Thread: .:.Loadbalance PCC + External Proxy +Automatic by pass Proxy

Originally Posted by mach_hilal

ini mah nyubie master...

bnr2 msh nyubie gan,,,,

Originally Posted by teukurizal

numpang tempatnya mas...., saya ingin menyumbang tutorial..semoga bermanfaat....!!
tutorial ini sdh saya setting di 5 warnet dan berjalan mulus selama 1 bulan ini blm ada keluhan...
ok kita langsung ke TKP.

1. MIKROTIK
- 192.168.88.1/24 interface lan
- 172.19.196.1/24 interface proxy
catatan : modem di set bridge dan di hubungkan ke ether1 dan ether2 di mikrotik

2. PROXY (UBUNTU)
- 172.19.196.100 interface eth0


SETTING SISI MIKROTIK :

/ip address
add address=192.168.88.1/24 broadcast=192.168.88.255 comment="" disabled=no \
interface=lan network=192.168.88.0
add address=172.19.196.1/24 broadcast=172.19.196.255 comment="" disabled=no \
interface=proxy network=172.19.196.0

/interface pppoe-client
add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 comment="" \
dial-on-demand=no disabled=no interface=modem1 max-mru=1480 max-mtu=1480 \
mrru=disabled name=pppoe_1 password=pass dari telkom profile=default \
service-name="" use-peer-dns=no user=login 11111112222@telkom.net

add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 comment="" \
dial-on-demand=no disabled=no interface=modem2 max-mru=1480 max-mtu=1480 \
mrru=disabled name=pppoe_2 password=pass dr telkom profile=default \
service-name="" use-peer-dns=no user=11111113333@telkom.net

/ip firewall mangle
add action=mark-packet chain=forward comment=proxy-HIT-DSCP-12 disabled=no \
dscp=12 new-packet-mark=proxy-hit passthrough=no
add action=mark-connection chain=input comment=\
"PCC-RULE----MARK ALL PPPoE CONN" connection-state=new disabled=no \
in-interface=pppoe_1 new-connection-mark=pppoe1_conn passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new \
disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \
passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no in-interface=pppoe_1 new-connection-mark=\
pppoe1_conn passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no in-interface=pppoe_2 new-connection-mark=\
pppoe2_conn passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \
passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \
passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=pppoe1_conn \
disabled=no new-routing-mark=pppoe_1 passthrough=no
add action=mark-routing chain=output comment="" connection-mark=pppoe2_conn \
disabled=no new-routing-mark=pppoe_2 passthrough=no

/ip firewall mangle
add action=mark-connection chain=prerouting comment=\
"PCC-RULE---- MARK ALL HTTP CONN" connection-state=new disabled=no \
dst-address-type=!local dst-port=80 in-interface=proxy \
new-connection-mark=pr_pppoe_1 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local dst-port=80 in-interface=proxy \
new-connection-mark=pr_pppoe_2 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local dst-port=80 in-interface=\
proxy new-connection-mark=pr_pppoe_1 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local dst-port=80 in-interface=\
proxy new-connection-mark=pr_pppoe_2 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local dst-port=80 in-interface=\
proxy new-connection-mark=pr_pppoe_1 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local dst-port=80 in-interface=\
proxy new-connection-mark=pr_pppoe_2 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp

/ip firewall mangle
add action=mark-connection chain=prerouting comment=\
"PCC-RULE---- MARK ALL NON HTTP CONN" connection-state=new disabled=no \
dst-address-type=!local dst-port=!80 in-interface=lan \
new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local dst-port=!80 \
in-interface=lan new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local dst-port=!80 \
in-interface=lan new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local in-interface=lan new-connection-mark=\
pr_pppoe_11 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/0 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local in-interface=lan new-connection-mark=\
pr_pppoe_21 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/1 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan \
new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan \
new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local in-interface=lan \
new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local in-interface=lan \
new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=udp

/ip firewall mangle

add action=mark-packet chain=forward comment="PCC-RULE---- MARK-HTTP" \
connection-mark=pr_pppoe_1 disabled=no new-packet-mark=http_pppoe1_pkt \
passthrough=no
add action=mark-packet chain=forward comment="" connection-mark=pr_pppoe_2 \
disabled=no new-packet-mark=http_pppoe2_pkt passthrough=no
add action=mark-routing chain=prerouting comment=\
"PCC-RULE----MARK HTTP ROUTE" connection-mark=pr_pppoe_1 disabled=no \
new-routing-mark=pppoe_1 passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=\
pr_pppoe_2 disabled=no new-routing-mark=pppoe_2 passthrough=yes
add action=mark-routing chain=prerouting comment=\
"PCC-RULE----MARK NON HTTP ROUTE" connection-mark=pr_pppoe_11 disabled=no \
new-routing-mark=pppoe_1 passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=\
pr_pppoe_21 disabled=no new-routing-mark=pppoe_2 passthrough=yes

