PCC matcher

I entered this configuration on router
http://wiki.mikrotik.com/wiki/PCC#Introduction
http://wiki.mikrotik.com/wiki/PCC#Introduction

but when I download only one interface is loaded.

Please, where is the error? Maybe this is only for upload gateway load balancing? Is this the wright config for load balancing gateway (to use all conections on the same time for download and upload).
If not please, what I must change for having that with PCC matcher?

thanks for your help mate!

because not you should download, but many people

I tested it with 2 ro 3 different PCs, maybe more traffic is needed?
I have 2 DSL lines from/to the same ISP, with the same gateway IP address, is this a problem using above configuration? (just for surety)

Thank you again.

please post your routing table

My Routing table:

WAN1 is not connected

DST-ADDRESS PREF-SRC GATEWAY-STATE GATEWAY DISTANCE INTERFACE

0 A S 0.0.0.0/0 reachable xx.xx.3.1 1 WAN3
1 S 0.0.0.0/0 unreachable xx.xx.xx.225 1 WAN1
2 A S 0.0.0.0/0 reachable xx.xx.3.1 1 WAN3
3 S 0.0.0.0/0 unreachable xx.xx.xx.225 1 WAN1
4 S 0.0.0.0/0 reachable xx.xx.3.1 2 WAN3
5 S 0.0.0.0/0 reachable xx.xx.3.1 3 WAN3
6 ADS 0.0.0.0/0 reachable xx.xx.3.1 1 WAN3
7 DS 0.0.0.0/0 reachable xx.xx.3.1 1 WAN3
8 ADC xx.xx.3.1/32 xx.xx.3.207 0 WAN3
9 DC xx.xx.3.1/32 xx.xx.3.43 0 WAN2
10 ADC xx.xx.xx.224/27 xx.xx.xx.247 0 WAN1
11 ADC 192.168.12.0/24 192.168.12.210 0 Local


Thanks for your help.

Sorry. this one has a nicer view :slight_smile:
Routing Table.JPG

so, as you can see, all your default routes goes through WAN3 =)

p.s. you could just use ‘code’ tag :wink:

Dear Chupaka, please, help me how to do that: ‘code’ tag. May you suggest me how to do that.

Thank you again. you are great :slight_smile:

I think I found it, determining “gateway interface” and it works.

Thank again.

Bye

No, no, no it still does not works.
when I determine “Gateway Interface” for each connection WAN3 interface is still present on WAN2 with routing mark to_pub2

Please, how may I resolve this situation.

thnks again
Route.JPG

saying ‘code’ tag I meant

you can
        use it
               for formatting =)

to the topic: install ‘routing-test’ package. when adding routes via terminal use ‘gateway=xx.xx.xx.225%WAN1’ and ‘gateway=xx.xx.xx.225%WAN2’

Maybe when adding routes via terminal must use ‘gateway=xx.xx.3.1%WAN2’ and ‘gateway=xx.xx..3.1%WAN3’
not ‘gateway=xx.xx.xx.225%WAN1’ and ‘gateway=xx.xx.xx.225%WAN2’ ???
Because WAN2 & WAN3 have the same GW IP address.

I did it in this way (‘gateway=xx.xx.3.1%WAN2’ and ‘gateway=xx.xx..3.1%WAN3’) and I have this routing table.
Viewing from the eyes of an expert, of you, is this OK?

thank you again for your help.
Route1.JPG

seems okay, so… just test it =)

I test it and it is really well working.
But I have an problem with yahoo messenger. Cant not initialize a voice or video connection. Chat is OK. I changed connection configuration on messenger's menu, set it to direct connection, http proxy and sock proxy IP of router and port of proxy but no success. Other messengers are OK (MSN, Skype, ...)
Any idea regarding that?

-I also have problem to redirect port 80 TCP to 800 (port of my proxy), dstnat.

