Thread: <Ask> LB tanpa squid + masalah poker lemot dan pindah server poker lemot

Dear para master,

Mohon pencerahan semoga klo berhasil bisa jadi tuts. saat ini saya punya koneksi dari 2 ISP yang pertama ada WIreless ( hanya IIX saja ) dan Speedy. 3 bulan yang lalu tidak ada permasalah tetapi seiiring dengan perkembangan jaman game zynga dan sejenisnya menuntut kita untuk lebih kreatif dalam ngutak-ngatik si mikrotik ini singkat cerita saya ingin menerapkan yang seperti pada forum terdahulu ( thanks to mas uburcumi )tetapi karena rasa frustasi ( karena memang setiap orang settingnya berbeda2 )

Loadbalancingnya sih udah bener berikut saya sampaikan settingannya

Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU
0 R WAN ether 1500 1526
1 R Wireless ether 1500 1524
2 ether3 ether 1500 1524
3 ether4 ether 1500 1524
4 R LAN ether 1500 1524
5 R 122508208647 pppoe-out 1480


[admin@mikrotik] > ip add pr
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 170.20.30.207/24 170.20.30.0 170.20.30.255 Wireless
1 192.168.25.1/24 192.168.25.0 192.168.25.255 LAN
2 D 110.13x.xx.xx/32 110.138.20.1 0.0.0.0


[admin@Mikrotik] > ip route pr detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 A S dst-address=0.0.0.0/0 gateway=122508208647
gateway-status=122508208647 reachable distance=1 scope=30
target-scope=10 routing-mark=International

1 A S dst-address=0.0.0.0/0 gateway=170.20.30.1
gateway-status=170.20.30.1 reachable Wireless distance=1 scope=30
target-scope=10

2 DS dst-address=0.0.0.0/0 gateway=110.138.20.1
gateway-status=110.138.20.1 reachable 122508208647 distance=1
scope=30 target-scope=10

3 ADC dst-address=110.138.20.1/32 pref-src=110.138.20.59 gateway=12250820864>
gateway-status=122508208647 reachable distance=0 scope=10

4 ADC dst-address=170.20.30.0/24 pref-src=170.20.30.207 gateway=Wireless
gateway-status=Wireless reachable distance=0 scope=10

5 ADC dst-address=192.168.25.0/24 pref-src=192.168.25.1 gateway=LAN
gateway-status=LAN reachable distance=0 scope=10


[admin@Mikrotik] > ip dns pr
servers: 170.20.30.1,222.124.204.34
allow-remote-requests: yes
max-udp-packet-size: 512
cache-size: 2048KiB
cache-max-ttl: 1w
cache-used: 817KiB

[admin@Mikrotik] > ip firewall nat pr det
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade src-address=192.168.25.0/24


[admin@Mikrotik] > ip firewall mangle pr det
Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting action=mark-connection new-connection-mark=conn-iix passthrough=yes src-address=192.168.25.0/24 dst-address-list=nice

1 chain=prerouting action=mark-connection new-connection-mark=conn-intl passthrough=yes src-address=192.168.25.0/24 dst-address-list=!nice

2 chain=prerouting action=mark-packet new-packet-mark=IIX passthrough=yes connection-mark=conn-iix

3 chain=prerouting action=mark-packet new-packet-mark=INTL passthrough=yes connection-mark=conn-intl

4 chain=prerouting action=mark-routing new-routing-mark=International passthrough=no in-interface=LAN packet-mark=INTL

[admin@Mikrotik] /queue simple> pr det
Flags: X - disabled, I - invalid, D - dynamic
0 name="INTL.PAK" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INTL direction=both priority=8 queue=default-small/default-small
limit-at=0/0 max-limit=0/0 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

1 name="Billing INTL" target-addresses=192.168.25.10/32 dst-address=0.0.0.0/0 interface=all parent=INTL.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=48k/160k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

2 name="Line1 INTL" target-addresses=192.168.25.11/32 dst-address=0.0.0.0/0 interface=all parent=INTL.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

37 name="IIX.PAK" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX direction=both priority=8 queue=default-small/default-small limit-at=0/0
max-limit=0/0 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

