hard ratelimiting an interface

RouterOS General
1

Hi all,

I’m having issue capping a client, they have their own interface, and I’ve tried setting a queue with no luck, they still seem to go over their limit.

My latest attempt is this, still the client goes over…

4 name=“CLIENT1 GLOBAL CAP” dst-address=0.0.0.0/0 interface=vrrp-client1
parent=none direction=both priority=8 queue=default-small/default-small
limit-at=0/0 max-limit=21000000/5000000 burst-limit=21000000/5000000
burst-threshold=21000000/5000000 burst-time=1s/1s
total-queue=default-small total-burst-time=5s

Trying to set them to 21M down, 5M up.

What am I doing wrong ?

2

For simple queue you must use ‘target-address’.

Your queue should be like this,
‘queue simple add target-address=<IP_of_The_Client> max-limit=21M/5M’
If you have interface you may set network address instead of /32 IP address.

3

I’ll give this a shot.

In regards to how the rules are read, is all traffic tested against every rule ?

Eg,
I have a global rule on an interface.
I then have other rules after that applying to specific IP addresses which travel over that interface.

Will both rules be applied ?
Or is it Cisco ACL style, match one then pass ?

4

As soon as traffic is matched by the queue, traffic is being removed from queues list.

5

This client has multiple Class Cs which we route thru an interface, so can I specify a 0.0.0.0/0 target address ?
At the moment I have the following:

name=“Client 1 GLOBAL CAP” target-addresses=0.0.0.0/0
dst-address=0.0.0.0/0 interface=vrrp-client1 parent=none direction=both
priority=8 queue=default-small/default-small limit-at=0/0
max-limit=21000000/5000000 burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small

However I can still see them going over their limit, I want to keep them under their limit.