after reading a lot of sample configurations and not understanding a lot of things could please someone solve some things for me
(about 40-50 users)
- an RB2011 is connected to a TP-LINK DSL modem at ether1 to internet
- RB2011 does all the routing and pcq traffic limiting per user as we wanted of two AP connected as a bridge1
packets (not connections) are mangled at prerouting as Up if they come from bridge1 and as Down if they come from ether1
does the following seem right in regards of the priorities working with pcq queues? (all queues except the parent ones are kind=pcq)
do the priorities have a meaning? Not in regards to one user but if for example the user that has an http request (Qos_3 and QoS_5) that packets are prioritized before those of QoS_8 of another user other non http traffic
here is the code
/queue type
add kind=pcq name="pcq-upload-default 3500 Total limit" pcq-classifier=src-address pcq-total-limit=3500KiB
add kind=pcq name="1,5M Download 2M Burst 3500 Total limit" pcq-burst-rate=2M pcq-burst-threshold=1024 pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-rate=1536k pcq-src-address6-mask=64 pcq-total-limit=3500KiB
add kind=pcq name="1,5M Download 3500 Total limit" pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-rate=1536k pcq-src-address6-mask=64 pcq-total-limit=3500KiB
/queue tree
add max-limit=12M name=QoS_Global_Down_12M parent=global priority=1 queue=default
add max-limit=896k name=QoS_Global_Up_896k parent=global priority=1 queue=default
add max-limit=12M name=QoS_1_Down packet-mark=QoS_1_Down parent=QoS_Global_Down_12M priority=1 queue="1,5M Download 2M Burst 3500 Total limit"
add max-limit=12M name=QoS_2_Down packet-mark=QoS_2_Down parent=QoS_Global_Down_12M priority=2 queue="1,5M Download 2M Burst 3500 Total limit"
add max-limit=12M name=QoS_3_Down packet-mark=QoS_3_Down parent=QoS_Global_Down_12M priority=3 queue="1,5M Download 2M Burst 3500 Total limit"
add max-limit=12M name=QoS_4_Down packet-mark=QoS_4_Down parent=QoS_Global_Down_12M priority=4 queue="1,5M Download 2M Burst 3500 Total limit"
add max-limit=12M name=QoS_5_Down packet-mark=QoS_5_Down parent=QoS_Global_Down_12M priority=5 queue="1,5M Download 3500 Total limit"
add max-limit=12M name=QoS_6_Down packet-mark=QoS_6_Down parent=QoS_Global_Down_12M priority=6 queue="1,5M Download 3500 Total limit"
add max-limit=12M name=QoS_7_Down packet-mark=QoS_7_Down parent=QoS_Global_Down_12M priority=7 queue="1,5M Download 3500 Total limit"
add max-limit=11M name=QoS_8_Down packet-mark=QoS_8_Down parent=QoS_Global_Down_12M queue="1,5M Download 3500 Total limit"
add max-limit=896k name=QoS_1_Up packet-mark=QoS_1_Up parent=QoS_Global_Up_896k priority=1 queue="pcq-upload-default 3500 Total limit"
add max-limit=896k name=QoS_2_Up packet-mark=QoS_2_Up parent=QoS_Global_Up_896k priority=2 queue="pcq-upload-default 3500 Total limit"
add max-limit=896k name=QoS_3_Up packet-mark=QoS_3_Up parent=QoS_Global_Up_896k priority=3 queue="pcq-upload-default 3500 Total limit"
add max-limit=896k name=QoS_4_Up packet-mark=QoS_4_Up parent=QoS_Global_Up_896k priority=4 queue="pcq-upload-default 3500 Total limit"
add max-limit=896k name=QoS_5_Up packet-mark=QoS_5_Up parent=QoS_Global_Up_896k priority=5 queue="pcq-upload-default 3500 Total limit"
add max-limit=896k name=QoS_6_Up packet-mark=QoS_6_Up parent=QoS_Global_Up_896k priority=6 queue="pcq-upload-default 3500 Total limit"
add max-limit=896k name=QoS_7_Up packet-mark=QoS_7_Up parent=QoS_Global_Up_896k priority=7 queue="pcq-upload-default 3500 Total limit"
add max-limit=832k name=QoS_8_Up packet-mark=QoS_8_Up parent=QoS_Global_Up_896k queue="pcq-upload-default 3500 Total limit"
/ip firewall mangle
add action=mark-packet chain=prerouting comment="------------QoS_1 [ICMP]------------" in-interface=ether1 new-packet-mark=QoS_1_Down passthrough=no protocol=icmp
add action=mark-packet chain=prerouting comment="------------QoS_1 [ICMP]------------" in-interface=bridge1 new-packet-mark=QoS_1_Up passthrough=no protocol=icmp
add action=mark-packet chain=prerouting comment="------------QoS_1 [DNS_NTP_DHCP_Services]------------" in-interface=ether1 new-packet-mark=QoS_1_Down passthrough=no protocol=udp src-port=53,67,68,123
