1 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
2 /* Prometheus QoS - you can "steal fire" from your ISP */
3 /* "fair-per-IP" quality of service (QoS) utility */
4 /* requires Linux 2.4.x or 2.6.x with HTB support */
5 /* Copyright(C) 2005-2015 Michael Polak, Arachne Aerospace */
6 /* iptables-restore support Copyright(C) 2007-2008 ludva */
7 /* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
10 /* Modified by: xChaos, 20160622
13 Prometheus QoS is free software; you can redistribute it and/or
14 modify it under the terms of the GNU General Public License as
15 published by the Free Software Foundation; either version 2.1 of
16 the License, or (at your option) any later version.
18 Prometheus QoS is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 General Public License for more details.
23 You should have received a copy of the GNU General Public License
24 along with Prometheus Qos; if not, write to the Free Software
25 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
27 GNU General Public License is located in file COPYING */
29 #include "cll1-0.6.2.h"
32 const char *version
= "0.8.5-e";
34 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
35 /* Versions: 0.8.5 is development release, 0.8.6 will be "stable" */
36 /* Official Trac URL: https://dev.arachne.cz/svn/prometheus */
37 /* Official SVN URL: https://dev.arachne.cz/repos/prometheus */
38 /* BTC donations account: 19rriLx8vR19wGefPaMhakqnCYNYwjLvxq */
39 /* CZK donations account: 2900242944/2010 (transparent account) */
40 /* Warning: unofficial Github mirror is not supported by author! */
41 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
43 const char *stats_html_signature
= "<span class=\"small\">Statistics generated by Prometheus QoS version %s<br />GPL+Copyright(C)2005-2015 Michael Polak, <a target=\"_blank\" href=\"http://www.arachne.cz/\">Arachne Labs</a></span>\n";
48 /* ======= All path names are defined here (for RPM patch) ======= */
50 const char *tc
= "/sbin/tc"; /* requires tc with HTB support */
51 const char *iptables
= "/sbin/iptables"; /* requires iptables utility */
52 const char *ip6tables
= "/sbin/ip6tables"; /* requires iptables utility */
53 const char *iptablessave
= "/sbin/iptables-save"; /* not yet required */
54 const char *iptablesrestore
= "/sbin/iptables-restore"; /* requires iptables-restore */
55 const char *ip6tablessave
= "/sbin/ip6tables-save"; /* not yet required */
56 const char *ip6tablesrestore
= "/sbin/ip6tables-restore"; /* requires iptables-restore */
57 const char *ls
= "/bin/ls"; /* this is not user configurable :-) */
59 char *config
= "/etc/prometheus/prometheus.conf"; /* main configuration file */
60 char *hosts
= "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
61 char *macrosfile
= "/etc/prometheus/prometheus.macros"; /* rewrite rules for most common tariffs */
62 char *iptablesfile
= "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
63 char *ip6tablesfile
= "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/
64 char *credit
= "/var/lib/misc/prometheus.credit"; /* credit log file */
65 char *classmap
= "/var/lib/misc/prometheus.classes"; /* credit log file */
66 char *html
= "/var/www/traffic.html"; /* hall of fame - html version */
67 char *preview
= "/var/www/preview.html"; /* hall of fame preview - html version */
68 char *json_traffic
= "/var/www/logs/traffic.json"; /* hall of fame - json version */
69 char *json_preview
= "/var/www/logs/preview.json"; /* hall of fame preview - json version */
70 char *cmdlog
= "/var/log/prometheuslog"; /* command log filename */
71 char *log_dir
= "/var/www/logs/"; /* log directory pathname, ended with slash */
72 char *log_url
= "/logs/"; /* log directory relative URI prefix (partial URL) */
73 char *html_log_dir
= "/var/www/logs/html/";
75 char *jquery_url
= "http://code.jquery.com/jquery-latest.js";
76 char *lms_url
= "/lms/?m=customerinfo&id=";
77 int use_jquery_popups
= TRUE
;
78 int row_odd_even
= 0; /*<tr class="odd/even"> */
80 /* === Configuraration file values defaults - stored in global variables ==== */
82 int filter_type
= 1; /*1 mark, 2 classify*/
83 char *final_chain
= "DROP"; /* REJECT would be better, but it is impossible in mangle */
85 char *mark_iptables
= "MARK --set-mark ";
86 int dry_run
= FALSE
; /* preview - use puts() instead of system() */
87 char *iptablespreamble
= "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
88 char *ip6preamble
= "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT\n-A FORWARD -s fe80::/10 -j ACCEPT\n-A FORWARD -d ff00::/8 -j ACCEPT\n-A POSTROUTING -s fe80::/10 -j ACCEPT\n-A POSTROUTING -d ff00::/8 -j ACCEPT";
89 FILE *iptables_file
= NULL
;
90 FILE *ip6tables_file
= NULL
;
91 int enable_credit
= TRUE
; /* enable credit file */
92 int use_credit
= FALSE
; /* use credit file (if enabled)*/
93 char *title
= "Hall of Fame - Greatest Suckers"; /* hall of fame title */
94 int hall_of_fame
= TRUE
; /* enable hall of fame */
95 char *lan
= "eth0"; /* LAN interface */
96 char *lan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
