MikroTik

hel

Make feature request for ROS to add for log action script trigger event A more better way I think will be to put an option in a firewall action tab to run a script, just below the log field. That way we could customize event action and assign a different beep patterns to a different firewall filter...

hel

I'm personally more in favor using libcurl and some JSON C library with ROS REST API . It depends on the task. App that I have made using this API for our ISP is running "per user state change" on the billing software. So it should run as fast as it can and consume less resources. Just im...

hel

Old wiki page "API in C" from an unknown author was removed, because this API wasn't updated and had its problems. However, API in C using Winsock that I have posted long time ago is still on the wiki. But without original sources (that was posted on the "API in C" page) it is us...

hel

I want to PCC balance between 2 providers. ISP1 is 1G (dl+ul) ISP2 is 1G (dl+ul) Our users is either using NAT, or static public IP-addresses. Public addresses should go only through ISP1. All other NAT clients should use all remain available bandwidth of both ISPs. I can't predict, how much bandwid...

hel

Tool->Profile shows a different load, than in System>Resources>CPU.
Where is correct, and why is this different?

hel

A great example how a "screaming" title irritates forum users. Such threads should be deleted at sight.
A thread title should reflect the problem. Forum users could decide by themselves what to do with this information.

hel

When I see "DO NOT UPDATE!!!", I start to think that this update is bricking devices or other serious problems. But there's just a software bug/misconfiguration. You should correct your title so you will not confuse others. Those who install beta and rc versions are aware of possible probl...

hel

Just a few months ago 7.x was unstable on some routers.
I think it needs more testing and polishing.

I have 7.5 installed on my home hAP AC3. Uptime is 55 days. No problems so far. I'm using 2 ipsec tunnels, vlans, wifiwave2.
But on production, where we have ~2000 users, we will wait for long-term.

hel

And when you think "let's rename those to more sensible names" you run into bugs with configuration and conversion scripts (on upgrade, reboot). No, I don't want them to be renamed. But those interfaces needs frequency band information, as mkx said. These interfaces should also not to all...

hel

Installed 7.3.1 with wifiwave2 package today on my hAP AC3 home router. I think wifiwave could be a lot more intuitive than what I see now: 1. By default wifiwave interfaces names are wifi1 and wifi2. I'm not sure where is 2.4 and where is 5 GHz radio there. It is possible to select 5GHz channels on...

hel

This version still have high CPU load issue when connecting winbox to hAP Lite.
After some time router reboots itself.
I have reported this issue multiple times since the first v7 limited beta.

hel

Upgrading hAP Lite from 7.1b5 to 7.1b7 solves the high CPU problem when winbox connects.
It goes to 100% only for about 1-4 seconds after connection now. Before upgrade I waited 2-15 minutes before CPU load goes down every time I connect using winbox.

hel

system/certificate self-signing isn't working. It getting stuck in the signing process. I have waited for ~1 hour with no success. On v6 it worked without problems in a less than 10 minutes.

hAP lite, ros7.1rc2

hel

It is not stable even in a basic setup on a home router. I can't imagine what to expect on a production router. Use it only for testing.

hel

Frankly I am surprised that v7 even boots on a hAP lite...

Most of the time it is working with no problems, but I couldn't touch anything and test different features. I wasn't reverted to v6, so I'll be waiting for any updates from devs.

hel

Sadly, the issue I've reported several times that's preventing me from testing v7 on my hAP lite was not fixed or ignored. Reporting it again in hope that it will be fixed in the next rc. The issue is in high CPU load that goes up to the 100% and staying there for tens of minutes, sometimes hours, l...

hel

We have 1036 and even 300M link with attached PCQ queue loads up CPU to 100% from time to time. Maybe it is using only one core.

hel

What happens if you log in and system->reset configuration with "no default configuration" checked?

I tried it only once before, on the old 7.0beta3 or 4, it didn't solve a problem.
I have rolled back to 6.47 for now.

hel

Tried to test ROS7 from the very first public beta. Everytime I install ROS7, my router (hAP lite) locks up with 100% CPU load, makes its management and testing impossible. Latest version tested was ROS7.1b3. After installing it was locked-up so winbox discovery see it for few seconds and it disappe...

hel

Only way I found working is to netinstall it.

hel

We have a 600M line to internet. I've added simple queue with total-max-limit 590M limit, type sfq (but also applied to pfifo). A problem is when we're using this queue - internet start to work unstable. Some sites loads slower, games or streams lags, buffering. And that's when queue is only used at...

hel

Using a single mikrotik's router would be far from optimal if you're using PPPoE and connection tracking. Using two powerful (CCR with 32 cores, for example) routers setup have its advantages: 1. It will work with thousands of PPPoE sessions without problems (while connection tracking is disabled). ...

hel

If it's connections from other devices, they won't be in chain=output, but in chain=prerouting. Thanks, this was one of the problems. But the issue was in the broadcast address (end of subnet) I have mistakenly added into the IP addresses and NAT pool. So some random users use it and loses internet...

