Community discussions

MikroTik App
 
boardman
Member Candidate
Member Candidate
Topic Author
Posts: 261
Joined: Fri May 28, 2004 11:10 pm
Location: Mexico
Contact:

Somethig interesting for all of us P2P trafic

Fri Oct 27, 2006 2:52 am

Hi,

I received this from the spanish Mikrotik phorum and consider ti to be of interest to everybody, so I decided to post it here:

http://www.tippingpoint.com/pdf/resourc ... raffic.pdf

Best Regards

Jorge Boardman
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Fri Oct 27, 2006 11:04 am

sorry, couldn find anything interesting and new in this document.

all they where talking about was - how bad that p2p exists and users share music, movies etc etc.

and usage is so intensive, that it brings your netowrk ifrasturcture to its knees.

yeah, that is bad, that is wrong.

but all this can be done using MT ROS - i dont think they can manage encrypted traffic of torrent or any other encrypted traffic at all - only posible solution is to DROP ALL traffic, or you will face encrypted traffic rampaging on your network OR allow users to use p2p mark for known ptp and all other traffic beeing dropped (unmanaged traffic)

and ISP has allways remember that NOT ALL users share illegal contents. maybe some hadnycam freek choses to share his 20GB 1 hour camera dump to its friend to process it using same BAD un VERY BAD p2p network.
also, some comanies redistribute program updates using p2p network (like Blizzard)

so, do not forget - there is allways other side of a coin.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24708
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Fri Oct 27, 2006 11:50 am

this all depends on what kind of service you are providing. if a user is paying for his internet connection and certain amount of bandwidth - it does not matter what this user is doing over this connection. he has his rights to talk over skype, download his legitimate linux distributions over torrent networks, listen to internet radio and chat over msn and install a wifi router to use a wifi laptop in his house. you have no right to deny these services to your users or he will just choose another ISP. it's just my personal thoughts, it does depend on a lot of things. depends on what kind of agreement the user has signed, but if it were me - i would not sign an agreement where everything is blocked except www on port 80
 
User avatar
111111
Member Candidate
Member Candidate
Posts: 194
Joined: Thu Oct 05, 2006 1:39 am
Location: BG,SOFIA

Fri Oct 27, 2006 12:46 pm

modern bittorent progs use strange algos to baypass marking
I try to limit p2p but MT catch only 10% of real p2p traffic
but and clients have choise "your concurrence" so think before do some
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24708
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Fri Oct 27, 2006 12:51 pm

routeros can `drop` any kind of torrent traffic. encrypted traffic cannot be slowed down with queues, but it can be effectively dropped with firewall.
 
User avatar
surfnet
Member Candidate
Member Candidate
Posts: 256
Joined: Wed Sep 01, 2004 6:38 pm

Fri Oct 27, 2006 4:45 pm

I try to limit p2p but MT catch only 10% of real p2p traffic
What tool to you use to measure that Mt only catches 10%?
 
boardman
Member Candidate
Member Candidate
Topic Author
Posts: 261
Joined: Fri May 28, 2004 11:10 pm
Location: Mexico
Contact:

Sat Oct 28, 2006 1:16 am

routeros can `drop` any kind of torrent traffic. encrypted traffic cannot be slowed down with queues, but it can be effectively dropped with firewall.
Can RouterOS drop P2P for certain periods of time like during business hours then allow for nights then back drop during next day?

Or does it works only for new connections? This is something have been not completely clear for me....

Best

Jorge Boardman
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24708
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Mon Oct 30, 2006 8:34 am

yes, there is `time` setting in firewall.
 
