- /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
- /* Prometheus QoS - you can "steal fire" from your ISP */\r
-/* "fair-per-IP" quality of service (QoS) utility */\r
-/* requires Linux 2.4.x or 2.6.x with HTB support */\r
-/* Copyright(C) 2005-2008 Michael Polak (xChaos) */\r
-/* iptables-restore support Copyright(C) 2007-2008 ludva */\r
-/* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */\r
-/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
-\r
-/* Modified by: xChaos, 20120511\r
+/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
+/* Prometheus QoS - you can "steal fire" from your ISP */\r
+/* "fair-per-IP" quality of service (QoS) utility */\r
+/* requires Linux 2.4.x or 2.6.x with HTB support */\r
+/* Copyright(C) 2005-2017 Michael Polak, Arachne Aerospace */\r
+/* iptables-restore support Copyright(C) 2007-2008 ludva */\r
+/* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */\r
+/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
+\r
+/* Modified by: xChaos, 20171012\r
ludva, 20080415\r
\r
Prometheus QoS is free software; you can redistribute it and/or\r
\r
GNU General Public License is located in file COPYING */\r
\r
-#define STRLEN 256\r
-#define FIRSTGROUPID 1024\r
-#define FIRSTIPCLASS 2048\r
-#undef DEBUG\r
-\r
#include "cll1-0.6.2.h"\r
+#include "ipstruct.h"\r
\r
-const char *version = "0.8.3-c";\r
+const char *version = "0.9.0-a";\r
\r
-/* Version numbers: 0.8.3 is development releases ("beta"), 0.8.4 will be "stable" */\r
-/* Debian(RPM) package versions/patchlevels: 0.7.9-2, 0.8.0-1, 0.8.0-2, etc. */\r
-/* C source code development versions ("beta"): 0.7.9-a, 0.8.1-b, etc. */\r
-/* C source code release versions: 0.8.0, 0.8.2, 0.8.4, etc. */\r
+/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
+/* Versions: 0.9.0 is development release, 1.0 will be "stable" */\r
+/* Official Trac URL: https://dev.arachne.cz/svn/prometheus */\r
+/* Official SVN URL: https://dev.arachne.cz/repos/prometheus */\r
+/* BTC donations account: 19rriLx8vR19wGefPaMhakqnCYNYwjLvxq */\r
+/* CZK donations account: 2900242944/2010 (transparent account) */\r
+/* Warning: unofficial Github mirror is not supported by author! */\r
+/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */\r
\r
-const char *stats_html_signature = "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2012 Michael Polak, <a href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";\r
+const char *stats_html_signature = "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2017 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";\r
+\r
+#define STRLEN 512\r
+#undef DEBUG\r
\r
/* ======= All path names are defined here (for RPM patch) ======= */\r
\r
-char *tc = "/sbin/tc"; /* requires tc with HTB support */\r
-char *iptables = "/sbin/iptables"; /* requires iptables utility */\r
-char *iptablessave = "/sbin/iptables-save"; /* not yet required */\r
-char *iptablesrestore = "/sbin/iptables-restore"; /* requires iptables-restore */\r
-const char *ls = "/bin/ls"; /* this is not user configurable :-) */\r
+const char *tc = "/sbin/tc"; /* requires tc with HTB support */\r
+const char *iptables = "/sbin/iptables"; /* requires iptables utility */\r
+const char *ip6tables = "/sbin/ip6tables"; /* requires iptables utility */\r
+const char *iptablessave = "/sbin/iptables-save"; /* not yet required */\r
+const char *iptablesrestore = "/sbin/iptables-restore"; /* requires iptables-restore */\r
+const char *ip6tablessave = "/sbin/ip6tables-save"; /* not yet required */\r
+const char *ip6tablesrestore = "/sbin/ip6tables-restore"; /* requires iptables-restore */\r
+const char *ls = "/bin/ls"; /* this is not user configurable :-) */\r
\r
char *config = "/etc/prometheus/prometheus.conf"; /* main configuration file */\r
char *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */\r
-\r
+char *macrosfile = "/etc/prometheus/prometheus.macros"; /* rewrite rules for most common tariffs */\r
+char *upstreamfile = "/etc/prometheus/upstream.interfaces"; /* list of interfaces to manage */\r
+char *downstreamfile = "/etc/prometheus/downstream.interfaces"; /* list of interfaces to manage */\r
char *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/\r
+char *ip6tablesfile = "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/\r
char *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */\r
-char *html = "/var/www/traffic.html"; /* hall of fame filename */\r
-char *preview = "/var/www/preview.html"; /* hall of fame preview */\r
+char *classmap = "/var/lib/misc/prometheus.classes"; /* credit log file */\r
+char *html = "/var/www/traffic.html"; /* hall of fame - html version */\r
+char *preview = "/var/www/preview.html"; /* hall of fame preview - html version */\r
+char *json_traffic = "/var/www/logs/traffic.json"; /* hall of fame - json version */\r
+char *json_preview = "/var/www/logs/preview.json"; /* hall of fame preview - json version */\r
char *cmdlog = "/var/log/prometheuslog"; /* command log filename */\r
char *log_dir = "/var/www/logs/"; /* log directory pathname, ended with slash */\r
char *log_url = "/logs/"; /* log directory relative URI prefix (partial URL) */\r
\r
char *jquery_url = "http://code.jquery.com/jquery-latest.js";\r
char *lms_url = "/lms/?m=customerinfo&id=";\r
-int use_jquery_popups = 1;\r
+int use_jquery_popups = TRUE;\r
int row_odd_even = 0; /*<tr class="odd/even"> */\r
-\r
-const char *tr_odd_even(void)\r
-{\r
- row_odd_even = 1 - row_odd_even;\r
- if(row_odd_even)\r
- {\r
- return "<tr class=\"even\">\n";\r
- }\r
- else\r
- {\r
- return "<tr class=\"odd\">\n";\r
- }\r
-}\r
-\r
-/* ======= Help screen is hopefuly self-documenting part of code :-) ======= */\r
-\r
-void help(void)\r
-{\r
- puts("Command line switches:\n\\r
-\n\\r
--?, --help this help screen\n\\r
--v, --version show Version number of this utility and exit\n\\r
--c filename force alternative /etc/prometheus.Conf filename\n\\r
--h filename force alternative /etc/Hosts filename (overrides hosts keyword)\n\\r
--f just Flush iptables and tc classes and exit (stop shaping)\n\\r
--9 emergency iptables flush (do not read data transfer statistics)\n\\r
--p just generate Preview of data transfer statistics and exit\n\\r
--d Dry run (preview tc and iptables commands on stdout)\n\\r
--r Run (reset all statistics and start shaping)\n\\r
--n run Now (start shaping without delay - overrides qos-free-delay keyword)\n\\r
--l Mmm YYYY generate HTML summary of traffic Logs (Mmm=Jan-Dec or Year, YYYY=year)\n\\r
--m generate HTML summary of traffic logs for yesterday's Month\n\\r
--y generate HTML summary of traffic logs for yesterday's Year\n");\r
-/* not yet implemented:\r
--s start shaping! (keep data transfer statistics - but apply shaping)\n\\r
-*/\r
-}\r
-\r
+ \r
/* === Configuraration file values defaults - stored in global variables ==== */\r
\r
int filter_type = 1; /*1 mark, 2 classify*/\r
+char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */\r
char *mark = "MARK";\r
char *mark_iptables = "MARK --set-mark ";\r
-int dry_run = 0; /* preview - use puts() instead of system() */\r
+int dry_run = FALSE; /* preview - use puts() instead of system() */\r
char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";\r
+char *ip6preamble = "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT\n-A FORWARD -s fe80::/10 -j ACCEPT\n-A FORWARD -d ff00::/8 -j ACCEPT\n-A POSTROUTING -s fe80::/10 -j ACCEPT\n-A POSTROUTING -d ff00::/8 -j ACCEPT";\r
FILE *iptables_file = NULL;\r
-int enable_credit = 1; /* enable credit file */\r
-int use_credit = 0; /* use credit file (if enabled)*/\r
+FILE *ip6tables_file = NULL;\r
+int enable_credit = TRUE; /* enable credit file */\r
+int use_credit = FALSE; /* use credit file (if enabled)*/\r
char *title = "Hall of Fame - Greatest Suckers"; /* hall of fame title */\r
-int hall_of_fame = 1; /* enable hall of fame */\r
-char *lan = "eth0"; /* LAN interface */\r
-char *lan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */\r
-char *wan = "eth1"; /* WAN/ISP interface */\r
-char *wan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */\r
+int hall_of_fame = TRUE; /* enable hall of fame */\r
+char *medium = "1000Mbit"; /* 10Mbit/100Mbit ethernet */\r
+//obsolete: char *lan = "eth0"; /* LAN interface */\r
+//obsolete: char *lan_medium = "1000Mbit"; /* 10Mbit/100Mbit ethernet */\r
+char *ip6prefix = NULL; /* Prefix for global /48 IPv6 subnet */\r
char *qos_leaf = "sfq perturb 5"; /* leaf discipline */\r
char *qos_free_zone = NULL; /* QoS free zone */\r
-int qos_proxy = 1; /* include proxy port to QoS */\r
-int found_lmsid = 0; /* show links to users in LMS information system */\r
-int include_upload = 1; /* upload+download=total traffic */\r
-char *proxy_ip = "192.168.1.1/32"; /* our IP with proxy port */\r
-int proxy_port = 3128; /* proxy port number */\r
-long long int line = 1024; /* WAN/ISP download in kbps */\r
-long long int up = 1024; /* WAN/ISP upload in kbps */\r
-int free_min = 32; /* minimum guaranted bandwidth for all undefined hosts */\r
-int free_max = 64; /* maximum allowed bandwidth for all undefined hosts */\r
+/* int qos_proxy = TRUE; include proxy port to QoS */\r
+int found_lmsid = FALSE; /* show links to users in LMS information system */\r
+int include_upload = TRUE; /* upload+download=total traffic */\r
+/* char *proxy_ip = "192.168.1.1/32"; our IP with proxy port */\r
+/* int proxy_port = 3128; proxy port number */\r
+//obsolete: long long int line = 1024; /* WAN/ISP download in kbps */\r
+//obsolete: long long int up = 1024; /* WAN/ISP upload in kbps */\r
+int free_min = 256; /* minimum guaranted bandwidth for all undefined hosts */\r
+int free_max = 512; /* maximum allowed bandwidth for all undefined hosts */\r
+int overlimit_min = 256; /* minimum guaranted bandwidth for all undefined hosts */\r
+int overlimit_max = 512; /* maximum allowed bandwidth for all undefined hosts */\r
int qos_free_delay = 0; /* seconds to sleep before applying new QoS rules */\r
int digital_divide = 2; /* controls digital divide weirdness ratio, 1...3 */ \r
-int max_nesting = 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */\r
+int max_nesting = 5; /* /include/uapi/linux/pkt_sched.h: #define TC_HTB_MAXDEPTH 8 [... - 3 parent classes] */\r
int htb_r2q = 256; /* should work for leaf values 512 kbps to 8 Mbps */\r
int burst = 8; /* HTB burst (in kbits) */\r
int burst_main = 64;\r
int burst_group = 32;\r
int magic_treshold = 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */\r
int keywordcount = 0;\r
-/* not yet implemented:\r
-int fixed_packets = 0; maximum number of pps per IP address (not class!) \r
-int packet_limit = 5; maximum number of pps to htn CEIL, not rate !!! \r
-*/\r
+int class_count = 0;\r
+int ip_count = 0;\r
FILE *log_file = NULL;\r
char *kwd = "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */\r
\r
const int highest_priority = 0; /* highest HTB priority (HTB built-in value is 0) */\r
