Hello mikrotik fans,

I will be bringing up a btest server soon. I have preprared one RB800 and a 1Gbit connection dedicated only for the sake of testing.
It is ready, but I want to limit the usage somehow before I post it public. I have created filter rule for input that puts your IP in ban address list for X period of time.

I can't figure out how to limit the test sessions per time. You can basically let it run indefinately. Can you tell me how to disconnect every btest connection for example on 5min?

Nice work!

You can check out the configuration of TomjNorthIdaho posted here:

viewtopic.php?f=2&t=104266&p=690150#p690150

/ip firewall raw
add action=accept chain=prerouting comment="testers accepted" src-address-list=tester
add action=drop chain=prerouting comment="previous testers drop" src-address-list=previous
add action=add-src-to-address-list address-list=tester address-list-timeout=2m chain=prerouting comment="add to tester" dst-port=2000-2100 protocol=tcp
add action=add-src-to-address-list address-list=tester address-list-timeout=2m chain=prerouting comment="add to tester" dst-port=2000-2100 protocol=udp
add action=add-src-to-address-list address-list=previous address-list-timeout=15m chain=prerouting comment="add to previous" dst-port=2000-2100 log=yes protocol=tcp
add action=add-src-to-address-list address-list=previous address-list-timeout=15m chain=prerouting comment="add to previous" dst-port=2000-2100 log=yes protocol=udp

This will limit tests to 2m every 15m per ip address.

It's almost like Mikrotik should run one

I did check his config and set it up nicely. Everything works except when the timer runs out for "testing" address list it wouldnt drop the traffic server>client only the other way. This issue appears only when testing UDP. With TCP test there is no problem. I worked on this for about 6 hours last night and I couldnt find a solution. Anyone else experenced this iisue?

Should I provide any screenshots?

Have you enabled fasttrack? I will probably bypass raw firewall, however doesn't explain why tcp is working.

Please do no post screenshots, just export config ( /export hide-sensitive ) and paste in code blocks.

Also.. TomjNorthIdaho mentioned more than a terabyte of traffic per month hosting public bandwidth server.
Are you sure your connection can handle such large amount of traffic?

I have enabled fasttrack, but it doesn't count packets so I guess i doesn't apply for this.

I will post config as soon as I can.

The mikrotik will be in a datacenter for the clients to test their bandwith and also for public use. So yes the network behind it will handle alot

It's almost like Mikrotik should run one

Please forward the bandwidth test link for Cisco, Juniper, Huawei, Zyxel, TP-Link, ....

Hello again.
It seems I fixed it and it's now working as expected. RAW rules needed tweaking. I will post before and after output so you can compare:

Before:
[user@Server] /ip firewall> raw print
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=prerouting action=passthrough
1 ;;; testers accepted
chain=prerouting action=accept log=no log-prefix="" src-address-list=tester
2 ;;; previous testers drop
chain=prerouting action=drop log=no log-prefix="" src-address-list=previous
3 ;;; add to tester
chain=prerouting action=add-src-to-address-list dst-port=2000-3000 log=no log-prefix="" protocol=tcp address-list=tester address-list-timeout=15m
4 ;;; add to tester
chain=prerouting action=add-src-to-address-list dst-port=2000-3000 log=no log-prefix="" protocol=udp address-list=tester address-list-timeout=15m
5 ;;; add to previous
chain=prerouting action=add-src-to-address-list dst-port=2000-3000 log=yes log-prefix="" protocol=tcp address-list=previous address-list-timeout=1d
6 ;;; add to previous
chain=prerouting action=add-src-to-address-list dst-port=2000-3000 log=yes log-prefix="" protocol=udp address-list=previous address-list-timeout=1d

After:
[user@Server] /ip firewall> raw print
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=prerouting action=passthrough
1 ;;; testers accepted
chain=prerouting action=accept log=no log-prefix="" src-address-list=tester
2 ;;; testers accepted
chain=output action=accept log=no log-prefix="" dst-address-list=tester
3 ;;; previous testers drop
chain=output action=drop log=no log-prefix="" dst-address-list=previous
4 ;;; previous testers drop
chain=prerouting action=drop log=no log-prefix="" src-address-list=previous
5 ;;; add to tester
chain=prerouting action=add-src-to-address-list dst-port=2000-3000 log=no log-prefix="" protocol=tcp address-list=tester address-list-timeout=15m
6 ;;; add to tester
chain=prerouting action=add-src-to-address-list dst-port=2000-3000 log=no log-prefix="" protocol=udp address-list=tester address-list-timeout=15m
7 ;;; add to previous
chain=prerouting action=add-src-to-address-list dst-port=2000-3000 log=no log-prefix="" protocol=tcp address-list=previous address-list-timeout=1d
8 ;;; add to previous
chain=prerouting action=add-src-to-address-list dst-port=2000-3000 log=no log-prefix="" protocol=udp address-list=previous address-list-timeout=1d

You can test the server at:

IP: 87.121.0.45
U: neterra
P: neterra

Special thanks to Neterra Telecommunications for sponsoring and providing the hardware and the connectivity for this btest server.