All my Router config is:

[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 S 0.0.0.0/0 xx.xx.xx.225 1
1 A S 0.0.0.0/0 xx.xx.3.1%WAN2 1
2 A S 0.0.0.0/0 xx.xx.3.1%WAN3 1
3 ADS 0.0.0.0/0 xx.xx.3.1 1
4 S 0.0.0.0/0 xx.xx.xx.225 1
5 DS 0.0.0.0/0 xx.xx.3.1 1
6 S 0.0.0.0/0 xx.xx.3.1 2
7 S 0.0.0.0/0 xx.xx.3.1 3
8 ADC xx.xx.3.1/32 xx.xx.3.207 WAN3 0
WAN2
9 ADC xx.xx.xx.224/27 xx.xx.xx.247 WAN1 0
10 ADC 192.168.12.0/24 192.168.12.210 Local




[admin@MikroTik] /ip firewall> nat pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=WAN1

1 chain=srcnat action=masquerade out-interface=WAN2

2 chain=srcnat action=masquerade out-interface=WAN3

3 chain=dstnat action=redirect to-ports=800 protocol=tcp
src-address=192.168.0.0/16 in-interface=Local dst-port=80



[admin@MikroTik] /ip firewall> mangle pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=mark-connection new-connection-mark=pub1_conn
passthrough=yes in-interface=WAN1

1 chain=input action=mark-connection new-connection-mark=pub2_conn
passthrough=yes in-interface=WAN2

2 chain=input action=mark-connection new-connection-mark=pub3_conn
passthrough=yes in-interface=WAN3

3 chain=output action=mark-routing new-routing-mark=to_pub1 passthrough=yes
connection-mark=pub1_conn

4 chain=output action=mark-routing new-routing-mark=to_pub2 passthrough=yes
connection-mark=pub2_conn

5 chain=output action=mark-routing new-routing-mark=to_pub3 passthrough=yes
connection-mark=pub3_conn

6 chain=prerouting action=accept dst-address=xx.xx.xx.0/24 in-interface=Loca>

7 chain=prerouting action=accept dst-address=xx.xx.3.0/24 in-interface=Loca>

8 chain=prerouting action=mark-connection new-connection-mark=pub1_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/0

9 chain=prerouting action=mark-connection new-connection-mark=pub2_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/1

10 chain=prerouting action=mark-connection new-connection-mark=pub3_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/2

11 chain=prerouting action=mark-routing new-routing-mark=to_pub1
passthrough=yes in-interface=Local connection-mark=pub1_conn

12 chain=prerouting action=mark-routing new-routing-mark=to_pub2
passthrough=yes in-interface=Local connection-mark=pub3_conn

13 chain=prerouting action=mark-routing new-routing-mark=to_pub3
passthrough=yes in-interface=Local connection-mark=pub2_conn

14 ;;; HIT TRAFFIC FROM PROXY
chain=output action=mark-packet new-packet-mark=proxy-hit passthrough=no
out-interface=Local dscp=4

15 ;;; UP TRAFFIC
chain=prerouting action=mark-packet new-packet-mark=test-up
passthrough=no in-interface=Local

16 ;;; DOWN-DIRECT CONNECTION
chain=forward action=mark-packet new-packet-mark=test-down passthrough=no
out-interface=Local

17 ;;; DOWN-VIA PROXY
chain=output action=mark-packet new-packet-mark=test-down passthrough=no
out-interface=Local


[admin@MikroTik] /ip proxy> pr
enabled: yes
src-address: 0.0.0.0
port: 800
parent-proxy: 0.0.0.0
parent-proxy-port: 0
cache-administrator: "webmaster"
max-cache-size: 62914560KiB
cache-on-disk: yes
max-client-connections: 60
max-server-connections: 60
max-fresh-time: 2w1d
serialize-connections: yes
always-from-cache: no
cache-hit-dscp: 4
cache-drive: sata1

[admin@MikroTik] /queue tree> pr
Flags: X - disabled, I - invalid
0 name="queue1" parent=global-out packet-mark=test-down limit-at=0
queue=PCQ_download priority=8 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s

1 name="queue2" parent=global-in packet-mark=test-up limit-at=0
queue=PCQ_upload priority=8 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s

[admin@MikroTik] > queue interface pr
Flags: D - dynamic

INTERFACE QUEUE

0 Local default
1 spare default
2 WAN1 ethernet-default
3 WAN-eth 2 ethernet-default
4 WAN-eth 3 ethernet-default
5 Public4 default
6 WAN2 default
7 WAN3 default


[admin@MikroTik] > queue type pr
0 name="default" kind=pfifo pfifo-limit=50

1 name="ethernet-default" kind=pfifo pfifo-limit=50

2 name="wireless-default" kind=sfq sfq-perturb=5 sfq-allot=1514

3 name="synchronous-default" kind=red red-limit=60 red-min-threshold=10
red-max-threshold=50 red-burst=20 red-avg-packet=1000