/ip firewall mangle
add action=mark-connection chain=prerouting comment="POKER + POINT BLANK" \
disabled=no dst-address-list="Poker + PB" dst-port=49100 \
new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-list="Poker + PB" dst-port=40000-40010 new-connection-mark=\
"Trafik PB + POKER" passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-list="Poker + PB" dst-port=39190 new-connection-mark=\
"Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=\
"Trafik PB + POKER" disabled=no new-packet-mark="PB + Poker" passthrough=\
yes
add action=mark-routing chain=prerouting comment=\
"ROUTING POKER + POINT BLANK" connection-mark="Trafik PB + POKER" \
disabled=no dst-address-list="Poker + PB" in-interface=lan \
new-routing-mark="Poker + PB" passthrough=no src-address=192.168.88.0/24
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment=\
"SCANNER POKER + POINT BLANK" disabled=no dst-port=843 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment="" disabled=no dst-port=\
9339 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment="" disabled=no dst-port=\
39190 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment="" disabled=no dst-port=\
49100 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment="" disabled=no dst-port=\
40000-40010 protocol=tcp

/ip firewall nat
add action=masquerade chain=srcnat comment=MASQUERADE1 disabled=no \
out-interface=pppoe_1
add action=masquerade chain=srcnat comment=MASQUERADE2 disabled=no \
out-interface=pppoe_2
add action=masquerade chain=srcnat comment=MASQUERADE3 disabled=no \
out-interface=proxy
add action=dst-nat chain=dstnat comment=TRANSPARENT-DNS disabled=no dst-port=\
53 in-interface=lan protocol=udp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=lan protocol=tcp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=proxy protocol=udp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=proxy protocol=tcp to-ports=53
add action=dst-nat chain=dstnat comment=TRANSPARENT-proxy disabled=no \
dst-address-list=!proxyNET dst-port=80,8080,3128 in-interface=lan \
protocol=tcp to-addresses=172.19.196.100 to-ports=3128

/ip firewall address-list

add address=192.168.88.0/24 disabled=no list=lanNET
add address=172.19.196.0/24 disabled=no list=proxyNET

/ip route
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=pppoe_1 routing-mark=pppoe_1 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=2 dst-address=\
0.0.0.0/0 gateway=pppoe_1 routing-mark=pppoe_1 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=pppoe_2 routing-mark=pppoe_2 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=2 dst-address=\
0.0.0.0/0 gateway=pppoe_2 routing-mark=pppoe_2 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=pppoe_1 routing-mark="Poker + PB" scope=30 \
target-scope=10
add check-gateway=ping comment="" disabled=no distance=2 dst-address=\
0.0.0.0/0 gateway=pppoe_2 routing-mark="Poker + PB" scope=30 \
target-scope=10
add check-gateway=ping comment=Default-Route-pppoe1-Distance-1 disabled=no \
distance=1 dst-address=0.0.0.0/0 gateway=pppoe_1 scope=30 target-scope=10
add check-gateway=ping comment=Default-Route-pppoe2-Distance-2 disabled=no \
distance=2 dst-address=0.0.0.0/0 gateway=pppoe_2 scope=30 target-scope=10


ok....kita lanjut pada sesi ubuntu nya

salah room cuy

di liat dari rulenya keq nya hasil copy paste

■ Lebih baik coba buat thread tersendiri jika emang tuts nya belum ada yg buat dan bermanfaat gw rasa bakalan di approve.

Originally Posted by donipermono1982

salah room cuy

di liat dari rulenya keq nya hasil copy paste

■ Lebih baik coba buat thread tersendiri jika emang tuts nya belum ada yg buat dan bermanfaat gw rasa bakalan di approve.

kyk pernah ketik itu tutz y mas doni,,,,,

Originally Posted by donipermono1982

salah room cuy

di liat dari rulenya keq nya hasil copy paste

■ Lebih baik coba buat thread tersendiri jika emang tuts nya belum ada yg buat dan bermanfaat gw rasa bakalan di approve.

sabar2 boss

Originally Posted by teukurizal

numpang tempatnya mas...., saya ingin

ok....kita lanjut pada sesi ubuntu nya

semoga niat baiknya bisa dipahami kita semua...dan kalau bagus semoga moderator menaruhnya ditempat yang layak...

makin banyak ilmu, makin berbagi...saya rasa bangsa ini akan makin maju.

emang mantab bener nich settingan...
ini baru running 2 jam dah jelas trafik dari proxyna



maju trusss mas Doni Permono

Originally Posted by mach_hilal

semoga niat baiknya bisa dipahami kita semua...dan kalau bagus semoga moderator menaruhnya ditempat yang layak...



makin banyak ilmu, makin berbagi...saya rasa bangsa ini akan makin maju.

sep. semoga di berikan jalan benar

Originally Posted by aankoe

emang mantab bener nich settingan...
ini baru running 2 jam dah jelas trafik dari proxyna



maju trusss mas Doni Permono

makasih ya bro review nya.. izin taro di pajwan iahhh

Originally Posted by aankoe

sabar2 boss

iya bro masuk mata kiri keluar mata kanan

Originally Posted by teukurizal

baca2 tutz disini juga mas

abis koneksi, dikasih mangle seabrek2.... pusing jadinya

Dah coba n sukses makasih bngt buat mas doni cuman saya masih punya kendala pada bagian queuetree nya bisa gak ya di gabung ama queuetree model pisah download n brosing.... pakek rule yang lama sebelum di lb jalan ketika di LB gak jalan mohon bantuan para master2 n suhu2 ...

sapa berani coba ......

