Community discussions

MikroTik App
 
User avatar
chris-oct
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 56
Joined: Tue Mar 21, 2006 6:58 pm

BitTorrent Encryption Observations

Fri Apr 28, 2006 10:42 pm

In my tests, 96% of encrypted torrent packets are escaping/bypassing the p2p packet mark

Firewall: Mangle
Chain: forward, P2P: all-p2p, mark-packet: p2p

p2p Queue Trees:
p2p_incoming - parent: ether2, packet mark: p2p, max-limit: 64k
p2p_outgoing - parent: ether1, packet mark: p2p, max-limit: 64k

With uTorrent Encryption off
uTorrent is downloading at a speed of 8kB/s
p2p_incoming queue is red and limiting connection to 64kbps

Enable encryption on uTorrent
Stop Torrent
Wait 30 seconds
Start Torrent

uTorrent is downloading at a speed of 180kB/s
p2p_incoming queue is red and limiting connection to 64kbps

Switch uTorrent Encryption off
Stop Torrent
Wait 30 seconds
Start Torrent

uTorrent is downloading at a speed of 8kB/s
p2p_incoming queue is red and limiting connection to 64kbps
 
Beccara
Long time Member
Long time Member
Posts: 606
Joined: Fri Apr 08, 2005 3:13 am

Sat Apr 29, 2006 12:37 am

IIRC mikrotik said somewhere than ecrypted P2P traffic couldnt be rate limited only dropped
 
User avatar
chris-oct
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 56
Joined: Tue Mar 21, 2006 6:58 pm

Sat Apr 29, 2006 1:19 am

I just reviewed those other posts and I see that as well.

http://forum.mikrotik.com/viewtopic.php ... ht=torrent

So it seems you have three options:

1) Block ALL bittorrent - encrypted and non-encrypted

2) Rate Limit unencrypted, but not rate-limit encrypted

3) No rate limit at all
 
Beccara
Long time Member
Long time Member
Posts: 606
Joined: Fri Apr 08, 2005 3:13 am

Sat Apr 29, 2006 4:23 am

Let me have a play and a think about it on our network - I belive that it is possable to Limit NE BT traffic and drop E BT traffic
 
User avatar
pekr
Member Candidate
Member Candidate
Posts: 169
Joined: Tue Feb 22, 2005 9:05 pm
Location: Czech Republic
Contact:

Sat Apr 29, 2006 6:58 am

I would give users a choice - either they turn encryption off, or I forbid them bit-torrent. I don't want to abandon it, just have it under control. If user breaks my trust, then I will find other ways, of how to legitimately limit him ...

-pekr-
 
bushy
Member Candidate
Member Candidate
Posts: 135
Joined: Thu Oct 20, 2005 11:56 pm
Location: Ireland

Sun Apr 30, 2006 2:39 am

maybe the usual solution , allow/limit everything you can detect and drop everything else? or put the "Random" feature to good use in a script ?

Who is online

Users browsing this forum: No registered users and 30 guests