503bbac068ccc51ae089671cb4709c7b50f9b319
1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2013 Michael Polak, Arachne Aerospace */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
10 /* Modified by: xChaos, 20130124
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
27 GNU General Public License is located in file COPYING */
29 #include "cll1-0.6.2.h"
32 const char *version
= "0.8.3-i";
34 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
35 /* Versions: 0.8.3 is development release, 0.8.4 will be "stable" */
36 /* Official Trac URL: https://dev.arachne.cz/svn/prometheus */
37 /* Official SVN URL: https://dev.arachne.cz/repos/prometheus */
38 /* BTC donations account: 19rriLx8vR19wGefPaMhakqnCYNYwjLvxq */
39 /* CZK donations account: 2900242944/2010 (transparent account) */
40 /* Warning: unofficial Github mirror is not supported by author! */
41 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
43 const char *stats_html_signature
= "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2013 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";
48 /* ======= All path names are defined here (for RPM patch) ======= */
50 const char *tc
= "/sbin/tc"; /* requires tc with HTB support */
51 const char *iptables
= "/sbin/iptables"; /* requires iptables utility */
52 const char *ip6tables
= "/sbin/ip6tables"; /* requires iptables utility */
53 const char *iptablessave
= "/sbin/iptables-save"; /* not yet required */
54 const char *iptablesrestore
= "/sbin/iptables-restore"; /* requires iptables-restore */
55 const char *ip6tablessave
= "/sbin/ip6tables-save"; /* not yet required */
56 const char *ip6tablesrestore
= "/sbin/ip6tables-restore"; /* requires iptables-restore */
57 const char *ls
= "/bin/ls"; /* this is not user configurable :-) */
59 char *config
= "/etc/prometheus/prometheus.conf"; /* main configuration file */
60 char *hosts
= "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
61 char *iptablesfile
= "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
62 char *ip6tablesfile
= "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/
63 char *credit
= "/var/lib/misc/prometheus.credit"; /* credit log file */
64 char *classmap
= "/var/lib/misc/prometheus.classes"; /* credit log file */
65 char *html
= "/var/www/traffic.html"; /* hall of fame - html version */
66 char *preview
= "/var/www/preview.html"; /* hall of fame preview - html version */
67 char *json_traffic
= "/var/www/logs/traffic.json"; /* hall of fame - json version */
68 char *json_preview
= "/var/www/logs/preview.json"; /* hall of fame preview - json version */
69 char *cmdlog
= "/var/log/prometheuslog"; /* command log filename */
70 char *log_dir
= "/var/www/logs/"; /* log directory pathname, ended with slash */
71 char *log_url
= "/logs/"; /* log directory relative URI prefix (partial URL) */
72 char *html_log_dir
= "/var/www/logs/html/";
74 char *jquery_url
= "http://code.jquery.com/jquery-latest.js";
75 char *lms_url
= "/lms/?m=customerinfo&id=";
76 int use_jquery_popups
= TRUE
;
77 int row_odd_even
= 0; /*<tr class="odd/even"> */
79 /* === Configuraration file values defaults - stored in global variables ==== */
81 int filter_type
= 1; /*1 mark, 2 classify*/
82 char *final_chain
= "DROP"; /* REJECT would be better, but it is impossible in mangle */
84 char *mark_iptables
= "MARK --set-mark ";
85 int dry_run
= FALSE
; /* preview - use puts() instead of system() */
86 char *iptablespreamble
= "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
87 char *ip6preamble
= "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT\n-A FORWARD -s fe80::/10 -j ACCEPT\n-A FORWARD -d ff00::/8 -j ACCEPT\n-A POSTROUTING -s fe80::/10 -j ACCEPT\n-A POSTROUTING -d ff00::/8 -j ACCEPT";
88 FILE *iptables_file
= NULL
;
89 FILE *ip6tables_file
= NULL
;
90 int enable_credit
= TRUE
; /* enable credit file */
91 int use_credit
= FALSE
; /* use credit file (if enabled)*/
92 char *title
= "Hall of Fame - Greatest Suckers"; /* hall of fame title */
93 int hall_of_fame
= TRUE
; /* enable hall of fame */
94 char *lan
= "eth0"; /* LAN interface */
95 char *lan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
96 char *wan
