-
-/* ============================================================= */
-/* === Prometheus QoS - you can "steal fire" from your ISP === */
-/* === "fair-per-IP" quality of service (QoS) utility === */
-/* === requires Linux 2.4.x or 2.6.x with HTB support === */
-/* === Copyright(C) 2005-2007 Michael Polak (xChaos) === */
-/* === Credits: CZFree.Net, Martin Devera, Netdave, Aquarius === */
-/* ============================================================= */
-
-/* Modified: xChaos, 20070502
-
- Prometheus QoS is free software; you can redistribute it and/or
- modify it under the terms of the GNU General Public License as
- published by the Free Software Foundation; either version 2.1 of
- the License, or (at your option) any later version.
-
- Prometheus QoS is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
- General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with the Linux kernel source code; if not, write to
- Michael Polak, Svojsikova 7, 169 00 Praha 6 Czech Republic */
-
-#define STRLEN 256
-#define MAX_GUARANTED_KBPS 2048
-#undef DEBUG
-
-#include "cll1.h"
-
-const char *version="0.7.1";
-
-/* ======= Help screen is hopefuly self-documenting part of code :-) ======= */
-
-void help(void)
-{
- puts("Command line switches:\n\
-\n\
--?, --help this help screen\n\
--v, --version show version number of this utility and exit\n\
--c filename force alternative /etc/prometheus.conf filename\n\
--h filename force alternative /etc/hosts filename (overrides hosts keyword)\n\
--f just flush iptables and tc classes and exit (stop shaping)\n\
--9 emergency iptables flush (do not read data transfer statistics)\n\
--p just generate preview of data transfer statistics and exit\n\
--n no delay (overrides qos-free-delay keyword)\n\
--d dry run (preview tc and iptables commands on stdout)\n\
-");
-}
-
-/* === Configuraration file values defaults - stored in global variables ==== */
-
-int dry_run=0; /* preview - use puts() instead of system() */
-char *config="/etc/prometheus.conf"; /* main configuration file */
-char *hosts="/etc/hosts"; /* line bandwidth definition file */
-char *tc="/sbin/tc"; /* requires tc with HTB support */
-char *iptables="/sbin/iptables"; /* requires iptables utility */
-char *html="/var/www/traffic.html"; /* hall of fame filename */
-char *preview="/var/www/preview.html"; /* hall of fame preview */
-char *cmdlog="/var/log/prometheus"; /* command log filename */
-char *credit="/var/run/prometheus.credit"; /* credit log file */
-int enable_credit=1; /* enable credit file */
-int use_credit=0; /* use credit file (if enabled)*/
-char *log_dir="/var/www/html/logs/"; /* log directory pathname */
-char *log_url="logs/"; /* log directory URL prefix */
-char *title="Hall of Fame - Greatest Suckers"; /* hall of fame title */
-int hall_of_fame=1; /* enable hall of fame */
-char *lan="eth0"; /* LAN interface */
-char *lan_medium="100Mbit"; /* 10Mbit/100Mbit ethernet */
-char *wan="eth1"; /* WAN/ISP interface */
-char *wan_medium="100Mbit"; /* 10Mbit/100Mbit ethernet */
-char *qos_leaf="sfq perturb 5"; /* leaf discipline */
-char *qos_free_zone=NULL; /* QoS free zone */
-int qos_proxy=1; /* include proxy port to QoS */
-int include_upload=1; /* upload+download=total traffic */
-char *proxy_ip="192.168.1.1/32"; /* our IP with proxy port */
-int proxy_port=3128; /* proxy port number */
-int line=1024; /* WAN/ISP download in kbps */
-int up=1024; /* WAN/ISP upload in kbps */
-int free_min=32; /* minimum guaranted bandwidth for all undefined hosts */
-int free_max=64; /* maximum allowed bandwidth for all undefined hosts */
-int qos_free_delay=0; /* seconds to sleep before applying new QoS rules */
-int digital_divide=2; /* controls digital divide weirdness ratio, 1...3 */
-int max_nesting=3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */
-int burst=8; /* HTB burst (in kbits) */
-int magic_priorities=8; /* number of priority levels (soft shaping) */
-int magic_treshold=8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
-int keywordcount=0;
-
-/* not yet implemented:
- int fixed_packets=0; maximum number of pps per IP address (not class!)
- int packet_limit=5; maximum number of pps to htn CEIL, not rate !!!
-*/
-FILE *log_file=NULL;
-
-char *kwd="via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
-
-const idxtable_treshold1=24; /* this is no longer configurable */
-const idxtable_treshold2=12; /* this is no longer configurable */
-const idxtable_bitmask1=3; /* this is no longer configurable */
-const idxtable_bitmask2=3; /* this is no longer configurable */
-
-
-/* not yet implemented:
--s start shaping! (keep data transfer statistics - but apply shaping)\n\
--r just reload configuration (...and keep data transfer statistics)\n\
-*/
-
-/* ==== This is C<<1 stuff - learn C<<1 first! http://cll1.arachne.cz ==== */
-
-struct IP
-{
- char *addr;
- char *name;
- char *sharing;
- int min;
- int desired;
- int max;
- int mark;
- int prio;
- int fixedprio;
- unsigned long long direct;
- unsigned long long proxy;
- unsigned long long upload;
- unsigned long long traffic;
- unsigned long long credit;
- unsigned long pktsup;
- unsigned long pktsdown;
- struct Keyword *keyword;
- list(IP);
-} *ips=NULL, *ip, *sharedip;
-
-struct Group
-{
- int min;
- int count;
- int desired;
- list(Group);
-} *groups=NULL, *group;
-
-struct Index
-{
- char *addr;
- char *id;
- struct Index *parent;
- int bitmask;
- int children;
- list(Index);
-} *idxs=NULL, *idx, *metaindex;
-
-struct Keyword
-{
- char *key;
-
- int asymetry_ratio; /* ratio for ADSL-like upload */
- int asymetry_fixed; /* fixed treshold for ADSL-like upload */
- int data_limit; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
- int prio_limit; /* soft shaping (qos): reduce HTB prio if max*prio_limit MB exceeded */
- long fixed_limit; /* fixed data limit for setting lower HTB ceil */
- long fixed_prio; /* fixed data lmit for setting lower HTB prio */
- int reserve_min; /* bonus for nominal HTB rate bandwidth (in kbps) */
- int reserve_max; /* malus for nominal HTB ceil (in kbps) */
-// int divide_max; /* relative malus: new_ceil=rate+(old_ceil-rate)/divide_max */
-// int htb_ceil_bonus_divide; /* relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide */
- int default_prio; /* default HTB priority for this keyword */
- char *html_color;
- int ip_count;
-
- list(Keyword);
-} *keyword,*defaultkeyword=NULL,*keywords=NULL;
-
-/* Damned, this must be object oriented! This looks almost like constructor ;-) */
-
-void TheIP(void)
-{
- create(ip,IP);
- ip->name="";
- ip->addr="";
- ip->sharing=NULL;
- ip->prio=1;
- ip->fixedprio=0;
- ip->mark=ip->min=ip->max=ip->desired=ip->credit=0;
- ip->upload=ip->proxy=ip->direct=ip->traffic=0;
- ip->pktsup=ip->pktsdown=0;
- ip->keyword=keywords;
- push(ip,ips);
-}
-
-/* ====== Iptables indexes are used to reduce complexity to log8(N) ===== */
-
-char *very_ugly_ipv4_code(char *inip,int bitmask,int format_as_chainname)
-{
- /* warning: this function was debugged only for bitmask values 20,24,28 !!!*/
- int dot=0,n;
- char *ip,*outip,*outptr,*fmt;
-
- duplicate(inip,ip);
- /* debug printf("(%s,%d) -> ",ip,bitmask); */
-
- if(ip && *ip && bitmask>=0 && bitmask<=32)
- string(outip,strlen(ip)+10); /*fuck unicode? assertion: 10>strlen("_%d_%d") */
- else
- /* should never exit here */
- return "undefined";
- outptr=outip;
- while(ip && *ip)
- {
- if(*ip=='.')
- {
- if(dot<(bitmask/8-1))
- {
- if(format_as_chainname)
- *outptr='_';
- else
- *outptr='.';
- outptr++;
- dot++;
- }
- else
- {
- char *cutdot=strchr(ip+1,'.'); /*for bitmask<24*/
- if(cutdot)*cutdot='\0';
- if(format_as_chainname)
- fmt="_%d_%d";
- else
- fmt=".%d";
- if(bitmask%8)
- n=atoi(ip+1)-atoi(ip+1)%(1<<(8-bitmask%8));
- else
- n=0;
-
- /*debug printf("%d/%d => [_%d_%d]\n",atoi(ip+1),bitmask,n,bitmask); */
- sprintf(outptr,fmt,n,bitmask);
- if(!format_as_chainname) while(bitmask<24)
- {
- strcat(outip,".0");
- bitmask+=8;
- }
- /* debug printf("[%s]\n",outip); */
- return outip;
- }
- }
- else
- {
- *outptr=*ip;
- outptr++;
- }
- ip++;
- }
- /*should never exit here*/
- *outptr='\0';
- return outip;
-}
-
-char *hash_id(char *ip,int bitmask)
-{ return very_ugly_ipv4_code(ip,bitmask,1); }
-
-char *subnet_id(char *ip,int bitmask)
-{ return very_ugly_ipv4_code(ip,bitmask,0); }
-
-/* ================= Let's parse configuration file here =================== */
-
-void reject_config_and_exit(char *filename)
-{
- printf("Configuration file %s rejected - abnormal exit.",filename);
- exit(-1);
-}
-
-void get_config(char *config_filename)
-{
- printf("Configured keywords: ");
- parse(config_filename)
- {
- option("keyword",kwd);
- if(kwd)
- {
- printf("%s ",kwd);
-
- create(keyword,Keyword);
- keyword->key=kwd;
- keyword->asymetry_ratio=1; /* ratio for ADSL-like upload */
- keyword->asymetry_fixed=0; /* fixed treshold for ADSL-like upload */
