Thread: The NEW LoadBalance!! More Powerfull -TESTED-

tolong di ingatkan kang pengikut mu yang pelupa ini

maaf save dulu tutz ini hahaha

sama izin save yah Kang ni Tuts

loh si akang mana nih?

Youtube ok download ok

Pokernya putus2.... tiap kali ganti server reconak terus? ada yang bisa bantu???????

Originally Posted by sutamikurniawan

Youtube ok download ok

Pokernya putus2.... tiap kali ganti server reconak terus? ada yang bisa bantu???????

bagian conn-mark prerouting pake protocol=tcp port=80

Malah mati total

ip fire mangle pr det
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; LB With per-connection-classifier 4Line
chain=input action=mark-connection new-connection-mark=BB-1
passthrough=yes connection-state=new in-interface=ether1

1 chain=input action=mark-connection new-connection-mark=BB-2
passthrough=yes connection-state=new in-interface=ether2

2 chain=output action=mark-routing new-routing-mark=jalur-1 passthrough=no
connection-mark=BB-1

3 chain=output action=mark-routing new-routing-mark=jalur-2 passthrough=no
connection-mark=BB-2

4 ;;; per-connection-classifier
chain=prerouting action=mark-connection new-connection-mark=BB-1
passthrough=yes dst-address-type=!local in-interface=LAN
per-connection-classifier=both-addresses-and-ports:2/0

5 chain=prerouting action=mark-connection new-connection-mark=BB-2
passthrough=yes dst-address-type=!local in-interface=LAN
per-connection-classifier=both-addresses-and-ports:2/1

6 chain=prerouting action=mark-routing new-routing-mark=jalur-1
passthrough=yes in-interface=LAN connection-mark=BB-1

7 chain=prerouting action=mark-routing new-routing-mark=jalur-2
passthrough=yes in-interface=LAN connection-mark=BB-2

ip route pr det
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
0 A S dst-address=0.0.0.0/0 gateway=61.247.42.129 gateway-status=61.247.42.129 reachable ether1 distance=1 scope=30 target-scope=10 routing-mark=jalur-1

1 S dst-address=0.0.0.0/0 gateway=61.247.42.129 gateway-status=61.247.42.129 reachable ether1 distance=2 scope=30 target-scope=10 routing-mark=jalur-1

2 A S dst-address=0.0.0.0/0 gateway=192.0.88.1 gateway-status=192.0.88.1 reachable ether2 distance=1 scope=30 target-scope=10 routing-mark=jalur-2

3 S dst-address=0.0.0.0/0 gateway=192.0.88.1 gateway-status=192.0.88.1 reachable ether2 distance=2 scope=30 target-scope=10 routing-mark=jalur-2

4 ADS dst-address=0.0.0.0/0 gateway=61.247.42.129 gateway-status=61.247.42.129 reachable ether1 distance=0 scope=30 target-scope=10

5 DS dst-address=0.0.0.0/0 gateway=192.0.88.1 gateway-status=192.0.88.1 reachable ether2 distance=1 scope=30 target-scope=10

6 ADC dst-address=61.247.42.128/25 pref-src=61.247.42.244 gateway=ether1 gateway-status=ether1 reachable distance=0 scope=10

7 ADC dst-address=169.20.30.0/24 pref-src=169.20.30.1 gateway=LAN gateway-status=LAN reachable distance=0 scope=10

8 ADC dst-address=192.0.88.0/24 pref-src=192.0.88.100 gateway=ether2 gateway-status=ether2 reachable distance=0 scope=10


hasilnya tetep aja kadang rekonek terussss. klo yang lain maknyoss....

Bro...
Akhirnya gw sukses install mikrotik 2 speedy dengan kondisi LB PCC + hotspot dan external squid.
Smua tutz akang saya kembangkan lagi.
Kalau akang ijinkan, akan segera saya postingkan.
Sekali lagi thx atas tutznya.