add action=mark-packet chain=prerouting comment="------------QoS_1 [DNS_NTP_DHCP_Services]------------" dst-port=53,67,68,123 in-interface=bridge1 new-packet-mark=QoS_1_Up passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="------------QoS_1 [DNS_NTP_Services]------------" in-interface=ether1 new-packet-mark=QoS_1_Down passthrough=no protocol=tcp src-port=53,123
add action=mark-packet chain=prerouting comment="------------QoS_1 [DNS_NTP_Services]------------" dst-port=53,123 in-interface=bridge1 new-packet-mark=QoS_1_Up passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="------------QoS_3 [WWW_Services]------------" connection-bytes=0-1500000 in-interface=ether1 new-packet-mark=QoS_3_Down passthrough=no protocol=tcp src-port=80,443
add action=mark-packet chain=prerouting comment="------------QoS_3 [WWW_Services]------------" connection-bytes=0-1500000 dst-port=80,443 in-interface=bridge1 new-packet-mark=QoS_3_Up passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="------------QoS_3 [General_Services]------------" in-interface=ether1 new-packet-mark=QoS_3_Down passthrough=no protocol=tcp src-port=21,22,23,25,110,143,465,587,993,995
add action=mark-packet chain=prerouting comment="------------QoS_3 [General_Services]------------" dst-port=21,22,23,25,110,143,465,587,993,995 in-interface=bridge1 new-packet-mark=QoS_3_Up passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="------------QoS_3 [General_Services]------------" in-interface=ether1 new-packet-mark=QoS_3_Down passthrough=no protocol=udp src-port=22,23
add action=mark-packet chain=prerouting comment="------------QoS_3 [General_Services]------------" dst-port=22,23 in-interface=bridge1 new-packet-mark=QoS_3_Up passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="------------QoS_3 [messaging_and_notifications]------------" in-interface=ether1 new-packet-mark=QoS_3_Down passthrough=no protocol=tcp src-port=2195,2196,4244,5222,5223,5228,5229,5230,5242,5243,9785
add action=mark-packet chain=prerouting comment="------------QoS_3 [messaging_and_notifications]------------" dst-port=2195,2196,4244,5222,5223,5228,5229,5230,5242,5243,9785 in-interface=bridge1 new-packet-mark=QoS_3_Up passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="------------QoS_3 [messaging_and_notifications]------------" in-interface=ether1 new-packet-mark=QoS_3_Down passthrough=no protocol=udp src-port=4244,5242,5243,9785
add action=mark-packet chain=prerouting comment="------------QoS_3 [messaging_and_notifications]------------" dst-port=4244,5242,5243,9785 in-interface=bridge1 new-packet-mark=QoS_3_Up passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="------------QoS_5 [WWW_Services_Heavy]------------" connection-bytes=1500000-0 in-interface=ether1 new-packet-mark=QoS_5_Down passthrough=no protocol=tcp src-port=80,443
add action=mark-packet chain=prerouting comment="------------QoS_5 [WWW_Services_Heavy]------------" connection-bytes=1500000-0 dst-port=80,443 in-interface=bridge1 new-packet-mark=QoS_5_Up passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="------------QoS_8 [Other_Services]------------" in-interface=ether1 new-packet-mark=QoS_8_Down passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="------------QoS_8 [Other_Services]------------" in-interface=bridge1 new-packet-mark=QoS_8_Up passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="------------QoS_8 [Other_Services]------------" in-interface=ether1 new-packet-mark=QoS_8_Down passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="------------QoS_8 [Other_Services]------------" in-interface=bridge1 new-packet-mark=QoS_8_Up passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="------------QoS_8 [Other_Services]------------" in-interface=ether1 new-packet-mark=QoS_8_Down passthrough=no
add action=mark-packet chain=prerouting comment="------------QoS_8 [Other_Services]------------" in-interface=bridge1 new-packet-mark=QoS_8_Up passthrough=no
I know some will point that mangling is wrong prerouting all at In points (is it that wrong?) but my question mainly is about priorities and PCQ as I said earlier not inside each users traffic but between different user requests (i.e. http vs downloading)
Thank you