1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2014 Michael Polak, Arachne Aerospace */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
10 /* Modified by: xChaos, 20140812
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
27 GNU General Public License is located in file COPYING */
29 #include "cll1-0.6.2.h"
32 const char *version
= "0.8.5-b";
34 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
35 /* Versions: 0.8.3 is development release, 0.8.4 will be "stable" */
36 /* Official Trac URL: https://dev.arachne.cz/svn/prometheus */
37 /* Official SVN URL: https://dev.arachne.cz/repos/prometheus */
38 /* BTC donations account: 19rriLx8vR19wGefPaMhakqnCYNYwjLvxq */
39 /* CZK donations account: 2900242944/2010 (transparent account) */
40 /* Warning: unofficial Github mirror is not supported by author! */
41 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
43 const char *stats_html_signature
= "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2014 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";
48 /* ======= All path names are defined here (for RPM patch) ======= */
50 const char *tc
= "/sbin/tc"; /* requires tc with HTB support */
51 const char *iptables
= "/sbin/iptables"; /* requires iptables utility */
52 const char *ip6tables
= "/sbin/ip6tables"; /* requires iptables utility */
53 const char *iptablessave
= "/sbin/iptables-save"; /* not yet required */
54 const char *iptablesrestore
= "/sbin/iptables-restore"; /* requires iptables-restore */
55 const char *ip6tablessave
= "/sbin/ip6tables-save"; /* not yet required */
56 const char *ip6tablesrestore
= "/sbin/ip6tables-restore"; /* requires iptables-restore */
57 const char *ls
= "/bin/ls"; /* this is not user configurable :-) */
59 char *config
= "/etc/prometheus/prometheus.conf"; /* main configuration file */
60 char *hosts
= "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
61 char *macrosfile
= "/etc/prometheus/prometheus.macros"; /* rewrite rules for most common tariffs */
62 char *iptablesfile
= "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
63 char *ip6tablesfile
= "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/
64 char *credit
= "/var/lib/misc/prometheus.credit"; /* credit log file */
65 char *classmap
= "/var/lib/misc/prometheus.classes"; /* credit log file */
66 char *html
= "/var/www/traffic.html"; /* hall of fame - html version */
67 char *preview
= "/var/www/preview.html"; /* hall of fame preview - html version */
68 char *json_traffic
= "/var/www/logs/traffic.json"; /* hall of fame - json version */
69 char *json_preview
= "/var/www/logs/preview.json"; /* hall of fame preview - json version */
70 char *cmdlog
= "/var/log/prometheuslog"; /* command log filename */
71 char *log_dir
= "/var/www/logs/"; /* log directory pathname, ended with slash */
72 char *log_url
= "/logs/"; /* log directory relative URI prefix (partial URL) */
73 char *html_log_dir
= "/var/www/logs/html/";
75 char *jquery_url
= "http://code.jquery.com/jquery-latest.js";
76 char *lms_url
= "/lms/?m=customerinfo&id=";
77 int use_jquery_popups
= TRUE
;
78 int row_odd_even
= 0; /*<tr class="odd/even"> */
80 /* === Configuraration file values defaults - stored in global variables ==== */
82 int filter_type
= 1; /*1 mark, 2 classify*/
83 char *final_chain
= "DROP"; /* REJECT would be better, but it is impossible in mangle */
85 char *mark_iptables
= "MARK --set-mark ";
86 int dry_run
= FALSE
; /* preview - use puts() instead of system() */
87 char *iptablespreamble
= "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
88 char *ip6preamble
= "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT\n-A FORWARD -s fe80::/10 -j ACCEPT\n-A FORWARD -d ff00::/8 -j ACCEPT\n-A POSTROUTING -s fe80::/10 -j ACCEPT\n-A POSTROUTING -d ff00::/8 -j ACCEPT";
89 FILE *iptables_file
= NULL
;
90 FILE *ip6tables_file
= NULL
;
91 int enable_credit
= TRUE
; /* enable credit file */
92 int use_credit
= FALSE
; /* use credit file (if enabled)*/
93 char *title
= "Hall of Fame - Greatest Suckers"; /* hall of fame title */
94 int hall_of_fame
= TRUE
; /* enable hall of fame */
95 char *lan
= "eth0"; /* LAN interface */
96 char *lan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
97 char *wan
= "eth1"; /* WAN/ISP interface */
98 char *ip6prefix
= NULL
; /* Prefix for global /48 IPv6 subnet */
99 char *wan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
100 char *qos_leaf
= "sfq perturb 5"; /* leaf discipline */
101 char *qos_free_zone
= NULL
; /* QoS free zone */
102 /* int qos_proxy = TRUE; include proxy port to QoS */
103 int found_lmsid
= FALSE
; /* show links to users in LMS information system */