= "eth1"; /* WAN/ISP interface */
97 char *ip6prefix
= NULL
; /* Prefix for global /48 IPv6 subnet */
98 char *wan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
99 char *qos_leaf
= "sfq perturb 5"; /* leaf discipline */
100 char *qos_free_zone
= NULL
; /* QoS free zone */
101 int qos_proxy
= TRUE
; /* include proxy port to QoS */
102 int found_lmsid
= FALSE
; /* show links to users in LMS information system */
103 int include_upload
= TRUE
; /* upload+download=total traffic */
104 char *proxy_ip
= "192.168.1.1/32"; /* our IP with proxy port */
105 int proxy_port
= 3128; /* proxy port number */
106 long long int line
= 1024; /* WAN/ISP download in kbps */
107 long long int up
= 1024; /* WAN/ISP upload in kbps */
108 int free_min
= 256; /* minimum guaranted bandwidth for all undefined hosts */
109 int free_max
= 512; /* maximum allowed bandwidth for all undefined hosts */
110 int qos_free_delay
= 0; /* seconds to sleep before applying new QoS rules */
111 int digital_divide
= 2; /* controls digital divide weirdness ratio, 1...3 */
112 int max_nesting
= 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */
113 int htb_r2q
= 256; /* should work for leaf values 512 kbps to 8 Mbps */
114 int burst
= 8; /* HTB burst (in kbits) */
116 int burst_group
= 32;
117 int magic_treshold
= 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
118 int keywordcount
= 0;
121 /* not yet implemented:
122 int fixed_packets = 0; maximum number of pps per IP address (not class!)
123 int packet_limit = 5; maximum number of pps to htn CEIL, not rate !!!
125 FILE *log_file
= NULL
;
126 char *kwd
= "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
128 const int highest_priority
= 0; /* highest HTB priority (HTB built-in value is 0) */
129 const int lowest_priority
= 7; /* lowest HTB priority (HTB built-in value is 7) */
130 const int idxtable_treshold1
= 24; /* this is no longer configurable */
131 const int idxtable_treshold2
= 12; /* this is no longer configurable */
132 const int idxtable_bitmask1
= 3; /* this is no longer configurable */
133 const int idxtable_bitmask2
= 3; /* this is no longer configurable */
135 struct IP
*ips
= NULL
, *ip
, *sharedip
;
136 struct Group
*groups
= NULL
, *group
;
137 struct Keyword
*keyword
, *defaultkeyword
=NULL
, *keywords
=NULL
;
140 /* implemented in help.c */
142 void get_traffic_statistics(const char *whichiptables
, int ipv6
);
143 /* implemented in parseiptables.c */
145 void parse_ip_log(int argc
, char **argv
);
146 /* implemented in parselog.c */
148 void parse_hosts(char *hosts
);
149 /* implemented in parsehosts.c */
151 void write_json_traffic(char *json
);
152 /* implemented in json.c */
154 void write_htmlandlogs(char *html
, char *d
, int total
, int just_preview
);
155 /* implemented in htmlandlogs.c */
157 const char *tr_odd_even(void)
159 row_odd_even
= 1 - row_odd_even
;
162 return "<tr class=\"even\">\n";
166 return "<tr class=\"odd\">\n";
170 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
171 /* (except that this code uses obsolete, archaic version of this header file...) */
177 struct Index
*parent
;
182 } *idxs
=NULL
, *idx
, *metaindex
;
185 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
187 char *index_id(char *ip
, int bitmask
);
188 /* function implemented in ipv4subnets.c */
190 char *subnet_id(char *ip
, int bitmask
);
191 /* function implemented in ipv4subnets.c */
193 char *index6_id(char *ip
, int bitmask
);
194 /* function implemented in ipv6subnets.c */
196 char *subnet6_id(char *ip
, int bitmask
);
197 /* function implemented in ipv6subnets.c */
199 /* ================= Let's parse configuration file here ================ */
201 void reject_config_and_exit(char *filename
)
203 printf("Configuration file %s rejected - abnormal exit.",filename
);
207 void get_config(char *config_filename
)
211 printf("Configured keywords: ");
212 parse(config_filename
)
214 option("keyword",kwd
);
219 create(keyword
,Keyword
);
221 keyword
->asymetry_ratio
=1; /* ratio for ADSL-like upload */
222 keyword
->asymetry_fixed
=0; /* fixed treshold for ADSL-like upload */
223 keyword
->data_limit
=8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