-const int lowest_priority = 7; /* lowest HTB priority (HTB built-in value is 7) */\r
+const int lowest_priority = 7; /* lowest HTB priority /include/uapi/linux/pkt_sched.h: #define TC_HTB_NUMPRIO 8 */\r
const int idxtable_treshold1 = 24; /* this is no longer configurable */\r
const int idxtable_treshold2 = 12; /* this is no longer configurable */\r
const int idxtable_bitmask1 = 3; /* this is no longer configurable */\r
const int idxtable_bitmask2 = 3; /* this is no longer configurable */\r
\r
-/* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */\r
+struct IP *ips = NULL, *networks = NULL, *ip, *sharedip;\r
+struct Group *groups = NULL, *group;\r
+struct Keyword *keyword, *defaultkeyword=NULL, *keywords = NULL;\r
+struct Macro *macro, *macros = NULL;\r
+struct Index *idxs = NULL, *idx, *metaindex;\r
+struct Interface *interfaces = NULL, *interface;\r
\r
-struct IP\r
-{\r
- char *addr;\r
- char *name;\r
- char *sharing;\r
- int min;\r
- int desired;\r
- int max;\r
- int mark;\r
- int prio;\r
- int fixedprio;\r
- int group;\r
- int lmsid;\r
- unsigned long long direct;\r
- unsigned long long proxy;\r
- unsigned long long upload;\r
- unsigned long long traffic;\r
- unsigned long long credit;\r
- unsigned long pktsup;\r
- unsigned long pktsdown;\r
- struct Keyword *keyword;\r
- list(IP);\r
-} *ips=NULL, *ip, *sharedip;\r
-\r
-struct Group\r
-{\r
- int min;\r
- int count;\r
- int desired;\r
- int id;\r
- list(Group);\r
-} *groups=NULL, *group;\r
-\r
-struct Index\r
-{\r
- char *addr;\r
- char *id;\r
- struct Index *parent;\r
- int bitmask;\r
- int children;\r
- list(Index);\r
-} *idxs=NULL, *idx, *metaindex;\r
-\r
-struct Keyword\r
-{\r
- char *key;\r
- \r
- int asymetry_ratio; /* ratio for ADSL-like upload */\r
- int asymetry_fixed; /* fixed treshold for ADSL-like upload */\r
- int data_limit; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */\r
- int data_prio; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */\r
- long fixed_limit; /* fixed data limit for setting lower HTB ceil */\r
- long fixed_prio; /* fixed data lmit for setting lower HTB prio */\r
- int reserve_min; /* bonus for nominal HTB rate bandwidth (in kbps) */\r
- int reserve_max; /* malus for nominal HTB ceil (in kbps) */\r
-// int divide_max; /* relative malus: new_ceil=rate+(old_ceil-rate)/divide_max */\r
-// int htb_ceil_bonus_divide; /* relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide */\r
- int default_prio; /* default HTB priority for this keyword */\r
- char *html_color;\r
- int ip_count;\r
- char *leaf_discipline;\r
- \r
- list(Keyword);\r
-} *keyword,*defaultkeyword=NULL,*keywords=NULL;\r
+#define FREE_CLASS 3\r
+#define OVERLIMIT_CLASS 4\r
\r
-/* Damned, this must be object oriented! This looks almost like constructor ;-) */\r
+void help(void);\r
+/* implemented in help.c */
\r
-void TheIP(void)\r
-{\r
- create(ip,IP);\r
- ip->name = "";\r
- ip->addr = "";\r
- ip->sharing = NULL;\r
- ip->prio = highest_priority+1;\r
- ip->lmsid = -1;\r
- ip->fixedprio = \\r
- ip->mark = \\r
- ip->min = \\r
- ip->max = \\r
- ip->desired = \\r
- ip->credit = \\r
- ip->upload = \\r
- ip->proxy = \\r
- ip->direct = \\r
- ip->traffic = \\r
- ip->pktsup = \\r
- ip->pktsdown = 0;\r
- ip->keyword = keywords;\r
- push(ip,ips);\r
-}\r
+void get_traffic_statistics(const char *whichiptables, int ipv6);\r
+/* implemented in parseiptables.c */\r
\r
-/* ====== iptables indexes are used to reduce complexity to log8(N) ===== */\r
+void parse_ip_log(int argc, char **argv);\r
+/* implemented in parselog.c */\r
\r
-char *very_ugly_ipv4_code(char *inip,int bitmask,int format_as_chainname)\r
-{\r
- /* warning: this function was debugged only for bitmask values 20,24,28 !!!*/\r
- int dot=0, n;\r
- char *ip,*outip,*outptr,*fmt;\r
+void parse_hosts(char *hosts);\r
+/* implemented in parsehosts.c */\r
\r
- duplicate(inip,ip);\r
- /* debug printf("(%s,%d) -> ",ip,bitmask); */\r
+void write_json_traffic(char *json);\r
+/* implemented in json.c */\r
\r
- if(ip && *ip && bitmask>=0 && bitmask<=32)\r
- {\r
- string(outip,strlen(ip)+10); /*fuck unicode? assertion: 10>strlen("_%d_%d") */\r
- }\r
- else \r
+void write_htmlandlogs(char *html, char *d, int total, int just_preview);\r
+/* implemented in htmlandlogs.c */\r
+\r
+void analyse_topology(char *traceroute);\r
+/* implemented in networks.c */\r
+\r
+char *parse_datafile_line(char *str);\r
+/* implemented in utils.c */\r
+\r
+time_t get_mtime(const char *path);\r
+/* implemented in utils.c */\r
+\r
+const char *tr_odd_even(void)\r
+{\r
+ row_odd_even = 1 - row_odd_even;\r
+ if(row_odd_even)\r
{\r
- /* should never exit here */\r
- return "undefined";\r
+ return "<tr class=\"even\">\n";\r
}\r
- outptr=outip;\r
- while(ip && *ip)\r
+ else\r
{\r
- if(*ip=='.')\r
- {\r
- if(dot<(bitmask/8-1)) \r
- {\r
- if(format_as_chainname)\r
- {\r
- *outptr='_';\r
- }\r
- else\r
- {\r
- *outptr='.';\r
- }\r
- outptr++;\r
- dot++;\r
- }\r
- else\r
- {\r
- char *cutdot=strchr(ip+1,'.'); /*for bitmask<24*/ \r
- if(cutdot)\r
- {\r
- *cutdot = '\0';\r
- }\r
- \r
- if(format_as_chainname)\r
- {\r
- fmt = "_%d_%d";\r
- }\r
- else\r
- {\r
- fmt = ".%d";\r
- }\r
- \r
- if(bitmask%8)\r
- {\r
- n = atoi(ip+1)-atoi(ip+1)%(1<<(8-bitmask%8));\r
- }\r
- else\r
- {\r
- n = 0;\r
- }\r
-\r
- /*debug printf("%d/%d => [_%d_%d]\n",atoi(ip+1),bitmask,n,bitmask); */\r
- sprintf(outptr,fmt,n,bitmask);\r
- if(!format_as_chainname)\r
- {\r
- while(bitmask<24)\r
- {\r
- strcat(outip,".0");\r
- bitmask+=8;\r
- }\r
- }\r
- /* debug printf("[%s]\n",outip); */\r
- return outip;\r
- }\r
- }\r
- else \r
- {\r
- *outptr=*ip;\r
- outptr++;\r
- }\r
- ip++;\r
+ return "<tr class=\"odd\">\n";\r
}\r
- /*should never exit here*/\r
- *outptr='\0';\r
- return outip;\r
}\r
\r
-char *hash_id(char *ip,int bitmask)\r
-{ \r
- return very_ugly_ipv4_code(ip,bitmask,1);\r
-}\r
\r
-char *subnet_id(char *ip,int bitmask)\r
-{\r
- return very_ugly_ipv4_code(ip,bitmask,0);\r
-}\r
+/* ====== iptables indexes are used to reduce complexity to log8(N) ===== */\r
\r
-/* ================= Let's parse configuration file here =================== */\r
+char *index_id(char *ip, int bitmask);\r
+/* function implemented in ipv4subnets.c */\r
+\r
+char *subnet_id(char *ip, int bitmask);\r
+/* function implemented in ipv4subnets.c */\r
+\r
+char *index6_id(char *ip, int bitmask);\r
+/* function implemented in ipv6subnets.c */\r
+\r
+char *subnet6_id(char *ip, int bitmask);\r
+/* function implemented in ipv6subnets.c */\r
+\r
+/* ================= Let's parse configuration file here ================ */\r
\r
void reject_config_and_exit(char *filename)\r
{\r
printf("%s ",kwd);\r
\r
create(keyword,Keyword);\r
- keyword->key=kwd;\r
- keyword->asymetry_ratio=1; /* ratio for ADSL-like upload */\r
- keyword->asymetry_fixed=0; /* fixed treshold for ADSL-like upload */\r
- keyword->data_limit=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */\r
- keyword->data_prio=4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */\r
- keyword->fixed_limit=0; /* fixed data limit for setting lower HTB ceil */\r
- keyword->fixed_prio=0; /* fixed data limit for setting lower HTB prio */\r
- keyword->reserve_min=8; /* bonus for nominal HTB rate bandwidth (in kbps) */\r
- keyword->reserve_max=0; /* malus for nominal HTB ceil (in kbps) */\r
- keyword->default_prio=highest_priority+1;\r
- keyword->html_color="000000";\r
- keyword->ip_count=0;\r
- keyword->leaf_discipline="";\r
-\r
- push(keyword,keywords);\r
- if(!defaultkeyword) defaultkeyword=keyword;\r
+ keyword->key = kwd;\r
+ keyword->asymetry_ratio = 1; /* ratio for ADSL-like upload */\r
+ keyword->asymetry_fixed = 0; /* fixed treshold for ADSL-like upload */\r
+ keyword->data_limit = 8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */\r
+ keyword->data_prio = 4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */\r
+ keyword->fixed_limit = 0; /* fixed data limit for setting lower HTB ceil */\r
+ keyword->fixed_prio = 0; /* fixed data limit for setting lower HTB prio */\r
+ keyword->reserve_min = 8; /* bonus for nominal HTB rate bandwidth (in kbps) */\r
+ keyword->reserve_max = 0; /* malus for nominal HTB ceil (in kbps) */\r
+ keyword->default_prio = highest_priority+1;\r
+ keyword->download_aggregation = keyword->upload_aggregation = 0; /* disable by default */\r
+ keyword->html_color = "000000";\r
+ keyword->ip_count = 0;\r
+ keyword->leaf_discipline = "";\r
+ keyword->allowed_avgmtu = 0;\r
+\r
+ push(keyword, keywords);\r
+ if(!defaultkeyword)\r
+ {\r
+ defaultkeyword = keyword;\r
+ }\r
keywordcount++;\r
\r
kwd=NULL;\r
{\r
char *tmptr=_; /* <---- l+1 ----> */\r
_+=l+1; /* via-prometheus-asymetry-ratio, etc. */\r
- ioption("asymetry-ratio",keyword->asymetry_ratio);\r
- ioption("asymetry-treshold",keyword->asymetry_fixed);\r
- ioption("magic-relative-limit",keyword->data_limit);\r
- ioption("magic-relative-prio",keyword->data_prio);\r
- loption("magic-fixed-limit",keyword->fixed_limit);\r
- loption("magic-fixed-prio",keyword->fixed_prio);\r
- ioption("htb-default-prio",keyword->default_prio);\r
- ioption("htb-rate-bonus",keyword->reserve_min);\r
- ioption("htb-ceil-malus",keyword->reserve_max);\r
- option("leaf-discipline",keyword->leaf_discipline);\r
- option("html-color",keyword->html_color);\r
+ foption("asymetry-ratio", keyword->asymetry_ratio);\r
+ ioption("asymetry-treshold", keyword->asymetry_fixed);\r
+ ioption("magic-relative-limit", keyword->data_limit);\r
+ ioption("magic-relative-prio", keyword->data_prio);\r
+ loption("magic-fixed-limit", keyword->fixed_limit);\r
+ loption("magic-fixed-prio", keyword->fixed_prio);\r
+ ioption("htb-default-prio", keyword->default_prio);\r
+ ioption("htb-rate-bonus", keyword->reserve_min);\r
+ ioption("htb-ceil-malus", keyword->reserve_max);\r
+ ioption("download-aggregation", keyword->download_aggregation);\r
+ ioption("upload-aggregation", keyword->upload_aggregation);\r
+ option("leaf-discipline", keyword->leaf_discipline);\r
+ option("html-color", keyword->html_color);\r
+ ioption("allowed-avgmtu" ,keyword->allowed_avgmtu);\r
_=tmptr;\r
\r
if(keyword->data_limit || keyword->fixed_limit || \r
\r
option("tc",tc);\r
option("iptables",iptables);\r
- option("iptables-save",iptablessave); /* new */\r
- option("iptables-restore",iptablesrestore); /* new */\r
- option("iptables-file",iptablesfile); /* new */\r
+ option("iptables-save",iptablessave);\r
+ option("iptables-restore",iptablesrestore);\r
+ option("ip6tables",ip6tables);\r
+ option("ip6tables-save",ip6tablessave);\r
+ option("ip6tables-restore",ip6tablesrestore);\r
+ option("iptables-in-filename",iptablesfile);\r
+ option("ip6tables-in-filename",ip6tablesfile);\r
option("hosts",hosts);\r
- option("lan-interface",lan);\r
- option("wan-interface",wan);\r
- option("lan-medium",lan_medium);\r
- option("wan-medium",wan_medium);\r
- lloption("wan-download",line);\r