104 int include_upload
= TRUE
; /* upload+download=total traffic */
105 /* char *proxy_ip = "192.168.1.1/32"; our IP with proxy port */
106 /* int proxy_port = 3128; proxy port number */
107 long long int line
= 1024; /* WAN/ISP download in kbps */
108 long long int up
= 1024; /* WAN/ISP upload in kbps */
109 int free_min
= 256; /* minimum guaranted bandwidth for all undefined hosts */
110 int free_max
= 512; /* maximum allowed bandwidth for all undefined hosts */
111 int overlimit_min
= 256; /* minimum guaranted bandwidth for all undefined hosts */
112 int overlimit_max
= 512; /* maximum allowed bandwidth for all undefined hosts */
113 int qos_free_delay
= 0; /* seconds to sleep before applying new QoS rules */
114 int digital_divide
= 2; /* controls digital divide weirdness ratio, 1...3 */
115 int max_nesting
= 5; /* /include/uapi/linux/pkt_sched.h: #define TC_HTB_MAXDEPTH 8 [... - 3 parent classes] */
116 int htb_r2q
= 256; /* should work for leaf values 512 kbps to 8 Mbps */
117 int burst
= 8; /* HTB burst (in kbits) */
119 int burst_group
= 32;
120 int magic_treshold
= 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
121 int keywordcount
= 0;
124 FILE *log_file
= NULL
;
125 char *kwd
= "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
127 const int highest_priority
= 0; /* highest HTB priority (HTB built-in value is 0) */
128 const int lowest_priority
= 7; /* lowest HTB priority /include/uapi/linux/pkt_sched.h: #define TC_HTB_NUMPRIO 8 */
129 const int idxtable_treshold1
= 24; /* this is no longer configurable */
130 const int idxtable_treshold2
= 12; /* this is no longer configurable */
131 const int idxtable_bitmask1
= 3; /* this is no longer configurable */
132 const int idxtable_bitmask2
= 3; /* this is no longer configurable */
134 struct IP
*ips
= NULL
, *networks
= NULL
, *ip
, *sharedip
;
135 struct Group
*groups
= NULL
, *group
;
136 struct Keyword
*keyword
, *defaultkeyword
=NULL
, *keywords
= NULL
;
137 struct Macro
*macro
, *macros
= NULL
;
140 #define OVERLIMIT_CLASS 4
143 /* implemented in help.c */
145 void get_traffic_statistics(const char *whichiptables
, int ipv6
);
146 /* implemented in parseiptables.c */
148 void parse_ip_log(int argc
, char **argv
);
149 /* implemented in parselog.c */
151 void parse_hosts(char *hosts
);
152 /* implemented in parsehosts.c */
154 void write_json_traffic(char *json
);
155 /* implemented in json.c */
157 void write_htmlandlogs(char *html
, char *d
, int total
, int just_preview
);
158 /* implemented in htmlandlogs.c */
160 void analyse_topology(char *traceroute
);
161 /* implemented in networks.c */
164 const char *tr_odd_even(void)
166 row_odd_even
= 1 - row_odd_even
;
169 return "<tr class=\"even\">\n";
173 return "<tr class=\"odd\">\n";
177 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
178 /* (except that this code uses obsolete, archaic version of this header file...) */
184 struct Index
*parent
;
189 } *idxs
=NULL
, *idx
, *metaindex
;
192 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
194 char *index_id(char *ip
, int bitmask
);
195 /* function implemented in ipv4subnets.c */
197 char *subnet_id(char *ip
, int bitmask
);
198 /* function implemented in ipv4subnets.c */
200 char *index6_id(char *ip
, int bitmask
);
201 /* function implemented in ipv6subnets.c */
203 char *subnet6_id(char *ip
, int bitmask
);
204 /* function implemented in ipv6subnets.c */
206 /* ================= Let's parse configuration file here ================ */
208 void reject_config_and_exit(char *filename
)
210 printf("Configuration file %s rejected - abnormal exit.",filename
);
214 void get_config(char *config_filename
)
218 printf("Configured keywords: ");
219 parse(config_filename
)
221 option("keyword",kwd
);
226 create(keyword
,Keyword
);
228 keyword
->asymetry_ratio
= 1; /* ratio for ADSL-like upload */
229 keyword
->asymetry_fixed
= 0; /* fixed treshold for ADSL-like upload */
230 keyword
->data_limit
= 8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
231 keyword
->data_prio
= 4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
232 keyword
->fixed_limit
= 0; /* fixed data limit for setting lower HTB ceil */
233 keyword
->fixed_prio
= 0; /* fixed data limit for setting lower HTB prio */
234 keyword
->reserve_min
= 8; /* bonus for nominal HTB rate bandwidth (in kbps) */
235 keyword
->reserve_max
= 0; /* malus for nominal HTB ceil (in kbps) */
236 keyword
->default_prio
= highest_priority
+1;
237 keyword
->html_color
= "000000";
238 keyword
->ip_count
= 0;
239 keyword
->leaf_discipline
= "";
240 keyword
->allowed_avgmtu
= 0;
242 push(keyword
, keywords
);
245 defaultkeyword
= keyword
;
