a8ec705f0ebbdaf7d0ed33f3af5449b6fba8eee9
[svn/Prometheus-QoS/.git] / prometheus.c
1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2019 Michael Polak, Arachne Aerospace */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
9
10 /* Modified by: xChaos, 20190912
11 ludva, 20080415
12
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
17
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
22
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
26
27 GNU General Public License is located in file COPYING */
28
29 #include "cll1-0.6.2.h"
30 #include "ipstruct.h"
31
32 const char *version = "0.9.0-c";
33
34 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
35 /* Versions: 0.9.0 is development release, 1.0 will be "stable" */
36 /* Official Trac URL: https://dev.arachne.cz/svn/prometheus */
37 /* Official SVN URL: https://dev.arachne.cz/repos/prometheus */
38 /* BTC donations account: 19rriLx8vR19wGefPaMhakqnCYNYwjLvxq */
39 /* CZK donations account: 2900242944/2010 (transparent account) */
40 /* Warning: unofficial Github mirror is not supported by author! */
41 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
42
43 const char *stats_html_signature = "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2017 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";
44
45 #define STRLEN 512
46 #undef DEBUG
47
48 /* ======= All path names are defined here (for RPM patch) ======= */
49
50 const char *tc = "/sbin/tc"; /* requires tc with HTB support */
51 const char *iptables = "/sbin/iptables"; /* requires iptables utility */
52 const char *ip6tables = "/sbin/ip6tables"; /* requires iptables utility */
53 const char *iptablessave = "/sbin/iptables-save"; /* not yet required */
54 const char *iptablesrestore = "/sbin/iptables-restore"; /* requires iptables-restore */
55 const char *ip6tablessave = "/sbin/ip6tables-save"; /* not yet required */
56 const char *ip6tablesrestore = "/sbin/ip6tables-restore"; /* requires iptables-restore */
57 const char *ls = "/bin/ls"; /* this is not user configurable :-) */
58
59 char *config = "/etc/prometheus/prometheus.conf"; /* main configuration file */
60 char *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
61 char *macrosfile = "/etc/prometheus/prometheus.macros"; /* rewrite rules for most common tariffs */
62 char *upstreamfile = "/etc/prometheus/upstream.interfaces"; /* list of interfaces to manage */
63 char *downstreamfile = "/etc/prometheus/downstream.interfaces"; /* list of interfaces to manage */
64 char *qosfreefile = "/etc/prometheus/qosfree.interfaces"; /* list of interfaces to manage */
65 char *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
66 char *ip6tablesfile = "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/
67 char *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */
68 char *classmap = "/var/lib/misc/prometheus.classes"; /* credit log file */
69 char *html = "/var/www/traffic.html"; /* hall of fame - html version */
70 char *preview = "/var/www/preview.html"; /* hall of fame preview - html version */
71 char *json_traffic = "/var/www/logs/traffic.json"; /* hall of fame - json version */
72 char *json_preview = "/var/www/logs/preview.json"; /* hall of fame preview - json version */
73 char *cmdlog = "/var/log/prometheuslog"; /* command log filename */
74 char *log_dir = "/var/www/logs/"; /* log directory pathname, ended with slash */
75 char *log_url = "/logs/"; /* log directory relative URI prefix (partial URL) */
76 char *html_log_dir = "/var/www/logs/html/";
77
78 char *jquery_url = "http://code.jquery.com/jquery-latest.js";
79 char *lms_url = "/lms/?m=customerinfo&amp;id=";
80 int use_jquery_popups = TRUE;
81 int row_odd_even = 0; /*<tr class="odd/even"> */
82
83 /* === Configuraration file values defaults - stored in global variables ==== */
84
85 int filter_type = 1; /*1 mark, 2 classify*/
86 char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */
87 char *mark = "MARK";
88 char *mark_iptables = "MARK --set-mark ";
89 int dry_run = FALSE; /* preview - use puts() instead of system() */
90 char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
91 char *ip6preamble = "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT\n-A FORWARD -s fe80::/10 -j ACCEPT\n-A FORWARD -d ff00::/8 -j ACCEPT\n-A POSTROUTING -s fe80::/10 -j ACCEPT\n-A POSTROUTING -d ff00::/8 -j ACCEPT";
92 FILE *iptables_file = NULL;
93 FILE *ip6tables_file = NULL;
94 int enable_credit = TRUE; /* enable credit file */
95 int use_credit = FALSE; /* use credit file (if enabled)*/
96 char *title = "Hall of Fame - Greatest Suckers"; /* hall of fame title */
97 int hall_of_fame = TRUE; /* enable hall of fame */
98 char *medium = "1000Mbit"; /* 10Mbit/100Mbit ethernet */
99 //obsolete: char *lan = "eth0"; /* LAN interface */
100 //obsolete: char *lan_medium = "1000Mbit"; /* 10Mbit/100Mbit ethernet */
101 char *ip6prefix = NULL; /* Prefix for global /48 IPv6 subnet */
102 char *qos_leaf = "sfq perturb 5"; /* leaf discipline */
103 char *qos_free_zone = NULL; /* QoS free zone */
104 char *qos_free_dst_ipset = NULL; /* QoS free zone - dst match ipset name, must be prepared outside prometheus */
105 char *qos_free_src_ipset = NULL; /* QoS free zone - src match ipset name, must be prepared outside prometheus */
106 /* int qos_proxy = TRUE; include proxy port to QoS */
107 int found_lmsid = FALSE; /* show links to users in LMS information system */
108 int include_upload = TRUE; /* upload+download=total traffic */
109 /* char *proxy_ip = "192.168.1.1/32"; our IP with proxy port */
110 /* int proxy_port = 3128; proxy port number */
111 //obsolete: long long int line = 1024; /* WAN/ISP download in kbps */
112 //obsolete: long long int up = 1024; /* WAN/ISP upload in kbps */
113 int free_min = 256; /* minimum guaranted bandwidth for all undefined hosts */
