Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Page 1 of 2 12 LastLast
Results 1 to 15 of 24
  1. #1
    Status
    Offline
    jayeng's Avatar
    Newbie
    Join Date
    Jun 2010
    Location
    jawa tengah
    Posts
    21
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Help LOSS bandwidth dari proxy untuk Topologi kaya gini ....

    Bismillah ...

    topologi :
    modem 1-----RB load balancing----RB distribusi----LAN
    modem 2----- | Ext Proxy |

    nubie lagi belajar proxy HIT, mohon bimbingan dari master2 forummikrotik.
    Dengan topologi di atas, dimana saya harus meletakkan mangle yang benar untuk proxy HIT? di RB load balancing ataukah RB distribusi? untuk saat ini bw management RB distribusi pakai simple queue untuk tiap klien, sudah saya coba tutorial2 yang ada di forum untuk Hit Proxy+Loss bandwidth dari proxy ke klien. Untuk trafik proxy HIT sudah ketangkep, tapi bandwidth ke klien masih tetep kelimit oleh simple queue. Mohon beri pencerahan..... Click here to enlarge
    matur tengkiyu sebelumnya untuk saran apapun dari master semua....Click here to enlarge
    Last edited by jayeng; 14-05-2012 at 00:35.

  2. #2
    Status
    Offline
    Anto.PJ's Avatar
    Forum Guru
    Join Date
    May 2011
    Location
    macz
    Posts
    1,696
    Reviews
    Read 0 Reviews
    Downloads
    7
    Uploads
    0
    Feedback Score
    0
    bisa dijelaskan rb apa yang digunakan?? (pada router LB dan router distribusi)

    kalo dari ane, baiknya di tempatkan pada router LB saja.. (core router)

    Code:
    inet1---
            |
    inet2--Router1===Router2
            ||
           Proxy
    ntar dirouter 2 dikasih mangle seperti ini
    (jika proxy support ZPH, tos = 0x30)
    Code:
    ip firewall mangle
    chain=postrouting out-interface=LAN dscp=12 action=mark-packet new-packet-mark=HIT
    jika di mangle tidak dilakukan marking packet untuk tiap klien, maka rule ini bebas ditaruh di urutan mana saja
    tapi jika client-packet-marking dilakukan, maka urutannya setidaknya ditaruh sebelum marking packet klien

    dan buatkan rule di queue tree
    Code:
    parent=global-out packet-mark=HIT
    mau dilimit berapa pun ga masalah

    dan untuk memaksimalkan troughput proxy ke client
    Code:
    ip firewall mangle
    chain=prerouting in-interface=LAN dst-port=80 action=mark-packet new-packet-mark=to-proxy
    queue tree
    Code:
    parent=global-in packet-mark=to-proxy max-limit=10m
    :3

  3. #3
    Status
    Offline
    dhopack's Avatar
    Forum Guru
    Join Date
    Dec 2010
    Location
    KUDUS
    Posts
    1,919
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by Anto.PJ Click here to enlarge
    ...
    dan untuk memaksimalkan troughput proxy ke client
    ...
    maaf om anto bisa dijelaskan lagi tentang rule tersebut?masih blm ngeh nih hehehe
    thx b4 Click here to enlarge

  4. #4
    Status
    Offline
    Anto.PJ's Avatar
    Forum Guru
    Join Date
    May 2011
    Location
    macz
    Posts
    1,696
    Reviews
    Read 0 Reviews
    Downloads
    7
    Uploads
    0
    Feedback Score
    0
    karena TS pakai simple queue (dimana uploadnya jg musti dibatasi) maka pastinya ack dan syn ke proxy juga dibatasi,,

    pernah lihat hit mampet cuma di 40-50 Mbps?? g mau naik2??

    mangle itu akan membypass dst-port 80..
    karena router LB sudah men-dst-nat kan port 80 ke proxy, maka akses ke port 80 = akses ke port 3128(asumsi port proxy)

  5. The Following User Says Thank You to Anto.PJ For This Useful Post:


  6. #5
    Status
    Offline
    jayeng's Avatar
    Newbie
    Join Date
    Jun 2010
    Location
    jawa tengah
    Posts
    21
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by Anto.PJ Click here to enlarge
    bisa dijelaskan rb apa yang digunakan?? (pada router LB dan router distribusi)

    kalo dari ane, baiknya di tempatkan pada router LB saja.. (core router)
    untuk LB dan distribusi pake RB 493 semua mas.
    RB Load balancing buat speedy1, speedy 2, speedy 3 dan proxy (centos 5.4 squid 2.7 stable9)
    RB distribusi untuk ke LAN 25 klien dan hotspot

    Mangle di router Load balancing :
    Flags: X - disabled, I - invalid, D - dynamic
    0 ;;; conn-gameonline
    chain=prerouting action=mark-connection new-connection-mark=conn-game
    passthrough=yes connection-state=new protocol=udp
    dst-address-list=!lokal-net in-interface=ether1-distribusi
    dst-port=40000-40010