253 for_each(keyword
,keywords
)
255 int l
=strlen(keyword
->key
);
257 if(!strncmp(keyword
->key
,_
,l
) && strlen(_
)>l
+2)
259 char *tmptr
=_
; /* <---- l+1 ----> */
260 _
+=l
+1; /* via-prometheus-asymetry-ratio, etc. */
261 ioption("asymetry-ratio", keyword
->asymetry_ratio
);
262 ioption("asymetry-treshold", keyword
->asymetry_fixed
);
263 ioption("magic-relative-limit", keyword
->data_limit
);
264 ioption("magic-relative-prio", keyword
->data_prio
);
265 loption("magic-fixed-limit", keyword
->fixed_limit
);
266 loption("magic-fixed-prio", keyword
->fixed_prio
);
267 ioption("htb-default-prio", keyword
->default_prio
);
268 ioption("htb-rate-bonus", keyword
->reserve_min
);
269 ioption("htb-ceil-malus", keyword
->reserve_max
);
270 option("leaf-discipline", keyword
->leaf_discipline
);
271 option("html-color", keyword
->html_color
);
272 ioption("allowed-avgmtu" ,keyword
->allowed_avgmtu
);
275 if(keyword
->data_limit
|| keyword
->fixed_limit
||
276 keyword
->data_prio
|| keyword
->fixed_prio
)
285 option("iptables",iptables
);
286 option("iptables-save",iptablessave
);
287 option("iptables-restore",iptablesrestore
);
288 option("ip6tables",ip6tables
);
289 option("ip6tables-save",ip6tablessave
);
290 option("ip6tables-restore",ip6tablesrestore
);
291 option("iptables-in-filename",iptablesfile
);
292 option("ip6tables-in-filename",ip6tablesfile
);
293 option("hosts",hosts
);
294 option("lan-interface",lan
);
295 option("wan-interface",wan
);
296 option("ip6-prefix",ip6prefix
);
297 option("lan-medium",lan_medium
);
298 option("wan-medium",wan_medium
);
299 lloption("wan-download",line
);
300 lloption("wan-upload",up
);
301 ioption("hall-of-fame-enable",hall_of_fame
);
302 option("hall-of-fame-title",title
);
303 option("hall-of-fame-filename",html
);
304 option("json-filename",json_traffic
);
305 option("hall-of-fame-preview",preview
);
306 option("json-preview",json_preview
);
307 option("log-filename",cmdlog
);
308 option("credit-filename",credit
);
309 option("classmap-filename",classmap
);
310 ioption("credit-enable",enable_credit
);
311 option("log-traffic-directory",log_dir
);
312 option("log-traffic-html-directory",html_log_dir
);
313 option("log-traffic-url-path",log_url
);
314 option("jquery-url",jquery_url
);
315 option("lms-url",lms_url
);
316 ioption("use-jquery-popups",use_jquery_popups
);
317 option("qos-free-zone",qos_free_zone
);
318 ioption("qos-free-delay",qos_free_delay
);
319 /* ioption("qos-proxy-enable",qos_proxy); */
320 /* option("qos-proxy-ip",proxy_ip);*/
321 option("htb-leaf-discipline",qos_leaf
);
322 /* ioption("qos-proxy-port",proxy_port); */
323 ioption("free-rate",free_min
);
324 ioption("free-ceil",free_max
);
325 ioption("overlimit-rate",overlimit_min
);
326 ioption("overlimit-ceil",overlimit_max
);
327 ioption("htb-burst",burst
);
328 ioption("htb-burst-main",burst_main
);
329 ioption("htb-burst-group",burst_group
);
330 ioption("htb-nesting-limit",max_nesting
);
331 ioption("htb-r2q",htb_r2q
);
332 ioption("magic-include-upload",include_upload
);
333 ioption("magic-treshold",magic_treshold
);
334 option("filter-type", cnf
);
335 /* not yet implemented:
336 ioption("magic-fixed-packets",fixed_packets);
337 ioption("magic-relative-packets",packet_limit);
342 perror(config_filename
);
343 puts("Warning - using built-in defaults instead ...");
345 done
; /* ugly macro end */
348 /* leaf discipline for keywords */
349 for_each(keyword
,keywords
)
351 if(!strcmpi(keyword
->leaf_discipline
, ""))
353 keyword
->leaf_discipline
= qos_leaf
;
357 if(strcmpi(cnf
, "mark"))
361 mark_iptables
= "CLASSIFY --set-class 1:";
367 mark_iptables
= "MARK --set-mark ";
370 /* are supplied values meaningful ?*/
373 puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
374 reject_config_and_exit(config_filename
);
379 /* ========== This function executes, logs OR ALSO prints command ========== */
381 void safe_run(char *cmd
)
385 printf("\n=>%s\n",cmd
);
393 fprintf(log_file
,"%s\n",cmd
);
397 void iptables_save_line(char *line
, int ipv6
)
401 fprintf(ip6tables_file
,"%s\n",line
);
405 fprintf(iptables_file
,"%s\n",line
);
409 void run_iptables_restore(void)
412 string(restor
,STRLEN
);
414 /*-----------------------------------------------------------------*/
415 printf("Running %s <%s ...\n", iptablesrestore
, iptablesfile
);
416 /*-----------------------------------------------------------------*/
418 iptables_save_line("COMMIT", FALSE
);
419 fclose(iptables_file
);
426 done
; /* ugly macro end */
429 sprintf(restor
,"%s <%s",iptablesrestore
, iptablesfile
);
434 /*-----------------------------------------------------------------*/
