QualityofService

DivisiTraining PTUFOAKSESSUKSESLUARBIASA Jakarta nux@ufoakses.co.id

Ufoakses2008 1

QualityOfService

QoSdiimplementasikandalam mekanismequeque QoSdigunakanuntukmemprioritaskan trafikdanmemanajemenpaket

Ufoakses2008

Prinsip

QoSdiimplementasikansebagaimekanisme queue(manajemenbagaimanapaket menungguuntukdisalurkankesebuah interface) Queuebekerjasaatmeninggalkaninterface (packetflow)sehinggabagaimanakitadapat membatasitrafikyangmasukkedalamrouter. Hanyasatudisiplinpadasebuahinterface ControlQueingadalahpermintaandan kecepatanpaketyangmelaluiinterfaceserta mendefinisikandimanapaketmenungguatau dikirimkandanmanayangakandidrop.
Ufoakses2008

QualityOfService

Ufoakses2008

ContohSimpleQueue

Ufoakses2008

Scheduler(melimitberdasarkanwaktutunggu paket) BFIFO PFIFO RED SFQ Shaper(Untukmengontrolkecepatanaliran dataataudapatjugasebagaischedulingjob) PCQ HTB Dapatdikonfigurasidiquequetype
Ufoakses2008

TipeQueue

TipeQueue

Ufoakses2008

HTBVirtualInterface

Adalebihdarisatuinterfacefisik Ada3Virtualinterfaceyangdimaintenanceoleh routerOs:

Globalin(mengambarkansemuadatayangmasukke dalaminterface)dieksekusisetelahmangledandstnat. Globalout(mengambarkansemuadatayangkeluardari interface)quequedikirimsebelumsalahsatupaketdikirim kespesifikinterface. GlobalTotal(mengambarkanalirandatayangmelalui router) Ex=totalmaxlimit=256000 Kitaakanmendaptkanupload+download=256kbps. (maximum)
Ufoakses2008 8

Duallimitation

AdvanceQoS Ada2jenisratelimit:

CIR(commitedInformationRate) MIR(MaximalInformationRate)

Mengaransidatarateyangdapatdialirkan(limitat) Maximaldatarateyangdapatdibolehkanuntuksebuah kelasyangdicapai(maximalLimit)

Ufoakses2008

ContohDualLimitasi

Ufoakses2008

10

MangledanQueque

Mangleharusdilakukansebelumqueque Mangleharusdilakukanpadachainpreroutingagar dapatdigunakanpadasimplequeque Jikaquequedilakukanhanyapadachaintertentu pakaiquequetree. Manglepadachainpreroutingakanberpengaruhpada semuatrafikinputataupunforward. Manglepadachainpostroutingakanberpengaruh padatrafikoutputdanforward. Kalaumelakukanmanglepadachainforwardmaka lakukanquequepadaglobaloutatauinterfacequeque
Ufoakses2008 11

MangleandHTB

Ufoakses2008

12

PaketAlgoritme
Whenpackettravelsthroughtherouter,it passesall4HTBtrees Whenpackettravelstotherouter,it passesonlyglobalinandglobaltotal HTB. Whenpackettravelsfromtherouter,it passesglobalout,globaltotaland interfaceHTB.

Ufoakses2008

13

Dimanamelakukanmangle

Untukmelakukanlimitasitrafikuser

Untukmelakukanprioritastrafik

Mangle=chainforward Queque=Quequeinterface Mangle=prerouting Queque=globalin

Ufoakses2008

14

Bursts

Digunakanuntukmengallowdataratetertinggi untukbeberapaperiodewaktu. Jikarataratadataratelebihrendahdariburst thresholdburtsakansecaraaktualmengikuti burstlimit Setiapdetikrouterakanmenghitungratarata datarateyangdicapaimelaluiburtstimeyang terakhir.

Ufoakses2008

15

ContohBursts

Ufoakses2008

16

MelimitdenganBurst

Ufoakses2008

17

Burstdiwinbox

Ufoakses2008

18

HTBTerm
HTBmentionedbeforeisnotmanaged likeotherqueues HTBisahierarchicalqueuingdiscipline. HTBisabletoprioritizeandgrouptraffic flows HTBisnotcoexistingwithanotherqueue onaninterfacetherecanonlybeone queueand HTBistheone.