- keyword->data_limit=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
- keyword->prio_limit=4; /* soft shaping (qos): reduce HTB prio if max*prio_limit MB exceeded */
- keyword->fixed_limit=0; /* fixed data limit for setting lower HTB ceil */
- keyword->fixed_prio=0; /* fixed data limit for setting lower HTB prio */
- keyword->reserve_min=8; /* bonus for nominal HTB rate bandwidth (in kbps) */
- keyword->reserve_max=0; /* malus for nominal HTB ceil (in kbps) */
-/* obsolete:
- keyword->divide_max=0; relative malus: new_ceil=rate+(old_ceil-rate)/divide_max
- keyword->htb_ceil_bonus_divide=0; relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide
-*/
- keyword->default_prio=1;
- keyword->html_color="000000";
- keyword->ip_count=0;
-
- push(keyword,keywords);
- if(!defaultkeyword) defaultkeyword=keyword;
- keywordcount++;
-
- kwd=NULL;
- }
- else every(keyword,keywords)
- {
- int l=strlen(keyword->key);
-
-
- if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)
- {
- char *tmptr=_; /* <---- l+1 ----> */
- _+=l+1; /* via-prometheus-asymetry-ratio, etc. */
- ioption("asymetry-ratio",keyword->asymetry_ratio);
- ioption("asymetry-treshold",keyword->asymetry_fixed);
- ioption("magic-relative-limit",keyword->data_limit);
- ioption("magic-relative-prio",keyword->prio_limit);
- loption("magic-fixed-limit",keyword->fixed_limit);
- loption("magic-fixed-prio",keyword->fixed_prio);
- ioption("htb-default-prio",keyword->default_prio);
- ioption("htb-rate-bonus",keyword->reserve_min);
- ioption("htb-ceil-malus",keyword->reserve_max);
-/* obsolete:
- ioption("htb-ceil-divide",keyword->divide_max);
- ioption("htb-ceil-bonus-divide",keyword->htb_ceil_bonus_divide);
-*/
- option("html-color",keyword->html_color);
- _=tmptr;
-
- if(keyword->data_limit || keyword->fixed_limit ||
- keyword->prio_limit || keyword->fixed_prio)
- use_credit=1;
-
-
- }
- }
-
- option("tc",tc);
- option("iptables",iptables);
- option("hosts",hosts);
- option("lan-interface",lan);
- option("wan-interface",wan);
- option("lan-medium",lan_medium);
- option("wan-medium",wan_medium);
- ioption("wan-download",line);
- ioption("wan-upload",up);
- ioption("hall-of-fame-enable",hall_of_fame);
- option("hall-of-fame-title",title);
- option("hall-of-fame-filename",html);
- option("hall-of-fame-preview",preview);
- option("log-filename",cmdlog);
- option("credit-filename",credit);
- ioption("credit-enable",enable_credit);
- option("log-traffic-directory",log_dir);
- option("log-traffic-url-path",log_url);
- option("qos-free-zone",qos_free_zone);
- ioption("qos-free-delay",qos_free_delay);
- ioption("qos-proxy-enable",qos_proxy);
- option("qos-proxy-ip",proxy_ip);
- option("htb-leaf-discipline",qos_leaf);
- ioption("qos-proxy-port",proxy_port);
- ioption("free-rate",free_min);
- ioption("free-ceil",free_max);
- ioption("htb-burst",burst);
- ioption("htb-nesting-limit",max_nesting);
- ioption("magic-include-upload",include_upload);
- ioption("magic-priorities",magic_priorities);
- ioption("magic-treshold",magic_treshold);
-/* not yet implemented:
- ioption("magic-fixed-packets",fixed_packets);
- ioption("magic-relative-packets",packet_limit);
-*/
- }
- fail
- {
- perror(config_filename);
- puts("Warning - using built-in defaults instead ...");
- }
- done;
- printf("\n");
-
- /* are supplied values meaningful ?*/
- if(line<=0 || up<=0)
- {
- puts("Illegal value of wan bandwidth: 0 kbps.");
- reject_config_and_exit(config_filename);
- }
-}
-
-/* ===================== traffic analyser - uses iptables ================ */
-
-void get_traffic_statistics(void)
-{
- char *str,*cmd;
- int downloadflag=0;
-
- textfile(Pipe,str) *line,*lines=NULL;
- string(str,STRLEN);
- string(cmd,STRLEN);
-
- sprintf(cmd,"%s -L -v -x -n -t mangle",iptables);
- shell(cmd);
- input(str,STRLEN)
- {
- create(line,Pipe);
- line->str=str;
- string(str,STRLEN);
- append(line,lines);
- }
-
- every(line,lines)
- {
- int col, accept=0,proxyflag=0,valid=1,setchainname=0,commonflag=0;
- unsigned long long traffic=0;
- unsigned long pkts=0;
- char *ipaddr=NULL,*ptr;
-
- /* debug puts(line->str); */
- valid_columns(ptr,line->str,' ',col)
- if(valid) switch(col)
- {
- case 1: if(eq(ptr,"Chain"))
- setchainname=1;
- else if(eq(ptr,"pkts"))
- valid=0;
- else
- sscanf(ptr,"%lu",&pkts);
- break;
- case 2: if(setchainname)
- {
- if(!strncmp(ptr,"post_",5) || eq(ptr,"POSTROUTING"))
- downloadflag=1;
- else
- if(!strncmp(ptr,"forw_",5) || eq(ptr,"FORWARD"))
- downloadflag=0;
-
- if(eq(ptr,"post_common") || eq(ptr,"forw_common"))
- commonflag=1;
- }
- else
- sscanf(ptr,"%Lu",&traffic); traffic+=(1<<19); traffic>>=20;
- break;
- case 3: if(strncmp(ptr,"post_",5) && strncmp(ptr,"forw_",5) || commonflag)
- accept=eq(ptr,"MARK");
- break;
- case 8: if(downloadflag)
- {
- if(strstr(proxy_ip,ptr))proxyflag=1;
- }
- else
- ipaddr=ptr;
- break;
- case 9: if(downloadflag)ipaddr=ptr;break;
- }
-
- if(accept && traffic>0 && ipaddr)
- {
- if(proxyflag)printf("(proxy) ");
- else if(!downloadflag) printf("(upload) ");
- printf("IP %s: %Lu M (%ld pkts)\n", ipaddr, traffic, pkts);
- find(ip,ips,eq(ip->addr,ipaddr));
- else
- {
- TheIP();
- ip->addr=ipaddr;
- if(eq(ip->addr,"0.0.0.0/0"))
- {
- ip->name="(unregistered)";
- ip->min=free_min;
- ip->max=ip->desired=free_max;
- }
- }
-
- if(downloadflag)
- {
- if(proxyflag)
- ip->proxy=traffic;
- else
- ip->traffic+=traffic;
- ip->direct=ip->traffic-ip->upload-ip->proxy;
- ip->pktsdown=pkts;
- }
- else
- {
- ip->upload=traffic;
- ip->pktsup=pkts;
- if(include_upload)
- ip->traffic+=traffic;
- else
- if(traffic>ip->traffic)
- ip->traffic=traffic;
- }
- }
- }
-
-
- free(cmd);
-}
-
-/* ========== This function executes, logs OR ALSO prints command ========== */
-
-void safe_run(char *cmd)
-{
- if(dry_run) printf("\n=>%s\n",cmd); else system(cmd);
- if(log_file) fprintf(log_file,"%s\n",cmd);
-}
-
-/* == This function strips extra characters after IP address and stores it = */
-
-void parse_ip(char *str)
-{
- char *ptr=str,*ipaddr=NULL,*ipname=NULL;;
-
- while(*ptr && *ptr!=' ' && *ptr!=9)
- ptr++;
-
- *ptr=0;
- ipaddr=str;
- ptr++;
- while(*ptr && (*ptr==' ' || *ptr==9))
- ptr++;
- ipname=ptr;
- while(*ptr && *ptr!=' ' && *ptr!=9)
- ptr++;
- *ptr=0;
-
- find(ip,ips,eq(ip->addr,ipaddr)); else TheIP();
- ip->addr=ipaddr;
- ip->name=ipname;
-}
-
-char *parse_datafile_line(char *str)
-{
- char *ptr=strchr(str,' ');
-
- if(ptr)
- {
- *ptr=0;
- ptr++;
- return ptr;
- }
- else
- return NULL;
-}
-
-/*-----------------------------------------------------------------*/
-/* Are you looking for int main (int argc, char **argv) ? :-)) */
-/*-----------------------------------------------------------------*/
-
-program
-{
- int i=0;
- FILE *f=NULL;
- char *str, *ptr, *d;
- char *substring;
- int class_count=0,ip_count=0;
- int parent=1;
- int just_flush=0;
- int nodelay=0;
- int just_preview=0; /* preview - generate just stats */
- char *chain_forward, *chain_postrouting;
- char *althosts=NULL;
-
- printf("\n\
-Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
-Version %s - Copyright (C)2005-2007 Michael Polak (xChaos)\n\
-Credits: CZFree.Net, Martin Devera, Netdave, Aquarius\n\n",version);
-
- /*----- Boring... we have to check command line options first: ----*/
-
- arguments
- {
- argument("-c") { nextargument(config); }
- argument("-h") { nextargument(althosts);}
- argument("-d") { dry_run=1; }
- argument("-f") { just_flush=1; }
- argument("-9") { just_flush=9; }
- argument("-p") { just_preview=1; }
- argument("-n") { nodelay=1; }
- argument("-?") { help(); exit(0); }
- argument("--help") { help(); exit(0); }
- argument("-v") { exit(0); }
- argument("--version") { exit(0); }
- }
-
- if(dry_run)
- puts("*** THIS IS JUST DRY RUN ! ***\n");
-
- date(d); /* this is typical cll1.h macro */
-
- /*-----------------------------------------------------------------*/
- printf("Parsing configuration file %s ...\n", config);
- /*-----------------------------------------------------------------*/
- get_config(config);
-
- if(althosts) hosts=althosts;
-
- if(just_flush<9)
- {
- /*-----------------------------------------------------------------*/
- puts("Parsing iptables verbose output ...");
- /*-----------------------------------------------------------------*/
- get_traffic_statistics();
- }
-
- /*-----------------------------------------------------------------*/
- printf("Parsing class defintion file %s ...\n", hosts);
- /*-----------------------------------------------------------------*/
- parse(hosts)
- {
- str=_;
-
- if(*str<'0' || *str>'9')
- continue;
-
- //Does this IP share QoS class with some other ?
- substring=strstr(str,"sharing-");
- if(substring)
- {
- substring+=8; //"sharing-"
- parse_ip(str);
- ip_count++;
- ip->sharing=substring;
- ip->keyword=defaultkeyword; /* settings for default keyword */
- while(*substring && *substring!='\n')
- substring++;
- *substring=0;
- }
- else
- {
- //Do we have to create new QoS class for this IP ?