435 printf("Running %s <%s ...\n", ip6tablesrestore
, ip6tablesfile
);
436 /*-----------------------------------------------------------------*/
437 iptables_save_line("COMMIT", TRUE
);
438 fclose(ip6tables_file
);
445 done
; /* ugly macro end */
447 sprintf(restor
,"%s <%s",ip6tablesrestore
, ip6tablesfile
);
453 char *parse_datafile_line(char *str
)
455 char *ptr
= strchr(str
,' ');
458 ptr
= strchr(str
,'\t');
465 while(*ptr
== ' ' || *ptr
== '\t')
478 /*-----------------------------------------------------------------*/
479 /* Are you looking for int main(int argc, char **argv) ? :-)) */
480 /*-----------------------------------------------------------------*/
484 int i
=0; /* just plain old Fortran style integer :-) */
485 FILE *f
=NULL
; /* everything is just stream of bytes... */
486 char *str
, *ptr
, *d
; /* LET A$=B$ :-) */
487 char *substring
, *limit_pkts
;
490 int just_networks
= FALSE
;
491 int just_flush
= FALSE
; /* deactivates all previous actions */
493 int just_preview
= FALSE
; /* preview - generate just stats */
494 int start_shaping
= FALSE
; /* apply FUP - requires classmap file */
495 int stop_shaping
= FALSE
; /* lift FUP - requires classmap file */
496 int reduce_ceil
= 0; /* allow only rate+(ceil-rate)/2, /4, etc. */
497 int just_logs
= FALSE
; /* just parse logs */
501 char *chain_forward
, *chain_postrouting
;
505 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
506 Version %s - Copyright (C)2005-2013 Michael Polak, Arachne Labs\n\
507 iptables-restore & burst tunning & classify modification by Ludva\n\
508 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version
);
510 /*----- Boring... we have to check command line options first: ----*/
513 argument("-c") { nextargument(config
); }
514 argument("-h") { nextargument(althosts
);}
515 argument("-d") { run
=TRUE
; dry_run
=TRUE
; }
516 argument("-f") { run
=TRUE
; just_flush
=TRUE
; }
517 argument("-9") { run
=TRUE
; just_flush
=9; }
518 argument("-p") { run
=TRUE
; just_preview
=TRUE
; }
519 argument("-q") { run
=TRUE
; just_preview
=TRUE
; stop_shaping
=TRUE
; }
520 argument("-2") { run
=TRUE
; just_preview
=TRUE
; reduce_ceil
=2; }
521 argument("-4") { run
=TRUE
; just_preview
=TRUE
; reduce_ceil
=4; }
522 argument("-s") { run
=TRUE
; just_preview
=TRUE
; start_shaping
=TRUE
; }
523 argument("-r") { run
=TRUE
; }
524 argument("-n") { run
=TRUE
; nodelay
=TRUE
; }
525 argument("-a") { run
=TRUE
; just_networks
=TRUE
; }
526 argument("-l") { just_logs
=TRUE
; }
527 argument("-m") { just_logs
=TRUE
; }
528 argument("-y") { just_logs
=TRUE
; }
529 argument("-?") { help(); exit(0); }
530 argument("--help") { help(); exit(0); }
531 argument("-v") { exit(0); }
532 argument("--version") { exit(0); }
537 puts("*** THIS IS JUST DRY RUN ! ***\n");
540 date(d
); /* this is typical cll1.h macro - prints current date */
542 /*-----------------------------------------------------------------*/
543 printf("Parsing configuration file %s ...\n", config
);
544 /*-----------------------------------------------------------------*/
549 parse_ip_log(argc
,argv
);
565 /*-----------------------------------------------------------------*/
566 puts("Parsing iptables verbose output ...");
567 /*-----------------------------------------------------------------*/
568 get_traffic_statistics(iptables
, FALSE
);
571 /*-----------------------------------------------------------------*/
572 puts("Parsing ip6tables verbose output ...");
573 /*-----------------------------------------------------------------*/
574 get_traffic_statistics(ip6tables
, TRUE
);
578 /*-----------------------------------------------------------------*/
579 /* cll1.h - let's allocate brand new character buffer... */
580 /*-----------------------------------------------------------------*/
582 string(limit_pkts
, STRLEN
);
584 /*-----------------------------------------------------------------*/
585 printf("Parsing macro definition file %s ...\n", macrosfile
);
586 /*-----------------------------------------------------------------*/
589 ptr
= parse_datafile_line(_
);
592 create(macro
, Macro
);
593 macro
->rewrite_from
= _
;
594 macro
->rewrite_to
= ptr
;
596 printf("%s -> %s\n", macro
->rewrite_from
, macro
->rewrite_to
);
599 done
; /* ugly macro end */
601 /*-----------------------------------------------------------------*/
602 printf("Parsing class defintion file %s ...\n", hosts
);
603 /*-----------------------------------------------------------------*/
607 analyse_topology("/usr/sbin/traceroute -n -m 10 -w 2 %s.%d");
611 /*-----------------------------------------------------------------*/
612 puts("Resolving shared connections ...");
