+ Responder ao Tópico



  1. #1

    Question Priorizar conexoes (Ajuda)

    Boa tarde companheiros,

    Recentemente comecei a trabalhar com mikrotik e conforme o andar da caroagem, vem surgindo duvidas para melhorar o desempenho dele.
    Eu gostaria primeiramente de efetuar prioridades de e-mail, msn da mesma forma como o cache full ou seja com a banda toda.
    Obs.: Clientes estão sob limite de banda.
    Ja gostaria de pedir como vejo se a regra de limite conexoes simultaneas TCP esta funcionando?
    E estou tendo problemas com p2p, fiz um regra que encontrei em varios lugares so que no dia seguinte muitos reclamaram que nem conseguiam entrar no msn.
    Gostaria de uma regra que atingisse apenas conexoes de download p2p, nao skype voip e similares, e de preferencia que restrinja por ip, se nao for possivel controlar por conexoes, ou caso alguem possua uma dica melhor.

    Grato desde já!

  2. #2

    Padrão Subir

    Ola turma,

    ninguem para dar uma ajuda?

    Obrigado

  3. #3

    Padrão

    Citação Postado originalmente por neotbo Ver Post
    Ola turma,

    ninguem para dar uma ajuda?

    Obrigado
    ola, boa noite amigo, eu prioriso as minhas conexões aqui, funciona assim, primeiro vc marca os tipos de conexões que vc quer priorisar em firewall, mangle, as regras que eu uso são estas


    / ip firewall mangle
    add chain=prerouting protocol=tcp dst-port=80 action=mark-connection \
    new-connection-mark=httpC passthrough=yes comment="http" disabled=no
    add chain=prerouting protocol=tcp dst-port=443 action=mark-connection \
    new-connection-mark=httpC passthrough=yes comment="https" disabled=no
    add chain=prerouting protocol=udp dst-port=443 action=mark-connection \
    new-connection-mark=httpC passthrough=yes comment="https" disabled=no
    add chain=prerouting protocol=udp dst-port=53 action=mark-connection \
    new-connection-mark=httpC passthrough=yes comment="dns" disabled=no
    add chain=prerouting connection-mark=httpC action=mark-packet \
    new-packet-mark=http passthrough=no comment="\"\"" disabled=no
    add chain=prerouting protocol=tcp dst-port=6891-6901 action=mark-connection \
    new-connection-mark=msnC passthrough=yes comment="MSN" disabled=no
    add chain=prerouting protocol=udp dst-port=6891-6901 action=mark-connection \
    new-connection-mark=msnC passthrough=yes comment="\"\"" disabled=no
    add chain=prerouting protocol=tcp dst-port=1863 action=mark-connection \
    new-connection-mark=msnC passthrough=yes comment="\"\"" disabled=no
    add chain=prerouting protocol=udp dst-port=1863 action=mark-connection \
    new-connection-mark=msnC passthrough=yes comment="\"\"" disabled=no
    add chain=prerouting protocol=udp dst-port=5190 action=mark-connection \
    new-connection-mark=msnC passthrough=yes comment="\"\"" disabled=no
    add chain=prerouting connection-mark=msnC action=mark-packet \
    new-packet-mark=msn passthrough=no comment="\"\"" disabled=no
    add chain=prerouting p2p=all-p2p action=mark-connection \
    new-connection-mark=p2pC passthrough=yes comment="P2P" disabled=no
    add chain=prerouting protocol=tcp p2p=all-p2p connection-limit=40,32 \
    action=mark-connection new-connection-mark=p2pCL passthrough=yes \
    comment="\"\"" disabled=no
    add chain=prerouting connection-mark=p2pC action=mark-packet \
    new-packet-mark=p2p passthrough=no comment="\"\"" disabled=no
    add chain=prerouting connection-mark=p2pCL action=mark-packet \
    new-packet-mark=p2p passthrough=no comment="\"\"" disabled=no
    add chain=prerouting protocol=udp action=mark-connection \
    new-connection-mark="outros UDPc" passthrough=yes comment="OUTROS UDPS" \
    disabled=no
    add chain=prerouting connection-mark="outros UDPc" action=mark-packet \
    new-packet-mark="outros udp" passthrough=no comment="\"\"" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=outrosC \
    passthrough=yes comment="OUTROS" disabled=no
    add chain=prerouting connection-mark=outrosC action=mark-packet \
    new-packet-mark=outros passthrough=yes comment="\"\"" disabled=no
    add chain=prerouting protocol=tcp dst-port=8291 action=mark-connection \
    new-connection-mark=winbox passthrough=yes comment="WINBOX" disabled=no
    add chain=prerouting connection-mark=winbox action=mark-packet \
    new-packet-mark=winbox passthrough=no comment="\"\"" disabled=no
    add chain=output protocol=tcp src-port=3128 content="X-cache: HIT" \
    action=mark-connection new-connection-mark=cache-connection \
    passthrough=yes comment="CACHE FULL" disabled=no
    add chain=output connection-mark=cache-connection action=mark-packet \
    new-packet-mark=cache-packet passthrough=yes comment="" disabled=no

    logo vc vai em queue tree e coloca as conexões que vc marcou, coloca os limites de velocidade at e maximo, e prioridades, de 1 a 8, as regras que eu uso estão a seguir

    / queue tree
    add name="QoS" parent=global-total packet-mark=\"\" limit-at=0 queue=default \
    priority=8 max-limit=20000000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="P2P" parent=QoS packet-mark=p2p limit-at=0 queue=default priority=8 \
    max-limit=256000 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
    add name="HTTP" parent=QoS packet-mark=http limit-at=50000 queue=default \
    priority=1 max-limit=2000000 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no
    add name="MSN" parent=QoS packet-mark=msn limit-at=20000 queue=default \
    priority=2 max-limit=256000 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no
    add name="UDP" parent=QoS packet-mark="outros udp" limit-at=50000 \
    queue=default priority=8 max-limit=600000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="DOWNLOAD" parent=QoS packet-mark=outros limit-at=50000 queue=default \
    priority=3 max-limit=2000000 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no


    vc lendo estas regras acredito que consiga entender o funcionamento e poderá deixa-las de acordo com suas necesidades.

    se ajudei favor agradecer....

  4. #4