- lloption("wan-upload",up);\r
+ option("downstream-interfaces-list-filename",downstreamfile);\r
+ option("upstream-interfaces-list-filename",upstreamfile);\r
+ option("macros-filename",macrosfile);\r
+ option("ip6-prefix",ip6prefix);\r
+ option("medium",medium);\r
ioption("hall-of-fame-enable",hall_of_fame);\r
+ ioption("digital-divide-weirdness-ratio",digital_divide);\r
option("hall-of-fame-title",title);\r
option("hall-of-fame-filename",html);\r
+ option("json-filename",json_traffic);\r
option("hall-of-fame-preview",preview);\r
+ option("json-preview",json_preview);\r
option("log-filename",cmdlog);\r
option("credit-filename",credit);\r
+ option("classmap-filename",classmap);\r
ioption("credit-enable",enable_credit);\r
option("log-traffic-directory",log_dir);\r
option("log-traffic-html-directory",html_log_dir);\r
ioption("use-jquery-popups",use_jquery_popups);\r
option("qos-free-zone",qos_free_zone);\r
ioption("qos-free-delay",qos_free_delay);\r
- ioption("qos-proxy-enable",qos_proxy);\r
- option("qos-proxy-ip",proxy_ip);\r
+/* ioption("qos-proxy-enable",qos_proxy); */\r
+/* option("qos-proxy-ip",proxy_ip);*/\r
option("htb-leaf-discipline",qos_leaf);\r
- ioption("qos-proxy-port",proxy_port);\r
+/* ioption("qos-proxy-port",proxy_port); */\r
ioption("free-rate",free_min);\r
ioption("free-ceil",free_max);\r
+ ioption("overlimit-rate",overlimit_min);\r
+ ioption("overlimit-ceil",overlimit_max);\r
ioption("htb-burst",burst);\r
ioption("htb-burst-main",burst_main);\r
ioption("htb-burst-group",burst_group);\r
perror(config_filename);\r
puts("Warning - using built-in defaults instead ...");\r
}\r
- done;\r
+ done; /* ugly macro end */\r
printf("\n");\r
\r
- /*leaf discipline for keywords*/\r
+ /* leaf discipline for keywords */\r
for_each(keyword,keywords)\r
{\r
- if(!strcmpi(keyword->leaf_discipline, ""))\r
- {\r
- keyword->leaf_discipline = qos_leaf;\r
- }\r
+ if(!strcmpi(keyword->leaf_discipline, ""))\r
+ {\r
+ keyword->leaf_discipline = qos_leaf;\r
+ }\r
}\r
\r
if(strcmpi(cnf, "mark"))\r
mark = "MARK";\r
mark_iptables = "MARK --set-mark ";\r
}\r
-\r
- /* are supplied values meaningful ?*/\r
- if(line<=0 || up<=0)\r
- {\r
- puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");\r
- reject_config_and_exit(config_filename);\r
- }\r
}\r
\r
-/* ===================== traffic analyser - uses iptables ================ */ \r
-\r
-void get_traffic_statistics(void)\r
-{\r
- char *str,*cmd;\r
- int downloadflag=0;\r
-\r
- textfile(Pipe,str) *line,*lines=NULL;\r
- string(str,STRLEN);\r
- string(cmd,STRLEN);\r
-\r
- sprintf(cmd,"%s -L -v -x -n -t mangle",iptables);\r
- shell(cmd);\r
- input(str,STRLEN)\r
- {\r
- create(line,Pipe);\r
- line->str=str;\r
- string(str,STRLEN);\r
- append(line,lines);\r
- }\r
-\r
- for_each(line,lines)\r
- {\r
- int col, accept=0,proxyflag=0,valid=1,setchainname=0,commonflag=0; \r
- unsigned long long traffic=0;\r
- unsigned long pkts=0;\r
- char *ipaddr=NULL,*ptr;\r
- \r
- /* debug puts(line->str); */\r
- valid_columns(ptr,line->str,' ',col) \r
- if(valid) switch(col)\r
- { \r
- case 1: if(eq(ptr,"Chain"))\r
- {\r
- setchainname=1;\r
- }\r
- else if(eq(ptr,"pkts")) \r
- {\r
- valid=0;\r
- }\r
- else\r
- {\r
- sscanf(ptr,"%lu",&pkts); \r
- }\r
- break;\r
- case 2: if(setchainname)\r
- {\r
- if(!strncmp(ptr,"post_",5) || eq(ptr,"POSTROUTING"))\r
- {\r
- downloadflag = 1; \r
- }\r
- else \r
- {\r
- if(!strncmp(ptr,"forw_",5) || eq(ptr,"FORWARD"))\r
- {\r
- downloadflag = 0;\r
- }\r
- } \r
- if(eq(ptr,"post_common") || eq(ptr,"forw_common"))\r
- {\r
- commonflag = 1;\r
- }\r
- }\r
- else\r
- {\r
- sscanf(ptr,"%Lu",&traffic); \r
- traffic += (1<<19);\r
- traffic >>= 20;\r
- }\r
- break;\r
- case 3: if((strncmp(ptr,"post_",5) && strncmp(ptr,"forw_",5)) || commonflag)\r
- {\r
- accept=eq(ptr,mark);\r
- }\r
- /*if(filter_type==1) accept=eq(ptr,"MARK"); else accept=eq(ptr,"CLASSIFY");*/\r
- break;\r
- case 8: if(downloadflag)\r
- { \r
- if(strstr(proxy_ip,ptr))\r
- {\r
- proxyflag=1; \r
- }\r
- }\r
- else\r
- {\r
- ipaddr=ptr; \r
- }\r
- break;\r
- case 9: if(downloadflag)ipaddr=ptr;break;\r
- }\r
- \r
- if(accept && traffic>0 && ipaddr)\r
- {\r
- if(proxyflag)\r
- {\r
- printf("(proxy) ");\r
- }\r
- else if(!downloadflag)\r
- {\r
- printf("(upload) ");\r
- }\r
- printf("IP %s: %Lu M (%ld pkts)\n", ipaddr, traffic, pkts);\r
-\r
- if_exists(ip,ips,eq(ip->addr,ipaddr)); \r
- else \r
- {\r
- TheIP();\r
- ip->addr=ipaddr;\r
- if(eq(ip->addr,"0.0.0.0/0"))\r
- {\r
- ip->name="(unregistered)";\r
- ip->min=free_min;\r
- ip->max=ip->desired=free_max;\r
- }\r
- }\r
- \r
- if(downloadflag)\r
- {\r
- if(proxyflag)\r
- {\r
- ip->proxy=traffic;\r
- }\r
- else\r
- {\r
- ip->traffic+=traffic;\r
- }\r
- ip->direct=ip->traffic-ip->upload-ip->proxy;\r
- ip->pktsdown=pkts;\r
- }\r
- else\r
- {\r
- ip->upload=traffic;\r
- ip->pktsup=pkts;\r
- if(include_upload)\r
- {\r
- ip->traffic+=traffic;\r
- }\r
- else \r
- {\r
- if(traffic>ip->traffic)\r
- {\r
- ip->traffic=traffic; \r
- }\r
- }\r
- }\r
- } \r
- }\r
-\r
- free(cmd);\r
-}\r
\r
/* ========== This function executes, logs OR ALSO prints command ========== */\r
\r
}\r
}\r
\r
-void save_line(char *line)\r
+void iptables_save_line(char *line, int ipv6)\r
{\r
- fprintf(iptables_file,"%s\n",line);\r
+ if(ipv6)\r
+ {\r
+ fprintf(ip6tables_file,"%s\n",line);\r
+ }\r
+ else\r
+ {\r
+ fprintf(iptables_file,"%s\n",line);\r
+ }\r
}\r
\r
-void run_restore(void)\r
+void run_iptables_restore(void)\r
{\r
char *restor;\r
- string(restor,STRLEN);\r
+ string(restor, STRLEN);\r
\r
/*-----------------------------------------------------------------*/\r
- printf("Running %s <%s ...\n",iptablesrestore,iptablesfile);\r
+ printf("Running %s <%s ...\n", iptablesrestore, iptablesfile);\r
/*-----------------------------------------------------------------*/\r
- \r
- save_line("COMMIT");\r
+\r
+ iptables_save_line("COMMIT", FALSE);\r
fclose(iptables_file);\r
if(dry_run) \r
{\r
{\r
printf("%s\n",_);\r
}\r
- done;\r
+ done; /* ugly macro end */\r
}\r
\r
sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);\r
safe_run(restor);\r
- \r
- free(restor);\r
-}\r
-\r
-/* == This function strips extra characters after IP address and stores it = */\r
-\r
-void parse_ip(char *str)\r
-{\r
- char *ptr,*ipaddr=NULL,*ipname=NULL,*lmsid=NULL;\r
-\r
- ptr=strchr(str,'{');\r
- if(ptr)\r
- {\r
- lmsid=++ptr;\r
- while(*ptr && *ptr!='}')\r
- {\r
- ptr++;\r
- }\r
- *ptr=0;\r
- }\r
- \r
- ptr=str;\r
- while(*ptr && *ptr!=' ' && *ptr!=9)\r
- {\r
- ptr++;\r
- }\r
- \r
- *ptr=0;\r
- ipaddr=str;\r
- ptr++;\r
- while(*ptr && (*ptr==' ' || *ptr==9))\r
- {\r
- ptr++;\r
- }\r
- ipname=ptr; \r
- while(*ptr && *ptr!=' ' && *ptr!=9)\r
- {\r
- ptr++;\r
- }\r
- *ptr=0;\r
-\r
- if_exists(ip,ips,eq(ip->addr,ipaddr));\r
- else\r
- {\r
- TheIP();\r
- }\r
- ip->addr=ipaddr;\r
- ip->name=ipname;\r
- if(lmsid)\r
- {\r
- ip->lmsid=atoi(lmsid);\r
- found_lmsid=1;\r
- }\r
-}\r
-\r
-char *parse_datafile_line(char *str)\r
-{\r
- char *ptr=strchr(str,' ');\r
-\r
- if(ptr)\r
- {\r
- *ptr=0;\r
- ptr++;\r
- return ptr;\r
- } \r
- else \r
- {\r
- return NULL;\r
- }\r
-}\r
-\r
-struct IpLog\r
-{\r
- char *name;\r
- long traffic;\r
- long guaranted;\r
- int i;\r
- int lmsid;\r
- long l;\r
- list(IpLog);\r
-} *iplog,*iplogs;\r
-\r
-void parse_ip_log(int argc, char **argv) \r
-{\r
- char *month, *year, *str, *name="(undefined)", *ptr, *ptr2, *filename;\r
- long traffic=0l, traffic_month, total=0, guaranted;\r
- int col, col2, y_ok, m_ok, accept_month, i=1, any_month=0, lmsid;\r
- char mstr[4], ystr[5];\r
- FILE *f; \r
- string(str,STRLEN);\r
- string(filename,STRLEN);\r
-\r
- if(argv[1][1]=='l') /* -l */\r
- {\r
- if(argc<4)\r
- {\r
- puts("Missing parameter(s)!\nUsage: prometheus -l Mmm YYYY (Mmm=Jan-Dec or Year, YYYY=year)");\r
- exit(-1);\r
- }\r
- else\r
- {\r
- month=argv[2];\r
- if(eq(month,"Year")) any_month=1;\r
- year=argv[3];\r
- }\r
- }\r
- else\r
- { \r
- time_t t = time(NULL) - 3600*24 ; /* yesterday's timestamp*/\r
- struct tm *timep = localtime(&t); \r
-\r
- if(argv[1][1]=='m') /* -m yestarday - month */\r
- {\r
- strftime(mstr, 4, "%b", timep);\r
- month=mstr;\r
- strftime(ystr, 5, "%Y", timep);\r
- year=ystr; \r
- }\r
- else /* -y yesterday - year */\r
- {\r
- month="Year";\r
- any_month=1;\r
- strftime(ystr, 5, "%Y", timep);\r
- year=ystr;\r
- }\r
- }\r
- printf("Analysing traffic for %s %s ...\n",month,year);\r
-\r
- /* sorry... next release of C<<1 header file will include for_path_files(name,path) { } macro */\r
- sprintf(str,"%s %s/",ls,log_dir);\r
- shell(str);\r
- input(str,STRLEN) \r
- {\r
- if(strstr(str,".log"))\r
- {\r
- ptr=strrchr(str,'\n');\r
- if(ptr) *ptr='\0';\r
- sprintf(filename,"%s/%s",log_dir,str);\r
- printf("Parsing %s ...",filename);\r
- accept_month=0;\r
- traffic_month=0;\r
- guaranted=0;\r
- lmsid=-1;\r
- parse(filename)\r
- {\r
- y_ok=m_ok=0; \r
- valid_columns(ptr,_,'\t',col) switch(col)\r
- {\r
- case 2: name = ptr;break;\r
- case 3: traffic = atol(ptr);break;\r
- /* column number - was 7, now 11...*/\r
- case 7:\r
- case 8:\r
- case 9:\r
- case 10:\r
- case 11: if(isalpha(*ptr)) /* character, not numeric string = date, just one*/\r
- {\r
- valid_columns(ptr2,ptr,' ',col2) switch(col2)\r
- {\r
- case 2: if(any_month || eq(ptr2,month)) m_ok = 1; break;\r
- case 5: if(eq(ptr2,year)) y_ok = 1; break;\r
- }\r
- }\r
- else\r
- {\r
- if(col == 7) guaranted = atol(ptr);\r
- if(col == 10) lmsid = atoi(ptr);\r
- }\r
- }\r
- \r
- if(y_ok && m_ok) \r
- {\r
- traffic_month += traffic;\r
- accept_month = 1;\r
- }\r
- }\r
- done;\r
\r
- if(accept_month)\r
- {\r
- create(iplog,IpLog);\r
- iplog->name = name;\r
- iplog->guaranted = guaranted;\r
- iplog->traffic = traffic_month;\r
- iplog->lmsid = lmsid;\r
- insert(iplog,iplogs,desc_order_by,traffic);\r
- printf(" %ld MB\n",iplog->traffic);\r
- }\r
- else\r
- {\r
- puts(" no records.");\r
- }\r
- }\r
- }\r
- sprintf(str,"%s/%s-%s.html",html_log_dir,year,month);\r
- printf("Writing %s ...",str);\r
- f=fopen(str,"w");\r
- if(f)\r
+ if(ip6prefix)\r
{\r
- fprintf(f, "<table class=\"decorated last\"><thead>\n\\r
-<tr><th colspan=\"2\">%s %s</th>\n\\r
-<th style=\"text-align: right\">lms</th>\n\\r
-<th colspan=\"2\">Data transfers</th>\n\\r
-<th style=\"text-align: right\">Min.speed</th>\n\\r
-</tr></thead><tbody>\n ",\r
- month, year);\r
-\r
- row_odd_even = 0;\r
- for_each(iplog, iplogs)\r
- {\r
- if(iplog->traffic)\r
- {\r
- fprintf(f, "%s<td style=\"text-align: right\">%d</td>\n\\r
-<td style=\"text-align: left\"><a class=\"blue\" href=\"%s%s.log\">%s</td>\n\\r
-<td style=\"text-align: right\">", \r
- tr_odd_even(), i++, log_url, iplog->name, iplog->name); \r
- if(iplog->lmsid > 0)\r
- {\r
- /*base URL will be configurable soon ... */\r
- fprintf(f, "<a class=\"blue\" href=\"%s%d\">%04d</a>\n", lms_url, iplog->lmsid, iplog->lmsid);\r
- }\r
- else if(iplog->lmsid == 0)\r
- {\r
- fputs("-------",f);\r
- } \r