224 keyword
->data_prio
=4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
225 keyword
->fixed_limit
=0; /* fixed data limit for setting lower HTB ceil */
226 keyword
->fixed_prio
=0; /* fixed data limit for setting lower HTB prio */
227 keyword
->reserve_min
=8; /* bonus for nominal HTB rate bandwidth (in kbps) */
228 keyword
->reserve_max
=0; /* malus for nominal HTB ceil (in kbps) */
229 keyword
->default_prio
=highest_priority
+1;
230 keyword
->html_color
="000000";
232 keyword
->leaf_discipline
="";
234 push(keyword
,keywords
);
237 defaultkeyword
=keyword
;
245 for_each(keyword
,keywords
)
247 int l
=strlen(keyword
->key
);
249 if(!strncmp(keyword
->key
,_
,l
) && strlen(_
)>l
+2)
251 char *tmptr
=_
; /* <---- l+1 ----> */
252 _
+=l
+1; /* via-prometheus-asymetry-ratio, etc. */
253 ioption("asymetry-ratio",keyword
->asymetry_ratio
);
254 ioption("asymetry-treshold",keyword
->asymetry_fixed
);
255 ioption("magic-relative-limit",keyword
->data_limit
);
256 ioption("magic-relative-prio",keyword
->data_prio
);
257 loption("magic-fixed-limit",keyword
->fixed_limit
);
258 loption("magic-fixed-prio",keyword
->fixed_prio
);
259 ioption("htb-default-prio",keyword
->default_prio
);
260 ioption("htb-rate-bonus",keyword
->reserve_min
);
261 ioption("htb-ceil-malus",keyword
->reserve_max
);
262 option("leaf-discipline",keyword
->leaf_discipline
);
263 option("html-color",keyword
->html_color
);
266 if(keyword
->data_limit
|| keyword
->fixed_limit
||
267 keyword
->data_prio
|| keyword
->fixed_prio
)
276 option("iptables",iptables
);
277 option("iptables-save",iptablessave
);
278 option("iptables-restore",iptablesrestore
);
279 option("ip6tables",ip6tables
);
280 option("ip6tables-save",ip6tablessave
);
281 option("ip6tables-restore",ip6tablesrestore
);
282 option("iptables-in-filename",iptablesfile
);
283 option("ip6tables-in-filename",ip6tablesfile
);
284 option("hosts",hosts
);
285 option("lan-interface",lan
);
286 option("wan-interface",wan
);
287 option("ip6-prefix",ip6prefix
);
288 option("lan-medium",lan_medium
);
289 option("wan-medium",wan_medium
);
290 lloption("wan-download",line
);
291 lloption("wan-upload",up
);
292 ioption("hall-of-fame-enable",hall_of_fame
);
293 option("hall-of-fame-title",title
);
294 option("hall-of-fame-filename",html
);
295 option("json-filename",json_traffic
);
296 option("hall-of-fame-preview",preview
);
297 option("json-preview",json_preview
);
298 option("log-filename",cmdlog
);
299 option("credit-filename",credit
);
300 option("classmap-filename",classmap
);
301 ioption("credit-enable",enable_credit
);
302 option("log-traffic-directory",log_dir
);
303 option("log-traffic-html-directory",html_log_dir
);
304 option("log-traffic-url-path",log_url
);
305 option("jquery-url",jquery_url
);
306 option("lms-url",lms_url
);
307 ioption("use-jquery-popups",use_jquery_popups
);
308 option("qos-free-zone",qos_free_zone
);
309 ioption("qos-free-delay",qos_free_delay
);
310 ioption("qos-proxy-enable",qos_proxy
);
311 option("qos-proxy-ip",proxy_ip
);
312 option("htb-leaf-discipline",qos_leaf
);
313 ioption("qos-proxy-port",proxy_port
);
314 ioption("free-rate",free_min
);
315 ioption("free-ceil",free_max
);
316 ioption("htb-burst",burst
);
317 ioption("htb-burst-main",burst_main
);
318 ioption("htb-burst-group",burst_group
);
319 ioption("htb-nesting-limit",max_nesting
);
320 ioption("htb-r2q",htb_r2q
);
321 ioption("magic-include-upload",include_upload
);
322 ioption("magic-treshold",magic_treshold
);
323 option("filter-type", cnf
);
324 /* not yet implemented:
325 ioption("magic-fixed-packets",fixed_packets);
326 ioption("magic-relative-packets",packet_limit);
331 perror(config_filename
);
332 puts("Warning - using built-in defaults instead ...");
334 done
; /* ugly macro end */
337 /* leaf discipline for keywords */
338 for_each(keyword
,keywords
)
340 if(!strcmpi(keyword
->leaf_discipline
, ""))
342 keyword
->leaf_discipline
= qos_leaf
;
346 if(strcmpi(cnf
, "mark"))
350 mark_iptables
= "CLASSIFY --set-class 1:";
356 mark_iptables
= "MARK --set-mark ";
359 /* are supplied values meaningful ?*/
362 puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
