How limit pps on the interface
If you installed RouterOS just now, and don't know where to start - ask here!

12 posts   •   Page 1 of 1
rmg_e
just joined
 
Posts: 6
Joined: Tue Jun 12, 2007 2:31 pm

How limit pps on the interface

by rmg_e » Tue Jun 12, 2007 3:43 pm

Is it posible to limit pps (pakets per sekond) for interface or client ip address?

User avatar
gmsmstr
Forum Veteran
Forum Veteran
 
Posts: 925
Joined: Fri Jun 04, 2004 2:22 am
Location: St. Louis, MO

Re: How limit pps on the interface

by gmsmstr » Wed Jun 13, 2007 12:52 am

The only thing I can think of off the top of my head is the limit setting in the simple queues. This should effectifly limit pps, however, i would be looking to limit by bandwidth vs PPS.

Need Mikrotik Support, contact
Dennis Burgess
St. Louis Network Engineering Services
http://www.mikrotikconsulting.com
mailto:dmburgess@mikrotikconsulting.com
Certified Mikrotik Engineer

Purchase hours on-line!

rmg_e
just joined
 
Posts: 6
Joined: Tue Jun 12, 2007 2:31 pm

Re: How limit pps on the interface

by rmg_e » Wed Jun 13, 2007 9:40 am

But in simple queue is posible tu limit kbps but not pps. So if i want limit pps to 200 how can i do it ?

User avatar
warwick09
Member Candidate
Member Candidate
 
Posts: 189
Joined: Mon Aug 07, 2006 1:34 pm
Location: The Bahamas / Florida

Re: How limit pps on the interface

by warwick09 » Mon Jun 18, 2007 4:39 pm

Directly speaking, there isnt a way to influence the amount of pps an interface can "push thru" but you can limit the bandwidth which will in turn influence the amount of pps. Experiment and ull find a suitable setting.

Regards.

Also the pps is very dependent on the type of data that is being handled. For example a typical voip conversation at only 64kbps will exhibit about 50-60 pps while a normal 2mbps/~+2000kbps download will exhibit about 200pps. This is because of the amount of traffic sent in one block. 64 bytes with voip vs the 1500 in a normal ethernet block/frame.

changeip
Forum Guru
Forum Guru
 
Posts: 3730
Joined: Fri May 28, 2004 5:22 pm

Re: How limit pps on the interface

by changeip » Mon Jun 18, 2007 8:08 pm

limiting pps is necessary sometimes, especially on a wireless link where pps makes a difference. maybe you can use the limit/dst-limit/nth rules somehow. There isn't a direct filter for pps but you might be able to accomplish it with other methods.

rmg_e
just joined
 
Posts: 6
Joined: Tue Jun 12, 2007 2:31 pm

Re: How limit pps on the interface

by rmg_e » Fri Jun 04, 2010 11:00 am

simple way to limit pps :
______________________________________________________________________________________________
:global kl44 "192.168.181.25/30"
# add klient ip

/ip firewall mangle add action=mark-packet chain=forward comment="" disabled=no new-packet-mark=$kl1 packet-size=0-40 passthrough=yes src-address=$kl1
# mark small pakets 0-40 bytes
/ip firewall filter add action=accept chain=forward comment="$kl1" disabled=no limit=30,5 packet-mark=$kl1
# accept only 30 small pakets from ip
/ip firewall filter add action=drop chain=forward comment="" disabled=no packet-mark=$kl1
# drop if more than 30pps
/ip firewall filter add action=accept chain=forward comment="" disabled=no dst-address=$kl1 limit=170,85
# accept 170 pps for download
/ip firewall filter add action=accept chain=forward comment="" disabled=no limit=70,35 src-address=$kl1
# accept 70 pps for upload
/ip firewall filter add action=drop chain=forward comment="" disabled=no src-address=$kl1
# drop ( limited upload PPS)
/ip firewall filter add action=drop chain=forward comment="" disabled=no dst-address=$kl1
# drop (limited download pps)
__________________________________________________________________________________________________


170 pps download speed is about 1.9 mbs with speedtest
70pps upload speed is about 0.5mbs with speedtest
:D

rmg_e
just joined
 
Posts: 6
Joined: Tue Jun 12, 2007 2:31 pm

Re: How limit pps on the interface

by rmg_e » Fri Jun 04, 2010 11:04 am

if using bridge interface do:

