Есть канал 140Мб. Машин около 100. Надо шейпить справедливо между всеми, в зависимости от количества активных машин в локалке. Проблема Steam. Обновления/загрузка забивает канал по самое небалуйся. Как бороться?
Код: Выделить всё
[root@MikroTik] /queue tree> print
Flags: X - disabled, I - invalid
0 name="DOWNLOAD" parent=global packet-mark="" limit-at=0 queue=default-small
priority=8 max-limit=140M burst-limit=0 burst-threshold=0 burst-time=0s
bucket-size=0.1
1 name="SUPER-HIGH-DOWNLOAD" parent=DOWNLOAD packet-mark=SUPER-HIGH-DOWNLOAD
limit-at=0 queue=PCQ-DOWNLOAD priority=1 max-limit=0 burst-limit=0
burst-threshold=0 burst-time=0s bucket-size=0.1
2 name="HIGH-DOWNLOAD" parent=DOWNLOAD packet-mark=HIGH-DOWNLOAD limit-at=0
queue=PCQ-DOWNLOAD priority=2 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s bucket-size=0.1
3 name="NORMAL-DOWNLOAD" parent=DOWNLOAD packet-mark=NORMAL-DOWNLOAD
limit-at=0 queue=PCQ-DOWNLOAD priority=3 max-limit=0 burst-limit=0
burst-threshold=0 burst-time=0s bucket-size=0.1
4 name="LOW-DOWNLOAD" parent=DOWNLOAD packet-mark=LOW-DOWNLOAD limit-at=0
queue=PCQ-DOWNLOAD priority=4 max-limit=0 burst-limit=0 burst-threshold=0
burst-time=0s bucket-size=0.1
5 name="UPLOAD" parent=global packet-mark="" limit-at=0 queue=default-small
priority=8 max-limit=140M burst-limit=0 burst-threshold=0 burst-time=0s
Код: Выделить всё
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; ############## LOW #############
chain=forward action=accept log=no log-prefix=""
1 ;;; ALL-TRAFFIC
chain=forward action=mark-connection new-connection-mark=LOW
passthrough=yes log=no log-prefix=""
2 ;;; LOW-DOWNLOAD
chain=forward action=mark-packet new-packet-mark=LOW-DOWNLOAD
passthrough=yes src-address-list=!LAN-EXCEPTION dst-address-list=LAN
connection-mark=LOW
3 ;;; LOW-UPLOAD
chain=prerouting action=mark-packet new-packet-mark=LOW-UPLOAD
passthrough=yes src-address-list=LAN dst-address-list=!LAN-EXCEPTION
connection-mark=LOW
4 X ;;; ############## END LOW #########
chain=forward action=accept
5 X ;;; ############## NORMAL #########
chain=forward action=accept
6 ;;; HTTP
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes layer7-protocol=HTTP protocol=tcp
7 ;;; HTTPS
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=443
8 ;;; Proxy
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=3128,8080
9 ;;; FTP
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=20,21
10 ;;; SMTP
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=25
11 ;;; SMTPS
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=465
12 ;;; IMAP
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=143
13 ;;; POP3
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=110
14 ;;; POP3S
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=995
15 ;;; IMAPS
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp port=993
16 ;;; GIF_FILE
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes layer7-protocol=GIF_FILE
17 ;;; PNG_FILE
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes layer7-protocol=PNG_FILE
18 ;;; JPG_FILE
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes layer7-protocol=JPG_FILE
19 ;;; 100Kb Connections
chain=forward action=mark-connection new-connection-mark=NORMAL
passthrough=yes protocol=tcp connection-bytes=0-100000
20 ;;; NORMAL-DOWNLOAD
chain=forward action=mark-packet new-packet-mark=NORMAL-DOWNLOAD
passthrough=yes src-address-list=!LAN-EXCEPTION dst-address-list=LAN
connection-mark=NORMAL
21 ;;; NORMAL-UPLOAD
chain=prerouting action=mark-packet new-packet-mark=NORMAL-UPLOAD
passthrough=yes src-address-list=LAN dst-address-list=!LAN-EXCEPTION
connection-mark=NORMAL
22 X ;;; ############## END NORMAL ############
chain=forward action=accept
23 X ;;; ############## HIGH ############
chain=forward action=accept
24 ;;; ICQ
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=tcp port=5190
25 ;;; Jabber
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=tcp port=5222,5223
26 ;;; IRC
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=tcp port=6667-6669
27 ;;; SSH
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=tcp port=22 packet-size=0-1400
28 ;;; TELNET