613 /*-----------------------------------------------------------------*/
614 for_each(ip
, ips
) if(ip
->sharing
)
616 for_each(sharedip
, ips
) if(eq(sharedip
->name
, ip
->sharing
))
618 sharedip
->traffic
+= ip
->traffic
;
620 ip
->mark
= sharedip
->mark
;
621 ip
->lmsid
= sharedip
->lmsid
;
622 ip
->pps_limit
= sharedip
->pps_limit
; /* no other way to do this */
627 printf("Unresolved shared connection: %s %s sharing-%s\n",
628 ip
->addr
, ip
->name
, ip
->sharing
);
632 if(enable_credit
&& just_flush
<9)
634 /*-----------------------------------------------------------------*/
635 printf("Parsing credit file %s ...\n", credit
);
636 /*-----------------------------------------------------------------*/
639 ptr
= parse_datafile_line(_
);
642 if_exists(ip
,ips
,eq(ip
->addr
,_
))
644 sscanf(ptr
,"%Lu",&(ip
->credit
));
648 done
; /* ugly macro end */
654 /*-----------------------------------------------------------------*/
655 puts("Initializing iptables and tc classes ...");
656 /*-----------------------------------------------------------------*/
658 iptables_file
= fopen(iptablesfile
, "w");
659 if(iptables_file
== NULL
)
661 perror(iptablesfile
);
664 iptables_save_line(iptablespreamble
, FALSE
);
668 ip6tables_file
= fopen(ip6tablesfile
, "w");
669 if(ip6tables_file
== NULL
)
671 perror(ip6tablesfile
);
674 iptables_save_line(iptablespreamble
, TRUE
);
675 iptables_save_line(ip6preamble
, TRUE
);
678 run_iptables_restore();
680 log_file
= fopen(cmdlog
, "w");
687 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,lan
);
690 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,wan
);
693 iptables_file
=fopen(iptablesfile
,"w");
694 iptables_save_line(iptablespreamble
, FALSE
);
697 ip6tables_file
=fopen(ip6tablesfile
,"w");
698 iptables_save_line(iptablespreamble
, TRUE
);
699 iptables_save_line(ip6preamble
, TRUE
);
702 if(qos_free_zone
&& *qos_free_zone
!='0') /* this is currently supported only for IPv4 */
706 sprintf(str
,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone
, wan
);
707 iptables_save_line(str
, FALSE
); /* this is currently supported only for IPv4 */
712 iptables_save_line(":post_noproxy - [0:0]", FALSE);
713 sprintf(str,"-A POSTROUTING ! -p tcp -o %s -j post_noproxy", lan);
714 iptables_save_line(str , FALSE);
715 sprintf(str,"-A POSTROUTING ! -s %s -o %s -j post_noproxy", proxy_ip, lan);
716 iptables_save_line(str, FALSE);
717 sprintf(str,"-A POSTROUTING -s %s -p tcp ! --sport %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
718 iptables_save_line(str, FALSE);
720 chain="post_noproxy";
726 chain
= "POSTROUTING";
729 sprintf(str
,"-A %s -s %s -o %s -j ACCEPT", chain
, qos_free_zone
, lan
);
730 iptables_save_line(str
, FALSE
);
733 if(ip_count
> idxtable_treshold1
&& !just_flush
)
735 int idxcount
=0, bitmask
=32-idxtable_bitmask1
;
737 /*-----------------------------------------------------------------*/
738 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count
);
739 /*-----------------------------------------------------------------*/
741 iptables_save_line(":post_common - [0:0]", FALSE
);
742 iptables_save_line(":forw_common - [0:0]", FALSE
);
745 iptables_save_line(":post_common - [0:0]", TRUE
);
746 iptables_save_line(":forw_common - [0:0]", TRUE
);
749 for_each(ip
,ips
) if(ip
->addr
&& *(ip
->addr
) && !eq(ip
->addr
,"0.0.0.0/0"))
753 buf
=index6_id(ip
->addr
,bitmask
+32);
757 buf
=index_id(ip
->addr
, bitmask
);
760 if_exists(idx
,idxs
,eq(idx
->id
,buf
))
767 idx
->addr
= ip
->addr
;
769 idx
->bitmask
= bitmask
+32*ip
->v6
;
778 /* brutal perfomance optimalization */
779 while(idxcount
> idxtable_treshold2
&& bitmask
> 2*idxtable_bitmask2
)
781 bitmask
-= idxtable_bitmask2
;
784 for_each(idx
,idxs
) if(idx
->parent
== NULL
)
788 buf
= index6_id(idx
->addr
, bitmask
+32);
792 buf
= index_id(idx
->addr
, bitmask
);
794 if_exists(metaindex
,idxs
,eq(metaindex
->id
,buf
))
796 metaindex
->children
++;
800 create(metaindex
,Index
);
801 metaindex
->addr
= idx
->addr
;
803 metaindex
->bitmask
= bitmask
+32*idx
->ipv6
;
804 metaindex
->parent
= NULL
;
805 metaindex
->children
= 0;
806 metaindex
->ipv6
= idx
->ipv6
;
808 push(metaindex
,idxs
);
810 idx
->parent
=metaindex
;
814 /* this should slightly optimize throughput ... */
815 sort(idx
,idxs
,desc_order_by
,children
);
816 sort(idx
,idxs
,order_by
,bitmask
);
823 subnet
=subnet6_id(idx
->addr
, idx
->bitmask
);
827 subnet
=subnet_id(idx
->addr
, idx
->bitmask
);
829 printf("%d: %s/%d\n", ++i
, subnet
, idx
->bitmask
);
831 sprintf(str
,":post_%s - [0:0]", idx
->id
);
832 iptables_save_line(str
, idx
->ipv6
);
834 sprintf(str
,":forw_%s - [0:0]", idx
->id
);