-
- find(keyword,keywords,(substring=strstr(str,keyword->key)))
- {
- parse_ip(str);
- ip_count++;
- ip->keyword=keyword;
- keyword->ip_count++;
- ip->prio=keyword->default_prio;
- substring+=strlen(keyword->key)+1;
- ptr=substring;
- while(*ptr && *ptr!='-')
- ptr++;
- if(*ptr=='-')
- {
- *ptr=0;
- ip->max=ip->desired=atoi(ptr+1);
- }
- ip->min=atoi(substring);
- if(ip->min<=0)
- {
- puts("Illegal value of minimum bandwidth: 0 kbps.");
- reject_config_and_exit(hosts);
- }
- if(ip->max<=ip->min)
- {
- ip->fixedprio=1;
- ip->max=ip->min+ip->keyword->reserve_min;
- }
- else
- {
- ip->max-=ip->keyword->reserve_max;
-
-/*
- if(ip->keyword->divide_max>1)
- ip->max=ip->min+(ip->max-ip->min)/ip->keyword->divide_max;
- if(ip->keyword->htb_ceil_bonus_divide>0)
- ip->max+=ip->max/ip->keyword->htb_ceil_bonus_divide;
-*/
- if(ip->max<ip->min)
- ip->max=ip->min;
- }
- ip->mark=MAX_GUARANTED_KBPS+1+class_count++;
-
- find(group,groups,group->min==ip->min)
- {
- group->count++;
- group->desired+=ip->min;
- }
- else
- {
- create(group,Group);
- group->min=ip->min;
-
- if(group->min<8) group->min=8;
- /* Warning - this is maybe because of primitive tc namespace, can be fixed */
- /* it is because class IDs are derived from min. bandwidth. - xCh */
- if(group->min>MAX_GUARANTED_KBPS) group->min=MAX_GUARANTED_KBPS;
-
- group->count=1;
- group->desired=ip->min;
- insert(group,groups,desc_order_by,min);
- }
- }//endif keyword-
- }//endif sharing-
- }
- fail
- {
- perror(hosts);
- exit(-1);
- }
- done;
-
- /*-----------------------------------------------------------------*/
- /* cll1.h - let's allocate brand new character buffer... */
- /*-----------------------------------------------------------------*/
- string(str,STRLEN);
-
- /*-----------------------------------------------------------------*/
- puts("Resolving shared connections ...");
- /*-----------------------------------------------------------------*/
- search(ip,ips,ip->sharing)
- {
- search(sharedip,ips,eq(sharedip->name,ip->sharing))
- {
- sharedip->traffic+=ip->traffic;
- ip->traffic=0;
- ip->mark=sharedip->mark;
- break;
- }
- if(!sharedip)
- printf("Unresolved shared connection: %s %s sharing-%s\n",ip->addr,ip->name,ip->sharing);
- }
-
- if(enable_credit && just_flush<9)
- {
- /*-----------------------------------------------------------------*/
- printf("Parsing credit file %s ...\n", credit);
- /*-----------------------------------------------------------------*/
- parse(credit)
- {
- ptr=parse_datafile_line(_);
- if(ptr)
- {
- find(ip,ips,eq(ip->addr,_))
- sscanf(ptr,"%Lu",&(ip->credit));
- }
- }
- done;
- }
-
- if(!just_preview)
- {
- /*-----------------------------------------------------------------*/
- puts("Initializing iptables and tc classes ...");
- /*-----------------------------------------------------------------*/
-
- log_file=fopen(cmdlog,"w");
-
- sprintf(str,"%s -t mangle -F INPUT",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -F OUTPUT",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -F PREROUTING",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -F POSTROUTING",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -F FORWARD",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -Z INPUT",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -Z OUTPUT",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -Z PREROUTING",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -Z POSTROUTING",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -Z FORWARD",iptables);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -X",iptables);
- safe_run(str);
-
- sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);
- safe_run(str);
-
- sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);
- safe_run(str);
-
- if(qos_free_zone && *qos_free_zone!='0')
- {
- char *chain;
-
- sprintf(str,"%s -t mangle -A FORWARD -d %s -o %s -j ACCEPT",iptables, qos_free_zone, wan);
- safe_run(str);
-
- if(qos_proxy)
- {
- sprintf(str,"%s -t mangle -N post_noproxy 2>/dev/null",iptables);
- safe_run(str);
- sprintf(str,"%s -t mangle -F post_noproxy",iptables);
- safe_run(str);
- sprintf(str,"%s -t mangle -A POSTROUTING -p ! tcp -o %s -j post_noproxy",iptables, lan);
- safe_run(str);
- sprintf(str,"%s -t mangle -A POSTROUTING -s ! %s -o %s -j post_noproxy",iptables, proxy_ip, lan);
- safe_run(str);
- sprintf(str,"%s -t mangle -A POSTROUTING -s %s -p tcp --sport ! %d -o %s -j post_noproxy",iptables, proxy_ip, proxy_port, lan);
- safe_run(str);
-
- chain="post_noproxy";
- }
- else
- chain="POSTROUTING";
-
- sprintf(str,"%s -t mangle -A %s -s %s -o %s -j ACCEPT",iptables, chain, qos_free_zone, lan);
- safe_run(str);
- }
-
- if(ip_count>idxtable_treshold1 && !just_flush)
- {
- int idxcount=0, bitmask=32-idxtable_bitmask1; /* default net mask: 255.255.255.240 */
- char *subnet, *ptr, *buf;
- /*-----------------------------------------------------------------*/
- printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);
- /*-----------------------------------------------------------------*/
-
- sprintf(str,"%s -t mangle -N post_common 2>/dev/null",iptables);
- safe_run(str);
- sprintf(str,"%s -t mangle -F post_common",iptables);
- safe_run(str);
- sprintf(str,"%s -t mangle -N forw_common 2>/dev/null",iptables);
- safe_run(str);
- sprintf(str,"%s -t mangle -F forw_common",iptables);
- safe_run(str);
-
- search(ip,ips,ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))
- {
- buf=hash_id(ip->addr,bitmask);
- find(idx,idxs,eq(idx->id,buf))
- idx->children++;
- else
- {
- create(idx,Index);
- idx->addr=ip->addr;
- idx->id=buf;
- idx->bitmask=bitmask;
- idx->parent=NULL;
- idx->children=0;
- idxcount++;
- push(idx,idxs);
- }
- }
-
- /* brutal perfomance optimalization */
- while(idxcount>idxtable_treshold2 && bitmask>2*idxtable_bitmask2)
- {
- bitmask-=idxtable_bitmask2;
- idxcount=0;
- search(idx,idxs,idx->parent==NULL)
- {
- buf=hash_id(idx->addr,bitmask);
- find(metaindex,idxs,eq(metaindex->id,buf))
- metaindex->children++;
- else
- {
- create(metaindex,Index);
- metaindex->addr=idx->addr;
- metaindex->id=buf;
- metaindex->bitmask=bitmask;
- metaindex->parent=NULL;
- metaindex->children=0;
- idxcount++;
- push(metaindex,idxs);
- }
- idx->parent=metaindex;
- }
- }
-
- /* this should slightly optimize throughout ... */
- sort(idx,idxs,desc_order_by,children);
- sort(idx,idxs,order_by,bitmask);
-
- i=0;
- every(idx,idxs)
- {
- subnet=subnet_id(idx->addr,idx->bitmask);
- printf("%d: %s/%d\n",++i,subnet,idx->bitmask);
-
- sprintf(str,"%s -t mangle -N post_%s 2>/dev/null",iptables, idx->id);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -F post_%s",iptables, idx->id);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -N forw_%s 2>/dev/null",iptables, idx->id);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -F forw_%s",iptables, idx->id);
- safe_run(str);
-
- if(idx->parent)
- {
- string(buf,strlen(idx->parent->id)+6);
- sprintf(buf,"post_%s",idx->parent->id);
- }
- else
- buf="POSTROUTING";
-
- sprintf(str,"%s -t mangle -A %s -d %s/%d -o %s -j post_%s",iptables, buf, subnet, idx->bitmask, lan, idx->id);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -A %s -d %s/%d -o %s -j post_common",iptables, buf, subnet, idx->bitmask, lan);
- safe_run(str);
-
- if(idx->parent)
- {
- string(buf,strlen(idx->parent->id)+6);
- sprintf(buf,"forw_%s",idx->parent->id);
- }
- else
- buf="FORWARD";
-
- sprintf(str,"%s -t mangle -A %s -s %s/%d -o %s -j forw_%s",iptables, buf, subnet, idx->bitmask, wan, idx->id);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -A %s -s %s/%d -o %s -j forw_common",iptables, buf, subnet, idx->bitmask, wan);
- safe_run(str);
- }
- printf("Total indexed iptables chains created: %d\n", i);
-
- sprintf(str,"%s -t mangle -A FORWARD -o %s -j forw_common",iptables, wan);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -A POSTROUTING -o %s -j post_common",iptables, lan);
- safe_run(str);
- }
-
- }
-
- if(just_flush)
- {
- puts("Just flushed iptables and tc classes - now exiting ...");
- exit(0);
- }
-
- if(!just_preview)
- {
- if(!dry_run && !nodelay && qos_free_delay)
- {
- printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);
- sleep(qos_free_delay);
- }
-
- sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q 1 default 2",tc,lan);
- safe_run(str);
-
- sprintf(str,"%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio 0",tc,lan,lan_medium,lan_medium,burst);
- safe_run(str);
-
- sprintf(str,"%s class add dev %s parent 1:2 classid 1:1 htb rate %dkbit ceil %dkbit burst %dk prio 0",tc,lan,line,line,burst);
- safe_run(str);
-
- sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q 1 default 2",tc,wan);
- safe_run(str);
-
- sprintf(str,"%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio 0",tc,wan,wan_medium,wan_medium,burst);
- safe_run(str);
-
- sprintf(str,"%s class add dev %s parent 1:2 classid 1:1 htb rate %dkbit ceil %dkbit burst %dk prio 0",tc,wan,up,up,burst);
- safe_run(str);
- }
-
- /*-----------------------------------------------------------------*/
- puts("Locating suckers and generating root classes ...");
- /*-----------------------------------------------------------------*/
- sort(ip,ips,desc_order_by,traffic);
-
-
- /*-----------------------------------------------------------------*/
- /* sub-scope - local variables */
- {
- long rate=line;
- long max=line;
- int group_count=0;
- FILE *credit_file=NULL;
-
- if(!just_preview && !dry_run && enable_credit) credit_file=fopen(credit,"w");
-
- every(group,groups)
- {
- if(!just_preview)
- {
- //download
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio 1",
- tc, lan, parent, group->min, rate, max, burst);
- safe_run(str);
-
- //upload
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %ldkbit ceil %ldkbit burst %dk prio 1",
- tc, wan, parent, group->min, (long)(rate*up/line), (long)(max*up/line), burst);
- safe_run(str);
- }
-
- if(group_count++<max_nesting) parent=group->min;
-
- rate-=digital_divide*group->min;
- if(rate<group->min)rate=group->min;
-
- /*shaping of aggresive downloaders, with credit file support */
- if(use_credit)
- {
- int group_rate=group->min, priority_sequence=magic_priorities+1;
-
- search(ip, ips, ip->min==group->min && ip->max>ip->min)
- {
- if(ip->keyword->data_limit>0 &&
- ip->traffic>ip->credit+
- (ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))
- && !ip->fixedprio)
- {
- if(group_rate<ip->max) ip->max=group_rate;
- group_rate+=magic_treshold;
