313941946142eb2cba45a134ae20ae66c507bff6
1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2015 Michael Polak, Arachne Aerospace */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
10 /* Modified by: xChaos, 20150315
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
27 GNU General Public License is located in file COPYING */
29 #include "cll1-0.6.2.h"
32 const char *version
= "0.8.5-c";
34 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
35 /* Versions: 0.8.3 is development release, 0.8.4 will be "stable" */
36 /* Official Trac URL: https://dev.arachne.cz/svn/prometheus */
37 /* Official SVN URL: https://dev.arachne.cz/repos/prometheus */
38 /* BTC donations account: 19rriLx8vR19wGefPaMhakqnCYNYwjLvxq */
39 /* CZK donations account: 2900242944/2010 (transparent account) */
40 /* Warning: unofficial Github mirror is not supported by author! */
41 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
43 const char *stats_html_signature
= "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2015 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";
48 /* ======= All path names are defined here (for RPM patch) ======= */
50 const char *tc
= "/sbin/tc"; /* requires tc with HTB support */
51 const char *iptables
= "/sbin/iptables"; /* requires iptables utility */
52 const char *ip6tables
= "/sbin/ip6tables"; /* requires iptables utility */
53 const char *iptablessave
= "/sbin/iptables-save"; /* not yet required */
54 const char *iptablesrestore
= "/sbin/iptables-restore"; /* requires iptables-restore */
55 const char *ip6tablessave
= "/sbin/ip6tables-save"; /* not yet required */
56 const char *ip6tablesrestore
= "/sbin/ip6tables-restore"; /* requires iptables-restore */
57 const char *ls
= "/bin/ls"; /* this is not user configurable :-) */
59 char *config
= "/etc/prometheus/prometheus.conf"; /* main configuration file */
60 char *hosts
= "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
61 char *macrosfile
= "/etc/prometheus/prometheus.macros"; /* rewrite rules for most common tariffs */
62 char *iptablesfile
= "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
63 char *ip6tablesfile
= "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/
64 char *credit
= "/var/lib/misc/prometheus.credit"; /* credit log file */
65 char *classmap
= "/var/lib/misc/prometheus.classes"; /* credit log file */
66 char *html
= "/var/www/traffic.html"; /* hall of fame - html version */
67 char *preview
= "/var/www/preview.html"; /* hall of fame preview - html version */
68 char *json_traffic
= "/var/www/logs/traffic.json"; /* hall of fame - json version */
69 char *json_preview
= "/var/www/logs/preview.json"; /* hall of fame preview - json version */
70 char *cmdlog
= "/var/log/prometheuslog"; /* command log filename */
71 char *log_dir
= "/var/www/logs/"; /* log directory pathname, ended with slash */
72 char *log_url
= "/logs/"; /* log directory relative URI prefix (partial URL) */
73 char *html_log_dir
= "/var/www/logs/html/";
75 char *jquery_url
= "http://code.jquery.com/jquery-latest.js";
76 char *lms_url
= "/lms/?m=customerinfo&id=";
77 int use_jquery_popups
= TRUE
;
78 int row_odd_even
= 0; /*<tr class="odd/even"> */
80 /* === Configuraration file values defaults - stored in global variables ==== */
82 int filter_type
= 1; /*1 mark, 2 classify*/
83 char *final_chain
= "DROP"; /* REJECT would be better, but it is impossible in mangle */
85 char *mark_iptables
= "MARK --set-mark ";
86 int dry_run
= FALSE
; /* preview - use puts() instead of system() */
87 char *iptablespreamble
= "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
88 char *ip6preamble
= "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT\n-A FORWARD -s fe80::/10 -j ACCEPT\n-A FORWARD -d ff00::/8 -j ACCEPT\n-A POSTROUTING -s fe80::/10 -j ACCEPT\n-A POSTROUTING -d ff00::/8 -j ACCEPT";
89 FILE *iptables_file
= NULL
;
90 FILE *ip6tables_file
= NULL
;
91 int enable_credit
= TRUE
; /* enable credit file */
92 int use_credit
= FALSE
; /* use credit file (if enabled)*/
93 char *title
= "Hall of Fame - Greatest Suckers"; /* hall of fame title */
94 int hall_of_fame
= TRUE
; /* enable hall of fame */
95 char *lan
= "eth0"; /* LAN interface */
96 char *lan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
97 char *wan
= "eth1"; /* WAN/ISP interface */
98 char *ip6prefix
= NULL
; /* Prefix for global /48 IPv6 subnet */
99 char *wan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
100 char *qos_leaf
= "sfq perturb 5"; /* leaf discipline */
101 char *qos_free_zone
= NULL
; /* QoS free zone */
102 /* int qos_proxy = TRUE; include proxy port to QoS */
103 int found_lmsid
= FALSE
; /* show links to users in LMS information system */
104 int include_upload
= TRUE
; /* upload+download=total traffic */
105 /* char *proxy_ip = "192.168.1.1/32"; our IP with proxy port */
106 /* int proxy_port = 3128; proxy port number */
