How to configure QoS for different VLANs on Mikrotik?

Question

Computer networks

The core of the network is MikroTik CCR1036-12G-4S, a bridge has been created on it, on which several VLANs (100, 200, etc.) are terminated, an Internet provider is connected to Ether1 (100 Mbps symmetrical channel). There is a task to prioritize different types of traffic (DNS, HTTPS, ICMP, etc.) equally for all VLANs, while each VLAN must have its own QoS CIR / MIR parameters (limit-at / max-limit). I tried to do it like this:
- in mangle/prerouting I mark connections according to the type of traffic
- in mangle/forward I specify the connection marker, In Interface - ether1, Out Interface - the desired VLAN (for upload, vice versa, respectively), I hang the marker on the packet (unique for each VLAN )
- in Queue Trees I make global IN/OUT queues with the max-limit=95 Mbps parameter
- in the same place I create child queues for IN / OUT, in each of which I indicate the package markers created in mangle / forward + I set priorities and a limit.
As a result, a rather cumbersome construction is obtained in Queue Trees, since there are a lot of VLANs, + to everything, it becomes very inconvenient to calculate CIR.
Is it possible to solve it in another way? For example, in Queue Trees only prioritize traffic, but in Simple Queues already make limits for VLANs?

Answer 1

We have about 20 vlans, but we just use simple queue. The guaranteed speed is the same for everyone, about 3Mb/s, the maximum depends on the vlan. The people are trained not to clog the channels, everyone signs a paper when they apply for a job. So in our case, the channel is enough. Even if suddenly everyone urgently needed to download something urgent and important from the branches, then each department will receive its guaranteed 3 megabits, well, or a maximum if no one downloads anything.
We thought about switching to Queue Tree, but so far the possibilities of simple queues are enough.
Something like this.

Answer 2

If each vlan has its own parameters, you don't care to parse it all. IMHO you are somewhere else, with the vlans themselves, you are doing something wrong, if you have such a problem, do not divide the network correctly. VLAN was divided according to one principle, and qos according to others, at the output you get a cumbersome settings matrix.