PCC Balance de 3 a 16 links - Por: M4D3

[marsilba]

Conforme falei somente um link fica lá em cima, o outro fica no zero quase o tempo todo.Alguém pode ajudar?

http://www.newnetinternet.com.br/site/foto01.jpg

As conecções parecem estar sendo marcadas corretamente, mas o link 2 não "sobe"

http://newnetinternet.com.br/site/foto02.jpg

Ajuda aí gente.

[DSSS]

tem sim,
mas terá q comprar a licença

Tiago já bati a cabeça pacas aqui e não consegui fazer os links trabalharem direito, sempre um fica estourado, no caso sempre a rota default de acordo com a prioridade. Será o pode ser?

[thiagotgc]

Como faço o teste para saber se vai funcionar o site dos bancos?

[paulojrandrade]

[QUOTE=m4d3;432038]PCC LOADBALANCE - 3 LINKS SIMÉTRICOS (TESTADO DE 2 ATÉ 16 LINKS)
MKV: 3.x
MKR: 3.28

EthLinkA = Interface do primeiro link
EthLinkB = Interface do segundo link
EthLinkC = Interface do terceiro link
EthClientes = Interface dos clientes
#################################

Instalado e rodando até agora 1000%.
Obrigado Luciano e Andre Prinou !!!!

[marsilba]

Alguém que saiba o que está acontecendo favor postar aí. Tem várias pessoas com o mesmo problema de um link estar alto enquanto o outro fica la embaixo. O pessoal que entende bem e pode ajudar não fala nada.

[exclusivenet]

amigos, o meu agora ta rodando beleza, to com problemas somente na questão de bancos, to desde ontem a madrugada, pesquisando, e não conseguir achar uma solução ..
eu já criei a lista (sem balance) mas agora, não conseguir descobrir com exatidão os ips do B.Brasil por exemplo ..

[tiagomatias]

Como faço o teste para saber se vai funcionar o site dos bancos?

simples, acessa o site e faça os procedimentos dentro dele que davam erro.

[tiagomatias]

Alguém que saiba o que está acontecendo favor postar aí. Tem várias pessoas com o mesmo problema de um link estar alto enquanto o outro fica la embaixo. O pessoal que entende bem e pode ajudar não fala nada.

porte seus

/ip firewall mangle export
/ip firewall nat export
/ip route export
/ip address

Detalhe diga tmb se tem mais alguma regra alem do PCC nesta maquina que possa estar atrapalhando.

[tiagomatias]

amigos, o meu agora ta rodando beleza, to com problemas somente na questão de bancos, to desde ontem a madrugada, pesquisando, e não conseguir achar uma solução ..
eu já criei a lista (sem balance) mas agora, não conseguir descobrir com exatidão os ips do B.Brasil por exemplo ..

Estranho amigo, pq tenho dois loadbalaced desse grande, com 7 links, mais de 3 mil clientes, e só tive problema com banco do bradesco, e não vi nenhum outro relato aqui no forum de outri site de banco q n seja esse q eu disse.

[thiagotgc]

Alguém que saiba o que está acontecendo favor postar aí. Tem várias pessoas com o mesmo problema de um link estar alto enquanto o outro fica la embaixo. O pessoal que entende bem e pode ajudar não fala nada.

Poisé.. estou LOUCO querendo arrumar isso logo, e nao acho nada sobre!!! =/

[exclusivenet]

Estranho amigo, pq tenho dois loadbalaced desse grande, com 7 links, mais de 3 mil clientes, e só tive problema com banco do bradesco, e não vi nenhum outro relato aqui no forum de outri site de banco q n seja esse q eu disse.

amigo, mudei as minhas regras, que era de acordo com o wiki da mikrotik, mas não rodava junto com o hotspot para usar igual as do m4d3, com a difereça que adptei para 2 links, vou postar abaixo meu ,firewall mangle,nat, route ,ip address, para que vocês possa olhar e ver o que tem de errado ..

