I also tried implementing you tube Traffic control via this and its absolutely not working.

TSL host thing is totally useless in this case and doesnt pick actual IP of video stream *.googlevideo.com *.youtube.com give me about 4 ip to my address list, but when i start youtube video it comes from some other ip which idk how to detect and mangle.

I also tried implementing you tube Traffic control via this and its absolutely not working.

TSL host thing is totally useless in this case and doesnt pick actual IP of video stream *.googlevideo.com *.youtube.com give me about 4 ip to my address list, but when i start youtube video it comes from some other ip which idk how to detect and mangle.

lol its not useless, you would either.

1. mark all ip address that *googlevideo.com is using and add address to address-list. use queue tree as well to limit bandwidth

2. mark that packets and use queue tree to limit the bandwidth

I also tried implementing you tube Traffic control via this and its absolutely not working.

TSL host thing is totally useless in this case and doesnt pick actual IP of video stream *.googlevideo.com *.youtube.com give me about 4 ip to my address list, but when i start youtube video it comes from some other ip which idk how to detect and mangle.

lol its not useless, you would either.

1. mark all ip address that *googlevideo.com is using and add address to address-list. use queue tree as well to limit bandwidth

2. mark that packets and use queue tree to limit the bandwidth

But its NOT working, simple as that.

add action=add-dst-to-address-list address-list=YOUTUBE_SERVER address-list-timeout=12h chain=prerouting protocol=tcp tls-host=*.googlevideo.com
It picks some IPs but they are not the video stream im recieving from youtube

I also tried implementing you tube Traffic control via this and its absolutely not working.

TSL host thing is totally useless in this case and doesnt pick actual IP of video stream *.googlevideo.com *.youtube.com give me about 4 ip to my address list, but when i start youtube video it comes from some other ip which idk how to detect and mangle.

lol its not useless, you would either.

1. mark all ip address that *googlevideo.com is using and add address to address-list. use queue tree as well to limit bandwidth

2. mark that packets and use queue tree to limit the bandwidth

But its NOT working, simple as that.

add action=add-dst-to-address-list address-list=YOUTUBE_SERVER address-list-timeout=12h chain=prerouting protocol=tcp tls-host=*.googlevideo.com
It picks some IPs but they are not the video stream im recieving from youtube

it should be the first rule in your mangle. mine working perfect.

Maybe google is using and additional dns structure. What ip's are being streamed from? which doman is that? You can contribute to the thread.

:local myServers { "googlevideo" }
:local myListName "YoutubeServers"
:local myTimeout "12:00:00"

/ip dns cache all {
    :foreach i in=$myServers do={
        :foreach j in=[find where (name~$i)] do={
            :do {
                :local myName [get $j name]
                :local myType [get $j type]
                :local myData [get $j data]

                :if ($myType = "A") do={
                    :do {
                        /ip firewall address-list add address=$myData list=$myListName comment="DNSCACHE-$i-$myName" timeout=$myTimeout
                    } on-error={
                        :put "DNSCACHE: Error on $myName $myData $myType"
                    }
                }

                :if ($myType = "CNAME") do={
                    :local currentName $j
                    :local nextName [find where (name=$myData && type="CNAME")]

                    :while ($nextName != "") do={
                        :set currentName $nextName
                        :resolve $currentName
                        :set nextName [find where (name=[get $nextName data] && type="CNAME")]
                    }

                    :resolve [get $currentName data]

                    :foreach k in=[find where (name=[get $currentName data] && type="A")] do={
                        :set myData [get $k data]
                        :do {
                            /ip firewall address-list add address=$myData list=$myListName comment="DNSCACHE-$i-$myName" timeout=$myTimeout
                        } on-error={
                            :put "DNSCACHE: Error on $myName $myData $myType"
                        }
                    }
                }
            } on-error={
                :put "DNSCACHE: Missing Entry"
            }
        }
    }
}

{primevideo}
add chain=prerouting action=jump jump-target=moveTOstep 2 dst-port=443 in-interface-list=lan\
connection-mark=no-mark protocol=tcp tls-host=*.primevideo.com.com

yeah good stuff, i noticed that when you are using Mobile app, it uses UDP 443 instead of TCP.

