LIMIT EKSTENSI DENGAN LAYER 7 & QUEUE TREE MIKROTIK (Cocok Untuk Warnet Atau Perkantoran)

Mungkin anda pernah mengalami atau ingin mensetting management bandwidth dan merasa jengkel dengan user yang mendownload file secara besar dan menggunakan Download Manager pasti susah di atasi, serta user yang lainnya banyak yang complaint lemot.

Jangan khawatir, dengan ramuan obat mujarab dari latvia yaitu mikrotik bisa diatasi.

Saya menggunakan Mikrotik Versy 3.20

Berikut cara limit ekstensi yang paling sering di download.

Pertama tandai ekstensi
------------------------------------------------------------------------------------------------------------

/ip firewall layer7-protocol

add comment="" name=High regexp="^.*get.+\\.(exe|rar|iso|zip|7zip|0[0-9][1-9]|\

    flv|mkv|avi|mp4|3gp|rmvb|mp3|img|dat|mov).*\$"

add comment="" name=Mid regexp="^.*get.+\\.(zip|rar|7z).*\$"

add comment="" name=End regexp=\

    "^.*get.+\\.(pdf|doc|docx|xlsx|xls|rtf|ppt|ppt).*\$"

add comment="" name=Video regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d ][1-5][\

    0-9][0-9][\\x09-\\x0d -~]*(content-type: video)"

add comment="" name=Update-an regexp="^.*get.+\\.(pdf|doc|docx|xlsx|xls|rtf|pp\

    t|ppt|jpeg|png|bin|idx|cab|gz|avc|gem|mcs|klz|dat|kdc).*\$"

add comment="" name=youtube regexp="o-o.preferred.pttelkom-|a.youtube.com|b.yo\

    utube.com|c.youtube.com|d.youtube.com|e.youtube.c om|f.youtube.com|g.youtu\

    be.com|h.youtube.com|i.youtube.com|j.youtube.com|l.youtube.com|metacafe.com|"

------------------------------------------------------------------------------------------------------------

Menggunakan Regular Expersion silahkan googling untuk penjelasanya.
High = File yg biasa berukuran besar dan paling sering didownload
Mid = File bertype zip rar 7z berukuran hanya sampai 10 MB jika lebih akan dilimit
End = File yg tidak ingin di limit
Video = Stream Video


Kedua Tandai mangle
------------------------------------------------------------------------------------------------------------

/ip firewall mangle

add action=mark-packet chain=forward comment="High Eks" disabled=no \

    layer7-protocol=High new-packet-mark=High-Ext passthrough=no protocol=tcp 

add action=mark-packet chain=forward comment="Mid Eks" connection-bytes=\

    10485760-4294967295 disabled=no layer7-protocol=Mid new-packet-mark=\

    Mid-Ext passthrough=no protocol=tcp

add action=mark-packet chain=forward comment="Low Eks" disabled=no \

    layer7-protocol=High new-packet-mark=End-Ext passthrough=no protocol=tcp 

add action=mark-packet chain=forward comment=Video disabled=no \

    layer7-protocol=youtube new-packet-mark=Video passthrough=no protocol=tcp 

add action=mark-packet chain=forward comment=Updatean disabled=no \

    layer7-protocol=Update-an new-packet-mark=Update-an passthrough=no \

    protocol=tcp

------------------------------------------------------------------------------------------------------------

Ketiga Buat PCQ dan Simple untuk limit/jepit ekstensi
------------------------------------------------------------------------------------------------------------

/queue tree

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

    max-limit=0 name="Limit(Ekstensi|Streaming|Updatean)" packet-mark="" \

    parent=global-out priority=3 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=8000 \

    max-limit=16000 name=High packet-mark=High-Ext parent=\

    "Limit(Ekstensi|Streaming|Updatean)" priority=8 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=8000 \

    max-limit=16000 name=Mid packet-mark=Mid-Ext parent=\

    "Limit(Ekstensi|Streaming|Updatean)" priority=6 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=512000 \

    max-limit=1000000 name=End packet-mark=End-Ext parent=\

    "Limit(Ekstensi|Streaming|Updatean)" priority=4 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=64000 \

    max-limit=128000 name=Stream-Video packet-mark=Video parent=\

    "Limit(Ekstensi|Streaming|Updatean)" priority=8 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=128000 \

    max-limit=128000 name=Update-an packet-mark="" parent=\

    "Limit(Ekstensi|Streaming|Updatean)" priority=5 queue=default

------------------------------------------------------------------------------------------------------------

Untuk jatah limit / jepit sesuaikan dengan keinginan anda.



==================================================

Jika ada IP yang ingin di Bypass.
Silahkan anda mengelompokan IP yang akan di Bypass dengan address list

dst-address-list=!Bypass
address-list:Bypass ( IP Lan Lokal/IP berapa aja )

==================================================

Sekian,

Semoga berguna dan menambah pengetahuan kita.

Salam

Merah Putih Segoroasat

Thanks