107 long long int line
= 1024; /* WAN/ISP download in kbps */
108 long long int up
= 1024; /* WAN/ISP upload in kbps */
109 int free_min
= 256; /* minimum guaranted bandwidth for all undefined hosts */
110 int free_max
= 512; /* maximum allowed bandwidth for all undefined hosts */
111 int overlimit_min
= 256; /* minimum guaranted bandwidth for all undefined hosts */
112 int overlimit_max
= 512; /* maximum allowed bandwidth for all undefined hosts */
113 int qos_free_delay
= 0; /* seconds to sleep before applying new QoS rules */
114 int digital_divide
= 2; /* controls digital divide weirdness ratio, 1...3 */
115 int max_nesting
= 5; /* /include/uapi/linux/pkt_sched.h: #define TC_HTB_MAXDEPTH 8 [... - 3 parent classes] */
116 int htb_r2q
= 256; /* should work for leaf values 512 kbps to 8 Mbps */
117 int burst
= 8; /* HTB burst (in kbits) */
119 int burst_group
= 32;
120 int magic_treshold
= 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
121 int keywordcount
= 0;
124 FILE *log_file
= NULL
;
125 char *kwd
= "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
127 const int highest_priority
= 0; /* highest HTB priority (HTB built-in value is 0) */
128 const int lowest_priority
= 7; /* lowest HTB priority /include/uapi/linux/pkt_sched.h: #define TC_HTB_NUMPRIO 8 */
129 const int idxtable_treshold1
= 24; /* this is no longer configurable */
130 const int idxtable_treshold2
= 12; /* this is no longer configurable */
131 const int idxtable_bitmask1
= 3; /* this is no longer configurable */
132 const int idxtable_bitmask2
= 3; /* this is no longer configurable */
134 struct IP
*ips
= NULL
, *networks
= NULL
, *ip
, *sharedip
;
135 struct Group
*groups
= NULL
, *group
;
136 struct Keyword
*keyword
, *defaultkeyword
=NULL
, *keywords
= NULL
;
137 struct Macro
*macro
, *macros
= NULL
;
140 #define OVERLIMIT_CLASS 4
143 /* implemented in help.c */
145 void get_traffic_statistics(const char *whichiptables
, int ipv6
);
146 /* implemented in parseiptables.c */
148 void parse_ip_log(int argc
, char **argv
);
149 /* implemented in parselog.c */
151 void parse_hosts(char *hosts
);
152 /* implemented in parsehosts.c */
154 void write_json_traffic(char *json
);
155 /* implemented in json.c */
157 void write_htmlandlogs(char *html
, char *d
, int total
, int just_preview
);
158 /* implemented in htmlandlogs.c */
160 void analyse_topology(char *traceroute
);
161 /* implemented in networks.c */
163 char *parse_datafile_line(char *str
);
164 /* implemented in utils.c */
166 time_t get_mtime(const char *path
);
167 /* implemented in utils.c */
169 const char *tr_odd_even(void)
171 row_odd_even
= 1 - row_odd_even
;
174 return "<tr class=\"even\">\n";
178 return "<tr class=\"odd\">\n";
182 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
183 /* (except that this code uses obsolete, archaic version of this header file...) */
189 struct Index
*parent
;
194 } *idxs
=NULL
, *idx
, *metaindex
;
197 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
199 char *index_id(char *ip
, int bitmask
);
200 /* function implemented in ipv4subnets.c */
202 char *subnet_id(char *ip
, int bitmask
);
203 /* function implemented in ipv4subnets.c */
205 char *index6_id(char *ip
, int bitmask
);
206 /* function implemented in ipv6subnets.c */
208 char *subnet6_id(char *ip
, int bitmask
);
209 /* function implemented in ipv6subnets.c */
211 /* ================= Let's parse configuration file here ================ */
213 void reject_config_and_exit(char *filename
)
215 printf("Configuration file %s rejected - abnormal exit.",filename
);
219 void get_config(char *config_filename
)
223 printf("Configured keywords: ");
224 parse(config_filename
)
226 option("keyword",kwd
);
231 create(keyword
,Keyword
);
233 keyword
->asymetry_ratio
= 1; /* ratio for ADSL-like upload */
234 keyword
->asymetry_fixed
= 0; /* fixed treshold for ADSL-like upload */
235 keyword
->data_limit
= 8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
236 keyword
->data_prio
= 4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
237 keyword
->fixed_limit
= 0; /* fixed data limit for setting lower HTB ceil */
238 keyword
->fixed_prio
= 0; /* fixed data limit for setting lower HTB prio */
239 keyword
->reserve_min
= 8; /* bonus for nominal HTB rate bandwidth (in kbps) */
240 keyword
->reserve_max
= 0; /* malus for nominal HTB ceil (in kbps) */
241 keyword
->default_prio
= highest_priority
+1;
242 keyword
->download_aggregation
= keyword
->upload_aggregation
= 0; /* disable by default */
243 keyword
->html_color
= "000000";
244 keyword
->ip_count
= 0;
245 keyword
->leaf_discipline
= "";
246 keyword
->allowed_avgmtu
= 0;
247 keyword
->download_aggregation
= keyword
->upload_aggregation
= 1;
249 push(keyword
, keywords
);
252 defaultkeyword
= keyword
;
260 for_each(keyword
,keywords
)
262 int l
=strlen(keyword
->key
);
264 if(!strncmp(keyword
->key
,_
,l
) && strlen(_