hel

Our provider gave us 2 public subnets (/29 and /30). First pool 1.1.1.120/30 are for direct routing users (not NAT). Second pool is 1.1.1.128/29 are for NAT users. So our router have public IP-addresses: /ip address add address=1.1.1.122/30 interface=sfp1-vlan1111-internet network=1.1.1.120 add addr...

hel

Not everyone is 'expecting' it. Whilst fq_codel / cake would be nice, I don't feel it should be implmented at the detriment of implementing other features I agree. First priority is to get ROS7 at least as stable as ROS6. And then implement new features. Personally I wait for SQM like fq_codel, CAK...

hel

After a clean ros7b8 netinstall on my hAP lite classic I couldn't access it via winbox or putty. Winbox, after logging in and after " something (forgot what) descriptors" phase says "ERROR: cannot open source file". In putty I can login, but after ROS logo there's nothing I can d...

hel

hAP Lite is working with v7, but because of a small storage size it is not an easy task to install it.
Also it is not stable, and noticeably slower.

hel

It would be nice if there's would be a context menu on result entries to copy src or dst IP-address so that we could investigate on suspicious traffic more easily.

hel

Well queues are CPU consuming and if i remember right simple queues use only 1 core, it is a single threaded process...
So maybe in your case it would be best if you used queue trees...

I have only one queue on this router. Is queue tree better in this scenario?

hel

I want to do a fair bandwidth control for our ~800 users. I made a PCQ queue and attached it to a simple queue: /queue type add kind=pcq name=parent-default pcq-classifier=src-address,dst-address \ pcq-dst-address6-mask=64 pcq-limit=40KiB pcq-src-address6-mask=64 \ pcq-total-limit=20000KiB /queue si...

hel

I think a simple menu option under "hide paswords" to enable or disable HiDPI support would suit to our needs.

hel

Log text lines is overlapping on 1440p monitor, 150% scaling. There's no problems in other menus.
Windows 10 (1909).

hel

It is a little bit annoying and seems to be a waste of time to discuss audiophile issues with people who have biased opinions You doesn't need an audiophile switch in the first place. Clean DC power is the most effective way to improve sound quality. Do not believe in every thing audiophile experts...

hel

There will be no DC noise, ground loops or EMI reaching your audio devices when you'll use an optical network cable.

hel

hAP Lite
[*] CPU goes to 100% when ipsec tunnel is connected. CPU load goes to normal only when peer is disconnected.
[*] wireless doesn't work, can't see it with my phone.

hel

We have 2 CCR1036 routers First: PPPoE with radius client and bandwidth control. Second: Routing, NAT and Failover for high priority users. failover.png When we used only one router in our network which was a PPPoE server and NAT router in one box, it was simple to allow only high priority users to ...

hel

PPPoE stopped accepting new connections after 3 days of uptime on our CCR1036 on ROS 6.46. Number of PPPoE users connected was 628. When I disconnected 10 users, a 10 other users which couldn't connect earlier was connected, and disconnected users keep trying to connect without success. Router reboo...

hel

*) ccr - improved general system stability;
Could anyone explain what does it improve? Is it addressing an issue with high CPU spikes on CCR at high speeds?

hel

I think it is in closed testing.

Is there any changelog?

hel

What version was installed before 6.45.7 that didn't have high CPU problem?
We have the same problem on simple queues on 6.45.6 on our 1036. It caps our bandwidth to 400mbps with CPU reaching 100%. We tried to change queue type, queue size, but only success was when I disable the queues completely.

hel

Rather get another CCR or two and split your clients up by vlans.

What about NAT problem on router with lots of dynamic interfaces? (Connection tracking table gets recalculated on each connect/disconnect)

hel

Currently we have one CCR 1036-12G-4S, we have 2 major problems on current setup: High CPU on PPPoE users connecting/disconnecting, freezing router. High CPU on queueing (simple queues) in peak times. We want to reduce resource consumption using second router. Our plan is to separate services: Route...

hel

Is this an expected behavior?
Any thoughts?

hel

I need an auto replace of a dynamicly added simple queue with an editable one. A purpose of this script is to set total-max-limit instead of separate speed limits. On up :local InterfaceName [/interface pppoe-server get $interface name] :local QueueId [/queue simple find target="$InterfaceName&...

hel

Tried to install ros7build3 on my home hAP lite (smips). * cpu is at 100% on my config all the time, logging via winbox, webfig or telnet is almost impossible. * when reset to defaults it works fine, but if I restore it from my backup, cpu goes full 100% again. (on ros6 5-15% average) * when storage...

hel

It is a bit resource-consuming to filter on it: foreach counter=ifc in=[interface pppoe-server find] do={if (([interface pppoe-server monitor $ifc once as-value]->"interface") = " carrier-interface-name " ) do={put [interface pppoe-server get $ifc name]}} Thanks! Successfully ma...

hel

I have 20 pppoe servers on mikrotik which set up on different isolated VLANs.
I need to get connected clients by specific vlan interface.
In winbox I have interface read only value in a status tab.

screen.jpg

Is it possible to get it/use as filter using CLI?

hel

Please add attribute or other way to set total-max-limit/total-limit-at via RADIUS.
There's no way to do changes to a dynamic queues. In case of PPPoE network we can't use manual queues.
Total-max-limit is used to limit up+down to a some total value.

