1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2013 Michael Polak, Arachne Aerospace */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
10 /* Modified by: xChaos, 20131119
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
27 GNU General Public License is located in file COPYING */
29 #include "cll1-0.6.2.h"
32 const char *version
= "0.8.3-j";
34 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
35 /* Versions: 0.8.3 is development release, 0.8.4 will be "stable" */
36 /* Official Trac URL: https://dev.arachne.cz/svn/prometheus */
37 /* Official SVN URL: https://dev.arachne.cz/repos/prometheus */
38 /* BTC donations account: 19rriLx8vR19wGefPaMhakqnCYNYwjLvxq */
39 /* CZK donations account: 2900242944/2010 (transparent account) */
40 /* Warning: unofficial Github mirror is not supported by author! */
41 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
43 const char *stats_html_signature
= "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2013 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";
48 /* ======= All path names are defined here (for RPM patch) ======= */
50 const char *tc
= "/sbin/tc"; /* requires tc with HTB support */
51 const char *iptables
= "/sbin/iptables"; /* requires iptables utility */
52 const char *ip6tables
= "/sbin/ip6tables"; /* requires iptables utility */
53 const char *iptablessave
= "/sbin/iptables-save"; /* not yet required */
54 const char *iptablesrestore
= "/sbin/iptables-restore"; /* requires iptables-restore */
55 const char *ip6tablessave
= "/sbin/ip6tables-save"; /* not yet required */
56 const char *ip6tablesrestore
= "/sbin/ip6tables-restore"; /* requires iptables-restore */
57 const char *ls
= "/bin/ls"; /* this is not user configurable :-) */
59 char *config
= "/etc/prometheus/prometheus.conf"; /* main configuration file */
60 char *hosts
= "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
61 char *iptablesfile
= "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
62 char *ip6tablesfile
= "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/
63 char *credit
= "/var/lib/misc/prometheus.credit"; /* credit log file */
64 char *classmap
= "/var/lib/misc/prometheus.classes"; /* credit log file */
65 char *html
= "/var/www/traffic.html"; /* hall of fame - html version */
66 char *preview
= "/var/www/preview.html"; /* hall of fame preview - html version */
67 char *json_traffic
= "/var/www/logs/traffic.json"; /* hall of fame - json version */
68 char *json_preview
= "/var/www/logs/preview.json"; /* hall of fame preview - json version */
69 char *cmdlog
= "/var/log/prometheuslog"; /* command log filename */
70 char *log_dir
= "/var/www/logs/"; /* log directory pathname, ended with slash */
71 char *log_url
= "/logs/"; /* log directory relative URI prefix (partial URL) */
72 char *html_log_dir
= "/var/www/logs/html/";
74 char *jquery_url
= "http://code.jquery.com/jquery-latest.js";
75 char *lms_url
= "/lms/?m=customerinfo&id=";
76 int use_jquery_popups
= TRUE
;
77 int row_odd_even
= 0; /*<tr class="odd/even"> */
79 /* === Configuraration file values defaults - stored in global variables ==== */
81 int filter_type
= 1; /*1 mark, 2 classify*/
82 char *final_chain
= "DROP"; /* REJECT would be better, but it is impossible in mangle */
84 char *mark_iptables
= "MARK --set-mark ";
85 int dry_run
= FALSE
; /* preview - use puts() instead of system() */
86 char *iptablespreamble
= "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
87 char *ip6preamble
= "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT\n-A FORWARD -s fe80::/10 -j ACCEPT\n-A FORWARD -d ff00::/8 -j ACCEPT\n-A POSTROUTING -s fe80::/10 -j ACCEPT\n-A POSTROUTING -d ff00::/8 -j ACCEPT";
88 FILE *iptables_file
= NULL
;
89 FILE *ip6tables_file
= NULL
;
90 int enable_credit
= TRUE
; /* enable credit file */
91 int use_credit
= FALSE
; /* use credit file (if enabled)*/
92 char *title
= "Hall of Fame - Greatest Suckers"; /* hall of fame title */
93 int hall_of_fame
= TRUE
; /* enable hall of fame */
94 char *lan
= "eth0"; /* LAN interface */
95 char *lan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
96 char *wan
= "eth1"; /* WAN/ISP interface */
97 char *ip6prefix
= NULL
; /* Prefix for global /48 IPv6 subnet */
98 char *wan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
99 char *qos_leaf
= "sfq perturb 5"; /* leaf discipline */
100 char *qos_free_zone
= NULL
; /* QoS free zone */
101 /* int qos_proxy = TRUE; include proxy port to QoS */
102 int found_lmsid
= FALSE
