Community discussions

Search found 155 matches

by hel
Wed May 15, 2019 6:00 pm
Forum: General
Topic: How to get an interface of connected pppoe client using CLI?
Replies: 2
Views: 198

Re: How to get an interface of connected pppoe client using CLI?

It is a bit resource-consuming to filter on it: foreach counter=ifc in=[interface pppoe-server find] do={if (([interface pppoe-server monitor $ifc once as-value]->"interface") = " carrier-interface-name " ) do={put [interface pppoe-server get $ifc name]}} Thanks! Successfully made a csv list using ...
by hel
Wed May 15, 2019 4:47 pm
Forum: General
Topic: How to get an interface of connected pppoe client using CLI?
Replies: 2
Views: 198

How to get an interface of connected pppoe client using CLI?

I have 20 pppoe servers on mikrotik which set up on different isolated VLANs.
I need to get connected clients by specific vlan interface.
In winbox I have interface read only value in a status tab.
screen.jpg
Is it possible to get it/use as filter using CLI?
by hel
Mon Apr 15, 2019 12:11 pm
Forum: General
Topic: Feature requests
Replies: 1160
Views: 208069

Re: Feature requests

Please add attribute or other way to set total-max-limit/total-limit-at via RADIUS.
There's no way to do changes to a dynamic queues. In case of PPPoE network we can't use manual queues.
Total-max-limit is used to limit up+down to a some total value.
by hel
Fri Apr 12, 2019 1:06 pm
Forum: General
Topic: Is it possible to rate-limit (tx/rx combined) using RADIUS?
Replies: 1
Views: 230

Is it possible to rate-limit (tx/rx combined) using RADIUS?

I want to set total-max-limit on a dynamically created simple queue using RADIUS for a PPPoE client.
Is it possible?
by hel
Sat Apr 06, 2019 9:23 pm
Forum: General
Topic: "Simple queue total" on parent queue question
Replies: 1
Views: 232

Re: "Simple queue total" on parent queue question

No one using total-max-limit?
by hel
Fri Apr 05, 2019 10:15 pm
Forum: General
Topic: "Simple queue total" on parent queue question
Replies: 1
Views: 232

"Simple queue total" on parent queue question

I tried to set total avg rate limitation for all my users to 400M, but it is not working - Total avg rate is much lower (8M) than actual speeds in the Upload (50M) and Download (350M). I haven't seen any examples of using it, just a brief overview on the wiki. What I've tried: Created parent simple ...
by hel
Sun Mar 17, 2019 8:06 pm
Forum: Beginner Basics
Topic: Converting from Ubiquiti and need help with basic config
Replies: 14
Views: 611

Re: Converting from Ubiquiti and need help with basic config

Do I need to NAT or route anything? By looking on your screenshot you don't have NAT enabled. So you don't need it on mikrotik either. You can use a "Quick set" in your web or winbox to setup your first basic config. First, check for updates if you have old RouterOS version. Next step is to select ...
by hel
Sat Dec 29, 2018 11:44 pm
Forum: General
Topic: Could you provide some info about simple queues?
Replies: 2
Views: 323

Re: Could you provide some info about simple queues?

Hey have a look at https://wiki.mikrotik.com/wiki/Manual:Queue and here https://www.youtube.com/watch?v=loaVBWq6cWA you have option of using simple queues (w/o hierarchy) I've checked first link multiple times before without success. But the presentation gives me answers to all of my questions. Tha...
by hel
Fri Dec 28, 2018 5:06 pm
Forum: General
Topic: Could you provide some info about simple queues?
Replies: 2
Views: 323

Could you provide some info about simple queues?

We're using queue tree + pcq to limit users rate of customers for almost 5 years. Since RouterOS 6.x there was a big optimizations to a resources usage of simple queues. Started to think about moving to them, but found that there's very poor documentation about simple queues. Specificaly, I have tho...
by hel
Wed Dec 26, 2018 8:57 pm
Forum: General
Topic: High CPU load 70+ on queueing alone.
Replies: 8
Views: 787

Re: High CPU load 70+ on queueing alone.

Hi, I don’t think playing with settings like that will help you very much. The problem is most likely caused by use of the “global” parent and the single tree structure for all queues. It is easy to max out a single core on a CCR with that traffic level with that many PCQs all connected to “global”...
by hel
Sun Dec 16, 2018 5:07 pm
Forum: General
Topic: High CPU load 70+ on queueing alone.
Replies: 8
Views: 787

Re: High CPU load 70+ on queueing alone.

Just a thought: as it is right now each child queue needs to borrow from parent for each and every packet.
It's hard to find any info about parent queue sizes. I'll try to dig some more info.
Thanks for reply.
by hel
Sat Dec 15, 2018 1:14 pm
Forum: General
Topic: High CPU load 70+ on queueing alone.
Replies: 8
Views: 787

Re: High CPU load 70+ on queueing alone.

What is the cause of it? I've played with mangles (now marking connections before packets), reduced pcq queue sizes (from 50 to 10), changed queues types in the queue trees parents. I've noticed, that CPU load is lower with the RED queue in the parent queues of queue tree. But even with these change...
by hel
Tue Nov 20, 2018 6:57 pm
Forum: General
Topic: High CPU load 70+ on queueing alone.
Replies: 8
Views: 787

High CPU load 70+ on queueing alone.

Hello. Today at evening we have seen an unusual cpu load on our main ccr1036 router. Usually it was 15-30% at peak, but today it was over 90% with no obvious reasons. Going to tool>profile shows that all processing took 6% in total except for queues which consume almost 80% of cpu. ROS version is 6....
by hel
Mon Jul 09, 2018 7:10 pm
Forum: General
Topic: How to filter a non-pppoe traffic on vlan1?
Replies: 0
Views: 245

How to filter a non-pppoe traffic on vlan1?

We're separating a management vlan from users vlan, we need to disable all traffic (including arp, dhcp, etc) that aren't pppoe on users vlan. We need it to prevent any broadcast flood, network scan and any access from non-authenticated users, hardware, etc. How to do it correctly? Bridge filter? Do...
by hel
Mon Nov 27, 2017 5:11 pm
Forum: General
Topic: IPsec behind transparent(?) NAT
Replies: 4
Views: 495

Re: IPsec behind transparent(?) NAT

You should use your local addresses on the RB1100 not the public address outside the NAT.
I tried to put local address to SA Src.Address on RB1100. It's now established, but I can't access the other end - ping timeout.
by hel
Mon Nov 27, 2017 4:02 pm
Forum: General
Topic: IPsec behind transparent(?) NAT
Replies: 4
Views: 495

Re: IPsec behind transparent(?) NAT

Any help?
by hel
Sat Nov 25, 2017 1:13 pm
Forum: General
Topic: IPsec behind transparent(?) NAT
Replies: 4
Views: 495

IPsec behind transparent(?) NAT

I'm trying to make an encrypted IPsec-only tunnel between two points. But I don't know the correct settings for this. I have: Point-1 which have public IP-address accessible from internet. Point-2 which have IP-address that is not accessible from internet - it is behind ISP NAT. We asked ISP for a p...
by hel
Wed Mar 01, 2017 6:34 pm
Forum: General
Topic: Is it possible to block (or redirect) over 50000 URLs on RB?
Replies: 10
Views: 1015

Re: Is it possible to block (or redirect) over 50000 URLs on RB?