4 name="hotspot-default" kind=sfq sfq-perturb=5 sfq-allot=1514

5 name="PCQ_download" kind=pcq pcq-rate=0 pcq-limit=50
pcq-classifier=dst-address pcq-total-limit=3500

6 name="PCQ_upload" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address
pcq-total-limit=3500

7 name="default-small" kind=pfifo pfifo-limit=10


[admin@MikroTik] > queue simple pr
Flags: X - disabled, I - invalid, D - dynamic
0 name="Komp 1" target-addresses=192.168.12.101/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default

1 name="Komp 2" target-addresses=192.168.12.102/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default

2 name="Komp 3" target-addresses=192.168.12.103/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default




[admin@MikroTik] /ip firewall filter> pr
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; WEB Proxy from outside
chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN1 dst-port=800

1 chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN2 dst-port=800

2 chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN3 dst-port=800

3 chain=input action=accept src-address=192.168.12.0/24

4 chain=input action=accept dst-address=192.168.12.0/24

5 chain=forward action=drop src-address=85.117.24.2

6 chain=forward action=drop dst-address=85.117.24.2

7 chain=forward action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-port=25

8 ;;; To WEB proxy
chain=input action=reject reject-with=icmp-network-unreachable
protocol=tcp src-address=!192.168.0.0/16 dst-port=800

9 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.xx.247 dst-port=800

10 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.3.43 dst-port=800

11 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.3.207 dst-port=800

12 chain=input action=reject reject-with=icmp-network-unreachable protocol=tcp
dst-port=445

13 chain=input action=drop src-address=192.168.12.124

14 chain=input action=drop dst-address=192.168.12.124

15 ;;; P2P
chain=forward action=drop p2p=bit-torrent

16 chain=forward action=drop p2p=blubster

17 chain=forward action=drop p2p=direct-connect

18 chain=forward action=drop p2p=edonkey

19 chain=forward action=drop p2p=fasttrack

20 chain=forward action=drop p2p=gnutella

21 chain=forward action=drop p2p=soulseek

22 chain=forward action=drop p2p=warez

23 chain=forward action=drop p2p=winmx

24 chain=forward action=drop protocol=tcp src-port=3074

25 X chain=forward action=drop protocol=udp src-port=3074

26 X ;;; Drop Telnet from Outside
chain=input action=drop protocol=tcp in-interface=WAN 2
dst-port=23

27 X chain=input action=drop protocol=tcp in-interface=WAN 3 dst-port=23

28 X chain=input action=drop protocol=tcp in-interface=WAN1 dst-port=23

29 chain=input action=accept src-address=192.168.12.95-192.168.12.129

30 chain=input action=accept dst-address=192.168.12.95-192.168.12.129

31 chain=input action=accept src-address=192.168.12.20/31

32 chain=input action=accept dst-address=192.168.12.20/31

33 chain=input action=accept src-address=192.168.12.55-192.168.12.59

34 chain=input action=accept dst-address=192.168.12.55-192.168.12.59

35 ;;; Comp Games
chain=input action=accept src-address=192.168.11.100

36 chain=input action=accept dst-address=192.168.11.100

37 chain=input action=drop src-address=192.168.0.0/16

38 chain=input action=drop dst-address=192.168.0.0/16

39 ;;; All Local Network Block
chain=input action=drop src-address=192.168.0.0/16

40 chain=input action=drop dst-address=192.168.0.0/16





thank you for helping me.

too many letters…

just try to understand what exactly happens with packet arriving to the router

http://wiki.mikrotik.com/wiki/Packet_Flow helps much

Hi.
I want to give some packets higher priority than others.
Is it any way to mark packet on prerouting and than shaping them on HTB Global-in when I have 3 public interfaces?

My Router's actual config is:

[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 S 0.0.0.0/0 xx.xx.xx.225 1
1 A S 0.0.0.0/0 xx.xx.3.1%WAN2 1
2 A S 0.0.0.0/0 xx.xx.3.1%WAN3 1
3 ADS 0.0.0.0/0 xx.xx.3.1 1
4 S 0.0.0.0/0 xx.xx.xx.225 1
5 DS 0.0.0.0/0 xx.xx.3.1 1
6 S 0.0.0.0/0 xx.xx.3.1 2
7 S 0.0.0.0/0 xx.xx.3.1 3
8 ADC xx.xx.3.1/32 xx.xx.3.207 WAN3 0
WAN2
9 ADC xx.xx.xx.224/27 xx.xx.xx.247 WAN1 0
10 ADC 192.168.12.0/24 192.168.12.210 Local