97 char *wan
= "eth1"; /* WAN/ISP interface */
98 char *ip6prefix
= NULL
; /* Prefix for global /48 IPv6 subnet */
99 char *wan_medium
= "100Mbit"; /* 10Mbit/100Mbit ethernet */
100 char *qos_leaf
= "sfq perturb 5"; /* leaf discipline */
101 char *qos_free_zone
= NULL
; /* QoS free zone */
102 /* int qos_proxy = TRUE; include proxy port to QoS */
103 int found_lmsid
= FALSE
; /* show links to users in LMS information system */
104 int include_upload
= TRUE
; /* upload+download=total traffic */
105 /* char *proxy_ip = "192.168.1.1/32"; our IP with proxy port */
106 /* int proxy_port = 3128; proxy port number */
107 long long int line
= 1024; /* WAN/ISP download in kbps */
108 long long int up
= 1024; /* WAN/ISP upload in kbps */
109 int free_min
= 256; /* minimum guaranted bandwidth for all undefined hosts */
110 int free_max
= 512; /* maximum allowed bandwidth for all undefined hosts */
111 int overlimit_min
= 256; /* minimum guaranted bandwidth for all undefined hosts */
112 int overlimit_max
= 512; /* maximum allowed bandwidth for all undefined hosts */
113 int qos_free_delay
= 0; /* seconds to sleep before applying new QoS rules */
114 int digital_divide
= 2; /* controls digital divide weirdness ratio, 1...3 */
115 int max_nesting
= 5; /* /include/uapi/linux/pkt_sched.h: #define TC_HTB_MAXDEPTH 8 [... - 3 parent classes] */
116 int htb_r2q
= 256; /* should work for leaf values 512 kbps to 8 Mbps */
117 int burst
= 8; /* HTB burst (in kbits) */
119 int burst_group
= 32;
120 int magic_treshold
= 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
121 int keywordcount
= 0;
124 FILE *log_file
= NULL
;
125 char *kwd
= "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
127 const int highest_priority
= 0; /* highest HTB priority (HTB built-in value is 0) */
128 const int lowest_priority
= 7; /* lowest HTB priority /include/uapi/linux/pkt_sched.h: #define TC_HTB_NUMPRIO 8 */
129 const int idxtable_treshold1
= 24; /* this is no longer configurable */
130 const int idxtable_treshold2
= 12; /* this is no longer configurable */
131 const int idxtable_bitmask1
= 3; /* this is no longer configurable */
132 const int idxtable_bitmask2
= 3; /* this is no longer configurable */
134 struct IP
*ips
= NULL
, *networks
= NULL
, *ip
, *sharedip
;
135 struct Group
*groups
= NULL
, *group
;
136 struct Keyword
*keyword
, *defaultkeyword
=NULL
, *keywords
= NULL
;
137 struct Macro
*macro
, *macros
= NULL
;
140 #define OVERLIMIT_CLASS 4
143 /* implemented in help.c */
145 void get_traffic_statistics(const char *whichiptables
, int ipv6
);
146 /* implemented in parseiptables.c */
148 void parse_ip_log(int argc
, char **argv
);
149 /* implemented in parselog.c */
151 void parse_hosts(char *hosts
);
152 /* implemented in parsehosts.c */
154 void write_json_traffic(char *json
);
155 /* implemented in json.c */
157 void write_htmlandlogs(char *html
, char *d
, int total
, int just_preview
);
158 /* implemented in htmlandlogs.c */
160 void analyse_topology(char *traceroute
);
161 /* implemented in networks.c */
163 char *parse_datafile_line(char *str
);
164 /* implemented in utils.c */
166 time_t get_mtime(const char *path
);
167 /* implemented in utils.c */
169 const char *tr_odd_even(void)
171 row_odd_even
= 1 - row_odd_even
;
174 return "<tr class=\"even\">\n";
178 return "<tr class=\"odd\">\n";
182 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
183 /* (except that this code uses obsolete, archaic version of this header file...) */
189 struct Index
*parent
;
194 } *idxs
=NULL
, *idx
, *metaindex
;
197 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
199 char *index_id(char *ip
, int bitmask
);
200 /* function implemented in ipv4subnets.c */
202 char *subnet_id(char *ip
, int bitmask
);
203 /* function implemented in ipv4subnets.c */
205 char *index6_id(char *ip
, int bitmask
);
206 /* function implemented in ipv6subnets.c */
208 char *subnet6_id(char *ip
, int bitmask
);
209 /* function implemented in ipv6subnets.c */
211 /* ================= Let's parse configuration file here ================ */
213 void reject_config_and_exit(char *filename
)
215 printf("Configuration file %s rejected - abnormal exit.",filename
);
219 void get_config(char *config_filename
)
223 printf("Configured keywords: ");
224 parse(config_filename
)
226 option("keyword",kwd
);
231 create(keyword
,Keyword
);
233 keyword
->asymetry_ratio
= 1; /* ratio for ADSL-like upload */
234 keyword
->asymetry_fixed
= 0; /* fixed treshold for ADSL-like upload */
235 keyword
->data_limit
= 8; /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
236 keyword
->data_prio
= 4; /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
237 keyword
->fixed_limit
= 0; /* fixed data limit for setting lower HTB ceil */
238 keyword
->fixed_prio
= 0; /* fixed data limit for setting lower HTB prio */
239 keyword
->reserve_min
= 8; /* bonus for nominal HTB rate bandwidth (in kbps) */
240 keyword
->reserve_max
= 0; /* malus for nominal HTB ceil (in kbps) */
241 keyword
->default_prio
= highest_priority
+1;
242 keyword
->download_aggregation