- ip->prio=magic_priorities+2;
- if(ip->prio<3) ip->prio=3;
- }
- else
- {
- if(ip->traffic>ip->credit+
- (ip->min*ip->keyword->prio_limit+(ip->keyword->fixed_prio<<20)) &&
- !ip->fixedprio)
- {
- ip->prio=priority_sequence--;
- if(ip->prio<2) ip->prio=2;
- }
-
- if(credit_file)
- {
- unsigned long long lcredit=0;
- if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic)
- lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;
- fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);
- }
- }
- }
-
- }
- }
- if(credit_file)fclose(credit_file);
- }
-
- if(just_preview)
- {
- f=fopen(preview,"w");
- ptr=preview;
- }
- else if(!dry_run && !just_flush)
- {
- /*-----------------------------------------------------------------*/
- printf("Writing data transfer database ...\n");
- /*-----------------------------------------------------------------*/
- f=fopen("/var/run/prometheus.previous","w");
- if(f)
- {
- search(ip,ips,ip->traffic || ip->direct || ip->proxy ||ip->upload)
- fprintf(f,"%s %Lu %Lu %Lu %Lu\n",ip->addr,ip->traffic,ip->direct,ip->proxy,ip->upload);
- fclose(f);
- }
-
- f=fopen(html,"w");
- ptr=html;
- }
-
- if(f)
- {
- int total=0;
- int count=1;
- i=0;
-
- /*-----------------------------------------------------------------*/
- printf("Sorting data and generating statistics page %s ...\n",ptr);
- /*-----------------------------------------------------------------*/
-
- fputs("<table border>\n<tr><th align=\"right\">#</th><th align=\"right\">group</th><th align=\"right\">IPs</th><th align=\"right\">requested</th>\n",f);
- fprintf(f,"<th colspan=\"%d\">data limits</th>\n",keywordcount);
- fputs("</tr>\n",f);
- every(group,groups)
- {
-#ifdef DEBUG
- printf("%d k group: %d bandwidth requested: %d k\n",group->min,group->count,group->desired);
-#endif
- fprintf(f,"<tr><td align=\"right\">%d</td><td align=\"right\">%d k</td>",count,group->min);
- fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d k</td>",group->count,group->desired);
-
- every(keyword,keywords)
- fprintf(f,"<td align=\"right\"><font color=\"#%s\">%d M</font></td>",keyword->html_color,group->min*keyword->data_limit);
-
- i+=group->desired;
- total+=group->count;
- count++;
- }
-#ifdef DEBUG
- printf("Total groups: %d Total bandwidth requested: %d k\nAGGREGATION: 1/%d\n",count,i,i/line);
-#endif
- fprintf(f,"<tr><th colspan=\"2\" align=\"left\">Line %d k</td>",line);
- fprintf(f,"<th align=\"right\">%d</td><th align=\"right\">%d k</td>",total,i);
-
- every(keyword,keywords)
- fprintf(f,"<th align=\"right\">%d IPs</th>",keyword->ip_count);
-
- fprintf(f,"</tr><tr><th colspan=\"4\">Aggregation 1/%d</th>\n",(int)(0.5+i/line));
- fprintf(f,"<th colspan=\"%d\">%d traffic classes</th></tr>\n",keywordcount,total);
-
- fputs("</table>\n",f);
- }
- else if(!dry_run && !just_flush)
- perror(html);
-
- i=1;
- if(f)
- {
- unsigned long long total=0, total_direct=0, total_proxy=0, total_upload=0, tmp_sum=0;
- int active_classes=0;
- int colspan;
- FILE *iplog;
- struct Sum {unsigned long long l; int i; list(Sum);} *sum,*sums=NULL;
-
- if(qos_proxy)
- colspan=12;
- else
- colspan=11;
-
- fprintf(f,"<p><table border>\n<tr><th colspan=\"%d\">%s",colspan,title);
- fprintf(f," (%s)</th></tr>\n", d);
- fputs("<tr><td align=\"right\">#</td><td>hostname</td>\
- <td align=\"right\">credit</td>\
- <td align=\"right\">limit</td>\
- <td align=\"right\">total</td>\
- <td align=\"right\">direct</td>\n",f);
- if(qos_proxy)
- fputs("<td align=\"right\">proxy</td>\n",f);
- fputs("<td align=\"right\">upload</td>\
- <td align=\"right\">minimum</td>\
- <td align=\"right\">desired</td>\
- <td align=\"right\">maximum</td>\
- <td>prio</td></tr>\n",f);
-
- every(ip,ips)
- {
- char *f1="", *f2="";
- if(ip->max<ip->desired)
- {
- f1="<font color=\"red\">";
- f2="</font>";
- }
- else if(ip->prio>1)
- {
- f1="<font color=\"brown\">";
- f2="</font>";
- }
-
-#ifdef DEBUG
- printf("%03d. %-22s %10Lu (%d/%d)\n",i ,ip->name, ip->traffic, ip->min, ip->max);
-#endif
- fprintf(f,"<tr><td align=\"right\"><a name=\"%s\"></a>%d</td><td><a href=\"%s%s.log\">%s</a></td><td align=\"right\">%Lu M</td>\n",
- ip->name, i, log_url, ip->name, ip->name, ip->credit);
- fprintf(f,"<td align=\"right\"><font color=\"#%s\">%Lu M</font></td>",ip->keyword->html_color,ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)));
- fprintf(f,"<td align=\"right\">%s%Lu M%s</td><td align=\"right\">%Lu M</td>\n", f1, ip->traffic, f2, ip->direct);
- if(qos_proxy)
- fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->proxy);
- fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->upload);
- fprintf(f,"<td align=\"right\">%d k</td><td align=\"right\">%d k</td><td align=\"right\">%s%d k%s</td><td>%s%d%s</td></tr>\n",ip->min,ip->desired,f1,ip->max,f2,f1,ip->prio,f2);
- total+=ip->traffic;
- total_direct+=ip->direct;
- total_proxy+=ip->proxy;
- total_upload+=ip->upload;
- if(ip->traffic>0)
- {
- active_classes++;
- tmp_sum+=ip->traffic;
- create(sum,Sum);
- sum->l=tmp_sum;
- sum->i=active_classes;
- insert(sum,sums,order_by,i);
- }
-
- i++;
-
- if(!just_preview)
- {
- sprintf(str,"%s%s.log",log_dir,ip->name);
- iplog=fopen(str,"a");
- if(iplog)
- {
- fprintf(iplog,"%ld\t%s\t%Lu\t%Lu\t%Lu\t%Lu\t%s",time(NULL),ip->name,ip->traffic, ip->direct, ip->proxy, ip->upload,d);
- fclose(iplog);
- }
- }
-
- }
- fprintf(f,"<tr><th colspan=\"4 \"align=\"left\">SUMMARY:</td>");
- fprintf(f,"<th align=\"right\">%Lu M</th>\
- <th align=\"right\">%Lu M</th>\n", total, total_direct);
- if(qos_proxy)
- fprintf(f,"<th align=\"right\">%Lu M</th>\n", total_proxy);
- fprintf(f,"<th align=\"right\">%Lu M</th>", total_upload);
- fputs("<td colspan=\"4\"></td></th>\n</table>\n",f);
-
- if(active_classes>10)
- {
- fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"4\">Enterprise Research and Planning (ERP)</th></tr>\n",f);
- fputs("<tr><td colspan=\"2\">Active Classes</td><td colspan=\"2\">Data transfers</td></tr>\n",f);
- find (sum,sums,sum->l>=total/4)
- fprintf(f,"<tr><td>Top %d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%d %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
- find (sum,sums,sum->i==10)
- fprintf(f,"<tr><td>Top 10</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%d %%</td></tr>\n",(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
- find (sum,sums,sum->l>=total/2)
- fprintf(f,"<tr><td>Top %d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%d %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
- find (sum,sums,sum->i>=(active_classes+3)/4)
- fprintf(f,"<tr><td>Top %d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%d %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
- find (sum,sums,sum->i>=(active_classes+1)/2)
- fprintf(f,"<tr><td>Top %d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%d %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
- fprintf(f,"<tr><th align=\"left\">All %d</th><th align=\"right\">100 %%</th><th align=\"right\">%Lu M</th><th align=\"right\">100 %%</th></tr>\n",active_classes,total);
- fputs("</table>\n",f);
- }
- fprintf(f,"<small>Statistics generated by Prometheus QoS version %s<br>GPL+Copyright(C)2005 Michael Polak, <a href=\"http://www.arachne.cz/\">Arachne Labs</a></small>\n",version);
- fclose(f);
- }
-
- if(just_preview)
- {
- puts("Statistics preview generated (-p switch) - now exiting ...");
- exit(0);
- }
-
- /*-----------------------------------------------------------------*/
- puts("Generating iptables and tc classes ...");
- /*-----------------------------------------------------------------*/
-
- i=0;
- printf("%-22s %-15s mark\n","name","ip");
- search(ip,ips,ip->mark>0)
- {
-
- if(idxs)
- {
- char *buf;
- duplicate(ip->addr,buf);
- buf=hash_id(ip->addr,32-idxtable_bitmask1);
-
- string(chain_forward,6+strlen(buf));
- strcpy(chain_forward,"forw_");
- strcat(chain_forward,buf);
-
- string(chain_postrouting,6+strlen(buf));
- strcpy(chain_postrouting,"post_");
- strcat(chain_postrouting,buf);
-
- free(buf);
- }
- else
- {
- chain_forward="FORWARD";
- chain_postrouting="POSTROUTING";
- }
-
- printf("%-22s %-16s %04d ", ip->name, ip->addr, ip->mark);
-
- /* -------------------------------------------------------- mark download */
-
- sprintf(str,"%s -t mangle -A %s -d %s/32 -o %s -j MARK --set-mark %d",iptables,chain_postrouting,ip->addr,lan,ip->mark);
- /* -m limit --limit 1/s */
- safe_run(str);
-
- if(qos_proxy)
- {
- sprintf(str,"%s -t mangle -A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j MARK --set-mark %d",iptables,chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,ip->mark);
- safe_run(str);
- }
-
- sprintf(str,"%s -t mangle -A %s -d %s/32 -o %s -j ACCEPT",iptables,chain_postrouting,ip->addr,lan);
- safe_run(str);
-
- /* -------------------------------------------------------- mark upload */
-
- sprintf(str,"%s -t mangle -A %s -s %s/32 -o %s -j MARK --set-mark %d",iptables,chain_forward,ip->addr,wan,ip->mark);
- safe_run(str);
-
- sprintf(str,"%s -t mangle -A %s -s %s/32 -o %s -j ACCEPT",iptables,chain_forward,ip->addr,wan);
- safe_run(str);
-
- if(ip->min)
- {
- /* -------------------------------------------------------- download class */
- printf("(down: %dk-%dk ", ip->min, ip->max);
-
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", tc, lan, ip->min, ip->mark,ip->min,ip->max, burst, ip->prio);
- safe_run(str);
-
- sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s", tc, lan, ip->mark, ip->mark, qos_leaf);
- safe_run(str);
-
- sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc, lan, ip->mark, ip->mark);
- safe_run(str);
-
- /* -------------------------------------------------------- upload class */
- printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
- (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));
-
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
- tc, wan, ip->min, ip->mark,
- (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
- (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);
- safe_run(str);
-
- sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s",tc, wan, ip->mark, ip->mark, qos_leaf);
- safe_run(str);
-
- sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",tc, wan, ip->mark, ip->mark);
- safe_run(str);
- }
- else
- printf("(sharing %s)\n", ip->sharing);
- i++;
- }
-
-
- if(idxs)
- {
- chain_forward="forw_common";
- chain_postrouting="post_common";
- }
- else
- {
- chain_forward="FORWARD";
- chain_postrouting="POSTROUTING";
- }
-
- /* -------------------------------------------------------- mark download */