User avatar
111111
Member Candidate
Member Candidate
Posts: 194
Joined: Thu Oct 05, 2006 1:39 am
Location: BG,SOFIA

Tue Oct 31, 2006 2:31 am

I try to limit p2p but MT catch only 10% of real p2p traffic
What tool to you use to measure that Mt only catches 10%?
I just add "drop all p2p" then run µTorrent and in winbox run torch
with disabled rule 10Mb speed no problem
with enabled 7~9Mb speed after some time
 
wildbill442
Forum Guru
Forum Guru
Posts: 1050
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Tue Oct 31, 2006 2:58 am

I try to limit p2p but MT catch only 10% of real p2p traffic
What tool to you use to measure that Mt only catches 10%?
I just add "drop all p2p" then run µTorrent and in winbox run torch
with disabled rule 10Mb speed no problem
with enabled 7~9Mb speed after some time
Do you have connection tracking enabled?
 
User avatar
111111
Member Candidate
Member Candidate
Posts: 194
Joined: Thu Oct 05, 2006 1:39 am
Location: BG,SOFIA

Tue Oct 31, 2006 3:06 pm

yes
 
User avatar
Alessio Garavano
Member
Member
Posts: 304
Joined: Sat May 29, 2004 12:49 am
Location: Corrientes, Argentina
Contact:

Wed Nov 01, 2006 12:32 am

yes, there is `time` setting in firewall.
This "time" function has problem when the "clock" of the router is in another GMT location...
How may be fixed this problem in 2.9.x?
Alessio Garavano
http://www.isparg.com.ar
 
music
newbie
Posts: 26
Joined: Fri Oct 14, 2005 3:09 pm
Location: Serbia

Wed Nov 01, 2006 1:28 am

routeros can `drop` any kind of torrent traffic. encrypted traffic cannot be slowed down with queues, but it can be effectively dropped with firewall.
Do you want to tell that my user shaped to 256 kbps can actually achieve more speed over encrypted torrent traffic :shock: ?! And only thing that I can do is to block whole bit torrent (crypted and regular) traffic?

How to test, btw, is there any of the encrypted traffic on my router?
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24708
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Wed Nov 01, 2006 10:07 am

routeros can `drop` any kind of torrent traffic. encrypted traffic cannot be slowed down with queues, but it can be effectively dropped with firewall.
Do you want to tell that my user shaped to 256 kbps can actually achieve more speed over encrypted torrent traffic :shock: ?! And only thing that I can do is to block whole bit torrent (crypted and regular) traffic?

How to test, btw, is there any of the encrypted traffic on my router?
no, what i said only applies if you try to mark p2p and make a queue out of it. queuing all traffic works as usual.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24708
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Wed Nov 01, 2006 10:07 am

yes, there is `time` setting in firewall.
This "time" function has problem when the "clock" of the router is in another GMT location...
How may be fixed this problem in 2.9.x?
fixed in v3
 
User avatar
Alessio Garavano
Member
Member
Posts: 304
Joined: Sat May 29, 2004 12:49 am
Location: Corrientes, Argentina
Contact:

Wed Nov 01, 2006 2:52 pm

yes, there is `time` setting in firewall.
This "time" function has problem when the "clock" of the router is in another GMT location...
How may be fixed this problem in 2.9.x?
fixed in v3
Hi Normis, i know is fixed in RouterOS3, but is very beta to work in production box, exist a workaround in 2.9.x to this feature?

Thanks and best regards!
Alessio
Alessio Garavano
http://www.isparg.com.ar
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24708
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Wed Nov 01, 2006 2:55 pm

it can't be fixed in 2.9 because of some specific mechanics of how it works. v3 has new components, there it was possible to fix it.
 
milance
just joined
Posts: 21
Joined: Tue Jan 31, 2006 12:32 am
Location: Cuprija

Fri Nov 17, 2006 2:50 am

Question for Normis??

Will be Final V3 finished before Training and Mum in Poland ???

Sorry for wrong thread :)
 
cmit
Forum Guru
Forum Guru
Posts: 1552
Joined: Fri May 28, 2004 12:49 pm
Location: Germany

Fri Nov 17, 2006 9:34 am

If I would have to bet, I'd say "no" ;)

Best regards,
Christian Meis
Best regards,
Christian Meis

Who is online

Users browsing this forum: Baidu [Spider], ShayanPAL and 80 guests