- fprintf(f, "<td style=\"text-align: right\">%ld M</td>\n\\r
- <td style=\"text-align: right\"><strong>%ld G</strong></td>\n\\r
- <td style=\"text-align: right\">%ld kbps</th></tr>\n",\r
- iplog->traffic, iplog->traffic>>10, iplog->guaranted);\r
- total+=iplog->traffic>>10;\r
- iplog->i=i;\r
- iplog->l=total;\r
- }\r
- }\r
- fprintf(f,"<tr>\\r
- <td colspan=\"4\" style=\"text-align: left\">Total:</td>\\r
- <td style=\"text-align: right\"><strong>%ld GB</strong></td>\\r
- <td style=\"text-align: right\"><strong>%Ld kbps</strong></td></tr>\n", total, line);\r
- fputs("</tbody></table>\n", f);\r
-\r
- row_odd_even = 0;\r
- if(i>10)\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Running %s <%s ...\n", ip6tablesrestore, ip6tablesfile);\r
+ /*-----------------------------------------------------------------*/\r
+ iptables_save_line("COMMIT", TRUE);\r
+ fclose(ip6tables_file);\r
+ if(dry_run) \r
{\r
- fputs("<a name=\"erp\"></a><p><table class=\"decorated last\"><thead>\n\\r
-<caption>Enterprise Resource Planning (ERP)</caption></tr>\n\\r
-<tr><td>Analytic category</td>\n\\r
-<td colspan=\"2\" style=\"text-align: center\">Active Classes</td>\n\\r
-<td colspan=\"2\" style=\"text-align: center\">Data transfers</td></tr>\n</thead><tbody>\n",f);\r
-\r
- if_exists(iplog,iplogs,iplog->l>=total/4)\r
- {\r
- fprintf(f,"%s<td>Top 25%% of traffic</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%ld G</td><td style=\"text-align: right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));\r
- }\r
- \r
- if_exists(iplog,iplogs,iplog->i==10)\r
- {\r
- fprintf(f,"%s<td>Top 10 downloaders</td>\n", tr_odd_even());\r
- fprintf(f,"<th style=\"text-align: right\">10</th><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%ld G</td><td style=\"text-align: right\">%d %%</td></tr>\n",(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));\r
- }\r
-\r
- if_exists(iplog,iplogs,iplog->l>=total/2)\r
- {\r
- fprintf(f,"%s<td>Top 50%% of traffic</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%ld G</td><th style=\"text-align: right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));\r
- }\r
-\r
- if_exists(iplog,iplogs,iplog->l>=4*total/5)\r
- {\r
- fprintf(f,"%s<td>Top 80%% of traffic</td>\n",tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%ld G</td><th style=\"text-align: right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));\r
- }\r
-\r
- if_exists (iplog,iplogs,iplog->i>=i/5)\r
+ parse(ip6tablesfile)\r
{\r
- fprintf(f,"%s<td>Top 20%% downloaders</td>\n",tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><th style=\"text-align: right\">%d %%</th><td style=\"text-align: right\">%ld G</td><td style=\"text-align: right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));\r
+ printf("%s\n",_);\r
}\r
-\r
- if_exists(iplog,iplogs,iplog->i>=i/4)\r
- {\r
- fprintf(f,"%s<td>Top 25%% downloaders</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%ld G</td><td style=\"text-align: right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));\r
- }\r
-\r
- if_exists(iplog,iplogs,iplog->i>=i/2)\r
- {\r
- fprintf(f,"%s<td>Top 50%% downloaders</td>\n",tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><th style=\"text-align: right\">%d %%</th><td style=\"text-align: right\">%ld G</td><td style=\"text-align: right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));\r
- }\r
-\r
- if_exists(iplog,iplogs,iplog->i>=4*i/5)\r
- {\r
- fprintf(f,"%s<td>Top 80%% downloaders</td>\n",tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%ld G</td><td style=\"text-align: right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));\r
- }\r
-\r
- fprintf(f,"<tr><td>All users, all traffic</td>\n");\r
- fprintf(f,"<th style=\"text-align: right\">%d</th><th style=\"text-align: right\">100 %%</th><th style=\"text-align: right\">%ld G</th><th style=\"text-align: right\">100 %%</th></tr>\n",i-1,total);\r
- fputs("</tbody></table>\n", f);\r
+ done; /* ugly macro end */\r
}\r
-\r
- fprintf(f, stats_html_signature, version);\r
- fclose(f);\r
- puts(" done.");\r
+ sprintf(restor,"%s <%s",ip6tablesrestore, ip6tablesfile);\r
+ safe_run(restor);\r
}\r
+ free(restor);\r
}\r
\r
+/**/\r
+\r
+char *parse_datafile_line(char *str);\r
+time_t get_mtime(const char *path);\r
+\r
/*-----------------------------------------------------------------*/\r
/* Are you looking for int main(int argc, char **argv) ? :-)) */\r
/*-----------------------------------------------------------------*/\r
\r
program\r
{\r
- int i=0;\r
- FILE *f=NULL;\r
- char *str, *ptr, *d;\r
- char *substring;\r
- int class_count=0,ip_count=0;\r
- int parent=1;\r
- int just_flush=FALSE;\r
- int nodelay=FALSE;\r
- int just_preview=FALSE; /* preview - generate just stats */\r
- int just_logs=FALSE; /* just parse logs */\r
- int run=FALSE;\r
- int total=0;\r
+ int i=0; /* just plain old Fortran style integer :-) */\r
+ FILE *f=NULL; /* everything is just stream of bytes... */\r
+ char *str, *ptr, *d; /* LET A$=B$ :-) */\r
+ char *substring, *limit_pkts;\r
+\r
+ int parent = 1;\r
+ int just_networks = FALSE; \r
+ int just_flush = FALSE; /* deactivates all previous actions */\r
+ int nodelay = FALSE;\r
+ int just_preview = FALSE; /* preview - generate just stats */\r
+ int start_shaping = FALSE; /* apply FUP - requires classmap file */\r
+ int stop_shaping = FALSE; /* lift FUP - requires classmap file */\r
+ int reduce_ceil = 0; /* allow only rate+(ceil-rate)/2, /4, etc. */\r
+ int just_logs = FALSE; /* just parse logs */\r
+ int run = FALSE;\r
+ int total = 0;\r
\r
- char *chain_forward, *chain_postrouting;\r
char *althosts=NULL;\r
\r
printf("\n\\r
Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\\r
-Version %s - Copyright (C)2005-2012 Michael Polak (xChaos)\n\\r
+Version %s - Copyright (C)2005-2017 Michael Polak, Arachne Labs\n\\r
iptables-restore & burst tunning & classify modification by Ludva\n\\r
Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);\r
\r
- /*----- Boring... we have to check command line options first: ----*/\r
- \r
+ /*----- Boring... we have to check command line options first: ----*/ \r
arguments\r
{\r
argument("-c") { nextargument(config); }\r
argument("-f") { run=TRUE; just_flush=TRUE; }\r
argument("-9") { run=TRUE; just_flush=9; }\r
argument("-p") { run=TRUE; just_preview=TRUE; }\r
+ argument("-q") { run=TRUE; just_preview=TRUE; stop_shaping=TRUE; }\r
+ argument("-2") { run=TRUE; just_preview=TRUE; reduce_ceil=2; }\r
+ argument("-4") { run=TRUE; just_preview=TRUE; reduce_ceil=4; }\r
+ argument("-s") { run=TRUE; just_preview=TRUE; start_shaping=TRUE; }\r
argument("-r") { run=TRUE; }\r
argument("-n") { run=TRUE; nodelay=TRUE; }\r
+ argument("-a") { run=TRUE; just_networks=TRUE; }\r
argument("-l") { just_logs=TRUE; }\r
argument("-m") { just_logs=TRUE; }\r
argument("-y") { just_logs=TRUE; }\r
printf("Parsing configuration file %s ...\n", config);\r
/*-----------------------------------------------------------------*/\r
get_config(config);\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing upstream interfaces list %s ...\n", upstreamfile);\r
+ /*-----------------------------------------------------------------*/\r
+ parse(upstreamfile)\r
+ {\r
+ ptr = parse_datafile_line(_);\r
+ if(ptr)\r
+ {\r
+ create(interface, Interface);\r
+ interface->name = _;\r
+ interface->speed = (long long)atol(ptr);\r
+ /* is supplied value meaningful ?*/\r
+ if(interface->speed <= 0)\r
+ {\r
+ printf("Illegal value of %s interface bandwidth.\n", interface->name);\r
+ reject_config_and_exit(upstreamfile);\r
+ }\r
+ interface->is_upstream = TRUE;\r
+ interface->chain = "FORWARD";\r
+ interface->idxprefix = "forw";\r
+ push(interface, interfaces);\r
+ printf("Upstream interface %s: medium %s capacity %ld kbps\n", interface->name, medium, interface->speed);\r
+ }\r
+ }\r
+ done; /* ugly macro end */\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing downstream interfaces list %s ...\n", downstreamfile);\r
+ /*-----------------------------------------------------------------*/\r
+ parse(downstreamfile)\r
+ {\r
+ ptr = parse_datafile_line(_);\r
+ if(ptr)\r
+ {\r
+ create(interface, Interface);\r
+ interface->name = _;\r
+ interface->speed = (long long)atol(ptr);\r
+ /* is supplied value meaningful ?*/\r
+ if(interface->speed <= 0)\r
+ {\r
+ printf("Illegal value of %s interface bandwidth.\n", interface->name);\r
+ reject_config_and_exit(downstreamfile);\r
+ }\r
+ interface->is_upstream = FALSE;\r
+ interface->chain = "POSTROUTING";\r
+ interface->idxprefix = "post";\r
+ push(interface, interfaces);\r
+ printf("Upstream interface %s: medium %s capacity %ld kbps\n", interface->name, medium, interface->speed);\r
+ }\r
+ }\r
+ done; /* ugly macro end */\r
+\r
\r
if(just_logs)\r
{\r
\r
if(althosts)\r
{\r
- hosts=althosts;\r
+ hosts = althosts;\r
}\r
\r
if(just_flush<9)\r
/*-----------------------------------------------------------------*/\r
puts("Parsing iptables verbose output ...");\r
/*-----------------------------------------------------------------*/\r
- get_traffic_statistics();\r
+ get_traffic_statistics(iptables, FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Parsing ip6tables verbose output ...");\r
+ /*-----------------------------------------------------------------*/ \r
+ get_traffic_statistics(ip6tables, TRUE);\r
+ }\r
}\r
\r
/*-----------------------------------------------------------------*/\r
- printf("Parsing class defintion file %s ...\n", hosts);\r
+ /* cll1.h - let's allocate brand new character buffer... */\r
/*-----------------------------------------------------------------*/\r
- int groupidx = FIRSTGROUPID;\r
- parse(hosts)\r
- {\r
- str=_;\r
+ string(str, STRLEN); \r
+ string(limit_pkts, STRLEN);\r
\r
- if(*str<'0' || *str>'9')\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Parsing macro definition file %s ...\n", macrosfile);\r
+ /*-----------------------------------------------------------------*/\r
+ parse(macrosfile)\r
+ {\r
+ ptr = parse_datafile_line(_);\r
+ if(ptr)\r
{\r
- /* any line starting with non-number is comment ...*/\r
- continue;\r
- }\r
- \r
- //Does this IP share QoS class with some other ?\r
- substring=strstr(str,"sharing-");\r
- if(substring)\r
- { \r
- substring+=8; //"sharing-"\r
- parse_ip(str);\r
- ip_count++;\r
- ip->sharing=substring;\r
- ip->keyword=defaultkeyword; /* settings for default keyword */\r
- while(*substring && *substring!='\n')\r
- {\r
- substring++;\r
- }\r
- *substring=0; \r
+ create(macro, Macro);\r
+ macro->rewrite_from = _;\r
+ macro->rewrite_to = ptr;\r
+ push(macro, macros);\r
+ printf("%s -> %s\n", macro->rewrite_from, macro->rewrite_to);\r
}\r
- else\r
- {\r
- //Do we have to create new QoS class for this IP ?\r
+ }\r
+ done; /* ugly macro end */\r
\r
- if_exists(keyword,keywords,(substring=strstr(str,keyword->key)))\r
- {\r
- parse_ip(str);\r
- ip_count++;\r
- ip->keyword=keyword;\r
- keyword->ip_count++;\r
- ip->prio=keyword->default_prio;\r
