It looks like you're trying to do the prioritizing within PCQ queues. That will not work. You can only GLOBALLY prioritize one protocol over another, and then later strictly rate limit the user.

If you have the situation that overall your router has plenty of bandwidth available but one user is torrenting and trying to browse the web at the same time, you cannot ensure that his web browsing is served first if you're using PCQ. You can, however, make sure that if your router overall is running out of bandwidth it will deal with HTTP first, and with other things with a lower priority. That ensures that users generally speaking will be able to, for example, browse the web even when your uplink or backbone is saturated.[/b]

The basic idea of priority + PCQ is to:
- mark packets very early (in prerouting) by protocol - this has nothing to do with per user
——有一个非常早期的队列polices all traffic going through the router and, if the queue is getting full (a queue for all traffic, from all users together), prioritizes some protocols over others
- remark packets based on what user they are coming from or are going to
- strictly rate limit per user - this has nothing to do with protocols

You are going to want to use Queue trees and not simple queues for what you want to do. Simple Queues are very simple, and basically just process their queue just like the firewall, each packet that comes in just goes down the list until it finds a queue that fits.

This is probably more what you are looking for. Adjust the interfaces and rates to be more of what you are looking for.

Code:Select all

/队列树添加burst-limit bu burst-threshold = 0 = 0rst-time=0s disabled=no limit-at=0 \ max-limit=15M name="Global Download" parent="LAN" priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10M \ max-limit=15M name="HTTP Traffic Download" packet-mark=other_traffic parent=\ "Global Download" priority=4 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=2M \ max-limit=15M name="Other Download" packet-mark=heavy_traffic parent=\ "Global Download" priority=8 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3M \ max-limit=15M name="High Download" packet-mark=high_traffic parent=\ "Global Download" priority=1 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=1M name="Global Upload DSL" parent=ether1 priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=512K \ max-limit=1M name="HTTP Upload DSL" packet-mark=other_traffic \ parent="Global Upload DSL" priority=4 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256K \ max-limit=1M name="Other Upload DSL" packet-mark=heavy_traffic \ parent="Global Upload DSL" priority=8 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256K \ max-limit=1M name="High Upload DSL" packet-mark=high_traffic parent=\ "Global Upload DSL" priority=1 queue=default

Max Limit is how much traffic is allowed to go through the queue at any time. Limit-at is the guaranteed rate you want to offer to that kind of traffic. You need a queue for each interface that is going to upload and download, so if you have multiple WANs or LANs you need to add in the appropriate queue trees for them.

看起来你放置在Ether1, the WAN or the LAN? By placing it on the WAN you are limiting the upload, place the rules on the LAN to limit the download. You could also make the parent Global-Download instead of the LAN, just by specifying the parent interface you are better able to control what each interface is capable of passing.

This is just a home setup, sorry if I didn't mention that earlier. Basically I have the DSL modem connected to ether1 and 4 clients including a wireless AP to ports ether2-5. How should I go about setting the port pointing to the client? Should I choose ether2 since its the master port for ether3-5?

This is just a home setup, sorry if I didn't mention that earlier. Basically I have the DSL modem connected to ether1 and 4 clients including a wireless AP to ports ether2-5. How should I go about setting the port pointing to the client? Should I choose ether2 since its the master port for ether3-5?

I believe so, I've never used the switch chips so I can't say for sure. Worst that happens is you try it and it doesn't work. It won't break anything.

Post the results of the following commands. We should be able to spot what is going on.

/ip firewall mangle export
/queue export

Well it looks right to me, so I'm not sure why it's not working for you. I would be curios to try a few things.
1.) See what happens when you move the mangle rules to the forward chain
2.) See what happens when you put it on the Global-out interface
3.) See what happens when you turn off the switch chip, put a PC on Ether2 and see how that affects things.

One thing I forgot to mention is the way the rules work. All of your other connections are guaranteed 2 Mbps, but can take up to 15 Mbps. Your HTTP is guaranteed 13 Mbps and take up to 15 Mbps. However if HTTP is not taking up it's guaranteed 13 Mbps when the connection is under full load, the other queue will borrow the left over bandwidth for it's own uses. Just with the priority, all of your HTTP connections will go out first.

You will also probably want to prioritize DNS traffic, since your computer will not be able to or even try to go anywhere until it has resolved the domain name of where you are trying to get to.

In your mangle rules, change the chain from prerouting to forward.

For your test, I would open up a torch session on Ether2 and see if you are really getting the file via HTTP or some other method then. Be sure you check protocol and port and let it run.

Ok, that all sounds right, so lets go back to some very basics.

1.) Where are you downloading the files from? Are they on your local network, or are they out on the internet?
2.) If they are out on the internet, are you able to get full HTTP download speeds without the torrent running?
3.) Do you see the mangle rules incrementing like they should be when you start your downloads?
4.) Do you see the Queue rules incrementing like they should be when you are downloading traffic?

Ok, maybe your torrent is fully taking up your upload and causing problems there so your HTTP cannot send back that it got the packet and is ready for the next. Set a similar queue tree for your out interface and see how that goes. I think you mentioned that it was a 1 meg upload correct? So set 1M as the max and 756k for http and 256 for other.

/队列树添加burst-limit bu burst-threshold = 0 = 0rst-time=0s disabled=no limit-at=13M max-limit=15M name=\ "HTTP Traffic In" packet-mark=http parent="Global Traffic In" priority=1 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=2M max-limit=15M name=\ "Other Traffic In" packet-mark=other parent="Global Traffic In" priority=8 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=768k max-limit=1M name=\ "HTTP Traffic Out" parent="Global Traffic Out" priority=1 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256k max-limit=256k \ name="Other Traffic Out" parent="Global Traffic Out" priority=8 queue=default

You are missing the "Global Traffic In" and "Global Traffic Out" queue's in there so I can't see what they are attached to.

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=15M name="Global Traffic In" parent=\
global-in priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=1M name="Global Traffic Out" parent=\
pppoe-out1 priority=1 < Tried both pppoe and global out interfaces, still no priorities

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=15M name="Global Traffic In" parent=\
global-in priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=1M name="Global Traffic Out" parent=\
pppoe-out1 priority=1 < Tried both pppoe and global out interfaces, still no priorities

1.) Move the Global-In to either Global-out or Ether2, preferably Ether2. I find it much much easier to actually assign the queues to the actual interfaces they are on rather than the generic Global, it's easier to not only control what a specific interface can do, but also easier to know what rules to apply to it in my opinion. If you look at the packet flow diagram Global-In comes from traffic that the router has recieved, not what it has sent out. You cannot do anything about the traffic that you have received when you download it other than process it, you can however control what the router is going to send out.

The pppoe interface for the other one should be fine for that one. You could also probably get away with putting it on the WAN interface. You have to keep in mind that all of these settings and rules are from the perspective of the router not from the client. It can only control what it sends you or what it sends out, not what it receives from others.

The Queued bytes/packets are just how many packets/bytes are currently in memory waiting to be sent out of the queue. If they are empty that means it has had no reason to hold that information in memory waiting to be sent.

Keep in mind that the router board can only queue and control traffic that it has already received, it cannot do anything about the traffic it receives from others, it gets what it gets when it gets it. If your connection to your ISP is just dropping anything after the first 15 Mbps of traffic it is getting that could be why your connection is not scaling the way you want it to. Try setting your max Download to something less than your 15 Megs and see if that has any affect.

Yup, capped it around 13M instead of 15M. Getting around 1.4-1.5MB/s instead of 1.5-1.6MB/s. Its worth trading up some speed for this kind of manageability though.

由于对n for all your help!

Here is the basic queue tree I have set up at home. Modify it to match your bandwidth and packet mark needs. Your LAN(s) is going to be the Download portion of the queue and the WAN(s) is the upload. You'll need a queue for each WAN(s)/LAN(s) to segment it the way you want to.

Code:Select all

/队列树添加burst-limit bu burst-threshold = 0 = 0rst-time=0s disabled=no limit-at=0 \ max-limit=1M name=upload parent=ether1 priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=512k \ max-limit=1M name=other_upload packet-mark=other_traffic parent=upload \ priority=4 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=512k \ max-limit=1M name=heavy_upload packet-mark=heavy_traffic parent=upload \ priority=8 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=9M name=download parent=LAN priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=8M \ max-limit=9M name=other_download packet-mark=other_traffic parent=\ download priority=4 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=2M \ max-limit=9M name=heavy_download packet-mark=heavy_traffic parent=\ download priority=8 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=2M \ max-limit=9M name="high download" packet-mark=high_traffic parent=\ download priority=1 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=512k \ max-limit=1M name="high upload" packet-mark=high_traffic parent=upload \ priority=1 queue=default

Yup, capped it around 13M instead of 15M. Getting around 1.4-1.5MB/s instead of 1.5-1.6MB/s. Its worth trading up some speed for this kind of manageability though.

由于对n for all your help!

hi ganniii would you mind to share your queue tree

thanks

/队列树添加burst-limit bu burst-threshold = 0 = 0rst-time=0s disabled=no limit-at=0 \ max-limit=13M name="Global Traffic In" parent=ether2-local-master \ priority=1 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=1M name="Global Traffic Out" parent=pppoe-out1 priority=1 /queue type set default kind=pfifo name=default pfifo-limit=50 set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50 set wireless-default kind=sfq name=wireless-default sfq-allot=1514 \ sfq-perturb=5 set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 \ red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10 set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=\ 5 add kind=pcq name=pcq-default pcq-classifier="" pcq-limit=50 pcq-rate=0 \ pcq-total-limit=2000 set default-small kind=pfifo name=default-small pfifo-limit=10 /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M \ max-limit=13M name="HTTP Traffic In" packet-mark=priority parent=\ "Global Traffic In" priority=4 queue=pcq-default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=9M \ max-limit=13M name="Other Traffic In" packet-mark=other parent=\ "Global Traffic In" priority=8 queue=pcq-default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=768k \ max-limit=1M name="HTTP Traffic Out" packet-mark=priority parent=\ "Global Traffic Out" priority=4 queue=default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256k \ max-limit=1M name="Other Traffic Out" packet-mark=other parent=\ "Global Traffic Out" priority=8 queue=default