some formatting, cleanup
[svn/Prometheus-QoS/.git] / prometheus.c
1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2008 Michael Polak (xChaos) */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
9
10 /* Modified by: xChaos, 20110221
11 ludva, 20080415
12
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
17
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
22
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
26
27 GNU General Public License is located in file COPYING */
28
29 #define STRLEN 256
30 #define FIRSTGROUPID 1024
31 #define FIRSTIPCLASS 2048
32 #undef DEBUG
33
34 #include "cll1-0.6.2.h"
35
36 const char *version = "0.8.3";
37
38 /* Version numbers: 0.8.3 is development releases ("beta"), 0.8.4 will be "stable" */
39 /* Debian(RPM) package versions/patchlevels: 0.7.9-2, 0.8.0-1, 0.8.0-2, etc. */
40 /* C source code development versions ("beta"): 0.7.9-a, 0.8.1-b, etc. */
41 /* C source code release versions: 0.8.0, 0.8.2, 0.8.4, etc. */
42
43 const char *stats_html_signature = "<small>Statistics generated by Prometheus QoS version %s<br>GPL+Copyright(C)2005-2011 Michael Polak, <a href=\"http://www.arachne.cz/\">Arachne Labs</a></small>\n";
44
45 /* ======= All path names are defined here (for RPM patch) ======= */
46
47 char *tc = "/sbin/tc"; /* requires tc with HTB support */
48 char *iptables = "/sbin/iptables"; /* requires iptables utility */
49 char *iptablessave = "/sbin/iptables-save"; /* not yet required */
50 char *iptablesrestore = "/sbin/iptables-restore"; /* requires iptables-restore */
51 const char *ls = "/bin/ls"; /* this is not user configurable :-) */
52
53 char *config = "/etc/prometheus/prometheus.conf"; /* main configuration file */
54 char *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
55
56 char *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
57 char *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */
58 char *html = "/var/www/traffic.html"; /* hall of fame filename */
59 char *preview = "/var/www/preview.html"; /* hall of fame preview */
60 char *cmdlog = "/var/log/prometheuslog"; /* command log filename */
61 char *log_dir = "/var/www/logs/"; /* log directory pathname, ended with slash */
62 char *log_url = "logs/"; /* log directory relative URI prefix (partial URL) */
63 char *html_log_dir = "/var/www/logs/html/";
64
65 /* ======= Help screen is hopefuly self-documenting part of code :-) ======= */
66
67 void help(void)
68 {
69 puts("Command line switches:\n\
70 \n\
71 -?, --help this help screen\n\
72 -v, --version show Version number of this utility and exit\n\
73 -c filename force alternative /etc/prometheus.Conf filename\n\
74 -h filename force alternative /etc/Hosts filename (overrides hosts keyword)\n\
75 -f just Flush iptables and tc classes and exit (stop shaping)\n\
76 -9 emergency iptables flush (do not read data transfer statistics)\n\
77 -p just generate Preview of data transfer statistics and exit\n\
78 -d Dry run (preview tc and iptables commands on stdout)\n\
79 -r Run (reset all statistics and start shaping)\n\
80 -n run Now (start shaping without delay - overrides qos-free-delay keyword)\n\
81 -l Mmm YYYY generate HTML summary of traffic Logs (Mmm=Jan-Dec or Year, YYYY=year)\n\
82 -m generate HTML summary of traffic logs for yesterday's Month\n\
83 -y generate HTML summary of traffic logs for yesterday's Year\n");
84 /* not yet implemented:
85 -s start shaping! (keep data transfer statistics - but apply shaping)\n\
86 */
87 }
88 /* === Configuraration file values defaults - stored in global variables ==== */
89
90 int filter_type = 1; /*1 mark, 2 classify*/
91 char *mark = "MARK";
92 char *mark_iptables = "MARK --set-mark ";
93 int dry_run = 0; /* preview - use puts() instead of system() */
94 char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
95 FILE *iptables_file = NULL;
96 int enable_credit = 1; /* enable credit file */
97 int use_credit = 0; /* use credit file (if enabled)*/
98 char *title = "Hall of Fame - Greatest Suckers"; /* hall of fame title */
99 int hall_of_fame = 1; /* enable hall of fame */
100 char *lan = "eth0"; /* LAN interface */
101 char *lan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
102 char *wan = "eth1"; /* WAN/ISP interface */
103 char *wan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
104 char *qos_leaf = "sfq perturb 5"; /* leaf discipline */
105 char *qos_free_zone = NULL; /* QoS free zone */
106 int qos_proxy = 1; /* include proxy port to QoS */
107 int include_upload = 1; /* upload+download=total traffic */
108 char *proxy_ip = "192.168.1.1/32"; /* our IP with proxy port */
109 int proxy_port = 3128; /* proxy port number */
110 long long int line = 1024; /* WAN/ISP download in kbps */
111 long long int up = 1024; /* WAN/ISP upload in kbps */
112 int free_min = 32; /* minimum guaranted bandwidth for all undefined hosts */
113 int free_max = 64; /* maximum allowed bandwidth for all undefined hosts */
114 int qos_free_delay = 0; /* seconds to sleep before applying new QoS rules */
115 int digital_divide = 2; /* controls digital divide weirdness ratio, 1...3 */
116 int max_nesting = 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */
117 int htb_r2q = 256; /* should work for leaf values 512 kbps to 8 Mbps */
118 int burst = 8; /* HTB burst (in kbits) */
119 int burst_main = 64;
120 int burst_group = 32;
121 int magic_treshold = 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
122 int keywordcount = 0;
123 /* not yet implemented:
124 int fixed_packets = 0; maximum number of pps per IP address (not class!)
125 int packet_limit = 5; maximum number of pps to htn CEIL, not rate !!!
126 */
127 FILE *log_file = NULL;
128 char *kwd = "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
129
130 const int highest_priority = 0; /* highest HTB priority (HTB built-in value is 0) */
131 const int lowest_priority = 7; /* lowest HTB priority (HTB built-in value is 7) */
132 const int idxtable_treshold1 = 24; /* this is no longer configurable */
133 const int idxtable_treshold2 = 12; /* this is no longer configurable */
134 const int idxtable_bitmask1 = 3; /* this is no longer configurable */
135 const int idxtable_bitmask2 = 3; /* this is no longer configurable */
136
137 /* ==== This is C<<1 stuff - learn C<<1 first! http://cll1.arachne.cz ==== */
138
139 struct IP
140 {
141 char *addr;
142 char *name;
143 char *sharing;
144 int min;
145 int desired;
146 int max;
147 int mark;
148 int prio;
149 int fixedprio;
150 int group;
151 int lmsid;
152 unsigned long long direct;
153 unsigned long long proxy;
154 unsigned long long upload;
155 unsigned long long traffic;
156 unsigned long long credit;
157 unsigned long pktsup;
158 unsigned long pktsdown;
159 struct Keyword *keyword;
160 list(IP);
161 } *ips=NULL, *ip, *sharedip;
162
163 struct Group
164 {
165 int min;
166 int count;
167 int desired;
168 int id;
169 list(Group);
170 } *groups=NULL, *group;
171
172 struct Index
173 {
174 char *addr;
175 char *id;
176 struct Index *parent;
177 int bitmask;
178 int children;
179 list(Index);
180 } *idxs=NULL, *idx, *metaindex;
181
182 struct Keyword
183 {
184 char *key;
185
186 int asymetry_ratio; /* ratio for ADSL-like upload */
187 int asymetry_fixed; /* fixed treshold for ADSL-like upload */
188 int data_limit; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
189 int data_prio; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
190 long fixed_limit; /* fixed data limit for setting lower HTB ceil */
191 long fixed_prio; /* fixed data lmit for setting lower HTB prio */
192 int reserve_min; /* bonus for nominal HTB rate bandwidth (in kbps) */
193 int reserve_max; /* malus for nominal HTB ceil (in kbps) */
194 // int divide_max; /* relative malus: new_ceil=rate+(old_ceil-rate)/divide_max */
195 // int htb_ceil_bonus_divide; /* relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide */
196 int default_prio; /* default HTB priority for this keyword */
197 char *html_color;
198 int ip_count;
199 char *leaf_discipline;
200
201 list(Keyword);
202 } *keyword,*defaultkeyword=NULL,*keywords=NULL;
203
204 /* Damned, this must be object oriented! This looks almost like constructor ;-) */
205
206 void TheIP(void)
207 {
208 create(ip,IP);
209 ip->name = "";
210 ip->addr = "";
211 ip->sharing = NULL;
212 ip->prio = highest_priority+1;
213 ip->lmsid = \
214 ip->fixedprio = \
215 ip->mark = \
216 ip->min = \
217 ip->max = \
218 ip->desired = \
219 ip->credit = \
220 ip->upload = \
221 ip->proxy = \
222 ip->direct = \
223 ip->traffic = \
224 ip->pktsup = \
225 ip->pktsdown = 0;
226 ip->keyword = keywords;
227 push(ip,ips);
228 }
229
230 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
231
232 char *very_ugly_ipv4_code(char *inip,int bitmask,int format_as_chainname)
233 {
234 /* warning: this function was debugged only for bitmask values 20,24,28 !!!*/
235 int dot=0,n;
236 char *ip,*outip,*outptr,*fmt;
237
238 duplicate(inip,ip);
239 /* debug printf("(%s,%d) -> ",ip,bitmask); */
240
241 if(ip && *ip && bitmask>=0 && bitmask<=32)
242 {
243 string(outip,strlen(ip)+10); /*fuck unicode? assertion: 10>strlen("_%d_%d") */
244 }
245 else
246 {
247 /* should never exit here */
248 return "undefined";
249 }
250 outptr=outip;
251 while(ip && *ip)
252 {
253 if(*ip=='.')