[admin@MikroTik] /ip firewall> nat pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=WAN1

1 chain=srcnat action=masquerade out-interface=WAN2

2 chain=srcnat action=masquerade out-interface=WAN3

3 chain=dstnat action=redirect to-ports=800 protocol=tcp
src-address=192.168.0.0/16 in-interface=Local dst-port=80



[admin@MikroTik] /ip firewall> mangle pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=mark-connection new-connection-mark=pub1_conn
passthrough=yes in-interface=WAN1

1 chain=input action=mark-connection new-connection-mark=pub2_conn
passthrough=yes in-interface=WAN2

2 chain=input action=mark-connection new-connection-mark=pub3_conn
passthrough=yes in-interface=WAN3

3 chain=output action=mark-routing new-routing-mark=to_pub1 passthrough=yes
connection-mark=pub1_conn

4 chain=output action=mark-routing new-routing-mark=to_pub2 passthrough=yes
connection-mark=pub2_conn

5 chain=output action=mark-routing new-routing-mark=to_pub3 passthrough=yes
connection-mark=pub3_conn

6 chain=prerouting action=accept dst-address=xx.xx.xx.0/24 in-interface=Loca>

7 chain=prerouting action=accept dst-address=xx.xx.3.0/24 in-interface=Loca>

8 chain=prerouting action=mark-connection new-connection-mark=pub1_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/0

9 chain=prerouting action=mark-connection new-connection-mark=pub2_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/1

10 chain=prerouting action=mark-connection new-connection-mark=pub3_conn
passthrough=yes dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses:3/2

11 chain=prerouting action=mark-routing new-routing-mark=to_pub1
passthrough=yes in-interface=Local connection-mark=pub1_conn

12 chain=prerouting action=mark-routing new-routing-mark=to_pub2
passthrough=yes in-interface=Local connection-mark=pub3_conn

13 chain=prerouting action=mark-routing new-routing-mark=to_pub3
passthrough=yes in-interface=Local connection-mark=pub2_conn

14 ;;; HIT TRAFFIC FROM PROXY
chain=output action=mark-packet new-packet-mark=proxy-hit passthrough=no
out-interface=Local dscp=4

15 ;;; UP TRAFFIC
chain=prerouting action=mark-packet new-packet-mark=test-up
passthrough=no in-interface=Local

16 ;;; DOWN-DIRECT CONNECTION
chain=forward action=mark-packet new-packet-mark=test-down passthrough=no
out-interface=Local

17 ;;; DOWN-VIA PROXY
chain=output action=mark-packet new-packet-mark=test-down passthrough=no
out-interface=Local


[admin@MikroTik] /ip proxy> pr
enabled: yes
src-address: 0.0.0.0
port: 800
parent-proxy: 0.0.0.0
parent-proxy-port: 0
cache-administrator: "webmaster"
max-cache-size: 62914560KiB
cache-on-disk: yes
max-client-connections: 60
max-server-connections: 60
max-fresh-time: 2w1d
serialize-connections: yes
always-from-cache: no
cache-hit-dscp: 4
cache-drive: sata1

[admin@MikroTik] /queue tree> pr
Flags: X - disabled, I - invalid
0 name="queue1" parent=global-out packet-mark=test-down limit-at=0
queue=PCQ_download priority=8 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s

1 name="queue2" parent=global-in packet-mark=test-up limit-at=0
queue=PCQ_upload priority=8 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s

[admin@MikroTik] > queue interface pr
Flags: D - dynamic

INTERFACE QUEUE

0 Local default
1 spare default
2 WAN1 ethernet-default
3 WAN-eth 2 ethernet-default
4 WAN-eth 3 ethernet-default
5 Public4 default
6 WAN2 default
7 WAN3 default


[admin@MikroTik] > queue type pr
0 name="default" kind=pfifo pfifo-limit=50

1 name="ethernet-default" kind=pfifo pfifo-limit=50

2 name="wireless-default" kind=sfq sfq-perturb=5 sfq-allot=1514

3 name="synchronous-default" kind=red red-limit=60 red-min-threshold=10
red-max-threshold=50 red-burst=20 red-avg-packet=1000

