Alterserv

Mikrotik => Mangle & Queues => Mensaje publicado por: dargoros en Junio 16, 2013, 07:43:43 PM

Título: Qos
Publicado por: dargoros en Junio 16, 2013, 07:43:43 PM
amigos, quien me ayuda con Qos funcional, para crearlo de acurdo a la red y asi nos aydemos todos en crear este Qos
Título: Re:Qos
Publicado por: si_faisal en Agosto 09, 2013, 10:58:31 PM
i just want to share my QoS configuration,

it can classify and prioritize traffic so the user can have a better internet experience
this can work in routing mode (put this rules in R1) or brigde mode (transparent traffic shaper)

the thunder/raptorcache hit full bandwitdh is NOT in this rules

(http://imageshack.com/scaled/large/9/8d4t.jpg)

this code below :
/ip firewall mangle
Código (mk) [Seleccionar]
/ip firewall mangle
add action=jump chain=forward comment="SERVICE CLASSIFIER" jump-target=\
   services-classifier protocol=tcp
add action=jump chain=forward jump-target=services-classifier protocol=udp
add action=jump chain=forward jump-target=services-classifier protocol=!ospf
add action=mark-connection chain=services-classifier comment=ICMP \
   new-connection-mark=cm_icmp protocol=icmp
add action=mark-packet chain=services-classifier connection-mark=cm_icmp \
   new-packet-mark=pm_icmp passthrough=no
add action=mark-connection chain=services-classifier comment=SSH dst-port=22 \
   new-connection-mark=cm_ssh protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_ssh protocol=tcp src-port=22
add action=mark-packet chain=services-classifier connection-mark=cm_ssh \
   new-packet-mark=pm_ssh passthrough=no
add action=mark-connection chain=services-classifier comment="DNS TCP" \
   dst-port=53 new-connection-mark=cm_dns protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_dns protocol=tcp src-port=53
add action=mark-packet chain=services-classifier connection-mark=cm_dns \
   new-packet-mark=pm_dns passthrough=no
add action=mark-connection chain=services-classifier comment="SKYPE TCP" \
   dst-port=!80 layer7-protocol=skypetoskype new-connection-mark=cm_skype \
   protocol=tcp
add action=mark-connection chain=services-classifier dst-port=!80 \
   layer7-protocol=skype new-connection-mark=cm_skype protocol=tcp
add action=mark-packet chain=services-classifier connection-mark=cm_skype \
   new-packet-mark=pm_skype passthrough=no
add action=mark-connection chain=services-classifier comment=PROXMOX \
   dst-port=8006 new-connection-mark=cm_proxmox protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_proxmox protocol=tcp src-port=8006
add action=mark-packet chain=services-classifier connection-mark=cm_proxmox \
   new-packet-mark=pm_proxmox passthrough=no
add action=mark-connection chain=services-classifier comment=FTP dst-port=21 \
   new-connection-mark=cm_ftp protocol=tcp
add action=mark-packet chain=services-classifier connection-mark=cm_ftp \
   new-packet-mark=pm_ftp passthrough=no
add action=mark-connection chain=services-classifier comment="THE DUDE" \
   dst-port=2210,2211 new-connection-mark=cm_dude protocol=tcp
add action=mark-connection chain=services-classifier dst-port=2210,2211 \
   new-connection-mark=cm_dude protocol=tcp
add action=mark-packet chain=services-classifier connection-mark=cm_dude \
   new-packet-mark=pm_dude passthrough=no
add action=mark-connection chain=services-classifier comment=HTTP dst-port=\
   80,3128,8080 new-connection-mark=cm_http protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_http protocol=tcp src-port=80,3128,8080
add action=mark-packet chain=services-classifier comment="HTTP PRIO #3" \
   connection-bytes=0-128000 connection-mark=cm_http new-packet-mark=\
   pm_http_prio3 passthrough=no protocol=tcp
add action=mark-packet chain=services-classifier comment="HTTP PRIO #4" \
   connection-bytes=128001-1024000 connection-mark=cm_http new-packet-mark=\
   pm_http_prio4 passthrough=no protocol=tcp
add action=mark-packet chain=services-classifier comment="HTTP PRIO #5" \
   connection-bytes=1024001-4096000 connection-mark=cm_http new-packet-mark=\
   pm_http_prio5 passthrough=no protocol=tcp
add action=mark-packet chain=services-classifier comment="HTTP PRIO #6" \
   connection-bytes=4096001-20480000 connection-mark=cm_http \
   new-packet-mark=pm_http_prio6 passthrough=no protocol=tcp
add action=mark-packet chain=services-classifier comment="HTTP PRIO #8" \
   connection-bytes=20480001-0 connection-mark=cm_http new-packet-mark=\
   pm_http_prio8 passthrough=no protocol=tcp
add action=mark-connection chain=services-classifier comment=HTTPS dst-port=\
   443 new-connection-mark=cm_https protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_https protocol=tcp src-port=443
add action=mark-packet chain=services-classifier connection-mark=cm_https \
   new-packet-mark=pm_https passthrough=no
add action=mark-connection chain=services-classifier comment=EMAIL dst-port=\
   25,110,143,465,585,993,995 new-connection-mark=cm_email protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_email protocol=tcp src-port=25,110,143,465,585,993,995
add action=mark-packet chain=services-classifier connection-mark=cm_email \
   new-packet-mark=pm_email passthrough=no
add action=mark-connection chain=services-classifier comment=STREAMING \
   dst-port=1935 new-connection-mark=cm_streaming protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_streaming protocol=tcp src-port=1935
add action=mark-packet chain=services-classifier connection-mark=cm_streaming \
   new-packet-mark=pm_streaming passthrough=no
add action=mark-connection chain=services-classifier comment=\
   "YAHOO MESSENGER" dst-port=5050 new-connection-mark=cm_ym protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_ym protocol=tcp src-port=5050
add action=mark-packet chain=services-classifier connection-mark=cm_ym \
   new-packet-mark=pm_ym passthrough=no
add action=mark-connection chain=services-classifier comment=TEAMVIEWER \
   dst-port=5938 new-connection-mark=cm_teamviewer protocol=tcp
add action=mark-connection chain=services-classifier dst-port="" \
   new-connection-mark=cm_teamviewer protocol=tcp src-port=5938
add action=mark-packet chain=services-classifier connection-mark=\
   cm_teamviewer new-packet-mark=pm_teamviewer passthrough=no
add action=mark-connection chain=services-classifier comment=WINBOX dst-port=\
   8291 new-connection-mark=cm_winbox protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_winbox protocol=tcp src-port=8291
add action=mark-packet chain=services-classifier connection-mark=cm_winbox \
   new-packet-mark=pm_winbox passthrough=no
add action=mark-connection chain=services-classifier comment=VNC dst-port=\
   5900-5950 new-connection-mark=cm_vnc protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_vnc protocol=tcp src-port=5900-5950
add action=mark-packet chain=services-classifier connection-mark=cm_vnc \
   new-packet-mark=pm_vnc passthrough=no
add action=mark-connection chain=services-classifier comment="P2P TORRENT" \
   new-connection-mark=cm_p2p p2p=all-p2p
add action=mark-packet chain=services-classifier connection-mark=cm_p2p \
   new-packet-mark=pm_p2p passthrough=no
add action=mark-connection chain=services-classifier comment="OTHER TCP" \
   new-connection-mark=cm_other-tcp protocol=tcp
add action=mark-packet chain=services-classifier connection-mark=cm_other-tcp \
   new-packet-mark=pm_other-tcp passthrough=no
add action=mark-connection chain=services-classifier comment=" UDP" dst-port=\
   53 new-connection-mark=cm_dns protocol=udp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_dns protocol=udp src-port=53
add action=mark-packet chain=services-classifier connection-mark=cm_dns \
   new-packet-mark=pm_dns passthrough=no
add action=mark-connection chain=services-classifier comment=NTP dst-port=123 \
   new-connection-mark=cm_ntp protocol=udp
add action=mark-packet chain=services-classifier connection-mark=cm_ntp \
   new-packet-mark=pm_ntp passthrough=no
add action=mark-connection chain=services-classifier comment=\
   "YAHOO MESSENGER UDP" dst-port=3478 new-connection-mark=cm_ym_udp \
   protocol=udp src-port=1024-5000
add action=mark-connection chain=services-classifier dst-port=1024-5000 \
   new-connection-mark=cm_ym_udp protocol=udp src-port=3478
add action=mark-packet chain=services-classifier connection-mark=cm_ym_udp \
   new-packet-mark=pm_ym_udp
add action=mark-connection chain=services-classifier comment=SIP/VOIP \
   dst-port=5060 new-connection-mark=cm_voip protocol=udp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_voip protocol=udp src-port=5060
add action=mark-packet chain=services-classifier connection-mark=cm_voip \
   new-packet-mark=pm_voip
add action=mark-connection chain=services-classifier comment=SNMP dst-port=\
   161,162 new-connection-mark=cm_snmp protocol=udp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_snmp protocol=udp src-port=161,162
add action=mark-packet chain=services-classifier connection-mark=cm_snmp \
   new-packet-mark=pm_snmp passthrough=no
add action=mark-connection chain=services-classifier comment="SKYPE UDP L7" \
   layer7-protocol=skype new-connection-mark=cm_skype_udp protocol=udp
add action=mark-connection chain=services-classifier layer7-protocol=\
   skypetoskype new-connection-mark=cm_skype_udp protocol=udp
add action=mark-packet chain=services-classifier connection-mark=cm_skype_udp \
   new-packet-mark=pm_skype_udp passthrough=no
add action=mark-connection chain=services-classifier comment="OTHER UDP" \
   new-connection-mark=cm_other-udp protocol=udp
add action=mark-packet chain=services-classifier connection-mark=cm_other-udp \
   new-packet-mark=pm_other-udp passthrough=no
add action=return chain=services-classifier


Queue Tree Configuration - in this example, bandwitdh is set for 5 Mbps.
please change according to your network
keep in mind that maximum sum of limit-at of the child, cannot larger that the parent max-limit value

Código (mk) [Seleccionar]
/queue tree
add max-limit=5M name=INTERNET parent=global-out priority=3
add limit-at=256k max-limit=5M name=PRIO#1 parent=INTERNET priority=1
add limit-at=512k max-limit=4M name=PRIO#2 parent=INTERNET priority=2
add limit-at=384k max-limit=3M name=PRIO#3 parent=INTERNET priority=3
add limit-at=256k max-limit=2M name=PRIO#4 parent=INTERNET priority=4
add limit-at=256k max-limit=2M name=PRIO#5 parent=INTERNET priority=5
add limit-at=128k max-limit=1536k name=PRIO#6 parent=INTERNET priority=6
add limit-at=96k max-limit=1M name=PRIO#7 parent=INTERNET priority=7
add limit-at=128k max-limit=1M name=PRIO#8 parent=INTERNET
add name=icmp packet-mark=pm_icmp parent=PRIO#1 priority=1
add name=dns packet-mark=pm_dns parent=PRIO#1 priority=1
add name=ssh packet-mark=pm_ssh parent=PRIO#1 priority=1
add name=vnc packet-mark=pm_vnc parent=PRIO#2 priority=2
add name=winbox packet-mark=pm_winbox parent=PRIO#2 priority=2
add name=ntp packet-mark=pm_ntp parent=PRIO#2 priority=2
add name=skype packet-mark=pm_skype parent=PRIO#2 priority=2
add name=email packet-mark=pm_email parent=PRIO#3 priority=3
add name=https packet-mark=pm_https parent=PRIO#4 priority=4
add name=http_small packet-mark=pm_http_prio3 parent=PRIO#3 priority=3
add name=ftp packet-mark=pm_ftp parent=PRIO#4 priority=4
add name=other-tcp packet-mark=pm_other-tcp parent=PRIO#8
add name=other-udp packet-mark=pm_other-udp parent=PRIO#8
add name=pve-mgmnt packet-mark=pm_proxmox parent=PRIO#2 priority=2
add name=snmp packet-mark=pm_snmp parent=PRIO#2 priority=2
add name=thedude packet-mark=pm_dude parent=PRIO#2 priority=2
add name=http_heavy packet-mark=pm_http_prio8 parent=PRIO#7 priority=7 queue=\
   pcq-http
add name=p2p-torrent packet-mark=pm_p2p parent=PRIO#8
add name=http_medium packet-mark=pm_http_prio5 parent=PRIO#5 priority=5 \
   queue=pcq-http
add name=http_large packet-mark=pm_http_prio6 parent=PRIO#6 priority=6 queue=\
   pcq-http
add name=http_light packet-mark=pm_http_prio4 parent=PRIO#4 priority=4 queue=\
   pcq-http
add name=voip packet-mark=pm_voip parent=PRIO#2 priority=2
add name=stream-rtmp packet-mark=pm_streaming parent=PRIO#3 priority=3
add name=skype-udp packet-mark=pm_skype_udp parent=PRIO#2 priority=2
add name=teamviewer packet-mark=pm_teamviewer parent=PRIO#2 priority=2
add name=ym-tcp packet-mark=pm_ym parent=PRIO#2 priority=2
add name=ym-udp packet-mark=pm_ym_udp parent=PRIO#2 priority=2


in routeros v6 change parent global-out to global
Código (mk) [Seleccionar]
add max-limit=5M name=INTERNET parent=global priority=3

Queue Types
Código (mk) [Seleccionar]
/queue type
set 0 pfifo-limit=500
add kind=sfq name=default-sfq sfq-perturb=8
add kind=pcq name=pcq-http pcq-burst-time=16s pcq-classifier=dst-address \
   pcq-dst-address6-mask=64 pcq-limit=500 pcq-src-address6-mask=64 \
   pcq-total-limit=20000
set 9 pfifo-limit=100


hope this help
greetings from Indonesia
:)
Título: Re:Qos
Publicado por: si_faisal en Agosto 09, 2013, 11:00:05 PM
this l7 filter for capturing Skype Traffic

Código (mk) [Seleccionar]

/ip firewall layer7-protocol
add name=skypetoskype regexp="^..\\x02............."
add name=skype regexp="^(\\x01.\?.\?.\?.\?.\?.\?.\?.\?\\x01|\\x02.\?.\?.\?.\?.\
   \?.\?.\?.\?\\x02|\\x03.\?.\?.\?.\?.\?.\?.\?.\?\\x03|\\x04.\?.\?.\?.\?.\?.\
   \?.\?.\?\\x04|\\x05.\?.\?.\?.\?.\?.\?.\?.\?\\x05|\\x06.\?.\?.\?.\?.\?.\?.\
   \?.\?\\x06|\\x07.\?.\?.\?.\?.\?.\?.\?.\?\\x07|\\x08.\?.\?.\?.\?.\?.\?.\?.\
   \?\\x08|\\x09.\?.\?.\?.\?.\?.\?.\?.\?\\x09|\\x0a.\?.\?.\?.\?.\?.\?.\?.\?\\\
   x0a|\\x0b.\?.\?.\?.\?.\?.\?.\?.\?\\x0b|\\x0c.\?.\?.\?.\?.\?.\?.\?.\?\\x0c|\
   \\x0d.\?.\?.\?.\?.\?.\?.\?.\?\\x0d|\\x0e.\?.\?.\?.\?.\?.\?.\?.\?\\x0e|\\x0\
   f.\?.\?.\?.\?.\?.\?.\?.\?\\x0f|\\x10.\?.\?.\?.\?.\?.\?.\?.\?\\x10|\\x11.\?\
   .\?.\?.\?.\?.\?.\?.\?\\x11|\\x12.\?.\?.\?.\?.\?.\?.\?.\?\\x12|\\x13.\?.\?.\
   \?.\?.\?.\?.\?.\?\\x13|\\x14.\?.\?.\?.\?.\?.\?.\?.\?\\x14|\\x15.\?.\?.\?.\
   \?.\?.\?.\?.\?\\x15|\\x16.\?.\?.\?.\?.\?.\?.\?.\?\\x16|\\x17.\?.\?.\?.\?.\
   \?.\?.\?.\?\\x17|\\x18.\?.\?.\?.\?.\?.\?.\?.\?\\x18|\\x19.\?.\?.\?.\?.\?.\
   \?.\?.\?\\x19|\\x1a.\?.\?.\?.\?.\?.\?.\?.\?\\x1a|\\x1b.\?.\?.\?.\?.\?.\?.\
   \?.\?\\x1b|\\x1c.\?.\?.\?.\?.\?.\?.\?.\?\\x1c|\\x1d.\?.\?.\?.\?.\?.\?.\?.\
   \?\\x1d|\\x1e.\?.\?.\?.\?.\?.\?.\?.\?\\x1e|\\x1f.\?.\?.\?.\?.\?.\?.\?.\?\\\
   x1f|\\x20.\?.\?.\?.\?.\?.\?.\?.\?\\x20|\\x21.\?.\?.\?.\?.\?.\?.\?.\?\\x21|\
   \\x22.\?.\?.\?.\?.\?.\?.\?.\?\\x22|\\x23.\?.\?.\?.\?.\?.\?.\?.\?\\x23|\\\$\
   .\?.\?.\?.\?.\?.\?.\?.\?\\\$|\\x25.\?.\?.\?.\?.\?.\?.\?.\?\\x25|\\x26.\?.\
   \?.\?.\?.\?.\?.\?.\?\\x26|\\x27.\?.\?.\?.\?.\?.\?.\?.\?\\x27|\\(.\?.\?.\?.\
   \?.\?.\?.\?.\?\\(|\\).\?.\?.\?.\?.\?.\?.\?.\?\\)|\\*.\?.\?.\?.\?.\?.\?.\?.\
   \?\\*|\\+.\?.\?.\?.\?.\?.\?.\?.\?\\+|\\x2c.\?.\?.\?.\?.\?.\?.\?.\?\\x2c|\\\
   x2d.\?.\?.\?.\?.\?.\?.\?.\?\\x2d|\\..\?.\?.\?.\?.\?.\?.\?.\?\\.|\\x2f.\?.\
   \?.\?.\?.\?.\?.\?.\?\\x2f|\\x30.\?.\?.\?.\?.\?.\?.\?.\?\\x30|\\x31.\?.\?.\
   \?.\?.\?.\?.\?.\?\\x31|\\x32.\?.\?.\?.\?.\?.\?.\?.\?\\x32|\\x33.\?.\?.\?.\
   \?.\?.\?.\?.\?\\x33|\\x34.\?.\?.\?.\?.\?.\?.\?.\?\\x34|\\x35.\?.\?.\?.\?.\
   \?.\?.\?.\?\\x35|\\x36.\?.\?.\?.\?.\?.\?.\?.\?\\x36|\\x37.\?.\?.\?.\?.\?.\
   \?.\?.\?\\x37|\\x38.\?.\?.\?.\?.\?.\?.\?.\?\\x38|\\x39.\?.\?.\?.\?.\?.\?.\
   \?.\?\\x39|\\x3a.\?.\?.\?.\?.\?.\?.\?.\?\\x3a|\\x3b.\?.\?.\?.\?.\?.\?.\?.\
   \?\\x3b|\\x3c.\?.\?.\?.\?.\?.\?.\?.\?\\x3c|\\x3d.\?.\?.\?.\?.\?.\?.\?.\?\\\
   x3d|\\x3e.\?.\?.\?.\?.\?.\?.\?.\?\\x3e|\\\?.\?.\?.\?.\?.\?.\?.\?.\?\\\?|\\\
   x40.\?.\?.\?.\?.\?.\?.\?.\?\\x40|\\x41.\?.\?.\?.\?.\?.\?.\?.\?\\x41|\\x42.\
   \?.\?.\?.\?.\?.\?.\?.\?\\x42|\\x43.\?.\?.\?.\?.\?.\?.\?.\?\\x43|\\x44.\?.\
   \?.\?.\?.\?.\?.\?.\?\\x44|\\x45.\?.\?.\?.\?.\?.\?.\?.\?\\x45|\\x46.\?.\?.\
   \?.\?.\?.\?.\?.\?\\x46|\\x47.\?.\?.\?.\?.\?.\?.\?.\?\\x47|\\x48.\?.\?.\?.\
   \?.\?.\?.\?.\?\\x48|\\x49.\?.\?.\?.\?.\?.\?.\?.\?\\x49|\\x4a.\?.\?.\?.\?.\
   \?.\?.\?.\?\\x4a|\\x4b.\?.\?.\?.\?.\?.\?.\?.\?\\x4b|\\x4c.\?.\?.\?.\?.\?.\
   \?.\?.\?\\x4c|\\x4d.\?.\?.\?.\?.\?.\?.\?.\?\\x4d|\\x4e.\?.\?.\?.\?.\?.\?.\
   \?.\?\\x4e|\\x4f.\?.\?.\?.\?.\?.\?.\?.\?\\x4f|\\x50.\?.\?.\?.\?.\?.\?.\?.\
   \?\\x50|\\x51.\?.\?.\?.\?.\?.\?.\?.\?\\x51|\\x52.\?.\?.\?.\?.\?.\?.\?.\?\\\
   x52|\\x53.\?.\?.\?.\?.\?.\?.\?.\?\\x53|\\x54.\?.\?.\?.\?.\?.\?.\?.\?\\x54|\
   \\x55.\?.\?.\?.\?.\?.\?.\?.\?\\x55|\\x56.\?.\?.\?.\?.\?.\?.\?.\?\\x56|\\x5\
   7.\?.\?.\?.\?.\?.\?.\?.\?\\x57|\\x58.\?.\?.\?.\?.\?.\?.\?.\?\\x58|\\x59.\?\
   .\?.\?.\?.\?.\?.\?.\?\\x59|\\x5a.\?.\?.\?.\?.\?.\?.\?.\?\\x5a|\\[.\?.\?.\?\
   .\?.\?.\?.\?.\?\\[|\\\\.\?.\?.\?.\?.\?.\?.\?.\?\\\\|\\].\?.\?.\?.\?.\?.\?.\
   \?.\?\\]|\\^.\?.\?.\?.\?.\?.\?.\?.\?\\^|\\x5f.\?.\?.\?.\?.\?.\?.\?.\?\\x5f\
   |\\x60.\?.\?.\?.\?.\?.\?.\?.\?\\x60|\\x61.\?.\?.\?.\?.\?.\?.\?.\?\\x61|\\x\
   62.\?.\?.\?.\?.\?.\?.\?.\?\\x62|\\x63.\?.\?.\?.\?.\?.\?.\?.\?\\x63|\\x64.\
   \?.\?.\?.\?.\?.\?.\?.\?\\x64|\\x65.\?.\?.\?.\?.\?.\?.\?.\?\\x65|\\x66.\?.\
   \?.\?.\?.\?.\?.\?.\?\\x66|\\x67.\?.\?.\?.\?.\?.\?.\?.\?\\x67|\\x68.\?.\?.\
   \?.\?.\?.\?.\?.\?\\x68|\\x69.\?.\?.\?.\?.\?.\?.\?.\?\\x69|\\x6a.\?.\?.\?.\
   \?.\?.\?.\?.\?\\x6a|\\x6b.\?.\?.\?.\?.\?.\?.\?.\?\\x6b|\\x6c.\?.\?.\?.\?.\
   \?.\?.\?.\?\\x6c|\\x6d.\?.\?.\?.\?.\?.\?.\?.\?\\x6d|\\x6e.\?.\?.\?.\?.\?.\
   \?.\?.\?\\x6e|\\x6f.\?.\?.\?.\?.\?.\?.\?.\?\\x6f|\\x70.\?.\?.\?.\?.\?.\?.\
   \?.\?\\x70|\\x71.\?.\?.\?.\?.\?.\?.\?.\?\\x71|\\x72.\?.\?.\?.\?.\?.\?.\?.\
   \?\\x72|\\x73.\?.\?.\?.\?.\?.\?.\?.\?\\x73|\\x74.\?.\?.\?.\?.\?.\?.\?.\?\\\
   x74|\\x75.\?.\?.\?.\?.\?.\?.\?.\?\\x75|\\x76.\?.\?.\?.\?.\?.\?.\?.\?\\x76|\
   \\x77.\?.\?.\?.\?.\?.\?.\?.\?\\x77|\\x78.\?.\?.\?.\?.\?.\?.\?.\?\\x78|\\x7\
   9.\?.\?.\?.\?.\?.\?.\?.\?\\x79|\\x7a.\?.\?.\?.\?.\?.\?.\?.\?\\x7a|\\{.\?.\
   \?.\?.\?.\?.\?.\?.\?\\{|\\|.\?.\?.\?.\?.\?.\?.\?.\?\\||\\}.\?.\?.\?.\?.\?.\
   \?.\?.\?\\}|\\x7e.\?.\?.\?.\?.\?.\?.\?.\?\\x7e|\\x7f.\?.\?.\?.\?.\?.\?.\?.\
   \?\\x7f|\\x80.\?.\?.\?.\?.\?.\?.\?.\?\\x80|\\x81.\?.\?.\?.\?.\?.\?.\?.\?\\\
   x81|\\x82.\?.\?.\?.\?.\?.\?.\?.\?\\x82|\\x83.\?.\?.\?.\?.\?.\?.\?.\?\\x83|\
   \\x84.\?.\?.\?.\?.\?.\?.\?.\?\\x84|\\x85.\?.\?.\?.\?.\?.\?.\?.\?\\x85|\\x8\
   6.\?.\?.\?.\?.\?.\?.\?.\?\\x86|\\x87.\?.\?.\?.\?.\?.\?.\?.\?\\x87|\\x88.\?\
   .\?.\?.\?.\?.\?.\?.\?\\x88|\\x89.\?.\?.\?.\?.\?.\?.\?.\?\\x89|\\x8a.\?.\?.\
   \?.\?.\?.\?.\?.\?\\x8a|\\x8b.\?.\?.\?.\?.\?.\?.\?.\?\\x8b|\\x8c.\?.\?.\?.\
   \?.\?.\?.\?.\?\\x8c|\\x8d.\?.\?.\?.\?.\?.\?.\?.\?\\x8d|\\x8e.\?.\?.\?.\?.\
   \?.\?.\?.\?\\x8e|\\x8f.\?.\?.\?.\?.\?.\?.\?.\?\\x8f|\\x90.\?.\?.\?.\?.\?.\
   \?.\?.\?\\x90|\\x91.\?.\?.\?.\?.\?.\?.\?.\?\\x91|\\x92.\?.\?.\?.\?.\?.\?.\
   \?.\?\\x92|\\x93.\?.\?.\?.\?.\?.\?.\?.\?\\x93|\\x94.\?.\?.\?.\?.\?.\?.\?.\
   \?\\x94|\\x95.\?.\?.\?.\?.\?.\?.\?.\?\\x95|\\x96.\?.\?.\?.\?.\?.\?.\?.\?\\\
   x96|\\x97.\?.\?.\?.\?.\?.\?.\?.\?\\x97|\\x98.\?.\?.\?.\?.\?.\?.\?.\?\\x98|\
   \\x99.\?.\?.\?.\?.\?.\?.\?.\?\\x99|\\x9a.\?.\?.\?.\?.\?.\?.\?.\?\\x9a|\\x9\
   b.\?.\?.\?.\?.\?.\?.\?.\?\\x9b|\\x9c.\?.\?.\?.\?.\?.\?.\?.\?\\x9c|\\x9d.\?\
   .\?.\?.\?.\?.\?.\?.\?\\x9d|\\x9e.\?.\?.\?.\?.\?.\?.\?.\?\\x9e|\\x9f.\?.\?.\
   \?.\?.\?.\?.\?.\?\\x9f|\\xa0.\?.\?.\?.\?.\?.\?.\?.\?\\xa0|\\xa1.\?.\?.\?.\
   \?.\?.\?.\?.\?\\xa1|\\xa2.\?.\?.\?.\?.\?.\?.\?.\?\\xa2|\\xa3.\?.\?.\?.\?.\
   \?.\?.\?.\?\\xa3|\\xa4.\?.\?.\?.\?.\?.\?.\?.\?\\xa4|\\xa5.\?.\?.\?.\?.\?.\
   \?.\?.\?\\xa5|\\xa6.\?.\?.\?.\?.\?.\?.\?.\?\\xa6|\\xa7.\?.\?.\?.\?.\?.\?.\
   \?.\?\\xa7|\\xa8.\?.\?.\?.\?.\?.\?.\?.\?\\xa8|\\xa9.\?.\?.\?.\?.\?.\?.\?.\
   \?\\xa9|\\xaa.\?.\?.\?.\?.\?.\?.\?.\?\\xaa|\\xab.\?.\?.\?.\?.\?.\?.\?.\?\\\
   xab|\\xac.\?.\?.\?.\?.\?.\?.\?.\?\\xac|\\xad.\?.\?.\?.\?.\?.\?.\?.\?\\xad|\
   \\xae.\?.\?.\?.\?.\?.\?.\?.\?\\xae|\\xaf.\?.\?.\?.\?.\?.\?.\?.\?\\xaf|\\xb\
   0.\?.\?.\?.\?.\?.\?.\?.\?\\xb0|\\xb1.\?.\?.\?.\?.\?.\?.\?.\?\\xb1|\\xb2.\?\
   .\?.\?.\?.\?.\?.\?.\?\\xb2|\\xb3.\?.\?.\?.\?.\?.\?.\?.\?\\xb3|\\xb4.\?.\?.\
   \?.\?.\?.\?.\?.\?\\xb4|\\xb5.\?.\?.\?.\?.\?.\?.\?.\?\\xb5|\\xb6.\?.\?.\?.\
   \?.\?.\?.\?.\?\\xb6|\\xb7.\?.\?.\?.\?.\?.\?.\?.\?\\xb7|\\xb8.\?.\?.\?.\?.\
   \?.\?.\?.\?\\xb8|\\xb9.\?.\?.\?.\?.\?.\?.\?.\?\\xb9|\\xba.\?.\?.\?.\?.\?.\
   \?.\?.\?\\xba|\\xbb.\?.\?.\?.\?.\?.\?.\?.\?\\xbb|\\xbc.\?.\?.\?.\?.\?.\?.\
   \?.\?\\xbc|\\xbd.\?.\?.\?.\?.\?.\?.\?.\?\\xbd|\\xbe.\?.\?.\?.\?.\?.\?.\?.\
   \?\\xbe|\\xbf.\?.\?.\?.\?.\?.\?.\?.\?\\xbf|\\xc0.\?.\?.\?.\?.\?.\?.\?.\?\\\
   xc0|\\xc1.\?.\?.\?.\?.\?.\?.\?.\?\\xc1|\\xc2.\?.\?.\?.\?.\?.\?.\?.\?\\xc2|\
   \\xc3.\?.\?.\?.\?.\?.\?.\?.\?\\xc3|\\xc4.\?.\?.\?.\?.\?.\?.\?.\?\\xc4|\\xc\
   5.\?.\?.\?.\?.\?.\?.\?.\?\\xc5|\\xc6.\?.\?.\?.\?.\?.\?.\?.\?\\xc6|\\xc7.\?\
   .\?.\?.\?.\?.\?.\?.\?\\xc7|\\xc8.\?.\?.\?.\?.\?.\?.\?.\?\\xc8|\\xc9.\?.\?.\
   \?.\?.\?.\?.\?.\?\\xc9|\\xca.\?.\?.\?.\?.\?.\?.\?.\?\\xca|\\xcb.\?.\?.\?.\
   \?.\?.\?.\?.\?\\xcb|\\xcc.\?.\?.\?.\?.\?.\?.\?.\?\\xcc|\\xcd.\?.\?.\?.\?.\
   \?.\?.\?.\?\\xcd|\\xce.\?.\?.\?.\?.\?.\?.\?.\?\\xce|\\xcf.\?.\?.\?.\?.\?.\
   \?.\?.\?\\xcf|\\xd0.\?.\?.\?.\?.\?.\?.\?.\?\\xd0|\\xd1.\?.\?.\?.\?.\?.\?.\
   \?.\?\\xd1|\\xd2.\?.\?.\?.\?.\?.\?.\?.\?\\xd2|\\xd3.\?.\?.\?.\?.\?.\?.\?.\
   \?\\xd3|\\xd4.\?.\?.\?.\?.\?.\?.\?.\?\\xd4|\\xd5.\?.\?.\?.\?.\?.\?.\?.\?\\\
   xd5|\\xd6.\?.\?.\?.\?.\?.\?.\?.\?\\xd6|\\xd7.\?.\?.\?.\?.\?.\?.\?.\?\\xd7|\
   \\xd8.\?.\?.\?.\?.\?.\?.\?.\?\\xd8|\\xd9.\?.\?.\?.\?.\?.\?.\?.\?\\xd9|\\xd\
   a.\?.\?.\?.\?.\?.\?.\?.\?\\xda|\\xdb.\?.\?.\?.\?.\?.\?.\?.\?\\xdb|\\xdc.\?\
   .\?.\?.\?.\?.\?.\?.\?\\xdc|\\xdd.\?.\?.\?.\?.\?.\?.\?.\?\\xdd|\\xde.\?.\?.\
   \?.\?.\?.\?.\?.\?\\xde|\\xdf.\?.\?.\?.\?.\?.\?.\?.\?\\xdf|\\xe0.\?.\?.\?.\
   \?.\?.\?.\?.\?\\xe0|\\xe1.\?.\?.\?.\?.\?.\?.\?.\?\\xe1|\\xe2.\?.\?.\?.\?.\
   \?.\?.\?.\?\\xe2|\\xe3.\?.\?.\?.\?.\?.\?.\?.\?\\xe3|\\xe4.\?.\?.\?.\?.\?.\
   \?.\?.\?\\xe4|\\xe5.\?.\?.\?.\?.\?.\?.\?.\?\\xe5|\\xe6.\?.\?.\?.\?.\?.\?.\
   \?.\?\\xe6|\\xe7.\?.\?.\?.\?.\?.\?.\?.\?\\xe7|\\xe8.\?.\?.\?.\?.\?.\?.\?.\
   \?\\xe8|\\xe9.\?.\?.\?.\?.\?.\?.\?.\?\\xe9|\\xea.\?.\?.\?.\?.\?.\?.\?.\?\\\
   xea|\\xeb.\?.\?.\?.\?.\?.\?.\?.\?\\xeb|\\xec.\?.\?.\?.\?.\?.\?.\?.\?\\xec|\
   \\xed.\?.\?.\?.\?.\?.\?.\?.\?\\xed|\\xee.\?.\?.\?.\?.\?.\?.\?.\?\\xee|\\xe\
   f.\?.\?.\?.\?.\?.\?.\?.\?\\xef|\\xf0.\?.\?.\?.\?.\?.\?.\?.\?\\xf0|\\xf1.\?\
   .\?.\?.\?.\?.\?.\?.\?\\xf1|\\xf2.\?.\?.\?.\?.\?.\?.\?.\?\\xf2|\\xf3.\?.\?.\
   \?.\?.\?.\?.\?.\?\\xf3|\\xf4.\?.\?.\?.\?.\?.\?.\?.\?\\xf4|\\xf5.\?.\?.\?.\
   \?.\?.\?.\?.\?\\xf5|\\xf6.\?.\?.\?.\?.\?.\?.\?.\?\\xf6|\\xf7.\?.\?.\?.\?.\
   \?.\?.\?.\?\\xf7|\\xf8.\?.\?.\?.\?.\?.\?.\?.\?\\xf8|\\xf9.\?.\?.\?.\?.\?.\
   \?.\?.\?\\xf9|\\xfa.\?.\?.\?.\?.\?.\?.\?.\?\\xfa|\\xfb.\?.\?.\?.\?.\?.\?.\
   \?.\?\\xfb|\\xfc.\?.\?.\?.\?.\?.\?.\?.\?\\xfc|\\xfd.\?.\?.\?.\?.\?.\?.\?.\
   \?\\xfd|\\xfe.\?.\?.\?.\?.\?.\?.\?.\?\\xfe|\\xff.\?.\?.\?.\?.\?.\?.\?.\?\\\
   xff)"
Título: Re:Qos
Publicado por: rifranco202325 en Agosto 09, 2013, 11:22:10 PM
amigo si nos explica algo de como se utiliza o algo mas detallado
Título: Re:Qos
Publicado por: si_faisal en Agosto 10, 2013, 12:17:22 AM
hello rifranco202325

it will look like this, the purpose is to group some traffic and make prioritization in Queue Tree
(http://i303.photobucket.com/albums/nn127/si_faisal/qos.png?t=1376112543)

if you give it try, please make some review

gracias :)
Título: Re:Qos
Publicado por: odon en Agosto 10, 2013, 03:47:41 AM
Bravo Om Faisal  :-*
Título: Re:Qos
Publicado por: ingjaab en Agosto 10, 2013, 10:19:29 PM
 ;) una en version 6 para core  ;)
Título: Re:Qos
Publicado por: si_faisal en Agosto 11, 2013, 12:49:51 AM
hello ingjaab

sure, it can be implemented in core router
in routing mode or bridge mode it also works

this configuration is tested in routeros version 5 and 6

:)
Título: Re:Qos
Publicado por: ingjaab en Agosto 11, 2013, 05:06:25 AM
pero en 6 no hay global out ni global in  :( solo global  :( buuuuu
Título: Re:Qos
Publicado por: si_faisal en Agosto 11, 2013, 06:23:34 AM
yes you are right

please change the parent global-out to global at routeros version 6

thats it
Título: Re:Qos
Publicado por: ingjaab en Agosto 11, 2013, 11:15:47 AM
haste un ejemplo para verlo por que he intentado sin exito
Título: Re:Qos
Publicado por: ingjaab en Agosto 11, 2013, 07:30:37 PM
asi veo que no has puesto queue type pcq
Título: Re:Qos
Publicado por: si_faisal en Agosto 14, 2013, 07:49:25 PM
ingjaab

i have edited my post
please check in thread #2
Título: Re:Qos
Publicado por: rifranco202325 en Agosto 14, 2013, 09:36:05 PM
q men corregistre tu pos de nuevo
Título: Re:Qos
Publicado por: luistec en Agosto 14, 2013, 09:43:07 PM
Cita de: rifranco202325 en Agosto 14, 2013, 09:36:05 PM
q men corregistre tu pos de nuevo
Actualizó su post con más información.

Good info si_faisal (http://www.alterserv.com/foros/index.php?action=profile;u=719)

Saludos
Título: Re:Qos
Publicado por: rifranco202325 en Agosto 14, 2013, 09:45:54 PM
Cita de: luistec en Agosto 14, 2013, 09:43:07 PM
Actualizó su post con más información.

Saludos

men y ya lo provaste o no
Título: Re:Qos
Publicado por: ingjaab en Agosto 15, 2013, 04:24:58 PM
yo lo he probado y lo que no me entra en cabeza es la subida , lo otro es es si raptor lo uso por forward tiene conflicto con el qos , pero que type haz cambiando eso es bueno

pd: ya tengo tres amanecidas intentando en sacar el QoS con global del core con raptor y todo con forward y la verdad ya me duele mi cabeza , haber si me das una o dos manos
Título: Re:Qos
Publicado por: loquitoslack en Agosto 15, 2013, 05:15:03 PM
QOS in debian for iptables ? T_T
Título: Re:Qos
Publicado por: si_faisal en Agosto 15, 2013, 08:45:14 PM
ingjaab

how is your configuration / network diagram?

in my configuration, the raptor cache is not connected with this qos router,
raptor is connected in the core that can use different qos and limit the distribution router

loquitoslack

do you mean, you are using debian for a router?
you can use htb or cbq with mangle an conntrack using tc command

here's more reading http://www.lartc.org/howto/

saludos
Título: Re:Qos
Publicado por: loquitoslack en Agosto 16, 2013, 08:08:23 AM
ok, thanks reading MAN QOS
Título: Re:Qos
Publicado por: si_faisal en Agosto 16, 2013, 11:29:35 AM
loquitoslack

you can also use the simple way, use webhtb for manage traffic

http://www.webhtb.ro/

modified webhtb with squid & zph tos (indonesian language)
http://opensource.telkomspeedy.com/forum/viewtopic.php?id=5530

saludos
Título: Re:Qos
Publicado por: ingjaab en Agosto 16, 2013, 04:56:47 PM
??? QoS versi 6 con proxy raptor para un core solo  ???

http://mum.mikrotik.com/presentations/HR13/valens.pdf
Título: Re:Qos
Publicado por: luis24 en Agosto 21, 2013, 07:14:08 AM
No estoy de acuerdo en copiar y pegar reglas...Puede servir como también puede hacer un desastre en la Red...Hay que ver cada caso en particular ya que cada Red es totalmente diferente...para la gente que usa Simple Queue deben cambiar el parent Global Out por la Interface real de Salida.
Título: Re:Qos
Publicado por: freedarwuin en Agosto 21, 2013, 08:53:58 AM
Cita de: si_faisal en Agosto 09, 2013, 10:58:31 PM
i just want to share my QoS configuration,

it can classify and prioritize traffic so the user can have a better internet experience
this can work in routing mode (put this rules in R1) or brigde mode (transparent traffic shaper)

the thunder/raptorcache hit full bandwitdh is NOT in this rules

(http://imageshack.com/scaled/large/9/8d4t.jpg)

this code below :
/ip firewall mangle
Código (mk) [Seleccionar]
/ip firewall mangle
add action=jump chain=forward comment="SERVICE CLASSIFIER" jump-target=\
   services-classifier protocol=tcp
add action=jump chain=forward jump-target=services-classifier protocol=udp
add action=jump chain=forward jump-target=services-classifier protocol=!ospf
add action=mark-connection chain=services-classifier comment=ICMP \
   new-connection-mark=cm_icmp protocol=icmp
add action=mark-packet chain=services-classifier connection-mark=cm_icmp \
   new-packet-mark=pm_icmp passthrough=no
add action=mark-connection chain=services-classifier comment=SSH dst-port=22 \
   new-connection-mark=cm_ssh protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_ssh protocol=tcp src-port=22
add action=mark-packet chain=services-classifier connection-mark=cm_ssh \
   new-packet-mark=pm_ssh passthrough=no
add action=mark-connection chain=services-classifier comment="DNS TCP" \
   dst-port=53 new-connection-mark=cm_dns protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_dns protocol=tcp src-port=53
add action=mark-packet chain=services-classifier connection-mark=cm_dns \
   new-packet-mark=pm_dns passthrough=no
add action=mark-connection chain=services-classifier comment="SKYPE TCP" \
   dst-port=!80 layer7-protocol=skypetoskype new-connection-mark=cm_skype \
   protocol=tcp
add action=mark-connection chain=services-classifier dst-port=!80 \
   layer7-protocol=skype new-connection-mark=cm_skype protocol=tcp
add action=mark-packet chain=services-classifier connection-mark=cm_skype \
   new-packet-mark=pm_skype passthrough=no
add action=mark-connection chain=services-classifier comment=PROXMOX \
   dst-port=8006 new-connection-mark=cm_proxmox protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_proxmox protocol=tcp src-port=8006
add action=mark-packet chain=services-classifier connection-mark=cm_proxmox \
   new-packet-mark=pm_proxmox passthrough=no
add action=mark-connection chain=services-classifier comment=FTP dst-port=21 \
   new-connection-mark=cm_ftp protocol=tcp
add action=mark-packet chain=services-classifier connection-mark=cm_ftp \
   new-packet-mark=pm_ftp passthrough=no
add action=mark-connection chain=services-classifier comment="THE DUDE" \
   dst-port=2210,2211 new-connection-mark=cm_dude protocol=tcp
add action=mark-connection chain=services-classifier dst-port=2210,2211 \
   new-connection-mark=cm_dude protocol=tcp
add action=mark-packet chain=services-classifier connection-mark=cm_dude \
   new-packet-mark=pm_dude passthrough=no
add action=mark-connection chain=services-classifier comment=HTTP dst-port=\
   80,3128,8080 new-connection-mark=cm_http protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_http protocol=tcp src-port=80,3128,8080
add action=mark-packet chain=services-classifier comment="HTTP PRIO #3" \
   connection-bytes=0-128000 connection-mark=cm_http new-packet-mark=\
   pm_http_prio3 passthrough=no protocol=tcp
add action=mark-packet chain=services-classifier comment="HTTP PRIO #4" \
   connection-bytes=128001-1024000 connection-mark=cm_http new-packet-mark=\
   pm_http_prio4 passthrough=no protocol=tcp
add action=mark-packet chain=services-classifier comment="HTTP PRIO #5" \
   connection-bytes=1024001-4096000 connection-mark=cm_http new-packet-mark=\
   pm_http_prio5 passthrough=no protocol=tcp
add action=mark-packet chain=services-classifier comment="HTTP PRIO #6" \
   connection-bytes=4096001-20480000 connection-mark=cm_http \
   new-packet-mark=pm_http_prio6 passthrough=no protocol=tcp
add action=mark-packet chain=services-classifier comment="HTTP PRIO #8" \
   connection-bytes=20480001-0 connection-mark=cm_http new-packet-mark=\
   pm_http_prio8 passthrough=no protocol=tcp
add action=mark-connection chain=services-classifier comment=HTTPS dst-port=\
   443 new-connection-mark=cm_https protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_https protocol=tcp src-port=443
add action=mark-packet chain=services-classifier connection-mark=cm_https \
   new-packet-mark=pm_https passthrough=no
add action=mark-connection chain=services-classifier comment=EMAIL dst-port=\
   25,110,143,465,585,993,995 new-connection-mark=cm_email protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_email protocol=tcp src-port=25,110,143,465,585,993,995
add action=mark-packet chain=services-classifier connection-mark=cm_email \
   new-packet-mark=pm_email passthrough=no
add action=mark-connection chain=services-classifier comment=STREAMING \
   dst-port=1935 new-connection-mark=cm_streaming protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_streaming protocol=tcp src-port=1935
add action=mark-packet chain=services-classifier connection-mark=cm_streaming \
   new-packet-mark=pm_streaming passthrough=no
add action=mark-connection chain=services-classifier comment=\
   "YAHOO MESSENGER" dst-port=5050 new-connection-mark=cm_ym protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_ym protocol=tcp src-port=5050
add action=mark-packet chain=services-classifier connection-mark=cm_ym \
   new-packet-mark=pm_ym passthrough=no
add action=mark-connection chain=services-classifier comment=TEAMVIEWER \
   dst-port=5938 new-connection-mark=cm_teamviewer protocol=tcp
add action=mark-connection chain=services-classifier dst-port="" \
   new-connection-mark=cm_teamviewer protocol=tcp src-port=5938
add action=mark-packet chain=services-classifier connection-mark=\
   cm_teamviewer new-packet-mark=pm_teamviewer passthrough=no
add action=mark-connection chain=services-classifier comment=WINBOX dst-port=\
   8291 new-connection-mark=cm_winbox protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_winbox protocol=tcp src-port=8291
add action=mark-packet chain=services-classifier connection-mark=cm_winbox \
   new-packet-mark=pm_winbox passthrough=no
add action=mark-connection chain=services-classifier comment=VNC dst-port=\
   5900-5950 new-connection-mark=cm_vnc protocol=tcp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_vnc protocol=tcp src-port=5900-5950
add action=mark-packet chain=services-classifier connection-mark=cm_vnc \
   new-packet-mark=pm_vnc passthrough=no
add action=mark-connection chain=services-classifier comment="P2P TORRENT" \
   new-connection-mark=cm_p2p p2p=all-p2p
add action=mark-packet chain=services-classifier connection-mark=cm_p2p \
   new-packet-mark=pm_p2p passthrough=no
add action=mark-connection chain=services-classifier comment="OTHER TCP" \
   new-connection-mark=cm_other-tcp protocol=tcp
add action=mark-packet chain=services-classifier connection-mark=cm_other-tcp \
   new-packet-mark=pm_other-tcp passthrough=no
add action=mark-connection chain=services-classifier comment=" UDP" dst-port=\
   53 new-connection-mark=cm_dns protocol=udp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_dns protocol=udp src-port=53
add action=mark-packet chain=services-classifier connection-mark=cm_dns \
   new-packet-mark=pm_dns passthrough=no
add action=mark-connection chain=services-classifier comment=NTP dst-port=123 \
   new-connection-mark=cm_ntp protocol=udp
add action=mark-packet chain=services-classifier connection-mark=cm_ntp \
   new-packet-mark=pm_ntp passthrough=no
add action=mark-connection chain=services-classifier comment=\
   "YAHOO MESSENGER UDP" dst-port=3478 new-connection-mark=cm_ym_udp \
   protocol=udp src-port=1024-5000
add action=mark-connection chain=services-classifier dst-port=1024-5000 \
   new-connection-mark=cm_ym_udp protocol=udp src-port=3478
add action=mark-packet chain=services-classifier connection-mark=cm_ym_udp \
   new-packet-mark=pm_ym_udp
add action=mark-connection chain=services-classifier comment=SIP/VOIP \
   dst-port=5060 new-connection-mark=cm_voip protocol=udp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_voip protocol=udp src-port=5060
add action=mark-packet chain=services-classifier connection-mark=cm_voip \
   new-packet-mark=pm_voip
add action=mark-connection chain=services-classifier comment=SNMP dst-port=\
   161,162 new-connection-mark=cm_snmp protocol=udp
add action=mark-connection chain=services-classifier new-connection-mark=\
   cm_snmp protocol=udp src-port=161,162
add action=mark-packet chain=services-classifier connection-mark=cm_snmp \
   new-packet-mark=pm_snmp passthrough=no
add action=mark-connection chain=services-classifier comment="SKYPE UDP L7" \
   layer7-protocol=skype new-connection-mark=cm_skype_udp protocol=udp
add action=mark-connection chain=services-classifier layer7-protocol=\
   skypetoskype new-connection-mark=cm_skype_udp protocol=udp
add action=mark-packet chain=services-classifier connection-mark=cm_skype_udp \
   new-packet-mark=pm_skype_udp passthrough=no
add action=mark-connection chain=services-classifier comment="OTHER UDP" \
   new-connection-mark=cm_other-udp protocol=udp
add action=mark-packet chain=services-classifier connection-mark=cm_other-udp \
   new-packet-mark=pm_other-udp passthrough=no
add action=return chain=services-classifier


Queue Tree Configuration - in this example, bandwitdh is set for 5 Mbps.
please change according to your network
keep in mind that maximum sum of limit-at of the child, cannot larger that the parent max-limit value

