ROS高级限速脚本

1. ##作者测试过几个企业,1个网吧(游戏下行都走小包了),反应不错,HTB没有限速,要限速自己调整,调整后效果更理想.
   
2. 
   
3. /ip firewall layer7-protocol
   
4. add name=Tencent_qq regexp="^.\?.\?[\\x02|\\x05]\\x22\\x27.+|^.\?.\?[\\x02|\\x\
   
5.     05]\\x22\\x27.+[\\x03|\\x09]\$|^.\?.\?\\x02.+\\x03\$|^/xFE/x42../x42/x02/x\
   
6.     0B/x7D/x98/x38/xE4.+"
   
7. add name=Tencent_qqgame regexp="^.\?.\?\\x2D.+[\\x25\\x62\\x0E\\xC1\\x5F\\x6C|\
   
8.     \\xFF\\xFF\\x20\\xCF\\x42\\x53|\\xFF\\xFF\\x10\\x17\\x87\\xA3|\\x3E\\x7F\\\
   
9.     x20\\xCF\\x42\\x53|\\x1F\\x43\\x10\\x17\\x87\\xA3]|^\\x05\\x22.+\\x03\[        DISCUZ_CODE_1        ]quot;
   
10. add name=PPStream regexp="^.\?.\?\\c.+\\c"
    
11. add name=QQMusic regexp=\
    
12.     "(^\\xFE.\?.\?.\?.\?\\xCF|^get.+\\qqmusic.\?\\qq.+\\qqmusic)"
    
13. add name=QQLive regexp="(^get.+\\video.\?\\qq.+\\flv|^\\xFE.\?.\?.\?.\?\\xD3|^\
    
14.     get.+\\video.\?\\qq.+\\mp4)"
    
15. add name=Kugou regexp=\
    
16.     "(^post.+\\x0D\\x0A\\x0D\\x0A|^http.+\\x0D\\x0A\\x0D\\x0A|^e)"
    
17. add name=Http regexp="http/(0\\.9|1\\.0|1\\.1) [1-5][0-9][0-9] [\t-\r -~]*(con\
    
18.     nection:|content-type:|content-length:|date:)|post [\t-\r -~]* http/[01]\\\
    
19.     .[019]"
    
20. add name=Http-img regexp="\\.jpg|\\.png|\\.gif|\\.bmp|\\.jpeg"
    
21. add name=Http-web regexp=\
    
22.     "\\.jsp|\\.shtml|\\.html|\\.htm|\\.php|\\.asp|\\.aspx|\\.cgi"
    
23. add name=NetTV regexp=\
    
24.     "^.*get.+(\\.flv|\\.f4v|\\.hlv|\\.rm|\\.swf|\\.wma|\\.mp4|\\.mp3).*\[        DISCUZ_CODE_1        ]quot;
    
25. add name=File regexp="^.*get.+(\\.iso|\\.exe|\\.zip|\\.rar|\\.7z|\\.gho|\\.pdf\
    
26.     |\\.avi|\\.mkv|\\.wmv|\\.wav|\\.flac|\\.ape|\\.msi).*\[        DISCUZ_CODE_1        ]quot;
    
27. add name=QQsp regexp="(^\\x03.\?\\xE1\\x8D|^\\x02\\x02|^\\x04\\x1E)"
    
28. add name=DNS regexp="^.\?.\?.\?.\?[\\x01\\x02].\?.\?.\?.\?.\?.\?[\\x01-\?][a-z\
    
29.     0-9][\\x01-\?a-z]*[\\x02-\\x06][a-z][a-z][fglmoprstuvz]\?[aeop]\?(um)\?[\\\
    
30.     x01-\\x10\\x1c][\\x01\\x03\\x04\\xFF]"
    
31. add name=Http-jpg regexp="^.*(post|POST|get|GET).+\\.jpg.+\\http"
    
32. /ip firewall address-list
    
33. add address=10.0.0.0/24 list=OnLineClient
    
34. /ip firewall filter
    
35. add action=drop chain=input dst-port=22 protocol=tcp
    
36. /ip firewall mangle
    
37. add action=change-ttl chain=forward new-ttl=set:128
    
38. add action=change-mss chain=forward new-mss=1440 protocol=tcp tcp-flags=syn \
    
39.     tcp-mss=1441-65535
    
40. add action=mark-connection chain=forward comment="DNS\BA\CDICMP" \
    
41.     layer7-protocol=DNS new-connection-mark=dns&icmp
    
42. add action=mark-connection chain=forward new-connection-mark=dns&icmp \
    
43.     protocol=icmp
    
44. add action=mark-packet chain=forward connection-mark=dns&icmp \
    
45.     new-packet-mark=DNS&ICMP_up passthrough=no src-address-list=OnLineClient
    
46. add action=mark-packet chain=forward connection-mark=dns&icmp \
    
47.     dst-address-list=OnLineClient new-packet-mark=DNS&ICMP_down passthrough=\
    
48.     no
    
49. add action=mark-connection chain=forward comment=http layer7-protocol=Http \
    
50.     new-connection-mark=http
    
51. add action=mark-connection chain=forward layer7-protocol=Http-web \
    
52.     new-connection-mark=http
    
53. add action=mark-connection chain=forward layer7-protocol=Http-jpg \
    
54.     new-connection-mark=http
    
55. add action=mark-connection chain=forward layer7-protocol=Http-img \
    
56.     new-connection-mark=http
    
57. add action=mark-packet chain=forward connection-mark=http dst-address-list=\
    
58.     OnLineClient new-packet-mark=http_down passthrough=no
    
59. add action=mark-packet chain=forward connection-mark=http new-packet-mark=\
    
60.     http_up passthrough=no src-address-list=OnLineClient
    
61. add action=mark-connection chain=forward comment="\B4\F3\D0\A1\B0\FC 0-511" \
    
62.     new-connection-mark=small511_conn packet-size=0-511 protocol=tcp \
    
63.     src-port=!80
    
64. add action=mark-connection chain=forward new-connection-mark=small511_conn \
    
65.     packet-size=0-511 protocol=udp
    
66. add action=mark-packet chain=forward connection-mark=small511_conn \
    
67.     new-packet-mark=small511_u packet-size=128-511 passthrough=no \
    
68.     src-address-list=OnLineClient
    
69. add action=mark-packet chain=forward connection-mark=small511_conn \
    
70.     new-packet-mark=small511_d packet-size=128-511 passthrough=no
    
71. add action=mark-connection chain=forward comment=vido layer7-protocol=NetTV \
    
72.     new-connection-mark=vido
    
73. add action=mark-connection chain=forward layer7-protocol=PPStream \
    
74.     new-connection-mark=vido
    
75. add action=mark-connection chain=forward layer7-protocol=QQLive \
    
76.     new-connection-mark=vido
    
77. add action=mark-packet chain=forward connection-mark=vido dst-address-list=\
    
78.     OnLineClient new-packet-mark=vido_down passthrough=no
    
79. add action=mark-packet chain=forward connection-mark=vido new-packet-mark=\
    
80.     vidio_up passthrough=no src-address-list=OnLineClient
    
81. add action=mark-connection chain=forward comment=file layer7-protocol=File \
    
82.     new-connection-mark=file
    
83. add action=mark-connection chain=forward layer7-protocol=QQMusic \
    
84.     new-connection-mark=file
    
85. add action=mark-connection chain=forward layer7-protocol=Kugou \
    
86.     new-connection-mark=file
    
87. add action=mark-packet chain=forward connection-mark=file dst-address-list=\
    
88.     OnLineClient new-packet-mark=file_down passthrough=no
    
89. add action=mark-packet chain=forward new-packet-mark=file_up passthrough=no \
    
90.     src-address-list=OnLineClient
    
91. add action=mark-connection chain=forward comment=\
    
92.     "\B4\F3\D0\A1\B0\FC 1301-1500" new-connection-mark=big1500_conn \
    
93.     packet-size=1301-1500
    
94. add action=mark-packet chain=forward connection-mark=big1500_conn \
    
95.     new-packet-mark=big1500_u packet-size=1301-1500 passthrough=no \
    
96.     src-address-list=OnLineClient
    
97. add action=mark-packet chain=forward connection-mark=big1500_conn \
    
98.     dst-address-list=OnLineClient new-packet-mark=big1500_d packet-size=\
    
99.     1301-1500 passthrough=no
    
100. add action=mark-connection chain=forward comment=other new-connection-mark=\
     
101.     other
     
102. add action=mark-packet chain=forward connection-mark=other dst-address-list=\
     
103.     OnLineClient new-packet-mark=other_down passthrough=no
     
104. add action=mark-packet chain=forward comment="\BD\E1\CA\F8" connection-mark=\
     
105.     other new-packet-mark=other_up passthrough=no src-address-list=\
     
106.     OnLineClient
     
107. # jan/27/2015 01:53:30 by RouterOS 6.22.1
     
108. # software id = TAYM-FTBN
     
109. #
     
110. /queue type
     
111. add kind=pcq name=0m_down pcq-classifier=dst-address pcq-total-limit=10000
     
112. add kind=pcq name=0m_up pcq-classifier=src-address pcq-total-limit=10000
     
113. /queue tree
     
114. add name=down parent=global queue=default
     
115. add name=icmp@dns_down packet-mark=DNS&ICMP_down parent=down priority=1 \
     
116.     queue=0m_down
     
117. add name=http_down packet-mark=http_down parent=down priority=3 queue=0m_down
     
118. add name=vido packet-mark=vido_down parent=down priority=5 queue=0m_down
     
119. add name=file packet-mark=file_down parent=down priority=7 queue=0m_down
     
120. add name=other packet-mark=other_down parent=down priority=4 queue=0m_down
     
121. add name=up parent=global queue=default
     
122. add name=icmp&dns_up packet-mark=DNS&ICMP_up parent=up priority=1 queue=0m_up
     
123. add name=http_up packet-mark=http_up parent=up priority=3 queue=0m_up
     
124. add name=vido_up packet-mark=vidio_up parent=up priority=5 queue=0m_up
     
125. add name=file_up packet-mark=file_up parent=up priority=7 queue=0m_up
     
126. add name=other_up packet-mark=other_up parent=up priority=4 queue=0m_up
     
127. add name=big_packet packet-mark=big1500_d parent=down priority=6 queue=\
     
128.     0m_down
     
129. add name=small_packet packet-mark=small511_d parent=down priority=2 queue=\
     
130.     0m_down
     
131. add name=small_packet_up packet-mark=small511_u parent=up priority=2 queue=\
     
132.     0m_up
     
133. /queue interface
     
134. set WAN queue=default

复制代码