Pemisahan Bandwidth browsing dan download dan limit download

coba pake langkah2 ini:
1. buat L7 filtering untuk mengenali tipe mime dari http requests,

/ip firewall layer7-protocol
add comment="" name="download" regexp="\\.(avi|ac4|mp(e?g|a|e|1|2|3|4)|mk(a|v)|og (x|v|a|g) |rm|r(a|p)m|vob|flv|x-flv|3gp|amr|klv|wav|DivX|mov|wmv|rmvb|aac|zip|rar| iso|exe)"

2. setelah itu, bikin mangle rulenya

/ip firewall mangle
add action=mark-connection chain=prerouting protocol=tcp dst-port=53 new-connection-mark=c-dns passthrough=yes comment="Mark DNS"
add action=mark-connection chain=prerouting protocol=udp dst-port=53 new-connection-mark=c-dns passthrough=yes
add action=mark-packet chain= prerouting connection-mark=c-dns new-packet-mark=p-dns passthrough=no

add action=mark-connection chain=prerouting protocol=icmp new-connection-mark=c-icmp passthrough=yes comment="Mark ICMP"
add action=mark-packet chain=forward connection-mark=c-icmp new-packet-mark=p-icmp passthrough=no

add action=mark-connection chain=postrouting protocol=tcp dst-port=80,8080,3128,8888 new-connection-mark=c-http passthrough=yes comment="Mark HTTP"
add action=mark-packet chain=postrouting connection-mark=c-http new-packet-mark=p-http passthrough=no

add action=mark-connection chain=postrouting protocol=tcp dst-port=443 new-connection-mark=c-https passthrough=yes comment="Mark HTTPS"
add action=mark-packet chain=postrouting connection-mark=c-https new-packet-mark=p-https passthrough=no

add action=mark-packet chain=postrouting layer7-protocol=download new-packet-mark=pl7-download passthrough=no comment="Mark File DOWNLOAD"

3. Setelah itu buat Queue Treenya

/queue tree
add name=”1. Proteksi DNS” parent=global-out packet-mark=p-dns limit-at=32k max-limit=64k queue=default priority=1
add name=”1. Proteksi ICMP” parent= global-out packet-mark=p-icmp limit-at=32k max-limit=64k queue=default priority=1

add name=”2. QoS Downstream” parent=global-out max-limit=1M queue=default priority=3
add name=”1. HTTPS” parent="2. QoS Downstream" packet-mark=p-https limit-at=256k max-limit=512k queue=default priority=1
add name=”2. HTTP” parent="2. QoS Downstream" packet-mark=p-http limit-at=256k max-limit=512k queue=default priority=3

add name=Download parent="2. QoS Downstream" packet-mark=pl7-download limit-at=256k max-limit=512k queue=default priority=8

4. Selesai, logikanya sih begini, tuh rule bakan prioritas DNS dulu, terus memastikan ICMP packet dapet bandwidth, jadi ping harusnye ga bakal kriting, kemudian baru prioritas browsing, dimana protokol https lebih diutamakan dari pada protokol http, baru download ditaruh paling belakang.

nih script belum ane belum sempat coba langsung, tapi harusnya jalan, moga2 berguna.