queue tree limit per user or per network?

danielillu · October 3, 2006, 1:03pm

Hi to everyone!

I’ve set some queues to limit bandwidth for diferent kind of mangled traffic {http, ftp, smtp, pop, dns, https} {VoIP}, {control: means trafic from APs IP and server IP}, p2p (mikrotik p2p identified traffic), other (traffic not directly known).

each queue tree will limit traffic going through it to each ip or to all network segment. i mean, if I set to p2p 64kbps, these kbps will affect all my network (10.20.7.0/24) or will affect each client (64kbps for 10…1, 64kbps more for 10…2…)
I use pcq queue on queue tree setting.

many thanks for your time and help

danielillu · October 5, 2006, 12:55pm

anyone?

normis · October 5, 2006, 1:01pm

unless you use PCQ, it will limit the whole traffic of it’s kind. so if your queue limits p2p traffic to 64, it will be total traffic that is limited. to limit per IP - use PCQ

sergejs · October 5, 2006, 1:02pm

It depends on your current configuration. you can paste mangle and queues configuration, than it will be easier to help you.

danielillu · October 5, 2006, 9:50pm

I’ve set a pcq queue type for upload UL (classified by Src. address) and other one for download DL (Classified by Dst Address).

My internet connection is a 4M symmetric WiMAX Link.

as normis says, I’m using PCQ queues, so all traffic will be limited per IP.

Most of my problems are on VoIP. because for some reason packets are very delayed and voice sound is sent and received with cuts, echo and great delay.

Many thanks for your help and attention.

I paste /ip firewall filter /ip firewall mangle /queue tree for a better analisis

/ ip firewall filter
add chain=forward protocol=tcp tcp-flags=syn connection-limit=51,32
action=drop comment=“” disabled=no
add chain=forward protocol=udp dst-limit=40,5,dst-address/16m40s action=accept
comment=“” disabled=no

/ ip firewall mangle
add chain=prerouting action=mark-connection new-connection-mark=other
passthrough=yes comment=“” disabled=no
add chain=prerouting src-address=10.20.7.0/29 action=mark-connection
new-connection-mark=control passthrough=yes comment=“” disabled=no
add chain=prerouting dst-address=10.20.7.0/29 action=mark-connection
new-connection-mark=control passthrough=yes comment=“” disabled=no
add chain=prerouting protocol=udp dst-port=5060-5061 action=mark-connection
new-connection-mark=VoIP passthrough=yes comment=“” disabled=no
add chain=prerouting protocol=udp dst-port=16398-16407 action=mark-connection
new-connection-mark=VoIP passthrough=yes comment=“” disabled=no
add chain=prerouting p2p=all-p2p action=mark-connection
new-connection-mark=p2p passthrough=yes comment=“” disabled=no
add chain=prerouting connection-mark=other action=mark-packet
new-packet-mark=other passthrough=yes comment=“” disabled=no
add chain=prerouting connection-mark=control action=mark-packet
new-packet-mark=control passthrough=yes comment=“” disabled=no
add chain=prerouting connection-mark=VoIP action=mark-packet
new-packet-mark=VoIP passthrough=yes comment=“” disabled=no
add chain=prerouting protocol=tcp dst-port=20 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp src-port=20 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp dst-port=21 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp src-port=21 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp dst-port=25 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp src-port=25 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp dst-port=53 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp src-port=53 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=udp dst-port=53 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=udp src-port=53 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=forward src-address=10.20.7.0/24 protocol=tcp dst-port=80
connection-mark=other action=mark-packet new-packet-mark=trafic_comun
passthrough=yes comment=“” disabled=no
add chain=forward dst-address=10.20.7.0/24 protocol=tcp src-port=80
connection-mark=other action=mark-packet new-packet-mark=trafic_comun
passthrough=yes comment=“” disabled=no
add chain=prerouting protocol=tcp dst-port=110 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp src-port=110 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp dst-port=443 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting protocol=tcp src-port=443 connection-mark=other
action=mark-packet new-packet-mark=trafic_comun passthrough=yes comment=“”
disabled=no
add chain=prerouting connection-mark=p2p action=mark-packet
new-packet-mark=p2p passthrough=yes comment=“” disabled=no
[admin@Casalot.sr2+sr5] ip firewall mangle>

/ queue tree
add name=“DL.Trafic comun” parent=sr2ghz packet-mark=trafic_comun
limit-at=768000 queue=pcq_DL priority=4 max-limit=3500000 burst-limit=0
burst-threshold=0 burst-time=0s disabled=no
add name=“UL.Trafic comun” parent=ether1 packet-mark=trafic_comun
limit-at=768000 queue=pcq_UL priority=4 max-limit=3500000 burst-limit=0
burst-threshold=0 burst-time=0s disabled=no
add name=“DL.VoIP” parent=sr2ghz packet-mark=VoIP limit-at=70000 queue=pcq_DL
priority=1 max-limit=4000000 burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no
add name=“UL.VoIP” parent=ether1 packet-mark=VoIP limit-at=70000 queue=pcq_UL
priority=1 max-limit=4000000 burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no
add name=“DL.Control” parent=sr2ghz packet-mark=control limit-at=512000
queue=pcq_DL priority=2 max-limit=100000000 burst-limit=0
burst-threshold=0 burst-time=0s disabled=no
add name=“UL.Control” parent=ether1 packet-mark=control limit-at=512000
queue=default priority=2 max-limit=100000000 burst-limit=0
burst-threshold=0 burst-time=0s disabled=no
add name=“DL.Other” parent=sr2ghz packet-mark=other limit-at=768000
queue=pcq_DL priority=8 max-limit=768000 burst-limit=0 burst-threshold=0
burst-time=0s disabled=no
add name=“UL.Other” parent=ether1 packet-mark=other limit-at=768000
queue=pcq_UL priority=8 max-limit=768000 burst-limit=0 burst-threshold=0
burst-time=0s disabled=no
add name=“DL.p2p” parent=sr2ghz packet-mark=p2p limit-at=64000 queue=pcq_DL
priority=8 max-limit=64000 burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no
add name=“UL.p2p” parent=ether1 packet-mark=p2p limit-at=64000 queue=pcq_UL
priority=8 max-limit=64000 burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no