Community discussions

MikroTik App
 
User avatar
NetworkPro
Forum Guru
Forum Guru
Topic Author
Posts: 1370
Joined: Mon Jan 05, 2009 6:23 pm
Location: Worldwide
Contact:

Connection Tracking Feature Suggestion - Per destination CT.

Fri Dec 16, 2011 6:20 pm

Hello.

I believe it would be useful if routed packets go through connection-tracking (and therefore consume more processing power) only if we want them to and that it would be useful if we could control this. Possibly by destination subnet - for example all our clients with Public IPs.

This way we would offload conntrack and save CPU and have more confidence that IP packets are not "touched" in any way while passing through the Linux-kernel based MikroTik RouterOS :)

What do you think?


Thanks.
wiki.mikrotik.com/wiki/NetworkPro_on_Quality_of_Service
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: Connection Tracking Feature Suggestion - Per destination

Mon Dec 19, 2011 3:53 pm

you think like -
/ip firewall connection tracking set enabled=no
or switch the ports, if that is an option on the hardware.
 
changeip
Forum Guru
Forum Guru
Posts: 3806
Joined: Fri May 28, 2004 5:22 pm

Re: Connection Tracking Feature Suggestion - Per destination

Mon Dec 19, 2011 5:51 pm

No, he is asking for selective conntrack. I would love to exclude certain traffic from it as well, ie the trillions of udp/53 packets coming into our network from 2+ million source ip addresses. No need to create conntrack entry for them.

Ive seen linux be able to do this I believe ...
Colo and Wholesale Bandwidth Available! Sales at SanDiegoBroadband dot com
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8370
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Connection Tracking Feature Suggestion - Per destination

Tue Dec 20, 2011 1:39 pm

Ive seen linux be able to do this I believe ...
http://security.maruhn.com/iptables-tutorial/x4156.html
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
LukasSVK
newbie
Posts: 40
Joined: Tue Dec 07, 2010 1:57 am
Location: Bratislava, Slovakia

Re: Connection Tracking Feature Suggestion - Per destination

Sat Jan 21, 2012 7:22 pm

+1, i need this feature too :)
 
User avatar
thavinci
Member
Member
Posts: 334
Joined: Sat Aug 04, 2007 4:40 pm
Location: Johannessburg
Contact:

Re: Connection Tracking Feature Suggestion - Per destination

Wed Feb 15, 2012 2:26 pm

+1 for this feature aswell...
http://www.thavinci.za.net

echo "Demo license expired!"
echo "Please reinstall the router."
echo
kill -WINCH 1
exit

Who is online

Users browsing this forum: expert, Google [Bot], lehelvari, MSN [Bot], omnet and 191 guests