Double marking and duo Queue tree, which interfaces?

petrushka · October 11, 2011, 12:54am

So great discussion you have.. but serious, do somebody find out how ?? and where to setup correctly? I only find if I marking postrouting to global out, my interface queues for customers are empty.

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=ensign_services_download packet-mark=Ensign_services \
    parent=total_download_services priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=user_requests_download packet-mark=User_requests parent=\
    total_download_services priority=3 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=communication_services_download packet-mark=\
    Communication_services parent=total_download_services priority=5 queue=\
    default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=download_services_download packet-mark=Download_services \
    parent=total_download_services priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=5M \
    max-limit=120M name=p2p_services_download packet-mark=P2P_services \
    parent=total_download_services priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=other_services_download packet-mark=other parent=\
    total_download_services priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=download_services_upload packet-mark=\
    Download_services_out parent=total_upload_services priority=7 queue=\
    default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=ensign_services_upload packet-mark=Ensign_services_out \
    parent=total_upload_services priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=5M \
    max-limit=120M name=p2p_services_upload packet-mark=P2P_services_out \
    parent=total_upload_services priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=other_services_upload packet-mark=other_out parent=\
    total_upload_services priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=communication_services_upload packet-mark=\
    Communication_services_out parent=total_upload_services priority=5 queue=\
    default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=user_requests_upload packet-mark=User_requests_out \
    parent=total_upload_services priority=3 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=full_download_clients packet-mark=full_traffic parent=\
    total_download_clients priority=2 queue=PCQ_down_100M
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=econo_download_clients packet-mark=econo_traffic parent=\
    total_download_clients priority=4 queue=PCQ_down_20M
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=cheap_download_clients packet-mark=cheap_traffic parent=\
    total_download_clients priority=7 queue=PCQ_down_15M
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=10k_download_clients packet-mark=10k_traffic parent=\
    total_download_clients priority=8 queue=PCQ_down_100k
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=10k_upload_clients packet-mark=10k_traffic parent=\
    total_upload_clients priority=8 queue=PCQ_up_100k
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=cheap_upload_clients packet-mark=cheap_traffic parent=\
    total_upload_clients priority=7 queue=PCQ_up_10M
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=econo_upload_clients packet-mark=econo_traffic parent=\
    total_upload_clients priority=4 queue=PCQ_up_9M
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0 \
    max-limit=0 name=full_upload_clients packet-mark=full_traffic parent=\
    total_upload_clients priority=2 queue=PCQ_up_100M

the same mangle rules as the above, but without NAT. The services are working, but customer side is empty bytes… also i marked them from forward chain ..

hel · October 11, 2011, 7:39am

arpiska:
Queue, which parent is interface means, that all packets will go out from this interface to outside.

Also, global-in doesn’t means a “local interface” or global-out is a “wan interface”, every packet (no matter if this is upload or download packet) will go through global-in first and only then through global-out (if you mangle them for that).

petrushka · October 11, 2011, 7:11pm

Can please anyone help to understand how to catch traffic on Mangle marked customers (forward) between global in (prerouting) and global out (postrouting) marked services … ???

petrushka · October 12, 2011, 2:20pm

here is my config, no nat
QOS priority for services is working fine in both way.
Shaper Users download is working too,
Shaper Users upload does nothing, takes all bainwidth.

::services::
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=ensign_services_download packet-mark=Ensign_services \
    parent=total_download_services priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=user_requests_download packet-mark=User_requests parent=\
    total_download_services priority=3 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=communication_services_download packet-mark=\
    Communication_services parent=total_download_services priority=5 queue=\
    default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=download_services_download packet-mark=Download_services \
    parent=total_download_services priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=5M \
    max-limit=120M name=p2p_services_download packet-mark=P2P_services \
    parent=total_download_services priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=other_services_download packet-mark=other parent=\
    total_download_services priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=download_services_upload packet-mark=\
    Download_services_out parent=total_upload_services priority=7 queue=\
    default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=ensign_services_upload packet-mark=Ensign_services_out \
    parent=total_upload_services priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=5M \
    max-limit=120M name=p2p_services_upload packet-mark=P2P_services_out \
    parent=total_upload_services priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=other_services_upload packet-mark=other_out parent=\
    total_upload_services priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=communication_services_upload packet-mark=\
    Communication_services_out parent=total_upload_services priority=5 queue=\
    default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=user_requests_upload packet-mark=User_requests_out \
    parent=total_upload_services priority=3 queue=default

::users::
/queue tree
::this one not working
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=total_download_from_clients parent=global-in priority=1
::this one working fine
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=total_upload_to_clients parent=global-out priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=cheap_download_clients packet-mark=cheap_traffic parent=\
    total_download_from_clients priority=7 queue=PCQ_up_5M
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=cheap_upload_clients packet-mark=cheap_traffic parent=\
    total_upload_to_clients priority=7 queue=PCQ_down_11M

::mangle::
/ip firewall mangle
add action=mark-connection chain=forward comment=Cheap disabled=no \
    new-connection-mark=cheap_conn passthrough=yes src-address-list=cheap
add action=mark-packet chain=forward connection-mark=cheap_conn disabled=no \
    new-packet-mark=cheap_traffic passthrough=no

Please help me out with this question, how to catch upload traffic ???

hel · October 12, 2011, 3:22pm

Why you didn’t read my post?

petrushka · October 12, 2011, 4:19pm

Hel

It means, that I need to catch download traffic only from local interfaces (eth1,eth2,eth3,vl2,vl4,vl8), and upload from wan interfaces (wan1,bgp1,bgp2)???

hel · October 12, 2011, 6:00pm

Bingo!
… or you can qos packets in global-in (global-in for upload and download) and limit users bandwidth in global-out (global-out for download and upload), just make sure you mangle packets accordingly.

petrushka · October 13, 2011, 6:18am

Hel, as I understand

… or you can qos packets in global-in (global-in for upload and download) and limit users bandwidth in global-out (global-out for download and upload), just make sure you mangle packets accordingly.

I need for services prerouting mangle rules with src=>dst=download and dst=>src=upload in global in, and postrouting mangles dst=>src=upload and src=>dst=download for users in global out??

Can you please give an example with a couple of rules, to understand it correctly?

hel · October 13, 2011, 6:35am

Sure, check screenshots here:
http://forum.mikrotik.com/t/is-per-user-traffic-prioritization-possible-on-mikrotik/50414/4

It’s my live config, something like “first version”.

petrushka · October 13, 2011, 1:17pm

Dah, it is heavy to understand it

Sure, check screenshots here:
viewtopic.php?p=282910#p282910

from your side, because you have different imagination of task that I can understand
I’ll try to harder my configuration… Anyway thank you for attention !