)>l
+2)
266 char *tmptr
=_
; /* <---- l+1 ----> */
267 _
+=l
+1; /* via-prometheus-asymetry-ratio, etc. */
268 foption("asymetry-ratio", keyword
->asymetry_ratio
);
269 ioption("asymetry-treshold", keyword
->asymetry_fixed
);
270 ioption("magic-relative-limit", keyword
->data_limit
);
271 ioption("magic-relative-prio", keyword
->data_prio
);
272 loption("magic-fixed-limit", keyword
->fixed_limit
);
273 loption("magic-fixed-prio", keyword
->fixed_prio
);
274 ioption("htb-default-prio", keyword
->default_prio
);
275 ioption("htb-rate-bonus", keyword
->reserve_min
);
276 ioption("htb-ceil-malus", keyword
->reserve_max
);
277 ioption("download-aggregation", keyword
->download_aggregation
);
278 ioption("upload-aggregation", keyword
->upload_aggregation
);
279 option("leaf-discipline", keyword
->leaf_discipline
);
280 option("html-color", keyword
->html_color
);
281 ioption("allowed-avgmtu" ,keyword
->allowed_avgmtu
);
284 if(keyword
->data_limit
|| keyword
->fixed_limit
||
285 keyword
->data_prio
|| keyword
->fixed_prio
)
294 option("iptables",iptables
);
295 option("iptables-save",iptablessave
);
296 option("iptables-restore",iptablesrestore
);
297 option("ip6tables",ip6tables
);
298 option("ip6tables-save",ip6tablessave
);
299 option("ip6tables-restore",ip6tablesrestore
);
300 option("iptables-in-filename",iptablesfile
);
301 option("ip6tables-in-filename",ip6tablesfile
);
302 option("hosts",hosts
);
303 option("lan-interface",lan
);
304 option("wan-interface",wan
);
305 option("ip6-prefix",ip6prefix
);
306 option("lan-medium",lan_medium
);
307 option("wan-medium",wan_medium
);
308 lloption("wan-download",line
);
309 lloption("wan-upload",up
);
310 ioption("hall-of-fame-enable",hall_of_fame
);
311 option("hall-of-fame-title",title
);
312 option("hall-of-fame-filename",html
);
313 option("json-filename",json_traffic
);
314 option("hall-of-fame-preview",preview
);
315 option("json-preview",json_preview
);
316 option("log-filename",cmdlog
);
317 option("credit-filename",credit
);
318 option("classmap-filename",classmap
);
319 ioption("credit-enable",enable_credit
);
320 option("log-traffic-directory",log_dir
);
321 option("log-traffic-html-directory",html_log_dir
);
322 option("log-traffic-url-path",log_url
);
323 option("jquery-url",jquery_url
);
324 option("lms-url",lms_url
);
325 ioption("use-jquery-popups",use_jquery_popups
);
326 option("qos-free-zone",qos_free_zone
);
327 ioption("qos-free-delay",qos_free_delay
);
328 /* ioption("qos-proxy-enable",qos_proxy); */
329 /* option("qos-proxy-ip",proxy_ip);*/
330 option("htb-leaf-discipline",qos_leaf
);
331 /* ioption("qos-proxy-port",proxy_port); */
332 ioption("free-rate",free_min
);
333 ioption("free-ceil",free_max
);
334 ioption("overlimit-rate",overlimit_min
);
335 ioption("overlimit-ceil",overlimit_max
);
336 ioption("htb-burst",burst
);
337 ioption("htb-burst-main",burst_main
);
338 ioption("htb-burst-group",burst_group
);
339 ioption("htb-nesting-limit",max_nesting
);
340 ioption("htb-r2q",htb_r2q
);
341 ioption("magic-include-upload",include_upload
);
342 ioption("magic-treshold",magic_treshold
);
343 option("filter-type", cnf
);
344 /* not yet implemented:
345 ioption("magic-fixed-packets",fixed_packets);
346 ioption("magic-relative-packets",packet_limit);
351 perror(config_filename
);
352 puts("Warning - using built-in defaults instead ...");
354 done
; /* ugly macro end */
357 /* leaf discipline for keywords */
358 for_each(keyword
,keywords
)
360 if(!strcmpi(keyword
->leaf_discipline
, ""))
362 keyword
->leaf_discipline
= qos_leaf
;
366 if(strcmpi(cnf
, "mark"))
370 mark_iptables
= "CLASSIFY --set-class 1:";
376 mark_iptables
= "MARK --set-mark ";
379 /* are supplied values meaningful ?*/
382 puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
383 reject_config_and_exit(config_filename
);
388 /* ========== This function executes, logs OR ALSO prints command ========== */
390 void safe_run(char *cmd
)
394 printf("\n=>%s\n",cmd
);
402 fprintf(log_file
,"%s\n",cmd
);
406 void iptables_save_line(char *line
, int ipv6
)
410 fprintf(ip6tables_file
,"%s\n",line
);
414 fprintf(iptables_file
,"%s\n",line
);
418 void run_iptables_restore(void)
421 string(restor
,STRLEN
);
423 /*-----------------------------------------------------------------*/
424 printf("Running %s <%s ...\n", iptablesrestore
, iptablesfile
);
425 /*-----------------------------------------------------------------*/
427 iptables_save_line("COMMIT", FALSE
);
428 fclose(iptables_file
);
435 done
; /* ugly macro end */
438 sprintf(restor
,"%s <%s",iptablesrestore
, iptablesfile
);
443 /*-----------------------------------------------------------------*/
444 printf("Running %s <%s ...\n", ip6tablesrestore
, ip6tablesfile
);
445 /*-----------------------------------------------------------------*/
446 iptables_save_line("COMMIT", TRUE
);
447 fclose(ip6tables_file
);
454 done