-
- if(qos_proxy)
- {
- sprintf(str,"%s -t mangle -A %s -s %s -p tcp --sport %d -o %s -j MARK --set-mark 3",iptables,chain_postrouting,proxy_ip,proxy_port,lan);
- safe_run(str);
- sprintf(str,"%s -t mangle -A %s -s %s -p tcp --sport %d -o %s -j ACCEPT",iptables,chain_postrouting,proxy_ip,proxy_port,lan);
- safe_run(str);
- }
- sprintf(str,"%s -t mangle -A %s -o %s -j MARK --set-mark 3",iptables,chain_postrouting,lan);
- safe_run(str);
- sprintf(str,"%s -t mangle -A %s -o %s -j ACCEPT",iptables,chain_postrouting,lan);
- safe_run(str);
-
- /* -------------------------------------------------------- mark upload */
- sprintf(str,"%s -t mangle -A %s -o %s -j MARK --set-mark 3",iptables,chain_forward,wan);
- safe_run(str);
- sprintf(str,"%s -t mangle -A %s -o %s -j ACCEPT",iptables,chain_forward,wan);
- safe_run(str);
-
- printf("Total IP count: %d\n", i);
-
- /* ---------------------------------------- tc - free bandwith shared class */
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio 2",tc,lan,parent,free_min,free_max,burst);
- safe_run(str);
-
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio 2",tc,wan,parent,free_min,free_max,burst);
- safe_run(str);
-
- /* tc SFQ */
- sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,lan,qos_leaf);
- safe_run(str);
-
- sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,wan,qos_leaf);
- safe_run(str);
-
- /* tc handle 1 fw flowid */
- sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,lan);
- safe_run(str);
-
- sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,wan);
- safe_run(str);
-
- if(log_file) fclose(log_file);
- return 0;
-
- /* that's all folks, thank you for reading it all the way up to this point ;-) */
- /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
-}
+/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
+/* Prometheus QoS - you can "steal fire" from your ISP */\r
+/* "fair-per-IP" quality of service (QoS) utility */\r
+/* requires Linux 2.4.x or 2.6.x with HTB support */\r
+/* Copyright(C) 2005-2013 Michael Polak, Arachne Aerospace */\r
+/* iptables-restore support Copyright(C) 2007-2008 ludva */\r
+/* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */\r
+/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
+\r
+/* Modified by: xChaos, 20130124\r
+ ludva, 20080415\r
+ \r
+ Prometheus QoS is free software; you can redistribute it and/or\r
+ modify it under the terms of the GNU General Public License as \r
+ published by the Free Software Foundation; either version 2.1 of \r
+ the License, or (at your option) any later version.\r
+\r
+ Prometheus QoS is distributed in the hope that it will be useful,\r
+ but WITHOUT ANY WARRANTY; without even the implied warranty of\r
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU\r
+ General Public License for more details.\r
+\r
+ You should have received a copy of the GNU General Public License\r
+ along with Prometheus Qos; if not, write to the Free Software\r
+ Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA \r
+ \r
+ GNU General Public License is located in file COPYING */\r
+\r
+#include "cll1-0.6.2.h"\r
+#include "ipstruct.h"\r
+\r
+const char *version = "0.8.3-i";\r
+\r
+/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
+/* Versions: 0.8.3 is development release, 0.8.4 will be "stable" */\r
+/* Official Trac URL: https://dev.arachne.cz/svn/prometheus */\r
+/* Official SVN URL: https://dev.arachne.cz/repos/prometheus */\r
+/* BTC donations account: 19rriLx8vR19wGefPaMhakqnCYNYwjLvxq */\r
+/* CZK donations account: 2900242944/2010 (transparent account) */\r
+/* Warning: unofficial Github mirror is not supported by author! */\r
+/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
+\r
+const char *stats_html_signature = "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2013 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";\r
+\r
+#define STRLEN 512\r
+#undef DEBUG\r
+\r
+/* ======= All path names are defined here (for RPM patch) ======= */\r
+\r
+const char *tc = "/sbin/tc"; /* requires tc with HTB support */\r
+const char *iptables = "/sbin/iptables"; /* requires iptables utility */\r
+const char *ip6tables = "/sbin/ip6tables"; /* requires iptables utility */\r
+const char *iptablessave = "/sbin/iptables-save"; /* not yet required */\r
+const char *iptablesrestore = "/sbin/iptables-restore"; /* requires iptables-restore */\r
+const char *ip6tablessave = "/sbin/ip6tables-save"; /* not yet required */\r
+const char *ip6tablesrestore = "/sbin/ip6tables-restore"; /* requires iptables-restore */\r
+const char *ls = "/bin/ls"; /* this is not user configurable :-) */\r
+\r
+char *config = "/etc/prometheus/prometheus.conf"; /* main configuration file */\r
+char *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */\r
+char *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/\r
+char *ip6tablesfile = "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/\r
+char *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */\r
+char *classmap = "/var/lib/misc/prometheus.classes"; /* credit log file */\r
+char *html = "/var/www/traffic.html"; /* hall of fame - html version */\r
+char *preview = "/var/www/preview.html"; /* hall of fame preview - html version */\r
+char *json_traffic = "/var/www/logs/traffic.json"; /* hall of fame - json version */\r
+char *json_preview = "/var/www/logs/preview.json"; /* hall of fame preview - json version */\r
+char *cmdlog = "/var/log/prometheuslog"; /* command log filename */\r
+char *log_dir = "/var/www/logs/"; /* log directory pathname, ended with slash */\r
+char *log_url = "/logs/"; /* log directory relative URI prefix (partial URL) */\r
+char *html_log_dir = "/var/www/logs/html/";\r
+\r
+char *jquery_url = "http://code.jquery.com/jquery-latest.js";\r
+char *lms_url = "/lms/?m=customerinfo&id=";\r
+int use_jquery_popups = TRUE;\r
+int row_odd_even = 0; /*<tr class="odd/even"> */\r
+ \r
+/* === Configuraration file values defaults - stored in global variables ==== */\r
+\r
+int filter_type = 1; /*1 mark, 2 classify*/\r
+char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */\r
+char *mark = "MARK";\r
+char *mark_iptables = "MARK --set-mark ";\r
+int dry_run = FALSE; /* preview - use puts() instead of system() */\r
+char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";\r
+char *ip6preamble = "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT\n-A FORWARD -s fe80::/10 -j ACCEPT\n-A FORWARD -d ff00::/8 -j ACCEPT\n-A POSTROUTING -s fe80::/10 -j ACCEPT\n-A POSTROUTING -d ff00::/8 -j ACCEPT";\r
+FILE *iptables_file = NULL;\r
+FILE *ip6tables_file = NULL;\r
+int enable_credit = TRUE; /* enable credit file */\r
+int use_credit = FALSE; /* use credit file (if enabled)*/\r
+char *title = "Hall of Fame - Greatest Suckers"; /* hall of fame title */\r
+int hall_of_fame = TRUE; /* enable hall of fame */\r
+char *lan = "eth0"; /* LAN interface */\r
+char *lan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */\r
+char *wan = "eth1"; /* WAN/ISP interface */\r
+char *ip6prefix = NULL; /* Prefix for global /48 IPv6 subnet */\r
+char *wan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */\r
+char *qos_leaf = "sfq perturb 5"; /* leaf discipline */\r
+char *qos_free_zone = NULL; /* QoS free zone */\r
+int qos_proxy = TRUE; /* include proxy port to QoS */\r
+int found_lmsid = FALSE; /* show links to users in LMS information system */\r
+int include_upload = TRUE; /* upload+download=total traffic */\r
+char *proxy_ip = "192.168.1.1/32"; /* our IP with proxy port */\r
+int proxy_port = 3128; /* proxy port number */\r
+long long int line = 1024; /* WAN/ISP download in kbps */\r
+long long int up = 1024; /* WAN/ISP upload in kbps */\r
+int free_min = 256; /* minimum guaranted bandwidth for all undefined hosts */\r
+int free_max = 512; /* maximum allowed bandwidth for all undefined hosts */\r
+int qos_free_delay = 0; /* seconds to sleep before applying new QoS rules */\r
+int digital_divide = 2; /* controls digital divide weirdness ratio, 1...3 */ \r
+int max_nesting = 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */\r
+int htb_r2q = 256; /* should work for leaf values 512 kbps to 8 Mbps */\r
+int burst = 8; /* HTB burst (in kbits) */\r
+int burst_main = 64;\r
+int burst_group = 32;\r
+int magic_treshold = 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */\r
+int keywordcount = 0;\r
+int class_count = 0;\r
+int ip_count = 0;\r
+/* not yet implemented:\r
+int fixed_packets = 0; maximum number of pps per IP address (not class!) \r
+int packet_limit = 5; maximum number of pps to htn CEIL, not rate !!! \r
+*/\r
+FILE *log_file = NULL;\r
+char *kwd = "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */\r
+\r
+const int highest_priority = 0; /* highest HTB priority (HTB built-in value is 0) */\r
+const int lowest_priority = 7; /* lowest HTB priority (HTB built-in value is 7) */\r
+const int idxtable_treshold1 = 24; /* this is no longer configurable */\r
+const int idxtable_treshold2 = 12; /* this is no longer configurable */\r
+const int idxtable_bitmask1 = 3; /* this is no longer configurable */\r
+const int idxtable_bitmask2 = 3; /* this is no longer configurable */\r
+\r
+struct IP *ips = NULL, *networks = NULL, *ip, *sharedip;\r
+struct Group *groups = NULL, *group;\r
+struct Keyword *keyword, *defaultkeyword=NULL, *keywords=NULL;\r
+\r
+void help(void);\r
+/* implemented in help.c */
+\r
+void get_traffic_statistics(const char *whichiptables, int ipv6);\r
+/* implemented in parseiptables.c */\r
+\r
+void parse_ip_log(int argc, char **argv);\r
+/* implemented in parselog.c */\r
+\r
+void parse_hosts(char *hosts);\r
+/* implemented in parsehosts.c */\r
+\r
+void write_json_traffic(char *json);\r
+/* implemented in json.c */\r
+\r
+void write_htmlandlogs(char *html, char *d, int total, int just_preview);\r
+/* implemented in htmlandlogs.c */\r
+\r
+void analyse_topology(char *traceroute);\r
+/* implemented in networks.c */\r
+\r
+\r
+const char *tr_odd_even(void)\r
+{\r
+ row_odd_even = 1 - row_odd_even;\r
+ if(row_odd_even)\r
+ {\r
+ return "<tr class=\"even\">\n";\r
+ }\r
+ else\r
+ {\r
+ return "<tr class=\"odd\">\n";\r
+ }\r
+}\r
+\r
+/* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */\r
+/* (except that this code uses obsolete, archaic version of this header file...) */\r
+\r
+struct Index\r
+{\r
+ char *addr;\r
+ char *id;\r
+ struct Index *parent;\r
+ int bitmask;\r
+ int children;\r
+ int ipv6;\r
