HTB优先限速脚本

lovesronline

HTB脚本适用于RouteROS软路由 v3.0
HTB等级令牌桶，通过优先级规定不同组的带宽优先。该HTB脚本是针对使用nat转换的RouteROS软路由路由器有效。该脚本仅控制下载数据。

通过ip firewall mangle的chain=prerouting标记规定的IP数据包：
优先端口：tcp/443（QQ文件传输），udp/8000（QQ），tcp/3724（魔兽世界）
web端口：tcp/80，udp/53访问网页
其他数据： 其他流量

通过queue tree实现流量优先
优先端口：优先级1 最高
web端口：优先级2 其次
其他数据：优先级8 最低

相应端口可以根据自己需要添加

291963244

/ip firewall mangle
add action=mark-connection chain=prerouting comment=
    "优先端口" disabled=no dst-port=443 new-connection-mark=
    Port_Conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=
    3724 new-connection-mark=Port_Conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=
    8000 new-connection-mark=Port_Conn passthrough=yes protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=Port_Conn
    disabled=no new-packet-mark=Port_Packet passthrough=no
add action=mark-connection chain=prerouting comment="web端口"
    disabled=no dst-port=80 new-connection-mark=80_Conn passthrough=yes
    protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=
    53 new-connection-mark=80_Conn passthrough=yes protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=80_Conn
    disabled=no new-packet-mark=80_packet passthrough=no
add action=mark-connection chain=prerouting comment=
    "其他数据" disabled=no new-connection-mark=Other_Conn
    passthrough=yes
add action=mark-packet chain=prerouting comment="" connection-mark=Other_Conn
    disabled=no new-packet-mark=Other_Packet passthrough=no
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=10M name=totaldown
    packet-mark="" parent=global-in priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3M max-limit=10M name=portdown
    packet-mark=Port_Packet parent=totaldown priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M max-limit=10M name=otherdown
    packet-mark=Other_Packet parent=totaldown priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3M max-limit=10M name=80down
    packet-mark=80_packet parent=totaldown priority=2 queue=default

YUS：
为什么标记 connection的时候 passthrough=yes ，而标记packet的时候 用passthrough=no ？？？

xuol001

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=10M name=totaldown
    packet-mark="" parent=global-in priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3M max-limit=10M name=portdown
    packet-mark=Port_Packet parent=totaldown priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M max-limit=10M name=otherdown
    packet-mark=Other_Packet parent=totaldown priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3M max-limit=10M name=80down
    packet-mark=80_packet parent=totaldown priority=2 queue=default
这段执行不了 能解释一下吗

sunnj87

LZ 有一事不明 请帮帮我 为什么要先mark-connection 再mark-packet 为什么不直接mark-packet

zcm_987.

怎么执行不了？？

nmhd(黄帝)

LZ 有一事不明 请帮帮我 为什么要先mark-connection 再mark-packet 为什么不直接mark-packet
c254477879 发表于 2009-9-5 09:43

这个我也是一直困解的

xywuyiba8

这个效果怎么样啊，管用吗

vivideid

Passthrough=yes是只该IP数据流继续向下面的规则传递，=no则是停止传递，后面规则就不再重复执行该数据流

yutaoo1230

好教材，强烈支持

sjiwjso999

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=10M name=totaldown
    packet-mark="" parent=global-in priority=8 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3M max-limit=10M name=portdown
    packet-mark=Port_Packet parent=totaldown priority=1 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M max-limit=10M name=otherdown
    packet-mark=Other_Packet parent=totaldown priority=8 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3M max-limit=10M name=80down
    packet-mark=80_packet parent=totaldown priority=2 queue=default
各位大侠。这里面的带宽是如何来取值的哈。。。