Yes it is certainly possible to do that. A Linux server with Squid and a DNS resolver (bind9) will do the job. Thanks, I'll try this. But again, how proxy will work with a list of over 50000 blocked URLs? How do I store them - DB or a text file? Also, in countries like that the users will normally ...
by hel
Wed Mar 01, 2017 1:33 am
Forum: General
Topic: Is it possible to block (or redirect) over 50000 URLs on RB?
Replies: 10
Views: 1015

Re: Is it possible to block (or redirect) over 50000 URLs on RB?

What is we use a dedicated server for a filtering purposes? We install DNS-server and some transparent proxy on it. Then we put a list of domains that are referenced in the blocklist as a static entries to DNS-server and assign them an IP address of the filtering server. Then on the port 80 we will ...
by hel
Tue Feb 28, 2017 5:26 pm
Forum: General
Topic: Is it possible to block (or redirect) over 50000 URLs on RB?
Replies: 10
Views: 1015

Re: Is it possible to block (or redirect) over 50000 URLs on RB?

pe1chl,
Yes, you understand it correctly.
I looked at hardware for traffic filtering - it's too expensive for a small provider.
by hel
Tue Feb 28, 2017 5:21 pm
Forum: General
Topic: Is it possible to block (or redirect) over 50000 URLs on RB?
Replies: 10
Views: 1015

Re: Is it possible to block (or redirect) over 50000 URLs on RB?

You can use address lists in the RB too, if you have no problem to block by IP. this will be very fast, but you need all the IPs We have the IPs (over 130000 of them) but if we block them - entire websites will be blocked. We need to block specific pages somehow. For example: some-site.com/suicide_...
by hel
Tue Feb 28, 2017 4:35 pm
Forum: General
Topic: Is it possible to block (or redirect) over 50000 URLs on RB?
Replies: 10
Views: 1015

Is it possible to block (or redirect) over 50000 URLs on RB?

We forced to filter over 50000 URLs (and this number are growing) due to laws in Russia. If we wont do it - it will cause fines and ISP license suspension.
Is it possible to do this on Mikrotik?

We currently have CCR1009-8G-S1-S1+ with a 30% CPU load.
by hel
Wed Mar 09, 2016 2:20 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

I had problems with it because I misunderstand how the things in the config I posted works. We prioritizing global traffic in the prerouting queue and it works well. But when we bandwidth control (per-user limitation) resulted traffic - their priorities and limit-at discarded, because of a different...
by hel
Tue Dec 01, 2015 3:17 pm
Forum: General
Topic: Can I configure hotspot to ignore some of the radius attributes?
Replies: 0
Views: 248

Can I configure hotspot to ignore some of the radius attributes?

I have a RADIUS server with users for the PPPoE-server. I want to install hotspot, that authenticate users using existing RADIUS-server. I need to authenticate hotspot users using User-Name, User-Password and get only Mikrotik-Address-List attribute. PPPoE-specific attributes, Framed-IP-Pool and Fra...
by hel
Sun Mar 29, 2015 3:05 pm
Forum: RouterBOARD hardware
Topic: Max temp for tilera 9-core?
Replies: 4
Views: 1349

Re: Max temp for tilera 9-core?

This is completely normal temperature for CCR router.
Current CPU processors from AMD and Intel have max safe temperature 70C, but their threshold set in BIOS is much higher, at 85-104C by default.
But if 55C is a confirmed normal, then I have no more worries about it.

Thanks.
by hel
Sun Mar 29, 2015 2:27 pm
Forum: RouterBOARD hardware
Topic: Max temp for tilera 9-core?
Replies: 4
Views: 1349

Re: Max temp for tilera 9-core?

CCR1009-8G-1S-1S+
Tilera Tile-Gx9
by hel
Fri Mar 27, 2015 1:44 pm
Forum: RouterBOARD hardware
Topic: Max temp for tilera 9-core?
Replies: 4
Views: 1349

Max temp for tilera 9-core?

What is the safe temperatures range for tilera 9-core processor?
I always have 53-55 degree celsius on it.
by hel
Thu Mar 26, 2015 5:08 pm
Forum: Beginner Basics
Topic: How to mirror all traffic from ether1 (except traffic that goes to/from 192.168.1.1) to ether2
Replies: 3
Views: 855

Re: How to mirror all traffic from ether1 (except traffic that goes to/from 192.168.1.1) to ether2

Don't do weird things unless you absolutely have to.
Is it impossible or just a bad practice?
by hel
Thu Mar 26, 2015 2:58 pm
Forum: Beginner Basics
Topic: How to mirror all traffic from ether1 (except traffic that goes to/from 192.168.1.1) to ether2
Replies: 3
Views: 855

How to mirror all traffic from ether1 (except traffic that goes to/from 192.168.1.1) to ether2

I need to mirror all traffic from ether1 to ether2. But traffic that goes to/from IP-address 192.168.1.1 should not be mirrored. ether1 and ether2 are in one switch-group. Server with an IP-address 192.168.1.1 (billing server) connected to ether2. When I'm trying to authenticate on the billing serve...
by hel
Mon Mar 23, 2015 10:51 pm
Forum: Beginner Basics
Topic: Is it possible to communicate PPPoE to an IPv4 network, when they are in the same subnet?
Replies: 9
Views: 1911

Re: Is it possible to communicate PPPoE to an IPv4 network, when they are in the same subnet?

Explanation why: And I was trying to understand BGP, OSPF, OGRP and another things (that I'm not really need at the moment) just to find something about how to set up something like this "proxy-ARP" functionality. :mrgreen: It was so easy and so close! I did even play with this option, but it didn'...
by hel
Mon Mar 23, 2015 10:11 pm
Forum: Beginner Basics
Topic: Is it possible to communicate PPPoE to an IPv4 network, when they are in the same subnet?
Replies: 9
Views: 1911

Re: Is it possible to communicate PPPoE to an IPv4 network, when they are in the same subnet?

