[ask] load balancing over multiply gateway + proxy cache

Printable View

Show 40 post(s) from this thread on one page

03-01-2008, 10:56
dot

load balancing over multiply gateway + proxy cache

para master mikrotik..
kemaren saya coba load balancing over multiple gateway pake 2 koneksi speedy

untuk gambaran topologi jaringan

mikrotik dengan 3 lan
ip address : 192.168.1.100 (eth name lokal)---->> konek ke switch
ip address : 192.168.2.1 (eth name modem1)---->> konek ke modem1 dgn ip 192.168.2.100
ip address : 192.168.3.1 (eth name modem2)---->> konek ke modem2 dgn ip 192.168.3.100

16 komputer
IP address client range 192.168.1.1 - 192.168.1.15
IP address komputer operator 192.168.1.200

sebelumnya nyoba ngutek2 load balancing, yang pake nth, tapi kok koneksinya gk stabil, sering putus2, malah lebih cepet pake 1 koneksi.

akhirnya dari pada pusing2 dan dikejar sama waktu saya pecah koneksinya
group1 : range IP 192.168.1.1 - 192.168.1.7 --->> ikut modem1
group2 : range IP 192.168.1.8 - 192.168.1.15 ---->> ikut modem2

untuk gambaran script nya

/ip firewall mangle

add chain=prerouting src-address=192.168.1.0/29 in-interface=lokal action=mark-connection new-connection-mark=group1 passthrough=yes disable=no comment="Group 1"

add chain=prerouting src-address=192.168.1.0/29 in-interface=lokal connection-mark=group1 action=mark-routing new-routing-mark=group1 passthrough=no disable=no

add chain=forward src-address=192.168.1.0/29 connection-mark=group1 action=mark-packet new-packet-mark=group1 passthrough=no disable=no

add chain=prerouting src-address=192.168.1.8/29 in-interface=lokal action=mark-connection new-connection-mark=group2 passthrough=yes disable=no comment="Group 2"

add chain=prerouting src-address=192.168.1.8/29 in-interface=lokal connection-mark=group2 action=mark-routing new-routing-mark=group2 passthrough=no disable=no

add chain=forward src-address=192.168.1.8/29 connection-mark=group2 action=mark-packet new-packet-mark=group2 passthrough=no disable=no

add chain=prerouting src-address=192.168.1.200 in-interface=lokal action=mark-connection new-connection-mark=operator passthrough=yes disable=no comment="Operator"

add chain=prerouting src-address=192.168.1.200 in-interface=lokal connection-mark=operator action=mark-routing new-routing-mark=operator passthrough=no disable=no

add chain=forward src-address=192.168.1.200 connection-mark=operator action=mark-packet new-packet-mark=group2 passthrough=no disable=no

/ip firewall nat

add chain=srcnat src-address=192.168.1.0/24 action=masquerade disable=no

/ip routing

add gateway=192.168.2.100 routing-mark=group1

add gateway=192.168.3.100 routing-mark=group2

add gateway=192.169.2.100,192.168.3.100 routing-mark=operator

untuk pembagian bandwith

/queue type

add name=pcq-down kind=pcq pcq-classifier=dst-address

add name=pcq-up kind=pcq pcq-classifier=src-address

/queue tree

add name=down_group1 parent=global-in packet-mark=group1 queue-type=pcq-down priority=1

add name=up_group1 parent=global-out packet-mark=group1 queue-type=pcq-up priority=1

add name=down_group2 parent=global-in packet-mark=group2 queue-type=pcq-down priority=1

add name=up_group2 parent=global-out packet-mark=group2 queue-type=pcq-up priority=1

/queue simple

add name=queue1 target-addresses=192.168.1.1 interface=all priority=8 queue=pcq-up/pcq-down
.
.
.
dst sampe 15 client....

yang jadi masalah gmana cara bikin cache proxy nya...
emang sih katanya proxy bawaan mikrotik kurang bagus, tapi ada fasilitasnya kenapa gk dimanfaatin :D

mohon penjelasan para master2 yang udah pernah nyoba donk
03-01-2008, 13:26
singgahpai

di aktifkan aja web proxynya via menu Ip--> Web-Proxy

Code:

/ip web-proxy set cache-administrator=webmaster@vilanusain dah.com cache-drive=system port=8080 max-cache-size=2000000 max-ram-cache-size=5 12000 max-object-size=4096 hostname=proxy.vilanusaindah.com src-address=0.0.0.0 transparent-proxy=yes enabled=yes

http://www.forummikrotik.com/images/...inboxJPG-1.jpg
03-01-2008, 16:25
dot

Quote:

Originally Posted by singgahpai

di aktifkan aja web proxynya via menu Ip--> Web-Proxy

sudah tuh, tapi klo dibuat browing gk bisa. keliatannya ada yang harus ditambahin mangle nya.
04-01-2008, 10:38
lonthong2002

paste ip firewall nat nya di sini dong..

soalnya yg di atas sepertinya masih belum ada nat untuk belokin port 80 ke port proxy nya

coba tambahin ini di firewall nat nya

chain=dstnat in-interface=(LAN) protocol=tcp action=redirect to-ports=(port proxy)

:th_victory::th_victory::th_victory:
07-01-2008, 10:20
dot

script yang diatas emang gk pake proxy, cuma di masquerade aja, semua normal dan jalan lancar..

klo saya aktifin web-proxy nya dan dibelokin port 80 ke proxy

Code:

/ip firewall nat chain=dstnat src-address=192.168.1.0/24 in-interface=lokal protocol=tcp dst-port=80 action=redirect to-port=8080

terus saya udah coba

Code:

/ip firewall nat chain=dstnat src-address=192.168.1.7/29 in-interface=lokal protocol=tcp dst-port=80 action=redirect to-port=8080 chain=dstnat src-address=192.168.1.8/29 in-interface=lokal protocol=tcp dst-port=80 action=redirect to-port=8080

juga tetep gak mau
dibuat browsing jadi gak bisa.

ERROR
The requested URL could not be retrieved.
while trying to retrieve the URL dst.....

kenapa ya

:th_surrend:
07-01-2008, 11:43
singgahpai

Status web-proxynya sudah running mas?
atau settingan web-proxynya ada yang miss mungkin..?
:th_explain:
07-01-2008, 12:13
dot

Quote:

Originally Posted by singgahpai

Status web-proxynya sudah running mas?
atau settingan web-proxynya ada yang miss mungkin..?
:th_explain:

sudah running....

dan di nat nya ada traffic yang lewat.

di browsernya ada error

ERROR
The requested URL could not be retrieved.
while trying to retrieve the URL: http://www.google.com

the following error was encountered:

Connection Failed

the system returned:

(110) connection timed out

the remote host or network may be down. please try request again.
your cache administrator is webmaster.

generated mon, 31 Des 2007 18:00:00 GMT by proxy.mikrotik.net (squid/2.5.STABLE11)

:th_about_to_cry:
07-01-2008, 12:36
lonthong2002

@dot... setau saya sih memang kalau routernya dipakai load balancing . proxy gak bisa aktif ( karena kalau aktif load balancing nya gak bakal jalan)

jadi saran saya sih harus pake 2 mesin dech...
yg satu khusus load balancing dan management bw
untuk proxy nya diarahin ke mesin lain :th_boy::th_boy::th_boy:
07-01-2008, 17:23
Akangage

Iya, kalo load balance Web Proxy Internal ga bisa dipake, harus pake mesin lain buat jadi proxy :th_cry3: (jadi ga bisa irit.... nambah unit lagi)
09-01-2008, 14:06
dot

ya.... sayang banget donk klo proxy internalnya gak bisa dipake :th_cry2:

thx infonya deh bro
10-01-2008, 15:20
sacilad

ooo gituuu
14-01-2008, 02:10
hendysw

dulu pernah ngobrol ama yang jaga warnet, katanya kalau pake router mt dan proxy nya running, setiap 3 hari atau 4 hari server nya hang.
setelah dimatikan dan start ulang baru bisa.
apa karena proxy nya blom di flush?

saya liat di internet ad yang auto flush, tapi blom ngerti.
gimana caranya ya?

oya, kalau router nya cuman punya RAM 128mb dan storage total 1gb, setting nya gimana ya?

apakah max cache size 700000 dan max ram cache size 64?

mohon pencerahannya.
14-01-2008, 02:55
john_0ng80

nga ah
sekarang aku pake 2 modem load balancing with fail over trus pake web proxy jalan aman2 aja tuh
14-01-2008, 10:21
dot

Quote:

Originally Posted by john_0ng80

nga ah
sekarang aku pake 2 modem load balancing with fail over trus pake web proxy jalan aman2 aja tuh

kasih tau donk script nya load balancing pake web proxy :th_angel:
jadi penasaran nih...
31-03-2008, 10:57
monoxs

Quote:

Originally Posted by john_0ng80

nga ah
sekarang aku pake 2 modem load balancing with fail over trus pake web proxy jalan aman2 aja tuh

kalua bis abagi bagi donk ilmua gimana cara nya

Show 40 post(s) from this thread on one page