254 {
255 if(dot<(bitmask/8-1))
256 {
257 if(format_as_chainname)
258 {
259 *outptr='_';
260 }
261 else
262 {
263 *outptr='.';
264 }
265 outptr++;
266 dot++;
267 }
268 else
269 {
270 char *cutdot=strchr(ip+1,'.'); /*for bitmask<24*/
271 if(cutdot)*cutdot='\0';
272 if(format_as_chainname)
273 fmt="_%d_%d";
274 else
275 fmt=".%d";
276 if(bitmask%8)
277 n=atoi(ip+1)-atoi(ip+1)%(1<<(8-bitmask%8));
278 else
279 n=0;
280
281 /*debug printf("%d/%d => [_%d_%d]\n",atoi(ip+1),bitmask,n,bitmask); */
282 sprintf(outptr,fmt,n,bitmask);
283 if(!format_as_chainname) while(bitmask<24)
284 {
285 strcat(outip,".0");
286 bitmask+=8;
287 }
288 /* debug printf("[%s]\n",outip); */
289 return outip;
290 }
291 }
292 else
293 {
294 *outptr=*ip;
295 outptr++;
296 }
297 ip++;
298 }
299 /*should never exit here*/
300 *outptr='\0';
301 return outip;
302 }
303
304 char *hash_id(char *ip,int bitmask)
305 { return very_ugly_ipv4_code(ip,bitmask,1); }
306
307 char *subnet_id(char *ip,int bitmask)
308 { return very_ugly_ipv4_code(ip,bitmask,0); }
309
310 /* ================= Let's parse configuration file here =================== */
311
312 void reject_config_and_exit(char *filename)
313 {
314 printf("Configuration file %s rejected - abnormal exit.",filename);
315 exit(-1);
316 }
317
318 void get_config(char *config_filename)
319 {
320 char *cnf="mark";
321
322 printf("Configured keywords: ");
323 parse(config_filename)
324 {
325 option("keyword",kwd);
326 if(kwd)
327 {
328 printf("%s ",kwd);
329
330 create(keyword,Keyword);
331 keyword->key=kwd;
332 keyword->asymetry_ratio=1; /* ratio for ADSL-like upload */
333 keyword->asymetry_fixed=0; /* fixed treshold for ADSL-like upload */
334 keyword->data_limit=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
335 keyword->data_prio=4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
336 keyword->fixed_limit=0; /* fixed data limit for setting lower HTB ceil */
337 keyword->fixed_prio=0; /* fixed data limit for setting lower HTB prio */
338 keyword->reserve_min=8; /* bonus for nominal HTB rate bandwidth (in kbps) */
339 keyword->reserve_max=0; /* malus for nominal HTB ceil (in kbps) */
340 keyword->default_prio=highest_priority+1;
341 keyword->html_color="000000";
342 keyword->ip_count=0;
343 keyword->leaf_discipline="";
344
345 push(keyword,keywords);
346 if(!defaultkeyword) defaultkeyword=keyword;
347 keywordcount++;
348
349 kwd=NULL;
350 }
351 else
352 {
353 for_each(keyword,keywords)
354 {
355 int l=strlen(keyword->key);
356
357 if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)
358 {
359 char *tmptr=_; /* <---- l+1 ----> */
360 _+=l+1; /* via-prometheus-asymetry-ratio, etc. */
361 ioption("asymetry-ratio",keyword->asymetry_ratio);
362 ioption("asymetry-treshold",keyword->asymetry_fixed);
363 ioption("magic-relative-limit",keyword->data_limit);
364 ioption("magic-relative-prio",keyword->data_prio);
365 loption("magic-fixed-limit",keyword->fixed_limit);
366 loption("magic-fixed-prio",keyword->fixed_prio);
367 ioption("htb-default-prio",keyword->default_prio);
368 ioption("htb-rate-bonus",keyword->reserve_min);
369 ioption("htb-ceil-malus",keyword->reserve_max);
370 option("leaf-discipline",keyword->leaf_discipline);
371 option("html-color",keyword->html_color);
372 _=tmptr;
373
374 if(keyword->data_limit || keyword->fixed_limit ||
375 keyword->data_prio || keyword->fixed_prio)
376 {
377 use_credit=1;
378 }
379 }
380 }
381 }
382
383 option("tc",tc);
384 option("iptables",iptables);
385 option("iptables-save",iptablessave); /* new */
386 option("iptables-restore",iptablesrestore); /* new */
387 option("iptables-file",iptablesfile); /* new */
388 option("hosts",hosts);
389 option("lan-interface",lan);
390 option("wan-interface",wan);
391 option("lan-medium",lan_medium);
392 option("wan-medium",wan_medium);
393 lloption("wan-download",line);
394 lloption("wan-upload",up);
395 ioption("hall-of-fame-enable",hall_of_fame);
396 option("hall-of-fame-title",title);
397 option("hall-of-fame-filename",html);
398 option("hall-of-fame-preview",preview);
399 option("log-filename",cmdlog);
400 option("credit-filename",credit);
401 ioption("credit-enable",enable_credit);
402 option("log-traffic-directory",log_dir);
403 option("log-traffic-html-directory",html_log_dir);
404 option("log-traffic-url-path",log_url);
405 option("qos-free-zone",qos_free_zone);
406 ioption("qos-free-delay",qos_free_delay);
407 ioption("qos-proxy-enable",qos_proxy);
408 option("qos-proxy-ip",proxy_ip);
409 option("htb-leaf-discipline",qos_leaf);
410 ioption("qos-proxy-port",proxy_port);
411 ioption("free-rate",free_min);
412 ioption("free-ceil",free_max);
413 ioption("htb-burst",burst);
414 ioption("htb-burst-main",burst_main);
415 ioption("htb-burst-group",burst_group);
416 ioption("htb-nesting-limit",max_nesting);
417 ioption("htb-r2q",htb_r2q);
418 ioption("magic-include-upload",include_upload);
419 ioption("magic-treshold",magic_treshold);
420 option("filter-type", cnf);
421
422 /* not yet implemented:
423 ioption("magic-fixed-packets",fixed_packets);
424 ioption("magic-relative-packets",packet_limit);
425 */
426 }
427 fail
428 {
429 perror(config_filename);
430 puts("Warning - using built-in defaults instead ...");
431 }
432 done;
433 printf("\n");
434
435 /*leaf discipline for keywords*/
436 for_each(keyword,keywords)
437 {
438 if (!strcmpi(keyword->leaf_discipline, ""))
439 {
440 keyword->leaf_discipline = qos_leaf;
441 }
442 }
443
444 if (strcmpi(cnf, "mark"))
445 {
446 filter_type = 2;
447 mark = "CLASSIFY";
448 mark_iptables = "CLASSIFY --set-class 1:";
449 }
450 else
451 {
452 filter_type = 1;
453 mark = "MARK";
454 mark_iptables = "MARK --set-mark ";
455 }
456
457 /* are supplied values meaningful ?*/
458 if(line<=0 || up<=0)
459 {
460 puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
461 reject_config_and_exit(config_filename);
462 }
463 }
464
465 /* ===================== traffic analyser - uses iptables ================ */
466
467 void get_traffic_statistics(void)
468 {
469 char *str,*cmd;
470 int downloadflag=0;
471
472 textfile(Pipe,str) *line,*lines=NULL;
473 string(str,STRLEN);
474 string(cmd,STRLEN);
475
476 sprintf(cmd,"%s -L -v -x -n -t mangle",iptables);
477 shell(cmd);
