ACSL Docs - Buku Praktikum Jaringan Komputer Lanjut

This module covers the implementation of three core networking technologies:

1. VPN L2TPv3: Used for Site-to-Site connectivity, allowing two geographically separated local networks (LANs) to communicate as if they were on the same network. When paired with IPsec, it provides strong encryption and authentication.
2. OSPF Routing: Dynamic routing configured on MikroTik devices to manage network traffic efficiently.
3. Firewalls (IPTables/UFW): Security implementation on Ubuntu Server to control incoming and outgoing network traffic.

MikroTik provides three primary methods for controlling and limiting network bandwidth to prevent saturation and prioritize specific traffic (e.g., HTTP, FTP, VoIP):

1. Simple Queue: The easiest method to limit bandwidth based on IP addresses or ranges, defining specific upload and download limits.
2. Queue Tree: A complex hierarchical system allowing bandwidth rules based on subnets or interfaces with priority settings.
3. PCQ (Per Connection Queue): Used to distribute bandwidth equally among multiple users sharing a connection, ensuring fair access for every connection.

Squid utilizes three primary mechanisms for performance and administration:

1. Web Cache: A temporary storage area for web resources, reducing the need to fetch data from the original server repeatedly.
2. Cache Manager: An administrative interface used to monitor performance statistics (hit rate, disk/memory usage) and manage cache objects (clearing or deleting specific items).
3. Memory Usage: The allocation of system RAM for cache metadata, timestamps, and management information, which can be tuned via configuration to match system capacity.

WordPress is a Content Management System (CMS) that relies on a specific software stack to function:

• Apache: The web server that receives HTTP requests from browsers and serves the web pages.
• PHP: The server-side scripting language that processes dynamic content, executes scripts, and communicates with the database to build the final HTML page.
• MySQL/MariaDB: The relational database management system used to store all site content, including posts, pages, user data, and configuration settings.

A reverse proxy acts as an intermediary between a client and a backend server. It receives client requests and forwards them to the appropriate internal server, hiding the internal network structure from the public internet for increased security. Key use cases include:

• Load Balancing: Distributing incoming traffic across multiple backend servers (e.g., via round-robin) to prevent overloading.
• Caching: Storing copies of requested resources to serve them faster and reduce backend server load.
• SSL Termination: Handling SSL/TLS handshakes at the proxy level to reduce the computational burden on backend servers and centralize certificate management.
• Traffic Routing: Redirecting traffic based on specific rules, such as optimizing access to static content.

L2TPv3 (Layer 2 Tunneling Protocol version 3) is available in MikroTik RouterOS v7.1+. It can be used as a standard PPP VPN or for Layer 2 tunneling via L2TPv3 Ether (Pseudowire).

• Managed Routing Mode: Used to connect two distant sites using standard VPN protocols (like PPTP, SSTP, OpenVPN, or L2TPv3) provided at least one site has a Public IP.
• Unmanaged Bridging Mode (Pseudowire): Allows Layer 2 data (Data Link layer) to pass through as if it were a standard ethernet interface. This is superior to BCP (Bridge Control Protocol) as it fully supports services like DHCP and VLANs. Unlike EOIP, which is MikroTik-proprietary, L2TPv3 pseudowires can interoperate with non-MikroTik devices. This mode is ideal for sites that must share the same local IP subnet.