15min. testing time and 24h ban (this was their request).

Please share results when you test. Cheers

IP: 87.121.0.45

it says "can't connect" for UDP and "test unsupported" for TCP.
Are you certain it works fine?

Works fine here:

RB3011 @ 500Mbps
Cannot post 1Gbps result in upcoming 24 hours

Thanks nescafe2002 for testing. It's interesting how much CPU will be consumed on full bandwidth. Today max was 660mbps and the cpu was around 30%. Tell me from which IP you are testing so I can remove you from ban list for another try

Reset to default configuration & got a fresh ip

RB4011 @ 1Gbps

Seems fine for me

Nice btest server

I just ran some btest's from my 207.32.194.24 btest server to your new btest server.
FYI: UDP is pretty much immune to distance (because it is mostly a fire-and-forget protocol) , and TCP can be sensitive to distance because TCP requires return ACK packets.
Here are the results:

Nice btest server

I just ran some btest's from my 207.32.194.24 btest server to your new btest server.
FYI: UDP is pretty much immune to distance (because it is mostly a fire-and-forget protocol) , and TCP can be sensitive to distance because TCP requires return ACK packets.
Here are the results:

Great 10x for the test

Hope it is used a lot Do you think the RB800 will come weak if pushed? I can see it doesn't go higher than 70% cpu when being used for tests with 900mbps.

is this server still working?

im getting "connecting...."

code used:
/tool bandwidth-test 87.121.0.45 user=neterra password=neterra direction=both

Nice btest server

I just ran some btest's from my 207.32.194.24 btest server to your new btest server.
FYI: UDP is pretty much immune to distance (because it is mostly a fire-and-forget protocol) , and TCP can be sensitive to distance because TCP requires return ACK packets.
Here are the results:

Great 10x for the test

Hope it is used a lot Do you think the RB800 will come weak if pushed? I can see it doesn't go higher than 70% cpu when being used for tests with 900mbps.

RB-800 - don't know --- guess you can just wait and see …
North Idaho Tom Jones

is this server still working?

im getting "connecting...."

code used:
/tool bandwidth-test 87.121.0.45 user=neterra password=neterra direction=both

Now it is. Try again

is the server running on stable or long term ?
, lately you can test only if you have the same version of the packages

Just tried yor btest and am getting:
/tool bandwidth-test 87.121.0.45 user=neterra password=neterra direction=both
status: can not connect
duration: 0s
etc.
I your btest server also demanding a latest version of ROS?

If so it makes it somewhat unusable for me and many I know.

Just tried yor btest and am getting:
/tool bandwidth-test 87.121.0.45 user=neterra password=neterra direction=both
status: can not connect
duration: 0s
etc.
I your btest server also demanding a latest version of ROS?

If so it makes it somewhat unusable for me and many I know.

6.43.8 works for me to this btest server
-and-
6.43.12 works for me to this btest server
-and-
6.44 works for me to this btest server

6.43.8 works for me to this btest server
-and-
6.43.12 works for me to this btest server
-and-
6.44 works for me to this btest server

I am running many routers with pre 6.40 and those I have tried don't connect.
The problem is with an arbitrary change of authentication method courtesy of Mikrotik.
It would not be a problem if there was no user/pass rquired.
Given one has to come here to get the IP, and the user/pass is in clear text, and there is overuse mitigation in place, I can't see the point of requiring a user/pass, especially when it excludes many Mikrotik devices in the field.
But that's just me (and many I know).

6.43.8 works for me to this btest server
-and-
6.43.12 works for me to this btest server
-and-
6.44 works for me to this btest server

I am running many routers with pre 6.40 and those I have tried don't connect.
The problem is with an arbitrary change of authentication method courtesy of Mikrotik.
It would not be a problem if there was no user/pass rquired.
Given one has to come here to get the IP, and the user/pass is in clear text, and there is overuse mitigation in place, I can't see the point of requiring a user/pass, especially when it excludes many Mikrotik devices in the field.
But that's just me (and many I know).

Re: The problem is with an arbitrary change of authentication method courtesy of Mikrotik. re pre 6.40
I'm not up to speed with ROS version and authentication changes. What part of authentication does not work properly after an upgrade ?

Re: The problem is with an arbitrary change of authentication method courtesy of Mikrotik. re pre 6.40
I'm not up to speed with ROS version and authentication changes. What part of authentication does not work properly after an upgrade ?

