X-Git-Url: https://git.harvie.cz/?a=blobdiff_plain;ds=sidebyside;f=prometheus.c;h=4cc02a02543b8c2c23c1070fcb09a3b6807362da;hb=364980f04f445e5040f7fe5c6a5c499ac9e86d5b;hp=4c8b8eaa42892b4cf389c9ea9a77719cda50d5bd;hpb=57cbdd526da8ce682d1a8c788e461bcbc7eefa76;p=svn%2FPrometheus-QoS%2F.git
diff --git a/prometheus.c b/prometheus.c
index 4c8b8ea..4cc02a0 100644
--- a/prometheus.c
+++ b/prometheus.c
@@ -2,12 +2,12 @@
/* Prometheus QoS - you can "steal fire" from your ISP */
/* "fair-per-IP" quality of service (QoS) utility */
/* requires Linux 2.4.x or 2.6.x with HTB support */
-/* Copyright(C) 2005-2017 Michael Polak, Arachne Aerospace */
+/* Copyright(C) 2005-2020 Michael Polak, Arachne Aerospace */
/* iptables-restore support Copyright(C) 2007-2008 ludva */
/* Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf */
/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
-/* Modified by: xChaos, 20171012
+/* Modified by: xChaos, 20200107
ludva, 20080415
Prometheus QoS is free software; you can redistribute it and/or
@@ -29,7 +29,7 @@
#include "cll1-0.6.2.h"
#include "ipstruct.h"
-const char *version = "0.9.0-a";
+const char *version = "1.0.0-a";
/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
/* Versions: 0.9.0 is development release, 1.0 will be "stable" */
@@ -40,7 +40,7 @@ const char *version = "0.9.0-a";
/* Warning: unofficial Github mirror is not supported by author! */
/* - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - */
-const char *stats_html_signature = "Statistics generated by Prometheus QoS version %s
GPL+Copyright(C)2005-2017 Michael Polak, Arachne Labs\n";
+const char *stats_html_signature = "Statistics generated by Prometheus QoS version %s
GPL+Copyright(C)2005-2020 Michael Polak, Arachne Labs\n";
#define STRLEN 512
#undef DEBUG
@@ -61,7 +61,9 @@ char *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition
char *macrosfile = "/etc/prometheus/prometheus.macros"; /* rewrite rules for most common tariffs */
char *upstreamfile = "/etc/prometheus/upstream.interfaces"; /* list of interfaces to manage */
char *downstreamfile = "/etc/prometheus/downstream.interfaces"; /* list of interfaces to manage */
+char *qosfreefile = "/etc/prometheus/qosfree.interfaces"; /* list of interfaces to manage */
char *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
+char *iptablesdump = "/var/spool/prometheus.iptables-dump"; /* temporary file for iptables -L -v -x -n -t mangle */
char *ip6tablesfile = "/var/spool/prometheus.ip6tables"; /* temporary file for ip6tables-restore*/
char *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */
char *classmap = "/var/lib/misc/prometheus.classes"; /* credit log file */
@@ -100,6 +102,8 @@ char *medium = "1000Mbit"; /* 10Mbit/100Mbit ethernet */
char *ip6prefix = NULL; /* Prefix for global /48 IPv6 subnet */
char *qos_leaf = "sfq perturb 5"; /* leaf discipline */
char *qos_free_zone = NULL; /* QoS free zone */
+char *qos_free_dst_ipset = NULL; /* QoS free zone - dst match ipset name, must be prepared outside prometheus */
+char *qos_free_src_ipset = NULL; /* QoS free zone - src match ipset name, must be prepared outside prometheus */
/* int qos_proxy = TRUE; include proxy port to QoS */
int found_lmsid = FALSE; /* show links to users in LMS information system */
int include_upload = TRUE; /* upload+download=total traffic */
@@ -138,6 +142,7 @@ struct Keyword *keyword, *defaultkeyword=NULL, *keywords = NULL;
struct Macro *macro, *macros = NULL;
struct Index *idxs = NULL, *idx, *metaindex;
struct Interface *interfaces = NULL, *interface;
+struct QosFreeInterface *qosfreeinterfaces = NULL, *qosfreeinterface;
#define FREE_CLASS 3
#define OVERLIMIT_CLASS 4
@@ -286,10 +291,12 @@ void get_config(char *config_filename)
option("ip6tables-save",ip6tablessave);
option("ip6tables-restore",ip6tablesrestore);