EDIT: Well, I don't use IP for PPPoE server that could be in the subnet of an ethernet. Like, if your PPPoE client receives the IP 10.10.10.100 and you try to ping it, maybe ROS is trying to use the route 10.10.10.0/24 that was dynamic added to route list when you specified that address to the ethe...
by hel
Mon Mar 23, 2015 9:46 pm
Forum: Beginner Basics
Topic: Please help me to configure VLAN properly
Replies: 6
Views: 1300

Re: Please help me to configure VLAN properly

In your setup, since one of the ports of the bridge happens to be a VLAN type interface. It is this interface which adds 802.1q headers. The bridge doesn't know there ever was any tagging going on at all. You could even put two VLAN interfaces on the same physical ethernet interface, but with diffe...
by hel
Mon Mar 23, 2015 8:27 pm
Forum: Beginner Basics
Topic: Please help me to configure VLAN properly
Replies: 6
Views: 1300

Re: Please help me to configure VLAN properly

Your configuration is correct.
The behavior you're seeing is correct.
Thanks for a detailed explanation.
Could you explain, why I lose access to a remote (far) clients after checking the "Use service tag" option on vlan10 interface? Is it because bridge logic already tagged those packets?
by hel
Mon Mar 23, 2015 4:56 pm
Forum: Beginner Basics
Topic: Please help me to configure VLAN properly
Replies: 6
Views: 1300

Re: Please help me to configure VLAN properly

Ok, simple question. When we have a VLAN interface bridged to an ethernet port, do bridge tag and untag packets automatically? I'll explain: One bridge end has a vlan10 interface that bound to sfp1 port. On the other end we have ether8 interface Those two interfaces - vlan10 and ether8 are connected...
by hel
Mon Mar 23, 2015 1:43 pm
Forum: Beginner Basics
Topic: Is it possible to communicate PPPoE to an IPv4 network, when they are in the same subnet?
Replies: 9
Views: 1911

Re: Is it possible to communicate PPPoE to an IPv4 network, when they are in the same subnet?

PPPoE interfaces will never be in "the same subnet". PPPoE is a point-to-point tunnel that uses 2 IP addresses for "identification", they don't even have a netmask, or if they have you can think of their netmask as /32. What you would have to do is to forward traffic from PPPoE interface to your et...
by hel
Sun Mar 22, 2015 4:02 pm
Forum: Beginner Basics
Topic: Please help me to configure VLAN properly
Replies: 6
Views: 1300

Please help me to configure VLAN properly

How to properly configure VLAN on the CCR (see picture below, there is 2 cases I need to solve)?
vlan___.png
by hel
Sun Mar 22, 2015 12:37 pm
Forum: Beginner Basics
Topic: Is it possible to communicate PPPoE to an IPv4 network, when they are in the same subnet?
Replies: 9
Views: 1911

Is it possible to communicate PPPoE to an IPv4 network, when they are in the same subnet?

I'm new to PPPoE. We have only one pool of IPv4 addresses with a mask /24, for example I'll use 10.10.10.0/24. We don't want to divide it to a smaller subnets. We have a regular IPv4 routing for our users to reach internet, they're getting IP addresses from DHCP. Now we want to use PPPoE. We can't c...
by hel
Fri Mar 13, 2015 7:14 am
Forum: General
Topic: Can't figure out the right VLAN config for this case
Replies: 1
Views: 455

Can't figure out the right VLAN config for this case

We're finally got a CCR1009-1S-1S+ router to replace our good old RB1100 which became slow for our network. Main feature we paid attention to, is a SFP port, faster CPU and more RAM. Additional PSU is a great feature too. When I started to configure my new router, I've remembered that we have fiber ...
by hel
Fri Mar 13, 2015 6:11 am
Forum: General
Topic: (?) How to get PPPoE user total traffic used on a session?
Replies: 6
Views: 1657

Re: (?) How to get PPPoE user total traffic used on a session?

hi hel, can u help me with your script to collect total TX/RX trafics?? thank u in advance. Sorry, I've dropped this idea because I can't pass collected traffic to the Traffic Inspector billing system due to API limitation and bad support for the product. So thats why script isn't ready and I can't...
by hel
Wed Feb 18, 2015 11:34 pm
Forum: Announcements
Topic: hAP lite
Replies: 389
Views: 164266

Re: hAP lite

Interesting product for its price, want one at home, waiting it to arrive in Russia.
Why all these indicators (power, activity) are on the back side?
by hel
Sun Jul 20, 2014 11:12 am
Forum: General
Topic: Winbox 3 beta
Replies: 243
Views: 120011

Re: Winbox 3

Please, make login window to be resizeable to a bit smaller height. Its height is really big. Also I think that Note and Group text boxes isn't necessary on the main login window here. They can be entered in a dialog boxes while saving, that way you can implement an Edit button if needed. Login wind...
by hel
Fri Apr 18, 2014 11:12 am
Forum: General
Topic: (?) How to get PPPoE user total traffic used on a session?
Replies: 6
Views: 1657

Re: (?) How to get PPPoE user total traffic used on a sessio

google mikrotik-userman for the manual. Thanks! Somehow you hinted me to the right direction. (no sarcasm) I've found that the RADIUS-server accounting provides exact functional I want. Acct-Input-Octets and Acct-Output-Octets is TX/RX bytes which gets only on session stop and stores into DB. Now I...
by hel
Sun Apr 13, 2014 11:33 pm
Forum: General
Topic: (?) How to get PPPoE user total traffic used on a session?
Replies: 6
Views: 1657

Re: (?) How to get PPPoE user total traffic used on a sessio

I have no idea, what software you're using.

Even if I know how to get total tx/rx of an user in RouterOS, I don't know how to trigger this script on PPPoE user disconnection.
by hel
Sun Apr 13, 2014 2:02 am
Forum: General
Topic: (?) How to get PPPoE user total traffic used on a session?
Replies: 6
Views: 1657

(?) How to get PPPoE user total traffic used on a session?

I want to get total traffic used by every PPPoE session (active user) before their PPPoE session will disconnect (by their side). Is there some event for scripts or something that will help? This is needed for our billing system to count users traffic. We're using RADIUS for users authentication whi...
by hel
Sun Sep 01, 2013 1:42 am
Forum: General
Topic: MikroTik News August 2013 (Issue #50)
Replies: 17
Views: 12806

Re: MikroTik News August 2013 (Issue #50)

Will there be any middle-to-high-range router with at least 5 gigabit ports and usb port support (for 3g usb dongles, for using them in failover scenario)? RB1100 with USB port anyone? :mrgreen:
PS: note that I want good throughput for a gigabit network.
by hel
Fri Apr 12, 2013 10:03 am
Forum: General
Topic: Suggestion about queues sets
Replies: 0
Views: 1202

Suggestion about queues sets

Please delete this thread...
by hel
Wed Apr 10, 2013 12:45 am
Forum: General
Topic: RouterOS v6.0rc13 released
Replies: 81
Views: 27690

Re: RouterOS v6.0rc13 released

is this version stable?! or not good for production systems? If it's a RC or beta - then you probably should test it on your setup in test environment, and only after week or month of testing you can decide whether to put it into production or to wait for the next RC or release. That's a good pract...
by hel
Mon Feb 04, 2013 10:08 am
Forum: General
Topic: Prevent accidental deletion.
Replies: 32
Views: 4356

Re: Prevent accidental deletion.