Take a look at:
viewtopic.php?f=2&t=104266&p=686117&hil ... ty#p686117

Is it still active ? i am getting stuck at 'connecting..'
Ping works

Is it still active ? i am getting stuck at 'connecting..'
Ping works

Yes - my 207.32.194.24 public access btest server is on-line and working correctly.

- Check the version of your Mikrotik , you may need to upgrade it
- The user name is --> btest
- The password is --> btest

Yes I was able to test with 207.32.194.24. I was asking about 87.121.0.45

Yes, it's working.

Thanks a lot!!!

For some reason I still get stuck at status: connecting.. Maybe a configuration problem on my side ?



Same with 207.32.194.24 and both time out on ping although I havent tried a test in the last 24h

This is my firewall config (newbie alert)
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
add action=drop chain=input comment="defconf: drop WAN DNS UDP req" dst-port=53 in-interface=ether1 protocol=udp
add action=drop chain=input comment="defconf: drop WAN DNS TCP req" dst-port=53 in-interface=ether1 protocol=tcp

For some reason I still get stuck at status: connecting.. Maybe a configuration problem on my side ?

ROS version?

it's the latest, 6.44.2, RB750Gr3

it's the latest, 6.44.2, RB750Gr3

Then that's not the reason

HI,

First of all, thanks for your testing server, is great-full having some trusty point to scope when making bandwidth and link stability tests.

I am not being able to connect to it, It could be another reason i am not being able to connect to it?

Model: RB433
ROS: 6.40.8

Alexis.

Thanks, works very well. RB3011 v644.2

You can test the server at:

IP: 87.121.0.45
U: neterra
P: neterra

Special thanks to Neterra Telecommunications for sponsoring and providing the hardware and the connectivity for this btest server.

15min. testing time and 24h ban (this was their request).

Please share results when you test. Cheers

transmitting and receiving 800mb
Thanks, it worked like a charm. Have a nice day sir !

Seems to not work for me, goes into running state, but then nothing happens

just tested, everything works fine
p.s remote CPU load 100% is that ok? you mentioned before that it doesn't get higher than 70%

Working!!!

Got 500-ish out of my 500Mbps cable link

Thanks!

Authentication failed for me.

Hi There,

Just wondering if this is still up and running ? I'm interested to see how I can adjust my bandwidth and be able to test what's happening both on my router and behind it.

Would be great to be able to test against your server if it's still available.

Thanks !!

Hi There,

Just wondering if this is still up and running ? I'm interested to see how I can adjust my bandwidth and be able to test what's happening both on my router and behind it.

Would be great to be able to test against your server if it's still available.

Thanks !!

The public access btest server I operate is still operational.
IPv4 address: 207.32.194.24
IPv6 address: 2605:4e40:0:1fe::
user: btest
password: btest

Unfortunately i can not make it work..

i've entered your given IP address but... my MT is always 'connecting'.

korg

Unfortunately i can not make it work..

i've entered your given IP address but... my MT is always 'connecting'.

korg

Screen Shot 2019-12-09 at 12.23.55.png

Two questions:
1 ) What is your public IP address ? I will check my logs to see if for some reason your IP has been blocked.
2 ) Is your Mikrotik a firewall or behind a firewall ? I've seen customer firewall configurations which can prevent return TCP and/or UDP packets from a btest.

North Idaho Tom Jones

Hi...

1. i have dynamic IP address... so i really dont know which IP I had at that time... i will try it and then send you my current IP.. maybe that will help
2. Neither nor. its a simple LTE connection and in the fw its just input allow and deny upon the connection status and for the forward as well

Hi...

1. i have dynamic IP address... so i really dont know which IP I had at that time... i will try it and then send you my current IP.. maybe that will help
2. Neither nor. its a simple LTE connection and in the fw its just input allow and deny upon the connection status and for the forward as well

www.whatismyipaddress.com

So, now at 17.11 i have tested my speed through your test server and it worked.

tx

korg

So, now at 17.11 i have tested my speed through your test server and it worked.

tx

korg

You tested on my server ?
If so , then great

North Idaho Tom Jones

tested with 6.46.1

Thanks Martooo!

I have been trying both 27.121.0.45 u=neterra p=neterra as well as 207.32.194.24 u=btest p=btest but neither work. 207.32.194.24 "can't connect" and 27.121.0.45 is stuck at "connecting" before eventually disconnecting. Any other servers I can test to?

I have been trying both 27.121.0.45 u=neterra p=neterra as well as 207.32.194.24 u=btest p=btest but neither work. 207.32.194.24 "can't connect" and 27.121.0.45 is stuck at "connecting" before eventually disconnecting. Any other servers I can test to?

Are you behind a firewall ?
Is your Mikrotik also a firewall ?