478 input(str,STRLEN)
479 {
480 create(line,Pipe);
481 line->str=str;
482 string(str,STRLEN);
483 append(line,lines);
484 }
485
486 for_each(line,lines)
487 {
488 int col, accept=0,proxyflag=0,valid=1,setchainname=0,commonflag=0;
489 unsigned long long traffic=0;
490 unsigned long pkts=0;
491 char *ipaddr=NULL,*ptr;
492
493 /* debug puts(line->str); */
494 valid_columns(ptr,line->str,' ',col)
495 if(valid) switch(col)
496 {
497 case 1: if(eq(ptr,"Chain"))
498 setchainname=1;
499 else if(eq(ptr,"pkts"))
500 valid=0;
501 else
502 sscanf(ptr,"%lu",&pkts);
503 break;
504 case 2: if(setchainname)
505 {
506 if(!strncmp(ptr,"post_",5) || eq(ptr,"POSTROUTING"))
507 downloadflag=1;
508 else
509 if(!strncmp(ptr,"forw_",5) || eq(ptr,"FORWARD"))
510 downloadflag=0;
511
512 if(eq(ptr,"post_common") || eq(ptr,"forw_common"))
513 commonflag=1;
514 }
515 else
516 sscanf(ptr,"%Lu",&traffic); traffic+=(1<<19); traffic>>=20;
517 break;
518 case 3: if((strncmp(ptr,"post_",5) && strncmp(ptr,"forw_",5)) || commonflag)
519 accept=eq(ptr,mark);
520 /*if (filter_type==1) accept=eq(ptr,"MARK"); else accept=eq(ptr,"CLASSIFY");*/
521 break;
522 case 8: if(downloadflag)
523 {
524 if(strstr(proxy_ip,ptr))proxyflag=1;
525 }
526 else
527 ipaddr=ptr;
528 break;
529 case 9: if(downloadflag)ipaddr=ptr;break;
530 }
531
532 if(accept && traffic>0 && ipaddr)
533 {
534 if(proxyflag)printf("(proxy) ");
535 else if(!downloadflag) printf("(upload) ");
536 printf("IP %s: %Lu M (%ld pkts)\n", ipaddr, traffic, pkts);
537
538 if_exists(ip,ips,eq(ip->addr,ipaddr));
539 else
540 {
541 TheIP();
542 ip->addr=ipaddr;
543 if(eq(ip->addr,"0.0.0.0/0"))
544 {
545 ip->name="(unregistered)";
546 ip->min=free_min;
547 ip->max=ip->desired=free_max;
548 }
549 }
550
551 if(downloadflag)
552 {
553 if(proxyflag)
554 ip->proxy=traffic;
555 else
556 ip->traffic+=traffic;
557 ip->direct=ip->traffic-ip->upload-ip->proxy;
558 ip->pktsdown=pkts;
559 }
560 else
561 {
562 ip->upload=traffic;
563 ip->pktsup=pkts;
564 if(include_upload)
565 {
566 ip->traffic+=traffic;
567 }
568 else
569 {
570 if(traffic>ip->traffic)
571 {
572 ip->traffic=traffic;
573 }
574 }
575 }
576 }
577 }
578
579 free(cmd);
580 }
581
582 /* ========== This function executes, logs OR ALSO prints command ========== */
583
584 void safe_run(char *cmd)
585 {
586 if(dry_run) printf("\n=>%s\n",cmd); else system(cmd);
587 if(log_file) fprintf(log_file,"%s\n",cmd);
588 }
589
590 void save_line(char *line)
591 {
592 fprintf(iptables_file,"%s\n",line);
593 }
594
595 void run_restore(void)
596 {
597 char *restor, *str;
598 string(restor,STRLEN);
599
600 /*-----------------------------------------------------------------*/
601 printf("Running %s <%s ...\n",iptablesrestore,iptablesfile);
602 /*-----------------------------------------------------------------*/
603
604 save_line("COMMIT");
605 fclose(iptables_file);
606 if(dry_run)
607 {
608 parse(iptablesfile)
609 {
610 str=_;
611 printf("%s\n", str);
612 }done;
613 }
614
615 sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);
616 safe_run(restor);
617
618 free(restor);
619 }
620
621 /* == This function strips extra characters after IP address and stores it = */
622
623 void parse_ip(char *str)
624 {
625 char *ptr=str,*ipaddr=NULL,*ipname=NULL;;
626
627 while(*ptr && *ptr!=' ' && *ptr!=9)
628 ptr++;
629
630 *ptr=0;
631 ipaddr=str;
632 ptr++;
633 while(*ptr && (*ptr==' ' || *ptr==9))
634 ptr++;
635 ipname=ptr;
636 while(*ptr && *ptr!=' ' && *ptr!=9)
637 ptr++;
638 *ptr=0;
639
640 if_exists(ip,ips,eq(ip->addr,ipaddr));
641 else
642 {
643 TheIP();
644 }
645 ip->addr=ipaddr;
646 ip->name=ipname;
647 }
648
649 char *parse_datafile_line(char *str)
650 {
651 char *ptr=strchr(str,' ');
652
653 if(ptr)
654 {
655 *ptr=0;
656 ptr++;
657 return ptr;
658 }
659 else
660 return NULL;
661 }
662
663 struct IpLog
664 {
665 char *name;
666 long traffic;
667 long guaranted;
668 int i;
669 long l;
670 list(IpLog);
671 } *iplog,*iplogs;
672
673 void parse_ip_log(int argc, char **argv)
674 {
675 char *month, *year, *str, *name="(undefined)", *ptr, *ptr2, *filename;
676 long traffic=0l, traffic_month, total=0, guaranted;
677 int col, col2, y_ok, m_ok, accept_month, i=1, any_month=0;
678 char mstr[4], ystr[5];
679 FILE *f;
680 string(str,STRLEN);
681 string(filename,STRLEN);
682
683 if(argv[1][1]=='l') /* -l */
684 {
685 if(argc<4)
686 {
687 puts("Missing parameter(s)!\nUsage: prometheus -l Mmm YYYY (Mmm=Jan-Dec or Year, YYYY=year)");
688 exit(-1);
689 }
690 else
691 {
692 month=argv[2];
693 if(eq(month,"Year")) any_month=1;
694 year=argv[3];
695 }
696 }
697 else
698 {
699 time_t t = time(NULL) - 3600*24 ; /* yesterday's timestamp*/
700 struct tm *timep = localtime(&t);
701
702 if(argv[1][1]=='m') /* -m yestarday - month */
703 {
704 strftime(mstr, 4, "%b", timep);
705 month=mstr;
706 strftime(ystr, 5, "%Y", timep);
707 year=ystr;
708 }
709 else /* -y yesterday - year */
710 {
711 month="Year";
712 any_month=1;
713 strftime(ystr, 5, "%Y", timep);
714 year=ystr;
715 }
716 }
717 printf("Analysing traffic for %s %s ...\n",month,year);
718
719 /* sorry... next release of C<<1 header file will include for_path_files(name,path) { } macro */
720 sprintf(str,"%s %s/",ls,log_dir);
721 shell(str);
722 input(str,STRLEN)
723 {
724 if(strstr(str,".log"))
725 {
726 ptr=strrchr(str,'\n');
727 if(ptr) *ptr='\0';
728 sprintf(filename,"%s/%s",log_dir,str);
729 printf("Parsing %s ...",filename);
730 accept_month=0;
731 traffic_month=0;
732 guaranted = 0;
733 parse(filename)
734 {
735 y_ok=m_ok=0;
736 valid_columns(ptr,_,'\t',col) switch(col)
737 {
738 case 2: name = ptr;break;
739 case 3: traffic = atol(ptr);break;
740 /* column number - was 7, now 10...*/
741 case 7:
742 case 8:
743 case 9:
744 case 10: if (isalpha(*ptr)) /* character, not numeric string = date, just one*/
745 {
746 valid_columns(ptr2,ptr,' ',col2) switch(col2)
747 {
748 case 2: if(any_month || eq(ptr2,month)) m_ok = 1; break;
749 case 5: if(eq(ptr2,year)) y_ok = 1; break;
750 }
751 }
752 else
753 {
754 if(col == 7) guaranted = atol(ptr);
755 }
756 }
757
758 if(y_ok && m_ok)
759 {
760 traffic_month += traffic;
761 accept_month = 1;
762 }
763 }
764 done;
765
766 if(accept_month)
767 {
768 create(iplog,IpLog);