Lock entries deletion is absolutely useful.
by hel
Sun Nov 18, 2012 7:28 am
Forum: General
Topic: Feature Request: Tunnels with DNS names
Replies: 11
Views: 2826

Re: Feature Request: Tunnels with DNS names

+1 on this must have feature.
Need this especially in firewall.
by hel
Wed Oct 17, 2012 4:32 pm
Forum: General
Topic: Clock resets on reboot
Replies: 5
Views: 1528

Re: Clock resets on reboot

Yeah, NTP-client seems a good option here.
by hel
Wed Oct 17, 2012 1:20 pm
Forum: General
Topic: Clock resets on reboot
Replies: 5
Views: 1528

Clock resets on reboot

Since I bough RB1100 year ago I have to manually set date and time on every boot. Every boot it reset to 1 Jan 1970.
Is there problem with the battery from the beginning? Is it even normal ?
by hel
Fri Oct 12, 2012 6:35 pm
Forum: General
Topic: Question about global in queue tree V6.x
Replies: 41
Views: 34275

Re: Question about global in queue tree V6.x

It works when you need to limit individual users's bandwidth and at the same time control his/her flows like VoIP, www and p2p. What is there to prove? If that's what you're after, it works.
You're mentioning per-user prioritization, which is not possible on mikrotik.
by hel
Fri Oct 12, 2012 4:53 pm
Forum: General
Topic: Question about global in queue tree V6.x
Replies: 41
Views: 34275

Re: Question about global in queue tree V6.x

Dual Queue-ing/shaping is Real
Can you give me a proof that even in one small scenario dual qos on mikrotik would be effective?
by hel
Fri Oct 12, 2012 3:29 pm
Forum: General
Topic: Question about global in queue tree V6.x
Replies: 41
Views: 34275

Re: Question about global in queue tree V6.x

dual QoS with PCQ can be re-invented to a single step solution - just put the PCQ as a queueing in the first step and make additional adjustments to the Queue Tree design.
Dual QoS is a myth on mikrotik. :)
by hel
Tue Oct 02, 2012 1:49 pm
Forum: General
Topic: Question about global in queue tree V6.x
Replies: 41
Views: 34275

Re: Question about global in queue tree V6.x

I have 3 LAN connected to my RB, so I don't have any idea on how to prioritize and limit users in that scenario (global-total and interfaces only).
by hel
Mon Sep 24, 2012 2:47 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

I understand. Have you considered Dual QoS (in one MT router) or two hop solution (use gigabit and powerful machines plz) one for client max limit and one for overall QoS selective drop?
I have one RB1100, so I using Dual QoS in one router.
by hel
Mon Sep 24, 2012 2:21 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

not an elegant solution ? :) Paint the router in some colour then it will be elegant for you :) :lol: By the way, I prioritized packets in the second shaper, by not elegant I mean that those packets doesn't get limited for the users according to their bandwidth limits. Will think more deeply, maybe...
by hel
Mon Sep 24, 2012 2:01 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

Yeah, just as I expected. Some kind of LLQ is easy to get to work in routerOS.
Torrents at full speed, pings are at lower latencies.

Not an elegant solution, but...
by hel
Mon Sep 24, 2012 1:33 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

LLQ does some basic packet rearrange, low latency packets sends first, and other packets sends after, getting shaped as non-LLQ queues (as I understand - it's main difference of LLQ and PQ - in PQ there is only strict prioritization, but in LLQ there is 2 types of prioritization - low latency and fa...
by hel
Tue Sep 18, 2012 10:06 am
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

It's not solveable.
Per-user prioritization is not possible by now.
by hel
Fri Sep 14, 2012 10:52 am
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

Suggestions: Yeah, it's not helping on <100% load link, which I expected per-pcq-subqueue QoS, as andriys correctly noted. And yes, only per-pcq subqueue QoS can make dual shaper working as it should. Mikrotik priority and limit-at working as it should only on dedicated link without user bandwidth ...
by hel
Wed Sep 12, 2012 10:47 am
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

That's right. So, what do you expect to achieve? I watched presentations, forums and from them I understand that mikrotik is a powerful thing for QoS and bandwidth limitation. VOIP, games - they can be prioritized to make users feel more comfortable. And now I'm feeling that I've been fooled. Now I...
by hel
Wed Sep 12, 2012 10:31 am
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

1) do you use src-nat (private IP addresses for clients)? - if yes, prerouting is not aware of them. I'm not using any kind of nat. I'm also not using wifi at all. 2) Do you have all the clients in the same IP network subnet? - if no, what happens when one client from one local subnet is communicat...
by hel
Wed Sep 12, 2012 12:25 am
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

Lets take, for example, the 0.0.49.20 IP address from your config. It falls into the unlim256_clients address list as well as into the local_subnet address list. When packet from 0.0.49.20 to (say) 1.2.3.4 port 80/tcp passes you router it first gets into the prerouting mangle chain, hits the rule a...
by hel
Tue Sep 11, 2012 8:03 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

From the snippet you've posted it is not cleat what local_subnet address list is. I assume that all entries of the unlim256_clients , unlim512_clients , unlim1024_clients and workers_clients address lists belong to the local_subnet as well. Please correct me if I'm wrong. Yes, all these clients bel...
by hel
Tue Sep 11, 2012 4:02 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

Is the silence a proof that my config correct?
by hel
Mon Sep 10, 2012 8:19 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

My current config (I've cut it for better reading): # jan/06/1970 05:42:18 by RouterOS 5.20 # /queue tree add max-limit=9400k name=bandwidth-control parent=global-out add limit-at=8M max-limit=9400k name=users-down parent=bandwidth-control add limit-at=1400k max-limit=9400k name=users-up parent=band...
by hel
Sun Sep 09, 2012 4:01 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

Well, then you and others are doing something wrong. I have no such problems. it just take a little bit of magic in mangle with packet-marks - queues are simple afterwards. Do you even read my post? I don't have any visible error in my QoS configs. I checked it many times, rechecked it with others ...
by hel
Wed Sep 05, 2012 5:39 pm
Forum: General
Topic: Happy with your purchase?
Replies: 32
Views: 5002

Re: Happy with your purchase?

I bought rb1100 mostly for QoS setup and clients bandwidth limitations, but now I feel that I've been fooled by the advertisements, tiktube's presentations and posts on forums. This is only feature (QoS), that I missed in mikrotik. It's present maybe, but from what I know - it is very-very bad or ev...
by hel
Wed Aug 15, 2012 5:32 pm
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

If you can't do it now in HTB (currently implemented), you most probably will not be able to do it in LLQ also. I don't have any visible error in my QoS configs. I checked it many times, rechecked it with others qos implementations, with mikrotik wiki, and etc etc. Even Traffic Inspector on windows...
by hel
Wed Aug 15, 2012 2:54 am
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

normis:
Can you answer, is it possible to make qos working with pcq?