A Mikrotik btest needs to be able to make and receive btest connections. If you are using or going through a firewall - or - your Internet provider has you going through a firewall, then a btest might now work.

North Idaho Tom Jones

I have been trying both 27.121.0.45 u=neterra p=neterra as well as 207.32.194.24 u=btest p=btest but neither work. 207.32.194.24 "can't connect" and 27.121.0.45 is stuck at "connecting" before eventually disconnecting. Any other servers I can test to?

Are you behind a firewall ?
Is your Mikrotik also a firewall ?

A Mikrotik btest needs to be able to make and receive btest connections. If you are using or going through a firewall - or - your Internet provider has you going through a firewall, then a btest might now work.

North Idaho Tom Jones

Have you tested?

hi there i try the 87.121.0.45 with TCP and it starts running and disconects in the same moment, when i try UDP it starts running but with no data at all... the same with the 207.32.194.24 it just says: cant connect both udp and TCP... i tried with the newest stable and with the newest long term

hi there i try the 87.121.0.45 with TCP and it starts running and disconects in the same moment, when i try UDP it starts running but with no data at all... the same with the 207.32.194.24 it just says: cant connect both udp and TCP... i tried with the newest stable and with the newest long term

Hello,

It seems that Tom has to temporarily power-off the public access btest server, because the increased bandwidth usage due to Coronavirus issue.
"I promise to return the btest server back on-line just as soon as my network stabilizes and the bandwidth is once again available", in his own words.

Greetings from Spain

You can test the server at:

IP: 87.121.0.45
U: neterra
P: neterra

Special thanks to Neterra Telecommunications for sponsoring and providing the hardware and the connectivity for this btest server.

15min. testing time and 24h ban (this was their request).

Please share results when you test. Cheers

sometimes i can test, but sometimes i cant, what happend?

You can test the server at:

IP: 87.121.0.45
U: neterra
P: neterra

Special thanks to Neterra Telecommunications for sponsoring and providing the hardware and the connectivity for this btest server.

15min. testing time and 24h ban (this was their request).

Please share results when you test. Cheers

Awesome! It tested with tx/rx 500/750 Mbps total average on a 1000/1000 line.
WHY, won't Mikrotik host servers I wonder?

Here is my results (Ukrainian IP to 87.121.0.45):

status: done testing
duration: 21s
rx-current: 91.8Mbps
rx-10-second-average: 94.3Mbps
rx-total-average: 93.9Mbps
lost-packets: 858
random-data: no
direction: receive
rx-size: 1500
connection-count: 20
local-cpu-load: 54%
remote-cpu-load: 9%
status: done testing
duration: 21s
rx-current: 95.0Mbps
rx-10-second-average: 94.6Mbps
rx-total-average: 94.4Mbps
lost-packets: 705
random-data: yes
direction: receive
rx-size: 1500
connection-count: 20
local-cpu-load: 58%
remote-cpu-load: 25%

You can test the server at:

IP: 87.121.0.45
U: neterra
P: neterra

Special thanks to Neterra Telecommunications for sponsoring and providing the hardware and the connectivity for this btest server.

15min. testing time and 24h ban (this was their request).

Please share results when you test. Cheers

Tx cur: 324.7 Mbps avg: 325.7 Mbps max: 355.4 Mbps
Rx cur: 414.5 Mbps avg: 410.3 Mbps max: 434.5 Mbps

status: done testing
duration: 21s
rx-current: 221.2Mbps
rx-10-second-average: 293.5Mbps
rx-total-average: 259.2Mbps
random-data: no
direction: receive
connection-count: 20
local-cpu-load: 32%
status: done testing
duration: 20s
rx-current: 236.3Mbps
rx-10-second-average: 247.4Mbps
rx-total-average: 210.5Mbps
random-data: no
direction: transmit
connection-count: 20
local-cpu-load: 31%
remote-cpu-load: 31%

Direction: both

Don't know why this one was under the radar for so long

ISP 500/30 (huge asymmetry, I know)

/tool bandwidth-test protocol=tcp \
\... direction=receive address=87.121.0.45 \
\... user="neterra" password="neterra" \
\... duration=20s
status: done testing
duration: 21s
rx-current: 477.1Mbps
rx-10-second-average: 476.2Mbps
rx-total-average: 465.9Mbps
random-data: no
direction: receive
connection-count: 20
local-cpu-load: 30%

> /tool bandwidth-test protocol=tcp \
\... direction=transmit address=87.121.0.45 \
\... user="neterra" password="neterra" \
\... duration=20s
status: done testing
duration: 21s
tx-current: 28.5Mbps
tx-10-second-average: 28.5Mbps
tx-total-average: 28.5Mbps
random-data: no
direction: transmit
connection-count: 20
local-cpu-load: 5%
remote-cpu-load: 12%