I have been using the following script for 6.25 to great effect. I created it for this post to help people mark their traffic. However, this particular section of script does not work correctly under 6.30.2.
Logic:
-
- If the connection has not been marked as HTTP_BIG yet, then mark it as HTTP.
- If the connection has transferred over 5MB AND the current rate is 200K or more, change the connection mark to HTTP_BIG.
- Mark the packets.
Has there been a change to 6.30.2 that prevents this type of logic? Connection-Rate appears to be broken. Connection-Bytes works correctly.
Note: remove the slash () below. It is there for display formatting only.
/ip firewall mangle
add action=mark-connection chain=prerouting \
connection-mark=!HTTP_BIG connection-state=new new-connection-mark=HTTP port=80,443 protocol=tcp
add action=mark-connection chain=prerouting \
connection-mark=HTTP connection-bytes=500000-0 connection-rate=200k-100M new-connection-mark=HTTP_BIG protocol=tcp
add action=mark-packet chain=prerouting \
connection-mark=HTTP_BIG new-packet-mark=HTTP_BIG passthrough=no
add action=mark-packet chain=prerouting \
connection-mark=HTTP new-packet-mark=HTTP passthrough=no