+ list(Index);\r
+} *idxs=NULL, *idx, *metaindex;\r
+\r
+\r
+/* ====== iptables indexes are used to reduce complexity to log8(N) ===== */\r
+\r
+char *index_id(char *ip, int bitmask);\r
+/* function implemented in ipv4subnets.c */\r
+\r
+char *subnet_id(char *ip, int bitmask);\r
+/* function implemented in ipv4subnets.c */\r
+\r
+char *index6_id(char *ip, int bitmask);\r
+/* function implemented in ipv6subnets.c */\r
+\r
+char *subnet6_id(char *ip, int bitmask);\r
+/* function implemented in ipv6subnets.c */\r
+\r
+/* ================= Let's parse configuration file here ================ */\r
+\r
+void reject_config_and_exit(char *filename)\r
+{\r
+ printf("Configuration file %s rejected - abnormal exit.",filename);\r
+ exit(-1);\r
+}\r
+\r
+void get_config(char *config_filename)\r
+{\r
+ char *cnf="mark";\r
+ \r
+ printf("Configured keywords: ");\r
+ parse(config_filename)\r
+ {\r
+ option("keyword",kwd);\r
+ if(kwd)\r
+ {\r
+ printf("%s ",kwd);\r
+\r
+ create(keyword,Keyword);\r
+ keyword->key=kwd;\r
+ keyword->asymetry_ratio=1; /* ratio for ADSL-like upload */\r
+ keyword->asymetry_fixed=0; /* fixed treshold for ADSL-like upload */\r
+ keyword->data_limit=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */\r
+ keyword->data_prio=4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */\r
+ keyword->fixed_limit=0; /* fixed data limit for setting lower HTB ceil */\r
+ keyword->fixed_prio=0; /* fixed data limit for setting lower HTB prio */\r
+ keyword->reserve_min=8; /* bonus for nominal HTB rate bandwidth (in kbps) */\r
+ keyword->reserve_max=0; /* malus for nominal HTB ceil (in kbps) */\r
+ keyword->default_prio=highest_priority+1;\r
+ keyword->html_color="000000";\r
+ keyword->ip_count=0;\r
+ keyword->leaf_discipline="";\r
+\r
+ push(keyword,keywords);\r
+ if(!defaultkeyword)\r
+ {\r
+ defaultkeyword=keyword;\r
+ }\r
+ keywordcount++;\r
+ \r
+ kwd=NULL;\r
+ }\r
+ else\r
+ {\r
+ for_each(keyword,keywords)\r
+ {\r
+ int l=strlen(keyword->key);\r
+\r
+ if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)\r
+ {\r
+ char *tmptr=_; /* <---- l+1 ----> */\r
+ _+=l+1; /* via-prometheus-asymetry-ratio, etc. */\r
+ ioption("asymetry-ratio",keyword->asymetry_ratio);\r
+ ioption("asymetry-treshold",keyword->asymetry_fixed);\r
+ ioption("magic-relative-limit",keyword->data_limit);\r
+ ioption("magic-relative-prio",keyword->data_prio);\r
+ loption("magic-fixed-limit",keyword->fixed_limit);\r
+ loption("magic-fixed-prio",keyword->fixed_prio);\r
+ ioption("htb-default-prio",keyword->default_prio);\r
+ ioption("htb-rate-bonus",keyword->reserve_min);\r
+ ioption("htb-ceil-malus",keyword->reserve_max);\r
+ option("leaf-discipline",keyword->leaf_discipline);\r
+ option("html-color",keyword->html_color);\r
+ _=tmptr;\r
+ \r
+ if(keyword->data_limit || keyword->fixed_limit || \r
+ keyword->data_prio || keyword->fixed_prio)\r
+ {\r
+ use_credit=1; \r
+ }\r
+ }\r
+ }\r
+ }\r
+\r
+ option("tc",tc);\r
+ option("iptables",iptables);\r
+ option("iptables-save",iptablessave);\r
+ option("iptables-restore",iptablesrestore);\r
+ option("ip6tables",ip6tables);\r
+ option("ip6tables-save",ip6tablessave);\r
+ option("ip6tables-restore",ip6tablesrestore);\r
+ option("iptables-in-filename",iptablesfile);\r
+ option("ip6tables-in-filename",ip6tablesfile);\r
+ option("hosts",hosts);\r
+ option("lan-interface",lan);\r
+ option("wan-interface",wan);\r
+ option("ip6-prefix",ip6prefix);\r
+ option("lan-medium",lan_medium);\r
+ option("wan-medium",wan_medium);\r
+ lloption("wan-download",line);\r
+ lloption("wan-upload",up);\r
+ ioption("hall-of-fame-enable",hall_of_fame);\r
+ option("hall-of-fame-title",title);\r
+ option("hall-of-fame-filename",html);\r
+ option("json-filename",json_traffic);\r
+ option("hall-of-fame-preview",preview);\r
+ option("json-preview",json_preview);\r
+ option("log-filename",cmdlog);\r
+ option("credit-filename",credit);\r
+ option("classmap-filename",classmap);\r
+ ioption("credit-enable",enable_credit);\r
+ option("log-traffic-directory",log_dir);\r
+ option("log-traffic-html-directory",html_log_dir);\r
+ option("log-traffic-url-path",log_url);\r
+ option("jquery-url",jquery_url);\r
+ option("lms-url",lms_url);\r
+ ioption("use-jquery-popups",use_jquery_popups);\r
+ option("qos-free-zone",qos_free_zone);\r
+ ioption("qos-free-delay",qos_free_delay);\r
+ ioption("qos-proxy-enable",qos_proxy);\r
+ option("qos-proxy-ip",proxy_ip);\r
+ option("htb-leaf-discipline",qos_leaf);\r
+ ioption("qos-proxy-port",proxy_port);\r
+ ioption("free-rate",free_min);\r
+ ioption("free-ceil",free_max);\r
+ ioption("htb-burst",burst);\r
+ ioption("htb-burst-main",burst_main);\r
+ ioption("htb-burst-group",burst_group);\r
+ ioption("htb-nesting-limit",max_nesting);\r
+ ioption("htb-r2q",htb_r2q);\r
+ ioption("magic-include-upload",include_upload);\r
+ ioption("magic-treshold",magic_treshold); \r
+ option("filter-type", cnf); \r
+/* not yet implemented:\r
+ ioption("magic-fixed-packets",fixed_packets);\r
+ ioption("magic-relative-packets",packet_limit);\r
+*/\r
+ }\r
+ fail\r
+ { \r
+ perror(config_filename);\r
+ puts("Warning - using built-in defaults instead ...");\r
+ }\r
+ done; /* ugly macro end */\r
+ printf("\n");\r
+ \r
+ /* leaf discipline for keywords */\r
+ for_each(keyword,keywords)\r
+ {\r
+ if(!strcmpi(keyword->leaf_discipline, ""))\r
+ {\r
+ keyword->leaf_discipline = qos_leaf;\r
+ }\r
+ }\r
+\r
+ if(strcmpi(cnf, "mark"))\r
+ {\r
+ filter_type = 2;\r
+ mark = "CLASSIFY";\r
+ mark_iptables = "CLASSIFY --set-class 1:";\r
+ }\r
+ else\r
+ {\r
+ filter_type = 1;\r
+ mark = "MARK";\r
+ mark_iptables = "MARK --set-mark ";\r
+ }\r
+\r
+ /* are supplied values meaningful ?*/\r
+ if(line<=0 || up<=0)\r
+ {\r
+ puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");\r
+ reject_config_and_exit(config_filename);\r
+ }\r
+}\r
+\r
+ \r
+/* ========== This function executes, logs OR ALSO prints command ========== */\r
+\r
+void safe_run(char *cmd)\r
+{\r
+ if(dry_run)\r
+ {\r
+ printf("\n=>%s\n",cmd);\r
+ }\r
+ else\r
+ {\r
+ system(cmd);\r
+ }\r
+ if(log_file)\r
+ {\r
+ fprintf(log_file,"%s\n",cmd);\r
+ }\r
+}\r
+\r
+void iptables_save_line(char *line, int ipv6)\r
+{\r
+ if(ipv6)\r
+ {\r
+ fprintf(ip6tables_file,"%s\n",line);\r
+ }\r
+ else\r
+ {\r
+ fprintf(iptables_file,"%s\n",line);\r
+ }\r
+}\r
+\r
+void run_iptables_restore(void)\r
+{\r
+ char *restor;\r
+ string(restor,STRLEN);\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Running %s <%s ...\n", iptablesrestore, iptablesfile);\r
+ /*-----------------------------------------------------------------*/\r
+\r
+ iptables_save_line("COMMIT", FALSE);\r
+ fclose(iptables_file);\r
+ if(dry_run) \r
+ {\r
+ parse(iptablesfile)\r
+ {\r
+ printf("%s\n",_);\r
+ }\r
+ done; /* ugly macro end */\r
+ }\r
+\r
+ sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);\r
+ safe_run(restor);\r
+\r
+ if(ip6prefix)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Running %s <%s ...\n", ip6tablesrestore, ip6tablesfile);\r
+ /*-----------------------------------------------------------------*/\r
+ iptables_save_line("COMMIT", TRUE);\r
+ fclose(ip6tables_file);\r
+ if(dry_run) \r
+ {\r
+ parse(ip6tablesfile)\r
+ {\r
+ printf("%s\n",_);\r
+ }\r
+ done; /* ugly macro end */\r
+ }\r
+ sprintf(restor,"%s <%s",ip6tablesrestore, ip6tablesfile);\r
+ safe_run(restor);\r
+ }\r
+ free(restor);\r
+}\r
+\r
+char *parse_datafile_line(char *str)\r
+{\r
+ char *ptr=strchr(str,' ');\r
+\r
+ if(ptr)\r
+ {\r
+ *ptr=0;\r
+ ptr++;\r
+ return ptr;\r
+ } \r
+ else \r
+ {\r
+ return NULL;\r
+ }\r
+}\r
+\r
+\r
+/*-----------------------------------------------------------------*/\r
+/* Are you looking for int main(int argc, char **argv) ? :-)) */\r
+/*-----------------------------------------------------------------*/\r
+\r
+program\r
+{\r
+ int i=0; /* just plain old Fortran style integer :-) */\r
+ FILE *f=NULL; /* everything is just stream of bytes... */\r
+ char *str, *ptr, *d; /* LET A$=B$ :-) */\r
+ char *substring;\r
+\r
+ int parent = 1;\r
+ int just_networks = FALSE; \r
+ int just_flush = FALSE; /* deactivates all previous actions */\r
+ int nodelay = FALSE;\r
+ int just_preview = FALSE; /* preview - generate just stats */\r
+ int start_shaping = FALSE; /* apply FUP - requires classmap file */\r
+ int stop_shaping = FALSE; /* lift FUP - requires classmap file */\r
+ int reduce_ceil = 0; /* allow only rate+(ceil-rate)/2, /4, etc. */\r
+ int just_logs = FALSE; /* just parse logs */\r
+ int run = FALSE;\r
+ int total = 0;\r
+ \r
+ char *chain_forward, *chain_postrouting;\r
+ char *althosts=NULL;\r
+ \r
+ printf("\n\\r
+Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\\r
+Version %s - Copyright (C)2005-2013 Michael Polak, Arachne Labs\n\\r
+iptables-restore & burst tunning & classify modification by Ludva\n\\r
+Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);\r
+\r
+ /*----- Boring... we have to check command line options first: ----*/ \r
+ arguments\r
+ {\r
+ argument("-c") { nextargument(config); }\r
+ argument("-h") { nextargument(althosts);}\r
+ argument("-d") { run=TRUE; dry_run=TRUE; }\r
+ argument("-f") { run=TRUE; just_flush=TRUE; }\r
+ argument("-9") { run=TRUE; just_flush=9; }\r
+ argument("-p") { run=TRUE; just_preview=TRUE; }\r
+ argument("-q") { run=TRUE; just_preview=TRUE; stop_shaping=TRUE; }\r
+ argument("-2") { run=TRUE; just_preview=TRUE; reduce_ceil=2; }\r
+ argument("-4") { run=TRUE; just_preview=TRUE; reduce_ceil=4; }\r
+ argument("-s") { run=TRUE; just_preview=TRUE; start_shaping=TRUE; }\r
+ argument("-r") { run=TRUE; }\r
+ argument("-n") { run=TRUE; nodelay=TRUE; }\r
+ argument("-a") { run=TRUE; just_networks=TRUE; }\r
+ argument("-l") { just_logs=TRUE; }\r
+ argument("-m") { just_logs=TRUE; }\r
+ argument("-y") { just_logs=TRUE; }\r
+ argument("-?") { help(); exit(0); }\r
+ argument("--help") { help(); exit(0); }\r
+ argument("-v") { exit(0); } \r
+ argument("--version") { exit(0); } \r
+ }\r
+ \r
+ if(dry_run)\r
+ {\r
+ puts("*** THIS IS JUST DRY RUN ! ***\n");\r
+ }\r
+\r
+ date(d); /* this is typical cll1.h macro - prints current date */\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing configuration file %s ...\n", config);\r
+ /*-----------------------------------------------------------------*/\r
+ get_config(config);\r
+ \r
+ if(just_logs)\r
+ {\r
+ parse_ip_log(argc,argv);\r
+ exit(0);\r
+ }\r
+ else if(not run)\r
+ {\r
+ help();\r
+ exit(0);\r
+ }\r
+\r
+ if(althosts)\r
+ {\r
+ hosts = althosts;\r