; /* ugly macro end */
456 sprintf(restor
,"%s <%s",ip6tablesrestore
, ip6tablesfile
);
464 char *parse_datafile_line(char *str
);
465 time_t get_mtime(const char *path
);
467 /*-----------------------------------------------------------------*/
468 /* Are you looking for int main(int argc, char **argv) ? :-)) */
469 /*-----------------------------------------------------------------*/
473 int i
=0; /* just plain old Fortran style integer :-) */
474 FILE *f
=NULL
; /* everything is just stream of bytes... */
475 char *str
, *ptr
, *d
; /* LET A$=B$ :-) */
476 char *substring
, *limit_pkts
;
479 int just_networks
= FALSE
;
480 int just_flush
= FALSE
; /* deactivates all previous actions */
482 int just_preview
= FALSE
; /* preview - generate just stats */
483 int start_shaping
= FALSE
; /* apply FUP - requires classmap file */
484 int stop_shaping
= FALSE
; /* lift FUP - requires classmap file */
485 int reduce_ceil
= 0; /* allow only rate+(ceil-rate)/2, /4, etc. */
486 int just_logs
= FALSE
; /* just parse logs */
490 char *chain_forward
, *chain_postrouting
;
494 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
495 Version %s - Copyright (C)2005-2015 Michael Polak, Arachne Labs\n\
496 iptables-restore & burst tunning & classify modification by Ludva\n\
497 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version
);
499 /*----- Boring... we have to check command line options first: ----*/
502 argument("-c") { nextargument(config
); }
503 argument("-h") { nextargument(althosts
);}
504 argument("-d") { run
=TRUE
; dry_run
=TRUE
; }
505 argument("-f") { run
=TRUE
; just_flush
=TRUE
; }
506 argument("-9") { run
=TRUE
; just_flush
=9; }
507 argument("-p") { run
=TRUE
; just_preview
=TRUE
; }
508 argument("-q") { run
=TRUE
; just_preview
=TRUE
; stop_shaping
=TRUE
; }
509 argument("-2") { run
=TRUE
; just_preview
=TRUE
; reduce_ceil
=2; }
510 argument("-4") { run
=TRUE
; just_preview
=TRUE
; reduce_ceil
=4; }
511 argument("-s") { run
=TRUE
; just_preview
=TRUE
; start_shaping
=TRUE
; }
512 argument("-r") { run
=TRUE
; }
513 argument("-n") { run
=TRUE
; nodelay
=TRUE
; }
514 argument("-a") { run
=TRUE
; just_networks
=TRUE
; }
515 argument("-l") { just_logs
=TRUE
; }
516 argument("-m") { just_logs
=TRUE
; }
517 argument("-y") { just_logs
=TRUE
; }
518 argument("-?") { help(); exit(0); }
519 argument("--help") { help(); exit(0); }
520 argument("-v") { exit(0); }
521 argument("--version") { exit(0); }
526 puts("*** THIS IS JUST DRY RUN ! ***\n");
529 date(d
); /* this is typical cll1.h macro - prints current date */
531 /*-----------------------------------------------------------------*/
532 printf("Parsing configuration file %s ...\n", config
);
533 /*-----------------------------------------------------------------*/
538 parse_ip_log(argc
,argv
);
554 /*-----------------------------------------------------------------*/
555 puts("Parsing iptables verbose output ...");
556 /*-----------------------------------------------------------------*/
557 get_traffic_statistics(iptables
, FALSE
);
560 /*-----------------------------------------------------------------*/
561 puts("Parsing ip6tables verbose output ...");
562 /*-----------------------------------------------------------------*/
563 get_traffic_statistics(ip6tables
, TRUE
);
567 /*-----------------------------------------------------------------*/
568 /* cll1.h - let's allocate brand new character buffer... */
569 /*-----------------------------------------------------------------*/
571 string(limit_pkts
, STRLEN
);
573 /*-----------------------------------------------------------------*/
574 printf("Parsing macro definition file %s ...\n", macrosfile
);
575 /*-----------------------------------------------------------------*/
578 ptr
= parse_datafile_line(_
);
581 create(macro
, Macro
);
582 macro
->rewrite_from
= _
;
583 macro
->rewrite_to
= ptr
;
585 printf("%s -> %s\n", macro
->rewrite_from
, macro
->rewrite_to
);
588 done
; /* ugly macro end */
590 /*-----------------------------------------------------------------*/
591 printf("Parsing class defintion file %s ...\n", hosts
);
592 /*-----------------------------------------------------------------*/
596 analyse_topology("/usr/sbin/traceroute -n -m 10 -w 2 %s.%d");
600 /*-----------------------------------------------------------------*/
601 puts("Resolving shared connections ...");
602 /*-----------------------------------------------------------------*/
603 for_each(ip
, ips
) if(ip
->sharing
)
605 for_each(sharedip
, ips
) if(eq(sharedip
->name
, ip
->sharing
))
607 sharedip
->traffic
+= ip
->traffic
;
609 ip
->mark
= sharedip
->mark
;
610 ip
->lmsid
= sharedip
->lmsid
;
611 ip
->pps_limit
= sharedip
->pps_limit
; /* no other way to do this */
613 /* Ugly hack: append IPv4 addresses of sharedip to IPv6 uplinks */
614 ptr
= strchr(ip
->addr
, '+');
615 if(ptr
&& ptr
-ip
->addr
> 1 && !sharedip