114 int free_max = 512; /* maximum allowed bandwidth for all undefined hosts */
115 int overlimit_min = 256; /* minimum guaranted bandwidth for all undefined hosts */
116 int overlimit_max = 512; /* maximum allowed bandwidth for all undefined hosts */
117 int qos_free_delay = 0; /* seconds to sleep before applying new QoS rules */
118 int digital_divide = 2; /* controls digital divide weirdness ratio, 1...3 */
119 int max_nesting = 5; /* /include/uapi/linux/pkt_sched.h: #define TC_HTB_MAXDEPTH 8 [... - 3 parent classes] */
120 int htb_r2q = 256; /* should work for leaf values 512 kbps to 8 Mbps */
121 int burst = 8; /* HTB burst (in kbits) */
122 int burst_main = 64;
123 int burst_group = 32;
124 int magic_treshold = 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
125 int keywordcount = 0;
126 int class_count = 0;
127 int ip_count = 0;
128 FILE *log_file = NULL;
129 char *kwd = "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
130
131 const int highest_priority = 0; /* highest HTB priority (HTB built-in value is 0) */
132 const int lowest_priority = 7; /* lowest HTB priority /include/uapi/linux/pkt_sched.h: #define TC_HTB_NUMPRIO 8 */
133 const int idxtable_treshold1 = 24; /* this is no longer configurable */
134 const int idxtable_treshold2 = 12; /* this is no longer configurable */
135 const int idxtable_bitmask1 = 3; /* this is no longer configurable */
136 const int idxtable_bitmask2 = 3; /* this is no longer configurable */
137
138 struct IP *ips = NULL, *networks = NULL, *ip, *sharedip;
139 struct Group *groups = NULL, *group;
140 struct Keyword *keyword, *defaultkeyword=NULL, *keywords = NULL;
141 struct Macro *macro, *macros = NULL;
142 struct Index *idxs = NULL, *idx, *metaindex;
143 struct Interface *interfaces = NULL, *interface;
144 struct QosFreeInterface *qosfreeinterfaces = NULL, *qosfreeinterface;
145
146 #define FREE_CLASS 3
147 #define OVERLIMIT_CLASS 4
148
149 void help(void);
150 /* implemented in help.c */
151
152 void get_traffic_statistics(const char *whichiptables, int ipv6);
153 /* implemented in parseiptables.c */
154
155 void parse_ip_log(int argc, char **argv);
156 /* implemented in parselog.c */
157
158 void parse_hosts(char *hosts);
159 /* implemented in parsehosts.c */
160
161 void write_json_traffic(char *json);
162 /* implemented in json.c */
163
164 void write_htmlandlogs(char *html, char *d, int total, int just_preview);
165 /* implemented in htmlandlogs.c */
166
167 void analyse_topology(char *traceroute);
168 /* implemented in networks.c */
169
170 char *parse_datafile_line(char *str);
171 /* implemented in utils.c */
172
173 time_t get_mtime(const char *path);
174 /* implemented in utils.c */
175
176 const char *tr_odd_even(void)
177 {
178 row_odd_even = 1 - row_odd_even;
179 if(row_odd_even)
180 {
181 return "<tr class=\"even\">\n";
182 }
183 else
184 {
185 return "<tr class=\"odd\">\n";
186 }
187 }
188
189
190 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
191
192 char *index_id(char *ip, int bitmask);
193 /* function implemented in ipv4subnets.c */
194
195 char *subnet_id(char *ip, int bitmask);
196 /* function implemented in ipv4subnets.c */
197
198 char *index6_id(char *ip, int bitmask);
199 /* function implemented in ipv6subnets.c */
200
201 char *subnet6_id(char *ip, int bitmask);
202 /* function implemented in ipv6subnets.c */
203
204 /* ================= Let's parse configuration file here ================ */
205
206 void reject_config_and_exit(char *filename)
207 {
208 printf("Configuration file %s rejected - abnormal exit.",filename);
209 exit(-1);
210 }
211
212 void get_config(char *config_filename)
213 {
214 char *cnf="mark";
215
216 printf("Configured keywords: ");
217 parse(config_filename)
218 {
219 option("keyword",kwd);
220 if(kwd)
221 {
222 printf("%s ",kwd);
223
224 create(keyword,Keyword);
225 keyword->key = kwd;
226 keyword->asymetry_ratio = 1; /* ratio for ADSL-like upload */
227 keyword->asymetry_fixed = 0; /* fixed treshold for ADSL-like upload */
228 keyword->data_limit = 8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
229 keyword->data_prio = 4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
230 keyword->fixed_limit = 0; /* fixed data limit for setting lower HTB ceil */
231 keyword->fixed_prio = 0; /* fixed data limit for setting lower HTB prio */
232 keyword->reserve_min = 8; /* bonus for nominal HTB rate bandwidth (in kbps) */
233 keyword->reserve_max = 0; /* malus for nominal HTB ceil (in kbps) */
234 keyword->default_prio = highest_priority+1;
235 keyword->download_aggregation = keyword->upload_aggregation = 0; /* disable by default */
236 keyword->html_color = "000000";
237 keyword->ip_count = 0;
238 keyword->leaf_discipline = "";
239 keyword->allowed_avgmtu = 0;
240
241 push(keyword, keywords);
242 if(!defaultkeyword)
243 {
244 defaultkeyword = keyword;
245 }
246 keywordcount++;
247
248 kwd=NULL;
249 }
250 else
251 {
252 for_each(keyword,keywords)
253 {
254 int l=strlen(keyword->key);
255
256 if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)
257 {
258 char *tmptr=_; /* <---- l+1 ----> */
259 _+=l+1; /* via-prometheus-asymetry-ratio, etc. */
260 foption("asymetry-ratio", keyword->asymetry_ratio);
261 ioption("asymetry-treshold", keyword->asymetry_fixed);
262 ioption("magic-relative-limit", keyword->data_limit);
263 ioption("magic-relative-prio", keyword->data_prio);
264 loption("magic-fixed-limit", keyword->fixed_limit);
265 loption("magic-fixed-prio", keyword->fixed_prio);
266 ioption("htb-default-prio", keyword->default_prio);
267 ioption("htb-rate-bonus", keyword->reserve_min);
268 ioption("htb-ceil-malus", keyword->reserve_max);
269 ioption("download-aggregation", keyword->download_aggregation);
270 ioption("upload-aggregation", keyword->upload_aggregation);
271 option("leaf-discipline", keyword->leaf_discipline);
272 option("html-color", keyword->html_color);