769 iplog->name = name;
770 iplog->guaranted = guaranted;
771 iplog->traffic = traffic_month;
772 insert(iplog,iplogs,desc_order_by,traffic);
773 printf(" %ld MB\n",iplog->traffic);
774 }
775 else
776 {
777 puts(" no records.");
778 }
779 }
780 }
781 sprintf(str,"%s/%s-%s.html",html_log_dir,year,month);
782 printf("Writing %s ...",str);
783 f=fopen(str,"w");
784 if(f)
785 {
786 fprintf(f,"<table border><tr><th colspan=\"2\">%s %s</th><th colspan=\"2\">Data transfers</th><th align=\"right\">Min.speed</th></tr>\n ",month,year);
787
788 for_each(iplog,iplogs)
789 {
790 if(iplog->traffic)
791 {
792 fprintf(f,"<tr><td align=\"right\">%d</td><th align=\"left\">%s</td><td align=\"right\">%ld M</td><th align=\"right\">%ld G</th><td align=\"right\">%ld kbps</th></tr>\n",
793 i++, iplog->name, iplog->traffic, iplog->traffic>>10, iplog->guaranted);
794 total+=iplog->traffic>>10;
795 iplog->i=i;
796 iplog->l=total;
797 }
798 }
799 fprintf(f,"<tr><th colspan=\"3\" align=\"left\">Total:</th><th align=\"right\">%ld GB</th><th align=\"right\">%Ld kbps</th></tr>\n", total, line);
800 fputs("</table>\n", f);
801
802 if(i>10)
803 {
804 fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"5\">Enterprise Research and Planning (ERP)</th></tr>\n",f);
805 fputs("<tr><td>Analytic category</td>\n",f);
806 fputs("<td colspan=\"2\" align=\"center\">Active Classes</td><td colspan=\"2\" align=\"center\">Data transfers</td></tr>\n",f);
807
808 if_exists(iplog,iplogs,iplog->l>=total/4)
809 {
810 fprintf(f,"<tr><td>Top 25%% of traffic</td>\n");
811 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
812 }
813
814 if_exists(iplog,iplogs,iplog->i==10)
815 {
816 fprintf(f,"<tr><td>Top 10 downloaders</td>\n");
817 fprintf(f,"<th align=\"right\">10</th><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
818 }
819
820 if_exists(iplog,iplogs,iplog->l>=total/2)
821 {
822 fprintf(f,"<tr><td>Top 50%% of traffic</td>\n");
823 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><th align=\"right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
824 }
825
826 if_exists(iplog,iplogs,iplog->l>=4*total/5)
827 {
828 fprintf(f,"<tr><td>Top 80%% of traffic</td>\n");
829 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><th align=\"right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
830 }
831
832 if_exists (iplog,iplogs,iplog->i>=i/5)
833 {
834 fprintf(f,"<tr><td>Top 20%% downloaders</td>\n");
835 fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
836 }
837
838 if_exists(iplog,iplogs,iplog->i>=i/4)
839 {
840 fprintf(f,"<tr><td>Top 25%% downloaders</td>\n");
841 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
842 }
843
844 if_exists(iplog,iplogs,iplog->i>=i/2)
845 {
846 fprintf(f,"<tr><td>Top 50%% downloaders</td>\n");
847 fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
848 }
849
850 if_exists(iplog,iplogs,iplog->i>=4*i/5)
851 {
852 fprintf(f,"<tr><td>Top 80%% downloaders</td>\n");
853 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
854 }
855
856 fprintf(f,"<tr><td>All users, all traffic</td>\n");
857 fprintf(f,"<th align=\"right\">%d</th><th align=\"right\">100 %%</th><th align=\"right\">%ld G</th><th align=\"right\">100 %%</th></tr>\n",i-1,total);
858 fputs("</table>\n", f);
859 }
860
861 fprintf(f, stats_html_signature, version);
862 fclose(f);
863 puts(" done.");
864 }
865 }
866
867 /*-----------------------------------------------------------------*/
868 /* Are you looking for int main(int argc, char **argv) ? :-)) */
869 /*-----------------------------------------------------------------*/
870
871 program
872 {
873 int i=0;
874 FILE *f=NULL;
875 char *str, *ptr, *d;
876 char *substring;
877 int class_count=0,ip_count=0;
878 int parent=1;
879 int just_flush=FALSE;
880 int nodelay=FALSE;
881 int just_preview=FALSE; /* preview - generate just stats */
882 int just_logs=FALSE; /* just parse logs */
883 int run=FALSE;
884
885 char *chain_forward, *chain_postrouting;
886 char *althosts=NULL;
887
888 printf("\n\
889 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
890 Version %s - Copyright (C)2005-2008 Michael Polak (xChaos)\n\
891 iptables-restore & burst tunning & classify modification by Ludva\n\
892 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
893
894 /*----- Boring... we have to check command line options first: ----*/
895
896 arguments
897 {
898 argument("-c") { nextargument(config); }
899 argument("-h") { nextargument(althosts);}
900 argument("-d") { run=TRUE; dry_run=TRUE; }
901 argument("-f") { run=TRUE; just_flush=TRUE; }
902 argument("-9") { run=TRUE; just_flush=9; }
903 argument("-p") { run=TRUE; just_preview=TRUE; }
904 argument("-r") { run=TRUE; }
905 argument("-n") { run=TRUE; nodelay=TRUE; }
906 argument("-l") { just_logs=TRUE; }
907 argument("-m") { just_logs=TRUE; }
908 argument("-y") { just_logs=TRUE; }
909 argument("-?") { help(); exit(0); }
910 argument("--help") { help(); exit(0); }
911 argument("-v") { exit(0); }
912 argument("--version") { exit(0); }
913 }
914
915 if(dry_run)
916 {
917 puts("*** THIS IS JUST DRY RUN ! ***\n");
918 }
919
920 date(d); /* this is typical cll1.h macro - prints current date */
921
922 /*-----------------------------------------------------------------*/
923 printf("Parsing configuration file %s ...\n", config);
924 /*-----------------------------------------------------------------*/
925 get_config(config);
926
927 if(just_logs)
928 {
929 parse_ip_log(argc,argv);
930 exit(0);
931 }
932 else if(not run)
933 {
934 help();
935 exit(0);
936 }
937
938 if(althosts)
939 {
940 hosts=althosts;
941 }
942
943 if(just_flush<9)
944 {
945 /*-----------------------------------------------------------------*/
946 puts("Parsing iptables verbose output ...");
947 /*-----------------------------------------------------------------*/
948 get_traffic_statistics();
949 }
950
951 /*-----------------------------------------------------------------*/
952 printf("Parsing class defintion file %s ...\n", hosts);
953 /*-----------------------------------------------------------------*/
954 int groupidx = FIRSTGROUPID;
955 parse(hosts)
956 {
957 str=_;
958
959 if(*str<'0' || *str>'9')
960 continue;
961
962 //Does this IP share QoS class with some other ?