- substring+=strlen(keyword->key)+1;\r
- ptr=substring;\r
- while(*ptr && *ptr!='-')\r
- {\r
- ptr++;\r
- }\r
- if(*ptr=='-')\r
- {\r
- *ptr=0;\r
- ip->max = ip->desired=atoi(ptr+1);\r
- }\r
- ip->min = atoi(substring);\r
- if(ip->min <= 0)\r
- {\r
- printf(" %s: Illegal value of minimum bandwidth 0 kbps, using %d kbps\n",\r
- str, free_min);\r
- ip->min = free_min;\r
- }\r
- if(ip->max <= ip->min)\r
- {\r
- ip->fixedprio = 1;\r
- ip->max = ip->min+ip->keyword->reserve_min;\r
- }\r
- else \r
- {\r
- ip->max -= ip->keyword->reserve_max;\r
- if(ip->max<ip->min)\r
- {\r
- ip->max=ip->min;\r
- }\r
- }\r
- ip->mark=FIRSTIPCLASS+1+class_count++;\r
\r
- if_exists(group,groups,group->min==ip->min) \r
- { \r
- group->count++; \r
- group->desired += ip->min;\r
- ip->group = group->id; \r
- }\r
- else\r
- {\r
- create(group,Group);\r
- group->min = ip->min;\r
- group->id = groupidx++;\r
- ip->group = group->id;\r
-\r
- if(group->min<8) group->min=8;\r
- /* Warning - this is maybe because of primitive tc namespace, can be fixed */\r
- /* it is because class IDs are derived from min. bandwidth. - xCh */\r
- //if(group->min>MAX_GUARANTED_KBPS) group->min=MAX_GUARANTED_KBPS;\r
- \r
- group->count=1;\r
- group->desired=ip->min; \r
- insert(group,groups,desc_order_by,min);\r
- }\r
- }//endif keyword-\r
- }//endif sharing-\r
- }\r
- fail\r
- {\r
- perror(hosts);\r
- exit(-1);\r
- }\r
- done;\r
\r
/*-----------------------------------------------------------------*/\r
- /* cll1.h - let's allocate brand new character buffer... */\r
+ printf("Parsing class defintion file %s ...\n", hosts);\r
/*-----------------------------------------------------------------*/\r
- string(str,STRLEN); \r
+ parse_hosts(hosts);\r
+/*\r
+ //this was pretty dumb idea anyway...\r
+ if(just_networks)\r
+ {\r
+ analyse_topology("/usr/sbin/traceroute -n -m 10 -w 2 %s.%d");\r
+ exit(-1); \r
+ }\r
+*/\r
\r
/*-----------------------------------------------------------------*/\r
puts("Resolving shared connections ...");\r
/*-----------------------------------------------------------------*/\r
- for_each(ip,ips) if(ip->sharing)\r
+ for_each(ip, ips) if(ip->sharing)\r
{\r
- for_each(sharedip,ips) if(eq(sharedip->name,ip->sharing))\r
+ for_each(sharedip, ips) if(eq(sharedip->name, ip->sharing))\r
{\r
- sharedip->traffic+=ip->traffic;\r
- ip->traffic=0;\r
- ip->mark=sharedip->mark; \r
- ip->lmsid=sharedip->lmsid;\r
+ sharedip->traffic += ip->traffic;\r
+ sharedip->traffic_down += ip->direct;\r
+ sharedip->traffic_up += ip->upload;\r
+ ip->traffic = 0;\r
+ ip->mark = sharedip->mark; \r
+ ip->lmsid = sharedip->lmsid;\r
+ ip->pps_limit = sharedip->pps_limit; /* no other way to do this */\r
+\r
+ /* Ugly hack: append IPv4 addresses of sharedip to IPv6 uplinks */\r
+ ptr = strchr(ip->addr, '+');\r
+ if(ptr && ptr-ip->addr > 1 && !sharedip->v6)\r
+ {\r
+ *(--ptr) = 0;\r
+ concatenate(ip->addr, sharedip->addr, ptr);\r
+ ip->name = ip->addr = ptr;\r
+ ptr = strchr(ip->addr, '.');\r
+ while(ptr && *ptr)\r
+ {\r
+ *ptr = ':';\r
+ ptr = strchr(ptr, '.');\r
+ }\r
+ ip->mask += 64;\r
+ }\r
+\r
break;\r
}\r
- if(!sharedip)\r
+ if(not sharedip)\r
{\r
printf("Unresolved shared connection: %s %s sharing-%s\n",\r
ip->addr, ip->name, ip->sharing);\r
/*-----------------------------------------------------------------*/\r
parse(credit)\r
{\r
- ptr=parse_datafile_line(_);\r
+ ptr = parse_datafile_line(_);\r
if(ptr)\r
{\r
if_exists(ip,ips,eq(ip->addr,_))\r
}\r
}\r
}\r
- done;\r
+ done; /* ugly macro end */\r
}\r
\r
+\r
if(!just_preview)\r
{\r
/*-----------------------------------------------------------------*/\r
puts("Initializing iptables and tc classes ...");\r
/*-----------------------------------------------------------------*/\r
\r
- iptables_file=fopen(iptablesfile,"w");\r
+ iptables_file = fopen(iptablesfile, "w");\r
if(iptables_file == NULL)\r
{\r
- puts("Cannot open iptablesfile!");\r
+ perror(iptablesfile);\r
exit(-1);\r
}\r
+ iptables_save_line(iptablespreamble, FALSE);\r
+\r
+ if(ip6prefix)\r
+ {\r
+ ip6tables_file = fopen(ip6tablesfile, "w");\r
+ if(ip6tables_file == NULL)\r
+ {\r
+ perror(ip6tablesfile);\r
+ exit(-1);\r
+ }\r
+ iptables_save_line(iptablespreamble, TRUE);\r
+ iptables_save_line(ip6preamble, TRUE);\r
+ }\r
+\r
+ run_iptables_restore();\r
\r
- log_file=fopen(cmdlog,"w");\r
+ log_file = fopen(cmdlog, "w");\r
if(log_file == NULL) \r
{\r
- puts("Cannot open logfile!");\r
+ perror(cmdlog);\r
exit(-1);\r
- }\r
- \r
- save_line(iptablespreamble);\r
- run_restore();\r
+ } \r
\r
- sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);\r
- safe_run(str);\r
-\r
- sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);\r
- safe_run(str);\r
+ for_each(interface, interfaces)\r
+ {\r
+ sprintf(str,"%s qdisc del dev %s root 2>/dev/null", tc, interface->name);\r
+ safe_run(str);\r
+ }\r
\r
iptables_file=fopen(iptablesfile,"w");\r
- save_line(iptablespreamble);\r
+ iptables_save_line(iptablespreamble, FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ ip6tables_file=fopen(ip6tablesfile,"w");\r
+ iptables_save_line(iptablespreamble, TRUE);\r
+ iptables_save_line(ip6preamble, TRUE);\r
+ }\r
\r
- if(qos_free_zone && *qos_free_zone!='0')\r
+ if(qos_free_zone && *qos_free_zone!='0') /* this is currently supported only for IPv4 */\r
{\r
- char *chain;\r
- \r
- sprintf(str,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone, wan);\r
- save_line(str);\r
- \r
- if(qos_proxy)\r
- {\r
- save_line(":post_noproxy - [0:0]");\r
- sprintf(str,"-A POSTROUTING -p ! tcp -o %s -j post_noproxy", lan);\r
- save_line(str); \r
- sprintf(str,"-A POSTROUTING -s ! %s -o %s -j post_noproxy", proxy_ip, lan);\r
- save_line(str); \r
- sprintf(str,"-A POSTROUTING -s %s -p tcp --sport ! %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);\r
- save_line(str); \r
-\r
- chain="post_noproxy"; \r
- }\r
- else\r
+ for_each(interface, interfaces)\r
{\r
- chain="POSTROUTING";\r
+ sprintf(str,"-A %s -s %s -o %s -j ACCEPT", interface->chain, qos_free_zone, interface->name);\r
+ iptables_save_line(str, FALSE);\r
}\r
- \r
- sprintf(str,"-A %s -s %s -o %s -j ACCEPT", chain, qos_free_zone, lan);\r
- save_line(str);\r
}\r
\r
- if(ip_count>idxtable_treshold1 && !just_flush)\r
+ if(ip_count > idxtable_treshold1 && !just_flush)\r
{\r
- int idxcount=0, bitmask=32-idxtable_bitmask1; /* default net mask: 255.255.255.240 */\r
+ int idxcount=0, bitmask=32-idxtable_bitmask1;\r
char *subnet, *buf;\r
/*-----------------------------------------------------------------*/\r
printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);\r
/*-----------------------------------------------------------------*/\r
\r
- save_line(":post_common - [0:0]");\r
- save_line(":forw_common - [0:0]");\r
+ iptables_save_line(":post_common - [0:0]", FALSE);\r
+ iptables_save_line(":forw_common - [0:0]", FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ iptables_save_line(":post_common - [0:0]", TRUE);\r
+ iptables_save_line(":forw_common - [0:0]", TRUE);\r
+ }\r
\r
- for_each(ip,ips) if(ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))\r
+ for_each(ip,ips) if(ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0")) \r
{\r
- buf=hash_id(ip->addr,bitmask);\r
+ if(ip->v6)\r
+ {\r
+ buf=index6_id(ip->addr,bitmask+32);\r
+ }\r
+ else\r
+ {\r
+ buf=index_id(ip->addr, bitmask);\r
+ }\r
+ \r
if_exists(idx,idxs,eq(idx->id,buf))\r
{\r
idx->children++;\r
else\r
{\r
create(idx,Index);\r
- idx->addr=ip->addr;\r
- idx->id=buf;\r
- idx->bitmask=bitmask;\r
- idx->parent=NULL;\r
- idx->children=0;\r
+ idx->addr = ip->addr;\r
+ idx->id = buf;\r
+ idx->bitmask = bitmask+32*ip->v6;\r
+ idx->parent = NULL;\r
+ idx->children = 0;\r
+ idx->ipv6 = ip->v6;\r
idxcount++;\r
push(idx,idxs);\r
}\r
}\r
\r
/* brutal perfomance optimalization */\r
- while(idxcount>idxtable_treshold2 && bitmask>2*idxtable_bitmask2)\r
+ while(idxcount > idxtable_treshold2 && bitmask > 2*idxtable_bitmask2)\r
{\r
- bitmask-=idxtable_bitmask2;\r
- idxcount=0;\r
+ bitmask -= idxtable_bitmask2;\r
+ idxcount = 0;\r
\r
for_each(idx,idxs) if(idx->parent == NULL)\r
{\r
- buf=hash_id(idx->addr,bitmask);\r
+ if(idx->ipv6)\r
+ {\r
+ buf = index6_id(idx->addr, bitmask+32);\r
+ }\r
+ else\r
+ {\r
+ buf = index_id(idx->addr, bitmask);\r
+ }\r
if_exists(metaindex,idxs,eq(metaindex->id,buf))\r
{\r
metaindex->children++;\r
else\r
{\r
create(metaindex,Index);\r
- metaindex->addr=idx->addr;\r
- metaindex->id=buf;\r
- metaindex->bitmask=bitmask;\r
- metaindex->parent=NULL;\r
- metaindex->children=0;\r
+ metaindex->addr = idx->addr;\r
+ metaindex->id = buf;\r
+ metaindex->bitmask = bitmask+32*idx->ipv6;\r
+ metaindex->parent = NULL;\r
+ metaindex->children = 0;\r
+ metaindex->ipv6 = idx->ipv6;\r
idxcount++;\r
push(metaindex,idxs);\r
}\r
}\r
}\r
\r
- /* this should slightly optimize throughout ... */\r
+ /* this should slightly optimize throughput ... */\r
sort(idx,idxs,desc_order_by,children);\r
sort(idx,idxs,order_by,bitmask);\r
\r
i=0;\r
- for_each(idx,idxs)\r
+ for_each(idx, idxs)\r
{\r
- subnet=subnet_id(idx->addr,idx->bitmask);\r
- printf("%d: %s/%d\n",\r
- ++i, subnet, idx->bitmask);\r
- \r
- sprintf(str,":post_%s - [0:0]", idx->id);\r
- save_line(str);\r
-\r
- sprintf(str,":forw_%s - [0:0]", idx->id);\r
- save_line(str);\r
-\r
- if(idx->parent)\r
+ if(idx->ipv6)\r
{\r
- string(buf,strlen(idx->parent->id)+6);\r
- sprintf(buf,"post_%s",idx->parent->id);\r
+ subnet=subnet6_id(idx->addr, idx->bitmask);\r
}\r
else\r
{\r
- buf="POSTROUTING";\r
+ subnet=subnet_id(idx->addr, idx->bitmask);\r
}\r
+ printf("%d: %s/%d\n", ++i, subnet, idx->bitmask);\r
+ \r
+ sprintf(str,":post_%s - [0:0]", idx->id);\r
+ iptables_save_line(str, idx->ipv6);\r
\r
- sprintf(str,"-A %s -d %s/%d -o %s -j post_%s", buf, subnet, idx->bitmask, lan, idx->id);\r
- save_line(str);\r
-\r
- sprintf(str,"-A %s -d %s/%d -o %s -j post_common", buf, subnet, idx->bitmask, lan);\r
- save_line(str);\r
+ sprintf(str,":forw_%s - [0:0]", idx->id);\r
+ iptables_save_line(str, idx->ipv6);\r
\r
- if(idx->parent)\r
- {\r
- string(buf,strlen(idx->parent->id)+6);\r
- sprintf(buf,"forw_%s",idx->parent->id);\r
- }\r
- else\r
+ for_each(interface, interfaces)\r
{\r
- buf="FORWARD";\r
- }\r
+ if(idx->parent)\r
+ {\r
+ string(buf, strlen(idx->parent->id)+6);\r
+ sprintf(buf, "%s_%s", interface->idxprefix, idx->parent->id);\r
+ }\r
+ else\r
+ {\r
+ buf = interface->chain;\r
+ }\r
\r
- sprintf(str,"-A %s -s %s/%d -o %s -j forw_%s", buf, subnet, idx->bitmask, wan, idx->id);\r
- save_line(str);\r
+ sprintf(str,"-A %s -d %s/%d -o %s -j %s_%s", buf, subnet, idx->bitmask, interface->name, interface->idxprefix, idx->id);\r
+ iptables_save_line(str, idx->ipv6);\r
\r
- sprintf(str,"-A %s -s %s/%d -o %s -j forw_common", buf, subnet, idx->bitmask, wan);\r
- save_line(str);\r
+ sprintf(str,"-A %s -d %s/%d -o %s -j %s_common", buf, subnet, idx->bitmask, interface->name, interface->idxprefix);\r
