Is there a way with Mikrotik to create a very high latency queue or something? This would be on a PPPoE user. I want to make a certain connection very high latency like satellite or worse so online games no longer work but web surfing and downloads still work ok. Basically so homework stuff still works but games do not. Is this possible with Mikrotik? I think freeBSD had a feature like this if I recall correctly.
M
net neutrality? hehe. okay, lets not go there.
yeah, I have heard about this on linux. and no, ROS doesn’t support that
only allow http/s (port 80, 443) traffic?
you could drop every nth packet 
random=10 action=drop rulezzz 
That absolutely KILLS the speed of your internet connection.
A connection that is normally 20mbps doesn’t go over 0.5mbps on speedtest with that rule…
This is not the same effect as latency on a satellite connection.
how about make a mangle rule with these settings, and then make a queue for these random packets? actually you should start with defining what you like to achieve how exactly would you characterize a bad connection?
He characterized the “bad” connection as simply having high latency… like satellite. That in itself is fine and fast for browsing and general internet work, but horrible for real-time games.
This would actually be very useful in a test scenario. To test how applications would behave across different types of WAN links.
Doesn’t tarpit do that?
no, ‘tarpit’ just sends ‘ack’ and forgets about the connection. like smart ‘drop’, when packets establishing the connection are passed. plus, ‘tarpit’ doesn’t leave nothing in ConnTrack
Not quite - tarpitting tries to delay a connection for as long as possible. It’s not really for emulating delay, it’s for forcing an endpoint to send as slowly as possible (to utilize as many resources on that side as possible in order to discourage them from using any resources on you at all).
IPFW in the BSDs also controls dummynet, their traffic shaping facility. It allows you to specify in milliseconds the delay that packets traveling through a pipe (a virtualized circuit) experience. It’s quite nice for testbeds - at work we use it to emulate long distance links when initially testing corporate environments that will be used via VPN from around the world. I don’t know if this can be done at all on Linux (I mostly deal with BSD firewalls), I’m pretty sure there’s no option like this exposed in RouterOS.