View source for Mikrotik: Sample Load Balancing di Game Center untuk Speedy

 modem 1
 192.168.1.1
 |
 |
 192.168.1.2
 MIkrotik Load Balancing—–192.168.0.254–hub——-Client
 192.168.2.1
 |
 |
 modem 2
 192.168.2.1

Pc-Router Speknya

 PIII -1Ghz-Memory 256Mhz -Hardisk 40 Gb

=Konfigurasi=

==Interface Konfigurasi==

 / interface ethernet
 set Modem1 name=”Modem1″ mtu=1500 mac-address=00:10:4B:0D:95:02 arp=enabled \
 disable-running-check=yes auto-negotiation=yes full-duplex=yes \
 cable-settings=default speed=100Mbps comment=”" disabled=no
 set Lan name=”Lan” mtu=1500 mac-address=00:0D:88:B2:7D:50 arp=enabled \
 disable-running-check=yes auto-negotiation=yes full-duplex=yes \
 cable-settings=default speed=100Mbps comment=”" disabled=no
 set Modem2 name=”Modem2″ mtu=1500 mac-address=00:13:46:2CE:13 arp=enabled \
 disable-running-check=yes auto-negotiation=yes full-duplex=yes \
 cable-settings=default speed=100Mbps comment=”" disabled=no

==Ip Address Konfigurasi==

 / ip address
 add address=192.168.0.254/24 network=192.168.0.0 broadcast=192.168.0.255 \
 interface=Lan comment=”" disabled=no
 add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 \
 interface=Modem1 comment=”" disabled=no
 add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255 \
 interface=Modem2 comment=”" disabled=no 

==Routing IP==

 / ip route
 add dst-address=0.0.0.0/0 gateway=192.168.2.1 scope=255 target-scope=10 \
 routing-mark=odd comment=”" disabled=no
 add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 \
 routing-mark=even comment=”" disabled=no
 add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 \
 comment=”" disabled=no

4. Mangle Marking Paket

 / ip firewall mangle

a. Load Balancing

 add chain=prerouting in-interface=Lan connection-state=new nth=1,1,0 \
 action=mark-connection new-connection-mark=odd passthrough=yes \
 comment=”Load Balancing” disabled=no
 add chain=prerouting in-interface=Lan connection-mark=odd action=mark-routing \
 new-routing-mark=odd passthrough=no comment=”" disabled=no
 add chain=prerouting in-interface=Lan connection-state=new nth=1,1,1 \
 action=mark-connection new-connection-mark=even passthrough=yes comment=”" \
 disabled=no
 add chain=prerouting in-interface=Lan connection-mark=even action=mark-routing \
 new-routing-mark=even passthrough=no comment=”" disabled=no

b. Turunin latensy ( ping ke dns )

 add chain=prerouting src-address=192.168.0.0/24 protocol=icmp \
 action=mark-connection new-connection-mark=ICMP-CM passthrough=yes \
 comment=”ToS” disabled=no
 add chain=prerouting connection-mark=ICMP-CM action=mark-packet \
 new-packet-mark=ICMP-PM passthrough=yes comment=”" disabled=no
 add chain=prerouting packet-mark=ICMP-PM action=change-tos new-tos=min-delay \
 comment=”" disabled=no
 add chain=prerouting src-address=192.168.0.0/24 protocol=tcp dst-port=53 \
 action=mark-connection new-connection-mark=DNS-CM passthrough=yes \
 comment=”" disabled=no
 add chain=prerouting src-address=192.168.0.0/24 protocol=udp dst-port=53 \
 action=mark-connection new-connection-mark=DNS-CM passthrough=yes \
 comment=”" disabled=no
 add chain=prerouting connection-mark=DNS-CM action=mark-packet \
 new-packet-mark=DNS-PM passthrough=yes comment=”" disabled=no
 add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay \
 comment=”" disabled=no 