835 iptables_save_line(str
, idx
->ipv6
);
839 string(buf
,strlen(idx
->parent
->id
)+6);
840 sprintf(buf
,"post_%s", idx
->parent
->id
);
847 sprintf(str
,"-A %s -d %s/%d -o %s -j post_%s", buf
, subnet
, idx
->bitmask
, lan
, idx
->id
);
848 iptables_save_line(str
, idx
->ipv6
);
850 sprintf(str
,"-A %s -d %s/%d -o %s -j post_common", buf
, subnet
, idx
->bitmask
, lan
);
851 iptables_save_line(str
, idx
->ipv6
);
855 string(buf
,strlen(idx
->parent
->id
)+6);
856 sprintf(buf
,"forw_%s",idx
->parent
->id
);
863 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_%s", buf
, subnet
, idx
->bitmask
, wan
, idx
->id
);
864 iptables_save_line(str
, idx
->ipv6
);
866 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_common", buf
, subnet
, idx
->bitmask
, wan
);
867 iptables_save_line(str
, idx
->ipv6
);
869 printf("Total indexed iptables chains created: %d\n", i
);
871 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
872 iptables_save_line(str
, FALSE
);
874 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
875 iptables_save_line(str
, FALSE
);
879 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
880 iptables_save_line(str
, TRUE
);
882 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
883 iptables_save_line(str
, TRUE
);
890 fclose(iptables_file
);
895 puts("Just flushed iptables and tc classes - now exiting ...");
901 if(!dry_run
&& !nodelay
&& qos_free_delay
)
903 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay
);
904 sleep(qos_free_delay
);
907 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",
911 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
912 tc
,lan
,lan_medium
,lan_medium
,burst_main
,highest_priority
);
915 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
916 tc
,lan
,line
,line
,burst_main
,highest_priority
);
919 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc
,wan
,htb_r2q
);
922 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
923 tc
,wan
,wan_medium
,wan_medium
,burst_main
,highest_priority
);
926 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
927 tc
,wan
,up
,up
,burst_main
,highest_priority
);
931 /*-----------------------------------------------------------------*/
932 puts("Locating heavy downloaders and generating root classes ...");
933 /*-----------------------------------------------------------------*/
934 sort(ip
,ips
,desc_order_by
,traffic
);
936 /*-----------------------------------------------------------------*/
937 /* sub-scope - local variables */
939 long long int rate
= line
;
940 long long int max
= line
;
942 FILE *credit_file
= NULL
;
944 if(!just_preview
&& !dry_run
&& enable_credit
)
946 credit_file
= fopen(credit
,"w");
949 for_each(group
,groups
)
954 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
955 tc
, lan
, parent
, group
->id
, rate
, max
, burst_group
, highest_priority
+1, group
->desired
);
959 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
960 tc
, wan
, parent
, group
->id
, rate
*up
/line
, max
*up
/line
, burst_group
, highest_priority
+1, group
->desired
);
964 if(group_count
++ < max_nesting
)
969 rate
-= digital_divide
*group
->min
;
970 if(rate
< group
->min
)
975 /*shaping of aggresive downloaders, with credit file support */
978 int group_rate
= group
->min
, priority_sequence
= lowest_priority
;
980 for_each(ip
, ips
) if(ip
->min
== group
->min
&& ip
->max
> ip
->min
)
982 ip
->realquota
=ip
->credit
+(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20));
983 if( ip
->keyword
->data_limit
984 and not ip
->fixedprio
985 and ip
->traffic
> ip
->realquota
)
987 if(group_rate
< ip
->max
)
989 ip
->max
= group_rate
;
991 group_rate
+=magic_treshold
;
992 ip
->prio
=lowest_priority
;
993 if(ip
->prio
<highest_priority
+2)
995 ip
->prio
=highest_priority
+2;
1000 if( ip
->keyword
->data_prio
1002 && ( ip
->traffic
> ip
->credit
+ (ip
->min
*ip
->keyword
->data_prio
+(ip
->keyword
->fixed_prio
<<20))) )
1004 ip
->prio
=priority_sequence
--;
1005 if(ip
->prio
<highest_priority
+1)
1007 ip
->prio
=highest_priority
+1;
1013 unsigned long long lcredit
=0;
1015 if((ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))>ip
->traffic
)
1017 lcredit
=(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))-ip
->traffic
;
1019 fprintf(credit_file
,"%s %Lu\n",ip
->addr
,lcredit
);
1027 fclose(credit_file
);
1033 if(start_shaping
|| stop_shaping
|| reduce_ceil
)
1035 printf("Reading %s and applying Fair Use Policy rules ... \n", classmap
);
1043 if_exists(ip
,ips
,eq(ip
->addr
,_
))
1046 if(ip
->max
< ip
->desired
|| stop_shaping
|| reduce_ceil
) /* apply or disable FUP limit immediately.... */
1050 ip
->max
= ip
->desired
;