hel

Too bad it is not yet implemented...
> viewtopic.php?t=20842#p99376

hel

I want to set total-max-limit on a dynamically created simple queue using RADIUS for a PPPoE client.
Is it possible?

hel

No one using total-max-limit?

hel

I tried to set total avg rate limitation for all my users to 400M, but it is not working - Total avg rate is much lower (8M) than actual speeds in the Upload (50M) and Download (350M). I haven't seen any examples of using it, just a brief overview on the wiki. What I've tried: Created parent simple ...

hel

Do I need to NAT or route anything? By looking on your screenshot you don't have NAT enabled. So you don't need it on mikrotik either. You can use a "Quick set" in your web or winbox to setup your first basic config. First, check for updates if you have old RouterOS version. Next step is ...

hel

Hey have a look at https://wiki.mikrotik.com/wiki/Manual:Queue and here https://www.youtube.com/watch?v=loaVBWq6cWA you have option of using simple queues (w/o hierarchy) I've checked first link multiple times before without success. But the presentation gives me answers to all of my questions. Tha...

hel

We're using queue tree + pcq to limit users rate of customers for almost 5 years. Since RouterOS 6.x there was a big optimizations to a resources usage of simple queues. Started to think about moving to them, but found that there's very poor documentation about simple queues. Specificaly, I have tho...

hel

Hi, I don’t think playing with settings like that will help you very much. The problem is most likely caused by use of the “global” parent and the single tree structure for all queues. It is easy to max out a single core on a CCR with that traffic level with that many PCQs all connected to “global”...

hel

Just a thought: as it is right now each child queue needs to borrow from parent for each and every packet.

It's hard to find any info about parent queue sizes. I'll try to dig some more info.
Thanks for reply.

hel

What is the cause of it? I've played with mangles (now marking connections before packets), reduced pcq queue sizes (from 50 to 10), changed queues types in the queue trees parents. I've noticed, that CPU load is lower with the RED queue in the parent queues of queue tree. But even with these change...

hel

Hello. Today at evening we have seen an unusual cpu load on our main ccr1036 router. Usually it was 15-30% at peak, but today it was over 90% with no obvious reasons. Going to tool>profile shows that all processing took 6% in total except for queues which consume almost 80% of cpu. ROS version is 6....

hel

We're separating a management vlan from users vlan, we need to disable all traffic (including arp, dhcp, etc) that aren't pppoe on users vlan. We need it to prevent any broadcast flood, network scan and any access from non-authenticated users, hardware, etc. How to do it correctly? Bridge filter? Do...

hel

You should use your local addresses on the RB1100 not the public address outside the NAT.

I tried to put local address to SA Src.Address on RB1100. It's now established, but I can't access the other end - ping timeout.

hel

Any help?

hel

I'm trying to make an encrypted IPsec-only tunnel between two points. But I don't know the correct settings for this. I have: Point-1 which have public IP-address accessible from internet. Point-2 which have IP-address that is not accessible from internet - it is behind ISP NAT. We asked ISP for a p...

hel

Yes it is certainly possible to do that. A Linux server with Squid and a DNS resolver (bind9) will do the job. Thanks, I'll try this. But again, how proxy will work with a list of over 50000 blocked URLs? How do I store them - DB or a text file? Also, in countries like that the users will normally ...

hel

What is we use a dedicated server for a filtering purposes? We install DNS-server and some transparent proxy on it. Then we put a list of domains that are referenced in the blocklist as a static entries to DNS-server and assign them an IP address of the filtering server. Then on the port 80 we will ...

hel

pe1chl,
Yes, you understand it correctly.
I looked at hardware for traffic filtering - it's too expensive for a small provider.

hel

You can use address lists in the RB too, if you have no problem to block by IP. this will be very fast, but you need all the IPs We have the IPs (over 130000 of them) but if we block them - entire websites will be blocked. We need to block specific pages somehow. For example: some-site.com/suicide_...

hel

We forced to filter over 50000 URLs (and this number are growing) due to laws in Russia. If we wont do it - it will cause fines and ISP license suspension.
Is it possible to do this on Mikrotik?

We currently have CCR1009-8G-S1-S1+ with a 30% CPU load.

hel

I had problems with it because I misunderstand how the things in the config I posted works. We prioritizing global traffic in the prerouting queue and it works well. But when we bandwidth control (per-user limitation) resulted traffic - their priorities and limit-at discarded, because of a different...

hel

I have a RADIUS server with users for the PPPoE-server. I want to install hotspot, that authenticate users using existing RADIUS-server. I need to authenticate hotspot users using User-Name, User-Password and get only Mikrotik-Address-List attribute. PPPoE-specific attributes, Framed-IP-Pool and Fra...

hel

This is completely normal temperature for CCR router.

Current CPU processors from AMD and Intel have max safe temperature 70C, but their threshold set in BIOS is much higher, at 85-104C by default.
But if 55C is a confirmed normal, then I have no more worries about it.

Thanks.

hel

CCR1009-8G-1S-1S+
Tilera Tile-Gx9

hel

What is the safe temperatures range for tilera 9-core processor?
I always have 53-55 degree celsius on it.

hel

Don't do weird things unless you absolutely have to.