->v6
)
618 concatenate(ip
->addr
, sharedip
->addr
, ptr
);
619 ip
->name
= ip
->addr
= ptr
;
620 ptr
= strchr(ip
->addr
, '.');
624 ptr
= strchr(ptr
, '.');
633 printf("Unresolved shared connection: %s %s sharing-%s\n",
634 ip
->addr
, ip
->name
, ip
->sharing
);
638 if(enable_credit
&& just_flush
<9)
640 /*-----------------------------------------------------------------*/
641 printf("Parsing credit file %s ...\n", credit
);
642 /*-----------------------------------------------------------------*/
645 ptr
= parse_datafile_line(_
);
648 if_exists(ip
,ips
,eq(ip
->addr
,_
))
650 sscanf(ptr
,"%Lu",&(ip
->credit
));
654 done
; /* ugly macro end */
660 /*-----------------------------------------------------------------*/
661 puts("Initializing iptables and tc classes ...");
662 /*-----------------------------------------------------------------*/
664 iptables_file
= fopen(iptablesfile
, "w");
665 if(iptables_file
== NULL
)
667 perror(iptablesfile
);
670 iptables_save_line(iptablespreamble
, FALSE
);
674 ip6tables_file
= fopen(ip6tablesfile
, "w");
675 if(ip6tables_file
== NULL
)
677 perror(ip6tablesfile
);
680 iptables_save_line(iptablespreamble
, TRUE
);
681 iptables_save_line(ip6preamble
, TRUE
);
684 run_iptables_restore();
686 log_file
= fopen(cmdlog
, "w");
693 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,lan
);
696 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,wan
);
699 iptables_file
=fopen(iptablesfile
,"w");
700 iptables_save_line(iptablespreamble
, FALSE
);
703 ip6tables_file
=fopen(ip6tablesfile
,"w");
704 iptables_save_line(iptablespreamble
, TRUE
);
705 iptables_save_line(ip6preamble
, TRUE
);
708 if(qos_free_zone
&& *qos_free_zone
!='0') /* this is currently supported only for IPv4 */
712 sprintf(str
,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone
, wan
);
713 iptables_save_line(str
, FALSE
); /* this is currently supported only for IPv4 */
718 iptables_save_line(":post_noproxy - [0:0]", FALSE);
719 sprintf(str,"-A POSTROUTING ! -p tcp -o %s -j post_noproxy", lan);
720 iptables_save_line(str , FALSE);
721 sprintf(str,"-A POSTROUTING ! -s %s -o %s -j post_noproxy", proxy_ip, lan);
722 iptables_save_line(str, FALSE);
723 sprintf(str,"-A POSTROUTING -s %s -p tcp ! --sport %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
724 iptables_save_line(str, FALSE);
726 chain="post_noproxy";
732 chain
= "POSTROUTING";
735 sprintf(str
,"-A %s -s %s -o %s -j ACCEPT", chain
, qos_free_zone
, lan
);
736 iptables_save_line(str
, FALSE
);
739 if(ip_count
> idxtable_treshold1
&& !just_flush
)
741 int idxcount
=0, bitmask
=32-idxtable_bitmask1
;
743 /*-----------------------------------------------------------------*/
744 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count
);
745 /*-----------------------------------------------------------------*/
747 iptables_save_line(":post_common - [0:0]", FALSE
);
748 iptables_save_line(":forw_common - [0:0]", FALSE
);
751 iptables_save_line(":post_common - [0:0]", TRUE
);
752 iptables_save_line(":forw_common - [0:0]", TRUE
);
755 for_each(ip
,ips
) if(ip
->addr
&& *(ip
->addr
) && !eq(ip
->addr
,"0.0.0.0/0"))
759 buf
=index6_id(ip
->addr
,bitmask
+32);
763 buf
=index_id(ip
->addr
, bitmask
);
766 if_exists(idx
,idxs
,eq(idx
->id
,buf
))
773 idx
->addr
= ip
->addr
;
775 idx
->bitmask
= bitmask
+32*ip
->v6
;
784 /* brutal perfomance optimalization */
785 while(idxcount
> idxtable_treshold2
&& bitmask
> 2*idxtable_bitmask2
)
787 bitmask
-= idxtable_bitmask2
;
790 for_each(idx
,idxs
) if(idx
->parent
== NULL
)
794 buf
= index6_id(idx
->addr
, bitmask
+32);
798 buf
= index_id(idx
->addr
, bitmask
);
800 if_exists(metaindex
,idxs
,eq(metaindex
->id
,buf
))
802 metaindex
->children
++;
806 create(metaindex
,Index
);
807 metaindex
->addr
= idx
->addr
;
809 metaindex
->bitmask
= bitmask
+32*idx
->ipv6
;
810 metaindex
->parent
= NULL
;
811 metaindex
->children
= 0;
812 metaindex
->ipv6
= idx
->ipv6
;
814 push(metaindex
,idxs
);
816 idx
->parent
=metaindex
;
820 /* this should slightly optimize throughput ... */
821 sort(idx
,idxs
,desc_order_by
,children
);
822 sort(idx
,idxs
,order_by
,bitmask
);
829 subnet
=subnet6_id(idx
->addr
, idx
->bitmask
);
833 subnet
=subnet_id(idx
->addr
, idx
->bitmask
);
835 printf("%d: %s/%d\n", ++i
, subnet
, idx
->bitmask
);
837 sprintf(str
,":post_%s - [0:0]", idx
->id
);
838 iptables_save_line(str
, idx
->ipv6
);
840 sprintf(str
,":forw_%s - [0:0]", idx
->id
);
841 iptables_save_line(str
, idx
->ipv6
);
845 string(buf
,strlen(idx
->parent
->id
)+6);
846 sprintf(buf
,"post_%s", idx
->parent
->id
);
853 sprintf(str
,"-A %s -d %s/%d -o %s -j post_%s", buf
, subnet
, idx
->bitmask
, lan
, idx
->id
);
854 iptables_save_line(str
, idx
->ipv6
);
856 sprintf(str
,"-A %s -d %s/%d -o %s -j post_common", buf
, subnet
, idx
->bitmask
, lan
);
857 iptables_save_line(str
, idx
->ipv6
);
861 string(buf
,strlen(idx