1051 printf("Removing limit for %-22s %-16s %04d ", ip
->name
, ip
->addr
, ip
->mark
);
1055 printf("Applying limit for %-22s %-16s %04d ", ip
->name
, ip
->addr
, ip
->mark
);
1058 ip
->max
= ip
->min
+ (ip
->desired
-ip
->min
)/reduce_ceil
;
1061 printf("(down: %dk-%dk ", ip
->min
, ip
->max
);
1062 sprintf(str
, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1063 tc
, lan
, ip
->group
, ip
->mark
,ip
->min
,ip
->max
, burst
, ip
->prio
);
1065 printf("up: %dk-%dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1066 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1067 sprintf(str
,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1068 tc
, wan
, ip
->group
, ip
->mark
,
1069 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1070 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1079 puts("Warning - classmap file not fund, just generating preview ...");
1080 start_shaping
=FALSE
;
1083 done
; /* ugly macro end */
1086 json_traffic
=json_preview
;
1089 if(!dry_run
&& !just_flush
)
1091 /*-----------------------------------------------------------------*/
1092 printf("Writing json traffic overview %s ... ", json_traffic
);
1093 /*-----------------------------------------------------------------*/
1094 write_json_traffic(json_traffic
);
1096 /*-----------------------------------------------------------------*/
1097 printf("Writing statistics into HTML page %s ...\n", html
);
1098 /*-----------------------------------------------------------------*/
1099 write_htmlandlogs(html
, d
, total
, just_preview
);
1109 else if(reduce_ceil
)
1111 swchar
='0'+reduce_ceil
; /* -2, -4 */
1113 else if(stop_shaping
)
1118 printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar
);
1124 printf("%-22s %-15s mark\n","name","ip");
1127 printf("Writing %s", classmap
);
1128 f
= fopen(classmap
, "w");
1134 /*-----------------------------------------------------------------*/
1135 printf(" + generating iptables and tc classes ... ");
1136 /*-----------------------------------------------------------------*/
1138 for_each(ip
, ips
) if(ip
->mark
> 0) /* works only for IPv4 so far */
1143 duplicate(ip
->addr
,buf
);
1146 buf
=index6_id(ip
->addr
,64-idxtable_bitmask1
);
1150 buf
=index_id(ip
->addr
,32-idxtable_bitmask1
);
1153 string(chain_forward
,6+strlen(buf
));
1154 strcpy(chain_forward
,"forw_");
1155 strcat(chain_forward
,buf
);
1157 string(chain_postrouting
,6+strlen(buf
));
1158 strcpy(chain_postrouting
,"post_");
1159 strcat(chain_postrouting
,buf
);
1165 chain_forward
="FORWARD";
1166 chain_postrouting
="POSTROUTING";
1169 /* packet limits - this will be optional in future */
1172 sprintf(limit_pkts
, "-m limit --limit %d/s --limit-burst %d ",
1173 ip
->pps_limit
, ip
->pps_limit
);
1181 printf("%-22s %-16s %04d %d/s\n", ip
->name
, ip
->addr
, ip
->mark
, ip
->pps_limit
);
1184 /* -------------------------------------------------------- mark download */
1185 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1186 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
),
1187 lan
, mark_iptables
, ip
->mark
);
1188 iptables_save_line(str
, ip
->v6
);
1193 sprintf(str, "-A %s -s %s -p tcp --sport %d -d %s/%d -o %s -j %s%d",
1194 chain_postrouting, proxy_ip, proxy_port, ip->addr,
1195 32*(1+ip->v6), lan, mark_iptables, ip->mark);
1196 iptables_save_line(str, ip->v6);
1199 sprintf(str
, "-A %s -d %s/%d -o %s %s-j ACCEPT",
1200 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
), lan
, limit_pkts
);
1201 iptables_save_line(str
, ip
->v6
);
1203 /* classify overlimit packets to separate overlimit class */
1204 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1205 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
),
1206 lan
, mark_iptables
, OVERLIMIT_CLASS
);
1207 iptables_save_line(str
, ip
->v6
);
1209 sprintf(str
, "-A %s -d %s/%d -o %s -j ACCEPT",
1210 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
), lan
);
1211 iptables_save_line(str
, ip
->v6
);
1213 /* -------------------------------------------------------- mark upload */
1214 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1215 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
, mark_iptables
, ip
->mark
);
1216 iptables_save_line(str
, ip
->v6
);
1218 sprintf(str
, "-A %s -s %s/%d -o %s %s-j ACCEPT",
1219 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
, limit_pkts
);
1220 iptables_save_line(str
, ip
->v6
);
1222 /* classify overlimit packets to separate overlimit class */
1223 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1224 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
, mark_iptables
, OVERLIMIT_CLASS
);
1225 iptables_save_line(str
, ip
->v6
);
1227 sprintf(str