38 name="Billing IIX" target-addresses=192.168.25.10/32 dst-address=0.0.0.0/0 interface=all parent=IIX.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

39 name="Line1 IIX" target-addresses=192.168.25.11/32 dst-address=0.0.0.0/0 interface=all parent=IIX.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

Mengacu pada thread sebelumnya mangle saya rubah seperti di bawah ini

to be continue

Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU
0 R WAN ether 1500 1526
1 R Wireless ether 1500 1524
2 ether3 ether 1500 1524
3 ether4 ether 1500 1524
4 R LAN ether 1500 1524
5 R 122508208647 pppoe-out 1480


[admin@mikrotik] > ip add pr
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 170.20.30.207/24 170.20.30.0 170.20.30.255 Wireless
1 192.168.25.1/24 192.168.25.0 192.168.25.255 LAN
2 D 110.13x.xx.xx/32 110.138.20.1 0.0.0.0


[admin@Mikrotik] > ip route pr detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 A S dst-address=0.0.0.0/0 gateway=122508208647
gateway-status=122508208647 reachable distance=1 scope=30
target-scope=10 routing-mark=International

1 A S dst-address=0.0.0.0/0 gateway=170.20.30.1
gateway-status=170.20.30.1 reachable Wireless distance=1 scope=30
target-scope=10

2 DS dst-address=0.0.0.0/0 gateway=110.138.20.1
gateway-status=110.138.20.1 reachable 122508208647 distance=1
scope=30 target-scope=10

3 ADC dst-address=110.138.20.1/32 pref-src=110.138.20.59 gateway=12250820864>
gateway-status=122508208647 reachable distance=0 scope=10

4 ADC dst-address=170.20.30.0/24 pref-src=170.20.30.207 gateway=Wireless
gateway-status=Wireless reachable distance=0 scope=10

5 ADC dst-address=192.168.25.0/24 pref-src=192.168.25.1 gateway=LAN
gateway-status=LAN reachable distance=0 scope=10


[admin@Mikrotik] > ip dns pr
servers: 170.20.30.1,222.124.204.34
allow-remote-requests: yes
max-udp-packet-size: 512
cache-size: 2048KiB
cache-max-ttl: 1w
cache-used: 817KiB

[admin@Mikrotik] > ip firewall nat pr det
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade src-address=192.168.25.0/24




[admin@Mikrotik] > ip firewall mangle pr det
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; FB Loss
chain=prerouting action=mark-connection new-connection-mark=FB Loss
passthrough=yes protocol=tcp dst-port=80 content=http://www.facebook.com

1 chain=prerouting action=mark-packet new-packet-mark=FB Loss passthrough=n>
connection-mark=FB Loss

2 ;;; Poker
chain=prerouting action=mark-connection new-connection-mark=Poker
passthrough=yes protocol=tcp dst-port=80
content=http://apps.facebook.com/texas_holdem

3 chain=prerouting action=mark-packet new-packet-mark=Poker oke
passthrough=no connection-mark=Poker

4 ;;; LB
chain=prerouting action=mark-connection new-connection-mark=conn-iix
passthrough=yes src-address=192.168.25.0/24 dst-address-list=nice

5 chain=prerouting action=mark-connection new-connection-mark=conn-intl
passthrough=yes src-address=192.168.25.0/24 dst-address-list=!nice

6 chain=prerouting action=mark-packet new-packet-mark=IIX passthrough=yes
connection-mark=conn-iix

7 chain=prerouting action=mark-packet new-packet-mark=INTL passthrough=yes
connection-mark=conn-intl

8 chain=prerouting action=mark-routing new-routing-mark=International
passthrough=no in-interface=LAN packet-mark=INTL



[se111fortune@Mikrotik] > queue sim pr det
Flags: X - disabled, I - invalid, D - dynamic
0 name="All Connection" dst-address=0.0.0.0/0 interface=all parent=none
direction=both priority=8 queue=pcq-upload/pcq-download limit-at=0/0
max-limit=2M/2M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

1 name="FB Loss" dst-address=0.0.0.0/0 interface=all parent=All Connection
packet-marks=FB Loss direction=both priority=2
queue=pcq-upload/pcq-download limit-at=0/0 max-limit=1M/1M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