363 reject_config_and_exit(config_filename
);
368 /* ========== This function executes, logs OR ALSO prints command ========== */
370 void safe_run(char *cmd
)
374 printf("\n=>%s\n",cmd
);
382 fprintf(log_file
,"%s\n",cmd
);
386 void iptables_save_line(char *line
, int ipv6
)
390 fprintf(ip6tables_file
,"%s\n",line
);
394 fprintf(iptables_file
,"%s\n",line
);
398 void run_iptables_restore(void)
401 string(restor
,STRLEN
);
403 /*-----------------------------------------------------------------*/
404 printf("Running %s <%s ...\n", iptablesrestore
, iptablesfile
);
405 /*-----------------------------------------------------------------*/
407 iptables_save_line("COMMIT", FALSE
);
408 fclose(iptables_file
);
415 done
; /* ugly macro end */
418 sprintf(restor
,"%s <%s",iptablesrestore
, iptablesfile
);
423 /*-----------------------------------------------------------------*/
424 printf("Running %s <%s ...\n", ip6tablesrestore
, ip6tablesfile
);
425 /*-----------------------------------------------------------------*/
426 iptables_save_line("COMMIT", TRUE
);
427 fclose(ip6tables_file
);
434 done
; /* ugly macro end */
436 sprintf(restor
,"%s <%s",ip6tablesrestore
, ip6tablesfile
);
442 char *parse_datafile_line(char *str
)
444 char *ptr
=strchr(str
,' ');
459 /*-----------------------------------------------------------------*/
460 /* Are you looking for int main(int argc, char **argv) ? :-)) */
461 /*-----------------------------------------------------------------*/
465 int i
=0; /* just plain old Fortran style integer :-) */
466 FILE *f
=NULL
; /* everything is just stream of bytes... */
467 char *str
, *ptr
, *d
; /* LET A$=B$ :-) */
471 int just_flush
= FALSE
; /* deactivates all previous actions */
473 int just_preview
= FALSE
; /* preview - generate just stats */
474 int start_shaping
= FALSE
; /* apply FUP - requires classmap file */
475 int just_logs
= FALSE
; /* just parse logs */
479 char *chain_forward
, *chain_postrouting
;
483 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
484 Version %s - Copyright (C)2005-2013 Michael Polak, Arachne Labs\n\
485 iptables-restore & burst tunning & classify modification by Ludva\n\
486 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version
);
488 /*----- Boring... we have to check command line options first: ----*/
491 argument("-c") { nextargument(config
); }
492 argument("-h") { nextargument(althosts
);}
493 argument("-d") { run
=TRUE
; dry_run
=TRUE
; }
494 argument("-f") { run
=TRUE
; just_flush
=TRUE
; }
495 argument("-9") { run
=TRUE
; just_flush
=9; }
496 argument("-p") { run
=TRUE
; just_preview
=TRUE
; }
497 argument("-s") { run
=TRUE
; just_preview
=TRUE
; start_shaping
=TRUE
; }
498 argument("-r") { run
=TRUE
; }
499 argument("-n") { run
=TRUE
; nodelay
=TRUE
; }
500 argument("-l") { just_logs
=TRUE
; }
501 argument("-m") { just_logs
=TRUE
; }
502 argument("-y") { just_logs
=TRUE
; }
503 argument("-?") { help(); exit(0); }
504 argument("--help") { help(); exit(0); }
505 argument("-v") { exit(0); }
506 argument("--version") { exit(0); }
511 puts("*** THIS IS JUST DRY RUN ! ***\n");
514 date(d
); /* this is typical cll1.h macro - prints current date */
516 /*-----------------------------------------------------------------*/
517 printf("Parsing configuration file %s ...\n", config
);
518 /*-----------------------------------------------------------------*/
523 parse_ip_log(argc
,argv
);
539 /*-----------------------------------------------------------------*/
540 puts("Parsing iptables verbose output ...");
541 /*-----------------------------------------------------------------*/
542 get_traffic_statistics(iptables
, FALSE
);
545 /*-----------------------------------------------------------------*/
546 puts("Parsing ip6tables verbose output ...");
547 /*-----------------------------------------------------------------*/
548 get_traffic_statistics(ip6tables
, TRUE
);
552 /*-----------------------------------------------------------------*/
553 printf("Parsing class defintion file %s ...\n", hosts
);
554 /*-----------------------------------------------------------------*/
557 /*-----------------------------------------------------------------*/