->parent
->id
)+6);
862 sprintf(buf
,"forw_%s",idx
->parent
->id
);
869 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_%s", buf
, subnet
, idx
->bitmask
, wan
, idx
->id
);
870 iptables_save_line(str
, idx
->ipv6
);
872 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_common", buf
, subnet
, idx
->bitmask
, wan
);
873 iptables_save_line(str
, idx
->ipv6
);
875 printf("Total indexed iptables chains created: %d\n", i
);
877 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
878 iptables_save_line(str
, FALSE
);
880 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
881 iptables_save_line(str
, FALSE
);
885 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
886 iptables_save_line(str
, TRUE
);
888 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
889 iptables_save_line(str
, TRUE
);
896 fclose(iptables_file
);
901 puts("Just flushed iptables and tc classes - now exiting ...");
907 if(!dry_run
&& !nodelay
&& qos_free_delay
)
909 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay
);
910 sleep(qos_free_delay
);
913 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",
917 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
918 tc
,lan
,lan_medium
,lan_medium
,burst_main
,highest_priority
);
921 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
922 tc
,lan
,line
,line
,burst_main
,highest_priority
);
925 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc
,wan
,htb_r2q
);
928 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
929 tc
,wan
,wan_medium
,wan_medium
,burst_main
,highest_priority
);
932 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
933 tc
,wan
,up
,up
,burst_main
,highest_priority
);
937 /*-----------------------------------------------------------------*/
938 puts("Locating heavy downloaders and generating root classes ...");
939 /*-----------------------------------------------------------------*/
940 sort(ip
,ips
,desc_order_by
,traffic
);
942 /*-----------------------------------------------------------------*/
943 /* sub-scope - local variables */
945 long long int rate
= line
;
946 long long int max
= line
;
948 FILE *credit_file
= NULL
;
950 if(!just_preview
&& !dry_run
&& enable_credit
)
952 credit_file
= fopen(credit
,"w");
955 for_each(group
,groups
)
960 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
961 tc
, lan
, parent
, group
->id
, rate
, max
, burst_group
, highest_priority
+1, group
->desired
);
965 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
966 tc
, wan
, parent
, group
->id
, rate
*up
/line
, max
*up
/line
, burst_group
, highest_priority
+1, group
->desired
);
970 if(group_count
++ < max_nesting
)
975 rate
-= digital_divide
*group
->min
;
976 if(rate
< group
->min
)
981 /*shaping of aggresive downloaders, with credit file support */
984 int group_rate
= group
->min
, priority_sequence
= lowest_priority
;
986 for_each(ip
, ips
) if(ip
->min
== group
->min
&& ip
->max
> ip
->min
)
988 ip
->realquota
=ip
->credit
+(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20));
989 if( ip
->keyword
->data_limit
990 and not ip
->fixedprio
991 and ip
->traffic
> ip
->realquota
)
993 if(group_rate
< ip
->max
)
995 ip
->max
= group_rate
;
997 group_rate
+=magic_treshold
;
998 ip
->prio
=lowest_priority
;
999 if(ip
->prio
<highest_priority
+2)
1001 ip
->prio
=highest_priority
+2;
1006 if( ip
->keyword
->data_prio
1008 && ( ip
->traffic
> ip
->credit
+ (ip
->min
*ip
->keyword
->data_prio
+(ip
->keyword
->fixed_prio
<<20))) )
1010 ip
->prio
=priority_sequence
--;
1011 if(ip
->prio
<highest_priority
+1)
1013 ip
->prio
=highest_priority
+1;
1019 unsigned long long lcredit
=0;
1021 if((ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))>ip
->traffic
)
1023 lcredit
=(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))-ip
->traffic
;
1025 fprintf(credit_file
,"%s %Lu\n",ip
->addr
,lcredit
);
1033 fclose(credit_file
);
1039 if(start_shaping
|| stop_shaping
|| reduce_ceil
)
1041 time_t how_much_seconds
= time(NULL
) - get_mtime(classmap
); /* sice start of daily aggregation session */
1042 printf("Reading %s (%ld seconds old) and applying Fair Use Policy and Aggregation rules... \n", classmap
, how_much_seconds
);
1051 if_exists(ip
,ips
,eq(ip
->addr
,_
))
1053 int unshape_this_ip
= stop_shaping
;
1054 long avg_mbps_down
= ip
->direct
* 8 / how_much_seconds
;
1055 long avg_mbps_up
= ip
->upload
* 8 / how_much_seconds
;
1056 int min_mbps
= ip
->min
>>10;
1057 int agreg
= 1, print_stats
= 1;
1064 if(ip
->keyword
->download_aggregation
)
1066 if(min_mbps
<= avg_mbps_down
)
1068 unshape_this_ip
= 0;
1069 agreg
= (avg_mbps_down
+1)/min_mbps
;
1071 printf("Download aggregation 1:%d for %s (min: %lu Mbps avg: %ld Mbps)\n", agreg
, ip
->name
, min_mbps
, avg_mbps_down
);
1075 unshape_this_ip
= 1;
1078 else if(ip
->keyword
->upload_aggregation
)
1080 if(min_mbps
<= avg_mbps_up
)
1082 unshape_this_ip
= 0;
1083 agreg