; /* show links to users in LMS information system */
103 int include_upload
= TRUE
; /* upload+download=total traffic */
104 char *proxy_ip
= "192.168.1.1/32"; /* our IP with proxy port */
105 int proxy_port
= 3128; /* proxy port number */
106 long long int line
= 1024; /* WAN/ISP download in kbps */
107 long long int up
= 1024; /* WAN/ISP upload in kbps */
108 int free_min
= 256; /* minimum guaranted bandwidth for all undefined hosts */
109 int free_max
= 512; /* maximum allowed bandwidth for all undefined hosts */
110 int qos_free_delay
= 0; /* seconds to sleep before applying new QoS rules */
111 int digital_divide
= 2; /* controls digital divide weirdness ratio, 1...3 */
112 int max_nesting
= 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */
113 int htb_r2q
= 256; /* should work for leaf values 512 kbps to 8 Mbps */
114 int burst
= 8; /* HTB burst (in kbits) */
116 int burst_group
= 32;
117 int magic_treshold
= 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
118 int keywordcount
= 0;
121 FILE *log_file
= NULL
;
122 char *kwd
= "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
124 const int highest_priority
= 0; /* highest HTB priority (HTB built-in value is 0) */
125 const int lowest_priority
= 7; /* lowest HTB priority (HTB built-in value is 7) */
126 const int idxtable_treshold1
= 24; /* this is no longer configurable */
127 const int idxtable_treshold2
= 12; /* this is no longer configurable */
128 const int idxtable_bitmask1
= 3; /* this is no longer configurable */
129 const int idxtable_bitmask2
= 3; /* this is no longer configurable */
131 struct IP
*ips
= NULL
, *networks
= NULL
, *ip
, *sharedip
;
132 struct Group
*groups
= NULL
, *group
;
133 struct Keyword
*keyword
, *defaultkeyword
=NULL
, *keywords
=NULL
;
136 #define OVERLIMIT_CLASS 4
139 /* implemented in help.c */
141 void get_traffic_statistics(const char *whichiptables
, int ipv6
);
142 /* implemented in parseiptables.c */
144 void parse_ip_log(int argc
, char **argv
);
145 /* implemented in parselog.c */
147 void parse_hosts(char *hosts
);
148 /* implemented in parsehosts.c */
150 void write_json_traffic(char *json
);
151 /* implemented in json.c */
153 void write_htmlandlogs(char *html
, char *d
, int total
, int just_preview
);
154 /* implemented in htmlandlogs.c */
156 void analyse_topology(char *traceroute
);
157 /* implemented in networks.c */
160 const char *tr_odd_even(void)
162 row_odd_even
= 1 - row_odd_even
;
165 return "<tr class=\"even\">\n";
169 return "<tr class=\"odd\">\n";
173 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
174 /* (except that this code uses obsolete, archaic version of this header file...) */
180 struct Index
*parent
;
185 } *idxs
=NULL
, *idx
, *metaindex
;
188 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
190 char *index_id(char *ip
, int bitmask
);
191 /* function implemented in ipv4subnets.c */
193 char *subnet_id(char *ip
, int bitmask
);
194 /* function implemented in ipv4subnets.c */
196 char *index6_id(char *ip
, int bitmask
);
197 /* function implemented in ipv6subnets.c */
199 char *subnet6_id(char *ip
, int bitmask
);
200 /* function implemented in ipv6subnets.c */
202 /* ================= Let's parse configuration file here ================ */
204 void reject_config_and_exit(char *filename
)
206 printf("Configuration file %s rejected - abnormal exit.",filename
);
210 void get_config(char *config_filename
)
214 printf("Configured keywords: ");
215 parse(config_filename
)
217 option("keyword",kwd
);
222 create(keyword
,Keyword
);
224 keyword
->asymetry_ratio
=1; /* ratio for ADSL-like upload */
225 keyword
->asymetry_fixed
=0; /* fixed treshold for ADSL-like upload */
226 keyword
->data_limit
=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
227 keyword
->data_prio
=4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
228 keyword
->fixed_limit
=0; /* fixed data limit for setting lower HTB ceil */
229 keyword
->fixed_prio
=0; /* fixed data limit for setting lower HTB prio */
230 keyword
->reserve_min
=8; /* bonus for nominal HTB rate bandwidth (in kbps) */
231 keyword
->reserve_max
=0; /* malus for nominal HTB ceil (in kbps) */
232 keyword
->default_prio
=highest_priority
+1;
233 keyword
->html_color
="000000";
235 keyword
->leaf_discipline
="";
237 push(keyword
,keywords
);
240 defaultkeyword
=keyword
;
248 for_each(keyword
,keywords
)
250 int l
=strlen(keyword
->key
);
252 if(!strncmp(keyword
->key
,_
,l
) && strlen(_
)>l
+2)
254 char *tmptr
=_
; /* <---- l+1 ----> */
