Hi Karl, It's definitely all been tested and working - my father would have not appreciated guests at his property from pinching all the 25/5 NBN Wireless he's on :) Here is an output from the router - as you can see there are 2779/95078 packets dropped since the last reboot/clear. -- /queue simple print stats: Flags: X - disabled, I - invalid, D - dynamic 0 name="Guest-Normal-Speed" target=172.19.124.128/26 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=941499094/3745280196 total-bytes=0 packets=2888996/3353772 total-packets=0 dropped=2779/95078 total-dropped=0 pcq-queues=0/0 -- As for accuracy - it's pretty reasonable. A download starts slow to begin with as the rate is exceeded inititally, and then speeds up as the TCP window size is adjusted appropriately to the available bandwidth. If you use WinBox, you can tell what the queue is doing by watching it's icon - green means traffic rate is under the limit, and red means it's exceeding it. Yellow is within 80% (off memory) In regards to the configuration - it's definitely 8M towards the guest network (downstream), and 1M towards the internet (upstream). The numbers are specified backwards.
From the Mirkotik Howto: -- The max-limit parameter cuts down the maximum available bandwidth. The value max-limit=256k/512k means that clients from private network will get maximum of 512kbps for download and 256kbps for upload. The target allows to define the source IP addresses to which the queue rule will be applied. (and) Note: Since RouterOS v6 these settings are combined in the option target where you can specify either of the above. Target is to be viewed from perspective of the target. If you want to limit your users's upload capability, set "target upload". --
If all of your traffic you want to limit is on a single interface, you could also try applying the simple queue directly to the interface - specify ether1 (or whatever it may be) as the Target instead. It's entirely possibly it's a hardware related thing too, although as I remember it's all done in software. I'll try and run up the config today or tomorrow on another router (I think I have a hAP or hAP lite lying around somewhere) - which can rule that in or out as well. M ________________________________________ From: Public <public-bounces@talk.mikrotik.com.au> on behalf of Karl Auer <kauer@nullarbor.com.au> Sent: Saturday, 3 February 2018 17:38 To: public@talk.mikrotik.com.au Subject: Re: [MT-AU Public] queue noob On Sat, 2018-02-03 at 05:56 +0000, Michael Junek wrote:
All looks to be in order. In response to your question - yes, I am. I have a guest network which is limited to 2M/256k per user, with an aggregate of 8M/1M
I think you mean 1M/8M, and does this mean your setup puts an upper limit of 8 megabits per second on aggregated outbound traffic, and 1 megabyte per second on aggregated inbound traffic, whatever else it may do per user? Silly question I know - but have you ever tested this and seen conclusively that it does actually impose the limits you expect? If so, how accurately does it impose the limits? Would you expect the queue I described to put an absolute upper limit of 10K bits per second on the link - in total? I am starting to wonder if there are magic numbers, and some numbers are too small or too large and get rounded up or down behind the scenes. Maybe my problem is in specifying 10000/10000? I tried 128k/128k and saw transfer speeds of 1.7 megabytes per second. 64k/64k seemed to slow it a bit at first, but by the end of the transfer the average had still reached 1.2 megabytes per second. At 10000/10000 the average speeds were still well over 100 kilobytes per second. As I sy, it does seem to have an effect - just not much. I thought at one point that it might be packets, not bytes, but there is no way known that the packet rates are approaching 10K packets per second in either direction. Just as a sanity check I used "set bandwidth" on the router (an RB951G- 2HnD) at the other end of the link I am trying to control and it worked fine. With a bandwidth limit of 128k/128k, the test transfer was neatly limited to around 13 kilobytes per second, which is near enough. I think I might have to go back to Mike cap in hand and ask for a different router. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer@nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D Old fingerprint: 58F8 09D4 97E4 D74A 0940 44BC 8D6D C28C 3BC9 B0CB _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au