= keyword
->upload_aggregation
= 0; /* disable by default */
243 keyword
->html_color
= "000000";
244 keyword
->ip_count
= 0;
245 keyword
->leaf_discipline
= "";
246 keyword
->allowed_avgmtu
= 0;
248 push(keyword
, keywords
);
251 defaultkeyword
= keyword
;
259 for_each(keyword
,keywords
)
261 int l
=strlen(keyword
->key
);
263 if(!strncmp(keyword
->key
,_
,l
) && strlen(_
)>l
+2)
265 char *tmptr
=_
; /* <---- l+1 ----> */
266 _
+=l
+1; /* via-prometheus-asymetry-ratio, etc. */
267 foption("asymetry-ratio", keyword
->asymetry_ratio
);
268 ioption("asymetry-treshold", keyword
->asymetry_fixed
);
269 ioption("magic-relative-limit", keyword
->data_limit
);
270 ioption("magic-relative-prio", keyword
->data_prio
);
271 loption("magic-fixed-limit", keyword
->fixed_limit
);
272 loption("magic-fixed-prio", keyword
->fixed_prio
);
273 ioption("htb-default-prio", keyword
->default_prio
);
274 ioption("htb-rate-bonus", keyword
->reserve_min
);
275 ioption("htb-ceil-malus", keyword
->reserve_max
);
276 ioption("download-aggregation", keyword
->download_aggregation
);
277 ioption("upload-aggregation", keyword
->upload_aggregation
);
278 option("leaf-discipline", keyword
->leaf_discipline
);
279 option("html-color", keyword
->html_color
);
280 ioption("allowed-avgmtu" ,keyword
->allowed_avgmtu
);
283 if(keyword
->data_limit
|| keyword
->fixed_limit
||
284 keyword
->data_prio
|| keyword
->fixed_prio
)
293 option("iptables",iptables
);
294 option("iptables-save",iptablessave
);
295 option("iptables-restore",iptablesrestore
);
296 option("ip6tables",ip6tables
);
297 option("ip6tables-save",ip6tablessave
);
298 option("ip6tables-restore",ip6tablesrestore
);
299 option("iptables-in-filename",iptablesfile
);
300 option("ip6tables-in-filename",ip6tablesfile
);
301 option("hosts",hosts
);
302 option("lan-interface",lan
);
303 option("wan-interface",wan
);
304 option("ip6-prefix",ip6prefix
);
305 option("lan-medium",lan_medium
);
306 option("wan-medium",wan_medium
);
307 lloption("wan-download",line
);
308 lloption("wan-upload",up
);
309 ioption("hall-of-fame-enable",hall_of_fame
);
310 ioption("digital-divide-weirdness-ratio",digital_divide
);
311 option("hall-of-fame-title",title
);
312 option("hall-of-fame-filename",html
);
313 option("json-filename",json_traffic
);
314 option("hall-of-fame-preview",preview
);
315 option("json-preview",json_preview
);
316 option("log-filename",cmdlog
);
317 option("credit-filename",credit
);
318 option("classmap-filename",classmap
);
319 ioption("credit-enable",enable_credit
);
320 option("log-traffic-directory",log_dir
);
321 option("log-traffic-html-directory",html_log_dir
);
322 option("log-traffic-url-path",log_url
);
323 option("jquery-url",jquery_url
);
324 option("lms-url",lms_url
);
325 ioption("use-jquery-popups",use_jquery_popups
);
326 option("qos-free-zone",qos_free_zone
);
327 ioption("qos-free-delay",qos_free_delay
);
328 /* ioption("qos-proxy-enable",qos_proxy); */
329 /* option("qos-proxy-ip",proxy_ip);*/
330 option("htb-leaf-discipline",qos_leaf
);
331 /* ioption("qos-proxy-port",proxy_port); */
332 ioption("free-rate",free_min
);
333 ioption("free-ceil",free_max
);
334 ioption("overlimit-rate",overlimit_min
);
335 ioption("overlimit-ceil",overlimit_max
);
336 ioption("htb-burst",burst
);
337 ioption("htb-burst-main",burst_main
);
338 ioption("htb-burst-group",burst_group
);
339 ioption("htb-nesting-limit",max_nesting
);
340 ioption("htb-r2q",htb_r2q
);
341 ioption("magic-include-upload",include_upload
);
342 ioption("magic-treshold",magic_treshold
);
343 option("filter-type", cnf
);
344 /* not yet implemented:
345 ioption("magic-fixed-packets",fixed_packets);
346 ioption("magic-relative-packets",packet_limit);
351 perror(config_filename
);
352 puts("Warning - using built-in defaults instead ...");
354 done
; /* ugly macro end */
357 /* leaf discipline for keywords */
358 for_each(keyword
,keywords
)
360 if(!strcmpi(keyword
->leaf_discipline
, ""))
362 keyword
->leaf_discipline
= qos_leaf
;
366 if(strcmpi(cnf
, "mark"))
370 mark_iptables
= "CLASSIFY --set-class 1:";
376 mark_iptables
= "MARK --set-mark ";
379 /* are supplied values meaningful ?*/
382 puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
383 reject_config_and_exit(config_filename
);
388 /* ========== This function executes, logs OR ALSO prints command ========== */
390 void safe_run(char *cmd
)
394 printf("\n=>%s\n",cmd
);
402 fprintf(log_file
,"%s\n",cmd
);
406 void iptables_save_line(char *line
, int ipv6
)
410 fprintf(ip6tables_file
,"%s\n",line
);
414 fprintf(iptables_file
,"%s\n",line
);
418 void run_iptables_restore(void)
421 string(restor
,STRLEN
);
423 /*-----------------------------------------------------------------*/
424 printf("Running %s <%s ...\n", iptablesrestore
, iptablesfile
);
425 /*-----------------------------------------------------------------*/
427 iptables_save_line("COMMIT", FALSE
);
428 fclose(iptables_file
);
435 done
; /* ugly macro end */
438 sprintf(restor
,"%s <%s",iptablesrestore
, iptablesfile
);
443 /*-----------------------------------------------------------------*/
