Queues and Packet

RouterOS General
1

Queues It only works with browsing speed, not with download speed

when make speedtest or download file there is no limitation

i am trying to limit bandwidth in my Address list using Queues and Packet (Mark Connection and MArk Packet) but i got unlimithed bandwidth ? :open_mouth:




fasttrack = OFF

2

Disable fasttrack in firewall.

3

fasttrack = OFF

4

Then show Your queue and firewall mangle.

5

There is no Rules in firewall mangle just mark connection and mark packet for my adress list



/ip firewall mangle

add action=mark-routing chain=prerouting dst-address-list=tiktok \
    new-routing-mark=speed_connections passthrough=yes src-address=\
    192.168.88.0/24
add action=mark-packet chain=prerouting mark-connection=speed_connections dst-address-list= tiktok \
    new-packet-mark=SP-tiktok passthrough=no src-address=192.168.88.0/24
    
 /queue simple
add max-limit=2M/2M name=queue1 packet-marks=SP-tiktok queue=Upload/Download \
    target=""


/queue type
add kind=pcq name=Download pcq-burst-rate=2M pcq-classifier=dst-address \
    pcq-rate=2M
add kind=pcq name=Upload pcq-burst-rate=2M pcq-classifier=src-address \
    pcq-rate=2M
6

You have 2 things wrong. first you are using mark routing not mark connection second in queue you didn’t specify a target which means the target is everything means upload and download are going from the same place in the queue so make sure to put the target the same as src address in your rules

7

i am correct the issues but the Queue sometimes work and sometimes not work @!

8

what are you trying to achieve

9

limit bandwidth for tiktok and twitch (sorted in address list)

just need acorrect rules mark connections and packet and queues rule

10

first of all you can’t put a static address list when dealing with these apps
you need to use tls or use mikrotik as a dns and use a script to inspect dns requests to get the ip addresses and put them in address list otherwise it won’t work

11

Here is how to use TLS
https://youtu.be/T2CQyN-D4u4
tip: you need to choose action to be add dst to address list instead of blocking. and this only works for TCP.
Here how to use DNS way
http://forum.mikrotik.com/t/mark-the-traffic-for-youtube-facebook-etc/114656/1