How to limit packets/s by IP

RouterOS General
1

Hi There,

is there any way to limit the amount of packets a user (one IP in our Network) can pass per second ?

I found a way to limit Number of Connections and Bandwith - but nothing about packets/s till now…

Is there any way?

Reason:
Some tools (i think update list for Gameservers and/or p2p) seem to pass a high amount of packets/s and my gateway Router has very high CPU at this time…

Clients → Mikrotik AC → Gateway Router (no Mikrotik)

2

yes you can.. simple queues, queue tree:
http://www.mikrotik.com/testdocs/ros/2.9/root/queue.php

3

hi,

thanks…
but i don´t find how to put the packets/s in the queue/firewall…
I find only connections, etc…

4

I’m not sure that is is possible to limit by number of packets per second in queues, actually. Can anyone confirm one way or the other?

5

Firewall rule - Extra - Limit

limit (integer/time{0,1},integer) - restricts packet match rate to a given limit. Usefull to reduce the amount of log messages
Count - maximum average packet rate, measured in packets per second (pps), unless followed by Time option
Time - specifies the time interval over which the packet rate is measured
Burst - number of packets to match in a burst

6

There are no options to limit packets per second in queues, but I mentioned queues because it is possible to achieve something similar by using RED and PFIFO queue types.

7

so - there is no direct way to limit packets/s?
i have tried firewall rules - no success…

8

in firewall, you can accept all packets within limit and drop/reject the others

9

okay, i will give it a try…