Is it impossible or just a bad practice?

hel

I need to mirror all traffic from ether1 to ether2. But traffic that goes to/from IP-address 192.168.1.1 should not be mirrored. ether1 and ether2 are in one switch-group. Server with an IP-address 192.168.1.1 (billing server) connected to ether2. When I'm trying to authenticate on the billing serve...

hel

Explanation why: And I was trying to understand BGP, OSPF, OGRP and another things (that I'm not really need at the moment) just to find something about how to set up something like this "proxy-ARP" functionality. :mrgreen: It was so easy and so close! I did even play with this option, bu...

hel

EDIT: Well, I don't use IP for PPPoE server that could be in the subnet of an ethernet. Like, if your PPPoE client receives the IP 10.10.10.100 and you try to ping it, maybe ROS is trying to use the route 10.10.10.0/24 that was dynamic added to route list when you specified that address to the ethe...

hel

In your setup, since one of the ports of the bridge happens to be a VLAN type interface. It is this interface which adds 802.1q headers. The bridge doesn't know there ever was any tagging going on at all. You could even put two VLAN interfaces on the same physical ethernet interface, but with diffe...

hel

Your configuration is correct.
The behavior you're seeing is correct.

Thanks for a detailed explanation.
Could you explain, why I lose access to a remote (far) clients after checking the "Use service tag" option on vlan10 interface? Is it because bridge logic already tagged those packets?

hel

Ok, simple question. When we have a VLAN interface bridged to an ethernet port, do bridge tag and untag packets automatically? I'll explain: One bridge end has a vlan10 interface that bound to sfp1 port. On the other end we have ether8 interface Those two interfaces - vlan10 and ether8 are connected...

hel

PPPoE interfaces will never be in "the same subnet". PPPoE is a point-to-point tunnel that uses 2 IP addresses for "identification", they don't even have a netmask, or if they have you can think of their netmask as /32. What you would have to do is to forward traffic from PPPoE ...

hel

How to properly configure VLAN on the CCR (see picture below, there is 2 cases I need to solve)?

vlan___.png

hel

I'm new to PPPoE. We have only one pool of IPv4 addresses with a mask /24, for example I'll use 10.10.10.0/24. We don't want to divide it to a smaller subnets. We have a regular IPv4 routing for our users to reach internet, they're getting IP addresses from DHCP. Now we want to use PPPoE. We can't c...

hel

Anyone?

hel

We're finally got a CCR1009-1S-1S+ router to replace our good old RB1100 which became slow for our network. Main feature we paid attention to, is a SFP port, faster CPU and more RAM. Additional PSU is a great feature too. When I started to configure my new router, I've remembered that we have fiber ...

hel

hi hel, can u help me with your script to collect total TX/RX trafics?? thank u in advance. Sorry, I've dropped this idea because I can't pass collected traffic to the Traffic Inspector billing system due to API limitation and bad support for the product. So thats why script isn't ready and I can't...

hel

Interesting product for its price, want one at home, waiting it to arrive in Russia.
Why all these indicators (power, activity) are on the back side?

hel

Please, make login window to be resizeable to a bit smaller height. Its height is really big. Also I think that Note and Group text boxes isn't necessary on the main login window here. They can be entered in a dialog boxes while saving, that way you can implement an Edit button if needed. Login wind...

hel

google mikrotik-userman for the manual. Thanks! Somehow you hinted me to the right direction. (no sarcasm) I've found that the RADIUS-server accounting provides exact functional I want. Acct-Input-Octets and Acct-Output-Octets is TX/RX bytes which gets only on session stop and stores into DB. Now I...

hel

I have no idea, what software you're using.

Even if I know how to get total tx/rx of an user in RouterOS, I don't know how to trigger this script on PPPoE user disconnection.

hel

I want to get total traffic used by every PPPoE session (active user) before their PPPoE session will disconnect (by their side). Is there some event for scripts or something that will help? This is needed for our billing system to count users traffic. We're using RADIUS for users authentication whi...

hel

Will there be any middle-to-high-range router with at least 5 gigabit ports and usb port support (for 3g usb dongles, for using them in failover scenario)? RB1100 with USB port anyone?

PS: note that I want good throughput for a gigabit network.

hel

Please delete this thread...

hel

is this version stable?! or not good for production systems? If it's a RC or beta - then you probably should test it on your setup in test environment, and only after week or month of testing you can decide whether to put it into production or to wait for the next RC or release. That's a good pract...

hel

Lock entries deletion is absolutely useful.

hel

+1 on this must have feature.
Need this especially in firewall.

hel

Yeah, NTP-client seems a good option here.

hel

Since I bough RB1100 year ago I have to manually set date and time on every boot. Every boot it reset to 1 Jan 1970.
Is there problem with the battery from the beginning? Is it even normal ?

hel

It works when you need to limit individual users's bandwidth and at the same time control his/her flows like VoIP, www and p2p. What is there to prove? If that's what you're after, it works.