/ip address
add address=172.16.0.254/24 broadcast=172.16.0.255 comment="Rede Local - Clientes Prefeitura" disabled=no interface="Rede Local" network=\
    172.16.0.0
add address=189.80.16.82/29 broadcast=189.80.16.87 comment="Ip Link 256" disabled=no interface="Oi UP 256" network=189.80.16.80
add address=189.80.219.82/29 broadcast=189.80.219.87 comment="Ip Link 512" disabled=no interface="Oi UP 512" network=189.80.219.80
add address=10.10.10.1/24 broadcast=10.10.10.255 comment="Rede Local - Clientes Rua" disabled=no interface="Rede Local" network=10.10.10.0

/ip firewall mangle
add action=mark-connection chain=forward comment="" disabled=no new-connection-mark=conexao-p2p p2p=all-p2p passthrough=yes
add action=mark-packet chain=forward comment="" connection-mark=conexao-p2p disabled=no new-packet-mark=pacotes-p2p passthrough=no
add action=accept chain=prerouting comment="SEM BALANCE" disabled=no dst-address-list=sem_balance in-interface="Rede Local"
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface="Oi UP 256" new-connection-mark=conn_na \
    passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface="Oi UP 512" new-connection-mark=conn_na \
    passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=conn_na disabled=no new-routing-mark=to_ra passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nb disabled=no new-routing-mark=to_rb passthrough=no
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface="Rede Local" new-connection-mark=conn_ma0 \
    passthrough=yes per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface="Rede Local" new-connection-mark=conn_mb1 \
    passthrough=yes per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting comment="" connection-mark=conn_ma0 disabled=no in-interface="Rede Local" new-routing-mark=to_nra \
    passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mb1 disabled=no in-interface="Rede Local" new-routing-mark=to_nrb \
    passthrough=no

/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" disabled=no src-address=10.10.10.0/24
add action=redirect chain=dstnat comment="Redirecionar para Proxy" disabled=yes dst-address-list=sem_proxy dst-port=80 protocol=tcp to-ports=8080
add action=masquerade chain=srcnat comment="MASCARAMENTO PCC" disabled=no out-interface="Oi UP 512"
add action=masquerade chain=srcnat comment="" disabled=no out-interface="Oi UP 256"
add action=masquerade chain=srcnat comment="" disabled=no

/ip route
add comment="" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=189.80.219.81 scope=30 target-scope=10
add comment="" disabled=no distance=3 dst-address=0.0.0.0/0 gateway=189.80.16.81 scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=189.80.219.81 routing-mark=to_nra scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=189.80.16.81 routing-mark=to_nrb scope=30 target-scope=10

[aprinou]

Parabéns Paulo.


[quote=paulojrandrade;437082]

PCC LOADBALANCE - 3 LINKS SIMÉTRICOS (TESTADO DE 2 ATÉ 16 LINKS)
MKV: 3.x
MKR: 3.28

EthLinkA = Interface do primeiro link
EthLinkB = Interface do segundo link
EthLinkC = Interface do terceiro link
EthClientes = Interface dos clientes
#################################

Instalado e rodando até agora 1000%.
Obrigado Luciano e Andre Prinou !!!!

[aprinou]

poste seu nat

Conforme falei somente um link fica lá em cima, o outro fica no zero quase o tempo todo.Alguém pode ajudar?

http://www.newnetinternet.com.br/site/foto01.jpg

As conecções parecem estar sendo marcadas corretamente, mas o link 2 não "sobe"

http://newnetinternet.com.br/site/foto02.jpg

Ajuda aí gente.

[tiagomatias]

Amigo exclusivenet, faça as modificções do seu PCC para igual a este que vou postar a vc abaixo.