273 ioption("allowed-avgmtu" ,keyword->allowed_avgmtu);
274 _=tmptr;
275
276 if(keyword->data_limit || keyword->fixed_limit ||
277 keyword->data_prio || keyword->fixed_prio)
278 {
279 use_credit=1;
280 }
281 }
282 }
283 }
284
285 option("tc",tc);
286 option("iptables",iptables);
287 option("iptables-save",iptablessave);
288 option("iptables-restore",iptablesrestore);
289 option("ip6tables",ip6tables);
290 option("ip6tables-save",ip6tablessave);
291 option("ip6tables-restore",ip6tablesrestore);
292 option("iptables-in-filename",iptablesfile);
293 option("ip6tables-in-filename",ip6tablesfile);
294 option("hosts",hosts);
295 option("downstream-interfaces-list-filename",downstreamfile);
296 option("upstream-interfaces-list-filename",upstreamfile);
297 option("qos-free-interfaces-list-filename",qosfreefile);
298 option("macros-filename",macrosfile);
299 option("ip6-prefix",ip6prefix);
300 option("medium",medium);
301 ioption("hall-of-fame-enable",hall_of_fame);
302 ioption("digital-divide-weirdness-ratio",digital_divide);
303 option("hall-of-fame-title",title);
304 option("hall-of-fame-filename",html);
305 option("json-filename",json_traffic);
306 option("hall-of-fame-preview",preview);
307 option("json-preview",json_preview);
308 option("log-filename",cmdlog);
309 option("credit-filename",credit);
310 option("classmap-filename",classmap);
311 ioption("credit-enable",enable_credit);
312 option("log-traffic-directory",log_dir);
313 option("log-traffic-html-directory",html_log_dir);
314 option("log-traffic-url-path",log_url);
315 option("jquery-url",jquery_url);
316 option("lms-url",lms_url);
317 ioption("use-jquery-popups",use_jquery_popups);
318 option("qos-free-zone",qos_free_zone);
319 option("qos-free-dst-ipset",qos_free_dst_ipset);
320 option("qos-free-src-ipset",qos_free_src_ipset);
321 ioption("qos-free-delay",qos_free_delay);
322 /* ioption("qos-proxy-enable",qos_proxy); */
323 /* option("qos-proxy-ip",proxy_ip);*/
324 option("htb-leaf-discipline",qos_leaf);
325 /* ioption("qos-proxy-port",proxy_port); */
326 ioption("free-rate",free_min);
327 ioption("free-ceil",free_max);
328 ioption("overlimit-rate",overlimit_min);
329 ioption("overlimit-ceil",overlimit_max);
330 ioption("htb-burst",burst);
331 ioption("htb-burst-main",burst_main);
332 ioption("htb-burst-group",burst_group);
333 ioption("htb-nesting-limit",max_nesting);
334 ioption("htb-r2q",htb_r2q);
335 ioption("magic-include-upload",include_upload);
336 ioption("magic-treshold",magic_treshold);
337 option("filter-type", cnf);
338 /* not yet implemented:
339 ioption("magic-fixed-packets",fixed_packets);
340 ioption("magic-relative-packets",packet_limit);
341 */
342 }
343 fail
344 {
345 perror(config_filename);
346 puts("Warning - using built-in defaults instead ...");
347 }
348 done; /* ugly macro end */
349 printf("\n");
350
351 /* leaf discipline for keywords */
352 for_each(keyword,keywords)
353 {
354 if(!strcmpi(keyword->leaf_discipline, ""))
355 {
356 keyword->leaf_discipline = qos_leaf;
357 }
358 }
359
360 if(strcmpi(cnf, "mark"))
361 {
362 filter_type = 2;
363 mark = "CLASSIFY";
364 mark_iptables = "CLASSIFY --set-class 1:";
365 }
366 else
367 {
368 filter_type = 1;
369 mark = "MARK";
370 mark_iptables = "MARK --set-mark ";
371 }
372 }
373
374
375 /* ========== This function executes, logs OR ALSO prints command ========== */
376
377 void safe_run(char *cmd)
378 {
379 if(dry_run)
380 {
381 printf("\n=>%s\n",cmd);
382 }
383 else
384 {
385 system(cmd);
386 }
387 if(log_file)
388 {
389 fprintf(log_file,"%s\n",cmd);
390 }
391 }
392
393 void iptables_save_line(char *line, int ipv6)
394 {
395 if(ipv6)
396 {
397 fprintf(ip6tables_file,"%s\n",line);
398 }
399 else
400 {
401 fprintf(iptables_file,"%s\n",line);
402 }
403 }
404
405 #define IPv4 FALSE
406 #define IPv6 TRUE
407
408
409 void run_iptables_restore(void)
410 {
411 char *restor;
412 string(restor, STRLEN);
413
414 /*-----------------------------------------------------------------*/
415 printf("Running %s <%s ...\n", iptablesrestore, iptablesfile);
416 /*-----------------------------------------------------------------*/
417
418 iptables_save_line("COMMIT", IPv4);
419 fclose(iptables_file);
420 if(dry_run)
421 {
422 parse(iptablesfile)
423 {
424 printf("%s\n",_);
425 }
426 done; /* ugly macro end */
427 }
428
429 sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);
430 safe_run(restor);
431
432 if(ip6prefix)
433 {
434 /*-----------------------------------------------------------------*/
435 printf("Running %s <%s ...\n", ip6tablesrestore, ip6tablesfile);
436 /*-----------------------------------------------------------------*/
437 iptables_save_line("COMMIT", IPv6);
438 fclose(ip6tables_file);
439 if(dry_run)
440 {
441 parse(ip6tablesfile)
442 {
443 printf("%s\n",_);
444 }
445 done; /* ugly macro end */
446 }
447 sprintf(restor,"%s <%s",ip6tablesrestore, ip6tablesfile);
448 safe_run(restor);
449 }
450 free(restor);
451 }
452
453 /**/
454
455 char *parse_datafile_line(char *str);
456 time_t get_mtime(const char *path);
457
458 /*-----------------------------------------------------------------*/
459 /* Are you looking for int main(int argc, char **argv) ? :-)) */
460 /*-----------------------------------------------------------------*/
461
462 program
463 {
464 int i=0; /* just plain old Fortran style integer :-) */
465 FILE *f=NULL; /* everything is just stream of bytes... */
466 char *str, *ptr, *d; /* LET A$=B$ :-) */
467 char *substring, *limit_pkts;
468
469 int parent = 1;
470 int just_networks = FALSE;
471 int just_flush = FALSE; /* deactivates all previous actions */
472 int nodelay = FALSE;
473 int just_preview = FALSE; /* preview - generate just stats */
474 int start_shaping = FALSE; /* apply FUP - requires classmap file */
475 int stop_shaping = FALSE; /* lift FUP - requires classmap file */