Ufoakses2008 19

AlogaritmaHTB
InorderofpriorityHTBsatisfiesall limitatsforleafclasses Whenthelimitatisreachedthe classbecomesyellow Whenthemaxlimitisreachedthe classbecomesred

Ufoakses2008

20

AlogaritmaHTB

SomeattributesofHTBclasses: limitat maxlimit priority SimplequeuesareexecutedbytheHTBfacility inglobalout('direct'queue), globalin('reverse'queue)andglobal total('totalqueue)trees

Ufoakses2008

21

HTBstates

Ufoakses2008

22

PrinsipHTB

Ufoakses2008

23

Prioritas

Ufoakses2008

24

Carakerja

Allthecirclesarequeuingdisciplinesapacket storagewithAflowmanagementalgorithm(FIFO, RED,SFQorPCQ)

Ufoakses2008

25

Rencanaprioritas

Ufoakses2008

26

PFIFO&BFIFO

Ufoakses2008

27

SFQ

Ufoakses2008

28

RED

Ufoakses2008

29

PCQ

Ufoakses2008

30

QueueTree

Ufoakses2008

31

QueueTreeandSimpleQueues

Treequeuecanbeplacedin4differentplaces: Globalin(directpartofsimplequeuesare placedhereautomatically) Globalout(totalpartofsimplequeuesare placedhereautomatically) Globaltotal(reversepartsimplequeuesare placedhereautomatically) Interfacequeue IfplacedinsameplaceSimplequeuewilltake trafficbeforeQueueTree
Ufoakses2008 32

PrinsipQueueTree

Queuetreeisonlyonedirectional.Theremust beonequeuefordownloadandoneforupload Queuetreequeuesworkonlywithpacket marks.Thesemarksshouldbecreatedinthe firewallmangle Queuetreeallowstobuildcomplexqueue hierarchies

Ufoakses2008

33

ParentQueue

Itishardfortheroutertodetectexactspeedof Internetconnection TooptimizeusageofyourInternetresources andtoensuredesiredQoSoperationyou shouldassignmaximalavailableconnection speedmanually Todoso,youshouldcreateoneparentqueue withstrictspeedlimitationandassignallyour queuestothisparentqueue

Ufoakses2008

34

MembuatParentutama

Ufoakses2008

35

MembuatChildQueue1

Ufoakses2008

36

MembuatChildQueue2

Ufoakses2008

37

WorkshopQuequeTree

Createqueuetree:

Consumealltheavailabletrafficusing bandwidthtestandcheckthepingresponse times SethighestprioritytoICMP Checkthepingresponsetimes

Ufoakses2008 38

Createamainqueue CreatechildqueueforICMP CreatechildqueueforHTTP CreatechildqueueforOTHER

HasilQueue

Ufoakses2008

39

WorkshopSimpleLimit

LimitPC

PakaiBandwithtest Note

128KbpsDown 64KbpsUp

JikapcdalamNAT gunakanconnection tracking

Ufoakses2008

40

Workshop2

Samadengangambardiatas Limitlahmenggunakanmaxlimitdanbursttime.

Ufoakses2008

41

PCQ

Ufoakses2008

42

Ufoakses2008

43

Jikalimitatdanmaxlimit0makaseluruhsubquequeakanmendapatkan maxlimitb/w. Quequetype

PCQsetting

Typename=pcqdown Kind=pcq Rate=unlimited/0 Limit=50 Clasifier=dstaddress Typename=pcqup Kind=pcq Rate=unlimited/0 Limit=50 Clasifier=scraddress
Ufoakses2008 44

Simplequeque Kantor

Nico

64Kbpsup 128KbpsDown Parent=kantor,limit=unlimited,type=pcq Parent=kantor,limit=unlimited,type=pcq Parent=kantor,limit=unlimited,type=pcq

Ufoakses2008 45

Agus

Tania

Graphing

Denganquequekitadapatmensetupgrafik untukmonitoring Toolgraphingquequerulessimplequeque =nama(yangdiberikebijakanqueque) Untukmelihatgrafiknya:

Diaksesmelaluiwebbrowserdenganalamat http://iprouter/graphs

Ufoakses2008

46