/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes

User avatar
NetworkPro
Forum Guru
Forum Guru
 
Posts: 1346
Joined: Mon Jan 05, 2009 7:23 pm
Location: The World

Re: How limit pps on the interface

by NetworkPro » Fri Jun 04, 2010 12:00 pm

rmg_e wrote:simple way to limit pps :
______________________________________________________________________________________________
:global kl44 "192.168.181.25/30"
# add klient ip

/ip firewall mangle add action=mark-packet chain=forward comment="" disabled=no new-packet-mark=$kl1 packet-size=0-40 passthrough=yes src-address=$kl1
# mark small pakets 0-40 bytes
/ip firewall filter add action=accept chain=forward comment="$kl1" disabled=no limit=30,5 packet-mark=$kl1
# accept only 30 small pakets from ip
/ip firewall filter add action=drop chain=forward comment="" disabled=no packet-mark=$kl1
# drop if more than 30pps
/ip firewall filter add action=accept chain=forward comment="" disabled=no dst-address=$kl1 limit=170,85
# accept 170 pps for download
/ip firewall filter add action=accept chain=forward comment="" disabled=no limit=70,35 src-address=$kl1
# accept 70 pps for upload
/ip firewall filter add action=drop chain=forward comment="" disabled=no src-address=$kl1
# drop ( limited upload PPS)
/ip firewall filter add action=drop chain=forward comment="" disabled=no dst-address=$kl1
# drop (limited download pps)
__________________________________________________________________________________________________


170 pps download speed is about 1.9 mbs with speedtest
70pps upload speed is about 0.5mbs with speedtest
:D


Oh no this is horrible bad practice I can't watch I will have nighmares. I am going to a monastery. This does it. The world is a bad place. :)

QUIT DROPPING RANDOM PACKETS wiill ya?! jeezas chrisler !! :)

A good script-like example though. And so if one knows which packets not to drop, one could try to exclude them from this work of the devil.
wiki.mikrotik.com/wiki/UPnP_Multi-WAN <- CONTRIBUTORS WANTED
wiki.mikrotik.com/wiki/NetworkPro_on_Quality_of_Service <- contributors welcome

rmg_e
just joined
 
Posts: 6
Joined: Tue Jun 12, 2007 2:31 pm

Re: How limit pps on the interface

by rmg_e » Wed Oct 20, 2010 8:25 am

If it is so bad , can somebody write better?

User avatar
NetworkPro
Forum Guru
Forum Guru
 
Posts: 1346
Joined: Mon Jan 05, 2009 7:23 pm
Location: The World

Re: How limit pps on the interface

by NetworkPro » Wed Oct 20, 2010 5:30 pm

Why would you want to limit the pps on the interface? Why can't you upgrade the routers?

As it turns out, over-provisioning is cheaper than bandwidth limiting, shaping etc.

If you have to drop packets - make sure they are of lowest priority. For example do not drop gaming packets and do not drop the ones that have high priority in this example: http://wiki.mikrotik.com/wiki/NetworkPr ... oS_Example
wiki.mikrotik.com/wiki/UPnP_Multi-WAN <- CONTRIBUTORS WANTED
wiki.mikrotik.com/wiki/NetworkPro_on_Quality_of_Service <- contributors welcome

rmg_e
just joined
 
Posts: 6
Joined: Tue Jun 12, 2007 2:31 pm

Re: How limit pps on the interface

by rmg_e » Thu Nov 11, 2010 11:15 am

Wifi network speed is sensitive to PPS.
Only p2p programs and viruses can generate 200 and more pps.
Priority works then you set max-limit. That can i set if my speed is from 256kbps to 2048kbps?
My configuration is good ant it works fine.

User avatar
NetworkPro
Forum Guru
Forum Guru
 
Posts: 1346
Joined: Mon Jan 05, 2009 7:23 pm
Location: The World

Re: How limit pps on the interface

by NetworkPro » Thu Nov 11, 2010 1:41 pm

The competition will get to such biz that drops packets and eat it alive :)
wiki.mikrotik.com/wiki/UPnP_Multi-WAN <- CONTRIBUTORS WANTED
wiki.mikrotik.com/wiki/NetworkPro_on_Quality_of_Service <- contributors welcome

12 posts   •   Page 1 of 1

Who is online

Users browsing this forum: JonDon and 17 guests

It is currently Fri Dec 19, 2014 11:12 pm