+ iptables_save_line(str, idx->ipv6);\r
+ }\r
}\r
printf("Total indexed iptables chains created: %d\n", i);\r
\r
- sprintf(str,"-A FORWARD -o %s -j forw_common", wan);\r
- save_line(str);\r
- \r
- sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);\r
- save_line(str);\r
+ for_each(interface, interfaces)\r
+ {\r
+ sprintf(str,"-A %s -o %s -j %s_common", interface->chain, interface->name, interface->idxprefix);\r
+ iptables_save_line(str, FALSE);\r
+ if(ip6prefix)\r
+ {\r
+ sprintf(str,"-A %s -o %s -j %s_common", interface->chain, interface->name, interface->idxprefix);\r
+ iptables_save_line(str, TRUE);\r
+ }\r
+ }\r
}\r
- \r
}\r
\r
if(just_flush)\r
{\r
fclose(iptables_file);\r
- if(log_file) fclose(log_file);\r
+ if(log_file)\r
+ { \r
+ fclose(log_file);\r
+ }\r
puts("Just flushed iptables and tc classes - now exiting ...");\r
exit(0);\r
}\r
{\r
if(!dry_run && !nodelay && qos_free_delay)\r
{\r
- printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);\r
+ printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n", qos_free_delay);\r
sleep(qos_free_delay);\r
}\r
\r
- sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",\r
- tc,lan,htb_r2q);\r
- safe_run(str);\r
-\r
- sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",\r
- tc,lan,lan_medium,lan_medium,burst_main,highest_priority);\r
- safe_run(str);\r
-\r
- sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",\r
- tc,lan,line,line,burst_main,highest_priority);\r
- safe_run(str);\r
-\r
- sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,wan,htb_r2q);\r
- safe_run(str);\r
+ for_each(interface, interfaces)\r
+ {\r
+ sprintf(str, "%s qdisc add dev %s root handle 1: htb r2q %d default 1",\r
+ tc, interface->name, htb_r2q);\r
+ safe_run(str);\r
\r
- sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",\r
- tc,wan,wan_medium,wan_medium,burst_main,highest_priority);\r
- safe_run(str);\r
+ sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",\r
+ tc, interface->name, medium, medium, burst_main, highest_priority);\r
+ safe_run(str);\r
\r
- sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",\r
- tc,wan,up,up,burst_main,highest_priority);\r
- safe_run(str);\r
+ sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",\r
+ tc, interface->name, interface->speed, interface->speed, burst_main, highest_priority);\r
+ safe_run(str);\r
+ }\r
}\r
\r
/*-----------------------------------------------------------------*/\r
sort(ip,ips,desc_order_by,traffic); \r
\r
/*-----------------------------------------------------------------*/\r
- /* sub-scope - local variables */ \r
+ for_each(interface, interfaces)\r
{\r
- long long int rate = line;\r
- long long int max = line;\r
+ long long int rate = interface->speed;\r
+ long long int max = interface->speed;\r
int group_count = 0;\r
- FILE *credit_file = NULL;\r
+ //obsolete: FILE *credit_file = NULL;\r
\r
- if(!just_preview && !dry_run && enable_credit)\r
- {\r
- credit_file = fopen(credit,"w");\r
- }\r
- \r
+ //obsolete: if(!just_preview && !dry_run && enable_credit)\r
+ //obsolete: {\r
+ //obsolete: credit_file = fopen(credit,"w");\r
+ //obsolete: }\r
+\r
for_each(group,groups)\r
{\r
if(!just_preview)\r
{\r
- //download\r
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d", \r
- tc, lan, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);\r
- safe_run(str);\r
- \r
- //upload\r
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d", \r
- tc, wan, parent, group->id, rate*up/line, max*up/line, burst_group, highest_priority+1, group->desired);\r
+ sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d", \r
+ tc, interface->name, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);\r
safe_run(str);\r
}\r
- \r
+\r
if(group_count++ < max_nesting)\r
{\r
parent = group->id;\r
}\r
- \r
+\r
rate -= digital_divide*group->min;\r
if(rate < group->min)\r
{\r
}\r
\r
/*shaping of aggresive downloaders, with credit file support */\r
+ /* obsolete\r
if(use_credit)\r
{\r
int group_rate = group->min, priority_sequence = lowest_priority;\r
\r
for_each(ip, ips) if(ip->min == group->min && ip->max > ip->min)\r
{\r
- if( ip->keyword->data_limit && !ip->fixedprio \r
- && ( ip->traffic>ip->credit\r
- + (ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))) )\r
+ ip->realquota=ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20));\r
+ if( ip->keyword->data_limit \r
+ and not ip->fixedprio \r
+ and ip->traffic > ip->realquota )\r
{\r
- if(group_rate<ip->max)\r
+ if(group_rate < ip->max)\r
{\r
- ip->max=group_rate;\r
+ ip->max = group_rate;\r
}\r
group_rate+=magic_treshold;\r
ip->prio=lowest_priority;\r
{\r
if( ip->keyword->data_prio \r
&& !ip->fixedprio \r
- && ( ip->traffic>ip->credit\r
- + (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20))) )\r
+ && ( ip->traffic > ip->credit + (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20))) )\r
{\r
ip->prio=priority_sequence--;\r
if(ip->prio<highest_priority+1)\r
}\r
}\r
} \r
- }\r
+ } obsolete */\r
}\r
+ /* obsolete \r
if(credit_file)\r
{\r
fclose(credit_file);\r
- }\r
+ } obsolete */\r
}\r
\r
if(just_preview)\r
{\r
- f=fopen(preview,"w");\r
- ptr=preview; \r
- }\r
- else if(!dry_run && !just_flush)\r
- {\r
- /*-----------------------------------------------------------------*/\r
- printf("Writing data transfer database ...\n");\r
- /*-----------------------------------------------------------------*/\r
- f=fopen("/var/run/prometheus.previous","w");\r
- if(f)\r
+ if(start_shaping || stop_shaping || reduce_ceil)\r
{\r
- for_each(ip,ips)\r
+ time_t how_much_seconds = time(NULL) - get_mtime(classmap); /* sice start of daily aggregation session */\r
+ printf("Reading %s (%ld seconds old) and applying Fair Use Policy and Aggregation rules... \n", classmap, how_much_seconds);\r
+ \r
+ parse(classmap)\r
{\r
- if(ip->traffic || ip->direct || ip->proxy || ip->upload)\r
+ ptr=strchr(_,' ');\r
+ if(ptr)\r
{\r
- fprintf(f,"%s %Lu %Lu %Lu %Lu\n",\r
- ip->addr, ip->traffic, ip->direct, ip->proxy, ip->upload);\r
+ *ptr=0;\r
+ ptr++;\r
+ if_exists(ip,ips,eq(ip->addr,_))\r
+ {\r
+ int unshape_this_ip = 0;\r
+ long avg_mbps_down = ip->traffic_down * 8 / how_much_seconds; \r
+ long avg_mbps_up = ip->traffic_up * 8 / how_much_seconds;\r
+ int agreg = 1, print_stats = 1;\r
+ \r
+ if(ip->keyword->download_aggregation)\r
+ {\r
+ int min_mbps = (ip->min/ip->keyword->download_aggregation)>>10;\r
+ if(min_mbps < 1)\r
+ {\r
+ min_mbps = 1;\r
+ }\r
+ \r
+ if(min_mbps <= avg_mbps_down)\r
+ {\r
+ unshape_this_ip = 0;\r
+ agreg = (int)((float)(avg_mbps_down+1)/min_mbps+.5);\r
+ ip->max /= agreg;\r
+ ip->pps_limit /= agreg;\r
+ printf("Download aggregation 1:%d for %s (min: %lu Mbps avg: %ld Mbps)\n", agreg, ip->name, min_mbps, avg_mbps_down);\r
+ }\r
+ else\r
+ {\r
+ unshape_this_ip = 1;\r
+ }\r
+ }\r
+ else if(ip->keyword->upload_aggregation)\r
+ {\r
+ int min_mbps = (ip->min/ip->keyword->upload_aggregation)>>10;\r
+ if(min_mbps < 1)\r
+ {\r
+ min_mbps = 1;\r
+ }\r
+\r
+ if(min_mbps <= avg_mbps_up)\r
+ {\r
+ unshape_this_ip = 0;\r
+ agreg = (int)((float)(avg_mbps_up+1)/min_mbps+.5);\r
+ ip->max /= agreg;\r
+ printf("Upload aggregation 1:%d for %s: (min: %lu Mbps avg: %ld Mbps)\n", agreg, ip->name, min_mbps, avg_mbps_up);\r
+ }\r
+ else\r
+ {\r
+ unshape_this_ip = 1;\r
+ }\r
+ }\r
+ if(stop_shaping)\r
+ {\r
+ unshape_this_ip = 1;\r
+ }\r
+ ip->aggregated = agreg; \r
+ ip->mark = atoi(ptr);\r
+ if(ip->max < ip->desired || unshape_this_ip || reduce_ceil) /* apply or disable FUP limit immediately.... */\r
+ {\r
+ if(unshape_this_ip)\r
+ {\r
+ ip->max = ip->desired;\r
+ if(stop_shaping) /* all limits removed, but not printed with -s (start_shaping) switch */\r
+ {\r
+ printf("Removing limit for %s (%s) ", ip->name, ip->addr);\r
+ }\r
+ else\r
+ {\r
+ print_stats = 0;\r
+ }\r
+ }\r
+ else\r
+ {\r
+ printf("Updating %s (%s) ", ip->name, ip->addr);\r
+ if(reduce_ceil)\r
+ {\r
+ ip->max = ip->min + (ip->desired-ip->min)/reduce_ceil;\r
+ }\r
+ else if(ip->max < ip->min)\r
+ {\r
+ ip->max = ip->min;\r
+ } \r
+ }\r
+ for_each(interface, interfaces)\r
+ {\r
+ if(!interface->is_upstream)\r
+ {\r
+ if(print_stats)\r
+ {\r
+ printf("[down %s: %dk-%dk wants %d]", interface->name, ip->min, ip->max, ip->desired);\r
+ }\r
+ sprintf(str, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", \r
+ tc, interface->name, ip->group, ip->mark, ip->min, ip->max, burst, ip->prio);\r
+ safe_run(str);\r
+ }\r
+ else\r
+ {\r
+ if(print_stats)\r
+ {\r
+ printf("[up %s: %dk-%dk wants %dk]", interface->name, (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), \r
+ (int)((ip->desired/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),\r
+ (int)((ip->desired/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));\r
+ }\r
+ sprintf(str,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
+ tc, interface->name, ip->group, ip->mark,\r
+ (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),\r
+ (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);\r
+ safe_run(str);\r
+ }\r
+ }\r
+ if(print_stats)\r
+ {\r
+ printf("\n");\r
+ }\r
+ }\r
+ }\r
}\r
}\r
- fclose(f);\r
+ fail\r
+ { \r
+ perror(classmap);\r
+ puts("Warning - classmap file not fund, just generating preview ...");\r
+ start_shaping=FALSE;\r
+ stop_shaping=FALSE;\r
+ }\r
+ done; /* ugly macro end */\r
}\r
-\r
- f=fopen(html,"w");\r
- ptr=html;\r
+ html=preview;\r
+ json_traffic=json_preview;\r
}\r
\r
- if(f)\r
+ if(!dry_run && !just_flush)\r
{\r
- int count=1;\r
- i=0;\r
-\r
/*-----------------------------------------------------------------*/\r
- printf("Sorting data and generating statistics page %s ...\n", ptr);\r
+ printf("Writing json traffic overview %s ... ", json_traffic);\r
/*-----------------------------------------------------------------*/\r
+ write_json_traffic(json_traffic);\r
\r
- if(use_jquery_popups)\r
- {\r
- fprintf(f,"<script type=\"text/javascript\" src=\"%s\"></script>\n", jquery_url);\r
- }\r
- fputs("<table class=\"decorated last\">\n<thead>\n\\r
-<tr><th style=\"text-align: right\">#</th>\n\\r
-<th style=\"text-align: right\">group</th>\n\\r
-<th style=\"text-align: right\">IPs</th>\n\\r
-<th style=\"text-align: right\">requested</th>\n",f);\r
- fprintf(f,"<th colspan=\"%d\">data limits</th>\n", keywordcount);\r
- fputs("</tr></thead><tbody>\n",f);\r
-\r
- row_odd_even = 0;\r
- for_each(group, groups) \r
- { \r
-#ifdef DEBUG\r
- printf("%d k group: %d bandwidth requested: %d k\n",group->min,group->count,group->desired);\r
-#endif\r
- fprintf(f, "%s<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d k</td>",\r
- tr_odd_even(), count, group->min);\r
- fprintf(f, "<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d k</td>",\r
- group->count, group->desired);\r
-\r
- for_each(keyword, keywords)\r
- {\r
- fprintf(f,"<td style=\"text-align: right\"><span style=\"color:#%s\">%d M</span></td>",\r
- keyword->html_color, group->min*keyword->data_limit);\r
- } \r
- i += group->desired; \r