You're mentioning per-user prioritization, which is not possible on mikrotik.

hel

Dual Queue-ing/shaping is Real

Can you give me a proof that even in one small scenario dual qos on mikrotik would be effective?

hel

dual QoS with PCQ can be re-invented to a single step solution - just put the PCQ as a queueing in the first step and make additional adjustments to the Queue Tree design.

Dual QoS is a myth on mikrotik.

hel

I have 3 LAN connected to my RB, so I don't have any idea on how to prioritize and limit users in that scenario (global-total and interfaces only).

hel

I understand. Have you considered Dual QoS (in one MT router) or two hop solution (use gigabit and powerful machines plz) one for client max limit and one for overall QoS selective drop?

I have one RB1100, so I using Dual QoS in one router.

hel

not an elegant solution ? :) Paint the router in some colour then it will be elegant for you :) :lol: By the way, I prioritized packets in the second shaper, by not elegant I mean that those packets doesn't get limited for the users according to their bandwidth limits. Will think more deeply, maybe...

hel

Yeah, just as I expected. Some kind of LLQ is easy to get to work in routerOS.
Torrents at full speed, pings are at lower latencies.

Not an elegant solution, but...

hel

LLQ does some basic packet rearrange, low latency packets sends first, and other packets sends after, getting shaped as non-LLQ queues (as I understand - it's main difference of LLQ and PQ - in PQ there is only strict prioritization, but in LLQ there is 2 types of prioritization - low latency and fa...

hel

It's not solveable.
Per-user prioritization is not possible by now.

hel

Suggestions: Yeah, it's not helping on <100% load link, which I expected per-pcq-subqueue QoS, as andriys correctly noted. And yes, only per-pcq subqueue QoS can make dual shaper working as it should. Mikrotik priority and limit-at working as it should only on dedicated link without user bandwidth ...

hel

That's right. So, what do you expect to achieve? I watched presentations, forums and from them I understand that mikrotik is a powerful thing for QoS and bandwidth limitation. VOIP, games - they can be prioritized to make users feel more comfortable. And now I'm feeling that I've been fooled. Now I...

hel

1) do you use src-nat (private IP addresses for clients)? - if yes, prerouting is not aware of them. I'm not using any kind of nat. I'm also not using wifi at all. 2) Do you have all the clients in the same IP network subnet? - if no, what happens when one client from one local subnet is communicat...

hel

Lets take, for example, the 0.0.49.20 IP address from your config. It falls into the unlim256_clients address list as well as into the local_subnet address list. When packet from 0.0.49.20 to (say) 1.2.3.4 port 80/tcp passes you router it first gets into the prerouting mangle chain, hits the rule a...

hel

From the snippet you've posted it is not cleat what local_subnet address list is. I assume that all entries of the unlim256_clients , unlim512_clients , unlim1024_clients and workers_clients address lists belong to the local_subnet as well. Please correct me if I'm wrong. Yes, all these clients bel...

hel

Is the silence a proof that my config correct?

hel

My current config (I've cut it for better reading): # jan/06/1970 05:42:18 by RouterOS 5.20 # /queue tree add max-limit=9400k name=bandwidth-control parent=global-out add limit-at=8M max-limit=9400k name=users-down parent=bandwidth-control add limit-at=1400k max-limit=9400k name=users-up parent=band...

hel

Well, then you and others are doing something wrong. I have no such problems. it just take a little bit of magic in mangle with packet-marks - queues are simple afterwards. Do you even read my post? I don't have any visible error in my QoS configs. I checked it many times, rechecked it with others ...

hel

I bought rb1100 mostly for QoS setup and clients bandwidth limitations, but now I feel that I've been fooled by the advertisements, tiktube's presentations and posts on forums. This is only feature (QoS), that I missed in mikrotik. It's present maybe, but from what I know - it is very-very bad or ev...

hel

If you can't do it now in HTB (currently implemented), you most probably will not be able to do it in LLQ also. I don't have any visible error in my QoS configs. I checked it many times, rechecked it with others qos implementations, with mikrotik wiki, and etc etc. Even Traffic Inspector on windows...

hel

normis:
Can you answer, is it possible to make qos working with pcq?

And how "LLC" is possible?

hel

chain=forward action=mark-packet new-packet-mark=1-to-5 passthrough=no
connection-mark=1-to-5

hel

RouterOS does "selective drop" with recommended small queue sizes. But higher priority on the traffic let to drop high priority packets. It's absolutely unacceptable that low priority packets gets over higher ones. P.S. upgrade to gigabit ethernet and you should not need LLQ Are you serio...

hel

I disagree with the above post and what it quotes. Currently it is possible to make a good QoS config. But it is not easy.

Low latency QoS? I don't see any possibility of how to do it with current functionality.

hel

Retrieves update information? Run Wireshark and see.

hel

Each client will get 5 mbit only if you set Rate on PCQ queues in the queue types tab to 5M.
On the Queue tree you can only limit the total limit.

It's always better to read wiki, there is a lot of examples.

hel

Evelio,
Yes, your each client will get 5mbit.

hel

Strict prioritization is a must have feature.

Subscribing...

hel

did you even read the attached link?

