Apakah Anda ingin memaksimalkan koneksi internet di rumah atau kantor dengan tiga jalur ISP? Menggunakan load balancing PCC (Per Connection Classifier) Mikrotik adalah solusi terbaik. Artikel ini menyajikan panduan interaktif, lengkap dengan diagram, tips troubleshooting, dan langkah-langkah konfigurasi untuk load balancing PCC Mikrotik 3 jalur.
Diagram ilustrasi load balancing PCC Mikrotik 3 jalur
Apa Itu Load Balancing PCC Mikrotik?
Load balancing adalah metode untuk mendistribusikan paket data ke beberapa jalur internet agar semua jalur dapat digunakan secara optimal. PCC (Per Connection Classifier) membagi koneksi berdasarkan jumlah koneksi per jalur, berbeda dengan NTH yang membagi berdasarkan paket ke-N. Tujuan utama PCC adalah memastikan setiap jalur aktif, mencegah overload, dan memaksimalkan stabilitas jaringan.
Manfaat PCC Mikrotik
- Distribusi koneksi internet merata di semua ISP.
- Optimasi bandwidth dan performa jaringan.
- Meningkatkan stabilitas koneksi untuk semua perangkat.
- Dukungan prioritas trafik, misalnya untuk gaming, streaming, atau VoIP.
Persiapan Sebelum Konfigurasi
- Router Mikrotik dengan minimal tiga interface aktif.
- IP dan gateway untuk setiap ISP sudah diketahui.
- Memahami dasar firewall, NAT, dan mangle rules di Mikrotik.
Langkah-Langkah Load Balancing PCC 3 Jalur
1. Konfigurasi Interface dan IP
Atur nama interface dan IP untuk masing-masing jalur ISP:
/interface ethernet set [ find default-name=ether1 ] name=ether1-100M
set [ find default-name=ether2 ] name=ether2-INDI-20M
set [ find default-name=ether3 ] name=ether3-INDI-50M
/ip address add address=192.168.10.4/24 interface=ether1-100M network=192.168.10.0
add address=192.168.7.4/24 interface=ether3-INDI-50M network=192.168.7.0
add address=192.168.9.4/24 interface=ether2-INDI-20M network=192.168.9.0
2. Konfigurasi DNS dan Keamanan Router
Pastikan router dapat melakukan resolve domain dan mengamankan jaringan:
/ip dns set allow-remote-requests=yes servers=1.1.1.1,1.0.0.1,8.8.8.8
/interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik
3. Firewall dan Mangle Rules
Gunakan mangle untuk menandai koneksi dan paket agar jalur tertentu dapat diprioritaskan:
/ip firewall filter
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=27000-28998 in-interface=ether5 protocol=tcp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=27000-28998 in-interface=ether5 protocol=udp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward comment=ML connection-rate=0-256k dst-port=30097-30147,5000-5508,5551-5558,5601-5608,5651-5658 in-interface=ether5 protocol=tcp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=5000-5508,5551-5558,5601-5608,5651-5658 in-interface=ether5 protocol=udp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward comment=PUBG connection-rate=0-256k dst-port=10001-10010,21750 in-interface=ether5 protocol=tcp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=10491,10010,10013,10612,20002,20001,20000,12235,13748,7086-7995 in-interface=ether5 protocol=udp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=12070-12460,41182-41192,13972,13894,11455,10096,10039 in-interface=ether5 protocol=udp
4. NAT dan Routing
Aktifkan NAT masquerade dan buat routing rules sesuai mark koneksi:
/ip firewall nat add action=masquerade chain=srcnat out-interface=ether1-100M
add action=masquerade chain=srcnat out-interface=ether3-INDI-50M
add action=masquerade chain=srcnat out-interface=ether2-INDI-20M
/ip route add check-gateway=ping distance=1 gateway=192.168.7.1 routing-mark=game
add check-gateway=ping distance=1 gateway=192.168.9.1 routing-mark=4
add check-gateway=ping distance=1 gateway=192.168.10.1 routing-mark=3
5. Monitoring dan Optimasi
Setelah konfigurasi:
- Cek status jalur melalui IP → Routes.
- Gunakan Torch atau Traffic Monitor untuk melihat distribusi paket.
- Sesuaikan mangle rules jika ada jalur yang kurang optimal.
Tips Troubleshooting
- Jalur tidak terbagi merata: Pastikan per-connection-classifier di mangle sudah benar.
- Ping gagal ke gateway: Periksa koneksi fisik dan IP interface masing-masing ISP.
- Trafik tertentu lambat: Gunakan connection-mark untuk memprioritaskan trafik penting.