444 printf("Running %s <%s ...\n", ip6tablesrestore
, ip6tablesfile
);
445 /*-----------------------------------------------------------------*/
446 iptables_save_line("COMMIT", TRUE
);
447 fclose(ip6tables_file
);
454 done
; /* ugly macro end */
456 sprintf(restor
,"%s <%s",ip6tablesrestore
, ip6tablesfile
);
464 char *parse_datafile_line(char *str
);
465 time_t get_mtime(const char *path
);
467 /*-----------------------------------------------------------------*/
468 /* Are you looking for int main(int argc, char **argv) ? :-)) */
469 /*-----------------------------------------------------------------*/
473 int i
=0; /* just plain old Fortran style integer :-) */
474 FILE *f
=NULL
; /* everything is just stream of bytes... */
475 char *str
, *ptr
, *d
; /* LET A$=B$ :-) */
476 char *substring
, *limit_pkts
;
479 int just_networks
= FALSE
;
480 int just_flush
= FALSE
; /* deactivates all previous actions */
482 int just_preview
= FALSE
; /* preview - generate just stats */
483 int start_shaping
= FALSE
; /* apply FUP - requires classmap file */
484 int stop_shaping
= FALSE
; /* lift FUP - requires classmap file */
485 int reduce_ceil
= 0; /* allow only rate+(ceil-rate)/2, /4, etc. */
486 int just_logs
= FALSE
; /* just parse logs */
490 char *chain_forward
, *chain_postrouting
;
494 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
495 Version %s - Copyright (C)2005-2015 Michael Polak, Arachne Labs\n\
496 iptables-restore & burst tunning & classify modification by Ludva\n\
497 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version
);
499 /*----- Boring... we have to check command line options first: ----*/
502 argument("-c") { nextargument(config
); }
503 argument("-h") { nextargument(althosts
);}
504 argument("-d") { run
=TRUE
; dry_run
=TRUE
; }
505 argument("-f") { run
=TRUE
; just_flush
=TRUE
; }
506 argument("-9") { run
=TRUE
; just_flush
=9; }
507 argument("-p") { run
=TRUE
; just_preview
=TRUE
; }
508 argument("-q") { run
=TRUE
; just_preview
=TRUE
; stop_shaping
=TRUE
; }
509 argument("-2") { run
=TRUE
; just_preview
=TRUE
; reduce_ceil
=2; }
510 argument("-4") { run
=TRUE
; just_preview
=TRUE
; reduce_ceil
=4; }
511 argument("-s") { run
=TRUE
; just_preview
=TRUE
; start_shaping
=TRUE
; }
512 argument("-r") { run
=TRUE
; }
513 argument("-n") { run
=TRUE
; nodelay
=TRUE
; }
514 argument("-a") { run
=TRUE
; just_networks
=TRUE
; }
515 argument("-l") { just_logs
=TRUE
; }
516 argument("-m") { just_logs
=TRUE
; }
517 argument("-y") { just_logs
=TRUE
; }
518 argument("-?") { help(); exit(0); }
519 argument("--help") { help(); exit(0); }
520 argument("-v") { exit(0); }
521 argument("--version") { exit(0); }
526 puts("*** THIS IS JUST DRY RUN ! ***\n");
529 date(d
); /* this is typical cll1.h macro - prints current date */
531 /*-----------------------------------------------------------------*/
532 printf("Parsing configuration file %s ...\n", config
);
533 /*-----------------------------------------------------------------*/
538 parse_ip_log(argc
,argv
);
554 /*-----------------------------------------------------------------*/
555 puts("Parsing iptables verbose output ...");
556 /*-----------------------------------------------------------------*/
557 get_traffic_statistics(iptables
, FALSE
);
560 /*-----------------------------------------------------------------*/
561 puts("Parsing ip6tables verbose output ...");
562 /*-----------------------------------------------------------------*/
563 get_traffic_statistics(ip6tables
, TRUE
);
567 /*-----------------------------------------------------------------*/
568 /* cll1.h - let's allocate brand new character buffer... */
569 /*-----------------------------------------------------------------*/
571 string(limit_pkts
, STRLEN
);
573 /*-----------------------------------------------------------------*/
574 printf("Parsing macro definition file %s ...\n", macrosfile
);
575 /*-----------------------------------------------------------------*/
578 ptr
= parse_datafile_line(_
);
581 create(macro
, Macro
);
582 macro
->rewrite_from
= _
;
583 macro
->rewrite_to
= ptr
;
585 printf("%s -> %s\n", macro
->rewrite_from
, macro
->rewrite_to
);
588 done
; /* ugly macro end */
590 /*-----------------------------------------------------------------*/
591 printf("Parsing class defintion file %s ...\n", hosts
);
592 /*-----------------------------------------------------------------*/
596 analyse_topology("/usr/sbin/traceroute -n -m 10 -w 2 %s.%d");
600 /*-----------------------------------------------------------------*/
601 puts("Resolving shared connections ...");
602 /*-----------------------------------------------------------------*/
603 for_each(ip
, ips
) if(ip
->sharing
)
605 for_each(sharedip
, ips
) if(eq(sharedip
->name
, ip
->sharing
))
607 sharedip
->traffic
+= ip
->traffic
;
608 sharedip
->traffic_down
+= ip
->direct
;
609 sharedip
->traffic_up
+= ip
->upload
;
611 ip
->mark
= sharedip
->mark
;
612 ip
->lmsid
= sharedip
->lmsid
;
613 ip
->pps_limit
= sharedip
->pps_limit
; /* no other way to do this */
