Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Page 2 of 2 FirstFirst 12
Results 16 to 23 of 23
  1. #16
    Status
    Offline
    xXx
    xXx's Avatar
    Member
    Join Date
    Apr 2010
    Location
    H34VEN'S KNOW
    Posts
    137
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    tp kyknya kalo diterapin di rtrw malah bnyk komplen y , soalnya kt jual bw segitu hrs segitu dptnya kn g lucu kt jual bw 512Kbps trus si user download file/youtube,dll trus dptnya cm 5-15 kb , kecuali kl paketan up to selagi trafik sepi/bw ckup dia dpt 64kbps(512Kbps) sesuai yg dia beli , kl di warnet browsing campur game OL saya kira bisa aja penerapan L7 yg rada extreme bwt jaga latensi

  2. #17
    Status
    Offline
    manakautau's Avatar
    Member
    Join Date
    Aug 2010
    Location
    Pedalaman Hutan Kalimantan tengah
    Posts
    175
    Reviews
    Read 0 Reviews
    Downloads
    7
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by smartbonny Click here to enlarge
    tp kyknya kalo diterapin di rtrw malah bnyk komplen y , soalnya kt jual bw segitu hrs segitu dptnya kn g lucu kt jual bw 512Kbps trus si user download file/youtube,dll trus dptnya cm 5-15 kb , kecuali kl paketan up to selagi trafik sepi/bw ckup dia dpt 64kbps(512Kbps) sesuai yg dia beli , kl di warnet browsing campur game OL saya kira bisa aja penerapan L7 yg rada extreme bwt jaga latensi
    Bro smart ini kalau usernya orang IT siiich bisa komplain, tapi kalau orang awam...mungkin mereka tahu kalau akses ke website youtube tersebut agak lambat tidak seperti biasa-nya, tetapi kalau sama aja mereka malah diam aja.....bahkan kalau bagus aksesnya malah adem ayem aja....cuman tetap harus di monitoring aja

  3. #18
    Status
    Offline
    luluknet24's Avatar
    Member
    Join Date
    May 2012
    Posts
    144
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Wah layer 7 nggak ngerti gan, yang sering dipake layer 2 dan 3 blom ada keperluan ke situ Click here to enlarge

  4. #19
    Status
    Offline
    xXx
    xXx's Avatar
    Member
    Join Date
    Apr 2010
    Location
    H34VEN'S KNOW
    Posts
    137
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by manakautau Click here to enlarge
    Bro smart ini kalau usernya orang IT siiich bisa komplain, tapi kalau orang awam...mungkin mereka tahu kalau akses ke website youtube tersebut agak lambat tidak seperti biasa-nya, tetapi kalau sama aja mereka malah diam aja.....bahkan kalau bagus aksesnya malah adem ayem aja....cuman tetap harus di monitoring aja

    orang IT menilai pake teorinya tp orang awam menilai brdasarkan fakta , di tempat saya smua user pngn akses yg cpat + murah soalnya penggila DL/idm smua tuh makanya saya terapin sistem UP TO + HTB/PCQ trus di bagi kategori pahe,reguler & premium, kalo diterapin limitasi L7 pasti lari smua user saya , dilema jg sih saya wkwkwkwkw tp , so far so goooood & user smua puas saya pun tidur enak .. wkwkwkwk

  5. #20
    Status
    Offline
    manakautau's Avatar
    Member
    Join Date
    Aug 2010
    Location
    Pedalaman Hutan Kalimantan tengah
    Posts
    175
    Reviews
    Read 0 Reviews
    Downloads
    7
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by smartbonny Click here to enlarge
    orang IT menilai pake teorinya tp orang awam menilai brdasarkan fakta , di tempat saya smua user pngn akses yg cpat + murah soalnya penggila DL/idm smua tuh makanya saya terapin sistem UP TO + HTB/PCQ trus di bagi kategori pahe,reguler & premium, kalo diterapin limitasi L7 pasti lari smua user saya , dilema jg sih saya wkwkwkwkw tp , so far so goooood & user smua puas saya pun tidur enak .. wkwkwkwk
    hehehe ternyata bro, pake system HTB PCQ juga yaaa....ane juga menerapkan demikian, awalnya juga pake L7....tapi tak pikir kasihan user, kalau pas 1 user dominan pake dan seneng dw aja....waach pelanggan ane cuman dia aja.....Click here to enlarge

  6. #21
    Status
    Offline
    adiputrolds's Avatar
    Forum Guru
    Join Date
    Oct 2008
    Posts
    1,485
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Introduction

    L7-filter is a packet classifier for Linux. Unlike most other classifiers, it does not just look at simple values such as port numbers. Instead, it does regular expression matching on the application layer data to determine what protocols are being used.