/ip firewall mangle
add action=mark-connection chain=input comment="Mark new inbound connection wan1" connection-state=new disabled=no in-interface=wan1-pppoe new-connection-mark=wan1 \
    passthrough=yes
add action=mark-connection chain=input comment="Mark new inbound connection wan2" connection-state=new disabled=no in-interface=wan2-pppoe new-connection-mark=wan2 \
    passthrough=yes
add action=mark-connection chain=input comment="Mark new inbound connection wan3" connection-state=new disabled=no in-interface=wan3-pppoe new-connection-mark=wan3 \
    passthrough=yes
add action=mark-connection chain=prerouting comment="Mark established inbound connection wan1" connection-state=established disabled=no in-interface=wan1-pppoe \
    new-connection-mark=wan1 passthrough=yes
add action=mark-connection chain=prerouting comment="Mark established inbound connection wan2" connection-state=established disabled=no in-interface=wan2-pppoe \
    new-connection-mark=wan2 passthrough=yes
add action=mark-connection chain=prerouting comment="Mark established inbound connection wan3" connection-state=established disabled=no in-interface=wan3-pppoe \
    new-connection-mark=wan3 passthrough=yes
add action=mark-connection chain=prerouting comment="Mark related inbound connection wan1" connection-state=related disabled=no in-interface=wan1-pppoe \
    new-connection-mark=wan2 passthrough=yes
add action=mark-connection chain=prerouting comment="Mark related inbound connection wan2" connection-state=related disabled=no in-interface=wan2-pppoe \
    new-connection-mark=wan2 passthrough=yes
add action=mark-connection chain=prerouting comment="Mark related inbound connection wan3" connection-state=related disabled=no in-interface=wan3-pppoe \
    new-connection-mark=wan3 passthrough=yes
add action=mark-routing chain=output comment="Mark new inbound route wan1" connection-mark=wan1 disabled=no new-routing-mark=wan1 passthrough=no
add action=mark-routing chain=output comment="Mark new inbound route wan2" connection-mark=wan2 disabled=no new-routing-mark=wan2 passthrough=no
add action=mark-routing chain=output comment="Mark new inbound route wan3" connection-mark=wan3 disabled=no new-routing-mark=wan3 passthrough=no
add action=mark-connection chain=prerouting comment="Mark traffic that isn't local with PCC mark rand (3 possibilities) - option 1" connection-state=new disabled=no \
    dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan1_pcc_conn passthrough=yes per-connection-classifier=both-addresses:3/0
add action=mark-connection chain=prerouting comment="Mark traffic that isn't local with PCC mark rand (3 possibilities) - option 2" connection-state=new disabled=no \
    dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan2_pcc_conn passthrough=yes per-connection-classifier=both-addresses:3/1
add action=mark-connection chain=prerouting comment="Mark traffic that isn't local with PCC mark rand (3 possibilities) - option 3" connection-state=new disabled=no \
    dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan3_pcc_conn passthrough=yes per-connection-classifier=both-addresses:3/2
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (3 possibilities) - option 1" connection-state=\
    established disabled=no dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan1_pcc_conn passthrough=yes per-connection-classifier=\
    both-addresses:3/0
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (3 possibilities) - option 2" connection-state=\
    established disabled=no dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan2_pcc_conn passthrough=yes per-connection-classifier=\
    both-addresses:3/1
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (3 possibilities) - option 3" connection-state=\
    established disabled=no dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan3_pcc_conn passthrough=yes per-connection-classifier=\
    both-addresses:3/2
add action=mark-connection chain=prerouting comment="Mark related traffic that isn't local with PCC mark rand (3 possibilities) - option 1" connection-state=related \
    disabled=no dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan1_pcc_conn passthrough=yes per-connection-classifier=both-addresses:3/0
add action=mark-connection chain=prerouting comment="Mark related traffic that isn't local with PCC mark rand (3 possibilities) - option 2" connection-state=related \
    disabled=no dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan2_pcc_conn passthrough=yes per-connection-classifier=both-addresses:3/1
add action=mark-connection chain=prerouting comment="Mark related traffic that isn't local with PCC mark rand (3 possibilities) - option 3" connection-state=related \
    disabled=no dst-address-type=!local in-interface=hotspot-bridge new-connection-mark=wan3_pcc_conn passthrough=yes per-connection-classifier=both-addresses:3/2
add action=mark-routing chain=prerouting comment="Mark routing for  PCC mark - option 1" connection-mark=wan1_pcc_conn disabled=no new-routing-mark=wan1 passthrough=\
    yes
add action=mark-routing chain=prerouting comment="Mark routing for  PCC mark - option 2" connection-mark=wan2_pcc_conn disabled=no new-routing-mark=wan2 passthrough=\
    yes
add action=mark-routing chain=prerouting comment="Mark routing for  PCC mark - option 3" connection-mark=wan3_pcc_conn disabled=no new-routing-mark=wan3 passthrough=\
    yes

[marsilba]

Segue aí pessoal

/ip firewall mangle
add action=accept chain=prerouting comment="SEM BALANCE" disabled=no \
dst-address-list=sem_balance in-interface=EthClientes
add action=mark-connection chain=input comment="" connection-state=new \
disabled=no in-interface=EthLinkA new-connection-mark=conn_na \
passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new \
disabled=no in-interface=EthLinkB new-connection-mark=conn_nb \
passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=conn_na \
disabled=no new-routing-mark=to_ra passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nb \
disabled=no new-routing-mark=to_rb passthrough=no
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=EthClientes new-connection-mark=\
conn_ma0 passthrough=yes per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=EthClientes new-connection-mark=\
conn_mb1 passthrough=yes per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting comment="" connection-mark=conn_ma0 \
disabled=no in-interface=EthClientes new-routing-mark=to_nra passthrough=\
no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mb1 \
disabled=no in-interface=EthClientes new-routing-mark=to_nrb passthrough=\
no

/ip firewall nat
add action=accept chain=srcnat comment="MASCARAMENTO PCC" disabled=no \
out-interface=EthLinkA
add action=masquerade chain=srcnat comment="" disabled=no out-interface=\
EthLinkB
add action=masquerade chain=srcnat comment="MASCARAMENTO PCC" disabled=no \
src-address=10.1.1.0/24

/ip route
add comment="" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=EthLinkA
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=EthLinkA \
routing-mark=to_nra
add comment="" disabled=no distance=3 dst-address=0.0.0.0/0 gateway=EthLinkB
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=EthLinkB \
routing-mark=to_nrb

/ip address
add address=10.1.1.1/24 broadcast=10.1.1.255 comment="" disabled=no \
interface=EthClientes network=10.1.1.0


A propósito estou utilizando uma rb450g somente para balanceamento. Minha máquina que faz o controle de mac, banda, proxy etc está com ip 10.1.1.5 Ajuda aí pessoal. Não canso de falar isso.

[marsilba]

porte seus

/ip firewall mangle export
/ip firewall nat export
/ip route export
/ip address

Detalhe diga tmb se tem mais alguma regra alem do PCC nesta maquina que possa estar atrapalhando.

Segue aí. Estou usando os dois modens em bridge só para saberem.

[thiagotgc]

Estranho nao estar "balanceando" só ta "tapando" um unico link!!!

[marcostmariano]

isso somaria as velocidades dos links, ou ficaria por ex. http para um link, p2p para outro link, etc... ??

[paulojrandrade]

Primeiro gostaria de agradecer nosso colega Luciano (M4D3) e ao Andre prinou pela luz no fim do tunel. Estou com o PCC no ar a umas 12 horas, melhorou e muito o acesso aos sites, a resposta esta mais rapida, mas sei q é cedo para elogiar.. farei mais e mais e mais testes. Principalmente por ter o thundercache rodando na rede.
Mas nao consigo acesso externo ao MK onde esta o PCC... nem via winbox, nem ssh...
Gostaria da ajuda dos amigos pra criar a dita regra q habilitaria o acesso remoto.

Grato desde já.

[DSSS]

Estranho nao estar "balanceando" só ta "tapando" um unico link!!!

Aqui amigo do mesmo jeito que o seu, só topa um link, fiz um teste de profile de 12Mbits, (meus links juntos dão 30 Mbits, mas ele não passa dos 9Mbits, porque ele estoura apenas o link da rota com prioridade maior, os outros links deveriam tb repassar abanda e não passa. Algo muito estranho. Lembrando que não tenho um regra se quer nessa rb que não seja as do PCC, ela funcioan exclusivamente como balance, pelo jeito vou ter que comprar uma Balanc da TP-Link.