DSCP is for packets marking, it allows other routers to not mangle different types of traffic. Just catch packets with DSCP value in mangle and prioritize them in HTB.

hel

DSCP is for marking packets only.

hel

Don't sit and wait, until developers find time to understand that this is an useful feature. Just write one feature request on forum and wiki.

hel

You want Low Latency Queueing, RouterOS currently doesn't support it.
You can add your sig to a feature request wiki page, so developers will see it.

hel

I'll be happy, if there will be LLQ (Low Latency Queueing). Our clients often calls to a support angrily, because their online games latencies goes to a non-playable 300-1000 ms, or social networks loads really slowly, that's because of hidden windows update, forgot torrents, antivirus updates, etc....

hel

Mikrotik doesn't have low latency prioritization. To be honest, I didn't see any effectiveness of the current prioritization system.
You could show your interest in the LLQ (Low Latency Queueing) feature implementation here: http://wiki.mikrotik.com/wiki/MikroTik_ ... e_Requests

hel

Ok, I'll read it carefully one more time (fourth time). I've forgot about /export compact, sorry. Priority doesn't change packet order in any way, it DOESN'T put one packet before other - only thing priority do is helping HTB decide what traffic to pass and what traffic to drop. If queue doesn't hav...

hel

Apparently you are having problems with your configuration, so I would recommend to try a more simplified one. 1. I don't see problems in my configuration. Here is my current config (I cut it a bit for better readability): Queues: /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabl...

hel

I am a little confused here by your statement, I mean, of course they do. By what means are you analysing that queues are not satisfying first their limit-at value, and then jump to the priority. Because when I gave limit-at only to icmp queue to 16kbit, and max-limit to 128kbit. It must go first (...

hel

First the queues will satisfy the limit-at
value

They don't.

I don't prioritize ping at all because ping is not a tool to measure or to
value a connection.

It's a best way to check if priorities does work.

Just look at my config. It's correct. But doesn't work.

hel

Let's suppose you will shape and prioritize icmp, http and other And let's assume you have a 10M/4M internet connection, your LAN interface is ether2 and the interface that connects to the internet is ether1: I have not tested this particular code, I just wrote it down, but I guess it is accurate Y...

hel

In our normal understandment QoS + bandwidth control isn't working as it should. How it's working on mikrotik is the big question, I can't reach logic of the developers on it. BTW, QoS alone working well. PCQ alone working well too, but together they doesn't work, PCQ overrides all.

hel

Sorry for waking old thread, but it's actual even for more than half year after my first post. Prioritization + PCQ still doesn't work. Without PCQ, prioritization seems to be working. But I need bandwidth control AND prioritization together. Would it be supported in near future? Dear support. I sen...

hel

I blocked the website by following the instructions, that mentioned below: It will block all packets that contains word http://www.facebook.com. For example a page with a link to it or linked image from it. Add more checkings, like: (GET|POST) +(www\.)?facebook\.com.+?HTTP\/\d\.\d (PCRE compatible ...

hel

Can't wait for the WORKING prioritization system. When? Just when it'll be working?!

So yeah, we need improving of an existing functions.

hel

You should mark as many popular services your clients use as possible and then mark other traffic which was left untouched - it would contain p2p, encrypted traffic and so on.

Maybe priority will work for you (for me it's not working at all), good luck.

hel

What you want to say with this screenshot, where's the priority realization here? And yes, current prioritization implementation in ROS isn't working as expected or do not working completely - it's clearly a ROS problem. I don't know how everyone on this forum make statements that "it works fin...

hel

If your clients number will not rise and if their total speed in sum will not theoretically exceed your internet link's speed, then you should be fine with simple queues. But however - I don't use hotspot and pppoe, so can't say exact config. In other cases you should use queue tree and pcq. It is r...

hel

Sure, check screenshots here:
http://forum.mikrotik.com/viewtopic.php ... 10#p282910

It's my live config, something like "first version".

hel

Hel It means, that I need to catch download traffic only from local interfaces (eth1,eth2,eth3,vl2,vl4,vl8), and upload from wan interfaces (wan1,bgp1,bgp2)??? Bingo! ... or you can qos packets in global-in (global-in for upload and download) and limit users bandwidth in global-out (global-out for ...

hel

Please help me out with this question, how to catch upload traffic ???

Why you didn't read my post?

hel

arpiska: Queue, which parent is interface means, that all packets will go out from this interface to outside. Also, global-in doesn't means a "local interface" or global-out is a "wan interface", every packet (no matter if this is upload or download packet) will go through global...

hel

Thinking about the question a little more I realized you could do it without simple queues, but again not with PCQ. If you make a regular queue in the tree for each user, apply the tree to Global-out, then you can just put both upload and download packets into the same queue. I forgot I have accide...

hel

Well, I have 4 mbit line. I've limited qos and bandwidth control to 4096 kbit/sec and I don't get it why I can only use 90% of my line... It's a big waste of resources for me. Here is what I meant about latencies: If user downloading a file and trying to play online games, he will see long latencies...

hel

also, if you assign limit-at value to the queue - this should be guaranteed that queue can get this amout. it will get that amount of traffic (or try to) no matter what the priority. Ok, I have one question then. I have limit-at on light traffic, its speed cost 1/6 of entire total speed of our inte...

hel

I moved from simple queues, and don't want to go back. I thought it's possible with queue tree too.
This is bad.. I haven't so much speed that I may divide between my users...