2 name="Poker Oke" dst-address=0.0.0.0/0 interface=all
parent=All Connection packet-marks=Poker oke direction=both priority=1
queue=pcq-download/pcq-download limit-at=0/0 max-limit=1M/1M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

3 name="INTL.PAK" dst-address=0.0.0.0/0 interface=all parent=All Connectio>
packet-marks=INTL direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=0/0
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

4 name="Billing INTL" target-addresses=192.168.25.10/32
dst-address=0.0.0.0/0 interface=all parent=INTL.PAK direction=both
priority=8 queue=default-small/default-small limit-at=0/0
max-limit=48k/160k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

5 name="Line1 INTL" target-addresses=192.168.25.11/32 dst-address=0.0.0.0/>
interface=all parent=INTL.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=256k/256k
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

40 name="IIX.PAK" dst-address=0.0.0.0/0 interface=all parent=All Connection
packet-marks=IIX direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=0/0
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

41 name="Billing IIX" target-addresses=192.168.25.10/32
dst-address=0.0.0.0/0 interface=all parent=IIX.PAK direction=both
priority=8 queue=default-small/default-small limit-at=0/0
max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small

42 name="Line1 IIX" target-addresses=192.168.25.11/32 dst-address=0.0.0.0/0
interface=all parent=IIX.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=256k/256k
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

Alhasil paket poker gak jalan dan poker malah gak bisa main sama sekali di apain lagi yah? utak utik lagi sembari di marahin client

tolong para master

Originally Posted by sutamikurniawan

[se111fortune@Mikrotik] > queue sim pr det
1 name="FB Loss" dst-address=0.0.0.0/0 interface=all parent=All Connection
packet-marks=FB Loss direction=both priority=2
queue=pcq-upload/pcq-download limit-at=0/0 max-limit=1M/1M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

2 name="Poker Oke" dst-address=0.0.0.0/0 interface=all
parent=All Connection packet-marks=Poker oke direction=both priority=1
queue=pcq-download/pcq-download limit-at=0/0 max-limit=1M/1M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

Alhasil paket poker gak jalan dan poker malah gak bisa main sama sekali di apain lagi yah? utak utik lagi sembari di marahin client

pindah kan FB dan poker ke queue tree, seperti yg om uburcumi punya
trus parent dari FB_loss dan poker diganti global-total..

Originally Posted by sutamikurniawan

Configurasi terakhir nih
[admin@MikroTik] > queue tree pr
Flags: X - disabled, I - invalid
0 name="Limited Download" parent=global-out packet-mark=Limit Down limit-at=0 queue=pcq download priority=8 max-limit=256k burst-limit=0 burst-threshold=0
burst-time=0s

1 name="FB Loss" parent=global-out packet-mark=FB Loss limit-at=0 queue=default priority=2 max-limit=300k burst-limit=0 burst-threshold=0 burst-time=0s

2 name="Poker" parent=global-out packet-mark=Poker oke limit-at=0 queue=default priority=1 max-limit=700k burst-limit=0 burst-threshold=0 burst-time=0s

ganti pake global-total

Originally Posted by sutamikurniawan

[admin@MikroTik] > ip firewall mangle pr det
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; FB Loss
chain=prerouting action=mark-connection new-connection-mark=FB Loss passthrough=yes protocol=tcp dst-port=80 content=http://www.facebook.com

1 chain=prerouting action=mark-packet new-packet-mark=FB Loss passthrough=no connection-mark=FB Loss

2 ;;; Poker
chain=prerouting action=mark-connection new-connection-mark=Poker passthrough=yes protocol=tcp dst-port=80 content=http://apps.facebook.com/texas-holdem

3 chain=prerouting action=mark-packet new-packet-mark=Poker oke passthrough=no connection-mark=Poker

4 ;;; Limited Download
chain=forward action=mark-connection new-connection-mark=Limit Down1 passthrough=yes protocol=tcp out-interface=LAN connection-mark=!Poker
content=! connection-bytes=256000-4294967295

