ROS限速

====================================================================================

1、L7


/ip firewall layer7-protocol
add name=video regexp="\\.f4v|\\.flv"
add name=QQgame regexp="^.\?.\?\\x2D.+[\\x25\\x62\\x0E\\xC1\\x5F\\x6C|\\xFF\\x\
FF\\x20\\xCF\\x42\\x53|\\xFF\\xFF\\x10\\x17\\x87\\xA3|\\x3E\\x7F\\x20\\xCF\
\\x42\\x53|\\x1F\\x43\\x10\\x17\\x87\\xA3]|^\\x05\\x22.+\\x03\$"
add name=bigdata regexp="\\.exe|\\.zip|\\.rar|\\.7z|\\.mp4|\\.rmvb|\\.rm|\\.mp\
eg|\\.iso|\\.avi|\\.mkv|\\.wmv|\\.flac|\\.ape|\\.msi"
add name=flv regexp="^.*get.+\\.(f4v|flv).*\$"
add name=Kugoo regexp="^(\\x64.....\\x70....\\x50\\x37|\\x65.+)\r\
\n"
add name="Kugou 2010" regexp="^(\\x31..\\x8e|\\x64.+\\x74\\x47\\x50\\x37)"
add name=TudouVod regexp="^.*(post|POST|get|GET).+\\tudouui.+\\.swf.+\\http"
add name=youku regexp="^get.+\\/youku.+\\qplayer.swf"
add name=PPS regexp="^.\?.\?\\c.+\\c"
add name=Ku6 regexp="^get.+\\f4v.+\\ku6"
add name=QiyiVod regexp="^get.+\\qiyi.+\\swf"
add name=QQMusic regexp=\
"(^\\xFE.\?.\?.\?.\?\\xCF|^get.+\\qqmusic.\?\\qq.+\\qqmusic)"
add name=f4vVod regexp="^.*get.+\\.f4v.*\$"
add name=mp3 regexp="\"^.*get.+\\\\.mp3.*\\\$\""
add name=QQLive regexp="(^get.+\\video.\?\\qq.+\\flv|^\\xFE.\?.\?.\?.\?\\xD3|^\
get.+\\video.\?\\qq.+\\mp4)"
add name=PPLive regexp="(\\x06\\x02\\xA8\\xC0\\xB1\\x13|\\xA8\\x02\\x06\\x19\\\
x1A\\x5F\\x1B\\x6F\\xAE\\xE1|^get.+\\mp4.\?\\key.+\\pplive)"
add name=Kugou regexp=\
"(^post.+\\x0D\\x0A\\x0D\\x0A|^http.+\\x0D\\x0A\\x0D\\x0A|^e)"
add name=http regexp="http/(0\\.9|1\\.0|1\\.1) [1-5][0-9][0-9] [\t-\r -~]*(con\
nection:|content-type:|content-length:|date:)|post [\t-\r -~]* http/[01]\\\
.[019]"
add name=kugoo regexp="^1..\8E"
add name=vnc regexp="^rfb 00[1-9]\\.00[0-9]\
\n\$"
add name=xunlei regexp="^[()]...\?.\?.\?(reg|get|query)"
add name=jpg regexp="^.*(post|POST|get|GET).+\\.jpg.+\\http"
add name=html regexp="^.*(post|POST|get|GET).+\\.htm.+\\http"
add name=wma regexp="\"^.*get.+\\\\.wma.*\\\$\""




2、add




/ip firewall address-list
add address=192.168.1.250 disabled=no list=server
add address=192.168.0.0/22 disabled=no list=wks




3、type


/queue type
set default bfifo-limit=15000 kind=bfifo name=default
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 \
sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 \
red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=\
5
add kind=pcq name=PCQ_DOWN pcq-classifier=dst-address pcq-limit=50 pcq-rate=\
2000000 pcq-total-limit=250
add kind=pcq name=1M_DOWN pcq-classifier=dst-a
ddress pcq-limit=50 pcq-rate=\
1000000 pcq-total-limit=250
add kind=pcq name=PCQ_UP pcq-classifier=src-address pcq-limit=50 pcq-rate=\
150000

pcq-total-limit=250
set default-small kind=pfifo name=default-small pfifo-limit=10