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=tcp port=23
29 ;;; SNMP
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=tcp port=161-162
30 ;;; PPTP
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=tcp port=1723
31 ;;; L2TP
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=udp port=1701
32 ;;; GRE
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=gre
33 ;;; 50Kb Connections
chain=forward action=mark-connection new-connection-mark=HIGH
passthrough=yes protocol=tcp connection-bytes=0-50000
34 ;;; HIGH-DOWNLOAD
chain=forward action=mark-packet new-packet-mark=HIGH-DOWNLOAD
passthrough=yes src-address-list=!LAN-EXCEPTION dst-address-list=LAN
connection-mark=HIGH
35 ;;; HIGH-UPLOAD
chain=prerouting action=mark-packet new-packet-mark=HIGH-UPLOAD
passthrough=yes src-address-list=LAN dst-address-list=!LAN-EXCEPTION
connection-mark=HIGH
36 X ;;; ############## END HIGH ##########
chain=forward action=accept
37 X ;;; ############## SUPER-HIGH ##########
chain=forward action=accept
38 ;;; CounterStrike
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=udp
port=27005,27014-27025,27035,52046-52048,52146
39 ;;; DNS
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=tcp src-port=53 port=53
40 ;;; DNS
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=tcp port=53
41 ;;; DNS
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=udp port=53
42 ;;; NNTP
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=tcp port=119
43 ;;; Winbox
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=tcp port=8291
44 ;;; ntp
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=udp port=123
45 ;;; VNC
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=tcp port=5900-5901
46 ;;; RDP
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=tcp port=3389
47 ;;; PING
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=icmp
48 ;;; 5Kb Connections
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=tcp connection-bytes=0-5000
49 ;;; SUPER-HIGH-DOWNLOAD
chain=forward action=mark-packet new-packet-mark=SUPER-HIGH-DOWNLOAD
passthrough=yes src-address-list=!LAN-EXCEPTION dst-address-list=LAN
connection-mark=SUPER-HIGH
50 ;;; SUPER-HIGH-UPLOAD
chain=prerouting action=mark-packet new-packet-mark=SUPER-HIGH-UPLOAD
passthrough=yes src-address-list=LAN dst-address-list=!LAN-EXCEPTION
connection-mark=SUPER-HIGH
51 X ;;; ############## END SUPER-HIGH ##########
chain=forward action=accept
52 ;;; COUNTER-STRIKE
chain=forward action=mark-connection new-connection-mark=SUPER-HIGH
passthrough=yes protocol=udp
port=27005,27014-27025,27035,52046-52048,52146 log=no log-prefix=""
53 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=tcp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=576
54 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=tcp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=1240
55 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=tcp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=1330
56 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=tcp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=1400
57 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=tcp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=1460
58 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=udp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=398
59 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=udp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=748
60 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=udp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=1430
61 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=udp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=1448
62 chain=prerouting action=mark-packet new-packet-mark=Torrent passthrough=no
protocol=udp in-interface=westcall.2iponwan src-port=1024-65535
packet-size=1466
63 ;;; ============ STEAM ================
chain=forward action=mark-connection new-connection-mark=STEAM-DOWNLOAD
passthrough=yes protocol=tcp port=27014-27050 log=no log-prefix=""
64 chain=forward action=mark-packet new-packet-mark=STEAM-MARK-DOWNLOAD
passthrough=yes connection-mark=STEAM-DOWNLOAD log=no log-prefix=""