And how "LLC" is possible?
by hel
Tue Jul 17, 2012 4:08 pm
Forum: General
Topic: queue tree issues
Replies: 1
Views: 332

Re: queue tree issues

chain=forward action=mark-packet new-packet-mark=1-to-5 passthrough=no
connection-mark=1-to-5
by hel
Mon Jul 09, 2012 2:42 am
Forum: General
Topic: ROS v6 Suggestions
Replies: 76
Views: 20652

Re: ROS v6 Suggestions

RouterOS does "selective drop" with recommended small queue sizes. But higher priority on the traffic let to drop high priority packets. It's absolutely unacceptable that low priority packets gets over higher ones. P.S. upgrade to gigabit ethernet and you should not need LLQ Are you serious? Look a...
by hel
Sun Jul 08, 2012 3:34 pm
Forum: General
Topic: ROS v6 Suggestions
Replies: 76
Views: 20652

Re: ROS v6 Suggestions

I disagree with the above post and what it quotes. Currently it is possible to make a good QoS config. But it is not easy.
Low latency QoS? I don't see any possibility of how to do it with current functionality.
by hel
Thu Jun 14, 2012 12:26 pm
Forum: General
Topic: Winbox connects to Mikrotik site on each run?!?!
Replies: 3
Views: 748

Re: Winbox connects to Mikrotik site on each run?!?!

Retrieves update information? Run Wireshark and see.
by hel
Wed Jun 13, 2012 4:56 am
Forum: General
Topic: Queue Tree PCQ QoS
Replies: 3
Views: 845

Re: Queue Tree PCQ QoS

Each client will get 5 mbit only if you set Rate on PCQ queues in the queue types tab to 5M.
On the Queue tree you can only limit the total limit.

It's always better to read wiki, there is a lot of examples.
by hel
Mon Jun 11, 2012 8:00 am
Forum: General
Topic: Queue Tree PCQ QoS
Replies: 3
Views: 845

Re: Queue Tree PCQ QoS

Evelio,
Yes, your each client will get 5mbit.
by hel
Tue May 22, 2012 7:32 am
Forum: General
Topic: LLQ required
Replies: 66
Views: 17138

Re: LLQ required

Strict prioritization is a must have feature.

Subscribing...
by hel
Sat May 19, 2012 5:30 pm
Forum: General
Topic: queue tree whitout any limit, just priority.
Replies: 14
Views: 1931

Re: queue tree whitout any limit, just priority.

did you even read the attached link?
DSCP is for packets marking, it allows other routers to not mangle different types of traffic. Just catch packets with DSCP value in mangle and prioritize them in HTB.
by hel
Tue May 15, 2012 11:30 pm
Forum: General
Topic: queue tree whitout any limit, just priority.
Replies: 14
Views: 1931

Re: queue tree whitout any limit, just priority.

DSCP is for marking packets only.
by hel
Fri May 11, 2012 1:23 pm
Forum: General
Topic: queue tree whitout any limit, just priority.
Replies: 14
Views: 1931

Re: queue tree whitout any limit, just priority.

Don't sit and wait, until developers find time to understand that this is an useful feature. Just write one feature request on forum and wiki.
by hel
Thu May 10, 2012 5:45 pm
Forum: General
Topic: queue tree whitout any limit, just priority.
Replies: 14
Views: 1931

Re: queue tree whitout any limit, just priority.

You want Low Latency Queueing, RouterOS currently doesn't support it.
You can add your sig to a feature request wiki page, so developers will see it.
by hel
Mon May 07, 2012 9:01 am
Forum: General
Topic: ROS v6 Suggestions
Replies: 76
Views: 20652

Re: ROS v6 Suggestions

I'll be happy, if there will be LLQ (Low Latency Queueing). Our clients often calls to a support angrily, because their online games latencies goes to a non-playable 300-1000 ms, or social networks loads really slowly, that's because of hidden windows update, forgot torrents, antivirus updates, etc....
by hel
Fri May 04, 2012 1:51 am
Forum: General
Topic: My Story with PCQ .. and high latency
Replies: 15
Views: 3840

Re: My Story with PCQ .. and high latency

Mikrotik doesn't have low latency prioritization. To be honest, I didn't see any effectiveness of the current prioritization system.
You could show your interest in the LLQ (Low Latency Queueing) feature implementation here: http://wiki.mikrotik.com/wiki/MikroTik_ ... e_Requests
by hel
Mon Apr 23, 2012 6:56 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

Ok, I'll read it carefully one more time (fourth time). I've forgot about /export compact, sorry. Priority doesn't change packet order in any way, it DOESN'T put one packet before other - only thing priority do is helping HTB decide what traffic to pass and what traffic to drop. If queue doesn't hav...
by hel
Mon Apr 23, 2012 1:22 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

Apparently you are having problems with your configuration, so I would recommend to try a more simplified one. 1. I don't see problems in my configuration. Here is my current config (I cut it a bit for better readability): Queues: /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabl...
by hel
Fri Apr 20, 2012 11:00 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

I am a little confused here by your statement, I mean, of course they do. By what means are you analysing that queues are not satisfying first their limit-at value, and then jump to the priority. Because when I gave limit-at only to icmp queue to 16kbit, and max-limit to 128kbit. It must go first (...
by hel
Fri Apr 20, 2012 4:04 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

First the queues will satisfy the limit-at
value
They don't.
I don't prioritize ping at all because ping is not a tool to measure or to
value a connection.
It's a best way to check if priorities does work.

Just look at my config. It's correct. But doesn't work.
by hel
Fri Apr 20, 2012 12:24 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

Let's suppose you will shape and prioritize icmp, http and other And let's assume you have a 10M/4M internet connection, your LAN interface is ether2 and the interface that connects to the internet is ether1: I have not tested this particular code, I just wrote it down, but I guess it is accurate Y...
by hel
Mon Apr 09, 2012 5:53 pm
Forum: General
Topic: QoS / Limiting
Replies: 10
Views: 1294

Re: QoS / Limiting

In our normal understandment QoS + bandwidth control isn't working as it should. How it's working on mikrotik is the big question, I can't reach logic of the developers on it. BTW, QoS alone working well. PCQ alone working well too, but together they doesn't work, PCQ overrides all.
by hel
Mon Feb 06, 2012 7:41 am
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

Sorry for waking old thread, but it's actual even for more than half year after my first post. Prioritization + PCQ still doesn't work. Without PCQ, prioritization seems to be working. But I need bandwidth control AND prioritization together. Would it be supported in near future? Dear support. I sen...
by hel
Sun Dec 11, 2011 2:15 am
Forum: General
Topic: How to allow access to blocked site for specific ip ??
Replies: 4
Views: 4221

Re: How to allow access to blocked site for specific ip ??