255 _
+=l
+1; /* via-prometheus-asymetry-ratio, etc. */
256 ioption("asymetry-ratio",keyword
->asymetry_ratio
);
257 ioption("asymetry-treshold",keyword
->asymetry_fixed
);
258 ioption("magic-relative-limit",keyword
->data_limit
);
259 ioption("magic-relative-prio",keyword
->data_prio
);
260 loption("magic-fixed-limit",keyword
->fixed_limit
);
261 loption("magic-fixed-prio",keyword
->fixed_prio
);
262 ioption("htb-default-prio",keyword
->default_prio
);
263 ioption("htb-rate-bonus",keyword
->reserve_min
);
264 ioption("htb-ceil-malus",keyword
->reserve_max
);
265 option("leaf-discipline",keyword
->leaf_discipline
);
266 option("html-color",keyword
->html_color
);
269 if(keyword
->data_limit
|| keyword
->fixed_limit
||
270 keyword
->data_prio
|| keyword
->fixed_prio
)
279 option("iptables",iptables
);
280 option("iptables-save",iptablessave
);
281 option("iptables-restore",iptablesrestore
);
282 option("ip6tables",ip6tables
);
283 option("ip6tables-save",ip6tablessave
);
284 option("ip6tables-restore",ip6tablesrestore
);
285 option("iptables-in-filename",iptablesfile
);
286 option("ip6tables-in-filename",ip6tablesfile
);
287 option("hosts",hosts
);
288 option("lan-interface",lan
);
289 option("wan-interface",wan
);
290 option("ip6-prefix",ip6prefix
);
291 option("lan-medium",lan_medium
);
292 option("wan-medium",wan_medium
);
293 lloption("wan-download",line
);
294 lloption("wan-upload",up
);
295 ioption("hall-of-fame-enable",hall_of_fame
);
296 option("hall-of-fame-title",title
);
297 option("hall-of-fame-filename",html
);
298 option("json-filename",json_traffic
);
299 option("hall-of-fame-preview",preview
);
300 option("json-preview",json_preview
);
301 option("log-filename",cmdlog
);
302 option("credit-filename",credit
);
303 option("classmap-filename",classmap
);
304 ioption("credit-enable",enable_credit
);
305 option("log-traffic-directory",log_dir
);
306 option("log-traffic-html-directory",html_log_dir
);
307 option("log-traffic-url-path",log_url
);
308 option("jquery-url",jquery_url
);
309 option("lms-url",lms_url
);
310 ioption("use-jquery-popups",use_jquery_popups
);
311 option("qos-free-zone",qos_free_zone
);
312 ioption("qos-free-delay",qos_free_delay
);
313 /* ioption("qos-proxy-enable",qos_proxy); */
314 option("qos-proxy-ip",proxy_ip
);
315 option("htb-leaf-discipline",qos_leaf
);
316 ioption("qos-proxy-port",proxy_port
);
317 ioption("free-rate",free_min
);
318 ioption("free-ceil",free_max
);
319 ioption("htb-burst",burst
);
320 ioption("htb-burst-main",burst_main
);
321 ioption("htb-burst-group",burst_group
);
322 ioption("htb-nesting-limit",max_nesting
);
323 ioption("htb-r2q",htb_r2q
);
324 ioption("magic-include-upload",include_upload
);
325 ioption("magic-treshold",magic_treshold
);
326 option("filter-type", cnf
);
327 /* not yet implemented:
328 ioption("magic-fixed-packets",fixed_packets);
329 ioption("magic-relative-packets",packet_limit);
334 perror(config_filename
);
335 puts("Warning - using built-in defaults instead ...");
337 done
; /* ugly macro end */
340 /* leaf discipline for keywords */
341 for_each(keyword
,keywords
)
343 if(!strcmpi(keyword
->leaf_discipline
, ""))
345 keyword
->leaf_discipline
= qos_leaf
;
349 if(strcmpi(cnf
, "mark"))
353 mark_iptables
= "CLASSIFY --set-class 1:";
359 mark_iptables
= "MARK --set-mark ";
362 /* are supplied values meaningful ?*/
365 puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
366 reject_config_and_exit(config_filename
);
371 /* ========== This function executes, logs OR ALSO prints command ========== */
373 void safe_run(char *cmd
)
377 printf("\n=>%s\n",cmd
);
385 fprintf(log_file
,"%s\n",cmd
);
389 void iptables_save_line(char *line
, int ipv6
)
393 fprintf(ip6tables_file
,"%s\n",line
);
397 fprintf(iptables_file
,"%s\n",line
);
401 void run_iptables_restore(void)
404 string(restor
,STRLEN
);
406 /*-----------------------------------------------------------------*/
407 printf("Running %s <%s ...\n", iptablesrestore
, iptablesfile
);
408 /*-----------------------------------------------------------------*/
410 iptables_save_line("COMMIT", FALSE
);
411 fclose(iptables_file
);
418 done
; /* ugly macro end */
421 sprintf(restor
,"%s <%s",iptablesrestore
, iptablesfile
);
426 /*-----------------------------------------------------------------*/
427 printf("Running %s <%s ...\n", ip6tablesrestore
, ip6tablesfile
);
428 /*-----------------------------------------------------------------*/
429 iptables_save_line("COMMIT", TRUE
);