For desktop, i believe that google QUIC protocol is disabled by default, hence should work with TCP. (in where tls-host only works)

@anav, tls-host only works for TCP, you should use ivicask script to read googlevideo.com dns from catch and write it to address list

Okay so let me get this straight,
A. Use script to catch UDP traffic going to those sites (create address list)
B. Use my borrowed code with latest changes to catch TCP traffic going to those sites (create address list)
C. All Jump to my last two rules which can be used to mangle address list traffic (Mark and route OR Mark and drop OR etc..............)

In other words looking for a strategy to solve this sticky business.

I also dont understand how the script works
Since it involves DNS stuff, I get lost and fast.
Its especially intimidating because there are many ways for people to setup and use their DNS I am afraid the script will bugger up configurations or not work.

Put in another way.
a. what are the inputs to the script?
b. what DNS sturcture has to be in place for the script to work (dynamic, static, special firewall rules, ????)
c. what are the outputs?

For example if the output is simply an address list and I call this address list Streaming_users, then my last two rules can be applied and it should work??

The difference I see is that the Mangle is happening in prerouting but I am not sure if the script is doing the same and HOW does one interleave the two????

Hmmm Okay, so that sounds promising.
However what you are telling me is that initial traffic will ALWAYS get out and not be rerouted because its done in real time not prerouting.
Also, the script is not timed to user access but to a rote timing scheme that will run regardless if streaming is done (while sleeping and or at work/school etc).

What if.........
A. USE TLS HOST as another determinant to run the script.

A. Run script every 5 min
B. Run script everytime any of my tls host rules get a hit.

IM assuming that prime video or netflix or whatever connections are initially done on TCP 443 and then switch to UDP for the actual streaming.
Therefore if we can nail that first bit, then we can quickly invoke the script and be more efficient?

Thoughts?

Maybe google is using and additional dns structure. What ip's are being streamed from? which doman is that? You can contribute to the thread.

I figured it, its streaming it over UDP actualy for me, i had TCP protocol as TLS matcher requires it and this of course didint work for me.

I added this script to my scheduler which pull googlevideo dns records and adds them to adress-list and now it works perfect.

Code: Select all

:local myServers { "googlevideo" }
:local myListName "YoutubeServers"
:local myTimeout "12:00:00"

/ip dns cache all {
    :foreach i in=$myServers do={
        :foreach j in=[find where (name~$i)] do={
            :do {
                :local myName [get $j name]
                :local myType [get $j type]
                :local myData [get $j data]

                :if ($myType = "A") do={
                    :do {
                        /ip firewall address-list add address=$myData list=$myListName comment="DNSCACHE-$i-$myName" timeout=$myTimeout
                    } on-error={
                        :put "DNSCACHE: Error on $myName $myData $myType"
                    }
                }

                :if ($myType = "CNAME") do={
                    :local currentName $j
                    :local nextName [find where (name=$myData && type="CNAME")]

                    :while ($nextName != "") do={
                        :set currentName $nextName
                        :resolve $currentName
                        :set nextName [find where (name=[get $nextName data] && type="CNAME")]
                    }

                    :resolve [get $currentName data]

                    :foreach k in=[find where (name=[get $currentName data] && type="A")] do={
                        :set myData [get $k data]
                        :do {
                            /ip firewall address-list add address=$myData list=$myListName comment="DNSCACHE-$i-$myName" timeout=$myTimeout
                        } on-error={
                            :put "DNSCACHE: Error on $myName $myData $myType"
                        }
                    }
                }
            } on-error={
                :put "DNSCACHE: Missing Entry"
            }
        }
    }
}