, "-A %s -s %s/%d -o %s -j ACCEPT",
1228 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
);
1229 iptables_save_line(str
, ip
->v6
);
1233 /* -------------------------------------------------------- download class */
1235 printf("(down: %dk-%dk ", ip
->min
, ip
->max
);
1238 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1239 tc
, lan
, ip
->group
, ip
->mark
, ip
->min
, ip
->max
, burst
, ip
->prio
);
1242 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1244 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1245 tc
, lan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1249 if(filter_type
== 1)
1251 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1252 tc
, lan
, ip
->mark
, ip
->mark
);
1256 /* -------------------------------------------------------- upload class */
1258 printf("up: %dk-%dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1259 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1262 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1263 tc
, wan
, ip
->group
, ip
->mark
,
1264 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1265 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1268 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1270 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1271 tc
, wan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1275 if(filter_type
== 1)
1277 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1278 tc
, wan
, ip
->mark
, ip
->mark
);
1284 fprintf(f
, "%s %d\n", ip
->addr
, ip
->mark
);
1290 printf("(sharing %s)\n", ip
->sharing
);
1303 chain_forward
= "forw_common";
1304 chain_postrouting
= "post_common";
1308 chain_forward
= "FORWARD";
1309 chain_postrouting
= "POSTROUTING";
1314 final_chain
= "ACCEPT";
1322 sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s%d",
1323 chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables, 3);
1324 iptables_save_line(str, FALSE); // only for IPv4
1326 sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s",
1327 chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1328 iptables_save_line(str, FALSE); // only for IPv4
1334 sprintf(str
, "-A %s -o %s -j %s%d",
1335 chain_postrouting
, lan
, mark_iptables
, FREE_CLASS
);
1336 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1339 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1340 iptables_save_line(str
, FALSE
);
1343 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1344 iptables_save_line(str
, TRUE
);
1349 sprintf(str
,"-A %s -o %s -j %s%d", chain_forward
, wan
, mark_iptables
, FREE_CLASS
);
1350 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1353 sprintf(str
,"-A %s -o %s -j %s", chain_forward
, wan
, final_chain
);
1354 iptables_save_line(str
, FALSE
);
1357 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1358 iptables_save_line(str
, TRUE
);
1361 if(free_min
) /* allocate free bandwith if it is not zero... */
1363 /*-----------------------------------------------------------------*/
1364 puts("Generating free bandwith class ...");
1365 /*-----------------------------------------------------------------*/
1366 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1367 tc
, lan
, parent
, FREE_CLASS
, free_min
, free_max
,burst
, lowest_priority
);
1369 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1370 tc
, wan
, parent
, FREE_CLASS
, free_min
, free_max
, burst
, lowest_priority
);
1373 if(strcmpi(qos_leaf
, "none"))
1375 sprintf(str
,"%s qdisc add dev %s parent 1:%d handle %d %s", tc
, lan
, FREE_CLASS
, FREE_CLASS
, qos_leaf
);
1378 sprintf(str
,"%s qdisc add dev %s parent 1:%d handle %d %s", tc
, wan
, FREE_CLASS
, FREE_CLASS
, qos_leaf
);
1381 /* tc handle 1 fw flowid */
1382 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc
, lan
, FREE_CLASS
, FREE_CLASS
);
1385 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc
, wan
, FREE_CLASS
, FREE_CLASS
);
1388 /*-----------------------------------------------------------------*/
1389 puts("Generating bandwith class for overlimit packets...");
1390 /*-----------------------------------------------------------------*/
1391 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1392 tc
, lan
, parent
, OVERLIMIT_CLASS
, overlimit_min
, overlimit_max
, burst
, lowest_priority
);
1394 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1395 tc
, wan
, parent
, OVERLIMIT_CLASS
, overlimit_min
, overlimit_max
, burst
, lowest_priority
);
1398 printf("Total IP count: %d\n", i
);
1399 run_iptables_restore();
1405 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1406 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
This page took 1.273089 seconds and 4 git commands to generate.