QoS и приоритезация трафика внутри VPN-туннелей

Наверняка, Вы — крутой сисадмин, который всю свою сеть построил на безопасных технологиях и все зашифровал с помощью надежного шифрования. Наверняка, Вы даже знаете и умеете настраивать QoS для того, чтобы сетевой трафик от рутинных приложений не мешал сетевому трафику критических приложений. Однако, умеете ли Вы настраивать не просто QoS, а именно QoS внутри VPN туннелей? QoS внутри VPN имеет свою специфику, которую мы подробно разберем на бесплатном вебинаре.
Консультации и помощь по MikroTik в нашем Telegram-канале: https://teleg.run/miktrain

Презентация
https://goo.gl/tX8nAA

Настройки

/ip firewall mangle
add action=mark-connection chain=input comment=PPTP dst-port=1723 \
new-connection-mark=pptp_in passthrough=no protocol=tcp
add action=mark-packet chain=prerouting connection-mark=pptp_in \
new-packet-mark=pptp_out passthrough=no
add action=mark-connection chain=output new-connection-mark=pptp_out \
passthrough=no protocol=tcp src-port=1723
add action=mark-packet chain=postrouting connection-mark=pptp_out \
new-packet-mark=pptp_in passthrough=no
add action=mark-connection chain=input comment=GRE new-connection-mark=gre_in \
passthrough=no protocol=gre
add action=mark-packet chain=prerouting connection-mark=gre_in \
new-packet-mark=gre_out passthrough=no
add action=mark-connection chain=output new-connection-mark=gre_out \
passthrough=no protocol=gre
add action=mark-packet chain=postrouting connection-mark=gre_out \
new-packet-mark=gre_in passthrough=no
add action=mark-connection chain=prerouting comment=Web dst-port=80,443,8080 \
new-connection-mark=web passthrough=no protocol=tcp
add action=mark-packet chain=forward connection-mark=web new-packet-mark=\
vpn_web_in out-interface=all-ppp passthrough=no
add action=mark-packet chain=forward connection-mark=web in-interface=all-ppp \
new-packet-mark=vpn_web_out passthrough=no
add action=mark-packet chain=forward connection-mark=web in-interface=ether1 \
new-packet-mark=web_in passthrough=no
add action=mark-packet chain=forward connection-mark=web new-packet-mark=\
web_out out-interface=ether1 passthrough=no
add action=mark-connection chain=prerouting comment=SIP dst-port=\
5060,36600-39999 new-connection-mark=sip passthrough=no protocol=udp
add action=mark-packet chain=forward connection-mark=sip new-packet-mark=\
vpn_sip_in out-interface=all-ppp passthrough=no
add action=mark-packet chain=forward connection-mark=sip in-interface=all-ppp \
new-packet-mark=vpn_sip_out passthrough=no
add action=mark-packet chain=forward connection-mark=sip in-interface=ether1 \
new-packet-mark=sip_in passthrough=no
add action=mark-packet chain=forward connection-mark=sip new-packet-mark=\
sip_out out-interface=ether1 passthrough=no
add action=mark-packet chain=forward comment=ALL new-packet-mark=vpn_all_in \
out-interface=all-ppp passthrough=no
add action=mark-packet chain=forward in-interface=all-ppp new-packet-mark=\
vpn_all_out passthrough=no
add action=mark-packet chain=forward in-interface=ether1 new-packet-mark=\
all_in passthrough=yes
add action=mark-packet chain=forward new-packet-mark=all_out out-interface=\
ether1 passthrough=yes

/queue tree
add max-limit=10M name=in parent=global
add max-limit=10M name=out parent=global
add max-limit=10M name=web_in packet-mark=web_in parent=in priority=5 queue=\
pcq-download-default
add max-limit=10M name=web_out packet-mark=web_out parent=out priority=5 \
queue=pcq-upload-default
add max-limit=10M name=vpn_in packet-mark=pptp_in,gre_in parent=in priority=3 \
queue=pcq-download-default
add max-limit=10M name=vpn_out packet-mark=pptp_out,gre_out parent=out \
priority=3 queue=pcq-upload-default
add max-limit=2M name=sip_in packet-mark=sip_in parent=in priority=1 queue=\
sip
add max-limit=2M name=sip_out packet-mark=sip_out parent=out priority=1 \
queue=sip
add max-limit=4M name=all_in packet-mark=all_in parent=in queue=\
pcq-download-default
add max-limit=4M name=all_out packet-mark=all_out parent=out queue=\
pcq-upload-default
add max-limit=10M name=vpn_web_in packet-mark=vpn_web_in parent=vpn_in \
priority=5 queue=pcq-download-default
add max-limit=10M name=vpn_web_out packet-mark=vpn_web_out parent=vpn_out \
priority=5 queue=pcq-upload-default
add max-limit=2M name=vpn_sip_in packet-mark=vpn_sip_in parent=vpn_in \
priority=1 queue=sip
add max-limit=2M name=vpn_sip_out packet-mark=vpn_sip_out parent=vpn_out \
priority=1 queue=sip
add max-limit=4M name=vpn_all_in packet-mark=vpn_all_in parent=vpn_in queue=\
pcq-download-default
add max-limit=4M name=vpn_all_out packet-mark=vpn_all_out parent=vpn_out \
queue=pcq-upload-default