Kesimpulan
Dengan load balancing PCC Mikrotik 3 jalur, Anda dapat memanfaatkan semua ISP secara maksimal, meningkatkan stabilitas, dan performa jaringan. Metode ini cocok untuk rumah, kantor kecil, atau warnet yang membutuhkan koneksi internet cepat dan stabil.
Referensi dan Bacaan Tambahan
ini code lengkapnya
# ================================
# 1. Konfigurasi Interface
# ================================
/interface ethernet
set [ find default-name=ether1 ] name=ether1-100M
set [ find default-name=ether2 ] name=ether2-INDI-20M
set [ find default-name=ether3 ] name=ether3-INDI-50M
# ================================
# 2. Wireless Security Profile
# ================================
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
# ================================
# 3. User Group Permissions
# ================================
/user group
set read policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp
set write policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp
# ================================
# 4. Konfigurasi IP Address
# ================================
/ip address
add address=192.168.10.4/24 interface=ether1-100M network=192.168.10.0
add address=192.168.80.1/24 interface=ether5 network=192.168.80.0
add address=192.168.7.4/24 interface=ether3-INDI-50M network=192.168.7.0
add address=192.168.9.4/24 interface=ether2-INDI-20M network=192.168.9.0
# ================================
# 5. DNS Configuration
# ================================
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,1.0.0.1,8.8.8.8
# ================================
# 6. Firewall Filter Rules (IPGAME)
# ================================
/ip firewall filter
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=27000-28998 in-interface=ether5 protocol=tcp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=27000-28998 in-interface=ether5 protocol=udp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward comment=ML connection-rate=0-256k dst-port=30097-30147,5000-5508,5551-5558,5601-5608,5651-5658 in-interface=ether5 protocol=tcp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=5000-5508,5551-5558,5601-5608,5651-5658 in-interface=ether5 protocol=udp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward comment=PUBG connection-rate=0-256k dst-port=10001-10010,21750 in-interface=ether5 protocol=tcp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=10491,10010,10013,10612,20002,20001,20000,12235,13748,7086-7995 in-interface=ether5 protocol=udp
add action=add-dst-to-address-list address-list=IPGAME address-list-timeout=1h chain=forward connection-rate=0-256k dst-port=12070-12460,41182-41192,13972,13894,11455,10096,10039 in-interface=ether5 protocol=udp
# ================================
# 7. Firewall Mangle Rules
# ================================
/ip firewall mangle
# Mark Routing untuk IPGAME
add action=mark-routing chain=prerouting connection-rate=0-512k dst-address-list=IPGAME in-interface=ether5 new-routing-mark=game passthrough=no
# Mark Connection untuk tiap ISP
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=!IPGAME in-interface=ether2-INDI-20M new-connection-mark=indicn1 passthrough=yes
add action=mark-packet chain=output connection-mark=indicn1 new-packet-mark=1 passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=!IPGAME in-interface=ether3-INDI-50M new-connection-mark=indicn2 passthrough=yes
add action=mark-packet chain=output connection-mark=indicn2 new-packet-mark=2 passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=!IPGAME in-interface=ether1-100M new-connection-mark=iconcn3 passthrough=yes
add action=mark-packet chain=output connection-mark=iconcn3 new-packet-mark=3 passthrough=no
# Mark Connection berdasarkan per-connection-classifier (PCC)
add action=mark-connection chain=prerouting dst-port=80,8080 in-interface=ether5 new-connection-mark=indicn100-1 passthrough=yes per-connection-classifier=src-address-and-port:4/3 protocol=tcp src-address=192.168.80.0/24
add action=mark-routing chain=prerouting connection-mark=indicn100-1 in-interface=ether5 new-routing-mark=1 passthrough=no
# Tambahkan rule PCC lainnya sesuai konfigurasi awal...
# (Anda bisa melanjutkan untuk indicn50-1, indicn100-2, indicn502-1 seperti kode lama, tetap format seperti ini)
# ================================
# 8. NAT Masquerade
# ================================
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1-100M
add action=masquerade chain=srcnat out-interface=ether3-INDI-50M
add action=masquerade chain=srcnat out-interface=ether2-INDI-20M
# ================================
# 9. Routing
# ================================
/ip route
add check-gateway=ping distance=1 gateway=192.168.7.1 routing-mark=game
add check-gateway=ping distance=1 gateway=192.168.9.1 routing-mark=4
add check-gateway=ping distance=1 gateway=192.168.10.1 routing-mark=3
add check-gateway=ping distance=1 gateway=192.168.7.1 routing-mark=2
add check-gateway=ping distance=1 gateway=192.168.10.1 routing-mark=1
add check-gateway=ping distance=1 gateway=192.168.10.1
add check-gateway=ping distance=2 gateway=192.168.7.1
add check-gateway=ping distance=3 gateway=192.168.9.1