476 int reduce_ceil = 0; /* allow only rate+(ceil-rate)/2, /4, etc. */
477 int just_logs = FALSE; /* just parse logs */
478 int run = FALSE;
479 int total = 0;
480
481 char *althosts=NULL;
482
483 printf("\n\
484 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
485 Version %s - Copyright (C)2005-2017 Michael Polak, Arachne Labs\n\
486 iptables-restore & burst tunning & classify modification by Ludva\n\
487 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
488
489 /*----- Boring... we have to check command line options first: ----*/
490 arguments
491 {
492 argument("-c") { nextargument(config); }
493 argument("-h") { nextargument(althosts);}
494 argument("-d") { run=TRUE; dry_run=TRUE; }
495 argument("-f") { run=TRUE; just_flush=TRUE; }
496 argument("-9") { run=TRUE; just_flush=9; }
497 argument("-p") { run=TRUE; just_preview=TRUE; }
498 argument("-q") { run=TRUE; just_preview=TRUE; stop_shaping=TRUE; }
499 argument("-2") { run=TRUE; just_preview=TRUE; reduce_ceil=2; }
500 argument("-4") { run=TRUE; just_preview=TRUE; reduce_ceil=4; }
501 argument("-s") { run=TRUE; just_preview=TRUE; start_shaping=TRUE; }
502 argument("-r") { run=TRUE; }
503 argument("-n") { run=TRUE; nodelay=TRUE; }
504 argument("-a") { run=TRUE; just_networks=TRUE; }
505 argument("-l") { just_logs=TRUE; }
506 argument("-m") { just_logs=TRUE; }
507 argument("-y") { just_logs=TRUE; }
508 argument("-?") { help(); exit(0); }
509 argument("--help") { help(); exit(0); }
510 argument("-v") { exit(0); }
511 argument("--version") { exit(0); }
512 }
513
514 if(dry_run)
515 {
516 puts("*** THIS IS JUST DRY RUN ! ***\n");
517 }
518
519 date(d); /* this is typical cll1.h macro - prints current date */
520
521 /*-----------------------------------------------------------------*/
522 printf("Parsing configuration file %s ...\n", config);
523 /*-----------------------------------------------------------------*/
524 get_config(config);
525 /*-----------------------------------------------------------------*/
526 printf("Parsing upstream interfaces list %s ...\n", upstreamfile);
527 /*-----------------------------------------------------------------*/
528 parse(upstreamfile)
529 {
530 ptr = parse_datafile_line(_);
531 if(ptr)
532 {
533 create(interface, Interface);
534 interface->name = _;
535 interface->speed = (long long)atol(ptr);
536 /* is supplied value meaningful ?*/
537 if(interface->speed <= 0)
538 {
539 printf("Illegal value of %s interface bandwidth.\n", interface->name);
540 reject_config_and_exit(upstreamfile);
541 }
542 interface->is_upstream = TRUE;
543 interface->chain = "FORWARD";
544 interface->idxprefix = "forw";
545 push(interface, interfaces);
546 printf("Upstream interface %s: medium %s capacity %ld kbps\n", interface->name, medium, interface->speed);
547 }
548 }
549 done; /* ugly macro end */
550
551 /*-----------------------------------------------------------------*/
552 printf("Parsing downstream interfaces list %s ...\n", downstreamfile);
553 /*-----------------------------------------------------------------*/
554 parse(downstreamfile)
555 {
556 ptr = parse_datafile_line(_);
557 if(ptr)
558 {
559 create(interface, Interface);
560 interface->name = _;
561 interface->speed = (long long)atol(ptr);
562 /* is supplied value meaningful ?*/
563 if(interface->speed <= 0)
564 {
565 printf("Illegal value of %s interface bandwidth.\n", interface->name);
566 reject_config_and_exit(downstreamfile);
567 }
568 interface->is_upstream = FALSE;
569 interface->chain = "POSTROUTING";
570 interface->idxprefix = "post";
571 push(interface, interfaces);
572 printf("Downstream interface %s: medium %s capacity %ld kbps\n", interface->name, medium, interface->speed);
573 }
574 }
575 done; /* ugly macro end */
576
577 if(just_logs)
578 {
579 parse_ip_log(argc,argv);
580 exit(0);
581 }
582 else if(not run)
583 {
584 help();
585 exit(0);
586 }
587
588 if(althosts)
589 {
590 hosts = althosts;
591 }
592
593 if(just_flush<9)
594 {
595 /*-----------------------------------------------------------------*/
596 puts("Parsing iptables verbose output ...");
597 /*-----------------------------------------------------------------*/
598 get_traffic_statistics(iptables, FALSE);
599 if(ip6prefix)
600 {
601 /*-----------------------------------------------------------------*/
602 puts("Parsing ip6tables verbose output ...");
603 /*-----------------------------------------------------------------*/
604 get_traffic_statistics(ip6tables, TRUE);
605 }
606 }
607
608 /*-----------------------------------------------------------------*/
609 /* cll1.h - let's allocate brand new character buffer... */
610 /*-----------------------------------------------------------------*/
611 string(str, STRLEN);
612 string(limit_pkts, STRLEN);
613
614 /*-----------------------------------------------------------------*/
615 printf("Parsing qos free interfaces file %s ...\n", qosfreefile);
616 /*-----------------------------------------------------------------*/
617 load(qosfreeinterface, qosfreeinterfaces,
618 qosfreefile, QosFreeInterface, name);
619
620 /*-----------------------------------------------------------------*/
621 printf("Parsing macro definition file %s ...\n", macrosfile);
622 /*-----------------------------------------------------------------*/
623 parse(macrosfile)
624 {
625 ptr = parse_datafile_line(_);
626 if(ptr)
627 {
628 create(macro, Macro);
629 macro->rewrite_from = _;
630 macro->rewrite_to = ptr;
631 push(macro, macros);
632 printf("%s -> %s\n", macro->rewrite_from, macro->rewrite_to);
633 }
634 }
635 done; /* ugly macro end */
636
637
638
639 /*-----------------------------------------------------------------*/
640 printf("Parsing class defintion file %s ...\n", hosts);
641 /*-----------------------------------------------------------------*/
642 parse_hosts(hosts);
643 /*
644 //this was pretty dumb idea anyway...