I blocked the website by following the instructions, that mentioned below: It will block all packets that contains word http://www.facebook.com. For example a page with a link to it or linked image from it. Add more checkings, like: (GET|POST) +(www\.)?facebook\.com.+?HTTP\/\d\.\d (PCRE compatible ...
by hel
Fri Nov 25, 2011 5:20 pm
Forum: General
Topic: [poll]What do you prefer on further development of Mikrotik?
Replies: 27
Views: 3431

Re: What do you prefer on further development of Mikrotik?

Can't wait for the WORKING prioritization system. When? Just when it'll be working?! :(

So yeah, we need improving of an existing functions.
by hel
Wed Oct 26, 2011 1:15 am
Forum: General
Topic: traffic prioritization
Replies: 5
Views: 1133

Re: traffic prioritization

You should mark as many popular services your clients use as possible and then mark other traffic which was left untouched - it would contain p2p, encrypted traffic and so on.

Maybe priority will work for you (for me it's not working at all), good luck.
by hel
Fri Oct 14, 2011 2:18 pm
Forum: General
Topic: simple Priority Queue problem
Replies: 3
Views: 1225

Re: simple Priority Queue problem

What you want to say with this screenshot, where's the priority realization here? And yes, current prioritization implementation in ROS isn't working as expected or do not working completely - it's clearly a ROS problem. I don't know how everyone on this forum make statements that "it works fine", t...
by hel
Fri Oct 14, 2011 9:08 am
Forum: General
Topic: Help needed with QoS scheme
Replies: 1
Views: 431

Re: Help needed with QoS scheme

If your clients number will not rise and if their total speed in sum will not theoretically exceed your internet link's speed, then you should be fine with simple queues. But however - I don't use hotspot and pppoe, so can't say exact config. In other cases you should use queue tree and pcq. It is r...
by hel
Thu Oct 13, 2011 9:35 am
Forum: General
Topic: Double marking and duo Queue tree, which interfaces?
Replies: 29
Views: 4593

Re: Double marking and duo Queue tree, which interfaces?

Sure, check screenshots here:
http://forum.mikrotik.com/viewtopic.php ... 10#p282910

It's my live config, something like "first version".
by hel
Wed Oct 12, 2011 9:00 pm
Forum: General
Topic: Double marking and duo Queue tree, which interfaces?
Replies: 29
Views: 4593

Re: Double marking and duo Queue tree, which interfaces?

Hel It means, that I need to catch download traffic only from local interfaces (eth1,eth2,eth3,vl2,vl4,vl8), and upload from wan interfaces (wan1,bgp1,bgp2)??? Bingo! ... or you can qos packets in global-in (global-in for upload and download) and limit users bandwidth in global-out (global-out for ...
by hel
Wed Oct 12, 2011 6:22 pm
Forum: General
Topic: Double marking and duo Queue tree, which interfaces?
Replies: 29
Views: 4593

Re: Double marking and duo Queue tree, which interfaces?

Please help me out with this question, how to catch upload traffic ???
Why you didn't read my post?
by hel
Tue Oct 11, 2011 10:39 am
Forum: General
Topic: Double marking and duo Queue tree, which interfaces?
Replies: 29
Views: 4593

Re: Double marking and duo Queue tree, which interfaces?

arpiska: Queue, which parent is interface means, that all packets will go out from this interface to outside. Also, global-in doesn't means a "local interface" or global-out is a "wan interface", every packet (no matter if this is upload or download packet) will go through global-in first and only t...
by hel
Thu Oct 06, 2011 6:26 pm
Forum: General
Topic: how to limit total (in+out) user speed to 256kb/s using pcq?
Replies: 7
Views: 1126

Re: how to limit total (in+out) user speed to 256kb/s using

Thinking about the question a little more I realized you could do it without simple queues, but again not with PCQ. If you make a regular queue in the tree for each user, apply the tree to Global-out, then you can just put both upload and download packets into the same queue. I forgot I have accide...
by hel
Thu Oct 06, 2011 12:57 am
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Re: Is per-user traffic prioritization possible on mikrotik?

Well, I have 4 mbit line. I've limited qos and bandwidth control to 4096 kbit/sec and I don't get it why I can only use 90% of my line... It's a big waste of resources for me. Here is what I meant about latencies: If user downloading a file and trying to play online games, he will see long latencies...
by hel
Wed Oct 05, 2011 8:13 pm
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Re: Is per-user traffic prioritization possible on mikrotik?

also, if you assign limit-at value to the queue - this should be guaranteed that queue can get this amout. it will get that amount of traffic (or try to) no matter what the priority. Ok, I have one question then. I have limit-at on light traffic, its speed cost 1/6 of entire total speed of our inte...
by hel
Wed Oct 05, 2011 6:17 pm
Forum: General
Topic: how to limit total (in+out) user speed to 256kb/s using pcq?
Replies: 7
Views: 1126

Re: how to limit total (in+out) user speed to 256kb/s using

I moved from simple queues, and don't want to go back. I thought it's possible with queue tree too.
This is bad.. I haven't so much speed that I may divide between my users...

This feature (combined in+out limitation) would be nice in future ROS versions.

Thanks anyway.
by hel
Fri Sep 30, 2011 7:59 pm
Forum: General
Topic: how to limit total (in+out) user speed to 256kb/s using pcq?
Replies: 7
Views: 1126

Re: how to limit total (in+out) user speed to 256kb/s using

Are nobody tried to implement this or what?
by hel
Fri Sep 30, 2011 2:18 pm
Forum: General
Topic: how to limit total (in+out) user speed to 256kb/s using pcq?
Replies: 7
Views: 1126

how to limit total (in+out) user speed to 256kb/s using pcq?

I want to give user a 256 kbit/sec speed, but 256 must be a total of download and upload speed. Is it possible?
by hel
Thu Sep 29, 2011 11:24 pm
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Re: Is per-user traffic prioritization possible on mikrotik?

Have you bothered to set max-limits too? This means set it for each leaf, not just the parent. Limit-at = minimum guaranteed to that queue Max-limit = maximum that the queue is capable of. Without Max-Limit the queues won't work. Also as a side note, your overall max-limit for a queue should be aro...
by hel
Thu Sep 29, 2011 4:23 pm
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Re: Is per-user traffic prioritization possible on mikrotik?

I even can randomly set priotities and limit-at to a different leaf, inner qos queues - they aren't change anything.
by hel
Thu Sep 29, 2011 3:08 pm
Forum: General
Topic: help Microtik how to limit http download speed after 5 mins
Replies: 1
Views: 817

Re: help Microtik how to limit http download speed after 5 m

Try the queue's burst feature for http traffic with burst time 5 mins.
by hel
Thu Sep 29, 2011 2:48 pm
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Re: Is per-user traffic prioritization possible on mikrotik?

maybe this is help to you (doesn't helped me :( ): http://mum.mikrotik.com/presentations/ID11/id-valens.pdf http://mum.mikrotik.com/presentations/US09/Valens-MUM2009USA.pdf Yeah, I've read that before, Valens one, Janis one - all that works in their examples is a bandwidth control, qos isn't workin...
by hel
Thu Sep 29, 2011 1:14 pm
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Re: Is per-user traffic prioritization possible on mikrotik?

fewi, I tried what you said - same problem. limit-at and priority have no meaning. They're not working absolutelly. Let's see how can I ensure, that they're not working: 1. I have 4096kbit internet bandwidth, which is in+out. 2. I made light queue for high priority traffic and heavy queue for low pr...
by hel
Wed Sep 28, 2011 12:48 pm
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Re: Is per-user traffic prioritization possible on mikrotik?

