. 2 LINKS DE 50MB DEDICADO, E ESTOU REDIRECIONANDO TODO O TRAFEGO DA REDE PARA O THUNDER VIA MANGLE.


###Cria ROTA Thunder


/ip route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.0.0.2 routing-mark=Thunder_router scope=30 target-scope=10


###Habilita Mascaramento Thunder


/ip firewall nat add action=masquerade chain=srcnat comment="MASCARAMENTO DO THUNDER CACHE 7" disabled=no src-address=10.0.0.0/30




###Redireciona Thunder Via Mangle e Regra Cache Full


/ip firewall mangle


add action=mark-routing chain=prerouting comment="REDIRECT THUNDERCACHE" disabled=no dst-address-list=!NO_CACHE dst-port=80 in-interface=!ether2-ThunderCache new-routing-mark=Thunder_router passthrough=no protocol=tcp src-address=192.168.0.0/24


add action=mark-packet chain=postrouting comment="CACHE FULL THUNDER 7" disabled=no dscp=30 new-packet-mark="cache full" passthrough=yes


### Habilita Limite CACHE FULL


/queue type add kind=pcq name=Thunder pcq-classifier=dst-address pcq-limit=50 pcq-rate=0 pcq-total-limit=5000000 set default-small kind=pfifo name=default-small pfifo-limit=10




/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=20M name="CACHE FULL" packet-mark="cache full" parent=global-out priority=8 queue=Thunder


ESSAS AI ACIMA SÃO MINHAS REGRA, POREM O Q ESTA ACONTENCENDO, O HOTSPOT PARA DE BLOQUEAR O PESSOAL QUANDO COLOCO A OPÇÃO "regular", em IPBINDINGS.


OUTRA QUESTÃO É O MEU LOADBALANCE, COMO EU FAÇO O REDIRECT VIA MANGLE E JA TENHO O NAT CONFIGURADO NAS REDES PRECISO COLOCAR AS DUAS ULTIMAS REGRAS ABAIXO.


O QUE EU POSSO MUDAR PARA PODER UTILIZAR A MINHA REDE, REDIRECIONANDO VIA MANGLE AS REQUISIÇÕES PARA O PROXY E O LOAD BALANCE E CONTINUAR BLOQUEANDO MEUS USUÁRIOS SEMPRE Q EU QUISER. ( O PROXY ESTA EM MODO PARALELO )


LOAD BALANCE


/ ip firewall mangle
add chain=prerouting dst-address=189.45.243.40/29 action=accept in-interface=ether3-Residencial
add chain=prerouting dst-address=189.126.143.0/28 action=accept in-interface=ether3-Residencial
add chain=prerouting in-interface=ether1-LinkIB connection-mark=no-mark action=mark-connection new-connection-mark=ether1-LinkIB_conn
add chain=prerouting in-interface=ether4-BACKUP connection-mark=no-mark action=mark-connection new-connection-mark=ether4-BACKUP_conn
add chain=prerouting in-interface=ether3-Residencial connection-mark=no-mark dst-address-type=!local per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=ether1-LinkIB_conn
add chain=prerouting in-interface=ether3-Residencial connection-mark=no-mark dst-address-type=!local per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark=ether4-BACKUP_conn
add chain=prerouting connection-mark=ether1-LinkIB_conn in-interface=ether3-Residencial action=mark-routing new-routing-mark=to_ether1-LinkIB
add chain=prerouting connection-mark=ether4-BACKUP_conn in-interface=ether3-Residencial action=mark-routing new-routing-mark=to_ether4-BACKUP
add chain=output connection-mark=ether1-LinkIB_conn action=mark-routing new-routing-mark=to_ether1-LinkIB
add chain=output connection-mark=ether4-BACKUP_conn action=mark-routing new-routing-mark=to_ether4-BACKUP


/ ip route
add dst-address=0.0.0.0/0 gateway=189.45.243.41 routing-mark=to_ether1-LinkIB check-gateway=ping
add dst-address=0.0.0.0/0 gateway=189.126.143.1 routing-mark=to_ether4-BACKUP check-gateway=ping
add dst-address=0.0.0.0/0 gateway=189.45.243.41 distance=1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=189.126.143.1 distance=2 check-gateway=ping




/ ip firewall nat
add chain=srcnat out-interface=ether1-LinkIB action=masquerade
add chain=srcnat out-interface=ether4-BACKUP action=masquerade








DESDE JÁ AGRADEÇO PELA ATENÇÃO E AJUDA