mam nasledujici problem.. chtel bych abyste pochopili proc se na to ptam takze :
vyhorely nam servery na komine v devadesati metrech (2xPC 4x Atheros 5213 se Star-OS na každém), prostě nešlo v rychlosti nahradit ničim jinym než Routerboardama (na každem 4x Atheros - 532A s Daughterboardem)
mno vsechno se me povedlo rozchodit ale trapim se uz druhy den s pořádnym nastavením Queue..
přecijenom na puvodnich serverech bylo dohromady asi sedesat klientů a na tech dvačtyřkách se umlátěj bez kloudnyho shaperu s prioritizací..
nadchnul mě návod (nebo spíš ukazka) od tom-toma tady na foru:
Kód: Vybrat vše
/ ip firewall mangle
add chain=prerouting in-interface=internet protocol=icmp action=mark-packet \
new-packet-mark=internet_prio_rx passthrough=no comment="provoz z netu" \
disabled=no
add chain=prerouting in-interface=internet protocol=udp action=mark-packet \
new-packet-mark=internet_udp_rx passthrough=no comment="" disabled=no
add chain=prerouting in-interface=internet protocol=tcp src-port=20-21 \
action=mark-packet new-packet-mark=internet_ftp_rx passthrough=no comment="" \
disabled=no
add chain=prerouting in-interface=internet protocol=tcp src-port=25-443 \
action=mark-packet new-packet-mark=internet_http_rx passthrough=no \
comment="" disabled=no
add chain=prerouting in-interface=internet p2p=all-p2p action=mark-packet \
new-packet-mark=internet_p2p_rx passthrough=no comment="" disabled=no
add chain=prerouting in-interface=internet action=mark-packet \
new-packet-mark=internet_ostatni_rx passthrough=no comment="" disabled=no
add chain=postrouting out-interface=internet protocol=icmp action=mark-packet \
new-packet-mark=internet_prio_tx passthrough=no comment="provoz do netu" \
disabled=no
add chain=postrouting out-interface=internet protocol=udp action=mark-packet \
new-packet-mark=internet_udp_tx passthrough=no comment="" disabled=no
add chain=postrouting out-interface=internet protocol=tcp dst-port=20-21 \
action=mark-packet new-packet-mark=internet_ftp_tx passthrough=no comment="" \
disabled=no
add chain=postrouting out-interface=internet protocol=tcp dst-port=25-443 \
action=mark-packet new-packet-mark=internet_http_tx passthrough=no \
comment="" disabled=no
add chain=postrouting out-interface=internet p2p=all-p2p action=mark-packet \
new-packet-mark=internet_p2p_tx passthrough=no comment="" disabled=no
add chain=postrouting out-interface=internet action=mark-packet \
new-packet-mark=internet_ostatni_tx passthrough=no comment="" disabled=no
/ queue type
add name="p2p_down" kind=pcq pcq-rate=600000 pcq-limit=50 \
pcq-classifier=dst-address pcq-total-limit=2000
add name="p2p_up" kind=pcq pcq-rate=500000 pcq-limit=50 \
pcq-classifier=src-address pcq-total-limit=2000
/ queue tree
add name="internet_tx" parent=global-out packet-mark="" limit-at=9000000 \
queue=default priority=1 max-limit=9000000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="internet_p2p_tx" parent=internet_tx packet-mark=internet_p2p_tx \
limit-at=1000000 queue=p2p_up priority=7 max-limit=7000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_ftp_tx" parent=internet_tx packet-mark=internet_ftp_tx \
limit-at=1000000 queue=default priority=6 max-limit=7000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_prio_tx" parent=internet_tx packet-mark=internet_prio_tx \
limit-at=1000000 queue=default priority=1 max-limit=9000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_udp_tx" parent=internet_tx packet-mark=internet_udp_tx \
limit-at=1000000 queue=default priority=2 max-limit=9000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_http_tx" parent=internet_tx packet-mark=internet_http_tx \
limit-at=5000000 queue=default priority=3 max-limit=9000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_ostatni_tx" parent=internet_tx packet-mark=internet_ostatni_tx \
limit-at=0 queue=default priority=8 max-limit=7000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_rx" parent=global-in packet-mark="" limit-at=9000000 \
queue=default priority=1 max-limit=9000000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="internet_p2p_rx" parent=internet_rx packet-mark=internet_p2p_rx \
limit-at=1000000 queue=p2p_down priority=7 max-limit=7000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_ftp_rx" parent=internet_rx packet-mark=internet_ftp_rx \
limit-at=1000000 queue=default priority=6 max-limit=7000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_prio_rx" parent=internet_rx packet-mark=internet_prio_rx \
limit-at=1000000 queue=default priority=1 max-limit=9000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_udp_rx" parent=internet_rx packet-mark=internet_udp_rx \
limit-at=1000000 queue=default priority=2 max-limit=9000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_http_rx" parent=internet_rx packet-mark=internet_http_rx \
limit-at=5000000 queue=default priority=3 max-limit=9000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="internet_ostatni_rx" parent=internet_rx packet-mark=internet_ostatni_rx \
limit-at=0 queue=default priority=8 max-limit=7000000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no na vstupu to funguje super, ale peru se s maximalni propustnosti kazdyho bezdratu. kazdou dva ctyrku bych potreboval oriznout na maximalne 2,5M, stim ze klienti budou mít dejmetomu kazdy 1Mdown 256kUP. (kolik neni zas tak podstatny.. klidne a vyuzivaj zbývajici konekt, ale a to nepřeežujou na hranici)
snažil sem se to vyresit stejnym nastavenim jak pro vstupni konekt (navod tom-toma) ale prestalo me správně markovat pakety na konkretnim rozhrani.. ano mate pravdu plavu v tom
)prostě a jednoduše sem v tom lama a potrebuju poradit nebo se z toho... vite co
nebo spíš klienti ..jestli ma nekdo nejaky napad jak to rychle vyřešit tak sem snim...
btw. fagy a ruzny fora sem za tech par dni co nuceně běží bez shaperu samozřejmě prošmejdil.. ale bez kloudnyho vysledku..
dekuju moc za pomoc
jo a klidně pište i na icq 125702846