615 /* Ugly hack: append IPv4 addresses of sharedip to IPv6 uplinks */
616 ptr
= strchr(ip
->addr
, '+');
617 if(ptr
&& ptr
-ip
->addr
> 1 && !sharedip
->v6
)
620 concatenate(ip
->addr
, sharedip
->addr
, ptr
);
621 ip
->name
= ip
->addr
= ptr
;
622 ptr
= strchr(ip
->addr
, '.');
626 ptr
= strchr(ptr
, '.');
635 printf("Unresolved shared connection: %s %s sharing-%s\n",
636 ip
->addr
, ip
->name
, ip
->sharing
);
640 if(enable_credit
&& just_flush
<9)
642 /*-----------------------------------------------------------------*/
643 printf("Parsing credit file %s ...\n", credit
);
644 /*-----------------------------------------------------------------*/
647 ptr
= parse_datafile_line(_
);
650 if_exists(ip
,ips
,eq(ip
->addr
,_
))
652 sscanf(ptr
,"%Lu",&(ip
->credit
));
656 done
; /* ugly macro end */
662 /*-----------------------------------------------------------------*/
663 puts("Initializing iptables and tc classes ...");
664 /*-----------------------------------------------------------------*/
666 iptables_file
= fopen(iptablesfile
, "w");
667 if(iptables_file
== NULL
)
669 perror(iptablesfile
);
672 iptables_save_line(iptablespreamble
, FALSE
);
676 ip6tables_file
= fopen(ip6tablesfile
, "w");
677 if(ip6tables_file
== NULL
)
679 perror(ip6tablesfile
);
682 iptables_save_line(iptablespreamble
, TRUE
);
683 iptables_save_line(ip6preamble
, TRUE
);
686 run_iptables_restore();
688 log_file
= fopen(cmdlog
, "w");
695 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,lan
);
698 sprintf(str
,"%s qdisc del dev %s root 2>/dev/null",tc
,wan
);
701 iptables_file
=fopen(iptablesfile
,"w");
702 iptables_save_line(iptablespreamble
, FALSE
);
705 ip6tables_file
=fopen(ip6tablesfile
,"w");
706 iptables_save_line(iptablespreamble
, TRUE
);
707 iptables_save_line(ip6preamble
, TRUE
);
710 if(qos_free_zone
&& *qos_free_zone
!='0') /* this is currently supported only for IPv4 */
714 sprintf(str
,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone
, wan
);
715 iptables_save_line(str
, FALSE
); /* this is currently supported only for IPv4 */
720 iptables_save_line(":post_noproxy - [0:0]", FALSE);
721 sprintf(str,"-A POSTROUTING ! -p tcp -o %s -j post_noproxy", lan);
722 iptables_save_line(str , FALSE);
723 sprintf(str,"-A POSTROUTING ! -s %s -o %s -j post_noproxy", proxy_ip, lan);
724 iptables_save_line(str, FALSE);
725 sprintf(str,"-A POSTROUTING -s %s -p tcp ! --sport %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
726 iptables_save_line(str, FALSE);
728 chain="post_noproxy";
734 chain
= "POSTROUTING";
737 sprintf(str
,"-A %s -s %s -o %s -j ACCEPT", chain
, qos_free_zone
, lan
);
738 iptables_save_line(str
, FALSE
);
741 if(ip_count
> idxtable_treshold1
&& !just_flush
)
743 int idxcount
=0, bitmask
=32-idxtable_bitmask1
;
745 /*-----------------------------------------------------------------*/
746 printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count
);
747 /*-----------------------------------------------------------------*/
749 iptables_save_line(":post_common - [0:0]", FALSE
);
750 iptables_save_line(":forw_common - [0:0]", FALSE
);
753 iptables_save_line(":post_common - [0:0]", TRUE
);
754 iptables_save_line(":forw_common - [0:0]", TRUE
);
757 for_each(ip
,ips
) if(ip
->addr
&& *(ip
->addr
) && !eq(ip
->addr
,"0.0.0.0/0"))
761 buf
=index6_id(ip
->addr
,bitmask
+32);
765 buf
=index_id(ip
->addr
, bitmask
);
768 if_exists(idx
,idxs
,eq(idx
->id
,buf
))
775 idx
->addr
= ip
->addr
;
777 idx
->bitmask
= bitmask
+32*ip
->v6
;
786 /* brutal perfomance optimalization */
787 while(idxcount
> idxtable_treshold2
&& bitmask
> 2*idxtable_bitmask2
)
789 bitmask
-= idxtable_bitmask2
;
792 for_each(idx
,idxs
) if(idx
->parent
== NULL
)
796 buf
= index6_id(idx
->addr
, bitmask
+32);
800 buf
= index_id(idx
->addr
, bitmask
);
802 if_exists(metaindex
,idxs
,eq(metaindex
->id
,buf
))
804 metaindex
->children
++;
808 create(metaindex
,Index
);
809 metaindex
->addr
= idx
->addr
;
811 metaindex
->bitmask
= bitmask
+32*idx
->ipv6
;
812 metaindex
->parent
= NULL
;
813 metaindex
->children
= 0;
814 metaindex
->ipv6
= idx
->ipv6
;
816 push(metaindex
,idxs
);
818 idx
->parent
=metaindex
;
822 /* this should slightly optimize throughput ... */
823 sort(idx
,idxs
,desc_order_by
,children
);
824 sort(idx
,idxs
,order_by
,bitmask
);
831 subnet
=subnet6_id(idx
->addr
, idx
->bitmask
);
835 subnet
=subnet_id(idx
->addr
, idx
->bitmask
);
837 printf("%d: %s/%d\n", ++i
, subnet
, idx
->bitmask
);
839 sprintf(str
,":post_%s - [0:0]", idx
->id
);
840 iptables_save_line(str
, idx
->ipv6
);
842 sprintf(str
,":forw_%s - [0:0]", idx
->id
);
843 iptables_save_line(str
, idx
->ipv6
);
847 string(buf
,strlen(idx
->parent
->id
)+6);
848 sprintf(buf
,"post_%s", idx
->parent
->id
);
855 sprintf(str
,"-A %s -d %s/%d -o %s -j post_%s", buf
, subnet
, idx
->bitmask
, lan
, idx
->id
);
856 iptables_save_line(str
, idx
->ipv6
);
858 sprintf(str
,"-A %s -d %s/%d -o %s -j post_common", buf
, subnet
, idx
->bitmask
, lan
);
859 iptables_save_line(str
, idx
->ipv6
);
863 string(buf
,strlen(idx
->parent
->id