4、mangle




/ip firewall mangle
add action=mark-connection chain=prerouting disabled=no in-interface=lan \
new-connection-mark=1 passthrough=yes per-connection-classifier=\
both-addresses:2/0
add action=mark-connection chain=prerouting disabled=no in-interface=lan \
new-connection-mark=2 passthrough=yes per-connection-classifier=\
both-addresses:2/1
add action=mark-routing chain=prerouting connection-mark=1 disabled=no \
in-interface=lan new-routing-mark=1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=2 disabled=no \
in-interface=lan new-routing-mark=2 passthrough=yes
add action=mark-connection chain=prerouting comment=\
" \B7\F0\B9\E2\B2\CB\B8\F9\CC\B7 HTB+PCQ " disabled=\
no new-connection-mark=icmp passthrough=yes protocol=icmp \
src-address-list=wks
add action=mark-packet chain=postrouting connection-mark=icmp disabled=no \
new-packet-mark=icmps passthrough=no src-address-list=wks
add action=mark-packet chain=prerouting connection-mark=icmp disabled=no \
new-packet-mark=icmp passthrough=no src-address-type=!local
add action=accept chain=forward disabled=no limit=5,8 protocol=icmp
add action=mark-connection chain=prerouting comment=Server_Connection \
disabled=no new-connection-mark=server passthrough=yes src-address-list=\
server
add action=mark-packet chain=postrouting connection-mark=server disabled=no \
new-packet-mark=servers passthrough=no src-address-list=server
add action=mark-packet chain=prerouting connection-mark=server disabled=no \
new-packet-mark=server passthrough=no src-address-type=!local
add action=mark-connection chain=prerouting comment=Httpvideo_Connection \
disabled=no layer7-protocol=Ku6 new-connection-mark=http passthrough=yes \
src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
QiyiVod new-connection-mark=http passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
TudouVod new-connection-mark=http passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
f4vVod new-connection-mark=http passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=youku \
new-connection-mark=http passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=flv \
new-connection-mark=http passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=video \
new-connection-mark=http passthrough=yes src-address-list=wks
add action=mark-pack
et chain=postrouting connection-mark=http disabled=no \
new-packet-mark=https passthrough=no src-address-list=wks
add action=mark-packet chain

=prerouting connection-mark=http disabled=no \
new-packet-mark=http passthrough=no src-address-type=!local
add action=mark-connection chain=prerouting comment=Httpbig_Connection \
connection-bytes=700000-0 connection-rate=80k-200M disabled=no dst-port=\
80 new-connection-mark=httpbig passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-packet chain=postrouting connection-mark=httpbig disabled=no \
new-packet-mark=httpbigs passthrough=no src-address-list=wks
add action=mark-packet chain=prerouting connection-mark=httpbig disabled=no \
new-packet-mark=httpbig passthrough=no src-address-type=!local
add action=mark-connection chain=prerouting comment=Web_Connection \
connection-bytes=0-700000 disabled=no dst-port=80 layer7-protocol=http \
new-connection-mark=web passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=html \
new-connection-mark=web passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=jpg \
new-connection-mark=web passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-80k disabled=no \
dst-port=53 new-connection-mark=web passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-packet chain=postrouting connection-mark=web disabled=no \
new-packet-mark=webs passthrough=no src-address-list=wks
add action=mark-packet chain=prerouting connection-mark=web disabled=no \
new-packet-mark=web passthrough=no src-address-type=!local
add action=mark-connection chain=prerouting comment=HeavyConnection disabled=\
no new-connection-mark=heavy p2p=all-p2p passthrough=yes \
src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=mp3 \
new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=wma \
new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=Kugoo \
new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
bigdata new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
xunlei new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=Kugou \
new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
"Kugou 2010" new-connection-mark=heavy passthrough=yes src-address-list=\
wks

add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
PPLive new-connection-mark=heavy passthrough=yes src-address-list=wks