430 fclose(ip6tables_file
);
437 done
; /* ugly macro end */
439 sprintf(restor
,"%s <%s",ip6tablesrestore
, ip6tablesfile
);
445 char *parse_datafile_line(char *str
)
447 char *ptr
=strchr(str
,' ');
462 /*-----------------------------------------------------------------*/
463 /* Are you looking for int main(int argc, char **argv) ? :-)) */
464 /*-----------------------------------------------------------------*/
468 int i
=0; /* just plain old Fortran style integer :-) */
469 FILE *f
=NULL
; /* everything is just stream of bytes... */
470 char *str
, *ptr
, *d
; /* LET A$=B$ :-) */
471 char *substring
, *limit_pkts
;
474 int just_networks
= FALSE
;
475 int just_flush
= FALSE
; /* deactivates all previous actions */
477 int just_preview
= FALSE
; /* preview - generate just stats */
478 int start_shaping
= FALSE
; /* apply FUP - requires classmap file */
479 int stop_shaping
= FALSE
; /* lift FUP - requires classmap file */
480 int reduce_ceil
= 0; /* allow only rate+(ceil-rate)/2, /4, etc. */
481 int just_logs
= FALSE
; /* just parse logs */
485 char *chain_forward
, *chain_postrouting
;
489 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
490 Version %s - Copyright (C)2005-2013 Michael Polak, Arachne Labs\n\
491 iptables-restore & burst tunning & classify modification by Ludva\n\
492 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version
);
494 /*----- Boring... we have to check command line options first: ----*/
497 argument("-c") { nextargument(config
); }
498 argument("-h") { nextargument(althosts
);}
499 argument("-d") { run
=TRUE
; dry_run
=TRUE
; }
500 argument("-f") { run
=TRUE
; just_flush
=TRUE
; }
501 argument("-9") { run
=TRUE
; just_flush
=9; }
502 argument("-p") { run
=TRUE
; just_preview
=TRUE
; }
503 argument("-q") { run
=TRUE
; just_preview
=TRUE
; stop_shaping
=TRUE
; }
504 argument("-2") { run
=TRUE
; just_preview
=TRUE
; reduce_ceil
=2; }
505 argument("-4") { run
=TRUE
; just_preview
=TRUE
; reduce_ceil
=4; }
506 argument("-s") { run
=TRUE
; just_preview
=TRUE
; start_shaping
=TRUE
; }
507 argument("-r") { run
=TRUE
; }
508 argument("-n") { run
=TRUE
; nodelay
=TRUE
; }
509 argument("-a") { run
=TRUE
; just_networks
=TRUE
; }
510 argument("-l") { just_logs
=TRUE
; }
511 argument("-m") { just_logs
=TRUE
; }
512 argument("-y") { just_logs
=TRUE
; }
513 argument("-?") { help(); exit(0); }
514 argument("--help") { help(); exit(0); }
515 argument("-v") { exit(0); }
516 argument("--version") { exit(0); }
521 puts("*** THIS IS JUST DRY RUN ! ***\n");
524 date(d
); /* this is typical cll1.h macro - prints current date */
526 /*-----------------------------------------------------------------*/
527 printf("Parsing configuration file %s ...\n", config
);
528 /*-----------------------------------------------------------------*/
533 parse_ip_log(argc
,argv
);
549 /*-----------------------------------------------------------------*/
550 puts("Parsing iptables verbose output ...");
551 /*-----------------------------------------------------------------*/
552 get_traffic_statistics(iptables
, FALSE
);
555 /*-----------------------------------------------------------------*/
556 puts("Parsing ip6tables verbose output ...");
557 /*-----------------------------------------------------------------*/
558 get_traffic_statistics(ip6tables
, TRUE
);
562 /*-----------------------------------------------------------------*/
563 /* cll1.h - let's allocate brand new character buffer... */
564 /*-----------------------------------------------------------------*/
566 string(limit_pkts
, STRLEN
);
568 /*-----------------------------------------------------------------*/
569 printf("Parsing class defintion file %s ...\n", hosts
);
570 /*-----------------------------------------------------------------*/
574 analyse_topology("/usr/sbin/traceroute -n -m 10 -w 2 %s.%d");
578 /*-----------------------------------------------------------------*/
579 puts("Resolving shared connections ...");
580 /*-----------------------------------------------------------------*/
581 for_each(ip
, ips
) if(ip
->sharing
)
583 for_each(sharedip
, ips
) if(eq(sharedip
->name
, ip
->sharing
))
585 sharedip
->traffic
+= ip
->traffic
;
587 ip
->mark
= sharedip
->mark
;
588 ip
->lmsid
= sharedip
->lmsid
;
589 ip
->pps_limit
= sharedip
->pps_limit
; /* no other way to do this */
594 printf("Unresolved shared connection: %s %s sharing-%s\n",
595 ip
->addr
, ip
->name
, ip
->sharing
);
599 if(enable_credit
&& just_flush
<9)