    1 ;;; conn-gameonline
    chain=prerouting action=mark-connection new-connection-mark=conn-game
    passthrough=yes connection-state=new protocol=tcp
    dst-address-list=!lokal-net in-interface=ether1-distribusi
    dst-port=39190

    2 chain=prerouting action=mark-routing new-routing-mark=route-game
    passthrough=no in-interface=ether1-distribusi connection-mark=conn-game

    3 ;;; conn-speedy2
    chain=prerouting action=mark-connection new-connection-mark=conn-speedy2
    passthrough=yes connection-state=new dst-address-list=!lokal-net
    in-interface=ether1-distribusi nth=2,1

    4 chain=prerouting action=mark-routing new-routing-mark=route-http2
    passthrough=no in-interface=ether1-distribusi

    4 chain=prerouting action=mark-routing new-routing-mark=route-http2
    passthrough=no in-interface=ether1-distribusi
    connection-mark=conn-speedy2

    5 ;;; conn-speedy3
    chain=prerouting action=mark-connection new-connection-mark=conn-speedy3
    passthrough=yes connection-state=new dst-address-list=!lokal-net
    in-interface=ether1-distribusi nth=1,1

    6 chain=prerouting action=mark-routing new-routing-mark=route-http3
    passthrough=no in-interface=ether1-distribusi
    connection-mark=conn-speedy3

    7 ;;; conn-speedy2
    chain=prerouting action=mark-connection new-connection-mark=conn-speedy2
    passthrough=yes connection-state=new dst-address-list=!lokal-net
    in-interface=ether9-proxy nth=2,1

    8 chain=prerouting action=mark-routing new-routing-mark=route-http2
    passthrough=no in-interface=ether9-proxy connection-mark=conn-speedy2

    9 ;;; conn-speedy3
    chain=prerouting action=mark-connection new-connection-mark=conn-speedy3
    passthrough=yes connection-state=new dst-address-list=!lokal-net
    in-interface=ether9-proxy nth=1,1

    10 chain=prerouting action=mark-routing new-routing-mark=route-http3
    passthrough=no in-interface=ether9-proxy connection-mark=conn-speedy3

    11 chain=prerouting action=accept

    sedang untuk RB distrubusi mangle masih kosong.

    thanks sarannya bro Anto, setelah saya coba praktek, kenapa hasilnya masih sama ya? donload kedua file yang sama tetep kelimit simple queue...
    Click here to enlarge
    Last edited by jayeng; 14-05-2012 at 20:15.

  7. #6
    Status
    Offline
    Anto.PJ's Avatar
    Forum Guru
    Join Date
    May 2011
    Location
    macz
    Posts
    1,696
    Reviews
    Read 0 Reviews
    Downloads
    7
    Uploads
    0
    Feedback Score
    0
    mm.. maksud saya

    proxy di taruh di router LB

    dan manglenya(yang aku kasih) ditaruh di router distribusi

    simple queue di router distribusi kan??

  8. #7
    Status
    Offline
    jayeng's Avatar
    Newbie
    Join Date
    Jun 2010
    Location
    jawa tengah
    Posts
    21
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    emang topologinya proxy di taruh di LB mas, n bandwidth management ada di distribusi, petunjuknya udah saya praktekkan mas, tapi masih kelimit sesuai jatah simple que walau trafik HIT udah ketangkep. Masih bingung neh salahnya di mana...
    ada saran yang lain mas? atau ada faktor lain di setingan router saya yang bikin gak bisa loss?
    kalau seting simple queue gak pake model parent, apakah itu juga pengaruh ke Loss proxy nya? Click here to enlarge mohon petunjuk lagi mas....

  9. #8
    Status
    Offline
    Anto.PJ's Avatar
    Forum Guru
    Join Date
    May 2011
    Location
    macz
    Posts
    1,696
    Reviews
    Read 0 Reviews
    Downloads
    7
    Uploads
    0
    Feedback Score
    0
    berarti proxy-nya gak support zph :3 musti patch

    ---------- Post added at 22:29 ---------- Previous post was at 22:21 ----------

    [/COLOR]eh.. trafik hit sudah ketangkap ya??

    ganti mangle tadi
    Code:
    ip firewall mangle
    chain=postrouting out-interface=LAN dscp=12 action=mark-packet new-packet-mark=HIT
    menjadi

    Code:
    ip firewall mangle
    chain=postrouting dst-address-list=lokal-net dscp=12 action=mark-packet new-packet-mark=HIT
    atau
    Code:
    ip firewall mangle
    chain=forward dst-address-list=lokal-net dscp=12 action=mark-packet new-packet-mark=HIT
    Last edited by Anto.PJ; 15-05-2012 at 02:14. Reason: ngondek

  10. #9
    Status
    Offline
    jayeng's Avatar
    Newbie
    Join Date
    Jun 2010
    Location
    jawa tengah
    Posts
    21
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge
    praktek lagi......sampai bisa.... Click here to enlarge

    thanks brader ...