Código (mk) [Seleccionar]
/queue tree
add max-limit=5M name=INTERNET parent=global-out priority=3
add limit-at=256k max-limit=5M name=PRIO#1 parent=INTERNET priority=1
add limit-at=512k max-limit=4M name=PRIO#2 parent=INTERNET priority=2
add limit-at=384k max-limit=3M name=PRIO#3 parent=INTERNET priority=3
add limit-at=256k max-limit=2M name=PRIO#4 parent=INTERNET priority=4
add limit-at=256k max-limit=2M name=PRIO#5 parent=INTERNET priority=5
add limit-at=128k max-limit=1536k name=PRIO#6 parent=INTERNET priority=6
add limit-at=96k max-limit=1M name=PRIO#7 parent=INTERNET priority=7
add limit-at=128k max-limit=1M name=PRIO#8 parent=INTERNET
add name=icmp packet-mark=pm_icmp parent=PRIO#1 priority=1
add name=dns packet-mark=pm_dns parent=PRIO#1 priority=1
add name=ssh packet-mark=pm_ssh parent=PRIO#1 priority=1
add name=vnc packet-mark=pm_vnc parent=PRIO#2 priority=2
add name=winbox packet-mark=pm_winbox parent=PRIO#2 priority=2
add name=ntp packet-mark=pm_ntp parent=PRIO#2 priority=2
add name=skype packet-mark=pm_skype parent=PRIO#2 priority=2
add name=email packet-mark=pm_email parent=PRIO#3 priority=3
add name=https packet-mark=pm_https parent=PRIO#4 priority=4
add name=http_small packet-mark=pm_http_prio3 parent=PRIO#3 priority=3
add name=ftp packet-mark=pm_ftp parent=PRIO#4 priority=4
add name=other-tcp packet-mark=pm_other-tcp parent=PRIO#8
add name=other-udp packet-mark=pm_other-udp parent=PRIO#8
add name=pve-mgmnt packet-mark=pm_proxmox parent=PRIO#2 priority=2
add name=snmp packet-mark=pm_snmp parent=PRIO#2 priority=2
add name=thedude packet-mark=pm_dude parent=PRIO#2 priority=2
add name=http_heavy packet-mark=pm_http_prio8 parent=PRIO#7 priority=7 queue=\
   pcq-http
add name=p2p-torrent packet-mark=pm_p2p parent=PRIO#8
add name=http_medium packet-mark=pm_http_prio5 parent=PRIO#5 priority=5 \
   queue=pcq-http
add name=http_large packet-mark=pm_http_prio6 parent=PRIO#6 priority=6 queue=\
   pcq-http
add name=http_light packet-mark=pm_http_prio4 parent=PRIO#4 priority=4 queue=\
   pcq-http
add name=voip packet-mark=pm_voip parent=PRIO#2 priority=2
add name=stream-rtmp packet-mark=pm_streaming parent=PRIO#3 priority=3
add name=skype-udp packet-mark=pm_skype_udp parent=PRIO#2 priority=2
add name=teamviewer packet-mark=pm_teamviewer parent=PRIO#2 priority=2
add name=ym-tcp packet-mark=pm_ym parent=PRIO#2 priority=2
add name=ym-udp packet-mark=pm_ym_udp parent=PRIO#2 priority=2


in routeros v6 change parent global-out to global
Código (mk) [Seleccionar]
add max-limit=5M name=INTERNET parent=global priority=3

Queue Types
Código (mk) [Seleccionar]
/queue type
set 0 pfifo-limit=500
add kind=sfq name=default-sfq sfq-perturb=8
add kind=pcq name=pcq-http pcq-burst-time=16s pcq-classifier=dst-address \
   pcq-dst-address6-mask=64 pcq-limit=500 pcq-src-address6-mask=64 \
   pcq-total-limit=20000
set 9 pfifo-limit=100


hope this help
greetings from Indonesia
:)


Los coloque y no me funciono me tardeaba mucho para abrir Google nada mas se imaginan el resto de los clientes yo que estoy ilimitados y mis clientes si peor aun
Título: Re:Qos
Publicado por: luis24 en Agosto 21, 2013, 03:44:20 PM
Por eso repito,no copien y peguen...deben analizar que hace cada regla y como se marca,todo depende del tipo de servicio que deseen brindar...cualquier cosa que necesiten puedo colaborar con un Qos acorde a su Red.....Saludos.
Título: Re:Qos
Publicado por: ingjaab en Agosto 24, 2013, 12:10:17 AM
Cita de: luis24 en Agosto 21, 2013, 07:14:08 AM
No estoy de acuerdo en copiar y pegar reglas...Puede servir como también puede hacer un desastre en la Red...Hay que ver cada caso en particular ya que cada Red es totalmente diferente...para la gente que usa Simple Queue deben cambiar el parent Global Out por la Interface real de Salida.
haber como lo cambio global out si no exite solo dice global nada mas si uso version 6
Título: Re:Qos
Publicado por: luis24 en Agosto 24, 2013, 08:14:02 PM
Ponete en Contacto y te doy una mano....Saludos.
Título: Re:Qos
Publicado por: rifranco202325 en Agosto 24, 2013, 08:54:13 PM
Cita de: luis24 en Agosto 24, 2013, 08:14:02 PM
Ponete en Contacto y te doy una mano....Saludos.

men  tu tienes para la comparticion de los clientes
Título: Re:Qos
Publicado por: leandro1979 en Septiembre 03, 2013, 08:18:39 PM
Buenas Noches

Les dejo mi aportación
son 100% modificables para cualquier red y muy simples de entender
Espero les sea de utilidad para que entiendan como funciona un  qos
y recuerden lo siempre lo complicado es lo mejor aveces lo sencillo resulta mas util

Saludos Cordiales,
Leandro Segovia

PD. La ether1 es por donde entra el internet o conexion a tu borde depende como lo utilices

/ip firewall mangle
add action=mark-packet chain=prerouting comment=QoS_1 disabled=no \
    in-interface=ether1 new-packet-mark=QoS_1_In passthrough=no protocol=tcp \
    src-port=80,53,443,3074,1863,22,8291,3389,21
add action=mark-packet chain=postrouting disabled=no dst-port=\
    80,53,443,3074,1863,22,8291,3389,21 new-packet-mark=QoS_1_Out \
    out-interface=ether1 passthrough=no protocol=tcp tcp-flags=syn
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_1_In passthrough=no protocol=udp src-port=\
    53,88,3074,1863
add action=mark-packet chain=postrouting disabled=no dst-port=53,88,3074,1863 \
    new-packet-mark=QoS_1_Out out-interface=ether1 passthrough=no protocol=\
    udp
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_1_In passthrough=no protocol=icmp
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_1_Out out-interface=ether1 passthrough=no protocol=icmp
add action=mark-packet chain=prerouting comment=QoS_2 disabled=no \
    in-interface=ether1 new-packet-mark=QoS_2_In passthrough=no protocol=tcp \
    src-port=110,25,995,465,587,113
add action=mark-packet chain=postrouting disabled=no dst-port=\
    110,25,995,465,587,113 new-packet-mark=QoS_2_Out out-interface=ether1 \
    passthrough=no protocol=tcp
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_2_In passthrough=no protocol=udp src-port=123,113
add action=mark-packet chain=postrouting disabled=no dst-port=123,113 \
    new-packet-mark=QoS_2_Out out-interface=ether1 passthrough=no protocol=\
    udp
add action=mark-packet chain=prerouting comment=Qos_7 disabled=no \
    in-interface=ether1 new-packet-mark=QoS_7_In passthrough=no protocol=tcp
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_7_Out out-interface=ether1 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_7_In passthrough=no protocol=udp
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_7_Out out-interface=ether1 passthrough=no protocol=udp
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_7_In passthrough=no
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_7_Out out-interface=ether1 passthrough=no
add action=mark-packet chain=prerouting comment=QoS_8 disabled=no \
    in-interface=ether1 new-packet-mark=QoS_8_In p2p=all-p2p passthrough=no
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_8_Out out-interface=ether1 p2p=all-p2p passthrough=no


/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_Download packet-mark="" parent=global-in priority=8
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_1_In packet-mark=QoS_1_In parent=QoS_Download \
    priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_2_In packet-mark=QoS_2_In parent=QoS_Download \
    priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_7_In packet-mark=QoS_7_In parent=QoS_Download \
    priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_8_In packet-mark=QoS_8_In parent=QoS_Download \
    priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_Upload packet-mark="" parent=global-out priority=8
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_1_Out packet-mark=QoS_1_Out parent=QoS_Upload \
    priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_2_Out packet-mark=QoS_2_Out parent=QoS_Upload \
    priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_7_Out packet-mark=QoS_7_Out parent=QoS_Upload \
    priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_8_Out packet-mark=QoS_8_Out parent=QoS_Upload \
    priority=8 queue=default
Título: Re:Qos
Publicado por: ingjaab en Octubre 18, 2013, 09:16:55 PM
 ??? aqui dejo un link de QoS en version 6:

http://forum.mikrotik.com/viewtopic.php?t=73214&p=384066
Título: Re:Qos
Publicado por: rifranco202325 en Octubre 20, 2013, 12:24:44 AM
HOLA AMIGOS AKI DEJANDO MI GRANITO DE ARENA ESPERO Q LE SIRVA A MUCHOS DE USTEDES
/ip firewall mangle
add action=mark-packet chain=postrouting connection-mark=squid-connection disabled=no new-packet-mark=squid-packs passthrough=yes
add action=mark-connection chain=prerouting comment="HOME 2.1Mbps/700k-A" disabled=no dst-address-list="HOME 2Mbps8-1-A" new-connection-mark=HOME-RJ_2Mbps_in passthrough=yes
add action=mark-connection chain=forward disabled=no new-connection-mark=HOME-RJ_2Mbps_out passthrough=yes src-address-list="HOME 2Mbps8-1-A"
add action=mark-packet chain=prerouting connection-mark=HOME-RJ_2Mbps_in disabled=no new-packet-mark=HOME-FM_2Mbps_in passthrough=no
add action=mark-packet chain=forward connection-mark=HOME-RJ_2Mbps_out disabled=no new-packet-mark=HOME-FM_2Mbps_out passthrough=no