Originally Posted by juldian

Bro...
Akhirnya gw sukses install mikrotik 2 speedy dengan kondisi LB PCC + hotspot dan external squid.
Smua tutz akang saya kembangkan lagi.
Kalau akang ijinkan, akan segera saya postingkan.
Sekali lagi thx atas tutznya.

jangan sungkan" boss..
juragan akang pasti setuju dah...
disini bebas posting.. asal menyangkut dengan mikrotik

Originally Posted by sutamikurniawan

yang gagal cuma poker doank.... gimana nih suhu???? sarana belajar tapi klo gak ada yang ngajarin murid juga gak bisa2 nih

bro.. coba dah pisahin aja tuh 1 line... buat pokeran
tangkep semua ip poker na masukin address list,,

Originally Posted by wakumbaba

bro.. coba dah pisahin aja tuh 1 line... buat pokeran
tangkep semua ip poker na masukin address list,,

yang di tanya POKER bukan PB

Alternatif loadbalancing u/ mengatasi penolakan koneksi https:

skenario 1:
memisahkan traffik http dg lainnya. Http menggunakan loadbalancing, traffik lain single gateway dg backup gateway


ip firewall mangle:
11 ;;; http_con
chain=prerouting action=mark-connection new-connection-mark=http_con passthrough=yes connection-state=new protocol=tcp src-address=172.16.1.0/26
dst-port=80

12 ;;; other_else_tcp_con
chain=prerouting action=mark-connection new-connection-mark=other_else_tcp_con passthrough=yes connection-state=new protocol=tcp
src-address=172.16.1.0/26 dst-port=!80

13 ;;; http_route
chain=prerouting action=mark-routing new-routing-mark=http_route passthrough=no connection-mark=http_con

14 ;;; other_else_tcp_route
chain=prerouting action=mark-routing new-routing-mark=other_else_tcp_route passthrough=no connection-mark=other_else_tcp_con

ip route:
add gateway=gateway_cepat,gateway_smart routing-mark=http_route comment=load_balancing_http
add gateway=gateway_cepat routing-mark=other_else_tcp_route check-gateway=ping comment=other_else_tcp
add gateway=gateway_smart routing-mark=other_else_tcp_route distance=2 comment=back_up_gateway_else_tcp

Mikrotik RB 750.

Mohon review konfigurasi dari ane, secara mangle sudah dikenali. Tetapi untuk koneksi https masih trus gagal..

Kenapa ya??

Thx smuanya

Halo agan2 smua,

Gan, kalo https itu kan ga mau trima load balancing, nah ini ane pny konfigurasi buat ngakalin hal itu...

skenario 1:
memisahkan traffik http dg lainnya. Http menggunakan loadbalancing, traffik lain single gateway dg backup gateway


ip firewall mangle:
11 ;;; http_con
chain=prerouting action=mark-connection new-connection-mark=http_con passthrough=yes connection-state=new protocol=tcp src-address=172.16.1.0/26
dst-port=80

12 ;;; other_else_tcp_con
chain=prerouting action=mark-connection new-connection-mark=other_else_tcp_con passthrough=yes connection-state=new protocol=tcp
src-address=172.16.1.0/26 dst-port=!80

13 ;;; http_route
chain=prerouting action=mark-routing new-routing-mark=http_route passthrough=no connection-mark=http_con

14 ;;; other_else_tcp_route
chain=prerouting action=mark-routing new-routing-mark=other_else_tcp_route passthrough=no connection-mark=other_else_tcp_con

ip route:
add gateway=gateway_cepat,gateway_smart routing-mark=http_route comment=load_balancing_http
add gateway=gateway_cepat routing-mark=other_else_tcp_route check-gateway=ping comment=other_else_tcp
add gateway=gateway_smart routing-mark=other_else_tcp_route distance=2 comment=back_up_gateway_else_tcp

Tapi ane bingung gan sepertinya ip route ga bisa bekerja sama dg routing mark, shg hasilnya tetep aj ditolak u/ https nya...padahal dari monitoring connection, harusnya mangle nya sudah tepat..


Mohon advice juragan2 skalian

Thanks