Am I miss something or priorities does not work in ANY case? I have carefully create mangle rules, queues - no luck! I have put light traffic to a queue with high priority and with limit-at equal to a full speed of my internet (on screenshots below there is limit-at decreased to 1/4), and put heavy ...
by hel
Mon Sep 26, 2011 2:26 pm
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Re: Is per-user traffic prioritization possible on mikrotik?

janisk, Yeah, I tried to search more on this forum, reading the threads carefully, and I think I found an answer in this thread: viewtopic.php?f=2&t=27555 on page 3 by normis. Per-user traffic prioritization is completelly impossible. Is dedicated link portion means, that I should make 9M of 10M con...
by hel
Mon Sep 26, 2011 11:52 am
Forum: General
Topic: Is per-user traffic prioritization possible on mikrotik?
Replies: 16
Views: 3703

Is per-user traffic prioritization possible on mikrotik?

Searched the forums with no luck. I have 200 internet users. I want to prioritize different types of traffic separatelly for every user. Is it possible on mikrotik? I have 50% loaded internet connection, in which priorities doesn't work, they're working only when I load internet connection to the ma...
by hel
Fri Sep 23, 2011 8:40 pm
Forum: General
Topic: a bit confused with priorities
Replies: 3
Views: 550

Re: a bit confused with priorities

priority (1..8) : Prioritize one child queue over other child queue. Does not work on parent queues (if queue has at least one child). One is the highest, eight is the lowest priority. Child queue with higher priority will have chance to reach its limit-at before child with lower priority and after...
by hel
Fri Sep 23, 2011 7:54 pm
Forum: General
Topic: a bit confused with priorities
Replies: 3
Views: 550

a bit confused with priorities

One of the wiki pages shows that I can make per-traffic prioritization working without setting max-limit on the parent node of queue tree. (see chapter 3, voip example by McHutchy)
Is it possible?

I found somewhere, that there's must be a max-limit on the parent node, otherwise it will not work.
by hel
Thu Sep 22, 2011 3:11 pm
Forum: General
Topic: How to block specific udp port for mirroring?
Replies: 4
Views: 1401

Re: How to block specific udp port for mirroring?

You can make port mirroring on switch ports of RB1100, http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Port_Mirroring I thought rule section aren't ordered. Because list of rules doesn't have drag-and-drop feature. I have made 1 rule to not mirror udp 999, and another 1 rule to mirror all...
by hel
Thu Sep 22, 2011 1:05 pm
Forum: General
Topic: How to block specific udp port for mirroring?
Replies: 4
Views: 1401

Re: How to block specific udp port for mirroring?

You can make port mirroring on switch ports of RB1100,
http://wiki.mikrotik.com/wiki/Manual:Sw ... _Mirroring
I have RB1100. I want to mirror all traffic from one interface to another but except traffic from/to udp port 999. Is it possible?
by hel
Thu Sep 22, 2011 8:21 am
Forum: General
Topic: How to block specific udp port for mirroring?
Replies: 4
Views: 1401

How to block specific udp port for mirroring?

I want to mirror all traffic (except udp port 999) from one interface to another on my rb1100. Is it possible?
by hel
Mon Sep 19, 2011 10:28 am
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

Well... After investigation on that problem, I've found that it was because of specific windows 2003 server configuration and it's not a mikrotik problem at all. Server had Routing and Remote Access + NAT and Traffic Inspector in router mode enabled. Average script execution time was 800 msec. After...
by hel
Tue Sep 06, 2011 1:36 pm
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

If it's faster in the SSH console (as opposed to remote command section) try read() and write() with phpseclib and not exec(). In SSH console it's does fast. 4-6 seconds for 100 entries. I tried write() commands. It's just didn't wait for command to complete. For that readon I used read() to avoid ...
by hel
Tue Aug 30, 2011 9:54 pm
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

you can post it on wiki (have to register on wiki.mikrotik.com) - just make article and place link here i will add to pages that are not editable for other users. http://wiki.mikrotik.com/wiki/API_in_C_using_winsock Maybe I'm not good at explaining things in the beginning of the page, please correc...
by hel
Mon Aug 29, 2011 12:21 pm
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

SSH through php is something mindbending - you are using php to create and maintain ssh connection and there the console runs. No surprise that it is slow as you are running layer upon layer there. phpseclib have its own SSH client written on pure PHP. I thought mikrotik does all operations in some...
by hel
Sun Aug 28, 2011 4:42 am
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

Well... after few hours of rewriting (to make it use winsock2 sockets) and then testing C implementation. I have not a bad results: 1 login 1 to 2 commands 1 logout ...took on average 650 msec. It's roughly ~2 times faster than php one and ~4 times faster than php through ssh implementation. If anyo...
by hel
Thu Aug 25, 2011 12:45 am
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

there is something terribly wrong with php implementation then. :) I tried other implementations and seems you're right. Sadly C++ implementation is only for linux, even after rewriting it for winsock2 - it crashing with assertion error about string subscript out of range, if not that, it will be t...
by hel
Fri Aug 19, 2011 1:21 pm
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

I checked the time, that every command consumes. Is it normal? $API->connect($cfg["mt_host"], $cfg["mt_username"], $cfg["mt_password"]); // 0.34563493728638 sec $id = $API->comm("/ip/firewall/address-list/print", array(".proplist" => ".id", "?comment" => "{$guid}")); // 0.21873903274536 sec $API->co...
by hel
Fri Aug 19, 2011 11:56 am
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

Can I define .id value manually to speed up list searching?
by hel
Mon Aug 15, 2011 5:09 pm
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

And how many entries are in the list you are searching.
6 entries
by hel
Mon Aug 15, 2011 12:44 pm
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

Sadly, but 30ms was when I used incorrect commands... When I made script working - it's slow again... $stt = microtime(true); $API = new routeros_api(); $API->debug = false; if($API->connect($cfg["mt_host"], $cfg["mt_username"], $cfg["mt_password"])) { // Id finding $id = $API->comm("/ip/firewall/ad...
by hel
Mon Aug 15, 2011 10:33 am
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

Look at this: http://wiki.mikrotik.com/wiki/Manual:API

There are PHP libraries on the wiki.
Wow, just wow. :shock:
That's very fast, 30ms vs 1000ms. Thank you!
by hel
Mon Aug 15, 2011 8:52 am
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