c. Tandain Services Yang mau di prioritykan

 add chain=prerouting protocol=tcp dst-port=80 action=mark-connection \
 new-connection-mark=http_conn passthrough=yes comment=”Tandai Service” \
 disabled=no
 add chain=prerouting connection-mark=http_conn action=mark-packet \
 new-packet-mark=http passthrough=no comment=”" disabled=no
 add chain=prerouting protocol=tcp dst-port=6000-7000 action=mark-connection \
 new-connection-mark=irc_conn passthrough=yes comment=”" disabled=no
 add chain=prerouting connection-mark=irc_conn action=mark-packet \
 new-packet-mark=irc passthrough=no comment=”" disabled=no
 add chain=prerouting protocol=tcp dst-port=5050-5061 action=mark-connection \
 new-connection-mark=ym_conn passthrough=yes comment=”" disabled=no
 add chain=prerouting connection-mark=ym_conn action=mark-packet \
 new-packet-mark=ym passthrough=no comment=”" disabled=no
 add chain=prerouting protocol=tcp dst-port=8291 action=mark-connection \
 new-connection-mark=mt_conn passthrough=yes comment=”" disabled=no
 add chain=prerouting connection-mark=mt_conn action=mark-packet \
 new-packet-mark=mt passthrough=no comment=”" disabled=no
 add chain=prerouting protocol=tcp dst-port=443 action=mark-connection \
 new-connection-mark=http_conn passthrough=yes comment=”" disabled=no 

d. Optimasi Proxy pada paket mark

 add chain=prerouting src-address=192.168.0.0/24 action=mark-packet \
 new-packet-mark=Naik passthrough=no comment=”Up Traffic” disabled=yes
 add chain=forward src-address=192.168.0.0/24 action=mark-connection \
 new-connection-mark=Koneksi passthrough=yes comment=”Conn-Mark” \
 disabled=yes
 add chain=output out-interface=Lan dst-address=192.168.0.0/24 \
 action=mark-packet new-packet-mark=Turun passthrough=no comment=”Down-Via \
 Proxy” disabled=yes

==Filter Firewall==

 / ip firewall filter

a. penentuan proteksi router

 add chain=input connection-state=invalid action=drop comment=”Drop invalid \
 connections” disabled=no
 add chain=input connection-state=established action=accept comment=”Allow \
 esatblished connections” disabled=no
 add chain=input connection-state=related action=accept comment=”Allow related \
 connections” disabled=no
 add chain=input protocol=udp action=accept comment=”Allow UDP” disabled=no
 add chain=input protocol=icmp action=accept comment=”Allow ICMP” disabled=no
 add chain=input in-interface=!Modem1 action=accept comment=”Allow connection \
 to router from local network” disabled=no
 add chain=input in-interface=!Modem2 action=accept comment=”" disabled=no
 add chain=input action=accept comment=”" disabled=no
 add chain=forward in-interface=Lan protocol=tcp dst-port=6112 \
 connection-limit=100,32 action=reject reject-with=icmp-network-unreachable \
 comment=”" disabled=no

b. penentuan proteksi dari akses gain ke router

 add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list \
 address-list=”port scanners” address-list-timeout=2w comment=”Port \
 scanners to list ” disabled=no
 
 add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg \
 action=add-src-to-address-list address-list=”port scanners” \
 address-list-timeout=2w comment=”NMAP FIN Stealth scan” disabled=no
 add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list \
 address-list=”port scanners” address-list-timeout=2w comment=”SYN/FIN \
 scan” disabled=no
 add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list \
 address-list=”port scanners” address-list-timeout=2w comment=”SYN/RST \
 scan” disabled=no
 add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack \
 action=add-src-to-address-list address-list=”port scanners” \
 address-list-timeout=2w comment=”FIN/PSH/URG scan” disabled=no
 add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg \
 action=add-src-to-address-list address-list=”port scanners” \
 address-list-timeout=2w comment=”ALL/ALL scan” disabled=no
 add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg \
 action=add-src-to-address-list address-list=”port scanners” \
 address-list-timeout=2w comment=”NMAP NULL scan” disabled=no
 add chain=input src-address-list=”port scanners” action=drop comment=”dropping \ port scanners” disabled=no

c. Drop Port Aneh2

 add chain=virus protocol=tcp dst-port=135-139 action=drop comment=”Drop \
 Blaster Worm” disabled=no
 add chain=virus protocol=udp dst-port=135-139 action=drop comment=”Drop \
 Messenger Worm” disabled=no
 add chain=virus protocol=tcp dst-port=445-3000 action=drop comment=”Drop \
 Blaster Worm” disabled=no
 add chain=virus protocol=udp dst-port=445-3000 action=drop comment=”Drop \
 Blaster Worm” disabled=no
 add chain=virus protocol=tcp dst-port=593 action=drop comment=”________” \
 disabled=no
 add chain=virus protocol=udp dst-port=7000 action=drop comment=”Setan1″ \
 disabled=no
 add chain=virus protocol=tcp dst-port=100-1000 action=drop comment=”Setan1″ \
 disabled=no
 add chain=virus protocol=udp dst-port=100-1000 action=drop comment=”Drop \
 Messenger Worm” disabled=no
 add chain=virus protocol=tcp dst-port=1000-3000 action=drop comment=”Setan1″ \
 disabled=no
 add chain=virus protocol=udp dst-port=1000-3000 action=drop comment=”Drop \
 Messenger Worm” disabled=no
 add chain=virus protocol=tcp dst-port=40000-50000 action=drop comment=”Setan1″ \
 disabled=no
 add chain=virus protocol=udp dst-port=40000-50000 action=drop comment=”Drop \
 Messenger Worm” disabled=no
 add chain=virus protocol=tcp dst-port=7000 action=drop comment=”Setan1″ \
 disabled=no
 add chain=virus protocol=udp dst-port=135-139 action=drop comment=”Drop \
 Messenger Worm” disabled=no
 add chain=virus protocol=tcp dst-port=7000 action=drop comment=”Setan1″ \
 disabled=no
 add chain=virus protocol=tcp dst-port=25 action=drop comment=”Drop Blaster \
 Worm” disabled=no
 add chain=virus protocol=udp dst-port=135-139 action=drop comment=”Drop \
 Messenger Worm” disabled=no
 add chain=virus action=return comment=”" disabled=no
 add chain=virus protocol=tcp dst-port=110 action=drop comment=”Drop Blaster \
 Worm” disabled=no

==Proxy==

a. Aktivasi proxy di ip web proxy

 / ip web-proxy
 set enabled=yes src-address=0.0.0.0 port=8080 hostname=”proxy.phonix.net” \
 transparent-proxy=yes parent-proxy=0.0.0.0:0 \
 cache-administrator=”webmaster@phonix.net” max-object-size=4096KiB \
 cache-drive=system max-cache-size=unlimited max-ram-cache-size=unlimited

max-cache-size=unlimited max-ram-cache-size=unlimited –>> tegantung besar hardisk

b. memblok web disini

 / ip web-proxy access
 add dst-port=23-25 action=deny comment=”block telnet & spam e-mail relaying” \
 disabled=no

c. optimasi cache isi web

 / ip web-proxy cache
 add action=allow comment=”" disabled=no
 add url=”http*youtube*get_video*” action=allow comment=”YouTube” disabled=no
 add url=”http*friendster.com” action=allow comment=”Friendster” disabled=no
 add url=”http*pu.go.id” action=allow comment=”PU” disabled=no
 add url=”http*detik*com” action=allow comment=”Detik” disabled=no
 add url=”http*domai.com” action=allow comment=”Domai” disabled=no
 add url=”http*nigmae.net” action=allow comment=”Nigmae” disabled=no
 add url=”http*kompas.com” action=allow comment=”Kompas” disabled=no
 add url=”http*lalatx.com” action=allow comment=”Lalatx” disabled=no
 add url=”http*yahoo.com” action=allow comment=”Yahoo” disabled=no
 add url=”http*kapanlagi.com” action=allow comment=”Kapanlagi” disabled=no
 add url=”http*plasa.com” action=allow comment=”Plasa” disabled=no
 add url=”http*kaskus.us” action=allow comment=”Kaskus” disabled=no
 add url=”http*avaxhome*org” action=allow comment=”Avaxhome” disabled=no
 add url=”www.worth1000.com” action=allow comment=”Worth1000″ disabled=no
 add action=allow comment=”Allow sado alahe” disabled=no
 add url=”:cgi-bin \\?” action=deny comment=”don’t cache dynamic http pages” \
 disabled=no

==Queue type==

 / queue type
 set default name=”default” kind=pfifo pfifo-limit=50
 set ethernet-default name=”ethernet-default” kind=pfifo pfifo-limit=50
 set wireless-default name=”wireless-default” kind=sfq sfq-perturb=5 \
 sfq-allot=1514
 set synchronous-default name=”synchronous-default” kind=red red-limit=60 \
 red-min-threshold=10 red-max-threshold=50 red-burst=20 red-avg-packet=1000
 set hotspot-default name=”hotspot-default” kind=sfq sfq-perturb=5 \
 sfq-allot=1514

a. pcq konsep

 add name=”pcq-download” kind=pcq pcq-rate=0 pcq-limit=50 \
 pcq-classifier=dst-address pcq-total-limit=2000
 add name=”pcq-upload” kind=pcq pcq-rate=0 pcq-limit=50 \
 pcq-classifier=src-address pcq-total-limit=2000

b. limit bw untuk icmp

 add name=”PFIFO-64″ kind=pfifo pfifo-limit=64
 add name=”default-small” kind=pfifo pfifo-limit=10

==queue simple untuk bagi bw /pc==

 / queue simple
 add name=”Phonix.Net” dst-address=192.168.0.0/24 interface=Lan parent=none \
 priority=1 queue=ethernet-default/ethernet-default limit-at=0/768000 \
 max-limit=0/768000 total-queue=default disabled=no
 add name=”01″ target-addresses=192.168.0.1/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”02″ target-addresses=192.168.0.2/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”03″ target-addresses=192.168.0.3/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”04″ target-addresses=192.168.0.4/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”05″ target-addresses=192.168.0.5/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”06″ target-addresses=192.168.0.6/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”07″ target-addresses=192.168.0.7/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”08″ target-addresses=192.168.0.8/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”09″ target-addresses=192.168.0.9/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”10″ target-addresses=192.168.0.10/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”11″ target-addresses=192.168.0.11/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”12″ target-addresses=192.168.0.12/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”13″ target-addresses=192.168.0.13/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”14″ target-addresses=192.168.0.14/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”15″ target-addresses=192.168.0.15/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=8/96000 \
 total-queue=default disabled=no
 add name=”16″ target-addresses=192.168.0.16/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”17″ target-addresses=192.168.0.17/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”18″ target-addresses=192.168.0.18/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net packet-marks=”" priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”19″ target-addresses=192.168.0.19/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”20″ target-addresses=192.168.0.20/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”21″ target-addresses=192.168.0.21/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”22″ target-addresses=192.168.0.22/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net packet-marks=”" priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”23″ target-addresses=192.168.0.23/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”24″ target-addresses=192.168.0.24/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no
 add name=”25″ target-addresses=192.168.0.25/32 dst-address=0.0.0.0/0 \
 interface=Lan parent=Phonix.Net packet-marks=”" priority=8 \
 queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
 total-queue=default disabled=no 

==quee tree==

 / queue tree

a. pcq

 add name=”downstream” parent=Lan packet-mark=Turun limit-at=0 \
 queue=pcq-download priority=1 max-limit=0 burst-limit=0 burst-threshold=0 \
 burst-time=0s disabled=no
 add name=”upstream” parent=global-in packet-mark=Naik limit-at=0 \
 queue=pcq-upload priority=1 max-limit=0 burst-limit=0 burst-threshold=0 \
 burst-time=0s disabled=no

b. bw over untuk icmp / latensy

 add name=”ICMP” parent=global-in packet-mark=ICMP-PM limit-at=8000 \
 queue=PFIFO-64 priority=1 max-limit=16000 burst-limit=0 burst-threshold=0 \
 burst-time=0s disabled=no
 add name=”DNS” parent=global-in packet-mark=DNS-PM limit-at=8000 \
 queue=PFIFO-64 priority=1 max-limit=16000 burst-limit=0 burst-threshold=0 \
 burst-time=0s disabled=no

Regard
kalau ada tambahan makin bagus. hehehe. ini sample aja


==Referensi==

* http://www.forummikrotik.com/tutorial/356-sample-load-balancing-di-game-center-buat-yang-pakai-speedy.html

==Pranala Menarik==

* [[Sekitar Mikrotik]]