add action=mark-connection chain=prerouting disabled=no layer7-protocol=PPS \
new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
QQLive new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
QQMusic new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=kugoo \
new-connection-mark=heavy passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting connection-bytes=500000-0 \
connection-rate=200k-200M disabled=no dst-port=21,80,443,1024-65535 \
new-connection-mark=heavy passthrough=yes protocol=tcp src-address-list=\
wks
add action=mark-connection chain=prerouting connection-bytes=500000-0 \
connection-rate=200k-200M disabled=no dst-port=21,80,443,1024-65535 \
new-connection-mark=heavy passthrough=yes protocol=udp src-address-list=\
wks
add action=mark-packet chain=postrouting connection-mark=heavy disabled=no \
new-packet-mark=heavys passthrough=no src-address-list=wks
add action=mark-packet chain=prerouting connection-mark=heavy disabled=no \
new-packet-mark=heavy passthrough=no src-address-type=!local
add action=mark-connection chain=prerouting comment=\
"\C4\A7\CA\DE\CA\C0\BD\E7" connection-rate=0-150k disabled=no dst-port=\
6112,6114,1119,1118,3724,8085 new-connection-mark=gameconn passthrough=\
yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\CC\DA\D1\B6\D3\CE\CF\B7" connection-rate=0-30k disabled=no dst-port=\
5692,7101-7103,28012,2349,8586,10001-10070,28008,31414,6299,5130 \
new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-30k disabled=no \
dst-port=12000-13000,2349,5063,39311,1764,12721,3133,4550,3620 \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=\
QQgame new-connection-mark=gameconn passthrough=yes src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B4\A9\D4\BD\BB\F0\CF\DF_\B5\D8\CF\C2\B3\C7\D3\C2\CA\BF" \
connection-rate=0-200k disabled=no dst-port=12000-12200,2349,5063 \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-200k disabled=\
no dst-port=2349,28012,7101-7103,10001-10070 new-connection-mark=gameconn \
passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting disab
led=no new-connection-mark=\
gameconn packet-size=0-128 passthrough=yes protocol=udp src-address-list=\
wks src-port=5063
add action=mark-con

nection chain=prerouting comment=\
"\B6\B9\BF\CD\B6\D4\D5\BD\C6\BD\CC\A8" connection-rate=0-50k disabled=no \
dst-port=31414,3470,3468 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
dst-port="1140,1371,1510,16434,9865,2105,1497,31519,9000,1151,4311,1506,15\
59,55952,59823" new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks src-port=1176,1076,1169,13791,1139,11337
add action=mark-connection chain=prerouting comment=\
"QQ\B6\D4\D5\BD\C6\BD\CC\A8\D6\AE\B1\F9\B7\E2\CD\F5\D7\F9" \
connection-rate=0-50k disabled=no dst-port=\
1273,1061,65473,1940,2882,1501,4078,8369,4861,4964 new-connection-mark=\
gameconn passthrough=yes protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\BA\C6\B7\BD\B6\D4\D5\BD\C6\BD\CC\A8" connection-rate=0-30k disabled=no \
dst-port=1203 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-30k disabled=no \
dst-port=9000,1511-1513 new-connection-mark=gameconn passthrough=yes \
protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"VS\BE\BA\BC\BC\C6\BD\CC\A8" connection-rate=0-30k disabled=no dst-port=\
3025,1253,1346,1759,1200,1675 new-connection-mark=gameconn passthrough=\
yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"VS\C6\BD\CC\A8\D6\AE\B1\F9\B7\E2\CD\F5\D7\F9" connection-rate=0-50k \
disabled=no dst-port="7263,2408,2468,2117,1871,1429,2294,1520,57236,1429,2\
494,7625,1552,1842,12411" new-connection-mark=gameconn passthrough=yes \
protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-30k disabled=no \
dst-port=1272 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\BA\C6\B7\BD\D6\AE\B1\F9\B7\E2\CD\F5\D7\F9" connection-rate=0-50k \
disabled=no dst-port="8861,1932,2287,14531,1897,2428,13735,1039,1100,1210,\
1381,1473,1509,1785,18979" new-connection-mark=gameconn passthrough=yes \
protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting comment="\BE\A2\CE\E8\CD\C5" \
connection-rate=0-30k disabled=no dst-port=25520-25521,25511 \
new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\
C3\CE\BB\C3\CE\F7\D3\CE" connection-rate=0-30k disabled=no dst-port=\
10906,22788,21388,10156,10116,4588,4188,4088,39988 new-connection-ma