- total += group->count;\r
- count++; \r
- }\r
-#ifdef DEBUG\r
- printf("Total groups: %d Total bandwidth requested: %d k\nAGGREGATION: 1/%d\n",\r
- count, i, i/line);\r
-#endif\r
- fprintf(f,"<tr><th colspan=\"2\" style=\"text-align: left\">Line %Ld k</td>",line);\r
- fprintf(f,"<th style=\"text-align: right\">%d</td><th style=\"text-align: right\">%d k</td>",total,i);\r
-\r
- for_each(keyword, keywords)\r
- {\r
- fprintf(f,"<th style=\"text-align: right\">%d IPs</th>",keyword->ip_count);\r
- }\r
- fprintf(f,"</tr><tr><th colspan=\"4\">Aggregation 1/%d</th>\n", (int)(0.5+i/line));\r
- fprintf(f,"<th colspan=\"%d\">%d traffic classes</th></tr>\n", keywordcount, total);\r
-\r
- fputs("</tbody></table>\n",f);\r
- }\r
- else if(!dry_run && !just_flush)\r
- {\r
- perror(html);\r
+ /*-----------------------------------------------------------------*/\r
+ printf("Writing statistics into HTML page %s ...\n", html);\r
+ /*-----------------------------------------------------------------*/\r
+ write_htmlandlogs(html, d, total, just_preview);\r
}\r
\r
- i=0;\r
- if(f)\r
+ if(just_preview)\r
{\r
- unsigned long long total_traffic=0, total_direct=0, total_proxy=0, total_upload=0, tmp_sum=0;\r
- int active_classes=0;\r
- int colspan=11;\r
- FILE *iplog;\r
- struct Sum {unsigned long long l; int i; list(Sum);} *sum,*sums=NULL;\r
- int limit_count=0, prio_count=0;\r
- int popup_button=0;\r
-\r
- if(qos_proxy)\r
+ char swchar='p';\r
+ if(start_shaping)\r
{\r
- colspan++;\r
+ swchar='s';\r
}\r
- if(found_lmsid)\r
+ else if(reduce_ceil)\r
{\r
- colspan++;\r
+ swchar='0'+reduce_ceil; /* -2, -4 */\r
}\r
- \r
- fprintf(f,"<p><table class=\"decorated last\">\n<thead><caption>%s",title);\r
- fprintf(f," (%s)</caption>\n", d);\r
- fputs("<tr><th style=\"text-align: right\">#</th><th>hostname</th>",f);\r
- if(found_lmsid)\r
+ else if(stop_shaping)\r
{\r
- fputs("<th style=\"text-align: right\">lms</th>\n",f);\r
+ swchar='q';\r
}\r
- fputs("<th style=\"text-align: right\">credit</th>\\r
-<th style=\"text-align: right\">limit</th>\\r
-<th style=\"text-align: right\">total</th>\\r
-<th style=\"text-align: right\">direct</th>\n",f);\r
- if(qos_proxy)\r
- {\r
- fputs("<th style=\"text-align: right\">proxy</th>\n",f);\r
- }\r
- fputs("<th style=\"text-align: right\">upload</th>\\r
-<th style=\"text-align: right\">minimum</th>\\r
-<th style=\"text-align: right\">desired</th>\\r
-<th style=\"text-align: right\">maximum</th>\\r
-<th>prio</th></tr>\n\\r
-</thead><tbody>\n",f); \r
-\r
- row_odd_even = 0;\r
- for_each(ip,ips) if(!use_jquery_popups || !ip->sharing)\r
- {\r
- char *f1="", *f2="";\r
- i++;\r
- \r
- if(ip->max < ip->desired)\r
- {\r
- f1="<span style=\"color:red\">";\r
- f2="</span>";\r
- limit_count++;\r
- }\r
- else if(ip->prio > highest_priority+1)\r
- {\r
- f1="<span style=\"color:brown\">";\r
- f2="</span>";\r
- prio_count++;\r
- }\r
\r
+ printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar);\r
+ exit(0);\r
+ } \r
+\r
+ i=0;\r
#ifdef DEBUG\r
- printf("%03d. %-22s %10Lu (%d/%d)\n",i ,ip->name, ip->traffic, ip->min, ip->max); \r
+ printf("%-22s %-15s mark\n","name","ip");\r
#endif\r
- /* hostnames -------------------------------------- */\r
- fprintf(f,"%s<td style=\"text-align: right\"><a name=\"%s\"></a>%d</td><td><a class=\"blue\" href=\"%s%s.log\">%s</a>\n", \r
- tr_odd_even(), ip->name, i, log_url, ip->name, ip->name);\r
- if(use_jquery_popups)\r
- {\r
- fprintf(f,"<span id=\"sharing_%d\" style=\"display:none\">",i);\r
- popup_button=0;\r
- for_each(sharedip, ips) if(eq(ip->name, sharedip->sharing))\r
- {\r
- fprintf(f,"<br /><a class=\"blue\" href=\"%s%s.log\">%s</a>\n", log_url, sharedip->name, sharedip->name);\r
- popup_button++;\r
- }\r
- fputs("</span>\n",f);\r
- if(popup_button)\r
- {\r
- fprintf(f,"<span>[<a class=\"blue\" href=\"#\" onClick=\"$(this).parent().hide();$(\'#sharing_%d\').show();$(\'#download_%d\').show();$(\'#upload_%d\').show();return(false);\" style=\"cursor: pointer;\">+%d</a>]</span>",\r
- i, i, i, popup_button);\r
- }\r
- }\r
- fputs("</td>\n",f);\r
- /* ----------------------------------------------- */\r
\r
- if(found_lmsid)\r
+ printf("Writing %s", classmap); \r
+ f = fopen(classmap, "w"); \r
+ if(f < 0)\r
+ {\r
+ perror(classmap);\r
+ }\r
+\r
+ /*-----------------------------------------------------------------*/\r
+ printf(" + generating iptables and tc classes ... ");\r
+ /*-----------------------------------------------------------------*/\r
+\r
+ for_each(ip, ips) if(ip->mark > 0)\r
+ {\r
+ for_each(interface, interfaces)\r
+ {\r
+ char *chain;\r
+ if(idxs)\r
{\r
- fputs("<td style=\"text-align: right\">",f);\r
- if(ip->lmsid > 0)\r
+ char *buf;\r
+ duplicate(ip->addr,buf);\r
+ if(ip->v6)\r
{\r
- /*base URL will be configurable soon ... */\r
- fprintf(f,"<a class=\"blue\" href=\"%s%d\">%04d</a>\n", lms_url, ip->lmsid, ip->lmsid);\r
+ buf=index6_id(ip->addr,64-idxtable_bitmask1);\r
}\r
- else if(ip->lmsid == 0)\r
+ else\r
{\r
- fputs("-------",f);\r
+ buf=index_id(ip->addr,32-idxtable_bitmask1);\r
}\r
- fputs("</td>\n",f);\r
- }\r
- fprintf(f,"<td style=\"text-align: right\">%Lu M</td>\n", ip->credit);\r
- fprintf(f,"<td style=\"text-align: right\"><span style=\"color:#%s\">%Lu M</span></td>",\r
- ip->keyword->html_color,\r
- ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)));\r
- fprintf(f,"<td style=\"text-align: right\">%s%Lu M%s", f1, ip->traffic, f2);\r
-\r
- /* download --------------------------------------- */\r
- fprintf(f,"</td><td style=\"text-align: right\">%Lu M", ip->direct);\r
- if(use_jquery_popups)\r
- {\r
- fprintf(f,"<span id=\"download_%d\" style=\"display:none\">",i);\r
- for_each(sharedip, ips) if(eq(ip->name, sharedip->sharing))\r
- {\r
- fprintf(f,"<br />%Lu M", sharedip->direct);\r
- }\r
- fputs("</span>\n",f);\r
- }\r
- fputs("</td>\n",f);\r
- /* ----------------------------------------------- */\r
+ \r
+ string(chain, 6+strlen(buf));\r
+ sprintf(chain, "%s_", interface->idxprefix);\r
+ strcat(chain, buf);\r
\r
- if(qos_proxy)\r
- {\r
- fprintf(f,"<td style=\"text-align: right\">%Lu M</td>\n", ip->proxy);\r
+ free(buf);\r
}\r
- /* upload ---------------------------------------- */\r
- fprintf(f,"<td style=\"text-align: right\">%Lu M", ip->upload);\r
- if(use_jquery_popups)\r
+ else\r
{\r
- fprintf(f,"<span id=\"upload_%d\" style=\"display:none\">",i);\r
- for_each(sharedip,ips) if(eq(ip->name, sharedip->sharing))\r
- {\r
- fprintf(f,"<br />%Lu M", sharedip->upload);\r
- }\r
- fputs("</span>\n",f);\r
+ chain = interface->chain;\r
}\r
- fputs("</td>\n",f);\r
- /* ----------------------------------------------- */\r
-\r
- fprintf(f,"<td style=\"text-align: right\">%d k</td><td style=\"text-align: right\">%d k</td><td style=\"text-align: right\">%s%d k%s</td><td>%s%d%s</td></tr>\n",\r
- ip->min,ip->desired,f1,ip->max,f2,f1,ip->prio,f2);\r
\r
- total_traffic+=ip->traffic;\r
- total_direct+=ip->direct;\r
- total_proxy+=ip->proxy;\r
- total_upload+=ip->upload;\r
- if(ip->traffic>0)\r
+ /* packet limits - this will be optional in future */\r
+ if(ip->pps_limit)\r
{\r
- active_classes++;\r
- tmp_sum+=ip->traffic;\r
- create(sum,Sum);\r
- sum->l=tmp_sum;\r
- sum->i=active_classes;\r
- insert(sum,sums,order_by,i);\r
+ sprintf(limit_pkts, "-m limit --limit %d/s --limit-burst %d ", \r
+ ip->pps_limit, ip->pps_limit);\r
}\r
-\r
- if(!just_preview)\r
+ else\r
{\r
- sprintf(str,"%s/%s.log",log_dir,ip->name);\r
- iplog=fopen(str,"a");\r
- if(iplog)\r
- {\r
- fprintf(iplog,"%ld\t%s\t%Lu\t%Lu\t%Lu\t%Lu\t%d\t%d\t%d\t%d\t%s",\r
- time(NULL), ip->name, ip->traffic, ip->direct, ip->proxy,\r
- ip->upload, ip->min, ip->max, ip->desired, ip->lmsid, d); /* d = date*/\r
- fclose(iplog);\r
- }\r
- }\r
- }\r
- fprintf(f,"<tr><th colspan=\"%d\" style=\"text-align: left\">%d CLASSES</th>", colspan-7, i);\r
- fprintf(f,"<th style=\"text-align: right\">%Lu M</th><th style=\"text-align: right\">%Lu M</th>\n", total_traffic, total_direct);\r
- if(qos_proxy)\r
- {\r
- fprintf(f,"<th style=\"text-align: right\">%Lu M</th>\n", total_proxy);\r
- }\r
- fprintf(f,"<th style=\"text-align: right\">%Lu M</th>", total_upload);\r
- fprintf(f,"<th colspan=\"4\"><span style=\"color:red\">FUP-LIMIT %dx</span> <span style=\"color:brown\">LOW-PRIO %dx</span></th></tr>\n</tbody></table>\n",limit_count,prio_count);\r
-\r
- row_odd_even = 0;\r
- if(active_classes>10)\r
- {\r
- int top20_count=0,top20_perc1=0;\r
- long long top20_perc2=0;\r
- unsigned long long top20_sum=0l;\r
- \r
- fputs("<a name=\"erp\"></a><p><table class=\"decorated last\"><thead><caption>Enterprise Resource Planning (ERP)</caption>\n",f);\r
- fputs("<tr><td>Analytic category</td>\n",f);\r
- fputs("<td colspan=\"2\" style=\"text-align: center\">Active Classes</td><td colspan=\"2\" style=\"text-align: center\">Data transfers</td></tr></thead><tbody>\n",f);\r
-\r
- if_exists(sum,sums,sum->l>=total_traffic/4)\r
+ *limit_pkts = 0;\r
+ } \r
+\r
+ #ifdef DEBUG\r
+ printf("%-22s %-16s %04d %d/s\n", ip->name, ip->addr, ip->mark, ip->pps_limit); \r
+ #endif\r
+\r
+ /* ------------------------------------------------ iptables classify */\r
+ sprintf(str, "-A %s -d %s/%d -o %s -j %s%d",\r
+ chain, ip->addr, ip->mask,\r
+ interface->name, mark_iptables, ip->mark);\r
+ iptables_save_line(str, ip->v6);\r
+\r
+ sprintf(str, "-A %s -d %s/%d -o %s %s-j ACCEPT",\r
+ chain, ip->addr, ip->mask, interface->name, limit_pkts);\r
+ iptables_save_line(str, ip->v6);\r
+\r
+ /* classify overlimit packets to separate overlimit class */\r
+ sprintf(str, "-A %s -d %s/%d -o %s -j %s%d",\r
+ chain, ip->addr, ip->mask,\r
+ interface->name, mark_iptables, OVERLIMIT_CLASS);\r
+ iptables_save_line(str, ip->v6);\r
+\r
+ sprintf(str, "-A %s -d %s/%d -o %s -j ACCEPT",\r
+ chain, ip->addr, ip->mask, interface->name);\r
+ iptables_save_line(str, ip->v6);\r
+\r
+ if(ip->min)\r
{\r
- fprintf(f,"%s<td>Top 25%% of traffic</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%Lu M</td><td style=\"text-align: right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);\r
- }\r
+ //TODO - min and max should not exceed interface->speed\r
\r
- if_exists(sum,sums,sum->i==10)\r
- {\r
- fprintf(f,"%s<td>Top 10 downloaders</td>\n", tr_odd_even());\r
- fprintf(f,"<th style=\"text-align: right\">10</th><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%Lu M</td><td style=\"text-align: right\">%Ld %%</td></tr>\n",(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);\r
- }\r
-\r
- if_exists(sum,sums,sum->l>=total_traffic/2)\r
- {\r
- fprintf(f,"%s<td>Top 50%% of traffic</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%Lu M</td><th style=\"text-align: right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);\r
- }\r
-\r
- if_exists(sum,sums,sum->l>=4*total_traffic/5)\r
- {\r
- fprintf(f,"%s<td>Top 80%% of traffic</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%Lu M</td><th style=\"text-align: right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);\r