558 /* cll1.h - let's allocate brand new character buffer... */
559 /*-----------------------------------------------------------------*/
562 /*-----------------------------------------------------------------*/
563 puts("Resolving shared connections ...");
564 /*-----------------------------------------------------------------*/
565 for_each(ip
,ips
) if(ip
->sharing
)
567 for_each(sharedip
,ips
) if(eq(sharedip
->name
, ip
->sharing
))
569 sharedip
->traffic
+= ip
->traffic
;
571 ip
->mark
= sharedip
->mark
;
572 ip
->lmsid
= sharedip
->lmsid
;
577 printf("Unresolved shared connection: %s %s sharing-%s\n",
578 ip
->addr
, ip
->name
, ip
->sharing
);
582 if(enable_credit
&& just_flush
<9)
584 /*-----------------------------------------------------------------*/
585 printf("Parsing credit file %s ...\n", credit
);
586 /*-----------------------------------------------------------------*/
589 ptr
=parse_datafile_line(_
);
592 if_exists(ip
,ips
,eq(ip
->addr
,_
))
594 sscanf(ptr
,"%Lu",&(ip
->credit
));
598 done
; /* ugly macro end */
603 /*-----------------------------------------------------------------*/
604 puts("Initializing iptables and tc classes ...");
605 /*-----------------------------------------------------------------*/
607 iptables_file
= fopen(iptablesfile
, "w");
608 if(iptables_file
== NULL
)
610 perror(iptablesfile
);
613 iptables_save_line(iptablespreamble
, FALSE
);
617 ip6tables_file
= fopen(ip6tablesfile
, "w");
618 if(ip6tables_file
== NULL
)
620 perror(ip6tablesfile
);
623 iptables_save_line(iptablespreamble
, TRUE
);
624 iptables_save_line(ip6preamble
, TRUE
);
627 run_iptables_restore();
629 log_file
= fopen(cmdlog
, "w");
636 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,lan
);
639 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,wan
);
642 iptables_file
=fopen(iptablesfile
,"w");
643 iptables_save_line(iptablespreamble
, FALSE
);
646 ip6tables_file
=fopen(ip6tablesfile
,"w");
647 iptables_save_line(iptablespreamble
, TRUE
);
648 iptables_save_line(ip6preamble
, TRUE
);
651 if(qos_free_zone
&& *qos_free_zone
!='0') /* this is currently supported only for IPv4 */
655 sprintf(str
,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone
, wan
);
656 iptables_save_line(str
, FALSE
); /* this is currently supported only for IPv4 */
660 iptables_save_line(":post_noproxy - [0:0]", FALSE
);
661 sprintf(str
,"-A POSTROUTING ! -p tcp -o %s -j post_noproxy", lan
);
662 iptables_save_line(str
, FALSE
);
663 sprintf(str
,"-A POSTROUTING ! -s %s -o %s -j post_noproxy", proxy_ip
, lan
);
664 iptables_save_line(str
, FALSE
);
665 sprintf(str
,"-A POSTROUTING -s %s -p tcp ! --sport %d -o %s -j post_noproxy", proxy_ip
, proxy_port
, lan
);
666 iptables_save_line(str
, FALSE
);
668 chain
="post_noproxy";
675 sprintf(str
,"-A %s -s %s -o %s -j ACCEPT", chain
, qos_free_zone
, lan
);
676 iptables_save_line(str
, FALSE
);
679 if(ip_count
> idxtable_treshold1
&& !just_flush
)
681 int idxcount
=0, bitmask
=32-idxtable_bitmask1
;
683 /*-----------------------------------------------------------------*/
684 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count
);
685 /*-----------------------------------------------------------------*/
687 iptables_save_line(":post_common - [0:0]", FALSE
);
688 iptables_save_line(":forw_common - [0:0]", FALSE
);
691 iptables_save_line(":post_common - [0:0]", TRUE
);
692 iptables_save_line(":forw_common - [0:0]", TRUE
);
695 for_each(ip
,ips
) if(ip
->addr
&& *(ip
->addr
) && !eq(ip
->addr
,"0.0.0.0/0"))
699 buf
=index6_id(ip
->addr
,bitmask
+32);
703 buf
=index_id(ip
->addr
, bitmask
);
706 if_exists(idx
,idxs
,eq(idx
->id
,buf
))
713 idx
->addr
= ip
->addr
;
715 idx
->bitmask
= bitmask
+32*ip
->v6
;
724 /* brutal perfomance optimalization */
725 while(idxcount
> idxtable_treshold2
&& bitmask
> 2*idxtable_bitmask2
)
727 bitmask
-= idxtable_bitmask2
;
730 for_each(idx
,idxs
) if(idx
->parent
== NULL
)
734 buf
= index6_id(idx
->addr
, bitmask
+32);
738 buf
= index_id(idx
->addr
, bitmask
);
740 if_exists(metaindex
,idxs
,eq(metaindex
->id
,buf
))
742 metaindex
->children
++;
746 create(metaindex
,Index
);
747 metaindex
->addr
