@uzmikuz
SCRIPTLAR VA SOZLAMALAR

MikroTikda YouTube trafikini cheklash: mangle va queue tree

Bu qo‘llanma MikroTik RouterOS’da YouTube trafikini address‑list, firewall mangle va queue tree yordamida qanday cheklashni bosqichma‑bosqich ko‘rsatadi.

uzmik.uz2 daqiqa
mikrotikyoutuberouterosqueuetraffic

Qisqacha

  • Address‑list orqali YouTube domenlarini ro‘yxatga qo‘shish
  • Mangle qoidasi bilan paketlarga maxsus belgi berish
  • Queue treeda belgilangan trafikga maksimal limit o‘rnatish
  • Simple queue yordamida bitta mijozga alohida limit qo‘llash
  • Statistikalar orqali limit ishlashini tasdiqlash

YouTube kabi yuqori trafikli servislar tarmog‘ingizni sekinlashtirishi mumkin. MikroTik RouterOS’da address‑list, firewall mangle va queue tree kombinatsiyasi bilan bu trafikni aniq cheklash mumkin. Quyidagi bosqichlar sizga kerakli limitni tezda sozlashga yordam beradi.

00Talablar

  • RouterOS administrator huquqi
  • CLI yoki WebFigga kirish imkoniyati
  • LAN interfeysi mavjud

01Sozlash bosqichlari

1. YouTube manzillarini address‑listga qo‘shish

/ip firewall address-list menyusida quyidagi kodni bajarish orqali YouTube domenlarini ro‘yxatga qo‘shasiz. Bu ro‘yxat keyingi qoidalarga asos bo‘ladi.

text
[admin@MikroTik] > /ip firewall address-list
add address=www.youtube.com list=Youtube
[admin@MikroTik] > ip firewall address-list print
Flags: X - disabled, D - dynamic 
 #   LIST                                                       ADDRESS                                                                        CREATION-TIME        TIMEOUT             
 0   Youtube                                                    www.youtube.com                                                                oct/17/2019 14:47:11
 1 D ;;; www.youtube.com
     Youtube                                                    216.58.211.14                                                                  oct/17/2019 14:47:11
 2 D ;;; www.youtube.com
     Youtube                                                    216.58.207.238                                                                 oct/17/2019 14:47:11
 3 D ;;; www.youtube.com
     Youtube                                                    216.58.207.206                                                                 oct/17/2019 14:47:11
 4 D ;;; www.youtube.com
     Youtube                                                    172.217.21.174                                                                 oct/17/2019 14:47:11
 5 D ;;; www.youtube.com
     Youtube                                                    216.58.211.142                                                                 oct/17/2019 14:47:11
 6 D ;;; www.youtube.com
     Youtube                                                    172.217.22.174                                                                 oct/17/2019 14:47:21
 7 D ;;; www.youtube.com
     Youtube                                                    172.217.21.142                                                                 oct/17/2019 14:52:21

2. YouTube paketlarini mark‑packet bilan belgilash

/ip firewall mangle bo‘limida dst-address-list=Youtube ga mos keluvchi paketlarga new-packet-mark=pmark-Youtube belgisini beramiz. passthrough=yes parametri paketning keyingi qoidalarga ham yetishini ta’minlaydi.

text
[admin@MikroTik] > /ip firewall mangle
add action=mark-packet chain=forward dst-address-list=Youtube in-interface-list=LAN new-packet-mark=pmark-Youtube passthrough=yes

3. YouTube trafikiga queue tree orqali limit qo‘shish

/queue tree da packet-mark=pmark-Youtube belgilangan trafik uchun max-limit=5M limitini belgilaymiz. parent=global global qoidani bildiradi.

text
[admin@MikroTik] /queue tree
add max-limit=5M name=Limiting-Youtube packet-mark=pmark-Youtube parent=global

4. Limitni tekshirish

queue tree print stats buyrug‘i yordamida queue tree statistikalarini ko‘rib, paketlar va baytlar miqdorini tasdiqlashingiz mumkin.

text
[admin@MikroTik] > queue tree print stats
Flags: X - disabled, I - invalid 
 0   name="Limiting-Youtube" parent=global packet-mark=pmark-Youtube rate=0 packet-rate=0 queued-bytes=0 queued-packets=0 bytes=67887 packets=355 dropped=0

5. Bitta mijoz uchun simple queue yaratish

/queue simple menyusida quyidagi kodni ishga tushiring. Bu misolda 192.168.88.251 manziliga minimal 5 Mbit/s va maksimal 15 Mbit/s limit qo‘yilgan.

routeros
/queue simple
add limit-at=5M/5M max-limit=15M/15M name=queue1 target=192.168.88.251/32

02Tekshirish

queue tree print stats buyrug‘i natijasida bytes va packets maydonlarida trafik o‘lchanayotganini ko‘rib, limit faoliyatini tasdiqlang.

text
[admin@MikroTik] > queue tree print stats
Flags: X - disabled, I - invalid 
 0   name="Limiting-Youtube" parent=global packet-mark=pmark-Youtube rate=0 packet-rate=0 queued-bytes=0 queued-packets=0 bytes=67887 packets=355 dropped=0

Diqqat:

  • Simple queueda src va dst bir vaqtning o‘zida mos kelmasligi kerak, aks holda trafik ikki marta cheklanadi.
  • queue-size=0 bo‘lsa, limit to‘liq dropper bo‘lib, paketlar yo‘qoladi.
  • Mangle qoidasida passthrough=yes bo‘lishi kerak, aks holda paketlar keyingi qoidalarga yetmaydi.
  • Time‑based queue ishlashi uchun routerda to‘g‘ri vaqt sozlangan bo‘lishi zarur.

03Muammolar va yechimlar

YouTube trafik hali ham cheklanmayapti

Address‑listdagi IP‑lar yangilanganligini tekshiring, mangle qoidasidagi dst-address-list nomi ro‘yxat bilan mos kelishini tasdiqlang.

Queue treeda limit faollashmayapti

Queue treeda packet-mark nomi mangle qoidasidagi new-packet-mark bilan bir xil ekanligini tekshiring.

04Xulosa

Address‑list, mangle va queue tree kombinatsiyasi orqali YouTube trafikini aniq nazorat qilish mumkin. Simple queue esa alohida mijozlarga tezkor limit qo‘llashga yordam beradi. Natijada tarmog‘ingizda barqaror va adolatli band kengligi ta’minlanadi.

Manba: Queues — help.mikrotik.com

Keyingi o‘qish

SCRIPTLAR VA SOZLAMALAR

VETH interfeysini yaratish va IP sozlash

YANGILIKLAR

RouterOS hujjatlari 3‑Noyabr: EasyMesh, IP Source Guard, konteyner

SCRIPTLAR VA SOZLAMALAR

MikroTikda host nomlari bilan firewall qoidalarini yaratish

t.me/uzmikuz

Keyingi qo‘llanmani birinchi bo‘lib oling

Har yangi maqola Telegram kanalimizga tushadi.

Izohlar

Hali izoh yo‘q — birinchi bo‘lib fikr bildiring.