I have setup pcq queues and prioritised them following the pcq article however users on the LAN experience webpages timeing out/partially loading when the mangle rules are active. If i disable the mangle, all flows fine and quickly.
the goal is to distribute the load evenly in times of contention and prioritise a few users. my config is:
Code: Select all
/ip firewall mangle
add action=mark-connection chain=forward comment="Mark noob1 connections" new-connection-mark=noob1_conn src-address-list=noob1
add action=mark-connection chain=forward comment="Mark noob2 connections" new-connection-mark=noob2_conn src-address-list=noob2
add action=mark-connection chain=forward comment="Mark mobiles connections" new-connection-mark=mobiles_conn src-address-list=mobiles
add action=mark-packet chain=forward comment="Mark noob1 traffic" connection-mark=noob1_conn new-packet-mark=noob1_traffic passthrough=no
add action=mark-packet chain=forward comment="Mark noob2 traffic" connection-mark=noob2_conn new-packet-mark=noob2_traffic passthrough=no
add action=mark-packet chain=forward comment="Mark mobiles traffic" connection-mark=mobiles_conn new-packet-mark=mobiles_traffic passthrough=no
/queue tree
add max-limit=7500k name=Download parent=ether2
add max-limit=384k name=Upload parent=pppoe-out1
add name=noob1_download packet-mark=noob1_traffic parent=Download priority=6 queue=pcq_download
add name=noob2_download packet-mark=noob2_traffic parent=Download priority=7 queue=pcq_download
add name=noob2_upload packet-mark=noob2_traffic parent=Upload priority=7 queue=pcq_upload
add name=noob1_upload packet-mark=noob1_traffic parent=Upload priority=6 queue=pcq_upload
add name=mobiles_download packet-mark=mobiles_traffic parent=Download queue=pcq_download
add name=mobiles_upload packet-mark=mobiles_traffic parent=Upload queue=pcq_upload
/queue type
add kind=pcq name=pcq_download pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-rate=7M pcq-src-address6-mask=64
add kind=pcq name=pcq_upload pcq-classifier=src-address pcq-dst-address6-mask=64 pcq-rate=384k pcq-src-address6-mask=64
) and it turned out that it was the dynamic mangle rules (change mss) created from my pppoe-out connection causing the problem. The problem only seemed to present itself to the akamaiedge CDN hosts also (im sure it may have been others also but this is the only one I could 100% confirm at the time).