= (avg_mbps_up
+1)/min_mbps
;
1085 printf("Upload aggregation 1:%d for %s: (min: %lu Mbps avg: %ld Mbps)\n", agreg
, ip
->name
, min_mbps
, avg_mbps_up
);
1089 unshape_this_ip
= 1;
1093 if(ip
->max
< ip
->desired
|| unshape_this_ip
|| reduce_ceil
) /* apply or disable FUP limit immediately.... */
1097 ip
->max
= ip
->desired
;
1098 if(stop_shaping
) /* all limits removed, but not printed with -s (start_shaping) switch */
1100 printf("Removing limit for %s (%s) ", ip
->name
, ip
->addr
);
1109 printf("Applying limit for %s (%s) ", ip
->name
, ip
->addr
);
1112 ip
->max
= ip
->min
+ (ip
->desired
-ip
->min
)/reduce_ceil
;
1114 else if(ip
->max
< ip
->min
)
1121 printf("(down: %dk-%dk wants %dk, ", ip
->min
, ip
->max
, ip
->desired
);
1123 sprintf(str
, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1124 tc
, lan
, ip
->group
, ip
->mark
,ip
->min
,ip
->max
, burst
, ip
->prio
);
1128 printf("up: %dk-%dk wants %dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1129 (int)((ip
->desired
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1130 (int)((ip
->desired
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1132 sprintf(str
,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1133 tc
, wan
, ip
->group
, ip
->mark
,
1134 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1135 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1144 puts("Warning - classmap file not fund, just generating preview ...");
1145 start_shaping
=FALSE
;
1148 done
; /* ugly macro end */
1151 json_traffic
=json_preview
;
1154 if(!dry_run
&& !just_flush
)
1156 /*-----------------------------------------------------------------*/
1157 printf("Writing json traffic overview %s ... ", json_traffic
);
1158 /*-----------------------------------------------------------------*/
1159 write_json_traffic(json_traffic
);
1161 /*-----------------------------------------------------------------*/
1162 printf("Writing statistics into HTML page %s ...\n", html
);
1163 /*-----------------------------------------------------------------*/
1164 write_htmlandlogs(html
, d
, total
, just_preview
);
1174 else if(reduce_ceil
)
1176 swchar
='0'+reduce_ceil
; /* -2, -4 */
1178 else if(stop_shaping
)
1183 printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar
);
1189 printf("%-22s %-15s mark\n","name","ip");
1192 printf("Writing %s", classmap
);
1193 f
= fopen(classmap
, "w");
1199 /*-----------------------------------------------------------------*/
1200 printf(" + generating iptables and tc classes ... ");
1201 /*-----------------------------------------------------------------*/
1203 for_each(ip
, ips
) if(ip
->mark
> 0) /* works only for IPv4 so far */
1208 duplicate(ip
->addr
,buf
);
1211 buf
=index6_id(ip
->addr
,64-idxtable_bitmask1
);
1215 buf
=index_id(ip
->addr
,32-idxtable_bitmask1
);
1218 string(chain_forward
,6+strlen(buf
));
1219 strcpy(chain_forward
,"forw_");
1220 strcat(chain_forward
,buf
);
1222 string(chain_postrouting
,6+strlen(buf
));
1223 strcpy(chain_postrouting
,"post_");
1224 strcat(chain_postrouting
,buf
);
1230 chain_forward
="FORWARD";
1231 chain_postrouting
="POSTROUTING";
1234 /* packet limits - this will be optional in future */
1237 sprintf(limit_pkts
, "-m limit --limit %d/s --limit-burst %d ",
1238 ip
->pps_limit
, ip
->pps_limit
);
1246 printf("%-22s %-16s %04d %d/s\n", ip
->name
, ip
->addr
, ip
->mark
, ip
->pps_limit
);
1249 /* -------------------------------------------------------- mark download */
1250 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1251 chain_postrouting
, ip
->addr
, ip
->mask
,
1252 lan
, mark_iptables
, ip
->mark
);
1253 iptables_save_line(str
, ip
->v6
);
1258 sprintf(str, "-A %s -s %s -p tcp --sport %d -d %s/%d -o %s -j %s%d",
1259 chain_postrouting, proxy_ip, proxy_port, ip->addr,
1260 ip->mask, lan, mark_iptables, ip->mark);
1261 iptables_save_line(str, ip->v6);
1264 sprintf(str
, "-A %s -d %s/%d -o %s %s-j ACCEPT",
1265 chain_postrouting
, ip
->addr
, ip
->mask
, lan
, limit_pkts
);
1266 iptables_save_line(str
, ip
->v6
);
1268 /* classify overlimit packets to separate overlimit class */
1269 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1270 chain_postrouting
, ip
->addr
, ip
->mask
,
1271 lan
, mark_iptables
, OVERLIMIT_CLASS
);
1272 iptables_save_line(str
, ip
->v6
);
1274 sprintf(str
, "-A %s -d %s/%d -o %s -j ACCEPT",
1275 chain_postrouting
, ip
->addr
, ip
->mask
, lan
);
1276 iptables_save_line(str
, ip
->v6
);
1278 /* -------------------------------------------------------- mark upload */
1279 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1280 chain_forward
, ip
->addr
, ip
->mask
, wan
, mark_iptables
, ip
->mark
);
1281 iptables_save_line(str
, ip
->v6
);
1283 sprintf(str
, "-A %s -s %s/%d -o %s %s-j ACCEPT",
1284 chain_forward
, ip
->addr
, ip
->mask
, wan
, limit_pkts
);
1285 iptables_save_line(str
, ip
->v6
);