+ }\r
+\r
+ if(just_flush<9)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Parsing iptables verbose output ...");\r
+ /*-----------------------------------------------------------------*/\r
+ get_traffic_statistics(iptables, FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Parsing ip6tables verbose output ...");\r
+ /*-----------------------------------------------------------------*/ \r
+ get_traffic_statistics(ip6tables, TRUE);\r
+ }\r
+ }\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ /* cll1.h - let's allocate brand new character buffer... */\r
+ /*-----------------------------------------------------------------*/\r
+ string(str,STRLEN); \r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing class defintion file %s ...\n", hosts);\r
+ /*-----------------------------------------------------------------*/\r
+ parse_hosts(hosts);\r
+ if(just_networks)\r
+ {\r
+ analyse_topology("/usr/sbin/traceroute -n -m 10 -w 2 %s.%d");\r
+ exit(-1); \r
+ }\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Resolving shared connections ...");\r
+ /*-----------------------------------------------------------------*/\r
+ for_each(ip, ips) if(ip->sharing)\r
+ {\r
+ for_each(sharedip, ips) if(eq(sharedip->name, ip->sharing))\r
+ {\r
+ sharedip->traffic += ip->traffic;\r
+ ip->traffic = 0;\r
+ ip->mark = sharedip->mark; \r
+ ip->lmsid = sharedip->lmsid;\r
+ break;\r
+ }\r
+ if(not sharedip)\r
+ {\r
+ printf("Unresolved shared connection: %s %s sharing-%s\n",\r
+ ip->addr, ip->name, ip->sharing);\r
+ }\r
+ }\r
+\r
+ if(enable_credit && just_flush<9)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing credit file %s ...\n", credit);\r
+ /*-----------------------------------------------------------------*/\r
+ parse(credit)\r
+ {\r
+ ptr=parse_datafile_line(_);\r
+ if(ptr)\r
+ {\r
+ if_exists(ip,ips,eq(ip->addr,_))\r
+ {\r
+ sscanf(ptr,"%Lu",&(ip->credit));\r
+ }\r
+ }\r
+ }\r
+ done; /* ugly macro end */\r
+ }\r
+\r
+ if(!just_preview)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Initializing iptables and tc classes ...");\r
+ /*-----------------------------------------------------------------*/\r
+ \r
+ iptables_file = fopen(iptablesfile, "w");\r
+ if(iptables_file == NULL)\r
+ {\r
+ perror(iptablesfile);\r
+ exit(-1);\r
+ }\r
+ iptables_save_line(iptablespreamble, FALSE);\r
+\r
+ if(ip6prefix)\r
+ {\r
+ ip6tables_file = fopen(ip6tablesfile, "w");\r
+ if(ip6tables_file == NULL)\r
+ {\r
+ perror(ip6tablesfile);\r
+ exit(-1);\r
+ }\r
+ iptables_save_line(iptablespreamble, TRUE);\r
+ iptables_save_line(ip6preamble, TRUE);\r
+ }\r
+\r
+ run_iptables_restore();\r
+ \r
+ log_file = fopen(cmdlog, "w");\r
+ if(log_file == NULL) \r
+ {\r
+ perror(cmdlog);\r
+ exit(-1);\r
+ } \r
+ \r
+ sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);\r
+ safe_run(str);\r
+ \r
+ iptables_file=fopen(iptablesfile,"w");\r
+ iptables_save_line(iptablespreamble, FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ ip6tables_file=fopen(ip6tablesfile,"w");\r
+ iptables_save_line(iptablespreamble, TRUE);\r
+ iptables_save_line(ip6preamble, TRUE);\r
+ }\r
+\r
+ if(qos_free_zone && *qos_free_zone!='0') /* this is currently supported only for IPv4 */\r
+ {\r
+ char *chain;\r
+ \r
+ sprintf(str,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone, wan);\r
+ iptables_save_line(str, FALSE); /* this is currently supported only for IPv4 */\r
+ \r
+ if(qos_proxy)\r
+ {\r
+ iptables_save_line(":post_noproxy - [0:0]", FALSE);\r
+ sprintf(str,"-A POSTROUTING ! -p tcp -o %s -j post_noproxy", lan);\r
+ iptables_save_line(str , FALSE);\r
+ sprintf(str,"-A POSTROUTING ! -s %s -o %s -j post_noproxy", proxy_ip, lan);\r
+ iptables_save_line(str, FALSE);\r
+ sprintf(str,"-A POSTROUTING -s %s -p tcp ! --sport %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);\r
+ iptables_save_line(str, FALSE);\r
+\r
+ chain="post_noproxy"; \r
+ }\r
+ else\r
+ {\r
+ chain="POSTROUTING";\r
+ }\r
+ \r
+ sprintf(str,"-A %s -s %s -o %s -j ACCEPT", chain, qos_free_zone, lan);\r
+ iptables_save_line(str, FALSE);\r
+ }\r
+ \r
+ if(ip_count > idxtable_treshold1 && !just_flush)\r
+ {\r
+ int idxcount=0, bitmask=32-idxtable_bitmask1;\r
+ char *subnet, *buf;\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);\r
+ /*-----------------------------------------------------------------*/\r
+\r
+ iptables_save_line(":post_common - [0:0]", FALSE);\r
+ iptables_save_line(":forw_common - [0:0]", FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ iptables_save_line(":post_common - [0:0]", TRUE);\r
+ iptables_save_line(":forw_common - [0:0]", TRUE);\r
+ }\r
+\r
+ for_each(ip,ips) if(ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0")) \r
+ {\r
+ if(ip->v6)\r
+ {\r
+ buf=index6_id(ip->addr,bitmask+32);\r
+ }\r
+ else\r
+ {\r
+ buf=index_id(ip->addr, bitmask);\r
+ }\r
+ \r
+ if_exists(idx,idxs,eq(idx->id,buf))\r
+ {\r
+ idx->children++;\r
+ }\r
+ else\r
+ {\r
+ create(idx,Index);\r
+ idx->addr = ip->addr;\r
+ idx->id = buf;\r
+ idx->bitmask = bitmask+32*ip->v6;\r
+ idx->parent = NULL;\r
+ idx->children = 0;\r
+ idx->ipv6 = ip->v6;\r
+ idxcount++;\r
+ push(idx,idxs);\r
+ }\r
+ }\r
+\r
+ /* brutal perfomance optimalization */\r
+ while(idxcount > idxtable_treshold2 && bitmask > 2*idxtable_bitmask2)\r
+ {\r
+ bitmask -= idxtable_bitmask2;\r
+ idxcount = 0;\r
+\r
+ for_each(idx,idxs) if(idx->parent == NULL)\r
+ {\r
+ if(idx->ipv6)\r
+ {\r
+ buf = index6_id(idx->addr, bitmask+32);\r
+ }\r
+ else\r
+ {\r
+ buf = index_id(idx->addr, bitmask);\r
+ }\r
+ if_exists(metaindex,idxs,eq(metaindex->id,buf))\r
+ {\r
+ metaindex->children++;\r
+ }\r
+ else\r
+ {\r
+ create(metaindex,Index);\r
+ metaindex->addr = idx->addr;\r
+ metaindex->id = buf;\r
+ metaindex->bitmask = bitmask+32*idx->ipv6;\r
+ metaindex->parent = NULL;\r
+ metaindex->children = 0;\r
+ metaindex->ipv6 = idx->ipv6;\r
+ idxcount++;\r
+ push(metaindex,idxs);\r
+ }\r
+ idx->parent=metaindex;\r
+ }\r
+ }\r
+\r
+ /* this should slightly optimize throughput ... */\r
+ sort(idx,idxs,desc_order_by,children);\r
+ sort(idx,idxs,order_by,bitmask);\r
+\r
+ i=0;\r
+ for_each(idx,idxs)\r
+ {\r
+ if(idx->ipv6)\r
+ {\r
+ subnet=subnet6_id(idx->addr, idx->bitmask);\r
+ }\r
+ else\r
+ {\r
+ subnet=subnet_id(idx->addr, idx->bitmask);\r
+ }\r
+ printf("%d: %s/%d\n", ++i, subnet, idx->bitmask);\r
+ \r
+ sprintf(str,":post_%s - [0:0]", idx->id);\r
+ iptables_save_line(str, idx->ipv6);\r
+\r
+ sprintf(str,":forw_%s - [0:0]", idx->id);\r
+ iptables_save_line(str, idx->ipv6);\r
+\r
+ if(idx->parent)\r
+ {\r
+ string(buf,strlen(idx->parent->id)+6);\r
+ sprintf(buf,"post_%s", idx->parent->id);\r
+ }\r
+ else\r
+ {\r
+ buf="POSTROUTING";\r
+ }\r
+\r
+ sprintf(str,"-A %s -d %s/%d -o %s -j post_%s", buf, subnet, idx->bitmask, lan, idx->id);\r
+ iptables_save_line(str, idx->ipv6);\r
+\r
+ sprintf(str,"-A %s -d %s/%d -o %s -j post_common", buf, subnet, idx->bitmask, lan);\r
+ iptables_save_line(str, idx->ipv6);\r
+\r
+ if(idx->parent)\r
+ {\r
+ string(buf,strlen(idx->parent->id)+6);\r
+ sprintf(buf,"forw_%s",idx->parent->id);\r
+ }\r
+ else\r
+ {\r
+ buf="FORWARD";\r
+ }\r
+\r
+ sprintf(str,"-A %s -s %s/%d -o %s -j forw_%s", buf, subnet, idx->bitmask, wan, idx->id);\r
+ iptables_save_line(str, idx->ipv6);\r
+\r
+ sprintf(str,"-A %s -s %s/%d -o %s -j forw_common", buf, subnet, idx->bitmask, wan);\r
+ iptables_save_line(str, idx->ipv6);\r
+ }\r
+ printf("Total indexed iptables chains created: %d\n", i);\r
+\r
+ sprintf(str,"-A FORWARD -o %s -j forw_common", wan);\r
+ iptables_save_line(str, FALSE);\r
+ \r
+ sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);\r
+ iptables_save_line(str, FALSE);\r
+\r
+ if(ip6prefix)\r
+ {\r
+ sprintf(str,"-A FORWARD -o %s -j forw_common", wan);\r
+ iptables_save_line(str, TRUE);\r
+ \r
+ sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);\r
+ iptables_save_line(str, TRUE);\r
+ }\r
+ }\r
+ }\r
+\r
+ if(just_flush)\r
+ {\r
+ fclose(iptables_file);\r
+ if(log_file)\r
+ { \r
+ fclose(log_file);\r
+ }\r
+ puts("Just flushed iptables and tc classes - now exiting ...");\r
+ exit(0);\r
+ }\r
+\r
+ if(!just_preview)\r
+ {\r
+ if(!dry_run && !nodelay && qos_free_delay)\r
+ {\r
+ printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);\r
+ sleep(qos_free_delay);\r
+ }\r
+\r
+ sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",\r
+ tc,lan,htb_r2q);\r
+ safe_run(str);\r
+\r
+ sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",\r
+ tc,lan,lan_medium,lan_medium,burst_main,highest_priority);\r
+ safe_run(str);\r
+\r
+ sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",\r
+ tc,lan,line,line,burst_main,highest_priority);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,wan,htb_r2q);\r
+ safe_run(str);\r
+\r
+ sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",\r
+ tc,wan,wan_medium,wan_medium,burst_main,highest_priority);\r
+ safe_run(str);\r
+\r
+ sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",\r
+ tc,wan,up,up,burst_main,highest_priority);\r
+ safe_run(str);\r
+ }\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Locating heavy downloaders and generating root classes ...");\r
+ /*-----------------------------------------------------------------*/\r
+ sort(ip,ips,desc_order_by,traffic); \r
+\r
+ /*-----------------------------------------------------------------*/\r
+ /* sub-scope - local variables */ \r
+ {\r
+ long long int rate = line;\r
+ long long int max = line;\r
+ int group_count = 0;\r
+ FILE *credit_file = NULL;\r
+ \r
+ if(!just_preview && !dry_run && enable_credit)\r
+ {\r
+ credit_file = fopen(credit,"w");\r
+ }\r
+ \r
+ for_each(group,groups)\r
+ {\r
+ if(!just_preview)\r
+ {\r
+ //download\r
+ sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d", \r
+ tc, lan, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);\r
+ safe_run(str);\r
+ \r
+ //upload\r
+ sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d", \r
+ tc, wan, parent, group->id, rate*up/line, max*up/line, burst_group, highest_priority+1, group->desired);\r
+ safe_run(str);\r
+ }\r
+ \r
+ if(group_count++ < max_nesting)\r
+ {\r
+ parent = group->id;\r
+ }\r
+ \r
+ rate -= digital_divide*group->min;\r
+ if(rate < group->min)\r
+ {\r
+ rate = group->min;\r
+ }\r
+ \r
+ /*shaping of aggresive downloaders, with credit file support */\r
+ if(use_credit)\r
+ {\r
+ int group_rate = group->min, priority_sequence = lowest_priority;\r
+ \r
+ for_each(ip, ips) if(ip->min == group->min && ip->max > ip->min)\r
+ {\r