963 substring=strstr(str,"sharing-");
964 if(substring)
965 {
966 substring+=8; //"sharing-"
967 parse_ip(str);
968 ip_count++;
969 ip->sharing=substring;
970 ip->keyword=defaultkeyword; /* settings for default keyword */
971 while(*substring && *substring!='\n')
972 substring++;
973 *substring=0;
974 }
975 else
976 {
977 //Do we have to create new QoS class for this IP ?
978
979 if_exists(keyword,keywords,(substring=strstr(str,keyword->key)))
980 {
981 parse_ip(str);
982 ip_count++;
983 ip->keyword=keyword;
984 keyword->ip_count++;
985 ip->prio=keyword->default_prio;
986 substring+=strlen(keyword->key)+1;
987 ptr=substring;
988 while(*ptr && *ptr!='-')
989 {
990 ptr++;
991 }
992 if(*ptr=='-')
993 {
994 *ptr=0;
995 ip->max=ip->desired=atoi(ptr+1);
996 }
997 ip->min=atoi(substring);
998 if(ip->min<=0)
999 {
1000 printf(" %s: Illegal value of minimum bandwidth 0 kbps, using %d kbps\n",str,free_min);
1001 ip->min=free_min;
1002 }
1003 if(ip->max<=ip->min)
1004 {
1005 ip->fixedprio=1;
1006 ip->max=ip->min+ip->keyword->reserve_min;
1007 }
1008 else
1009 {
1010 ip->max-=ip->keyword->reserve_max;
1011 if(ip->max<ip->min)
1012 {
1013 ip->max=ip->min;
1014 }
1015 }
1016 ip->mark=FIRSTIPCLASS+1+class_count++;
1017
1018 if_exists(group,groups,group->min==ip->min)
1019 {
1020 group->count++;
1021 group->desired+=ip->min;
1022 ip->group = group->id;
1023 }
1024 else
1025 {
1026 create(group,Group);
1027 group->min=ip->min;
1028 group->id = groupidx++;
1029 ip->group = group->id;
1030
1031 if(group->min<8) group->min=8;
1032 /* Warning - this is maybe because of primitive tc namespace, can be fixed */
1033 /* it is because class IDs are derived from min. bandwidth. - xCh */
1034 //if(group->min>MAX_GUARANTED_KBPS) group->min=MAX_GUARANTED_KBPS;
1035
1036 group->count=1;
1037 group->desired=ip->min;
1038 insert(group,groups,desc_order_by,min);
1039 }
1040 }//endif keyword-
1041 }//endif sharing-
1042 }
1043 fail
1044 {
1045 perror(hosts);
1046 exit(-1);
1047 }
1048 done;
1049
1050 /*-----------------------------------------------------------------*/
1051 /* cll1.h - let's allocate brand new character buffer... */
1052 /*-----------------------------------------------------------------*/
1053 string(str,STRLEN);
1054
1055 /*-----------------------------------------------------------------*/
1056 puts("Resolving shared connections ...");
1057 /*-----------------------------------------------------------------*/
1058 for_selected(ip,ips,ip->sharing)
1059 {
1060 for_selected(sharedip,ips,eq(sharedip->name,ip->sharing))
1061 {
1062 sharedip->traffic+=ip->traffic;
1063 ip->traffic=0;
1064 ip->mark=sharedip->mark;
1065 break;
1066 }
1067 if(!sharedip)
1068 {
1069 printf("Unresolved shared connection: %s %s sharing-%s\n",ip->addr,ip->name,ip->sharing);
1070 }
1071 }
1072
1073 if(enable_credit && just_flush<9)
1074 {
1075 /*-----------------------------------------------------------------*/
1076 printf("Parsing credit file %s ...\n", credit);
1077 /*-----------------------------------------------------------------*/
1078 parse(credit)
1079 {
1080 ptr=parse_datafile_line(_);
1081 if(ptr)
1082 {
1083 if_exists(ip,ips,eq(ip->addr,_))
1084 {
1085 sscanf(ptr,"%Lu",&(ip->credit));
1086 }
1087 }
1088 }
1089 done;
1090 }
1091
1092 if(!just_preview)
1093 {
1094 /*-----------------------------------------------------------------*/
1095 puts("Initializing iptables and tc classes ...");
1096 /*-----------------------------------------------------------------*/
1097
1098 iptables_file=fopen(iptablesfile,"w");
1099 if (iptables_file == NULL)
1100 {
1101 puts("Cannot open iptablesfile!");
1102 exit(-1);
1103 }
1104
1105 log_file=fopen(cmdlog,"w");
1106 if (log_file == NULL)
1107 {
1108 puts("Cannot open logfile!");
1109 exit(-1);
1110 }
1111
1112 save_line(iptablespreamble);
1113 run_restore();
1114
1115 sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);
1116 safe_run(str);
1117
1118 sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);
1119 safe_run(str);
1120
1121 iptables_file=fopen(iptablesfile,"w");
1122 save_line(iptablespreamble);
1123
1124 if(qos_free_zone && *qos_free_zone!='0')
1125 {
1126 char *chain;
1127
1128 sprintf(str,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone, wan);
1129 save_line(str);
1130
1131 if(qos_proxy)
1132 {
1133 save_line(":post_noproxy - [0:0]");
1134 sprintf(str,"-A POSTROUTING -p ! tcp -o %s -j post_noproxy", lan);
1135 save_line(str);
1136 sprintf(str,"-A POSTROUTING -s ! %s -o %s -j post_noproxy", proxy_ip, lan);
1137 save_line(str);
1138 sprintf(str,"-A POSTROUTING -s %s -p tcp --sport ! %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
1139 save_line(str);
1140
1141 chain="post_noproxy";
1142 }
1143 else
1144 {
1145 chain="POSTROUTING";
1146 }
1147
1148 sprintf(str,"-A %s -s %s -o %s -j ACCEPT", chain, qos_free_zone, lan);
1149 save_line(str);
1150 }
1151
1152 if(ip_count>idxtable_treshold1 && !just_flush)
1153 {
1154 int idxcount=0, bitmask=32-idxtable_bitmask1; /* default net mask: 255.255.255.240 */
1155 char *subnet, *buf;
1156 /*-----------------------------------------------------------------*/
1157 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);
1158 /*-----------------------------------------------------------------*/
1159
1160 save_line(":post_common - [0:0]");
1161 save_line(":forw_common - [0:0]");
1162
1163 for_selected(ip,ips,ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))
1164 {
1165 buf=hash_id(ip->addr,bitmask);
1166 if_exists(idx,idxs,eq(idx->id,buf))
1167 {
1168 idx->children++;
1169 }
1170 else
1171 {
1172 create(idx,Index);
1173 idx->addr=ip->addr;
1174 idx->id=buf;
1175 idx->bitmask=bitmask;
1176 idx->parent=NULL;
1177 idx->children=0;
1178 idxcount++;
1179 push(idx,idxs);
1180 }
1181 }
1182
1183 /* brutal perfomance optimalization */
1184 while(idxcount>idxtable_treshold2 && bitmask>2*idxtable_bitmask2)
1185 {
1186 bitmask-=idxtable_bitmask2;
1187 idxcount=0;
1188
1189 for_selected(idx,idxs,idx->parent==NULL)
1190 {
1191 buf=hash_id(idx->addr,bitmask);
1192 if_exists(metaindex,idxs,eq(metaindex->id,buf))
1193 {
1194 metaindex->children++;
1195 }
1196 else
1197 {
1198 create(metaindex,Index);
1199 metaindex->addr=idx->addr;
1200 metaindex->id=buf;
1201 metaindex->bitmask=bitmask;
1202 metaindex->parent=NULL;
1203 metaindex->children=0;
1204 idxcount++;
1205 push(metaindex,idxs);
1206 }
1207 idx->parent=metaindex;
1208 }
1209 }
1210
1211 /* this should slightly optimize throughout ... */
1212 sort(idx,idxs,desc_order_by,children);
1213 sort(idx,idxs,order_by,bitmask);
1214
1215 i=0;
1216 for_each(idx,idxs)
1217 {
1218 subnet=subnet_id(idx->addr,idx->bitmask);
1219 printf("%d: %s/%d\n",++i,subnet,idx->bitmask);
1220
1221 sprintf(str,":post_%s - [0:0]", idx->id);
1222 save_line(str);
1223
1224 sprintf(str,":forw_%s - [0:0]", idx->id);
1225 save_line(str);
1226
1227 if(idx->parent)
1228 {
1229 string(buf,strlen(idx->parent->id)+6);
1230 sprintf(buf,"post_%s",idx->parent->id);
1231 }
1232 else
1233 {
1234 buf="POSTROUTING";
1235 }
1236
1237 sprintf(str,"-A %s -d %s/%d -o %s -j post_%s", buf, subnet, idx->bitmask, lan, idx->id);
1238 save_line(str);
1239
1240 sprintf(str,"-A %s -d %s/%d -o %s -j post_common", buf, subnet, idx->bitmask, lan);
1241 save_line(str);
1242
1243 if(idx->parent)
1244 {
1245 string(buf,strlen(idx->parent->id)+6);
1246 sprintf(buf,"forw_%s",idx->parent->id);
1247 }
1248 else
1249 {
1250 buf="FORWARD";
1251 }
1252
1253 sprintf(str,"-A %s -s %s/%d -o %s -j forw_%s", buf, subnet, idx->bitmask, wan, idx->id);
1254 save_line(str);
1255
1256 sprintf(str,"-A %s -s %s/%d -o %s -j forw_common", buf, subnet, idx->bitmask, wan);
1257 save_line(str);
1258 }
1259 printf("Total indexed iptables chains created: %d\n", i);
1260
1261 sprintf(str,"-A FORWARD -o %s -j forw_common", wan);
1262 save_line(str);
1263
1264 sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);
1265 save_line(str);
1266 }
1267
1268 }
1269
1270 if(just_flush)
1271 {
1272 fclose(iptables_file);
1273 if (log_file) fclose(log_file);
1274 puts("Just flushed iptables and tc classes - now exiting ...");
1275 exit(0);
1276 }
1277
1278 if(!just_preview)
1279 {
1280 if(!dry_run && !nodelay && qos_free_delay)
1281 {
1282 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);
1283 sleep(qos_free_delay);
1284 }
1285
1286 sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,lan,htb_r2q);
1287 safe_run(str);
1288
1289 sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1290 tc,lan,lan_medium,lan_medium,burst_main,highest_priority);
1291 safe_run(str);
1292
1293 sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1294 tc,lan,line,line,burst_main,highest_priority);
1295 safe_run(str);
1296
1297 sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,wan,htb_r2q);
1298 safe_run(str);
1299
1300 sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1301 tc,wan,wan_medium,wan_medium,burst_main,highest_priority);
1302 safe_run(str);
1303
1304 sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1305 tc,wan,up,up,burst_main,highest_priority);
1306 safe_run(str);
1307 }
1308
1309 /*-----------------------------------------------------------------*/
1310 puts("Locating heavy downloaders and generating root classes ...");
1311 /*-----------------------------------------------------------------*/
1312 sort(ip,ips,desc_order_by,traffic);
1313
1314 /*-----------------------------------------------------------------*/
1315 /* sub-scope - local variables */
1316 {
1317 long long int rate=line;
1318 long long int max=line;
1319 int group_count=0;
1320 FILE *credit_file=NULL;
1321
1322 if(!just_preview && !dry_run && enable_credit) credit_file=fopen(credit,"w");
1323
1324 for_each(group,groups)
1325 {
1326 if(!just_preview)
1327 {
1328 //download
1329 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
1330 tc, lan, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);
1331 safe_run(str);
1332
1333 //upload
1334 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
1335 tc, wan, parent, group->id, rate*up/line, max*up/line, burst_group, highest_priority+1, group->desired);
1336 safe_run(str);
1337 }
1338
1339 if(group_count++<max_nesting)
1340 {
1341 parent=group->id;
1342 }
1343
1344 rate-=digital_divide*group->min;
1345 if(rate<group->min)rate=group->min;
1346
1347 /*shaping of aggresive downloaders, with credit file support */
1348 if(use_credit)
1349 {
1350 int group_rate=group->min, priority_sequence=lowest_priority;
1351
1352 for_selected(ip, ips, ip->min==group->min && ip->max>ip->min)
1353 {
1354 if( ip->keyword->data_limit && !ip->fixedprio &&
1355 ip->traffic>ip->credit+
1356 (ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)) )
1357 {
1358 if(group_rate<ip->max) ip->max=group_rate;
1359 group_rate+=magic_treshold;
1360 ip->prio=lowest_priority;
1361 if(ip->prio<highest_priority+2) ip->prio=highest_priority+2;
1362 }
1363 else
1364 {
1365 if( ip->keyword->data_prio && !ip->fixedprio &&
1366 ip->traffic>ip->credit+
1367 (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20)) )
1368 {
1369 ip->prio=priority_sequence--;
1370 if(ip->prio<highest_priority+1) ip->prio=highest_priority+1;
1371 }
1372
1373 if(credit_file)
1374 {
1375 unsigned long long lcredit=0;
1376
1377 if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic)
1378 lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;
1379 fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);
1380 }
1381 }
1382 }
1383
1384 }
1385 }
1386 if(credit_file)fclose(credit_file);
1387 }
1388
1389 if(just_preview)
1390 {
1391 f=fopen(preview,"w");
1392 ptr=preview;
1393 }
1394 else if(!dry_run && !just_flush)
1395 {
1396 /*-----------------------------------------------------------------*/
1397 printf("Writing data transfer database ...\n");
1398 /*-----------------------------------------------------------------*/
1399 f=fopen("/var/run/prometheus.previous","w");
1400 if(f)
1401 {
1402 for_selected(ip,ips,ip->traffic || ip->direct || ip->proxy ||ip->upload)
1403 fprintf(f,"%s %Lu %Lu %Lu %Lu\n",ip->addr,ip->traffic,ip->direct,ip->proxy,ip->upload);
1404 fclose(f);
1405 }
1406
1407 f=fopen(html,"w");
1408 ptr=html;
1409 }
1410
1411 if(f)
1412 {
1413 int total=0;
1414 int count=1;
1415 i=0;
1416
1417 /*-----------------------------------------------------------------*/
1418 printf("Sorting data and generating statistics page %s ...\n",ptr);
1419 /*-----------------------------------------------------------------*/
1420
1421 fputs("<table border>\n<tr><th align=\"right\">#</th><th align=\"right\">group</th><th align=\"right\">IPs</th><th align=\"right\">requested</th>\n",f);
1422 fprintf(f,"<th colspan=\"%d\">data limits</th>\n",keywordcount);
1423 fputs("</tr>\n",f);
1424
1425 for_each(group,groups)
1426 {
1427 #ifdef DEBUG
1428 printf("%d k group: %d bandwidth requested: %d k\n",group->min,group->count,group->desired);
1429 #endif
1430 fprintf(f,"<tr><td align=\"right\">%d</td><td align=\"right\">%d k</td>",count,group->min);
1431 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d k</td>",group->count,group->desired);
1432
1433 for_each(keyword,keywords)
1434 {
1435 fprintf(f,"<td align=\"right\"><font color=\"#%s\">%d M</font></td>",keyword->html_color,group->min*keyword->data_limit);
1436 }
1437 i+=group->desired;
1438 total+=group->count;
1439 count++;
1440 }
1441 #ifdef DEBUG
1442 printf("Total groups: %d Total bandwidth requested: %d k\nAGGREGATION: 1/%d\n",count,i,i/line);
1443 #endif
1444 fprintf(f,"<tr><th colspan=\"2\" align=\"left\">Line %Ld k</td>",line);
1445 fprintf(f,"<th align=\"right\">%d</td><th align=\"right\">%d k</td>",total,i);
1446
1447 for_each(keyword,keywords)
1448 {
1449 fprintf(f,"<th align=\"right\">%d IPs</th>",keyword->ip_count);
1450 }
1451 fprintf(f,"</tr><tr><th colspan=\"4\">Aggregation 1/%d</th>\n",(int)(0.5+i/line));
1452 fprintf(f,"<th colspan=\"%d\">%d traffic classes</th></tr>\n",keywordcount,total);
1453
1454 fputs("</table>\n",f);
1455 }
1456 else if(!dry_run && !just_flush)
1457 perror(html);
1458
1459 i=1;
1460 if(f)
1461 {
1462 unsigned long long total=0, total_direct=0, total_proxy=0, total_upload=0, tmp_sum=0;
1463 int active_classes=0;
1464 int colspan;
1465 FILE *iplog;
1466 struct Sum {unsigned long long l; int i; list(Sum);} *sum,*sums=NULL;
1467
1468 if(qos_proxy)
1469 colspan=12;
1470 else
1471 colspan=11;
1472
1473 fprintf(f,"<p><table border>\n<tr><th colspan=\"%d\">%s",colspan,title);
1474 fprintf(f," (%s)</th></tr>\n", d);
1475 fputs("<tr><td align=\"right\">#</td><td>hostname</td>\
1476 <td align=\"right\">credit</td>\
1477 <td align=\"right\">limit</td>\
1478 <td align=\"right\">total</td>\
1479 <td align=\"right\">direct</td>\n",f);
1480 if(qos_proxy)
1481 fputs("<td align=\"right\">proxy</td>\n",f);
1482 fputs("<td align=\"right\">upload</td>\
1483 <td align=\"right\">minimum</td>\
1484 <td align=\"right\">desired</td>\
1485 <td align=\"right\">maximum</td>\
1486 <td>prio</td></tr>\n",f);
1487
1488 for_each(ip,ips)
1489 {
1490 char *f1="", *f2="";
1491 if(ip->max<ip->desired)
1492 {
1493 f1="<font color=\"red\">";
1494 f2="</font>";
1495 }
1496 else if(ip->prio>highest_priority+1)
1497 {
1498 f1="<font color=\"brown\">";
1499 f2="</font>";
1500 }
1501
1502 #ifdef DEBUG
1503 printf("%03d. %-22s %10Lu (%d/%d)\n",i ,ip->name, ip->traffic, ip->min, ip->max);
1504 #endif
1505 fprintf(f,"<tr><td align=\"right\"><a name=\"%s\"></a>%d</td><td><a href=\"%s%s.log\">%s</a></td><td align=\"right\">%Lu M</td>\n",
1506 ip->name, i, log_url, ip->name, ip->name, ip->credit);
1507 fprintf(f,"<td align=\"right\"><font color=\"#%s\">%Lu M</font></td>",ip->keyword->html_color,ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)));
1508 fprintf(f,"<td align=\"right\">%s%Lu M%s</td><td align=\"right\">%Lu M</td>\n", f1, ip->traffic, f2, ip->direct);
1509 if(qos_proxy)
1510 fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->proxy);
1511 fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->upload);
1512 fprintf(f,"<td align=\"right\">%d k</td><td align=\"right\">%d k</td><td align=\"right\">%s%d k%s</td><td>%s%d%s</td></tr>\n",ip->min,ip->desired,f1,ip->max,f2,f1,ip->prio,f2);
1513 total+=ip->traffic;
1514 total_direct+=ip->direct;
1515 total_proxy+=ip->proxy;
1516 total_upload+=ip->upload;
1517 if(ip->traffic>0)
1518 {
1519 active_classes++;
1520 tmp_sum+=ip->traffic;
1521 create(sum,Sum);
1522 sum->l=tmp_sum;
1523 sum->i=active_classes;
1524 insert(sum,sums,order_by,i);
1525 }
1526
1527 i++;
1528
1529 if(!just_preview)
1530 {
1531 sprintf(str,"%s/%s.log",log_dir,ip->name);
1532 iplog=fopen(str,"a");
1533 if(iplog)
1534 {
1535 fprintf(iplog,"%ld\t%s\t%Lu\t%Lu\t%Lu\t%Lu\t%d\t%d\t%d\t%s",
1536 time(NULL),ip->name,ip->traffic,ip->direct,ip->proxy,ip->upload,ip->min,ip->max,ip->desired,d); /* d = date*/
1537 fclose(iplog);
1538 }
1539 }
1540
1541 }
1542 fprintf(f,"<tr><th colspan=\"4 \"align=\"left\">SUMMARY:</td>");
1543 fprintf(f,"<th align=\"right\">%Lu M</th>\
1544 <th align=\"right\">%Lu M</th>\n", total, total_direct);
1545 if(qos_proxy)
1546 fprintf(f,"<th align=\"right\">%Lu M</th>\n", total_proxy);
1547 fprintf(f,"<th align=\"right\">%Lu M</th>", total_upload);
1548 fputs("<td colspan=\"4\"></td></th>\n</table>\n",f);
1549
1550 if(active_classes>10)
1551 {
1552 fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"5\">Enterprise Research and Planning (ERP)</th></tr>\n",f);
1553 fputs("<tr><td>Analytic category</td>\n",f);
1554 fputs("<td colspan=\"2\" align=\"center\">Active Classes</td><td colspan=\"2\" align=\"center\">Data transfers</td></tr>\n",f);
1555
1556 if_exists(sum,sums,sum->l>=total/4)
1557 {
1558 fprintf(f,"<tr><td>Top 25%% of traffic</td>\n");
1559 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1560 }
1561
1562 if_exists(sum,sums,sum->i==10)
1563 {
1564 fprintf(f,"<tr><td>Top 10 downloaders</td>\n");
1565 fprintf(f,"<th align=\"right\">10</th><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1566 }
1567
1568 if_exists(sum,sums,sum->l>=total/2)
1569 {
1570 fprintf(f,"<tr><td>Top 50%% of traffic</td>\n");
1571 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><th align=\"right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1572 }
1573
1574 if_exists(sum,sums,sum->l>=4*total/5)
1575 {
1576 fprintf(f,"<tr><td>Top 80%% of traffic</td>\n");
1577 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><th align=\"right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1578 }
1579
1580 if_exists (sum,sums,sum->i>=(active_classes+1)/5)
1581 {
1582 fprintf(f,"<tr><td>Top 20%% downloaders</td>\n");
1583 fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1584 }
1585
1586 if_exists(sum,sums,sum->i>=(active_classes+1)/4)
1587 {
1588 fprintf(f,"<tr><td>Top 25%% downloaders</td>\n");
1589 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1590 }
1591
1592 if_exists(sum,sums,sum->i>=(active_classes+1)/2)
1593 {
1594 fprintf(f,"<tr><td>Top 50%% downloaders</td>\n");
1595 fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1596 }
1597
1598 if_exists(sum,sums,sum->i>=4*(active_classes+1)/5)
1599 {
1600 fprintf(f,"<tr><td>Top 80%% downloaders</td>\n");
1601 fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1602 }
1603
1604 fprintf(f,"<tr><td>All users, all traffic</td>\n");
1605 fprintf(f,"<th align=\"right\">%d</th><th align=\"right\">100 %%</th><th align=\"right\">%Lu M</th><th align=\"right\">100 %%</th></tr>\n",active_classes,total);
1606 fputs("</table>\n", f);
1607 }
1608 fprintf(f, stats_html_signature, version);
1609 fclose(f);
1610 }
1611
1612 if(just_preview)
1613 {
1614 puts("Statistics preview generated (-p switch) - now exiting ...");
1615 exit(0);
1616 }
1617
1618 /*-----------------------------------------------------------------*/
1619 puts("Generating iptables and tc classes ...");
1620 /*-----------------------------------------------------------------*/
1621
1622 i=0;
1623 printf("%-22s %-15s mark\n","name","ip");
1624
1625 for_selected(ip,ips,ip->mark>0)
1626 {
1627
1628 if(idxs)
1629 {
1630 char *buf;
1631 duplicate(ip->addr,buf);
1632 buf=hash_id(ip->addr,32-idxtable_bitmask1);
1633
1634 string(chain_forward,6+strlen(buf));
1635 strcpy(chain_forward,"forw_");
1636 strcat(chain_forward,buf);
1637
1638 string(chain_postrouting,6+strlen(buf));
1639 strcpy(chain_postrouting,"post_");
1640 strcat(chain_postrouting,buf);
1641
1642 free(buf);
1643 }
1644 else
1645 {
1646 chain_forward="FORWARD";
1647 chain_postrouting="POSTROUTING";
1648 }
1649
1650 printf("%-22s %-16s %04d ", ip->name, ip->addr, ip->mark);
1651
1652 /* -------------------------------------------------------- mark download */
1653
1654 sprintf(str,"-A %s -d %s/32 -o %s -j %s%d",chain_postrouting,ip->addr,lan,mark_iptables,ip->mark);
1655 /*sprintf(str,"-A %s -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,ip->addr,lan,ip->mark);*/
1656 /* -m limit --limit 1/s */
1657 save_line(str);
1658
1659 if(qos_proxy)
1660 {
1661 sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,mark_iptables,ip->mark);
1662 /*sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,ip->mark);*/
1663 save_line(str);
1664 }
1665
1666 sprintf(str,"-A %s -d %s/32 -o %s -j ACCEPT",chain_postrouting,ip->addr,lan);
1667 save_line(str);
1668
1669 /* -------------------------------------------------------- mark upload */
1670 sprintf(str,"-A %s -s %s/32 -o %s -j %s%d",chain_forward,ip->addr,wan,mark_iptables,ip->mark);
1671 /* sprintf(str,"-A %s -s %s/32 -o %s -j MARK --set-mark %d",chain_forward,ip->addr,wan,ip->mark);*/
1672 save_line(str);
1673
1674 sprintf(str,"-A %s -s %s/32 -o %s -j ACCEPT",chain_forward,ip->addr,wan);
1675 save_line(str);
1676
1677 if(ip->min)
1678 {
1679 /* -------------------------------------------------------- download class */
1680 printf("(down: %dk-%dk ", ip->min, ip->max);
1681
1682 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);
1683 safe_run(str);
1684
1685 if (strcmpi(ip->keyword->leaf_discipline, "none"))
1686 {
1687 sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s", tc, lan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1688 safe_run(str);
1689 }
1690 if (filter_type == 1)
1691 {
1692 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc, lan, ip->mark, ip->mark);
1693 safe_run(str);
1694 }
1695
1696 /* -------------------------------------------------------- upload class */
1697 printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1698 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));
1699
1700 sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1701 tc, wan, ip->group, ip->mark,
1702 (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1703 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);
1704 safe_run(str);
1705
1706 if (strcmpi(ip->keyword->leaf_discipline, "none"))
1707 {
1708 sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s",tc, wan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1709 safe_run(str);
1710 }
1711 if (filter_type == 1)
1712 {
1713 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",tc, wan, ip->mark, ip->mark);
1714 safe_run(str);
1715 }
1716 }
1717 else
1718 printf("(sharing %s)\n", ip->sharing);
1719 i++;
1720 }
1721
1722 if(idxs)
1723 {
1724 chain_forward = "forw_common";
1725 chain_postrouting = "post_common";
1726 }
1727 else
1728 {
1729 chain_forward = "FORWARD";
1730 chain_postrouting = "POSTROUTING";
1731 }
1732 /* -------------------------------- classify or reject free download */
1733 {
1734 char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */
1735 if(free_min) final_chain = "ACCEPT";
1736 if(qos_proxy)
1737 {
1738 if(free_min)
1739 {
1740 sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables,3);
1741 save_line(str);
1742 }
1743 sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s",chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1744 save_line(str);
1745 }
1746 if(free_min)
1747 {
1748 sprintf(str,"-A %s -o %s -j %s%d",chain_postrouting,lan,mark_iptables,3);
1749 save_line(str);
1750 }
1751 sprintf(str,"-A %s -o %s -j %s",chain_postrouting,lan,final_chain);
1752 save_line(str);
1753 /* ------------------------------- classify or reject free upload */
1754 if(free_min)
1755 {
1756 sprintf(str,"-A %s -o %s -j %s%d",chain_forward,wan,mark_iptables,3);
1757 save_line(str);
1758 }
1759 sprintf(str,"-A %s -o %s -j %s",chain_forward,wan,final_chain);
1760 save_line(str);
1761 }
1762
1763 if(free_min) /* allocate free bandwith if it is not zero... */
1764 {
1765 /*-----------------------------------------------------------------*/
1766 puts("Generating free bandwith classes ...");
1767 /*-----------------------------------------------------------------*/
1768 sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1769 tc,lan,parent,free_min,free_max,burst,lowest_priority);
1770 safe_run(str);
1771 sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1772 tc,wan,parent,free_min,free_max,burst,lowest_priority);
1773 safe_run(str);
1774 /* tc SFQ */
1775 if (strcmpi(qos_leaf, "none"))
1776 {
1777 sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,lan,qos_leaf);
1778 safe_run(str);
1779
1780 sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,wan,qos_leaf);
1781 safe_run(str);
1782 }
1783 /* tc handle 1 fw flowid */
1784 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,lan);
1785 safe_run(str);
1786
1787 sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,wan);
1788 safe_run(str);
1789 }
1790 printf("Total IP count: %d\n", i);
1791 run_restore();
1792 if (log_file) fclose(log_file);
1793 return 0;
1794 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1795 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
1796 }
This page took 1.52847 seconds and 5 git commands to generate.