601 /*-----------------------------------------------------------------*/
602 printf("Parsing credit file %s ...\n", credit
);
603 /*-----------------------------------------------------------------*/
606 ptr
=parse_datafile_line(_
);
609 if_exists(ip
,ips
,eq(ip
->addr
,_
))
611 sscanf(ptr
,"%Lu",&(ip
->credit
));
615 done
; /* ugly macro end */
620 /*-----------------------------------------------------------------*/
621 puts("Initializing iptables and tc classes ...");
622 /*-----------------------------------------------------------------*/
624 iptables_file
= fopen(iptablesfile
, "w");
625 if(iptables_file
== NULL
)
627 perror(iptablesfile
);
630 iptables_save_line(iptablespreamble
, FALSE
);
634 ip6tables_file
= fopen(ip6tablesfile
, "w");
635 if(ip6tables_file
== NULL
)
637 perror(ip6tablesfile
);
640 iptables_save_line(iptablespreamble
, TRUE
);
641 iptables_save_line(ip6preamble
, TRUE
);
644 run_iptables_restore();
646 log_file
= fopen(cmdlog
, "w");
653 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,lan
);
656 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,wan
);
659 iptables_file
=fopen(iptablesfile
,"w");
660 iptables_save_line(iptablespreamble
, FALSE
);
663 ip6tables_file
=fopen(ip6tablesfile
,"w");
664 iptables_save_line(iptablespreamble
, TRUE
);
665 iptables_save_line(ip6preamble
, TRUE
);
668 if(qos_free_zone
&& *qos_free_zone
!='0') /* this is currently supported only for IPv4 */
672 sprintf(str
,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone
, wan
);
673 iptables_save_line(str
, FALSE
); /* this is currently supported only for IPv4 */
678 iptables_save_line(":post_noproxy - [0:0]", FALSE);
679 sprintf(str,"-A POSTROUTING ! -p tcp -o %s -j post_noproxy", lan);
680 iptables_save_line(str , FALSE);
681 sprintf(str,"-A POSTROUTING ! -s %s -o %s -j post_noproxy", proxy_ip, lan);
682 iptables_save_line(str, FALSE);
683 sprintf(str,"-A POSTROUTING -s %s -p tcp ! --sport %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
684 iptables_save_line(str, FALSE);
686 chain="post_noproxy";
692 chain
= "POSTROUTING";
695 sprintf(str
,"-A %s -s %s -o %s -j ACCEPT", chain
, qos_free_zone
, lan
);
696 iptables_save_line(str
, FALSE
);
699 if(ip_count
> idxtable_treshold1
&& !just_flush
)
701 int idxcount
=0, bitmask
=32-idxtable_bitmask1
;
703 /*-----------------------------------------------------------------*/
704 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count
);
705 /*-----------------------------------------------------------------*/
707 iptables_save_line(":post_common - [0:0]", FALSE
);
708 iptables_save_line(":forw_common - [0:0]", FALSE
);
711 iptables_save_line(":post_common - [0:0]", TRUE
);
712 iptables_save_line(":forw_common - [0:0]", TRUE
);
715 for_each(ip
,ips
) if(ip
->addr
&& *(ip
->addr
) && !eq(ip
->addr
,"0.0.0.0/0"))
719 buf
=index6_id(ip
->addr
,bitmask
+32);
723 buf
=index_id(ip
->addr
, bitmask
);
726 if_exists(idx
,idxs
,eq(idx
->id
,buf
))
733 idx
->addr
= ip
->addr
;
735 idx
->bitmask
= bitmask
+32*ip
->v6
;
744 /* brutal perfomance optimalization */
745 while(idxcount
> idxtable_treshold2
&& bitmask
> 2*idxtable_bitmask2
)
747 bitmask
-= idxtable_bitmask2
;
750 for_each(idx
,idxs
) if(idx
->parent
== NULL
)
754 buf
= index6_id(idx
->addr
, bitmask
+32);
758 buf
= index_id(idx
->addr
, bitmask
);
760 if_exists(metaindex
,idxs
,eq(metaindex
->id
,buf
))
762 metaindex
->children
++;
766 create(metaindex
,Index
);
767 metaindex
->addr
= idx
->addr
;
769 metaindex
->bitmask
= bitmask
+32*idx
->ipv6
;
770 metaindex
->parent
= NULL
;
771 metaindex
->children
= 0;
772 metaindex
->ipv6
= idx
->ipv6
;
774 push(metaindex
,idxs
);
776 idx
->parent
=metaindex
;
780 /* this should slightly optimize throughput ... */
781 sort(idx
,idxs
,desc_order_by
,children
);
782 sort(idx
,idxs
,order_by
,bitmask
);
789 subnet
=subnet6_id(idx
->addr
, idx
->bitmask
);
793 subnet
=subnet_id(idx
->addr
, idx
->bitmask
);
795 printf("%d: %s/%d\n", ++i
, subnet
, idx
->bitmask
);
797 sprintf(str
,":post_%s - [0:0]", idx
->id
);
798 iptables_save_line(str
, idx
->ipv6
);
800 sprintf(str
,":forw_%s - [0:0]", idx
->id
);
801 iptables_save_line(str
, idx
->ipv6
);
805 string(buf
,strlen(idx
->parent
->id
)+6);
806 sprintf(buf
,"post_%s", idx
->parent
->id
);
813 sprintf(str
,"-A %s -d %s/%d -o %s -j post_%s", buf
, subnet
, idx
->bitmask
, lan
, idx
->id
);
814 iptables_save_line(str
, idx
->ipv6
);
816 sprintf(str
,"-A %s -d %s/%d -o %s -j post_common", buf
, subnet
, idx
->bitmask
, lan
);
817 iptables_save_line(str