    Since this classifier is much more processor and memory intensive than others, we recommend that you only use it if you have reason to believe that matching by port (or IP number, etc.) is insufficient for your purposes. L7-filter is right for you if you need:

    1. to match any protocol that uses unpredictable ports (e.g. peer-to-peer file sharing)
    2. to match traffic on non-standard ports (e.g. web traffic on port 1111)
    3. to distinguish between protocols which share a port (e.g. peer-to-peer file sharing that uses port 80)

    tambahan dari wiki.mikrotik.com :

    layer7-protocol is a method of searching for patterns in ICMP/TCP/UDP streams.

    L7 matcher is collecting first 10 packets of connection or first 2KB of connection and searches for pattern in collected data. If pattern is not found in collected data, matcher is not inspecting further. Allocated memory is freed and protocol is considered as unknown. You should take into account that a lot of connections will significantly increase memory usage. To avoid it add regular firewall matchers to reduce amount of data passed to layer-7 filters.

    Additional requirement is that layer7 matcher must see both directions of traffic (incoming and outgoing). To satisfy this requirement l7 rules should be set in forward chain. If rule is set in input/prerouting chain then the same rule must be set also in output/postrouting chain, otherwise collected data may not be complete resulting in incorrectly matched pattern.


    jadi kesimpulan nya :
    1. gunakan L-7 untuk matching port yang tidak bisa di prediksi seperti : torrent
    2. untuk menangkap traffic yang berjalan, tetapi tidak pada port standard, misalnya web server yang berjalan pada port selain port 80
    3. untuk menangkap traffic torrent , tetapi misalnya berjalan di port 80, dan ini bisa di pisah dengan regex

    pada wiki.mikrotik.com di kasih tau kalo L-7 itu hanya matching pada 10 paket pertama dr suatu connection atau 2KB paket pertama, makanya jika harus menggunakan L-7 tangkap lah 2KB pertama saja , biar gk berat resource mikrotik

    penangkapan regex L-7 bisa di baca pada traffic upstream dan downstream nya, yaitu pada req dan rep

    jadi gunakan L-7 jika memang bener-bener di perlukan, jangan ikut2an orang toh ....
    kalo masih bisa menggunakan static port ya gunakan saja itu ...
    Last edited by adiputrolds; 13-08-2012 at 08:15.

  7. The Following 4 Users Say Thank You to adiputrolds For This Useful Post:


  8. #22
    Status
    Offline
    xXx
    xXx's Avatar
    Member
    Join Date
    Apr 2010
    Location
    H34VEN'S KNOW
    Posts
    137
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by adiputrolds Click here to enlarge

    jadi gunakan L-7 jika memang bener-bener di perlukan, jangan ikut2an orang toh ....
    kalo masih bisa menggunakan static port ya gunakan saja itu ...

    i agree with this one Click here to enlarge , jng cm main copas tnpa riset di jaringan sendiri, sprti apa kbutuhan user,strategi pemasaran rtrw kt, resource RB kt, dll ....

  9. #23
    Status
    Offline
    alehaddad's Avatar
    Baru Gabung
    Join Date
    Jan 2013
    Location
    The Djakarta - On Desktop
    Posts
    6
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    wah masukan yang baik yang perlu diterapkan heheheheheeClick here to enlarge

    kalau ane sie pake L7 buat blokir FB dan social network lainnya.. kalau gk gitu karyawan dikantor pada lehaa lehaaaa alias keasyikan Click here to enlarge

 

 
Page 2 of 2 FirstFirst 12

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 16
    Last Post: 26-03-2013, 11:41
  2. [ASK] kenapa terkadang BW yg harus nya ke client lari nya jadi ke proxy
    By jeffry christopher in forum General Networking
    Replies: 12
    Last Post: 05-06-2012, 20:21
  3. [ASk] Antrian/queue ada di layer brp dalam OSI layer?
    By princess in forum General Networking
    Replies: 1
    Last Post: 28-02-2010, 23:54

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •