|
发表于 2012-3-22 22:04:31
|
显示全部楼层
已经完全下载了,安装版本3.20 ,现在导入脚本,楼主帮助看看!- # ros3.30-HTB流控 By:佛光菜根谭 QQ:304120225
- #
- #
- #
- # 说明: 网段为 192.168.11.0/24 默认带宽100M, 200台客户机 请根据实际情况修改
- #
- /ip firewall address-list
- add address=192.168.1.0/24 comment="内网机1" disabled=no list=wks
- add address=192.168.10.0/24 comment="内网机1" disabled=no list=wks
- add address=192.168.20.0/24 comment="内网机1" disabled=no list=wks
- add address=192.168.30.0/24 comment="内网机1" disabled=no list=wks
- add address=192.168.40.0/24 comment="内网机1" disabled=no list=wks
- add address=192.168.50.0/24 comment="内网机1" disabled=no list=wks
- /ip firewall mangle
- add action=mark-connection chain=prerouting comment=" *\B7\F0\B9\E2\B2\CB\B8\
- \F9\CC\B7* QQ:304120225 HTB + PCQ \B6\AF\CC\AC\C1\F7\BF\D8 \$\$\$\
- \$\$\$\$\$< \B4\FA\BA\C5:\B2\BB\B6\AE\CE\C2\C8\E1 > \$\$\$\$\$\$\$\$ \
- \_ \CA\A5\CD\A2\B3\F6\C6\B7 \B1\D8\CA\F4\BE\AB\C6\B7 " disabled=no \
- limit=5,5 new-connection-mark=icmp passthrough=yes protocol=icmp
- add action=mark-packet chain=postrouting comment="" connection-mark=icmp \
- disabled=no limit=5,5 new-packet-mark=icmps passthrough=no \
- src-address-list=wks
- add action=mark-packet chain=prerouting comment="" connection-mark=icmp \
- disabled=no limit=5,5 new-packet-mark=icmp passthrough=no
- add action=mark-packet chain=postrouting comment=ALL_UP disabled=no \
- new-packet-mark=lanup passthrough=no src-address-list=wks
- add action=mark-connection chain=prerouting comment="HTTP_\C1\B4\BD\D3" \
- connection-bytes=700000-0 disabled=no new-connection-mark=http \
- passthrough=yes protocol=tcp src-port=80
- add action=mark-packet chain=prerouting comment="" connection-mark=http \
- disabled=no new-packet-mark=http passthrough=no
- add action=mark-connection chain=prerouting comment="WEB_\C1\B4\BD\D3" \
- connection-bytes=0-700000 disabled=no new-connection-mark=web \
- passthrough=yes protocol=tcp src-port=80
- add action=mark-connection chain=prerouting comment="" connection-rate=0-80k \
- disabled=no new-connection-mark=web passthrough=yes protocol=udp \
- src-port=53
- add action=mark-packet chain=prerouting comment="" connection-mark=web \
- disabled=no new-packet-mark=web passthrough=no
- add action=mark-connection chain=prerouting comment="Games_\C1\B4\BD\D3" \
- connection-rate=0-80k disabled=no new-connection-mark=game passthrough=\
- yes protocol=tcp src-port=3724,6112,6114,1119,7777,10241
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=5692,7101-7103,28012,2349,8586,10001-10070,28008,31414,6299,5130
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=\
- 3110-3120,6217,2181,28880,8001,21800,8030,6020,6030,6877,4680,13000-13002
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=\
- 3110-3120,28993,29000,5816,6868,33567,39311,9600,1119,3025,31414,3470
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=\
- 6004,7004,5562,9010-9014,17703-17706,8801,1253,1346,1272,1203,3468
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=\
- 25520-25521,25511,10906,30000-30010,8445-8451,3731-3735,7449,7237
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=7100-7200,7440,7491,7204,7400-7401,7500,7300,6040,6050,6661-6663
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=27931,47611,1607,2175,6000,20002-20007,22001,13317
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=7100,7203-7204,7400,7417,6831-6832,6840-6847,8888
- add action=mark-connection chain=prerouting comment="" connection-rate=0-10k \
- disabled=no new-connection-mark=game passthrough=yes protocol=tcp \
- src-port=14500,8000,15000
- add action=mark-connection chain=prerouting comment="" connection-rate=0-59k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port=12000-13000,2349,5063,39311,1764,12721,3133,4550,3620
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port="8861,1932,2287,14531,1897,2428,13735,1039,1100,1210,1381,1473,15\
- 09,1785,18979"
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port="1140,1371,1510,16434,9865,2105,1497,31519,9000,1151,4311,1506,15\
- 59,55952,59823"
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port="32404,32405,32406,1176,1076,1169,13791,1139,11337,9000,1511,2009\
- 6,20059,27005-27030"
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port="7263,2408,2468,2117,1871,1429,2294,1520,57236,1429,2494,7625,155\
- 2,1842,12411"
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port="1273,1061,65473,1940,2882,1501,4078,8369,4861,4964,8445-8452,708\
- 1,30700-30711"
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port="32824,9646,8024,15966,18997,49386,15086,22634,35339,1610,1308,66\
- 60,6600,1991,30195"
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port="12345,6660,1610,6600,7002,15002-15004,3100,1059,4111,32424,32299\
- ,15101-15104,14401"
- add action=mark-connection chain=prerouting comment="" connection-rate=0-20k \
- disabled=no new-connection-mark=game passthrough=yes protocol=udp \
- src-port=8000-8005,32407
- add action=mark-packet chain=prerouting comment="" connection-mark=game \
- disabled=no new-packet-mark=game passthrough=no
- add action=mark-connection chain=prerouting comment="Heavy_\C1\B4\BD\D3" \
- connection-bytes=200000-0 connection-rate=160k-200M disabled=no \
- new-connection-mark=heavy passthrough=yes protocol=tcp
- add action=mark-connection chain=prerouting comment="" connection-bytes=\
- 100000-0 connection-rate=100k-200M disabled=no new-connection-mark=heavy \
- passthrough=yes protocol=udp
- add action=mark-packet chain=prerouting comment="" connection-mark=heavy \
- disabled=no new-packet-mark=heavy passthrough=no
- add action=mark-connection chain=prerouting comment="Small_\C1\B4\BD\D3" \
- disabled=no new-connection-mark=small passthrough=yes
- add action=mark-packet chain=prerouting comment="" connection-mark=small \
- disabled=no new-packet-mark=small passthrough=no
- /queue type
- set default kind=pfifo name=default pfifo-limit=50
- set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
- set wireless-default kind=sfq name=wireless-default sfq-allot=1514 \
- sfq-perturb=5
- set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 \
- red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
- set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=\
- 5
- add kind=pcq name=1m_down pcq-classifier=dst-address pcq-limit=50 pcq-rate=\
- 1000000 pcq-total-limit=10000
- add kind=pcq name=0m_down pcq-classifier=dst-address pcq-limit=50 pcq-rate=0 \
- pcq-total-limit=10000
- add kind=pcq name=512k_up pcq-classifier=src-address pcq-limit=50 pcq-rate=\
- 512000 pcq-total-limit=10000
- set default-small kind=pfifo name=default-small pfifo-limit=10
- /queue tree
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
- max-limit=80M name=HTB_DOWN parent=global-in priority=1
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=5M \
- max-limit=70M name="1_\CD\F8\C2\E7\D3\CE\CF\B7" packet-mark=game parent=\
- HTB_DOWN priority=2 queue=1m_down
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=20M \
- max-limit=70M name="2_\CD\F8\D2\B3\E4\AF\C0\C0" packet-mark=web parent=\
- HTB_DOWN priority=3 queue=0m_down
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=20M \
- max-limit=70M name="3_\D0\A1\B0\FC\CA\FD\BE\DD" packet-mark=small parent=\
- HTB_DOWN priority=6 queue=1m_down
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
- max-limit=40M name=HTB_UP packet-mark=lanup parent=global-out priority=7 \
- queue=512k_up
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10M \
- max-limit=70M name="5_\CE\C4\BC\FE\CF\C2\D4\D8" packet-mark=heavy parent=\
- HTB_DOWN priority=8 queue=0m_down
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10M \
- max-limit=70M name="4_\D4\DA\CF\DF\CA\D3\C6\B5" packet-mark=http parent=\
- HTB_DOWN priority=7 queue=0m_down
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1M \
- max-limit=1M name=ICMP_DOWN packet-mark=icmp parent=global-in priority=1 \
- queue=default
- add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1M \
- max-limit=1M name=ICMP_UP packet-mark=icmps parent=global-out priority=1 \
- queue=default
复制代码 我的是多网段接入,修改版本:- /ip firewall address-list> print
- Flags: X - disabled, D - dynamic
- # LIST ADDRESS
- 0 ;;; 1
- wks 192.168.1.0/24
- 1 ;;; 2
- wks 192.168.10.0/24
- 2 ;;; 3
- wks 192.168.20.0/24
- 3 ;;; 4
- wks 192.168.30.0/24
- 4 ;;; 5
- wks 192.168.40.0/24
- 5 ;;; 6
- wks 192.168.50.0/24
复制代码 内网基本上都是网络办公,删除游戏部分:- /ip firewall mangle> pr
- Flags: X - disabled, I - invalid, D - dynamic
- 0 ;;; HTB + PCQ
- chain=prerouting action=mark-connection new-connection-mark=icmp passthrough=yes protocol=icmp limit=5,5
- 1 chain=postrouting action=mark-packet new-packet-mark=icmps passthrough=no src-address-list=wks connection-mark=icmp limit=5,5
- 2 chain=prerouting action=mark-packet new-packet-mark=icmp passthrough=no connection-mark=icmp limit=5,5
- 3 ;;; ALL_UP
- chain=postrouting action=mark-packet new-packet-mark=lanup passthrough=no src-address-list=wks
- 4 ;;; HTTP_
- chain=prerouting action=mark-connection new-connection-mark=http passthrough=yes protocol=tcp src-port=80 connection-bytes=700000-0
- 5 chain=prerouting action=mark-packet new-packet-mark=http passthrough=no connection-mark=http
- 6 ;;; WEB_
- chain=prerouting action=mark-connection new-connection-mark=web passthrough=yes protocol=tcp src-port=80 connection-bytes=0-700000
- 7 chain=prerouting action=mark-connection new-connection-mark=web passthrough=yes protocol=udp src-port=53
- 8 chain=prerouting action=mark-packet new-packet-mark=web passthrough=no connection-mark=web
- 9 ;;; Heavy_
- chain=prerouting action=mark-connection new-connection-mark=heavy passthrough=yes protocol=tcp connection-bytes=200000-0
- 10 chain=prerouting action=mark-connection new-connection-mark=heavy passthrough=yes protocol=udp connection-bytes=100000-0
- 11 chain=prerouting action=mark-packet new-packet-mark=heavy passthrough=no connection-mark=heavy
- 12 ;;; Small_
- chain=prerouting action=mark-packet new-packet-mark=small passthrough=yes
- 13 chain=prerouting action=mark-packet new-packet-mark=small passthrough=no connection-mark=small
-
复制代码 限速规则没有任何改变:- /queue type> print
- 0 name="default" kind=pfifo pfifo-limit=50
- 1 name="ethernet-default" kind=pfifo pfifo-limit=50
- 2 name="wireless-default" kind=sfq sfq-perturb=5 sfq-allot=1514
- 3 name="synchronous-default" kind=red red-limit=60 red-min-threshold=10 red-max-threshold=50 red-burst=20 red-avg-packet=1000
- 4 name="hotspot-default" kind=sfq sfq-perturb=5 sfq-allot=1514
- 5 name="1m_down" kind=pcq pcq-rate=1000000 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=10000
- 6 name="0m_down" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=10000
- 7 name="512k_up" kind=pcq pcq-rate=512000 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=10000
- 8 name="default-small" kind=pfifo pfifo-limit=10
复制代码 限速脚本- /queue tree> print
- Flags: X - disabled, I - invalid
- 0 name="HTB_DOWN" parent=global-in packet-mark="" limit-at=0 queue=default priority=1 max-limit=80000000 burst-limit=0 burst-threshold=0 burst-time=0s
- 1 name="1_\CD\F8\C2\E7\D3\CE\CF\B7" parent=HTB_DOWN packet-mark=game limit-at=5000000 queue=1m_down priority=2 max-limit=70000000 burst-limit=0 burst-threshold=0
- burst-time=0s
- 2 name="2_\CD\F8\D2\B3\E4\AF\C0\C0" parent=HTB_DOWN packet-mark=web limit-at=20000000 queue=0m_down priority=3 max-limit=70000000 burst-limit=0 burst-threshold=0
- burst-time=0s
- 3 name="3_\D0\A1\B0\FC\CA\FD\BE\DD" parent=HTB_DOWN packet-mark=small limit-at=20000000 queue=1m_down priority=6 max-limit=70000000 burst-limit=0 burst-threshold=0
- burst-time=0s
- 4 name="HTB_UP" parent=global-out packet-mark=lanup limit-at=0 queue=512k_up priority=7 max-limit=40000000 burst-limit=0 burst-threshold=0 burst-time=0s
- 5 name="5_\CE\C4\BC\FE\CF\C2\D4\D8" parent=HTB_DOWN packet-mark=heavy limit-at=10000000 queue=0m_down priority=8 max-limit=70000000 burst-limit=0 burst-threshold=0
- burst-time=0s
- 6 name="4_\D4\DA\CF\DF\CA\D3\C6\B5" parent=HTB_DOWN packet-mark=http limit-at=10000000 queue=0m_down priority=7 max-limit=70000000 burst-limit=0 burst-threshold=0
- burst-time=0s
- 7 name="ICMP_DOWN" parent=global-in packet-mark=icmps limit-at=1000000 queue=default priority=1 max-limit=1000000 burst-limit=0 burst-threshold=0 burst-time=0s
- 8 name="ICMP_UP" parent=global-out packet-mark=icmps limit-at=1000000 queue=default priority=1 max-limit=1000000 burst-limit=0 burst-threshold=0 burst-time=0s
复制代码 3.20和3.30之间所有的 connection-rate=0-20k 都没有导入,发现3.20没有 connection-rate 选项!
|
|