, idx
->ipv6
);
821 string(buf
,strlen(idx
->parent
->id
)+6);
822 sprintf(buf
,"forw_%s",idx
->parent
->id
);
829 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_%s", buf
, subnet
, idx
->bitmask
, wan
, idx
->id
);
830 iptables_save_line(str
, idx
->ipv6
);
832 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_common", buf
, subnet
, idx
->bitmask
, wan
);
833 iptables_save_line(str
, idx
->ipv6
);
835 printf("Total indexed iptables chains created: %d\n", i
);
837 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
838 iptables_save_line(str
, FALSE
);
840 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
841 iptables_save_line(str
, FALSE
);
845 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
846 iptables_save_line(str
, TRUE
);
848 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
849 iptables_save_line(str
, TRUE
);
856 fclose(iptables_file
);
861 puts("Just flushed iptables and tc classes - now exiting ...");
867 if(!dry_run
&& !nodelay
&& qos_free_delay
)
869 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay
);
870 sleep(qos_free_delay
);
873 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",
877 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
878 tc
,lan
,lan_medium
,lan_medium
,burst_main
,highest_priority
);
881 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
882 tc
,lan
,line
,line
,burst_main
,highest_priority
);
885 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc
,wan
,htb_r2q
);
888 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
889 tc
,wan
,wan_medium
,wan_medium
,burst_main
,highest_priority
);
892 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
893 tc
,wan
,up
,up
,burst_main
,highest_priority
);
897 /*-----------------------------------------------------------------*/
898 puts("Locating heavy downloaders and generating root classes ...");
899 /*-----------------------------------------------------------------*/
900 sort(ip
,ips
,desc_order_by
,traffic
);
902 /*-----------------------------------------------------------------*/
903 /* sub-scope - local variables */
905 long long int rate
= line
;
906 long long int max
= line
;
908 FILE *credit_file
= NULL
;
910 if(!just_preview
&& !dry_run
&& enable_credit
)
912 credit_file
= fopen(credit
,"w");
915 for_each(group
,groups
)
920 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
921 tc
, lan
, parent
, group
->id
, rate
, max
, burst_group
, highest_priority
+1, group
->desired
);
925 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
926 tc
, wan
, parent
, group
->id
, rate
*up
/line
, max
*up
/line
, burst_group
, highest_priority
+1, group
->desired
);
930 if(group_count
++ < max_nesting
)
935 rate
-= digital_divide
*group
->min
;
936 if(rate
< group
->min
)
941 /*shaping of aggresive downloaders, with credit file support */
944 int group_rate
= group
->min
, priority_sequence
= lowest_priority
;
946 for_each(ip
, ips
) if(ip
->min
== group
->min
&& ip
->max
> ip
->min
)
948 ip
->realquota
=ip
->credit
+(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20));
949 if( ip
->keyword
->data_limit
950 and not ip
->fixedprio
951 and ip
->traffic
> ip
->realquota
)
953 if(group_rate
< ip
->max
)
955 ip
->max
= group_rate
;
957 group_rate
+=magic_treshold
;
958 ip
->prio
=lowest_priority
;
959 if(ip
->prio
<highest_priority
+2)
961 ip
->prio
=highest_priority
+2;
966 if( ip
->keyword
->data_prio
968 && ( ip
->traffic
>ip
->credit
969 + (ip
->min
*ip
->keyword
->data_prio
+(ip
->keyword
->fixed_prio
<<20))) )
971 ip
->prio
=priority_sequence
--;
972 if(ip
->prio
<highest_priority
+1)
974 ip
->prio
=highest_priority
+1;
980 unsigned long long lcredit
=0;
982 if((ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))>ip
->traffic
)
984 lcredit
=(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))-ip
->traffic
;
986 fprintf(credit_file
,"%s %Lu\n",ip
->addr
,lcredit
);
1000 if(start_shaping
|| stop_shaping
|| reduce_ceil
)
1002 printf("Reading %s and applying Fair Use Policy rules ... \n", classmap
);
1010 if_exists(ip
,ips
,eq(ip
->addr
,_
))
1013 if(ip
->max
< ip
->desired
|| stop_shaping
|| reduce_ceil
) /* apply or disable FUP limit immediately.... */
1017 ip
->max
= ip
->desired
;
1018 printf("Removing limit for %-22s %-16s %04d ", ip
->name
, ip
->addr
, ip
->mark
);
1022 printf("Applying limit for %-22s %-16s %04d ", ip
->name
, ip
->addr
, ip
->mark
);
1025 ip
->max
= ip
->min
+ (ip
->desired
-ip
->min
)/reduce_ceil
;
1028 printf("(down: %dk-%dk ", ip
->min