This feature (combined in+out limitation) would be nice in future ROS versions.

Thanks anyway.

hel

Are nobody tried to implement this or what?

hel

hel

I want to give user a 256 kbit/sec speed, but 256 must be a total of download and upload speed. Is it possible?

hel

Have you bothered to set max-limits too? This means set it for each leaf, not just the parent. Limit-at = minimum guaranteed to that queue Max-limit = maximum that the queue is capable of. Without Max-Limit the queues won't work. Also as a side note, your overall max-limit for a queue should be aro...

hel

I even can randomly set priotities and limit-at to a different leaf, inner qos queues - they aren't change anything.

hel

Try the queue's burst feature for http traffic with burst time 5 mins.

hel

maybe this is help to you (doesn't helped me :( ): http://mum.mikrotik.com/presentations/ID11/id-valens.pdf http://mum.mikrotik.com/presentations/US09/Valens-MUM2009USA.pdf Yeah, I've read that before, Valens one, Janis one - all that works in their examples is a bandwidth control, qos isn't workin...

hel

fewi, I tried what you said - same problem. limit-at and priority have no meaning. They're not working absolutelly. Let's see how can I ensure, that they're not working: 1. I have 4096kbit internet bandwidth, which is in+out. 2. I made light queue for high priority traffic and heavy queue for low pr...

hel

Am I miss something or priorities does not work in ANY case? I have carefully create mangle rules, queues - no luck! I have put light traffic to a queue with high priority and with limit-at equal to a full speed of my internet (on screenshots below there is limit-at decreased to 1/4), and put heavy ...

hel

janisk, Yeah, I tried to search more on this forum, reading the threads carefully, and I think I found an answer in this thread: viewtopic.php?f=2&t=27555 on page 3 by normis. Per-user traffic prioritization is completelly impossible. Is dedicated link portion means, that I should make 9M of 10M...

hel

Searched the forums with no luck. I have 200 internet users. I want to prioritize different types of traffic separatelly for every user. Is it possible on mikrotik? I have 50% loaded internet connection, in which priorities doesn't work, they're working only when I load internet connection to the ma...

hel

priority (1..8) : Prioritize one child queue over other child queue. Does not work on parent queues (if queue has at least one child). One is the highest, eight is the lowest priority. Child queue with higher priority will have chance to reach its limit-at before child with lower priority and after...

hel

One of the wiki pages shows that I can make per-traffic prioritization working without setting max-limit on the parent node of queue tree. (see chapter 3, voip example by McHutchy)
Is it possible?

I found somewhere, that there's must be a max-limit on the parent node, otherwise it will not work.

hel

You can make port mirroring on switch ports of RB1100, http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Port_Mirroring I thought rule section aren't ordered. Because list of rules doesn't have drag-and-drop feature. I have made 1 rule to not mirror udp 999, and another 1 rule to mirror all...

hel

You can make port mirroring on switch ports of RB1100,
http://wiki.mikrotik.com/wiki/Manual:Sw ... _Mirroring

I have RB1100. I want to mirror all traffic from one interface to another but except traffic from/to udp port 999. Is it possible?

hel

I want to mirror all traffic (except udp port 999) from one interface to another on my rb1100. Is it possible?

hel

Well... After investigation on that problem, I've found that it was because of specific windows 2003 server configuration and it's not a mikrotik problem at all. Server had Routing and Remote Access + NAT and Traffic Inspector in router mode enabled. Average script execution time was 800 msec. After...

hel

If it's faster in the SSH console (as opposed to remote command section) try read() and write() with phpseclib and not exec(). In SSH console it's does fast. 4-6 seconds for 100 entries. I tried write() commands. It's just didn't wait for command to complete. For that readon I used read() to avoid ...

hel

you can post it on wiki (have to register on wiki.mikrotik.com) - just make article and place link here i will add to pages that are not editable for other users. http://wiki.mikrotik.com/wiki/API_in_C_using_winsock Maybe I'm not good at explaining things in the beginning of the page, please correc...

hel

SSH through php is something mindbending - you are using php to create and maintain ssh connection and there the console runs. No surprise that it is slow as you are running layer upon layer there. phpseclib have its own SSH client written on pure PHP. I thought mikrotik does all operations in some...

hel

Well... after few hours of rewriting (to make it use winsock2 sockets) and then testing C implementation. I have not a bad results: 1 login 1 to 2 commands 1 logout ...took on average 650 msec. It's roughly ~2 times faster than php one and ~4 times faster than php through ssh implementation. If anyo...

hel

there is something terribly wrong with php implementation then. :) I tried other implementations and seems you're right. Sadly C++ implementation is only for linux, even after rewriting it for winsock2 - it crashing with assertion error about string subscript out of range, if not that, it will be t...

hel

I checked the time, that every command consumes. Is it normal? $API->connect($cfg["mt_host"], $cfg["mt_username"], $cfg["mt_password"]); // 0.34563493728638 sec $id = $API->comm("/ip/firewall/address-list/print", array(".proplist" => ".id",...

hel

Can I define .id value manually to speed up list searching?

hel

And how many entries are in the list you are searching.