rk=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C9\F1\B9\ED\CA\C0\BD\E7" connection-rate=0-30k disabled=no dst-port=\
30000-30010 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B6\E0\CD\E6\CD\E1\CD\E1" connection-rate=0-50k disabled=no dst-port=\
8445-8451,7081,8081 new-connection-mark=gameconn passthrough=yes \
protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
dst-port=8445-8451 new-connection-mark=gameconn passthrough=yes protocol=\
tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\CC\EC\C1\FA\B0\CB\B2\BF" connection-rate=0-30k disabled=no dst-port=\
3731-3735,7449,7237 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment="\CE\CA\B5\C0" \
connection-rate=0-30k disabled=no dst-port=9010-9014 new-connection-mark=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment="\C1\FA\D6\AE\B9\C8" \
connection-rate=0-10k disabled=no dst-port=14500 new-connection-mark=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-100k disabled=\
no dst-port=15101-15104,14401 new-connection-mark=gameconn passthrough=\
yes protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B7\B4\BF\D6\BE\AB\D3\A2_175\C6\BD\CC\A8CS" connection-rate=0-100k \
disabled=no dst-port=27005-27030 new-connection-mark=gameconn \
passthrough=yes protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-70k disabled=no \
dst-port=47611 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=lovemoon connection-rate=\
0-50k disabled=no dst-port=\
57533,1500-1510,64035,32858,2411,1477,3157,24466,2045,8802,1412,2045,1336 \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
dst-port=1970,1145,1514,15468,1970,11451,2246,1708,63340,2117,2349 \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment="\B3\CE\BA\A33C_DOTA" \
connection-rate=0-50k disabled=no dst-port=\
1495,25789,34215,1511,2028,1500-1507,1457,6565,1854,9931,1909,2423,1308 \
new-connection-mark=gameconn passthrough=yes prot
ocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
dst-port=\
56921,7320,1801-1

803,7320,2287,2552,1866,4010,29883,1511,1866,2510,2355 \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
dst-port=9794 new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\BD\D6\CD\B7\C0\BA\C7\F2" connection-rate=0-50k disabled=no dst-port=\
1991,30195,17065 new-connection-mark=gameconn passthrough=yes protocol=\
udp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
dst-port=10010-10020,40000 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B3\C9\BC\AA\CB\BC\BA\B9" connection-rate=0-50k disabled=no dst-port=\
17703-17706 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment="\C3\CE\C8\FD\B9\FA" \
connection-rate=0-10k disabled=no dst-port=8000 new-connection-mark=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
dst-port=8452 new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\D2\D0\CC\EC\BC\C7\D3\EB\CD\C0\C1\FA\B5\B6" connection-rate=0-30k \
disabled=no dst-port=8801 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C0\C0\D2\D7\BD\D6\BB\FA\B6\D4\D5\BD\C6\BD\CC\A8" connection-rate=0-30k \
disabled=no dst-port=6004,7004,5562 new-connection-mark=gameconn \
passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-30k disabled=no \
dst-port=8024,15966,18997,49386,15086,22634,35339 new-connection-mark=\
gameconn passthrough=yes protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C6\F0\B7\B2\D3\CE\CF\B7\C6\BD\CC\A8" connection-rate=0-50k disabled=no \
dst-port=1610,1308,6660,6600,6631,6651 new-connection-mark=gameconn \
passthrough=yes protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-30k disabled=no \
dst-port=1607-1610,2175,6208 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\D3\C0\BA\E3\D6\AE\CB\FE" connection-rate=0-80k disabled=no dst-port=\
10241,7777,27500,2106 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add act
ion=mark-connection chain=prerouting comment=\
"\C3\CE\BB\C3\D6\EF\CF\C9" connection-rate=0-30k disabled=no dst-port=\
28993 new-con

