BitTorrent Encryption Observations

RouterOS General
1

In my tests, 96% of encrypted torrent packets are escaping/bypassing the p2p packet mark

Firewall: Mangle
Chain: forward, P2P: all-p2p, mark-packet: p2p

p2p Queue Trees:
p2p_incoming - parent: ether2, packet mark: p2p, max-limit: 64k
p2p_outgoing - parent: ether1, packet mark: p2p, max-limit: 64k

With uTorrent Encryption off
uTorrent is downloading at a speed of 8kB/s
p2p_incoming queue is red and limiting connection to 64kbps

Enable encryption on uTorrent
Stop Torrent
Wait 30 seconds
Start Torrent

uTorrent is downloading at a speed of 180kB/s
p2p_incoming queue is red and limiting connection to 64kbps

Switch uTorrent Encryption off
Stop Torrent
Wait 30 seconds
Start Torrent

uTorrent is downloading at a speed of 8kB/s
p2p_incoming queue is red and limiting connection to 64kbps

2

IIRC mikrotik said somewhere than ecrypted P2P traffic couldnt be rate limited only dropped

3

I just reviewed those other posts and I see that as well.

http://forum.mikrotik.com/t/bittorrent-and-mt/6105/1

So it seems you have three options:

  1. Block ALL bittorrent - encrypted and non-encrypted

  2. Rate Limit unencrypted, but not rate-limit encrypted

  3. No rate limit at all

4

Let me have a play and a think about it on our network - I belive that it is possable to Limit NE BT traffic and drop E BT traffic

5

I would give users a choice - either they turn encryption off, or I forbid them bit-torrent. I don’t want to abandon it, just have it under control. If user breaks my trust, then I will find other ways, of how to legitimately limit him …

-pekr-

6

maybe the usual solution , allow/limit everything you can detect and drop everything else? or put the “Random” feature to good use in a script ?