645 if(just_networks)
646 {
647 analyse_topology("/usr/sbin/traceroute -n -m 10 -w 2 %s.%d");
648 exit(-1);
649 }
650 */
651
652 /*-----------------------------------------------------------------*/
653 puts("Resolving shared connections ...");
654 /*-----------------------------------------------------------------*/
655 for_each(ip, ips) if(ip->sharing)
656 {
657 for_each(sharedip, ips) if(eq(sharedip->name, ip->sharing))
658 {
659 sharedip->traffic += ip->traffic;
660 sharedip->traffic_down += ip->direct;
661 sharedip->traffic_up += ip->upload;
662 ip->traffic = 0;
663 ip->mark = sharedip->mark;
664 ip->lmsid = sharedip->lmsid;
665 ip->pps_limit = sharedip->pps_limit; /* no other way to do this */
666
667 /* Ugly hack: append IPv4 addresses of sharedip to IPv6 uplinks */
668 ptr = strchr(ip->addr, '+');
669 if(ptr && ptr-ip->addr > 1 && !sharedip->v6)
670 {
671 *(--ptr) = 0;
672 concatenate(ip->addr, sharedip->addr, ptr);
673 ip->name = ip->addr = ptr;
674 ptr = strchr(ip->addr, '.');
675 while(ptr && *ptr)
676 {
677 *ptr = ':';
678 ptr = strchr(ptr, '.');
679 }
680 ip->mask += 64;
681 }
682
683 break;
684 }
685 if(not sharedip)
686 {
687 printf("Unresolved shared connection: %s %s sharing-%s\n",
688 ip->addr, ip->name, ip->sharing);
689 }
690 }
691
692 if(enable_credit && just_flush<9)
693 {
694 /*-----------------------------------------------------------------*/
695 printf("Parsing credit file %s ...\n", credit);
696 /*-----------------------------------------------------------------*/
697 parse(credit)
698 {
699 ptr = parse_datafile_line(_);
700 if(ptr)
701 {
702 if_exists(ip,ips,eq(ip->addr,_))
703 {
704 sscanf(ptr,"%Lu",&(ip->credit));
705 }
706 }
707 }
708 done; /* ugly macro end */
709 }
710
711
712 if(!just_preview)
713 {
714 /*-----------------------------------------------------------------*/
715 puts("Initializing iptables and tc classes ...");
716 /*-----------------------------------------------------------------*/
717
718 iptables_file = fopen(iptablesfile, "w");
719 if(iptables_file == NULL)
720 {
721 perror(iptablesfile);
722 exit(-1);
723 }
724 iptables_save_line(iptablespreamble, IPv4);
725
726 if(ip6prefix)
727 {
728 ip6tables_file = fopen(ip6tablesfile, "w");
729 if(ip6tables_file == NULL)
730 {
731 perror(ip6tablesfile);
732 exit(-1);
733 }
734 iptables_save_line(iptablespreamble, IPv6);
735 iptables_save_line(ip6preamble, IPv6);
736 }
737
738 run_iptables_restore();
739
740 log_file = fopen(cmdlog, "w");
741 if(log_file == NULL)
742 {
743 perror(cmdlog);
744 exit(-1);
745 }
746
747 for_each(interface, interfaces)
748 {
749 sprintf(str,"%s qdisc del dev %s root 2>/dev/null", tc, interface->name);
750 safe_run(str);
751 }
752
753 iptables_file=fopen(iptablesfile,"w");
754 iptables_save_line(iptablespreamble, IPv4);
755 if(ip6prefix)
756 {
757 ip6tables_file=fopen(ip6tablesfile,"w");
758 iptables_save_line(iptablespreamble, IPv6);
759 iptables_save_line(ip6preamble, IPv6);
760 }
761
762 if(qos_free_zone && *qos_free_zone != '0') /* this is currently supported only for IPv4 */
763 {
764 for_each(interface, interfaces)
765 {
766 sprintf(str,"-A %s -%c %s -o %s -j ACCEPT", interface->chain, (interface->is_upstream?'d':'s'), qos_free_zone, interface->name);
767 iptables_save_line(str, IPv4);
768 }
769 }
770
771 if(qos_free_dst_ipset && *qos_free_dst_ipset != '0') /* this is currently supported only for IPv4 */
772 {
773 for_each(interface, interfaces)
774 {
775 sprintf(str,"-A %s -m set --match-set %s %s -o %s -j ACCEPT", interface->chain, (interface->is_upstream?"dst":"src"), qos_free_dst_ipset, interface->name);
776 iptables_save_line(str, IPv4);
777 }
778 }
779
780 if(qos_free_src_ipset && *qos_free_src_ipset != '0') /* this is currently supported only for IPv4 */
781 {
782 for_each(interface, interfaces)
783 {
784 sprintf(str,"-A %s -m set --match-set %s %s -o %s -j ACCEPT", interface->chain, (interface->is_upstream?"src":"dst"), qos_free_src_ipset, interface->name);
785 iptables_save_line(str, IPv4);
786 }
787 }
788
789 for_each(qosfreeinterface, qosfreeinterfaces)
790 {
791 sprintf(str,"-A FORWARD -i %s -j ACCEPT", qosfreeinterface->name);
792 iptables_save_line(str, IPv4);
793 iptables_save_line(str, IPv6);
794 sprintf(str,"-A POSTROUTING -o %s -j ACCEPT", qosfreeinterface->name);
795 iptables_save_line(str, IPv4);
796 iptables_save_line(str, IPv6);
797 }
798
799 if(ip_count > idxtable_treshold1 && !just_flush)
800 {
801 int idxcount=0, bitmask=32-idxtable_bitmask1;
802 char *subnet, *buf;
803 /*-----------------------------------------------------------------*/
804 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);
805 /*-----------------------------------------------------------------*/
806
807 iptables_save_line(":post_common - [0:0]", IPv4);
808 iptables_save_line(":forw_common - [0:0]", IPv4);
809 if(ip6prefix)
810 {
811 iptables_save_line(":post_common - [0:0]", IPv6);
812 iptables_save_line(":forw_common - [0:0]", IPv6);
813 }
814
815 for_each(ip,ips) if(ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))
816 {
817 if(ip->v6)
818 {
819 buf=index6_id(ip->addr,bitmask+32);
820 }
821 else
822 {
823 buf=index_id(ip->addr, bitmask);
824 }
825
826 if_exists(idx,idxs,eq(idx->id,buf))
827 {
828 idx->children++;
829 }
830 else
831 {
832 create(idx,Index);
833 idx->addr = ip->addr;
834 idx->id = buf;
835 idx->bitmask = bitmask+32*ip->v6;
836 idx->parent = NULL;
837 idx->children = 0;
838 idx->ipv6 = ip->v6;
839 idxcount++;
840 push(idx,idxs);
841 }
842 }
843
844 /* brutal perfomance optimalization */
845 while(idxcount > idxtable_treshold2 && bitmask > 2*idxtable_bitmask2)
846 {
847 bitmask -= idxtable_bitmask2;
848 idxcount = 0;
849
850 for_each(idx,idxs) if(idx->parent == NULL)
851 {
852 if(idx->ipv6)
853 {
854 buf = index6_id(idx->addr, bitmask+32);
855 }
856 else
857 {
858 buf = index_id(idx->addr, bitmask);
859 }
860 if_exists(metaindex,idxs,eq(metaindex->id,buf))
861 {
862 metaindex->children++;
863 }
864 else
865 {
866 create(metaindex,Index);
867 metaindex->addr = idx->addr;
868 metaindex->id = buf;
869 metaindex->bitmask = bitmask+32*idx->ipv6;
870 metaindex->parent = NULL;
871 metaindex->children = 0;
872 metaindex->ipv6 = idx->ipv6;
873 idxcount++;
874 push(metaindex,idxs);
875 }
876 idx->parent=metaindex;
877 }
878 }
879
880 /* this should slightly optimize throughput ... */
881 sort(idx,idxs,desc_order_by,children);
882 sort(idx,idxs,order_by,bitmask);
883
884 i=0;
885 for_each(idx, idxs)
886 {
887 if(idx->ipv6)
888 {
889 subnet=subnet6_id(idx->addr, idx->bitmask);
890 }
891 else
892 {
893 subnet=subnet_id(idx->addr, idx->bitmask);
894 }
895 printf("%d: %s/%d\n", ++i, subnet, idx->bitmask);
896
897 sprintf(str,":post_%s - [0:0]", idx->id);
898 iptables_save_line(str, idx->ipv6);
899
900 sprintf(str,":forw_%s - [0:0]", idx->id);
901 iptables_save_line(str, idx->ipv6);
902
903 for_each(interface, interfaces)
904 {
905 if(idx->parent)
906 {
907 string(buf, strlen(idx->parent->id)+6);
908 sprintf(buf, "%s_%s", interface->idxprefix, idx->parent->id);
909 }
910 else
911 {
912 buf = interface->chain;
913 }
914
915 sprintf(str, "-A %s -%c %s/%d -o %s -j %s_%s",
916 buf, (interface->is_upstream?'s':'d'), subnet, idx->bitmask, interface->name, interface->idxprefix, idx->id);
917 iptables_save_line(str, idx->ipv6);
918
919 sprintf(str, "-A %s -%c %s/%d -o %s -j %s_common",
920 buf, (interface->is_upstream?'s':'d'), subnet, idx->bitmask, interface->name, interface->idxprefix);
921 iptables_save_line(str, idx->ipv6);
922 }
923 }
924 printf("Total indexed iptables chains created: %d\n", i);
925
926 for_each(interface, interfaces)
927 {
928 sprintf(str,"-A %s -o %s -j %s_common", interface->chain, interface->name, interface->idxprefix);
929 iptables_save_line(str, IPv4);
930 if(ip6prefix)
931 {
932 sprintf(str,"-A %s -o %s -j %s_common", interface->chain, interface->name, interface->idxprefix);
933 iptables_save_line(str, IPv6);
934 }
935 }
936 }
937 }
938
939 if(just_flush)
940 {
941 fclose(iptables_file);
942 if(log_file)
943 {
944 fclose(log_file);
945 }
946 puts("Just flushed iptables and tc classes - now exiting ...");
947 exit(0);
948 }
949
950 if(!just_preview)
951 {
952 if(!dry_run && !nodelay && qos_free_delay)
953 {
954 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n", qos_free_delay);
955 sleep(qos_free_delay);
956 }
957
958 for_each(interface, interfaces)
959 {
960 sprintf(str, "%s qdisc add dev %s root handle 1: htb r2q %d default 1",
961 tc, interface->name, htb_r2q);
962 safe_run(str);
963
964 sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
965 tc, interface->name, medium, medium, burst_main, highest_priority);
966 safe_run(str);
967
968 sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
969 tc, interface->name, interface->speed, interface->speed, burst_main, highest_priority);
970 safe_run(str);
971 }
972 }
973
974 /*-----------------------------------------------------------------*/
975 puts("Locating heavy downloaders and generating root classes ...");
976 /*-----------------------------------------------------------------*/
977 sort(ip,ips,desc_order_by,traffic);
978
979 /*-----------------------------------------------------------------*/
980 for_each(interface, interfaces)
981 {
982 long long int rate = interface->speed;
983 long long int max = interface->speed;
984 int group_count = 0;
985 //obsolete: FILE *credit_file = NULL;
986
987 //obsolete: if(!just_preview && !dry_run && enable_credit)
988 //obsolete: {
989 //obsolete: credit_file = fopen(credit,"w");
990 //obsolete: }
991
992 for_each(group,groups)
993 {
994 if(!just_preview)
995 {
996 sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
997 tc, interface->name, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);
998 safe_run(str);
999 }
1000
1001 if(group_count++ < max_nesting)
1002 {
1003 parent = group->id;
1004 }
1005
1006 rate -= digital_divide*group->min;
1007 if(rate < group->min)
1008 {
1009 rate = group->min;
1010 }
1011
1012 /*shaping of aggresive downloaders, with credit file support */
1013 /* obsolete
1014 if(use_credit)
1015 {
1016 int group_rate = group->min, priority_sequence = lowest_priority;
1017
1018 for_each(ip, ips) if(ip->min == group->min && ip->max > ip->min)
1019 {
1020 ip->realquota=ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20));
1021 if( ip->keyword->data_limit
1022 and not ip->fixedprio
1023 and ip->traffic > ip->realquota )
1024 {
1025 if(group_rate < ip->max)
1026 {
1027 ip->max = group_rate;
1028 }
1029 group_rate+=magic_treshold;
1030 ip->prio=lowest_priority;
1031 if(ip->prio<highest_priority+2)
1032 {
1033 ip->prio=highest_priority+2;
1034 }
1035 }
1036 else
1037 {
1038 if( ip->keyword->data_prio
1039 && !ip->fixedprio
1040 && ( ip->traffic > ip->credit + (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20))) )
1041 {
1042 ip->prio=priority_sequence--;
1043 if(ip->prio<highest_priority+1)
1044 {
1045 ip->prio=highest_priority+1;
1046 }
1047 }
1048
1049 if(credit_file)
1050 {
1051 unsigned long long lcredit=0;
1052
1053 if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic)
1054 {
1055 lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;
1056 }
1057 fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);
1058 }
1059 }
1060 }
1061 } obsolete */
1062 }
1063 /* obsolete
1064 if(credit_file)
1065 {
1066 fclose(credit_file);
1067 } obsolete */
1068 }
1069
1070 if(just_preview)
1071 {
1072 if(start_shaping || stop_shaping || reduce_ceil)
1073 {
1074 time_t how_much_seconds = time(NULL) - get_mtime(classmap); /* sice start of daily aggregation session */
1075 printf("Reading %s (%ld seconds old) and applying Fair Use Policy and Aggregation rules... \n", classmap, how_much_seconds);
1076
1077 parse(classmap)
1078 {
1079 ptr=strchr(_,' ');
1080 if(ptr)
1081 {
1082 *ptr=0;
1083 ptr++;
1084 if_exists(ip,ips,eq(ip->addr,_))
1085 {
1086 int unshape_this_ip = 0;
1087 long avg_mbps_down = ip->traffic_down * 8 / how_much_seconds;
1088 long avg_mbps_up = ip->traffic_up * 8 / how_much_seconds;
1089 int agreg = 1, print_stats = 1;
1090
1091 if(ip->keyword->download_aggregation)
1092 {
1093 int min_mbps = (ip->min/ip->keyword->download_aggregation)>>10;
1094 if(min_mbps < 1)
1095 {
1096 min_mbps = 1;
1097 }
1098
1099 if(min_mbps <= avg_mbps_down)
1100 {
1101 unshape_this_ip = 0;
1102 agreg = (int)((float)(avg_mbps_down+1)/min_mbps+.5);
1103 ip->max /= agreg;
1104 ip->pps_limit /= agreg;
1105 printf("Download aggregation 1:%d for %s (min: %lu Mbps avg: %ld Mbps)\n", agreg, ip->name, min_mbps, avg_mbps_down);
1106 }
1107 else
1108 {
1109 unshape_this_ip = 1;
1110 }
1111 }
1112 else if(ip->keyword->upload_aggregation)
1113 {
1114 int min_mbps = (ip->min/ip->keyword->upload_aggregation)>>10;
1115 if(min_mbps < 1)
1116 {
1117 min_mbps = 1;
1118 }
1119
1120 if(min_mbps <= avg_mbps_up)
1121 {
1122 unshape_this_ip = 0;
1123 agreg = (int)((float)(avg_mbps_up+1)/min_mbps+.5);
1124 ip->max /= agreg;
1125 printf("Upload aggregation 1:%d for %s: (min: %lu Mbps avg: %ld Mbps)\n", agreg, ip->name, min_mbps, avg_mbps_up);
1126 }
1127 else
1128 {
1129 unshape_this_ip = 1;
1130 }
1131 }
1132 if(stop_shaping)
1133 {
1134 unshape_this_ip = 1;
1135 }
1136 ip->aggregated = agreg;
1137 ip->mark = atoi(ptr);
1138 if(ip->max < ip->desired || unshape_this_ip || reduce_ceil) /* apply or disable FUP limit immediately.... */
1139 {
1140 if(unshape_this_ip)
1141 {
1142 ip->max = ip->desired;
1143 if(stop_shaping) /* all limits removed, but not printed with -s (start_shaping) switch */
1144 {
1145 printf("Removing limit for %s (%s) ", ip->name, ip->addr);
1146 }
1147 else
1148 {
1149 print_stats = 0;
1150 }
1151 }
1152 else
1153 {
1154 printf("Updating %s (%s) ", ip->name, ip->addr);
1155 if(reduce_ceil)
1156 {
1157 ip->max = ip->min + (ip->desired-ip->min)/reduce_ceil;
1158 }
1159 else if(ip->max < ip->min)
1160 {
1161 ip->max = ip->min;
1162 }
1163 }
1164 for_each(interface, interfaces)
1165 {
1166 if(!interface->is_upstream)
1167 {
1168 if(print_stats)
1169 {
1170 printf("[down %s: %dk-%dk wants %d]", interface->name, ip->min, ip->max, ip->desired);
1171 }
1172 sprintf(str, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1173 tc, interface->name, ip->group, ip->mark, ip->min, ip->max, burst, ip->prio);
1174 safe_run(str);
1175 }
1176 else
1177 {
1178 if(print_stats)
1179 {
1180 printf("[up %s: %dk-%dk wants %dk]", interface->name, (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1181 (int)((ip->desired/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1182 (int)((ip->desired/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));
1183 }
1184 sprintf(str,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1185 tc, interface->name, ip->group, ip->mark,
1186 (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1187 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);
1188 safe_run(str);
1189 }
1190 }
1191 if(print_stats)
1192 {
1193 printf("\n");
1194 }
1195 }
1196 }
1197 }
1198 }
1199 fail
1200 {
1201 perror(classmap);
1202 puts("Warning - classmap file not fund, just generating preview ...");
1203 start_shaping=FALSE;
1204 stop_shaping=FALSE;
1205 }
1206 done; /* ugly macro end */
1207 }
1208 html=preview;
1209 json_traffic=json_preview;
1210 }
1211
1212 if(!dry_run && !just_flush)
1213 {
1214 /*-----------------------------------------------------------------*/
1215 printf("Writing json traffic overview %s ... ", json_traffic);
1216 /*-----------------------------------------------------------------*/
1217 write_json_traffic(json_traffic);
1218
1219 /*-----------------------------------------------------------------*/
1220 printf("Writing statistics into HTML page %s ...\n", html);
1221 /*-----------------------------------------------------------------*/
1222 write_htmlandlogs(html, d, total, just_preview);
1223 }
1224
1225 if(just_preview)
1226 {
1227 char swchar='p';
1228 if(start_shaping)
1229 {
1230 swchar='s';
1231 }
1232 else if(reduce_ceil)
1233 {
1234 swchar='0'+reduce_ceil; /* -2, -4 */
1235 }
1236 else if(stop_shaping)
1237 {
1238 swchar='q';
1239 }
1240
1241 printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar);
1242 exit(0);
1243 }
1244
1245 i=0;
1246 #ifdef DEBUG
1247 printf("%-22s %-15s mark\n","name","ip");
1248 #endif
1249
1250 printf("Writing %s", classmap);
1251 f = fopen(classmap, "w");
1252 if(f < 0)
1253 {
1254 perror(classmap);
1255 }
1256
1257 /*-----------------------------------------------------------------*/
1258 printf(" + generating iptables and tc classes ... ");
1259 /*-----------------------------------------------------------------*/
1260
1261 for_each(ip, ips) if(ip->mark > 0)
1262 {
1263 for_each(interface, interfaces)
1264 {
1265 char *chain;
1266 if(idxs)
1267 {
1268 char *buf;
1269 duplicate(ip->addr,buf);
1270 if(ip->v6)
1271 {
1272 buf=index6_id(ip->addr,64-idxtable_bitmask1);
1273 }
1274 else
1275 {
1276 buf=index_id(ip->addr,32-idxtable_bitmask1);
1277 }
1278
1279 string(chain, 6+strlen(buf));
1280 sprintf(chain, "%s_", interface->idxprefix);
1281 strcat(chain, buf);
1282
1283 free(buf);
1284 }
1285 else
1286 {
1287 chain = interface->chain;
1288 }
1289
1290 /* packet limits - this will be optional in future */
1291 if(ip->pps_limit)
1292 {
1293 sprintf(limit_pkts, "-m limit --limit %d/s --limit-burst %d ",
1294 ip->pps_limit, ip->pps_limit);
1295 }
1296 else
1297 {
1298 *limit_pkts = 0;
1299 }
1300
1301 #ifdef DEBUG
1302 printf("%-22s %-16s %04d %d/s\n", ip->name, ip->addr, ip->mark, ip->pps_limit);
1303 #endif
1304
1305 /* ------------------------------------------------ iptables classify */
1306 sprintf(str, "-A %s -%c %s/%d -o %s -j %s%d",
1307 chain, (interface->is_upstream?'s':'d'), ip->addr, ip->mask,
1308 interface->name, mark_iptables, ip->mark);
1309 iptables_save_line(str, ip->v6);
1310
1311 sprintf(str, "-A %s -%c %s/%d -o %s %s-j ACCEPT",
1312 chain, (interface->is_upstream?'s':'d'),ip->addr, ip->mask,
1313 interface->name, limit_pkts);
1314 iptables_save_line(str, ip->v6);
1315
1316 if(*limit_pkts) /* non-empty string?*/
1317 {
1318 /* classify overlimit packets to separate overlimit class */
1319 sprintf(str, "-A %s -%c %s/%d -o %s -j %s%d",
1320 chain, (interface->is_upstream?'s':'d'), ip->addr, ip->mask,
1321 interface->name, mark_iptables, OVERLIMIT_CLASS);
1322 iptables_save_line(str, ip->v6);
1323
1324 sprintf(str, "-A %s -%c %s/%d -o %s -j ACCEPT",
1325 chain, (interface->is_upstream?'s':'d'), ip->addr, ip->mask,
1326 interface->name);
1327 iptables_save_line(str, ip->v6);
1328 }
1329
1330 if(ip->min)
1331 {
1332 //TODO - min and max should not exceed interface->speed
1333
1334 /* -------------------------------------------------------- tc class */
1335 #ifdef DEBUG
1336 printf("[down: %dk-%dk]", ip->min, ip->max);
1337 #endif
1338
1339 sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1340 tc, interface->name, ip->group, ip->mark, ip->min, ip->max, burst, ip->prio);
1341 safe_run(str);
1342
1343 if(strcmpi(ip->keyword->leaf_discipline, "none"))
1344 {
1345 sprintf(str, "%s qdisc add dev %s parent 1:%d handle %d %s",
1346 tc, interface->name, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1347 safe_run(str);
1348 }
1349
1350 if(filter_type == 1)
1351 {
1352 sprintf(str, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1353 tc, interface->name, ip->mark, ip->mark);
1354 safe_run(str);
1355 }
1356 }
1357 else
1358 {
1359 #ifdef DEBUG
1360 printf("(sharing %s)\n", ip->sharing);
1361 #endif
1362 }
1363 i++;
1364 }
1365 if(ip->min && f > 0)
1366 {
1367 fprintf(f, "%s %d\n", ip->addr, ip->mark);
1368 }
1369 }
1370 if(f > 0)
1371 {
1372 puts("done.");
1373 fclose(f);
1374 }
1375
1376 for_each(interface, interfaces)
1377 {
1378 char *chain;
1379 if(idxs)
1380 {
1381 string(chain, STRLEN);
1382 sprintf(chain, "%s_common", interface->idxprefix);
1383 }
1384 else
1385 {
1386 chain = interface->chain;
1387 }
1388
1389 if(free_min)
1390 {
1391 final_chain = "ACCEPT";
1392
1393 sprintf(str, "-A %s -o %s -j %s%d",
1394 chain, interface->name, mark_iptables, FREE_CLASS);
1395 iptables_save_line(str, IPv4); /* only for IPv4 */
1396 }
1397
1398 sprintf(str,"-A %s -o %s -j %s", chain, interface->name, final_chain);
1399 iptables_save_line(str, IPv4);
1400 if(ip6prefix)
1401 {
1402 sprintf(str,"-A %s -o %s -j %s", chain, interface->name, final_chain);
1403 iptables_save_line(str, IPv6);
1404 }
1405
1406 if(free_min) /* allocate free bandwith if it is not zero... */
1407 {
1408 /*-----------------------------------------------------------------*/
1409 puts("Generating free bandwith class ...");
1410 /*-----------------------------------------------------------------*/
1411 sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1412 tc, interface->name, parent, FREE_CLASS, free_min, free_max,burst, lowest_priority);
1413 safe_run(str);
1414 /* tc SFQ */
1415 if(strcmpi(qos_leaf, "none"))
1416 {
1417 sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s", tc, interface->name, FREE_CLASS, FREE_CLASS, qos_leaf);
1418 safe_run(str);
1419 }
1420 /* tc handle 1 fw flowid */
1421 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc, interface->name, FREE_CLASS, FREE_CLASS);
1422 safe_run(str);
1423 }
1424 /*-----------------------------------------------------------------*/
1425 puts("Generating bandwith class for overlimit packets...");
1426 /*-----------------------------------------------------------------*/
1427 sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1428 tc, interface->name, parent, OVERLIMIT_CLASS, overlimit_min, overlimit_max, burst, lowest_priority);
1429 safe_run(str);
1430 }
1431 printf("Total IP count: %d\n", i);
1432 run_iptables_restore();
1433 if(log_file)
1434 {
1435 fclose(log_file);
1436 }
1437 return 0;
1438 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1439 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
1440 }
This page took 1.109986 seconds and 3 git commands to generate.