  11. #10
    Status
    Offline
    Anto.PJ's Avatar
    Forum Guru
    Join Date
    May 2011
    Location
    macz
    Posts
    1,696
    Reviews
    Read 0 Reviews
    Downloads
    7
    Uploads
    0
    Feedback Score
    0
    mm chek lagi proxynya..
    karena banyak yang bilang, no pic = hoax
    rule yang sama aku terapkan di routernya.. ngga tau.. lupa.. :3

     

    Click here to enlarge

    queue simple jebol.. ini ruter paktani.. :3


    dan untuk om dhopack, hasil maksimal troughput sekuat alat..
     

    Click here to enlarge
    Last edited by Anto.PJ; 15-05-2012 at 02:43.

  12. #11
    Status
    Offline
    jayeng's Avatar
    Newbie
    Join Date
    Jun 2010
    Location
    jawa tengah
    Posts
    21
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by Anto.PJ Click here to enlarge
    ganti mangle tadi
    Code:
    ip firewall mangle
    chain=postrouting out-interface=LAN dscp=12 action=mark-packet new-packet-mark=HIT
    menjadi

    Code:
    ip firewall mangle
    chain=postrouting dst-address-list=lokal-net dscp=12 action=mark-packet new-packet-mark=HIT
    atau
    Code:
    ip firewall mangle
    chain=forward dst-address-list=lokal-net dscp=12 action=mark-packet new-packet-mark=HIT
    manglenya udah tak terapin di RB distribusi bro..trafik ketangkep, tapi tiap donlod file yang sama kedua kalinya masih tetep gak bisa loss dari proxy, mentok kelimit simple queue RB distribusi, padahal file yang didonlod masih di bawah maximal object size di cache squidnya jadi harusnya file udah ke cache kan bro?. atau mungkin ada mangle yang harus dirubah di LB nya atau malah ada yang salah di sisi squidnya bro?
    Click here to enlarge dah seminggu gak bisa2...
    please donk sarannya....master2 semua... Click here to enlarge
    Last edited by jayeng; 20-05-2012 at 23:57.

  13. #12
    Status
    Offline
    ucok_karnadi's Avatar
    ..:: Masih Bodoh ::..
    Join Date
    Jan 2009
    Location
    PATI - JAWA TENGAH
    Posts
    1,187
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    sini saya settingkan gratis untuk loss proxy HIT, tanpa minta yg lain loh ya Click here to enlarge, dan betul adanya bahwa anda minta di loss Click here to enlarge

    untuk rekan rekan lain jangan Click here to enlarge yach Click here to enlarge
    Click here to enlarge
    Last edited by ucok_karnadi; 21-05-2012 at 00:43.
    ___________________________________________


  14. #13
    Status
    Offline
    Anto.PJ's Avatar
    Forum Guru
    Join Date
    May 2011
    Location
    macz
    Posts
    1,696
    Reviews
    Read 0 Reviews
    Downloads
    7
    Uploads
    0
    Feedback Score
    0
    wah.. ada om udin Click here to enlarge Click here to enlarge

  15. #14
    Status
    Offline
    dhopack's Avatar
    Forum Guru
    Join Date
    Dec 2010
    Location
    KUDUS
    Posts
    1,919
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by jayeng Click here to enlarge
    ...tapi tiap donlod file yang sama kedua kalinya masih tetep gak bisa loss dari proxy, ...
    apa mungkin proxy blm/tidak ngecache file hasil downld td?
    trs misal kalo mangle HITnya gak dikasih dst-address-list gmn?jadi hanya dcsp=12 yang di mangling lalu dilempar ke queue,
    CMIIW hehehe Click here to enlarge

  16. #15
    Status
    Offline
    chabyiolue's Avatar
    Member
    Join Date
    Feb 2010
    Posts
    228
    Reviews
    Read 0 Reviews
    Downloads
    9
    Uploads
    0
    Feedback Score
    0
    Simak ... ah sapa tau ada ilmu yg tumpah heheh

 

 
Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Bandwidth dedicated dari ISP tapi kok kaya share?
    By yzx in forum General Networking
    Replies: 35
    Last Post: 21-04-2012, 01:26
  2. dhcp kok bisa yaa kaya gini
    By vivisiska in forum General Networking
    Replies: 1
    Last Post: 30-01-2009, 12:46
  3. [ASK] Pernah kejadian kaya Gini Mikrotiknya?
    By fufu in forum Beginner Basics
    Replies: 12
    Last Post: 22-01-2008, 21:12
  4. [help]klo skenarionya kaya gini gimana ya ??
    By kura in forum General Networking
    Replies: 4
    Last Post: 23-07-2007, 16:45

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •