zoukankan      html  css  js  c++  java
  • RouterOS的Fasttrack,可以极大的减少ROS的CPU使用率以及增加带宽!

    原文:

    https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack

    需要两条命令来执行:

    /ip firewall filter add chain=forward action=fasttrack-connection connection-state=established,related
    /ip firewall filter add chain=forward action=accept connection-state=established,related

    描述

    IPv4 FastTrack处理程序自动用于标记的连接。使用防火墙操作“ fasttrack-connection”来标记FastTrack的连接。当前,只有TCP和UDP连接实际上可以被快速跟踪(即使可以将任何连接标记为快速跟踪)。IPv4 FastTrack处理程序支持NAT(SNAT和/或DNAT)。

    请注意,并非连接中的所有数据包都可以被FastTracked,因此即使将连接标记为FastTrack,也有可能看到某些数据包通过慢速路径。这就是为什么快速跟踪连接通常遵循相同的action = accept规则的原因。FastTracked数据包绕过防火墙,连接跟踪,简单队列,parent = global的队列树,IP流量(在6.33中取消了限制),IP accounting,IPSec,热点通用客户端,VRF分配,因此管理员应确保FastTrack不干扰其他配置;

    要求

    如果满足以下条件,则IPv4 FastTrack处于活动状态:

    • 没有网状,元路由器接口配置;
    • sniffer, torch and traffic generator is not running;
    • 没有活动的mac-ping,mac-telnet或mac-winbox会话 限制已在6.33中删除;
    • / tool mac-scan没有被积极使用;
    • / tool ip-scan没有被积极使用;
    • 在IP /Settings 下启用了FastPath和路由缓存

    Supported hardware

    FastTrack is supported on the listed devices.

    RouterBoardInterfaces
    RB6xx series ether1,2
    RB7xx series all ports
    RB800 ether1,2
    RB9xx series all ports
    RB1000 all ports
    RB1100, RB1000AHx2 ether1-11
    RB1000AHx2 all ports
    RB2011 series all ports
    RB3011 series all ports
    RB4011 series all ports
    CRS series routers all ports except management interface (if the device has one)
    CCR series routers all ports except management interface (if the device has one)
    All devices wireless interfaces, if wireless-fp, wireless-cm2, wireless-rep or wireless (starting from 6.37) package used

    Examples

    Initial configuration

    For example, in home routers with factory default configuration, you could FastTrack all LAN traffic with this one rule placed at the top of the Firewall Filter. The same configuration accept rule is required:

    /ip firewall filter add chain=forward action=fasttrack-connection connection-state=established,related
    /ip firewall filter add chain=forward action=accept connection-state=established,related
    

    View of simple FastTrack rules in the firewall, it is important to have other filter or mangle rules to get the advantage of the FastTrack:

    • /ip firewall filter
    技术图片
     
    • /ip firewall mangle
    技术图片
     
    技术图片

    Warning: Queues (except Queue Trees parented to interfaces), firewall filter and mangle rules will not be applied for FastTracked traffic.

    • Connection is FastTracked until connection is closed, timed-out or router is rebooted.
    • Dummy rules will dissapear only after FastTrack firewall rules will be deleted/disabled and router rebooted.

    FastTrack on RB2011

    FastTrack is enabled on RB2011 at chain=forward with the rule from previous example. Bandwidth test with single TCP stream is sent,

    技术图片
  • 相关阅读:
    2. Redis哨兵、复制、集群的设计原理与区别
    1. 详解Redis的存储类型、集群架构、以及应用场景
    博客园主题优化
    【Java基础】Java面试题精选
    【Java集合】——集合类分析总结
    新零售供应链的三大闭环
    Comparable和Comparator比较实现排序 场景分析
    Java基础-枚举类
    Java基础-泛型
    微服务架构~BFF和网关
  • 原文地址:https://www.cnblogs.com/im17me/p/13278604.html
Copyright © 2011-2022 走看看