, ip
->max
);
1029 sprintf(str
, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1030 tc
, lan
, ip
->group
, ip
->mark
,ip
->min
,ip
->max
, burst
, ip
->prio
);
1032 printf("up: %dk-%dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1033 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1034 sprintf(str
,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1035 tc
, wan
, ip
->group
, ip
->mark
,
1036 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1037 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1046 puts("Warning - classmap file not fund, just generating preview ...");
1047 start_shaping
=FALSE
;
1050 done
; /* ugly macro end */
1053 json_traffic
=json_preview
;
1056 if(!dry_run
&& !just_flush
)
1058 /*-----------------------------------------------------------------*/
1059 printf("Writing json traffic overview %s ... ", json_traffic
);
1060 /*-----------------------------------------------------------------*/
1061 write_json_traffic(json_traffic
);
1063 /*-----------------------------------------------------------------*/
1064 printf("Writing statistics into HTML page %s ...\n", html
);
1065 /*-----------------------------------------------------------------*/
1066 write_htmlandlogs(html
, d
, total
, just_preview
);
1076 else if(reduce_ceil
)
1078 swchar
='0'+reduce_ceil
; /* -2, -4 */
1080 else if(stop_shaping
)
1085 printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar
);
1091 printf("%-22s %-15s mark\n","name","ip");
1094 printf("Writing %s", classmap
);
1095 f
= fopen(classmap
, "w");
1101 /*-----------------------------------------------------------------*/
1102 printf(" + generating iptables and tc classes ... ");
1103 /*-----------------------------------------------------------------*/
1105 for_each(ip
, ips
) if(ip
->mark
> 0) /* works only for IPv4 so far */
1110 duplicate(ip
->addr
,buf
);
1113 buf
=index6_id(ip
->addr
,64-idxtable_bitmask1
);
1117 buf
=index_id(ip
->addr
,32-idxtable_bitmask1
);
1120 string(chain_forward
,6+strlen(buf
));
1121 strcpy(chain_forward
,"forw_");
1122 strcat(chain_forward
,buf
);
1124 string(chain_postrouting
,6+strlen(buf
));
1125 strcpy(chain_postrouting
,"post_");
1126 strcat(chain_postrouting
,buf
);
1132 chain_forward
="FORWARD";
1133 chain_postrouting
="POSTROUTING";
1136 /* packet limits - this will be optional in future */
1139 sprintf(limit_pkts
, "-m limit --limit %d/s --limit-burst %d ",
1140 ip
->pps_limit
, ip
->pps_limit
);
1148 printf("%-22s %-16s %04d %d/s\n", ip
->name
, ip
->addr
, ip
->mark
, ip
->pps_limit
);
1151 /* -------------------------------------------------------- mark download */
1152 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1153 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
),
1154 lan
, mark_iptables
, ip
->mark
);
1155 iptables_save_line(str
, ip
->v6
);
1160 sprintf(str, "-A %s -s %s -p tcp --sport %d -d %s/%d -o %s -j %s%d",
1161 chain_postrouting, proxy_ip, proxy_port, ip->addr,
1162 32*(1+ip->v6), lan, mark_iptables, ip->mark);
1163 iptables_save_line(str, ip->v6);
1166 sprintf(str
, "-A %s -d %s/%d -o %s %s-j ACCEPT",
1167 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
), lan
, limit_pkts
);
1168 iptables_save_line(str
, ip
->v6
);
1170 /* classify overlimit packets to separate overlimit class */
1171 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1172 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
),
1173 lan
, mark_iptables
, OVERLIMIT_CLASS
);
1174 iptables_save_line(str
, ip
->v6
);
1176 sprintf(str
, "-A %s -d %s/%d -o %s -j ACCEPT",
1177 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
), lan
);
1178 iptables_save_line(str
, ip
->v6
);
1180 /* -------------------------------------------------------- mark upload */
1181 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1182 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
, mark_iptables
, ip
->mark
);
1183 iptables_save_line(str
, ip
->v6
);
1185 sprintf(str
, "-A %s -s %s/%d -o %s %s-j ACCEPT",
1186 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
, limit_pkts
);
1187 iptables_save_line(str
, ip
->v6
);
1189 /* classify overlimit packets to separate overlimit class */
1190 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1191 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
, mark_iptables
, OVERLIMIT_CLASS
);
1192 iptables_save_line(str
, ip
->v6
);
1194 sprintf(str
, "-A %s -s %s/%d -o %s -j ACCEPT",
1195 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
);
1196 iptables_save_line(str
