Hello everyone and happy new year!
Well I have one specific problem :
I have web server with many files and i need to limit speed for server visitors.
My web server is nated from wan at ip 192.168.11.100 and also have queue simple limit at 1G like this:
/queue simple
add burst-time=10s/10s limit-at=100M/100M max-limit=1G/1G name=debian-server \
priority=3/3 queue=ethernet-default/ethernet-default target=\
192.168.11.100/32 total-priority=3
Usualy when I see that I have heavy dowloader (with torch) I manualy add queue simple fot that user like this :
/queue simple add dst=95.168.105.24/32 max-limit=10M/10M name=queue parent=debian-server \
queue=ethernet-default/ethernet-default target=192.168.11.100/32
I was try to make some script which is will do this automaticaly .
1.Remove old users
i was made this , and this step is ok:
/queue simple remove [ find where parent="debian-server" ]
2.Detect and adding new web visitor to list
I was make detection of web server visitors like this:
/ip firewall layer7-protocol
add name=ssl regexp=\
"^(.\?.\?\\x16\\x03.*\\x16\\x03|.\?.\?\\x01\\x03\\x01\?.*\\x0b)"
Then mangle:
/ip firewall mangle
add action=add-dst-to-address-list address-list=web-server-visitors \
address-list-timeout=1h chain=postrouting comment=\
"web-server-visitors IP add to adress-list " dst-address-list=\
!our-network layer7-protocol=ssl src-address=192.168.11.100
add action=add-dst-to-address-list address-list=web-server-visitors \
address-list-timeout=1h chain=postrouting comment=\
"web-server-visitors IP add to adress-list " dst-address-list=\
!our-network protocol=tcp src-address=192.168.11.100 src-port=443
This also look good and my firewall list is populated with new IP.
3.Adding this IP to queue simple , here Im need help ![]()
Last try (which is not working) looks like this:
/queue simple add dst={ /ip firewall address-list :foreach x in=[find where="web-server-visitors"] } max-limit=10M/10M name=queue parent=debian-server queue=ethernet-default/ethernet-default target=192.168.11.100/32
Any help is welcome