Re: slow ssh commands executing from remote script

Is there any specific reason that you're not using the API? Which API? Billing, that I want to communicate with mikrotik, have a nice feature, when user change his state (authorized/unauthorized) - it will execute a script (if specified). So when user authorizes or unauthorizes - billing executing ...
by hel
Mon Aug 15, 2011 7:57 am
Forum: General
Topic: slow ssh commands executing from remote script
Replies: 24
Views: 5965

slow ssh commands executing from remote script

I'm writing a simple script on php, that adding and removing entries to/from mikrotik's address-list. I'm using phpseclib to make ssh connections. It works, but slowly - about 1 second for each command passed to mikrotik. Here's detailed info on latencies. From begining to login - 0.10053205490112 s...
by hel
Thu Jun 30, 2011 7:20 pm
Forum: General
Topic: Conficker Virus affecting my site
Replies: 2
Views: 1483

Re: Conficker Virus affecting my site

you are wrong here. Mikrotik, at best, is your router company. They dont deal with network protection, fixing your infected computers etc. I think you are wrong too. This forum is a community where each member can support, give hints and help others. He's not asking mikrotik's support to help him, ...
by hel
Tue Jun 28, 2011 7:43 pm
Forum: General
Topic: Packet rate limit for different traffic
Replies: 2
Views: 1650

Re: Packet rate limit for different traffic

Many thanks, +1 to your karma.
by hel
Mon Jun 27, 2011 11:29 am
Forum: General
Topic: Packet rate limit for different traffic
Replies: 2
Views: 1650

Packet rate limit for different traffic

Is it possible to limit packet rate for some low priority traffic. Some threads on this forum that I found didn't explain how to do that.
by hel
Thu Jun 23, 2011 9:32 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

You need something called Low Latency Queuing. That is not yet implemented in Mikrotik. I need that too. That make sense. I've now searched "Low Latency Queuing" on this forum and it gives me threads with exactly the same trouble as mine. Priority doesn't work with low (but 100%) internet usage and...
by hel
Thu Jun 23, 2011 7:30 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

And not only PCQ makes good-quality connection unstable. Even properly configured (by manual at mikrotik's wiki) QoS alone increase latency in games. I used mikrotik's wiki manual to setup QoS, then by Sheriff's manual from youtube, and then I tried some examples at russian forums, they didn't work ...
by hel
Mon Jun 20, 2011 1:30 am
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

Priority and limit-at isn't working. Absolutely. I just lost in here. For the novice like me it's hell. One week of smoking manuals and I'm wondering now, if it is RouterOS 5.4 bug or something, didn't tried it on 4.17... Will check it. (UPD: Checked, same problem) When I cut PCQ queue type to 30 pa...
by hel
Sun Jun 19, 2011 3:21 am
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

I tried to put mangle rule to prioritize icmp traffic with passthru=yes on top of all rules. Ping are same bad as before... I researched some more. When I enable speed limitations(pcq) on RB - I see that PCQ queues does queue packets and bytes but all QoS nodes doesn't queue bytes and packets - they...
by hel
Sat Jun 18, 2011 1:05 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

@Hel, it is normal to have a high ping when one is consuming the whole bandwidth available while downloading. The ICMP packet does not have a high priority, it will be the last one to pass, unless you do specify a higher priority in queues, but what's the point of it? Yes, I'm trying to make icmp p...
by hel
Sat Jun 18, 2011 1:06 am
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

you cannot create priority rule in PCQ substream, you only can create priority rule to Parent queue that have PCQ inside. Nope, I don't want to prioritize one user over another in PCQ queue. All I want is to apply speed limitation to my internet users AND make QoS for them... by QoS I mean prioriti...
by hel
Fri Jun 17, 2011 12:43 am
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

fcto, I have 3 local interfaces.
Must each interface have their own queue ? Is this correct ?
by hel
Thu Jun 16, 2011 7:16 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

Anyone ?
by hel
Thu Jun 16, 2011 5:27 pm
Forum: General
Topic: trafficshaping skype queue
Replies: 1
Views: 1239

Re: trafficshaping skype queue

Some info is here, no patterns can capture all skype traffic, and those l7 patterns that exists - even overmatching traffic (captures some non-skype traffic), I'm not sure if they even capture skype packets. http://protocolinfo.org/wiki/Skype SIP, however, should be matched by l7 patterns perfectly,...
by hel
Thu Jun 16, 2011 4:58 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

So there is no way to make prioritization AND speed limitations per user ?
by hel
Thu Jun 16, 2011 4:43 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

Config and problem above is actual. Please help! QoS and prioritization works when I disable PCQ, just latencies is a bit longer than I expect on torrent load (80msec against 40msec in idle). Real problem is when I enable PCQ even with disabled QoS and prioritization. Ping goes up to 200-600msec on ...
by hel
Wed Jun 15, 2011 11:48 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

Re: PCQ, high ping

fewi, thanks for reply. Now prioritization seems to be working when PCQ queues disabled. But when I enable PCQ queues ping goes high again and priorities doesn't working. I thought prioritization will work better... when I gave icmp traffic high priority, set it's limit-at to 32k, max-limit to 4096k...
by hel
Wed Jun 15, 2011 10:41 pm
Forum: General
Topic: PCQ, high ping
Replies: 44
Views: 12624

PCQ, high ping

After I understand how QoS is working - next thing I need to do is to limit each user by their tarrifs limitations. So I used PCQ. Currently I'm doing it on a test-workground with 2 servers. First I added mangle rules: add action=mark-connection chain=forward comment="servers marking" disabled=no ne...
by hel
Wed Jun 15, 2011 3:00 am
Forum: General
Topic: Queue Trees not counting traffic...
Replies: 4
Views: 801

Re: Queue Trees not counting traffic...

First of all, thanks for reply! My initial guess is that you don't have passthrough disabled on your packet marking rules. Surprisingly, I've re-created the rules with passthru disabled and it works!! QoS seems to be working now. Have you seen the video that the Megis slides are from? http://www.tik...
by hel
Mon Jun 13, 2011 5:41 pm
Forum: General
Topic: Queue Trees not counting traffic...
Replies: 4
Views: 801

Re: Queue Trees not counting traffic...

Anyone...?
by hel
Mon Jun 13, 2011 3:13 pm
Forum: General
Topic: Queue Trees not counting traffic...
Replies: 4
Views: 801

Re: Queue Trees not counting traffic...

Bump... I really need a help or some hint on what I'm doing wrong.
by hel
Sun Jun 12, 2011 5:37 pm
Forum: General
Topic: Queue Trees not counting traffic...
Replies: 4
Views: 801

Queue Trees not counting traffic...

Hello friends! I just bought a new RB1100 2 weeks ago, and now trying to create QoS prioritization. I think you all know what purpose of QoS is, so there's no need to explain what I want to do. Well, first of all I googled, many times, I looked into qos_megis.pdf, wiki, some russian and english foru...