16

Aug

The Easy Way to setting Mikrotik + Squid and Simple Queue

Written by nofee   
 

In a Case, there is my client wishing topology in its(the network using machine Mikrotik which will be joined forces with Squid, where this Squid stays in machine FreeBSD. He wishs, arrangement of shaping easily, by using Simple Queue.

If topology like this : INET ------- Mikrotik --------- SQUID -------- Client

Bandwidth Management is handle by SQUID. We wanted is like this :

INET | Mikrotik ---- SQUID | Client

So, shaping to client is handle by Mikrotik.
Requirement :

  1. Mikrotik Box by minimizing 3 ethernet card.
    1 applied for Uplink, 1 applied for Squid Box, 1 applied for line to client.
  2. Squid Box, in this case I apply FreeBSD as OS.

Configuration :

  1. Mikrotik Box :
    • ethernet for Uplink applies ip 192.168.1.2/30 with gateway 192..168.1.1, change name ether1 with Uplink
    • ethernet for Squid applies ip 172.17.1.1/30, change name ether2 with Proxy
    • ethernet for Client applies ip 192.168.10.1/24, change name ether3 with Client
  2. Squid Box :
    • ethernet applies ip 172.17.1.2/30
    • port 8080
How To :
  1. Setting WebProxy at Mikrotik Box:

    [admin@mt] > /ip web-proxy print
    enabled: no
    src-address: 0.0.0.0
    port: 3128
    hostname: "proxy"
    transparent-proxy: no
    parent-proxy: 0.0.0.0:0
    cache-administrator: "webmaster"
    max-object-size: 4096KiB
    cache-drive: system
    max-cache-size: none
    max-ram-cache-size: unlimited
    status: stopped
    reserved-for-cache: 0KiB
    reserved-for-ram-cache: 29696KiB

    [admin@mt] > /ip web-proxy set enabled=yes hostname="Proxy" transparent-proxy=yes parent-proxy=172.17.1.2:8080 cache-administrator="Mine" max-ram-cache-size=none enabled=yes

    [admin@mt] > /ip web-proxy print
    enabled: yes
    src-address: 0.0.0.0
    port: 3128
    hostname: "Proxy"
    transparent-proxy: yes
    parent-proxy: 172.17.1.2:8080
    cache-administrator: "Mine"
    max-object-size: 4096KiB
    cache-drive: system
    max-cache-size: none
    max-ram-cache-size: none
    status: running
    reserved-for-cache: 0KiB
    reserved-for-ram-cache: 29696KiB


  2. Firewall Setting NAT, trafig which use port 80 will redirect to webproxy.

    [admin@mt] > /ip firewall nat add action=redirect chain=dstnat src-address=192.168.10.0/24 protocol=tcp dst-port=80 to-ports=3128 in-interface=Client

    [admin@mt] > /ip firewall nat print
    Flags: X - disabled, I - invalid, D - dynamic
    0 chain=dstnat in-interface=Client src-address=192.168.10.0/24 protocol=tcp dst-port=80 action=redirect to-ports=3128
    1 chain=srcnat src-address=192.168.10.0/24 action=masquerade
    2 chain=srcnat src-address=172.17.1.2/32 action=masquerade

  3. Setting simple queue as usual, by using interface=Client
  4. Setting at squid, can apply transparent or no.
Done...
After I try, result is, client applies bandwidth as according to bandwidth which shaping we have at simple queue, don't forget, to make simple queue for proxy with bandwidth larger ones.
Hopefully this article can help.
Trackback(0)
Comments (0)Add Comment

Write comment
quote
bold
italicize
underline
strike
url
image
quote
quote
smile
wink
laugh
grin
angry
sad
shocked
cool
tongue
kiss
cry
smaller | bigger

security code
Write the displayed characters


busy
PerformancingAds

More Sites

AdBlaze (158)
AdBux (198)
Chitika (229)
Crosslink Builder (238)
LinkWorth (203)
PayPal (247)

Statistics

Members 4
Content 38
Web Links 23
Content View Hits 22.980

Best Link

Copyright © 2008 MustNoFee
This blog is 316 days since Jan, 12 2008