)+6);
864 sprintf(buf
,"forw_%s",idx
->parent
->id
);
871 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_%s", buf
, subnet
, idx
->bitmask
, wan
, idx
->id
);
872 iptables_save_line(str
, idx
->ipv6
);
874 sprintf(str
,"-A %s -s %s/%d -o %s -j forw_common", buf
, subnet
, idx
->bitmask
, wan
);
875 iptables_save_line(str
, idx
->ipv6
);
877 printf("Total indexed iptables chains created: %d\n", i
);
879 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
880 iptables_save_line(str
, FALSE
);
882 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
883 iptables_save_line(str
, FALSE
);
887 sprintf(str
,"-A FORWARD -o %s -j forw_common", wan
);
888 iptables_save_line(str
, TRUE
);
890 sprintf(str
,"-A POSTROUTING -o %s -j post_common", lan
);
891 iptables_save_line(str
, TRUE
);
898 fclose(iptables_file
);
903 puts("Just flushed iptables and tc classes - now exiting ...");
909 if(!dry_run
&& !nodelay
&& qos_free_delay
)
911 printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay
);
912 sleep(qos_free_delay
);
915 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",
919 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
920 tc
,lan
,lan_medium
,lan_medium
,burst_main
,highest_priority
);
923 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
924 tc
,lan
,line
,line
,burst_main
,highest_priority
);
927 sprintf(str
,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc
,wan
,htb_r2q
);
930 sprintf(str
, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
931 tc
,wan
,wan_medium
,wan_medium
,burst_main
,highest_priority
);
934 sprintf(str
, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
935 tc
,wan
,up
,up
,burst_main
,highest_priority
);
939 /*-----------------------------------------------------------------*/
940 puts("Locating heavy downloaders and generating root classes ...");
941 /*-----------------------------------------------------------------*/
942 sort(ip
,ips
,desc_order_by
,traffic
);
944 /*-----------------------------------------------------------------*/
945 /* sub-scope - local variables */
947 long long int rate
= line
;
948 long long int max
= line
;
950 FILE *credit_file
= NULL
;
952 if(!just_preview
&& !dry_run
&& enable_credit
)
954 credit_file
= fopen(credit
,"w");
957 for_each(group
,groups
)
962 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
963 tc
, lan
, parent
, group
->id
, rate
, max
, burst_group
, highest_priority
+1, group
->desired
);
967 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
968 tc
, wan
, parent
, group
->id
, rate
*up
/line
, max
*up
/line
, burst_group
, highest_priority
+1, group
->desired
);
972 if(group_count
++ < max_nesting
)
977 rate
-= digital_divide
*group
->min
;
978 if(rate
< group
->min
)
983 /*shaping of aggresive downloaders, with credit file support */
986 int group_rate
= group
->min
, priority_sequence
= lowest_priority
;
988 for_each(ip
, ips
) if(ip
->min
== group
->min
&& ip
->max
> ip
->min
)
990 ip
->realquota
=ip
->credit
+(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20));
991 if( ip
->keyword
->data_limit
992 and not ip
->fixedprio
993 and ip
->traffic
> ip
->realquota
)
995 if(group_rate
< ip
->max
)
997 ip
->max
= group_rate
;
999 group_rate
+=magic_treshold
;
1000 ip
->prio
=lowest_priority
;
1001 if(ip
->prio
<highest_priority
+2)
1003 ip
->prio
=highest_priority
+2;
1008 if( ip
->keyword
->data_prio
1010 && ( ip
->traffic
> ip
->credit
+ (ip
->min
*ip
->keyword
->data_prio
+(ip
->keyword
->fixed_prio
<<20))) )
1012 ip
->prio
=priority_sequence
--;
1013 if(ip
->prio
<highest_priority
+1)
1015 ip
->prio
=highest_priority
+1;
1021 unsigned long long lcredit
=0;
1023 if((ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))>ip
->traffic
)
1025 lcredit
=(ip
->min
*ip
->keyword
->data_limit
+(ip
->keyword
->fixed_limit
<<20))-ip
->traffic
;
1027 fprintf(credit_file
,"%s %Lu\n",ip
->addr
,lcredit
);
1035 fclose(credit_file
);
1041 if(start_shaping
|| stop_shaping
|| reduce_ceil
)
1043 time_t how_much_seconds
= time(NULL
) - get_mtime(classmap
); /* sice start of daily aggregation session */
1044 printf("Reading %s (%ld seconds old) and applying Fair Use Policy and Aggregation rules... \n", classmap
, how_much_seconds
);
1053 if_exists(ip
,ips
,eq(ip
->addr
,_
))
1055 int unshape_this_ip
= 0;
1056 long avg_mbps_down
= ip
->traffic_down
* 8 / how_much_seconds
;
1057 long avg_mbps_up
= ip
->traffic_up
* 8 / how_much_seconds
;
1058 int agreg
= 1, print_stats
= 1;
1060 if(ip
->keyword
->download_aggregation
)
1062 int min_mbps
= (ip
->min
/ip
->keyword
->download_aggregation
)>>10;
1068 if(min_mbps
<= avg_mbps_down
)
1070 unshape_this_ip
= 0;
1071 agreg
= (int)((float)(avg_mbps_down
+1)/min_mbps
+.5);
1073 ip
->pps_limit
/= agreg
;
1074 printf("Download aggregation 1:%d for %s (min: %lu Mbps avg: %ld Mbps)\n", agreg
, ip
->name
, min_mbps
, avg_mbps_down
);
1078 unshape_this_ip
= 1;
1081 else if(ip
->keyword
->upload_aggregation
)
1083 int min_mbps
= (ip
->min
/ip
->keyword
->upload_aggregation
)>>10;
1089 if(min_mbps
<= avg_mbps_up
)
1091 unshape_this_ip
= 0;