= idx
->addr
;
749 metaindex
->bitmask
= bitmask
+32*idx
->ipv6
;
750 metaindex
->parent
= NULL
;
751 metaindex
->children
= 0;
752 metaindex
->ipv6
= idx
->ipv6
;
754 push(metaindex
,idxs
);
756 idx
->parent
=metaindex
;
760 /* this should slightly optimize throughput ... */
761 sort(idx
,idxs
,desc_order_by
,children
);
762 sort(idx
,idxs
,order_by
,bitmask
);
769 subnet
=subnet6_id(idx
->addr
, idx
->bitmask
);
773 subnet
=subnet_id(idx
->addr
, idx
->bitmask
);
775 printf("%d: %s/%d\n", ++i
, subnet
, idx
->bitmask
);
777 sprintf(str
,":post_%s - [0:0]", idx
->id
);
778 iptables_save_line(str
, idx
->ipv6
);
780 sprintf(str
,":forw_%s - [0:0]", idx
->id
);
781 iptables_save_line(str
, idx
->ipv6
);
785 string(buf
,strlen(idx
->parent
->id
)+6);
786 sprintf(buf
,"post_%s", idx
->parent
->id
);
793 sprintf(str
,"-A %s -d %s/%d -o %s -j post_%s", buf
, subnet
, idx
->bitmask
, lan
, idx
->id
);
794 iptables_save_line(str
, idx
->ipv6
);
796 sprintf(str
,"-A %s -d %s/%d -o %s -j post_common", buf
, subnet
, idx
->bitmask
, lan
);
797 iptables_save_line(str
, idx
->ipv6
);
801 string(buf
,strlen(idx
->parent
->id
)+6);
802 sprintf(buf
,"forw_%s",idx
->parent
->id
);
809 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_%s", buf
, subnet
, idx
->bitmask
, wan
, idx
->id
);
810 iptables_save_line(str
, idx
->ipv6
);
812 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_common", buf
, subnet
, idx
->bitmask
, wan
);
813 iptables_save_line(str
, idx
->ipv6
);
815 printf("Total indexed iptables chains created: %d\n", i
);
817 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
818 iptables_save_line(str
, FALSE
);
820 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
821 iptables_save_line(str
, FALSE
);
825 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
826 iptables_save_line(str
, TRUE
);
828 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
829 iptables_save_line(str
, TRUE
);
836 fclose(iptables_file
);
841 puts("Just flushed iptables and tc classes - now exiting ...");
847 if(!dry_run
&& !nodelay
&& qos_free_delay
)
849 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay
);
850 sleep(qos_free_delay
);
853 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",
857 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
858 tc
,lan
,lan_medium
,lan_medium
,burst_main
,highest_priority
);
861 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
862 tc
,lan
,line
,line
,burst_main
,highest_priority
);
865 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc
,wan
,htb_r2q
);
868 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
869 tc
,wan
,wan_medium
,wan_medium
,burst_main
,highest_priority
);
872 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
873 tc
,wan
,up
,up
,burst_main
,highest_priority
);
877 /*-----------------------------------------------------------------*/
878 puts("Locating heavy downloaders and generating root classes ...");
879 /*-----------------------------------------------------------------*/
880 sort(ip
,ips
,desc_order_by
,traffic
);
882 /*-----------------------------------------------------------------*/
883 /* sub-scope - local variables */
885 long long int rate
= line
;
886 long long int max
= line
;
888 FILE *credit_file
= NULL
;
890 if(!just_preview
&& !dry_run
&& enable_credit
)
892 credit_file
= fopen(credit
,"w");
895 for_each(group
,groups
)
900 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
901 tc
, lan
, parent
, group
->id
, rate
, max
, burst_group
, highest_priority
+1, group
->desired
);
905 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
906 tc
, wan
, parent
, group
->id
, rate
*up
/line
, max
*up
/line
, burst_group
, highest_priority
+1, group
->desired
);
910 if(group_count
++ < max_nesting
)
915 rate
-= digital_divide
*group
->min
;
916 if(rate
< group
->min
)
921 /*shaping of aggresive downloaders, with credit file support */
924 int group_rate
= group
->min
, priority_sequence
= lowest_priority
;
926 for_each(ip
, ips
) if(ip
->min
== group
->min
&& ip
->max
> ip
->min
)
928 ip
->realquota
=ip
->credit
+(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20));
929 if( ip
->keyword
->data_limit