nection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment="\BD\A3\CD\F83" \
connection-rate=0-30k disabled=no dst-port=3110-3120 new-connection-mark=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\D6\EF\CF\C92 \C8\C8\CE\E8\C5\C9\B6\D4" connection-rate=0-50k disabled=\
no dst-port=29000 new-connection-mark=gameconn passthrough=yes protocol=\
tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\D3\A2\D0\DB\B5\BA\B9\AB\B2\E2\B0\E6" connection-rate=0-20k disabled=no \
dst-port=6831-6832,6840-6847 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment="\C5\DD\C5\DD\CC\C3" \
connection-rate=0-30k disabled=no dst-port=6868,33567 \
new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-30k disabled=no \
dst-port=9646 new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment="\B7\E2\C9\F1\B0\F1" \
connection-rate=0-20k disabled=no dst-port=8888 new-connection-mark=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B4\AB\C6\E6\CA\C0\BD\E7" connection-rate=0-20k disabled=no dst-port=\
7100,7203-7204,7400 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-50k disabled=no \
dst-port=7000 new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment="JJ\B6\B7\B5\D8\D6\F7" \
connection-rate=0-30k disabled=no dst-port=20002-20007,22001 \
new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=BFGAME connection-rate=\
0-30k disabled=no dst-port=6000 new-connection-mark=gameconn passthrough=\
yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment="FIFA online2" \
connection-rate=0-50k disabled=no dst-port=6217 new-connection-mark=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment="\CC\EC\CF\C2\B7\A1" \
connection-rate=0-50k disabled=no dst-port=32824,32404-32407,32424,32299 \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B4\AB\C6\E6\B9\E9\C0\B4" connection-rate=0
-10k disabled=no dst-port=\
7417,7100 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connec

tion chain=prerouting connection-rate=0-30k disabled=no \
dst-port=12345 new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\BD\A3\CF\C0\C7\E9\D4\B53" connection-rate=0-30k disabled=no dst-port=\
3110-3120 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B7\E8\BF\F1\C8\FC\B3\B5" connection-rate=0-30k disabled=no dst-port=\
9600 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment="\D1\B0\CF\C9" \
connection-rate=0-50k disabled=no dst-port=7002,15002-15004,3100 \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment="\CF\C9\BD\A3online" \
connection-rate=0-10k disabled=no dst-port=15000 new-connection-mark=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B9\E2\CF\DF\B7\C9\B3\B5" connection-rate=0-30k disabled=no dst-port=\
2181 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-30k disabled=no \
dst-port=1059 new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment="\CA\F1\C3\C5" \
connection-rate=0-30k disabled=no dst-port=28880 new-connection-mark=\
gameconn passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\B0\CD\CA\CA\D3\CE\CF\B7" connection-rate=0-30k disabled=no dst-port=\
8001,21800 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\CC\D8\D6\D6\B2\BF\B6\D3" connection-rate=0-70k disabled=no dst-port=\
27931 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-100k disabled=\
no dst-port=20096,20059 new-connection-mark=gameconn passthrough=yes \
protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C7\E0\C5\F4\C6\E5\C5\C6" connection-rate=0-30k disabled=no dst-port=\
8030 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C2\CC\C9\AB\D5\F7\CD\BE" connection-rate=0-30k disabled=no dst-port=\
6020,6030,6040 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=pr
erouting comment=\
"\CE\E4\C1\D6\C8\BA\CF\C0\B4\AB" connection-rate=0-30k disabled=no \
dst-port=6877 new-connection-mark=gameconn p

assthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\CA\DE\D1\AA\B7\D0\CC\DA" connection-rate=0-30k disabled=no dst-port=\
4680 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C3\CE\BB\C3\C1\FA\D7\E5" connection-rate=0-50k disabled=no dst-port=\
4111 new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C8\C8\D1\AA\B4\AB\C6\E6" connection-rate=0-30k disabled=no dst-port=\
7100-7200,7440,7491,7204,7400-7401,7500,7300 new-connection-mark=gameconn \
passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\BD\A3\CF\C0\B7\A1\CD\E2\B4\AB" connection-rate=0-50k disabled=no \
dst-port=6040,6050,6661-6663 new-connection-mark=gameconn passthrough=yes \
protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C8\FD\B9\FA\D5\F9\B0\D4" connection-rate=0-80k disabled=no dst-port=\
6660,1610,6600 new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\C8\C8\D1\AA\BD\AD\BA\FE" connection-rate=0-50k disabled=no dst-port=\
13000-13002 new-connection-mark=gameconn passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\D9\BB\C5\AE\D3\C4\BB\EA" connection-rate=0-80k disabled=no dst-port=\
13317,20611-20627 new-connection-mark=gameconn passthrough=yes protocol=\
tcp src-address-list=wks
add action=mark-connection chain=prerouting comment=\
"\D3\A2\D0\DB\C1\AA\C3\CB" connection-rate=0-100k disabled=no dst-port=\
5222,2099,8443,5223,8393-8400 new-connection-mark=gameconn passthrough=\
yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-100k disabled=\
no dst-port=5000-5500 new-connection-mark=gameconn passthrough=yes \
protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting comment="QQ\B7\C9\B3\B5" \
connection-rate=0-200k disabled=no dst-port=\
3620,4550,3133,12721,1764,39311,3377,1516,2339,1320,2025 \
new-connection-mark=gameconn passthrough=yes protocol=udp \
src-address-list=wks
add action=mark-connection chain=prerouting comment=Winbox connection-rate=\
0-200k disabled=no dst-port=8291 new-connection-mark=gameconn \
passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting comment="\CC\DA\D1\B6QQ" \
connection-rate=0-30k disabled=no dst-port=8000-8005 new-connection-mark=\
gameconn passthrough=yes p
rotocol=udp src-address-list=wks
add action=mark-packet chain=postrouting connection-mark=gameconn disabled=no \
new-packet-mark=games passthr

ough=no src-address-list=wks
add action=mark-packet chain=prerouting connection-mark=gameconn disabled=no \
new-packet-mark=game passthrough=no src-address-type=!local
add action=mark-connection chain=prerouting comment=Small_Connection \
connection-rate=0-60k disabled=no dst-port=80,443,1024-65535 \
new-connection-mark=small packet-size=32-512 passthrough=yes protocol=tcp \
src-address-list=wks
add action=mark-connection chain=prerouting connection-rate=0-60k disabled=no \
dst-port=80,443,1024-65535 new-connection-mark=small packet-size=32-512 \
passthrough=yes protocol=udp src-address-list=wks
add action=mark-connection chain=prerouting connection-bytes=0-700000 \
connection-rate=0-500k disabled=no dst-port=80 new-connection-mark=small \
passthrough=yes protocol=tcp src-address-list=wks
add action=mark-connection chain=prerouting disabled=no layer7-protocol=vnc \
new-connection-mark=small passthrough=yes src-address-list=wks
add action=mark-packet chain=postrouting connection-mark=small disabled=no \
new-packet-mark=smalls passthrough=no src-address-list=wks
add action=mark-packet chain=prerouting connection-mark=small disabled=no \
new-packet-mark=small passthrough=no src-address-type=!local
add action=mark-connection chain=prerouting comment=Other_Connection \
disabled=no new-connection-mark=other passthrough=yes src-address-list=\
wks
add action=mark-packet chain=postrouting connection-mark=other disabled=no \
new-packet-mark=others passthrough=no src-address-list=wks
add action=mark-packet chain=prerouting connection-mark=other disabled=no \
new-packet-mark=other passthrough=no src-address-type=!local