/queue type
add kind=sfq name=RJ_QoS sfq-allot=1514 sfq-perturb=5
add kind=pcq name=2.1MB-Down pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-classifier=dst-address pcq-dst-address-mask=32 pcq-dst-address6-mask=128 pcq-limit=50 \
    pcq-rate=2100k pcq-src-address-mask=32 pcq-src-address6-mask=128 pcq-total-limit=2000
add kind=pcq name=2.1MB-Up pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-classifier=src-address pcq-dst-address-mask=32 pcq-dst-address6-mask=128 pcq-limit=50 \
    pcq-rate=2100k pcq-src-address-mask=32 pcq-src-address6-mask=128 pcq-total-limit=2000




/ques tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=Rj_Main_DOWN packet-mark="" parent=global-out priority=5
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=Rj_Main_UP packet-mark="" parent=global-out priority=5
add burst-limit=0 burst-threshold=2100k burst-time=10s comment="Group HOME 2Mbps/2Mbps Download" disabled=no limit-at=700k max-limit=2100k name="HOME 2Mbps8-1-A_DOWN" packet-mark=\
    HOME-FM_2Mbps_in parent=Rj_Main_DOWN priority=8 queue=2.1MB-Down
add burst-limit=0 burst-threshold=2100k burst-time=10s comment="Group HOME 2Mbps/2Mbps Upload" disabled=no limit-at=700k max-limit=2100k name="HOME 2Mbps8-1-A_UP" packet-mark=\
    HOME-FM_2Mbps_out parent=Rj_Main_UP priority=8 queue=700k-Up

PUES SI ALGO NO ESTA BIEN PUES AYUDEMEN A CORREGIR PERO A MI ME TRABAJA BIEN
Y DE IGUALMANERA NO DEJEN DE PONER UN LIKE
















Título: Re:Qos
Publicado por: rifranco202325 en Octubre 20, 2013, 12:26:30 AM
y no se porq no salieron las imagenes porq si estaban para la prueba.............

si lo ponen en otro foro no olvidar de agradecer a rifranco202325
Título: Re:Qos
Publicado por: RASTAMAN en Diciembre 11, 2013, 01:50:28 PM
Cita de: leandro1979 en Septiembre 03, 2013, 08:18:39 PM
Buenas Noches

Les dejo mi aportación
son 100% modificables para cualquier red y muy simples de entender
Espero les sea de utilidad para que entiendan como funciona un  qos
y recuerden lo siempre lo complicado es lo mejor aveces lo sencillo resulta mas util

Saludos Cordiales,
Leandro Segovia

PD. La ether1 es por donde entra el internet o conexion a tu borde depende como lo utilices

/ip firewall mangle
add action=mark-packet chain=prerouting comment=QoS_1 disabled=no \
    in-interface=ether1 new-packet-mark=QoS_1_In passthrough=no protocol=tcp \
    src-port=80,53,443,3074,1863,22,8291,3389,21
add action=mark-packet chain=postrouting disabled=no dst-port=\
    80,53,443,3074,1863,22,8291,3389,21 new-packet-mark=QoS_1_Out \
    out-interface=ether1 passthrough=no protocol=tcp tcp-flags=syn
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_1_In passthrough=no protocol=udp src-port=\
    53,88,3074,1863
add action=mark-packet chain=postrouting disabled=no dst-port=53,88,3074,1863 \
    new-packet-mark=QoS_1_Out out-interface=ether1 passthrough=no protocol=\
    udp
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_1_In passthrough=no protocol=icmp
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_1_Out out-interface=ether1 passthrough=no protocol=icmp
add action=mark-packet chain=prerouting comment=QoS_2 disabled=no \
    in-interface=ether1 new-packet-mark=QoS_2_In passthrough=no protocol=tcp \
    src-port=110,25,995,465,587,113
add action=mark-packet chain=postrouting disabled=no dst-port=\
    110,25,995,465,587,113 new-packet-mark=QoS_2_Out out-interface=ether1 \
    passthrough=no protocol=tcp
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_2_In passthrough=no protocol=udp src-port=123,113
add action=mark-packet chain=postrouting disabled=no dst-port=123,113 \
    new-packet-mark=QoS_2_Out out-interface=ether1 passthrough=no protocol=\
    udp
add action=mark-packet chain=prerouting comment=Qos_7 disabled=no \
    in-interface=ether1 new-packet-mark=QoS_7_In passthrough=no protocol=tcp
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_7_Out out-interface=ether1 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_7_In passthrough=no protocol=udp
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_7_Out out-interface=ether1 passthrough=no protocol=udp
add action=mark-packet chain=prerouting disabled=no in-interface=ether1 \
    new-packet-mark=QoS_7_In passthrough=no
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_7_Out out-interface=ether1 passthrough=no
add action=mark-packet chain=prerouting comment=QoS_8 disabled=no \
    in-interface=ether1 new-packet-mark=QoS_8_In p2p=all-p2p passthrough=no
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
    QoS_8_Out out-interface=ether1 p2p=all-p2p passthrough=no


/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_Download packet-mark="" parent=global-in priority=8
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_1_In packet-mark=QoS_1_In parent=QoS_Download \
    priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_2_In packet-mark=QoS_2_In parent=QoS_Download \
    priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_7_In packet-mark=QoS_7_In parent=QoS_Download \
    priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_8_In packet-mark=QoS_8_In parent=QoS_Download \
    priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_Upload packet-mark="" parent=global-out priority=8
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_1_Out packet-mark=QoS_1_Out parent=QoS_Upload \
    priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_2_Out packet-mark=QoS_2_Out parent=QoS_Upload \
    priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_7_Out packet-mark=QoS_7_Out parent=QoS_Upload \
    priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=0 name=QoS_8_Out packet-mark=QoS_8_Out parent=QoS_Upload \
    priority=8 queue=default



mi hermano disculpe pero no tiene ningun limite estas colas
Título: Re:Qos
Publicado por: centronick en Diciembre 12, 2013, 10:31:33 AM
Cita de: RASTAMAN en Diciembre 11, 2013, 01:50:28 PM

mi hermano disculpe pero no tiene ningun limite estas colas

Donde me funciona mejor en un balanceador mikrotik o el administrador mikrotik

y mas que todo cual es la funcion de todas estas reglas

Gracias
Título: Re:Qos
Publicado por: WebNewbie en Julio 28, 2014, 07:57:59 PM
Para aquellos que tienen en su configuración a Internet a través de una interfaz pppoe, se habrán dado cuenta que hay dos reglas dinámicas creadas cuando se inicia una conexión a internet dentro de Mangle. Estas 2 reglas tienen que estar al inicio para que el QoS de si_faisal funcione.

Primero desactivamos el valor por defecto de una conexión pppoe-out:
/ppp profile set default name="default" change-tcp-mss=no

Luego creamos nuestra propia MSS:

/ip firewall mangle
add chain=forward in-interface=all-ppp protocol=tcp \
tcp-mss=1411-65535 tcp-flags=syn action=change-mss new-mss=1410 place-before=0
add chain=forward out-interface=all-ppp protocol=tcp \
tcp-mss=1411-65535 tcp-flags=syn action=change-mss new-mss=1410 place-before=1

Luego lo mueves al principio de todas las demás reglas existentes en Manglo.

Ojo que para poner el valor de new-mss debes considerarlo según http://www.mikrotik.com/download/MUM-crachiolo.zip

tomando como modelo el siguiente codigo:
/ip firewall mangle add chain=forward protocol=tcp in-interface=all-ppp tcp-flags=syn tcp-mss={Whatever the MTU is, subtract 40 and add 1}-65535 action=change-mss passthrough=yes new-mss={Whatever the MTU is, subtract 40}