3.0X以上版本的NTH的方法。现在正在翻译中,,
3.0X以上版本的NTH的方法。现在正在翻译中,,和2。927以上的版本有很大的区别。。。NTH in RouterOS 3.x
From MikroTik Wiki
Jump to: navigation, search
In v3.0 it is a little different implementation of NTH. It has only two parameters 'every' and 'packet'.
How it works in v3.0
Every rule has its own counter. When rule receives packet counter for current rule is increased by one. If counter matches value of 'every' packet will be matched and counter will be set to zero.
If passthrough is not set then packets will be marked as follows:
* first rule nth=2,1 rule will match every first packet of 2, hence, 50% of all the traffic that is matched by the rules
* second rule if passthrough=no will match ONLY 25% of traffic because in 3.0 you need only one rule to catch traffic not like 2.9
Example
Now it is possible to match 50% of all traffic only with one rule:
/ip firewall mangle
add action=mark-packet chain=prerouting new-packet-mark=AAA nth=2,1;
If more than one rule is needed, then there are two ways to match packets:
* first rule sees all packets and matches 1/3 of all, second rule sees 2/3 of packets and matches 1/2, third rule sees and matches all packets that passed through first two rules ( 1/3 of all packets ).
/ip firewall mangle
add action=mark-packet chain=prerouting new-packet-mark=AAA nth=3,1 passthrough=no;
add action=mark-packet chain=prerouting new-packet-mark=BBB nth=2,1 passthrough=no;
add action=mark-packet chain=prerouting new-packet-mark=CCC ;
* all rules can see all packets and each rule matches every 3-rd packet.
/ip firewall mangle
add action=mark-packet chain=prerouting new-packet-mark=AAA nth=3,1 passthrough=yes;
add action=mark-packet chain=prerouting new-packet-mark=BBB nth=3,2 passthrough=yes;
add action=mark-packet chain=prerouting new-packet-mark=CCC nth=3,3 passthrough=yes;
Retrieved from "http://wiki.mikrotik.com/wiki/NTH_in_RouterOS_3.x"
好像3。0X以上的版本NTH不是标记外网所有连接。而是标记数据包。还在研究中。。。。 强啊。楼主厉害。 支持楼主的行动! 顶一下,希望早点翻译出来,帮助我们这些E文超烂的人!!! 貌似很强噢 nth 作啥的啊??全称 是什么呢?? n 表示第几的意思,TH就是数量了
整体就是表示“第N个”
[ 本帖最后由 专卖精品 于 2008-4-22 19:59 编辑 ] 哎雅思在好 计算机英语还是=0 这和雅思 有啥关系的阿。。
是站点没说明阿。。 官方也就 简单几个字介绍。。 我对上面的理解。 应该是关于防火墙 对过滤包的策略。
循环冗余 检测。 一阶正则牛顿迭代求根过程进行任意阶分抗的近似求解方法.通过迭代求解n阶方程的正实根,作为分抗的模拟.给出迭代的精确公式,并分析其收敛必须满足的条件 过滤规则 应该是由上面的 作启迪的。 官方的例子是看懂了,但我不明白官方为什么要这么改,改了之后有什么好处?他这样弄后我觉得更加难以理解NTH的应用了
如果在比较复杂的负载均衡的例子中,NTH感觉上比较难以理解
页:
[1]