Code:
Modem === Mikrotik === User || || Proxy Squid
Hal itu sama dengan huruf :
Quote:
Y |
dimana di ketiga sisinya terdapat Modem, Proxy dan User. Mikrotik berada pas di pertigaannya.
Study Kasus, Mohon diperhatikan :
Study Kasus, Mohon diperhatikan :
- Semua aktifitas user port 80, 81, 8080 dan 3128 di belokkan ke proxy, jika proxy belum mengcache maka si proxy akan mengambil dari Modem(internet), menyimpan di cache sekaligus menjawab request dari user.
- Aktivitas user selain port 80, 81, 8080 dan 3128 akan melewati jalur menuju arah modem [download dari FTP ata dari P2P => jika akses P2P tidak di blok]
Dari 2 study kasus di atas muncullah pemikiran, bahwa :
- Semua akses ke arah Modem harus di limit agar ada BW dapat tersisa yg bisa di gunakan untuk game online mengingat port game tidak di belokkan ke proxy squid.
- Sedangkan akses antara Proxy Squid dan User di LOSS agar terjadi HIT atau transfer packet yg udah ada di cache proxy dapat di nikmati LOSS oleh user.
Lalu muncullah trik kecil untuk menjawab smua itu :
1. Proxy Hit is LOSS
Quote:
/ip firewall mangle add action=mark-connection chain=forward comment=Proxy_HIT disabled=no in-interface=Proxy \ new-connection-mark=Hit out-interface=Lokal passthrough=yes protocol=tcp add action=mark-packet chain=forward comment="" connection-mark=Hit \ disabled=no in-interface=Proxy new-packet-mark=Hit\ out-interface=Lokal passthrough=no protocol=tcp /queues tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=0 name=.:Proxy Hit:. packet-mark=Hit parent=global-out priority=1 \ queue=default |
2. Limit Aktifitas Modem - User
Quote:
/ip firewall mangle add action=mark-connection chain=forward comment=DownloadfromLan connection-bytes=\ 256000-4294967295 disabled=no in-interface=Modem \ new-connection-mark=Down Lan out-interface=Lokal passthrough=yes protocol=tcp add action=mark-packet chain=forward comment="" connection-mark=Down Lan \ disabled=no in-interface=Modem new-packet-mark=Download Lan\ out-interface=Lokal passthrough=no protocol=tcp /queues type add kind=pcq name=Download pcq-classifier=dst-address pcq-limit=50 pcq-rate=\ 128000 pcq-total-limit=2000 /queues tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=256000 name=Limit Download form Lanpacket-mark=Download Lan parent=global-out priority=8 \ queue=Download |
3. Limit Aktifitas Modem - Proxy
Quote:
/ip firewall mangle add action=mark-connection chain=forward comment=DownloadfromProxy connection-bytes=\ 256000-4294967295 disabled=no in-interface=Modem \ new-connection-mark=Down Proxy out-interface=Proxy passthrough=yes protocol=tcp add action=mark-packet chain=forward comment="" connection-mark=Down Proxy \ disabled=no in-interface=Modem new-packet-mark=Download Proxy\ out-interface=Proxy passthrough=no protocol=tcp /queues type add kind=pcq name=Download pcq-classifier=dst-address pcq-limit=50 pcq-rate=\ 128000 pcq-total-limit=2000 /queues tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=256000 name=Limit Download from Proxy packet-mark=Download Proxy parent=global-out priority=8 \ queue=Download |
Tidak ada komentar:
Posting Komentar