Originally Posted by dionipe

abis koneksi, dikasih mangle seabrek2.... pusing jadinya

apalagi LB punya om dionipe simple dan uniq ... pusing juga gw

Originally Posted by wedush1234

Dah coba n sukses makasih bngt buat mas doni cuman saya masih punya kendala pada bagian queuetree nya bisa gak ya di gabung ama queuetree model pisah download n brosing.... pakek rule yang lama sebelum di lb jalan ketika di LB gak jalan mohon bantuan para master2 n suhu2 ...

mm, coba settingannya di gelar di mare...kali aja ada yg mau bantu..



bantu doa

Originally Posted by donipermono1982

apalagi LB punya om dionipe simple dan uniq ... pusing juga gw

bantu doa

xixixixixi

Originally Posted by dionipe

xixixixixi

/ip firewall mangle


add action=mark-connection chain=prerouting comment="POKER + POINT BLANK" disabled=no dst-address-list="Poker + PB" \
dst-port=49100 new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-list="Poker + PB" dst-port=40000-40010 \
new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-list="Poker + PB" dst-port=39190 \
new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark="Trafik PB + POKER" disabled=no new-packet-mark=\
"PB + Poker" passthrough=yes
add action=mark-routing chain=prerouting comment="ROUTING POKER + POINT BLANK" connection-mark="Trafik PB + POKER" \
disabled=no dst-address-list="Poker + PB" in-interface=lan new-routing-mark="Poker + PB" passthrough=no \
src-address=192.168.88.0/24
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment=\
"SCANNER POKER + POINT BLANK" disabled=no dst-port=843 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=9339 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=39190 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=49100 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=40000-40010 protocol=tcp



tutz-nya saya lihat membebani pada 1 jalur saja.....krn warnet ku 3 line dan semua client main Poker dan PB. maka hanya line 1 saja yg sesak..sedangkan line lain jadi sia2. mohon pencerahannya mas ...tq

Originally Posted by teukurizal

/ip firewall mangle


add action=mark-connection chain=prerouting comment="POKER + POINT BLANK" disabled=no dst-address-list="Poker + PB" \
dst-port=49100 new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-list="Poker + PB" dst-port=40000-40010 \
new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-list="Poker + PB" dst-port=39190 \
new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark="Trafik PB + POKER" disabled=no new-packet-mark=\
"PB + Poker" passthrough=yes
add action=mark-routing chain=prerouting comment="ROUTING POKER + POINT BLANK" connection-mark="Trafik PB + POKER" \
disabled=no dst-address-list="Poker + PB" in-interface=lan new-routing-mark="Poker + PB" passthrough=no \
src-address=192.168.88.0/24
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment=\
"SCANNER POKER + POINT BLANK" disabled=no dst-port=843 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=9339 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=39190 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=49100 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=40000-40010 protocol=tcp



tutz-nya saya lihat membebani pada 1 jalur saja.....krn warnet ku 3 line dan semua client main Poker dan PB. maka hanya line 1 saja yg sesak..sedangkan line lain jadi sia2. mohon pencerahannya mas ...tq

sori bosss, ane bukan ahlinya PCC, tanya ma TS aja, mungkin ada pencerahan.

Originally Posted by teukurizal

/ip firewall mangle


add action=mark-connection chain=prerouting comment="POKER + POINT BLANK" disabled=no dst-address-list="Poker + PB" \
dst-port=49100 new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-list="Poker + PB" dst-port=40000-40010 \
new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-list="Poker + PB" dst-port=39190 \
new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark="Trafik PB + POKER" disabled=no new-packet-mark=\
"PB + Poker" passthrough=yes
add action=mark-routing chain=prerouting comment="ROUTING POKER + POINT BLANK" connection-mark="Trafik PB + POKER" \
disabled=no dst-address-list="Poker + PB" in-interface=lan new-routing-mark="Poker + PB" passthrough=no \
src-address=192.168.88.0/24
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment=\
"SCANNER POKER + POINT BLANK" disabled=no dst-port=843 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=9339 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=39190 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=49100 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" address-list-timeout=0s chain=forward comment="" \
disabled=no dst-port=40000-40010 protocol=tcp



tutz-nya saya lihat membebani pada 1 jalur saja.....krn warnet ku 3 line dan semua client main Poker dan PB. maka hanya line 1 saja yg sesak..sedangkan line lain jadi sia2. mohon pencerahannya mas ...tq

coba buat beberapa address-list agar bisa di distribusikan ke 3 jalur via mangle.