- }\r
-\r
- if_exists(sum,sums,sum->i>=(active_classes+1)/5)\r
- {\r
- fprintf(f,"%s<td>Top 20%% downloaders</td>\n", tr_odd_even());\r
- top20_count=sum->i;\r
- top20_perc1=(100*sum->i+50)/active_classes;\r
- top20_sum=sum->l;\r
- top20_perc2=(100*sum->l+50)/total_traffic;\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><th style=\"text-align: right\">%d %%</th><td style=\"text-align: right\">%Lu M</td><td style=\"text-align: right\">%Ld %%</td></tr>\n",top20_count,top20_perc1,top20_sum,top20_perc2);\r
- }\r
-\r
- if_exists(sum,sums,sum->i>=(active_classes+1)/4)\r
- {\r
- fprintf(f,"%s<td>Top 25%% downloaders</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%Lu M</td><td style=\"text-align: right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);\r
- }\r
-\r
- if_exists(sum,sums,sum->i>=(active_classes+1)/2)\r
- {\r
- fprintf(f,"%s<td>Top 50%% downloaders</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><th style=\"text-align: right\">%d %%</th><td style=\"text-align: right\">%Lu M</td><td style=\"text-align: right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);\r
- }\r
+ /* -------------------------------------------------------- tc class */\r
+ #ifdef DEBUG\r
+ printf("[down: %dk-%dk]", ip->min, ip->max);\r
+ #endif\r
\r
- if_exists(sum,sums,sum->i>=4*(active_classes+1)/5)\r
- {\r
- fprintf(f,"%s<td>Top 80%% downloaders</td>\n", tr_odd_even());\r
- fprintf(f,"<td style=\"text-align: right\">%d</td><td style=\"text-align: right\">%d %%</td><td style=\"text-align: right\">%Lu M</td><td style=\"text-align: right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);\r
- }\r
+ sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", \r
+ tc, interface->name, ip->group, ip->mark, ip->min, ip->max, burst, ip->prio);\r
+ safe_run(str);\r
\r
- fprintf(f,"<tr><td><a class=\"blue\" href=\"%sERP.log\">All users, all traffic</a></td>\n", log_url);\r
- fprintf(f,"<th style=\"text-align: right\">%d</th>\n\\r
-<th style=\"text-align: right\">100 %%</th>\n\\r
-<th style=\"text-align: right\">%Lu M</th>\n\\r
-<th style=\"text-align: right\">100 %%</th></tr>\n",active_classes,total_traffic);\r
- fputs("</tbody></table>\n", f);\r
+ if(strcmpi(ip->keyword->leaf_discipline, "none"))\r
+ {\r
+ sprintf(str, "%s qdisc add dev %s parent 1:%d handle %d %s", \r
+ tc, interface->name, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/\r
+ safe_run(str);\r
+ }\r
\r
- /* write basic ERP data to log directory */\r
- if(!just_preview)\r
- {\r
- sprintf(str,"%s/ERP.log",log_dir);\r
- iplog=fopen(str,"a");\r
- if(iplog)\r
+ if(filter_type == 1)\r
{\r
- fprintf(iplog,"%ld\t%d\t%d %%\t%Lu M\t%Ld %%\tACTIVE %d\tTRAFFIC %Lu M\tCLASSES %d\tFUP-LIMIT %d\tLOW-PRIO %d\t%s",\r
- time(NULL), top20_count, top20_perc1, top20_sum, top20_perc2, \r
- active_classes, total_traffic, i, limit_count, prio_count, d); /* d = date*/\r
- fclose(iplog);\r
+ sprintf(str, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",\r
+ tc, interface->name, ip->mark, ip->mark);\r
+ safe_run(str);\r
}\r
}\r
+ else\r
+ {\r
+ #ifdef DEBUG\r
+ printf("(sharing %s)\n", ip->sharing);\r
+ #endif\r
+ }\r
+ i++;\r
+ }\r
+ if(ip->min && f > 0)\r
+ {\r
+ fprintf(f, "%s %d\n", ip->addr, ip->mark);\r
}\r
-\r
- fprintf(f, stats_html_signature, version);\r
- fclose(f);\r
}\r
-\r
- if(just_preview)\r
+ if(f > 0)\r
{\r
- puts("Statistics preview generated (-p switch) - now exiting ...");\r
- exit(0);\r
+ puts("done.");\r
+ fclose(f);\r
}\r
- \r
- /*-----------------------------------------------------------------*/\r
- puts("Generating iptables and tc classes ...");\r
- /*-----------------------------------------------------------------*/\r
-\r
- i=0;\r
-#ifdef DEBUG\r
- printf("%-22s %-15s mark\n","name","ip");\r
-#endif\r
\r
- for_each(ip,ips) if(ip->mark>0)\r
- { \r
+ for_each(interface, interfaces)\r
+ {\r
+ char *chain;\r
if(idxs)\r
{\r
- char *buf;\r
- duplicate(ip->addr,buf);\r
- buf=hash_id(ip->addr,32-idxtable_bitmask1); \r
- \r
- string(chain_forward,6+strlen(buf));\r
- strcpy(chain_forward,"forw_");\r
- strcat(chain_forward,buf);\r
-\r
- string(chain_postrouting,6+strlen(buf));\r
- strcpy(chain_postrouting,"post_");\r
- strcat(chain_postrouting,buf);\r
- \r
- free(buf);\r
+ string(chain, STRLEN);\r
+ sprintf(chain, "%s_common", interface->idxprefix);\r
}\r
else\r
{\r
- chain_forward="FORWARD";\r
- chain_postrouting="POSTROUTING";\r
- }\r
-\r
-#ifdef DEBUG\r
- printf("%-22s %-16s %04d ", ip->name, ip->addr, ip->mark); \r
-#endif\r
-\r
- /* -------------------------------------------------------- mark download */\r
- \r
- sprintf(str,"-A %s -d %s/32 -o %s -j %s%d",chain_postrouting,ip->addr,lan,mark_iptables,ip->mark);\r
- /*sprintf(str,"-A %s -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,ip->addr,lan,ip->mark);*/\r
- /* -m limit --limit 1/s */ \r
- save_line(str);\r
-\r
- if(qos_proxy)\r
- {\r
- sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,mark_iptables,ip->mark);\r
- /*sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,ip->mark);*/\r
- save_line(str);\r
+ chain = interface->chain;\r
}\r
\r
- sprintf(str,"-A %s -d %s/32 -o %s -j ACCEPT",chain_postrouting,ip->addr,lan);\r
- save_line(str);\r
-\r
- /* -------------------------------------------------------- mark upload */\r
- sprintf(str,"-A %s -s %s/32 -o %s -j %s%d",chain_forward,ip->addr,wan,mark_iptables,ip->mark);\r
- /* sprintf(str,"-A %s -s %s/32 -o %s -j MARK --set-mark %d",chain_forward,ip->addr,wan,ip->mark);*/\r
- save_line(str);\r
-\r
- sprintf(str,"-A %s -s %s/32 -o %s -j ACCEPT",chain_forward,ip->addr,wan);\r
- save_line(str);\r
-\r
- if(ip->min)\r
+ if(free_min)\r
{\r
- /* -------------------------------------------------------- download class */\r
-#ifdef DEBUG\r
- printf("(down: %dk-%dk ", ip->min, ip->max); \r
-#endif\r
-\r
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);\r
- safe_run(str);\r
-\r
- if(strcmpi(ip->keyword->leaf_discipline, "none"))\r
- {\r
- sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s", tc, lan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/\r
- safe_run(str);\r
- } \r
- if(filter_type == 1)\r
- {\r
- sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc, lan, ip->mark, ip->mark);\r
- safe_run(str);\r
- }\r
+ final_chain = "ACCEPT";\r
\r
- /* -------------------------------------------------------- upload class */\r
-#ifdef DEBUG\r
- printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), \r
- (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));\r
-#endif\r
-\r
- sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
- tc, wan, ip->group, ip->mark,\r
- (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),\r
- (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);\r
- safe_run(str);\r
- \r
- if(strcmpi(ip->keyword->leaf_discipline, "none"))\r
- {\r
- sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s",tc, wan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/\r
- safe_run(str);\r
- } \r
- if(filter_type == 1)\r
- {\r
- sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",tc, wan, ip->mark, ip->mark);\r
- safe_run(str);\r
- }\r
+ sprintf(str, "-A %s -o %s -j %s%d",\r
+ chain, interface->name, mark_iptables, FREE_CLASS);\r
+ iptables_save_line(str, FALSE); /* only for IPv4 */\r
}\r
- else\r
+\r
+ sprintf(str,"-A %s -o %s -j %s", chain, interface->name, final_chain);\r
+ iptables_save_line(str, FALSE);\r
+ if(ip6prefix)\r
{\r
-#ifdef DEBUG\r
- printf("(sharing %s)\n", ip->sharing);\r
-#endif\r
+ sprintf(str,"-A %s -o %s -j %s", chain, interface->name, final_chain);\r
+ iptables_save_line(str, TRUE);\r
}\r
- i++;\r
- }\r
-\r
- if(idxs)\r
- {\r
- chain_forward = "forw_common";\r
- chain_postrouting = "post_common";\r
- }\r
- else\r
- {\r
- chain_forward = "FORWARD";\r
- chain_postrouting = "POSTROUTING";\r
- }\r
- /* -------------------------------- classify or reject free download */\r
- {\r
- char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */\r
- if(free_min) final_chain = "ACCEPT";\r
- if(qos_proxy)\r
- {\r
- if(free_min)\r
- {\r
- sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables,3);\r
- save_line(str);\r
- }\r
- sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s",chain_postrouting,proxy_ip,proxy_port,lan,final_chain);\r
- save_line(str);\r
- }\r
- if(free_min)\r
- {\r
- sprintf(str,"-A %s -o %s -j %s%d",chain_postrouting,lan,mark_iptables,3);\r
- save_line(str);\r
- }\r
- sprintf(str,"-A %s -o %s -j %s",chain_postrouting,lan,final_chain);\r
- save_line(str);\r
- /* ------------------------------- classify or reject free upload */\r
- if(free_min)\r
- {\r
- sprintf(str,"-A %s -o %s -j %s%d",chain_forward,wan,mark_iptables,3);\r
- save_line(str);\r
- }\r
- sprintf(str,"-A %s -o %s -j %s",chain_forward,wan,final_chain);\r
- save_line(str);\r
- }\r
\r
- if(free_min) /* allocate free bandwith if it is not zero... */ \r
- {\r
+ if(free_min) /* allocate free bandwith if it is not zero... */ \r
+ {\r
/*-----------------------------------------------------------------*/\r
- puts("Generating free bandwith classes ...");\r
+ puts("Generating free bandwith class ...");\r
/*-----------------------------------------------------------------*/\r
- sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
- tc,lan,parent,free_min,free_max,burst,lowest_priority);\r
- safe_run(str);\r
- sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
- tc,wan,parent,free_min,free_max,burst,lowest_priority);\r
+ sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
+ tc, interface->name, parent, FREE_CLASS, free_min, free_max,burst, lowest_priority);\r
safe_run(str);\r
/* tc SFQ */\r
if(strcmpi(qos_leaf, "none"))\r
{\r
- sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,lan,qos_leaf);\r
- safe_run(str);\r
- \r
- sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,wan,qos_leaf);\r
+ sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s", tc, interface->name, FREE_CLASS, FREE_CLASS, qos_leaf);\r
safe_run(str);\r
} \r
/* tc handle 1 fw flowid */\r
- sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,lan);\r
+ sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc, interface->name, FREE_CLASS, FREE_CLASS);\r
safe_run(str);\r
\r
- sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,wan);\r
+ /*-----------------------------------------------------------------*/\r
+ puts("Generating bandwith class for overlimit packets...");\r
+ /*-----------------------------------------------------------------*/\r
+ sprintf(str, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",\r
+ tc, interface->name, parent, OVERLIMIT_CLASS, overlimit_min, overlimit_max, burst, lowest_priority);\r
safe_run(str);\r
- }\r
+ }\r
+ } \r
printf("Total IP count: %d\n", i);\r
- run_restore(); \r
+ run_iptables_restore();\r
if(log_file)\r
{\r
fclose(log_file);\r
GIT.Harvie.CZ / svn / Prometheus-QoS / .git / blobdiff