4 name="hotspot-default" kind=sfq sfq-perturb=5 sfq-allot=1514

5 name="PCQ_download" kind=pcq pcq-rate=0 pcq-limit=50
pcq-classifier=dst-address pcq-total-limit=3500

6 name="PCQ_upload" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address
pcq-total-limit=3500

7 name="default-small" kind=pfifo pfifo-limit=10


[admin@MikroTik] > queue simple pr
Flags: X - disabled, I - invalid, D - dynamic
0 name="Komp 1" target-addresses=192.168.12.101/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default

1 name="Komp 2" target-addresses=192.168.12.102/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default

2 name="Komp 3" target-addresses=192.168.12.103/32 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=5
queue=default/default limit-at=200k/200k max-limit=500k/500k
burst-limit=1500k/1500k burst-threshold=400k/400k burst-time=10s/10s
total-queue=default




[admin@MikroTik] /ip firewall filter> pr
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; WEB Proxy from outside
chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN1 dst-port=800

1 chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN2 dst-port=800

2 chain=input action=drop protocol=tcp src-address=0.0.0.0/0
in-interface=WAN3 dst-port=800

3 chain=input action=accept src-address=192.168.12.0/24

4 chain=input action=accept dst-address=192.168.12.0/24

5 chain=forward action=drop src-address=85.117.24.2

6 chain=forward action=drop dst-address=85.117.24.2

7 chain=forward action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-port=25

8 ;;; To WEB proxy
chain=input action=reject reject-with=icmp-network-unreachable
protocol=tcp src-address=!192.168.0.0/16 dst-port=800

9 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.xx.247 dst-port=800

10 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.3.43 dst-port=800

11 chain=output action=reject reject-with=icmp-network-unreachable
protocol=tcp dst-address=xx.xx.3.207 dst-port=800

12 chain=input action=reject reject-with=icmp-network-unreachable protocol=tcp
dst-port=445

13 chain=input action=drop src-address=192.168.12.124

14 chain=input action=drop dst-address=192.168.12.124

15 ;;; P2P
chain=forward action=drop p2p=bit-torrent

16 chain=forward action=drop p2p=blubster

17 chain=forward action=drop p2p=direct-connect

18 chain=forward action=drop p2p=edonkey

19 chain=forward action=drop p2p=fasttrack

20 chain=forward action=drop p2p=gnutella

21 chain=forward action=drop p2p=soulseek

22 chain=forward action=drop p2p=warez

23 chain=forward action=drop p2p=winmx

24 chain=forward action=drop protocol=tcp src-port=3074

25 X chain=forward action=drop protocol=udp src-port=3074

26 X ;;; Drop Telnet from Outside
chain=input action=drop protocol=tcp in-interface=WAN 2
dst-port=23

27 X chain=input action=drop protocol=tcp in-interface=WAN 3 dst-port=23

28 X chain=input action=drop protocol=tcp in-interface=WAN1 dst-port=23

29 chain=input action=accept src-address=192.168.12.95-192.168.12.129

30 chain=input action=accept dst-address=192.168.12.95-192.168.12.129

31 chain=input action=accept src-address=192.168.12.20/31

32 chain=input action=accept dst-address=192.168.12.20/31

33 chain=input action=accept src-address=192.168.12.55-192.168.12.59

34 chain=input action=accept dst-address=192.168.12.55-192.168.12.59

35 ;;; Comp Games
chain=input action=accept src-address=192.168.11.100

36 chain=input action=accept dst-address=192.168.11.100

37 chain=input action=drop src-address=192.168.0.0/16

38 chain=input action=drop dst-address=192.168.0.0/16

39 ;;; All Local Network Block
chain=input action=drop src-address=192.168.0.0/16

40 chain=input action=drop dst-address=192.168.0.0/16

omg!.. PCC is NOT about priority! and DON’T double-post!, please!

p.s. yes, you can mark packets on prerouting and than shape them on HTB Global-in when you have 3 public interfaces. you just need to mark packets on prerouting and than shape them on HTB Global-in :unamused:

OK.