, ip
->v6
);
1200 /* -------------------------------------------------------- download class */
1202 printf("(down: %dk-%dk ", ip
->min
, ip
->max
);
1205 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1206 tc
, lan
, ip
->group
, ip
->mark
, ip
->min
, ip
->max
, burst
, ip
->prio
);
1209 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1211 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1212 tc
, lan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1216 if(filter_type
== 1)
1218 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1219 tc
, lan
, ip
->mark
, ip
->mark
);
1223 /* -------------------------------------------------------- upload class */
1225 printf("up: %dk-%dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1226 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1229 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1230 tc
, wan
, ip
->group
, ip
->mark
,
1231 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1232 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1235 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1237 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1238 tc
, wan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1242 if(filter_type
== 1)
1244 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1245 tc
, wan
, ip
->mark
, ip
->mark
);
1251 fprintf(f
, "%s %d\n", ip
->addr
, ip
->mark
);
1257 printf("(sharing %s)\n", ip
->sharing
);
1270 chain_forward
= "forw_common";
1271 chain_postrouting
= "post_common";
1275 chain_forward
= "FORWARD";
1276 chain_postrouting
= "POSTROUTING";
1281 final_chain
= "ACCEPT";
1289 sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s%d",
1290 chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables, 3);
1291 iptables_save_line(str, FALSE); // only for IPv4
1293 sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s",
1294 chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1295 iptables_save_line(str, FALSE); // only for IPv4
1301 sprintf(str
, "-A %s -o %s -j %s%d",
1302 chain_postrouting
, lan
, mark_iptables
, FREE_CLASS
);
1303 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1306 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1307 iptables_save_line(str
, FALSE
);
1310 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1311 iptables_save_line(str
, TRUE
);
1316 sprintf(str
,"-A %s -o %s -j %s%d", chain_forward
, wan
, mark_iptables
, FREE_CLASS
);
1317 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1320 sprintf(str
,"-A %s -o %s -j %s", chain_forward
, wan
, final_chain
);
1321 iptables_save_line(str
, FALSE
);
1324 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1325 iptables_save_line(str
, TRUE
);
1328 if(free_min
) /* allocate free bandwith if it is not zero... */
1330 /*-----------------------------------------------------------------*/
1331 puts("Generating free bandwith class ...");
1332 /*-----------------------------------------------------------------*/
1333 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1334 tc
, lan
, parent
, FREE_CLASS
, free_min
, free_max
,burst
, lowest_priority
);
1336 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1337 tc
, wan
, parent
, FREE_CLASS
, free_min
, free_max
, burst
, lowest_priority
);
1340 if(strcmpi(qos_leaf
, "none"))
1342 sprintf(str
,"%s qdisc add dev %s parent 1:%d handle %d %s", tc
, lan
, FREE_CLASS
, FREE_CLASS
, qos_leaf
);
1345 sprintf(str
,"%s qdisc add dev %s parent 1:%d handle %d %s", tc
, wan
, FREE_CLASS
, FREE_CLASS
, qos_leaf
);
1348 /* tc handle 1 fw flowid */
1349 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc
, lan
, FREE_CLASS
, FREE_CLASS
);
1352 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc
, wan
, FREE_CLASS
, FREE_CLASS
);
1355 /*-----------------------------------------------------------------*/
1356 puts("Generating bandwith class for overlimit packets...");
1357 /*-----------------------------------------------------------------*/
1358 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1359 tc
, lan
, parent
, OVERLIMIT_CLASS
, 1024, 4096, burst
, lowest_priority
);
1361 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1362 tc
, wan
, parent
, OVERLIMIT_CLASS
, 1024, 4096, burst
, lowest_priority
);
1365 printf("Total IP count: %d\n", i
);
1366 run_iptables_restore();
1372 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1373 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
This page took 1.161042 seconds and 4 git commands to generate.