6 entries

hel

Sadly, but 30ms was when I used incorrect commands... When I made script working - it's slow again... $stt = microtime(true); $API = new routeros_api(); $API->debug = false; if($API->connect($cfg["mt_host"], $cfg["mt_username"], $cfg["mt_password"])) { // Id finding $id...

hel

Look at this: http://wiki.mikrotik.com/wiki/Manual:API

There are PHP libraries on the wiki.

Wow, just wow.

That's very fast, 30ms vs 1000ms. Thank you!

hel

Is there any specific reason that you're not using the API? Which API? Billing, that I want to communicate with mikrotik, have a nice feature, when user change his state (authorized/unauthorized) - it will execute a script (if specified). So when user authorizes or unauthorizes - billing executing ...

hel

I'm writing a simple script on php, that adding and removing entries to/from mikrotik's address-list. I'm using phpseclib to make ssh connections. It works, but slowly - about 1 second for each command passed to mikrotik. Here's detailed info on latencies. From begining to login - 0.10053205490112 s...

hel

you are wrong here. Mikrotik, at best, is your router company. They dont deal with network protection, fixing your infected computers etc. I think you are wrong too. This forum is a community where each member can support, give hints and help others. He's not asking mikrotik's support to help him, ...

hel

Many thanks, +1 to your karma.

hel

Is it possible to limit packet rate for some low priority traffic. Some threads on this forum that I found didn't explain how to do that.

hel

You need something called Low Latency Queuing. That is not yet implemented in Mikrotik. I need that too. That make sense. I've now searched "Low Latency Queuing" on this forum and it gives me threads with exactly the same trouble as mine. Priority doesn't work with low (but 100%) internet...

hel

And not only PCQ makes good-quality connection unstable. Even properly configured (by manual at mikrotik's wiki) QoS alone increase latency in games. I used mikrotik's wiki manual to setup QoS, then by Sheriff's manual from youtube, and then I tried some examples at russian forums, they didn't work ...

hel

Priority and limit-at isn't working. Absolutely. I just lost in here. For the novice like me it's hell. One week of smoking manuals and I'm wondering now, if it is RouterOS 5.4 bug or something, didn't tried it on 4.17... Will check it. (UPD: Checked, same problem) When I cut PCQ queue type to 30 pa...

hel

I tried to put mangle rule to prioritize icmp traffic with passthru=yes on top of all rules. Ping are same bad as before... I researched some more. When I enable speed limitations(pcq) on RB - I see that PCQ queues does queue packets and bytes but all QoS nodes doesn't queue bytes and packets - they...

hel

@Hel, it is normal to have a high ping when one is consuming the whole bandwidth available while downloading. The ICMP packet does not have a high priority, it will be the last one to pass, unless you do specify a higher priority in queues, but what's the point of it? Yes, I'm trying to make icmp p...

hel

you cannot create priority rule in PCQ substream, you only can create priority rule to Parent queue that have PCQ inside. Nope, I don't want to prioritize one user over another in PCQ queue. All I want is to apply speed limitation to my internet users AND make QoS for them... by QoS I mean prioriti...

hel

fcto, I have 3 local interfaces.
Must each interface have their own queue ? Is this correct ?

hel

Anyone ?

hel

Some info is here, no patterns can capture all skype traffic, and those l7 patterns that exists - even overmatching traffic (captures some non-skype traffic), I'm not sure if they even capture skype packets. http://protocolinfo.org/wiki/Skype SIP, however, should be matched by l7 patterns perfectly,...

hel

So there is no way to make prioritization AND speed limitations per user ?

hel

Config and problem above is actual. Please help! QoS and prioritization works when I disable PCQ, just latencies is a bit longer than I expect on torrent load (80msec against 40msec in idle). Real problem is when I enable PCQ even with disabled QoS and prioritization. Ping goes up to 200-600msec on ...

hel

fewi, thanks for reply. Now prioritization seems to be working when PCQ queues disabled. But when I enable PCQ queues ping goes high again and priorities doesn't working. I thought prioritization will work better... when I gave icmp traffic high priority, set it's limit-at to 32k, max-limit to 4096k...

hel

After I understand how QoS is working - next thing I need to do is to limit each user by their tarrifs limitations. So I used PCQ. Currently I'm doing it on a test-workground with 2 servers. First I added mangle rules: add action=mark-connection chain=forward comment="servers marking" disa...

hel

First of all, thanks for reply! My initial guess is that you don't have passthrough disabled on your packet marking rules. Surprisingly, I've re-created the rules with passthru disabled and it works!! QoS seems to be working now. Have you seen the video that the Megis slides are from? http://www.tik...

hel

Anyone...?

hel

Bump... I really need a help or some hint on what I'm doing wrong.

hel

Hello friends! I just bought a new RB1100 2 weeks ago, and now trying to create QoS prioritization. I think you all know what purpose of QoS is, so there's no need to explain what I want to do. Well, first of all I googled, many times, I looked into qos_megis.pdf, wiki, some russian and english foru...

Search found 200 matches