1092 agreg
= (int)((float)(avg_mbps_up
+1)/min_mbps
+.5);
1094 printf("Upload aggregation 1:%d for %s: (min: %lu Mbps avg: %ld Mbps)\n", agreg
, ip
->name
, min_mbps
, avg_mbps_up
);
1098 unshape_this_ip
= 1;
1103 unshape_this_ip
= 1;
1105 ip
->aggregated
= agreg
;
1106 ip
->mark
= atoi(ptr
);
1107 if(ip
->max
< ip
->desired
|| unshape_this_ip
|| reduce_ceil
) /* apply or disable FUP limit immediately.... */
1111 ip
->max
= ip
->desired
;
1112 if(stop_shaping
) /* all limits removed, but not printed with -s (start_shaping) switch */
1114 printf("Removing limit for %s (%s) ", ip
->name
, ip
->addr
);
1123 printf("Applying limit for %s (%s) ", ip
->name
, ip
->addr
);
1126 ip
->max
= ip
->min
+ (ip
->desired
-ip
->min
)/reduce_ceil
;
1128 else if(ip
->max
< ip
->min
)
1135 printf("(down: %dk-%dk wants %dk, ", ip
->min
, ip
->max
, ip
->desired
);
1137 sprintf(str
, "%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1138 tc
, lan
, ip
->group
, ip
->mark
,ip
->min
,ip
->max
, burst
, ip
->prio
);
1142 printf("up: %dk-%dk wants %dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1143 (int)((ip
->desired
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1144 (int)((ip
->desired
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1146 sprintf(str
,"%s class change dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1147 tc
, wan
, ip
->group
, ip
->mark
,
1148 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1149 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1158 puts("Warning - classmap file not fund, just generating preview ...");
1159 start_shaping
=FALSE
;
1162 done
; /* ugly macro end */
1165 json_traffic
=json_preview
;
1168 if(!dry_run
&& !just_flush
)
1170 /*-----------------------------------------------------------------*/
1171 printf("Writing json traffic overview %s ... ", json_traffic
);
1172 /*-----------------------------------------------------------------*/
1173 write_json_traffic(json_traffic
);
1175 /*-----------------------------------------------------------------*/
1176 printf("Writing statistics into HTML page %s ...\n", html
);
1177 /*-----------------------------------------------------------------*/
1178 write_htmlandlogs(html
, d
, total
, just_preview
);
1188 else if(reduce_ceil
)
1190 swchar
='0'+reduce_ceil
; /* -2, -4 */
1192 else if(stop_shaping
)
1197 printf("Statistics preview generated (-%c switch) - now exiting ...\n", swchar
);
1203 printf("%-22s %-15s mark\n","name","ip");
1206 printf("Writing %s", classmap
);
1207 f
= fopen(classmap
, "w");
1213 /*-----------------------------------------------------------------*/
1214 printf(" + generating iptables and tc classes ... ");
1215 /*-----------------------------------------------------------------*/
1217 for_each(ip
, ips
) if(ip
->mark
> 0) /* works only for IPv4 so far */
1222 duplicate(ip
->addr
,buf
);
1225 buf
=index6_id(ip
->addr
,64-idxtable_bitmask1
);
1229 buf
=index_id(ip
->addr
,32-idxtable_bitmask1
);
1232 string(chain_forward
,6+strlen(buf
));
1233 strcpy(chain_forward
,"forw_");
1234 strcat(chain_forward
,buf
);
1236 string(chain_postrouting
,6+strlen(buf
));
1237 strcpy(chain_postrouting
,"post_");
1238 strcat(chain_postrouting
,buf
);
1244 chain_forward
="FORWARD";
1245 chain_postrouting
="POSTROUTING";
1248 /* packet limits - this will be optional in future */
1251 sprintf(limit_pkts
, "-m limit --limit %d/s --limit-burst %d ",
1252 ip
->pps_limit
, ip
->pps_limit
);
1260 printf("%-22s %-16s %04d %d/s\n", ip
->name
, ip
->addr
, ip
->mark
, ip
->pps_limit
);
1263 /* -------------------------------------------------------- mark download */
1264 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1265 chain_postrouting
, ip
->addr
, ip
->mask
,
1266 lan
, mark_iptables
, ip
->mark
);
1267 iptables_save_line(str
, ip
->v6
);
1272 sprintf(str, "-A %s -s %s -p tcp --sport %d -d %s/%d -o %s -j %s%d",
1273 chain_postrouting, proxy_ip, proxy_port, ip->addr,
1274 ip->mask, lan, mark_iptables, ip->mark);
1275 iptables_save_line(str, ip->v6);
1278 sprintf(str
, "-A %s -d %s/%d -o %s %s-j ACCEPT",
1279 chain_postrouting
, ip
->addr
, ip
->mask
, lan
, limit_pkts
);
1280 iptables_save_line(str
, ip
->v6
);
1282 /* classify overlimit packets to separate overlimit class */
1283 sprintf(str
, "-A %s -d %s/%d -o %s -j %s%d",
1284 chain_postrouting
, ip
->addr
, ip
->mask
,
1285 lan
, mark_iptables
, OVERLIMIT_CLASS
);
1286 iptables_save_line(str
, ip
->v6
);
1288 sprintf(str
, "-A %s -d %s/%d -o %s -j ACCEPT",
1289 chain_postrouting
, ip
->addr
, ip
->mask
, lan
);
1290 iptables_save_line(str
, ip
->v6
);
1292 /* -------------------------------------------------------- mark upload */
1293 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1294 chain_forward
, ip
->addr
, ip
->mask
, wan
, mark_iptables
, ip
->mark
);
1295 iptables_save_line(str
, ip
->v6
);
1297 sprintf(str
, "-A %s -s %s/%d -o %s %s-j ACCEPT",
1298 chain_forward
, ip
->addr
, ip
->mask
, wan
, limit_pkts
);
1299 iptables_save_line(str
, ip
->v6
);
1301 /* classify overlimit packets to separate overlimit class */