930 and not ip
->fixedprio
931 and ip
->traffic
> ip
->realquota
)
933 if(group_rate
< ip
->max
)
935 ip
->max
= group_rate
;
937 group_rate
+=magic_treshold
;
938 ip
->prio
=lowest_priority
;
939 if(ip
->prio
<highest_priority
+2)
941 ip
->prio
=highest_priority
+2;
946 if( ip
->keyword
->data_prio
948 && ( ip
->traffic
>ip
->credit
949 + (ip
->min
*ip
->keyword
->data_prio
+(ip
->keyword
->fixed_prio
<<20))) )
951 ip
->prio
=priority_sequence
--;
952 if(ip
->prio
<highest_priority
+1)
954 ip
->prio
=highest_priority
+1;
960 unsigned long long lcredit
=0;
962 if((ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))>ip
->traffic
)
964 lcredit
=(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))-ip
->traffic
;
966 fprintf(credit_file
,"%s %Lu\n",ip
->addr
,lcredit
);
982 printf("Reading %s and applying Fair Use Policy rules ... \n", classmap
);
990 if_exists(ip
,ips
,eq(ip
->addr
,_
))
993 if(ip
->max
< ip
->desired
) /* apply FUP limit immediately.... */
995 printf("Applying limit for %-22s %-16s %04d ", ip
->name
, ip
->addr
, ip
->mark
);
996 printf("(down: %dk-%dk ", ip
->min
, ip
->max
);
997 sprintf(str
, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
998 tc
, lan
, ip
->group
, ip
->mark
,ip
->min
,ip
->max
, burst
, ip
->prio
);
1000 printf("up: %dk-%dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1001 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1002 sprintf(str
,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1003 tc
, wan
, ip
->group
, ip
->mark
,
1004 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1005 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1014 puts("Warning - classmap file not fund, just generating preview ...");
1015 start_shaping
=FALSE
;
1017 done
; /* ugly macro end */
1020 json_traffic
=json_preview
;
1023 if(!dry_run
&& !just_flush
)
1025 /*-----------------------------------------------------------------*/
1026 printf("Writing json traffic overview %s ... ", json_traffic
);
1027 /*-----------------------------------------------------------------*/
1028 write_json_traffic(json_traffic
);
1030 /*-----------------------------------------------------------------*/
1031 printf("Writing statistics into HTML page %s ...\n", html
);
1032 /*-----------------------------------------------------------------*/
1033 write_htmlandlogs(html
, d
, total
, just_preview
);
1043 printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar
);
1049 printf("%-22s %-15s mark\n","name","ip");
1052 printf("Writing %s", classmap
);
1053 f
= fopen(classmap
, "w");
1059 /*-----------------------------------------------------------------*/
1060 printf(" + generating iptables and tc classes ... ");
1061 /*-----------------------------------------------------------------*/
1063 for_each(ip
, ips
) if(ip
->mark
> 0) /* works only for IPv4 so far */
1068 duplicate(ip
->addr
,buf
);
1071 buf
=index6_id(ip
->addr
,64-idxtable_bitmask1
);
1075 buf
=index_id(ip
->addr
,32-idxtable_bitmask1
);
1078 string(chain_forward
,6+strlen(buf
));
1079 strcpy(chain_forward
,"forw_");
1080 strcat(chain_forward
,buf
);
1082 string(chain_postrouting
,6+strlen(buf
));
1083 strcpy(chain_postrouting
,"post_");
1084 strcat(chain_postrouting
,buf
);
1090 chain_forward
="FORWARD";
1091 chain_postrouting
="POSTROUTING";
1095 printf("%-22s %-16s %04d ", ip
->name
, ip
->addr
, ip
->mark
);
1098 /* -------------------------------------------------------- mark download */
1100 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1101 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
), lan
, mark_iptables
, ip
->mark
);
1102 /* -m limit --limit 1/s */
1103 iptables_save_line(str
, ip
->v6
);
1107 sprintf(str
, "-A %s -s %s -p tcp --sport %d -d %s/%d -o %s -j %s%d",
1108 chain_postrouting
, proxy_ip
, proxy_port
, ip
->addr
, 32*(1+ip
->v6
), lan
, mark_iptables
, ip
->mark
);
1109 iptables_save_line(str
, ip
->v6
);
1112 sprintf(str
, "-A %s -d %s/%d -o %s -j ACCEPT",
1113 chain_postrouting
, ip
->addr
, 32*(1+ip
->v6
), lan
);
1114 iptables_save_line(str
, ip
->v6
);
1116 /* -------------------------------------------------------- mark upload */