5 chain=forward action=mark-packet new-packet-mark=Limit Down passthrough=no protocol=tcp out-interface=LAN connection-mark=Limit Down1

6 ;;; IIX-IX
chain=prerouting action=mark-connection new-connection-mark=conn-iix passthrough=yes src-address=192.168.1.0/24 dst-address-list=nice

7 chain=prerouting action=mark-connection new-connection-mark=conn-intl passthrough=yes src-address=192.168.1.0/24 dst-address-list=!nice

8 chain=prerouting action=mark-packet new-packet-mark=iiix-pak passthrough=yes connection-mark=conn-iix

9 chain=prerouting action=mark-packet new-packet-mark=intl-pak passthrough=yes connection-mark=conn-intl

10 chain=prerouting action=mark-routing new-routing-mark=International passthrough=no in-interface=LAN packet-mark=intl-pak



[admin@MikroTik] > queue simp pr det
Flags: X - disabled, I - invalid, D - dynamic
0 name="INTL.PAK" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=intl-pak direction=both priority=8 queue=default-small/default-small
limit-at=0/0 max-limit=2M/2M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

1 name="IIX.PAK" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=iiix-pak direction=both priority=8 queue=default-small/default-small
limit-at=0/0 max-limit=2M/2M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

2 name="Billing INTL" target-addresses=192.168.1.10/32 dst-address=0.0.0.0/0 interface=all parent=INTL.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

3 name="Billing IIX" target-addresses=192.168.1.10/32 dst-address=0.0.0.0/0 interface=all parent=IIX.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=256k/700k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

4 name="Line1 INTL" target-addresses=192.168.1.11/32 dst-address=0.0.0.0/0 interface=all parent=INTL.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=512k/512k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

5 name="Line2 INTL" target-addresses=192.168.1.12/32 dst-address=0.0.0.0/0 interface=all parent=INTL.PAK direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=512k/512k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small



[admin@MikroTik] > queue tree pr det
Flags: X - disabled, I - invalid
0 name="Limited Download" parent=global-out packet-mark=Limit Down limit-at=0 queue=pcq download priority=8 max-limit=256k burst-limit=0 burst-threshold=0
burst-time=0s

1 name="FB Loss" parent=global-total packet-mark=FB Loss limit-at=0 queue=default priority=2 max-limit=300k burst-limit=0 burst-threshold=0 burst-time=0s

2 name="Poker" parent=global-total packet-mark=Poker oke limit-at=0 queue=default priority=1 max-limit=700k burst-limit=0 burst-threshold=0 burst-time=0s



maksudnya gini bukan simple queue nya dan queue tree nya beserta manglenya???

liat paket dari masing2 rule... mangle dan queue, klo terisi settingan jalan normal..

cek ke poker???

mangle yang poker baik yang mark paket maupun yang mark connection kaga jalan bos ada jalan lain?

Originally Posted by sutamikurniawan

2 ;;; Poker
chain=prerouting action=mark-connection new-connection-mark=Poker passthrough=yes protocol=tcp dst-port=80 content=http://apps.facebook.com/texas-holdem

3 chain=prerouting action=mark-packet new-packet-mark=Poker oke passthrough=no connection-mark=Poker

[QUOTE=sutamikurniawan;132336]mangle yang poker baik yang mark paket maupun yang mark connection kaga jalan bos ada jalan lain?[/QUOTE]

MERAH di mark-connection beda, mestinya harus sama Poker
new-connection-mark=Poker
connection-mark=Poker

mana efek om gw test di router satu lagi yang koneksi tunggal bisa :P

Originally Posted by sutamikurniawan

mana efek om gw test di router satu lagi yang koneksi tunggal bisa :P

mungkin ada salah setting..

neh gw punya jalan kok



pahami rulenya agar dpt berjln dgn maksimal...,

ayo dicoba lagi gang..

ini pake internal proxy ga

Originally Posted by donipermono1982

ini pake internal proxy ga

gak pake om sekarang sih udah jalan. tapi klo pindah server jadi lemot? sempet pake tuts adhilesmana udah bisa. pas gw tinggal tidur gw bisa lagi ( stresssssss huhuhuhuu....