Now I understood what PCC is but on continue of my routerOS config I posted also QoS issue.

in this case I have those rules on firewall mangle:

14 ;;; HIT TRAFFIC FROM PROXY
chain=output action=mark-packet new-packet-mark=proxy-hit passthrough=no
out-interface=Local dscp=4

15 ;;; UP TRAFFIC
chain=prerouting action=mark-packet new-packet-mark=test-up
passthrough=no in-interface=Local

16 ;;; DOWN-DIRECT CONNECTION
chain=forward action=mark-packet new-packet-mark=test-down passthrough=no
out-interface=Local

17 ;;; DOWN-VIA PROXY
chain=output action=mark-packet new-packet-mark=test-down passthrough=no
out-interface=Local

and queue tree

[admin@MikroTik] /queue tree> pr
Flags: X - disabled, I - invalid
0 name=“queue1” parent=global-out packet-mark=test-down limit-at=0
queue=PCQ_download priority=8 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s

1 name=“queue2” parent=global-in packet-mark=test-up limit-at=0
queue=PCQ_upload priority=8 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s

What parent I must put for download child queue trees. Global-in, it is used also for upload queue parent (roule nr.1 on queue tree pr)

So is it any way with prerouting mark and global-in shaping, on this case?

you can use ‘global-in’ for both upload and download, if you mark upload with one packet mark, and download - with another mark.

p.s. it’s again about HTB, not PCC, so could you please create a different topic?.. :confused:

I put this rules on firwall mangle:

14 ;;; Mark all dwn packets
chain=prerouting action=mark-packet new-packet-mark=from_pub passthrough=no in-interface=WAN1

15 chain=prerouting action=mark-packet new-packet-mark=from_pub passthrough=no in-interface=WAN2

16 chain=prerouting action=mark-packet new-packet-mark=from_pub passthrough=no in-interface=WAN3

17 ;;; Mark all upl packets
chain=postrouting action=mark-packet new-packet-mark=to_pub passthrough=no out-interface=WAN1

18 chain=postrouting action=mark-packet new-packet-mark=from_pub passthrough=no out-interface=WAN2

19 chain=postrouting action=mark-packet new-packet-mark=from_pub passthrough=no out-interface=WAN3


and on queue tree those:

Flags: X - disabled, I - invalid

2 name=“QOS_Download” parent=global-in packet-mark=from_pub limit-at=0 priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

3 name=“QOS_Upload” parent=global-in packet-mark=to_pub limit-at=0 priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

4 name=“Prio 1 dw” parent=QOS_Download packet-mark=prio1 limit-at=0 queue=PCQ_download priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>

5 X name=“Prio 1 up” parent=Upload All packet-mark=prio1 limit-at=0 queue=PCQ_upload priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

6 name=“Prio 2 dw” parent=QOS_Download packet-mark=prio2 limit-at=0 queue=PCQ_download priority=2 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>

7 X name=“Prio 2 up” parent=Upload All packet-mark=prio2 limit-at=0 queue=PCQ_upload priority=2 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

8 name=“Prio 3 dw” parent=QOS_Download packet-mark=prio3 limit-at=0 queue=PCQ_download priority=3 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>

9 X name=“Prio 3 up” parent=Upload All packet-mark=prio3 limit-at=0 queue=PCQ_upload priority=3 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

10 name=“Prio 4 dw” parent=QOS_Download packet-mark=prio4 limit-at=0 queue=PCQ_download priority=4 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>

11 X name=“Prio 4 up” parent=Upload All packet-mark=prio4 limit-at=0 queue=PCQ_upload priority=4 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

12 name=“Prio 5 dw” parent=QOS_Download packet-mark=prio5 limit-at=0 queue=PCQ_download priority=5 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>

13 X name=“Prio 5 up” parent=Upload All packet-mark=prio5 limit-at=0 queue=PCQ_upload priority=5 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

14 name=“Prio 6 dw” parent=QOS_Download packet-mark=prio6 limit-at=0 queue=PCQ_download priority=6 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>

15 X name=“Prio 6 up” parent=Upload All packet-mark=prio6 limit-at=0 queue=PCQ_upload priority=6 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

16 name=“Prio 7 dw” parent=QOS_Download packet-mark=prio7 limit-at=0 queue=PCQ_download priority=7 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>

17 X name=“Prio 7 up” parent=Upload All packet-mark=prio7 limit-at=0 queue=PCQ_upload priority=7 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

18 name=“Prio 8 dw” parent=QOS_Download packet-mark=prio8 limit-at=0 queue=PCQ_download priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>

19 name=“Prio 8 up” parent=QOS_Upload packet-mark=prio8_upl limit-at=0 queue=PCQ_upload priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0>


“Upload All” queue tree seems like dont work. I think that I have done a mistake but I cant find where it is :frowning:

Any help?