1302 sprintf(str
, "-A %s -s %s/%d -o %s -j %s%d",
1303 chain_forward
, ip
->addr
, ip
->mask
, wan
, mark_iptables
, OVERLIMIT_CLASS
);
1304 iptables_save_line(str
, ip
->v6
);
1306 sprintf(str
, "-A %s -s %s/%d -o %s -j ACCEPT",
1307 chain_forward
, ip
->addr
, ip
->mask
, wan
);
1308 iptables_save_line(str
, ip
->v6
);
1312 /* -------------------------------------------------------- download class */
1314 printf("(down: %dk-%dk ", ip
->min
, ip
->max
);
1317 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1318 tc
, lan
, ip
->group
, ip
->mark
, ip
->min
, ip
->max
, burst
, ip
->prio
);
1321 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1323 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1324 tc
, lan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1328 if(filter_type
== 1)
1330 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1331 tc
, lan
, ip
->mark
, ip
->mark
);
1335 /* -------------------------------------------------------- upload class */
1337 printf("up: %dk-%dk)\n", (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1338 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
));
1341 sprintf(str
,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1342 tc
, wan
, ip
->group
, ip
->mark
,
1343 (int)((ip
->min
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
),
1344 (int)((ip
->max
/ip
->keyword
->asymetry_ratio
)-ip
->keyword
->asymetry_fixed
), burst
, ip
->prio
);
1347 if(strcmpi(ip
->keyword
->leaf_discipline
, "none"))
1349 sprintf(str
, "%s qdisc add dev %s parent 1:%d handle %d %s",
1350 tc
, wan
, ip
->mark
, ip
->mark
, ip
->keyword
->leaf_discipline
); /*qos_leaf*/
1354 if(filter_type
== 1)
1356 sprintf(str
, "%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",
1357 tc
, wan
, ip
->mark
, ip
->mark
);
1363 fprintf(f
, "%s %d\n", ip
->addr
, ip
->mark
);
1369 printf("(sharing %s)\n", ip
->sharing
);
1382 chain_forward
= "forw_common";
1383 chain_postrouting
= "post_common";
1387 chain_forward
= "FORWARD";
1388 chain_postrouting
= "POSTROUTING";
1393 final_chain
= "ACCEPT";
1401 sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s%d",
1402 chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables, 3);
1403 iptables_save_line(str, FALSE); // only for IPv4
1405 sprintf(str, "-A %s -s %s -p tcp --sport %d -o %s -j %s",
1406 chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1407 iptables_save_line(str, FALSE); // only for IPv4
1413 sprintf(str
, "-A %s -o %s -j %s%d",
1414 chain_postrouting
, lan
, mark_iptables
, FREE_CLASS
);
1415 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1418 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1419 iptables_save_line(str
, FALSE
);
1422 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1423 iptables_save_line(str
, TRUE
);
1428 sprintf(str
,"-A %s -o %s -j %s%d", chain_forward
, wan
, mark_iptables
, FREE_CLASS
);
1429 iptables_save_line(str
, FALSE
); /* only for IPv4 */
1432 sprintf(str
,"-A %s -o %s -j %s", chain_forward
, wan
, final_chain
);
1433 iptables_save_line(str
, FALSE
);
1436 sprintf(str
,"-A %s -o %s -j %s", chain_postrouting
, lan
, final_chain
);
1437 iptables_save_line(str
, TRUE
);
1440 if(free_min
) /* allocate free bandwith if it is not zero... */
1442 /*-----------------------------------------------------------------*/
1443 puts("Generating free bandwith class ...");
1444 /*-----------------------------------------------------------------*/
1445 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1446 tc
, lan
, parent
, FREE_CLASS
, free_min
, free_max
,burst
, lowest_priority
);
1448 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1449 tc
, wan
, parent
, FREE_CLASS
, free_min
, free_max
, burst
, lowest_priority
);
1452 if(strcmpi(qos_leaf
, "none"))
1454 sprintf(str
,"%s qdisc add dev %s parent 1:%d handle %d %s", tc
, lan
, FREE_CLASS
, FREE_CLASS
, qos_leaf
);
1457 sprintf(str
,"%s qdisc add dev %s parent 1:%d handle %d %s", tc
, wan
, FREE_CLASS
, FREE_CLASS
, qos_leaf
);
1460 /* tc handle 1 fw flowid */
1461 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc
, lan
, FREE_CLASS
, FREE_CLASS
);
1464 sprintf(str
,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc
, wan
, FREE_CLASS
, FREE_CLASS
);
1467 /*-----------------------------------------------------------------*/
1468 puts("Generating bandwith class for overlimit packets...");
1469 /*-----------------------------------------------------------------*/
1470 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1471 tc
, lan
, parent
, OVERLIMIT_CLASS
, overlimit_min
, overlimit_max
, burst
, lowest_priority
);
1473 sprintf(str
, "%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1474 tc
, wan
, parent
, OVERLIMIT_CLASS
, overlimit_min
, overlimit_max
, burst
, lowest_priority
);
1477 printf("Total IP count: %d\n", i
);
1478 run_iptables_restore();
1484 /* that's all folks, thank you for reading it all the way up to this point ;-) */
1485 /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
This page took 1.164604 seconds and 4 git commands to generate.