1287 /* classify overlimit packets to separate overlimit class */
1288 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1289 chain_forward
, ip
->addr
, ip
->mask
, wan
, mark_iptables
, OVERLIMIT_CLASS
);
1290 iptables_save_line(str
, ip
->v6
);
1292 sprintf(str
, "-A %s -s %s/%d -o %s -j ACCEPT",
1293 chain_forward
, ip
->addr
, ip
->mask
, wan
);
1294 iptables_save_line(str
, ip
->v6
);
1298 /* -------------------------------------------------------- download class */
1300 printf("(down: %dk-%dk ", ip
->min
, ip
->max
);
1303 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1304 tc
, lan
, ip
->group
, ip
->mark
, ip
->min
, ip
->max
, burst
, ip
->prio
);
1307 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1309 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1310 tc
, lan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1314 if(filter_type
== 1)
1316 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1317 tc
, lan
, ip
->mark
, ip
->mark
);
1321 /* -------------------------------------------------------- upload class */
1323 printf("up: %dk-%dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1324 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1327 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1328 tc
, wan
, ip
->group
, ip
->mark
,
1329 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1330 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1333 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1335 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1336 tc
, wan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1340 if(filter_type
== 1)
1342 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1343 tc
, wan
, ip
->mark
, ip
->mark
);
1349 fprintf(f
, "%s %d\n", ip
->addr
, ip
->mark
);
1355 printf("(sharing %s)\n", ip
->sharing
);
1368 chain_forward
= "forw_common";
1369 chain_postrouting
= "post_common";
1373 chain_forward
= "FORWARD";
1374 chain_postrouting
= "POSTROUTING";
1379 final_chain
= "ACCEPT";
1387 sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s%d",
1388 chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables, 3);
1389 iptables_save_line(str, FALSE); // only for IPv4
1391 sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s",
1392 chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1393 iptables_save_line(str, FALSE); // only for IPv4
1399 sprintf(str
, "-A %s -o %s -j %s%d",
1400 chain_postrouting
, lan
, mark_iptables
, FREE_CLASS
);
1401 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1404 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1405 iptables_save_line(str
, FALSE
);
1408 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1409 iptables_save_line(str
, TRUE
);
1414 sprintf(str
,"-A %s -o %s -j %s%d", chain_forward
, wan
, mark_iptables
, FREE_CLASS
);
1415 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1418 sprintf(str
,"-A %s -o %s -j %s", chain_forward
, wan
, final_chain
);
1419 iptables_save_line(str
, FALSE
);
1422 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1423 iptables_save_line(str
, TRUE
);
1426 if(free_min
) /* allocate free bandwith if it is not zero... */
1428 /*-----------------------------------------------------------------*/
1429 puts("Generating free bandwith class ...");
1430 /*-----------------------------------------------------------------*/
1431 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1432 tc
, lan
, parent
, FREE_CLASS
, free_min
, free_max
,burst
, lowest_priority
);
1434 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1435 tc
, wan
, parent
, FREE_CLASS
, free_min
, free_max
, burst
, lowest_priority
);
1438 if(strcmpi(qos_leaf
, "none"))
1440 sprintf(str
,"%s qdisc add dev %s parent 1:%d handle %d %s", tc
, lan
, FREE_CLASS
, FREE_CLASS
, qos_leaf
);
1443 sprintf(str
,"%s qdisc add dev %s parent 1:%d handle %d %s", tc
, wan
, FREE_CLASS
, FREE_CLASS
, qos_leaf
);
1446 /* tc handle 1 fw flowid */
1447 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc
, lan
, FREE_CLASS
, FREE_CLASS
);
1450 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc
, wan
, FREE_CLASS
, FREE_CLASS
);
1453 /*-----------------------------------------------------------------*/
1454 puts("Generating bandwith class for overlimit packets...");
1455 /*-----------------------------------------------------------------*/
1456 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1457 tc
, lan
, parent
, OVERLIMIT_CLASS
, overlimit_min
, overlimit_max
, burst
, lowest_priority
);
1459 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1460 tc
, wan
, parent
, OVERLIMIT_CLASS
, overlimit_min
, overlimit_max
, burst
, lowest_priority
);
1463 printf("Total IP count: %d\n", i
);
1464 run_iptables_restore();
1470 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1471 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
This page took 2.115413 seconds and 3 git commands to generate.