1117 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1118 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
, mark_iptables
, ip
->mark
);
1119 iptables_save_line(str
, ip
->v6
);
1121 sprintf(str
, "-A %s -s %s/%d -o %s -j ACCEPT",
1122 chain_forward
, ip
->addr
, 32*(1+ip
->v6
), wan
);
1123 iptables_save_line(str
, ip
->v6
);
1127 /* -------------------------------------------------------- download class */
1129 printf("(down: %dk-%dk ", ip
->min
, ip
->max
);
1132 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1133 tc
, lan
, ip
->group
, ip
->mark
,ip
->min
,ip
->max
, burst
, ip
->prio
);
1136 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1138 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1139 tc
, lan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1143 if(filter_type
== 1)
1145 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1146 tc
, lan
, ip
->mark
, ip
->mark
);
1150 /* -------------------------------------------------------- upload class */
1152 printf("up: %dk-%dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1153 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1156 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1157 tc
, wan
, ip
->group
, ip
->mark
,
1158 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1159 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1162 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1164 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1165 tc
, wan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1169 if(filter_type
== 1)
1171 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1172 tc
, wan
, ip
->mark
, ip
->mark
);
1178 fprintf(f
, "%s %d\n", ip
->addr
, ip
->mark
);
1184 printf("(sharing %s)\n", ip
->sharing
);
1197 chain_forward
= "forw_common";
1198 chain_postrouting
= "post_common";
1202 chain_forward
= "FORWARD";
1203 chain_postrouting
= "POSTROUTING";
1208 final_chain
= "ACCEPT";
1215 sprintf(str
, "-A %s -s %s -p tcp --sport %d -o %s -j %s%d",
1216 chain_postrouting
,proxy_ip
,proxy_port
,lan
,mark_iptables
, 3);
1217 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1219 sprintf(str
, "-A %s -s %s -p tcp --sport %d -o %s -j %s",
1220 chain_postrouting
,proxy_ip
,proxy_port
,lan
,final_chain
);
1221 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1226 sprintf(str
, "-A %s -o %s -j %s%d",
1227 chain_postrouting
, lan
, mark_iptables
, 3);
1228 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1231 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1232 iptables_save_line(str
, FALSE
);
1235 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1236 iptables_save_line(str
, TRUE
);
1241 sprintf(str
,"-A %s -o %s -j %s%d", chain_forward
, wan
, mark_iptables
, 3);
1242 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1245 sprintf(str
,"-A %s -o %s -j %s", chain_forward
, wan
, final_chain
);
1246 iptables_save_line(str
, FALSE
);
1249 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1250 iptables_save_line(str
, TRUE
);
1253 if(free_min
) /* allocate free bandwith if it is not zero... */
1255 /*-----------------------------------------------------------------*/
1256 puts("Generating free bandwith classes ...");
1257 /*-----------------------------------------------------------------*/
1258 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1259 tc
, lan
, parent
, free_min
, free_max
,burst
, lowest_priority
);
1261 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1262 tc
, wan
, parent
, free_min
, free_max
, burst
, lowest_priority
);
1265 if(strcmpi(qos_leaf
, "none"))
1267 sprintf(str
,"%s qdisc add dev %s parent 1:3 handle 3 %s", tc
, lan
, qos_leaf
);
1270 sprintf(str
,"%s qdisc add dev %s parent 1:3 handle 3 %s", tc
, wan
, qos_leaf
);
1273 /* tc handle 1 fw flowid */
1274 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3", tc
, lan
);
1277 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3", tc
, wan
);
1280 printf("Total IP count: %d\n", i
);
1281 run_iptables_restore();
1287 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1288 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
This page took 1.717207 seconds and 4 git commands to generate.