|
|
嘻嘻 不懂 试着生成一个来用用
# 地址列表配置
/ip firewall address-list
add address=192.168.20.0/24 comment="lanip" disabled=no list=lanip
# 连接标记规则(合并两种标记策略)
/ip firewall mangle
# 基础服务标记(ICMP/DNS)
add action=mark-connection chain=forward new-connection-mark=small_con protocol=icmp src-address-list=lanip
add action=mark-connection chain=forward new-connection-mark=small_con protocol=udp dst-port=53 src-address-list=lanip
add action=mark-connection chain=forward new-connection-mark=small_con protocol=tcp dst-port=53 src-address-list=lanip
# 关键应用标记(HTTP/SSH等)
add action=mark-connection chain=forward new-connection-mark=ie_con protocol=tcp dst-port=80,443,8080,22,23,3389 src-address-list=lanip
# 精细化包大小标记(合并两种尺寸分类)
add action=mark-connection chain=prerouting new-connection-mark=Conn passthrough=yes src-address-list=lanip
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-tcp-smaller packet-size=0-256 passthrough=no protocol=tcp
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-tcp-small packet-size=257-512 passthrough=no protocol=tcp
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-tcp-normal packet-size=513-1024 passthrough=no protocol=tcp
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-tcp-big packet-size=1025-65535 passthrough=no protocol=tcp
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-udp-smaller packet-size=0-256 passthrough=no protocol=udp
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-udp-small packet-size=257-512 passthrough=no protocol=udp
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-udp-normal packet-size=513-1024 passthrough=no protocol=udp
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-udp-big packet-size=1025-65535 passthrough=no protocol=udp
add action=mark-packet chain=forward connection-mark=Conn new-packet-mark=pack-icmp passthrough=no protocol=icmp
# 队列树配置(适配30M/95M带宽)
/queue tree
# 上行队列
add name=up-all parent=WAN queue=default limit-at=25M max-limit=30M burst-limit=35M burst-threshold=32M burst-time=3
add name=small-up packet-mark=small parent=up-all priority=1 queue=PCQ-up limit-at=20M max-limit=25M burst-limit=30M burst-threshold=28M burst-time=3
add name=ie-up packet-mark=ie parent=up-all priority=3 queue=PCQ-up limit-at=22M max-limit=28M burst-limit=32M burst-threshold=30M burst-time=3
add name=normal-up packet-mark=pack-tcp-normal parent=up-all priority=5 queue=PCQ-up limit-at=15M max-limit=20M burst-limit=25M burst-threshold=22M burst-time=3
add name=big-up packet-mark=pack-tcp-big parent=up-all priority=7 queue=PCQ-up limit-at=10M max-limit=15M burst-limit=20M burst-threshold=18M burst-time=3
# 下行队列
add name=down-all parent=LAN queue=default limit-at=85M max-limit=95M burst-limit=110M burst-threshold=100M burst-time=3
add name=small-down packet-mark=small parent=down-all priority=1 queue=PCQ-down limit-at=70M max-limit=80M burst-limit=95M burst-threshold=90M burst-time=3
add name=ie-down packet-mark=ie parent=down-all priority=3 queue=PCQ-down limit-at=75M max-limit=85M burst-limit=100M burst-threshold=95M burst-time=3
add name=normal-down packet-mark=pack-tcp-normal parent=down-all priority=5 queue=PCQ-down limit-at=60M max-limit=70M burst-limit=85M burst-threshold=80M burst-time=3
add name=big-down packet-mark=pack-tcp-big parent=down-all priority=7 queue=PCQ-down limit-at=50M max-limit=60M burst-limit=75M burst-threshold=70M burst-time=3
|
|