5、tree




/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=2200k name=HTB_DOWN parent=global-in priority=2
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=750k name=HTB_UP parent=global-out priority=3
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=300k name="\A2\DD\CF\DE\D6\C6\C9\CF\B4\AB" parent=HTB_UP \
priority=7
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=1500k name="\A2\DD\CF\DE\D6\C6\CF\C2\D4\D8" parent=HTB_DOWN \
priority=7
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256k \
max-limit=256k name="\A2\D9ICMP\CF\C2\D4\D8" packet-mark=icmp parent=\
HTB_DOWN priority=1 queue=1M_DOWN
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1M \
max-limit=2M name="\A2\DA\D3\CE\CF\B7\CF\C2\D4\D8" packet-mark=game \
parent=HTB_DOWN priority=2 queue=1M_DOWN
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256k \
max-limit=256k na
me="\A2\D9ICMP\C9\CF\B4\AB" packet-mark=icmps parent=\
HTB_UP priority=1 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time

=0s disabled=no limit-at=0 \
max-limit=600k name="\A2\DA\D3\CE\CF\B7\C9\CF\B4\AB" packet-mark=games \
parent=HTB_UP priority=2 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=2M name="\A2\DB\CD\F8\D2\B3\CF\C2\D4\D8" packet-mark=web \
parent=HTB_DOWN priority=3 queue=PCQ_DOWN
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=2M name="\A2\DC\D0\A1\B0\FC\CF\C2\D4\D8" packet-mark=small \
parent=HTB_DOWN priority=4 queue=PCQ_DOWN
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=600k name="\A2\DB\CD\F8\D2\B3\C9\CF\B4\AB" packet-mark=webs \
parent=HTB_UP priority=3 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=600k name="\A2\DC\D0\A1\B0\FC\C9\CF\B4\AB" packet-mark=smalls \
parent=HTB_UP priority=4 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=2M name="\A2\DF\B7\FE\CE\F1\C6\F7\CF\C2\D4\D8" packet-mark=\
server parent=HTB_DOWN priority=8 queue=PCQ_DOWN
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=200k name="\A2\DF\B7\FE\CE\F1\C6\F7\C9\CF\B4\AB" packet-mark=\
servers parent=HTB_UP priority=8 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=2M name="\A2\DE\C6\E4\CB\FB\CF\C2\D4\D8" packet-mark=other \
parent=HTB_DOWN priority=5 queue=PCQ_DOWN
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=600k name="\A2\DE\C6\E4\CB\FB\C9\CF\B4\AB" packet-mark=others \
parent=HTB_UP priority=5 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=1500k name="\A2\DAHTTP\CA\FD\BE\DD\CF\C2\D4\D8" packet-mark=\
httpbig parent="\A2\DD\CF\DE\D6\C6\CF\C2\D4\D8" priority=7 queue=PCQ_DOWN
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=300k name="\A2\D9HTTP\CA\D3\C6\B5\C9\CF\B4\AB" packet-mark=\
https parent="\A2\DD\CF\DE\D6\C6\C9\CF\B4\AB" priority=6 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=300k name="\A2\DAHTTP\CA\FD\BE\DD\C9\CF\B4\AB" packet-mark=\
httpbigs parent="\A2\DD\CF\DE\D6\C6\C9\CF\B4\AB" priority=7 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=1500k name="\A2\DBHeavy\CA\FD\BE\DD\CF\C2\D4\D8" packet-mark=\
heavy parent="\A2\DD\CF\DE\D6\C6\CF\C2\D4\D8" priority=8 queue=PCQ_DOWN
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=300k name="\A2\DBHeavy\CA\FD\BE\DD\C9\CF\B4\AB" packet-mark=\
heavys parent="\A2\DD\CF\DE\D6\C6\C9
\CF\B4\AB" priority=8 queue=PCQ_UP
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=1500k name="

\A2\D9HTTP\CA\D3\C6\B5\CF\C2\D4\D8" packet-mark=\
http parent="\A2\DD\CF\DE\D6\C6\CF\C2\D4\D8" priority=6 queue=PCQ_DOWN

本文来源：https://www.bwwdw.com/article/cmji.html