+ ip->realquota=ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20));\r
+ if( ip->keyword->data_limit \r
+ and not ip->fixedprio \r
+ and ip->traffic > ip->realquota )\r
+ {\r
+ if(group_rate < ip->max)\r
+ {\r
+ ip->max = group_rate;\r
+ }\r
+ group_rate+=magic_treshold;\r
+ ip->prio=lowest_priority;\r
+ if(ip->prio<highest_priority+2)\r
+ {\r
+ ip->prio=highest_priority+2;\r
+ }\r
+ }\r
+ else\r
+ {\r
+ if( ip->keyword->data_prio \r
+ && !ip->fixedprio \r
+ && ( ip->traffic>ip->credit\r
+ + (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20))) )\r
+ {\r
+ ip->prio=priority_sequence--;\r
+ if(ip->prio<highest_priority+1)\r
+ {\r
+ ip->prio=highest_priority+1;\r
+ }\r
+ }\r
+ \r
+ if(credit_file)\r
+ {\r
+ unsigned long long lcredit=0;\r
+ \r
+ if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic)\r
+ {\r
+ lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;\r
+ }\r
+ fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);\r
+ }\r
+ }\r
+ } \r
+ }\r
+ }\r
+ if(credit_file)\r
+ {\r
+ fclose(credit_file);\r
+ }\r
+ }\r
+\r
+ if(just_preview)\r
+ {\r
+ if(start_shaping || stop_shaping || reduce_ceil)\r
+ {\r
+ printf("Reading %s and applying Fair Use Policy rules ... \n", classmap);\r
+ parse(classmap)\r
+ {\r
+ ptr=strchr(_,' ');\r
+ if(ptr)\r
+ {\r
+ *ptr=0;\r
+ ptr++;\r
+ if_exists(ip,ips,eq(ip->addr,_))\r
+ {\r
+ ip->mark=atoi(ptr);\r
+ if(ip->max < ip->desired || stop_shaping || reduce_ceil) /* apply or disable FUP limit immediately.... */\r
+ {\r
+ if(stop_shaping)\r
+ {\r
+ ip->max = ip->desired;\r
+ printf("Removing limit for %-22s %-16s %04d ", ip->name, ip->addr, ip->mark); \r
+ }\r
+ else\r
+ {\r
+ printf("Applying limit for %-22s %-16s %04d ", ip->name, ip->addr, ip->mark);\r
+ if(reduce_ceil)\r
+ {\r
+ ip->max = ip->min + (ip->desired-ip->min)/reduce_ceil;\r
+ }\r
+ }\r
+ printf("(down: %dk-%dk ", ip->min, ip->max); \r
+ sprintf(str, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", \r
+ tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);\r
+ safe_run(str);\r
+ printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), \r
+ (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));\r
+ sprintf(str,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
+ tc, wan, ip->group, ip->mark,\r
+ (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),\r
+ (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);\r
+ safe_run(str);\r
+ }\r
+ }\r
+ }\r
+ }\r
+ fail\r
+ { \r
+ perror(classmap);\r
+ puts("Warning - classmap file not fund, just generating preview ...");\r
+ start_shaping=FALSE;\r
+ stop_shaping=FALSE;\r
+ }\r
+ done; /* ugly macro end */\r
+ }\r
+ html=preview;\r
+ json_traffic=json_preview;\r
+ }\r
+\r
+ if(!dry_run && !just_flush)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Writing json traffic overview %s ... ", json_traffic);\r
+ /*-----------------------------------------------------------------*/\r
+ write_json_traffic(json_traffic);\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Writing statistics into HTML page %s ...\n", html);\r
+ /*-----------------------------------------------------------------*/\r
+ write_htmlandlogs(html, d, total, just_preview);\r
+ }\r
+\r
+ if(just_preview)\r
+ {\r
+ char swchar='p';\r
+ if(start_shaping)\r
+ {\r
+ swchar='s';\r
+ }\r
+ else if(reduce_ceil)\r
+ {\r
+ swchar='0'+reduce_ceil; /* -2, -4 */\r
+ }\r
+ else if(stop_shaping)\r
+ {\r
+ swchar='q';\r
+ }\r
+\r
+ printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar);\r
+ exit(0);\r
+ } \r
+\r
+ i=0;\r
+#ifdef DEBUG\r
+ printf("%-22s %-15s mark\n","name","ip");\r
+#endif\r
+\r
+ printf("Writing %s", classmap); \r
+ f = fopen(classmap, "w"); \r
+ if(f < 0)\r
+ {\r
+ perror(classmap);\r
+ }\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf(" + generating iptables and tc classes ... ");\r
+ /*-----------------------------------------------------------------*/\r
+\r
+ for_each(ip, ips) if(ip->mark > 0) /* works only for IPv4 so far */\r
+ {\r
+ if(idxs)\r
+ {\r
+ char *buf;\r
+ duplicate(ip->addr,buf);\r
+ if(ip->v6)\r
+ {\r
+ buf=index6_id(ip->addr,64-idxtable_bitmask1);\r
+ }\r
+ else\r
+ {\r
+ buf=index_id(ip->addr,32-idxtable_bitmask1);\r
+ }\r
+ \r
+ string(chain_forward,6+strlen(buf));\r
+ strcpy(chain_forward,"forw_");\r
+ strcat(chain_forward,buf);\r
+\r
+ string(chain_postrouting,6+strlen(buf));\r
+ strcpy(chain_postrouting,"post_");\r
+ strcat(chain_postrouting,buf);\r
+ \r
+ free(buf);\r
+ }\r
+ else\r
+ {\r
+ chain_forward="FORWARD";\r
+ chain_postrouting="POSTROUTING";\r
+ }\r
+\r
+#ifdef DEBUG\r
+ printf("%-22s %-16s %04d ", ip->name, ip->addr, ip->mark); \r
+#endif\r
+\r
+ /* -------------------------------------------------------- mark download */\r
+ \r
+ sprintf(str, "-A %s -d %s/%d -o %s -j %s%d",\r
+ chain_postrouting, ip->addr, 32*(1+ip->v6), lan, mark_iptables, ip->mark);\r
+ /* -m limit --limit 1/s */ \r
+ iptables_save_line(str, ip->v6);\r
+\r
+ if(qos_proxy)\r
+ {\r
+ sprintf(str, "-A %s -s %s -p tcp --sport %d -d %s/%d -o %s -j %s%d",\r
+ chain_postrouting, proxy_ip, proxy_port, ip->addr, 32*(1+ip->v6), lan, mark_iptables, ip->mark);\r
+ iptables_save_line(str, ip->v6);\r
+ }\r
+\r
+ sprintf(str, "-A %s -d %s/%d -o %s -j ACCEPT",\r
+ chain_postrouting, ip->addr, 32*(1+ip->v6), lan);\r
+ iptables_save_line(str, ip->v6);\r
+\r
+ /* -------------------------------------------------------- mark upload */\r
+ sprintf(str, "-A %s -s %s/%d -o %s -j %s%d", \r
+ chain_forward, ip->addr, 32*(1+ip->v6), wan, mark_iptables, ip->mark);\r
+ iptables_save_line(str, ip->v6);\r
+\r
+ sprintf(str, "-A %s -s %s/%d -o %s -j ACCEPT",\r
+ chain_forward, ip->addr, 32*(1+ip->v6), wan);\r
+ iptables_save_line(str, ip->v6);\r
+\r
+ if(ip->min)\r
+ {\r
+ /* -------------------------------------------------------- download class */\r
+#ifdef DEBUG\r
+ printf("(down: %dk-%dk ", ip->min, ip->max); \r
+#endif\r
+\r
+ sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", \r
+ tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);\r
+ safe_run(str);\r
+\r
+ if(strcmpi(ip->keyword->leaf_discipline, "none"))\r
+ {\r
+ sprintf(str, "%s qdisc add dev %s parent 1:%d handle %d %s", \r
+ tc, lan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/\r
+ safe_run(str);\r
+ }\r
+\r
+ if(filter_type == 1)\r
+ {\r
+ sprintf(str, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",\r
+ tc, lan, ip->mark, ip->mark);\r
+ safe_run(str);\r
+ }\r
+\r
+ /* -------------------------------------------------------- upload class */\r
+#ifdef DEBUG\r
+ printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), \r
+ (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));\r
+#endif\r
+\r
+ sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
+ tc, wan, ip->group, ip->mark,\r
+ (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),\r
+ (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);\r
+ safe_run(str);\r
+ \r
+ if(strcmpi(ip->keyword->leaf_discipline, "none"))\r
+ {\r
+ sprintf(str, "%s qdisc add dev %s parent 1:%d handle %d %s",\r
+ tc, wan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/\r
+ safe_run(str);\r
+ } \r
+\r
+ if(filter_type == 1)\r
+ {\r
+ sprintf(str, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",\r
+ tc, wan, ip->mark, ip->mark);\r
+ safe_run(str);\r
+ }\r
+ \r
+ if(f > 0)\r
+ {\r
+ fprintf(f, "%s %d\n", ip->addr, ip->mark);\r
+ }\r
+ }\r
+ else\r
+ {\r
+#ifdef DEBUG\r
+ printf("(sharing %s)\n", ip->sharing);\r
+#endif\r
+ }\r
+ i++;\r
+ }\r
+ if(f > 0)\r
+ {\r
+ puts("done.");\r
+ fclose(f);\r
+ }\r
+ \r
+ if(idxs)\r
+ {\r
+ chain_forward = "forw_common";\r
+ chain_postrouting = "post_common";\r
+ }\r
+ else\r
+ {\r
+ chain_forward = "FORWARD";\r
+ chain_postrouting = "POSTROUTING";\r
+ }\r
+\r
+ if(free_min)\r
+ {\r
+ final_chain = "ACCEPT";\r
+ }\r
+\r
+ if(qos_proxy)\r
+ {\r
+ if(free_min) \r
+ {\r
+ sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s%d",\r
+ chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables, 3);\r
+ iptables_save_line(str, FALSE); /* only for IPv4 */\r
+ }\r
+ sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s",\r
+ chain_postrouting,proxy_ip,proxy_port,lan,final_chain);\r
+ iptables_save_line(str, FALSE); /* only for IPv4 */\r
+ }\r
+\r
+ if(free_min)\r
+ {\r
+ sprintf(str, "-A %s -o %s -j %s%d",\r
+ chain_postrouting, lan, mark_iptables, 3);\r
+ iptables_save_line(str, FALSE); /* only for IPv4 */\r
+ }\r
+\r
+ sprintf(str,"-A %s -o %s -j %s", chain_postrouting, lan, final_chain);\r
+ iptables_save_line(str, FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ sprintf(str,"-A %s -o %s -j %s", chain_postrouting, lan, final_chain);\r
+ iptables_save_line(str, TRUE);\r
+ }\r
+\r
+ if(free_min)\r
+ {\r
+ sprintf(str,"-A %s -o %s -j %s%d", chain_forward, wan, mark_iptables, 3);\r
+ iptables_save_line(str, FALSE); /* only for IPv4 */\r
+ }\r
+\r
+ sprintf(str,"-A %s -o %s -j %s", chain_forward, wan, final_chain);\r
+ iptables_save_line(str, FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ sprintf(str,"-A %s -o %s -j %s", chain_postrouting, lan, final_chain);\r
+ iptables_save_line(str, TRUE);\r
+ }\r
+\r
+ if(free_min) /* allocate free bandwith if it is not zero... */ \r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Generating free bandwith classes ...");\r
+ /*-----------------------------------------------------------------*/\r
+ sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
+ tc, lan, parent, free_min, free_max,burst, lowest_priority);\r
+ safe_run(str);\r
+ sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
+ tc, wan, parent, free_min, free_max, burst, lowest_priority);\r
+ safe_run(str);\r
+ /* tc SFQ */\r
+ if(strcmpi(qos_leaf, "none"))\r
+ {\r
+ sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s", tc, lan, qos_leaf);\r
+ safe_run(str);\r
+ \r
+ sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s", tc, wan, qos_leaf);\r
+ safe_run(str);\r
+ } \r
+ /* tc handle 1 fw flowid */\r
+ sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3", tc, lan);\r
+ safe_run(str);\r
+\r
+ sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3", tc, wan);\r
+ safe_run(str);\r
+ }\r
+ printf("Total IP count: %d\n", i);\r
+ run_iptables_restore();\r
+ if(log_file)\r
+ {\r
+ fclose(log_file);\r
+ }\r
+ return 0;\r
+ /* that's all folks, thank you for reading it all the way up to this point ;-) */\r
+ /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */\r
+}\r
GIT.Harvie.CZ / svn / Prometheus-QoS / .git / blobdiff