option("iptables-in-filename",iptablesfile);
+ option("iptables-dump-filename",iptablesdump);
option("ip6tables-in-filename",ip6tablesfile);
option("hosts",hosts);
option("downstream-interfaces-list-filename",downstreamfile);
option("upstream-interfaces-list-filename",upstreamfile);
+ option("qos-free-interfaces-list-filename",qosfreefile);
option("macros-filename",macrosfile);
option("ip6-prefix",ip6prefix);
option("medium",medium);
@@ -311,6 +318,8 @@ void get_config(char *config_filename)
option("lms-url",lms_url);
ioption("use-jquery-popups",use_jquery_popups);
option("qos-free-zone",qos_free_zone);
+ option("qos-free-dst-ipset",qos_free_dst_ipset);
+ option("qos-free-src-ipset",qos_free_src_ipset);
ioption("qos-free-delay",qos_free_delay);
/* ioption("qos-proxy-enable",qos_proxy); */
/* option("qos-proxy-ip",proxy_ip);*/
@@ -395,6 +404,10 @@ void iptables_save_line(char *line, int ipv6)
}
}
+#define IPv4 FALSE
+#define IPv6 TRUE
+
+
void run_iptables_restore(void)
{
char *restor;
@@ -404,7 +417,7 @@ void run_iptables_restore(void)
printf("Running %s <%s ...\n", iptablesrestore, iptablesfile);
/*-----------------------------------------------------------------*/
- iptables_save_line("COMMIT", FALSE);
+ iptables_save_line("COMMIT", IPv4);
fclose(iptables_file);
if(dry_run)
{
@@ -423,7 +436,7 @@ void run_iptables_restore(void)
/*-----------------------------------------------------------------*/
printf("Running %s <%s ...\n", ip6tablesrestore, ip6tablesfile);
/*-----------------------------------------------------------------*/
- iptables_save_line("COMMIT", TRUE);
+ iptables_save_line("COMMIT", IPv6);
fclose(ip6tables_file);
if(dry_run)
{
@@ -562,7 +575,6 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
}
}
done; /* ugly macro end */
-
if(just_logs)
{
@@ -601,6 +613,12 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
string(str, STRLEN);
string(limit_pkts, STRLEN);
+ /*-----------------------------------------------------------------*/
+ printf("Parsing qos free interfaces file %s ...\n", qosfreefile);
+ /*-----------------------------------------------------------------*/
+ load(qosfreeinterface, qosfreeinterfaces,
+ qosfreefile, QosFreeInterface, name);
+
/*-----------------------------------------------------------------*/
printf("Parsing macro definition file %s ...\n", macrosfile);
/*-----------------------------------------------------------------*/
@@ -624,14 +642,34 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
printf("Parsing class defintion file %s ...\n", hosts);
/*-----------------------------------------------------------------*/
parse_hosts(hosts);
-/*
- //this was pretty dumb idea anyway...
- if(just_networks)
+
+#ifdef MONITORINGTRHU_CTU
+//special hack only to generate certain required CSV statistics for www.ctu.cz (regulation body)
+//not required for everyday use, requires special syntax sugar in hosts file, see parsehosts.c
+ for_each(technology, technologies)
{
- analyse_topology("/usr/sbin/traceroute -n -m 10 -w 2 %s.%d");
- exit(-1);
- }
-*/
+ char *filename;
+ FILE *f;
+ string(filename, strlen(log_dir) + strlen(technology->filename) + 5);
+ strcpy(filename, log_dir);
+ strcat(filename, technology->filename);
+ strcat(filename, ".csv");
+ /*-----------------------------------------------------------------*/
+ printf("Writing report file %s ...\n", filename);
+ /*-----------------------------------------------------------------*/
+ f = fopen(filename, "w");
+ if(f)
+ {
+ for_each(ip, ips) if(eq(technology->filename, ip->technology_str))
+ {
+ fprintf(f,"%d,%s,%d\n", ip->lmsid, ip->ruian_id_str, ip->max);
+ }
+ fclose(f);
+ }
+ else
+ perror(filename);
+ }
+#endif
/*-----------------------------------------------------------------*/
puts("Resolving shared connections ...");
@@ -705,7 +743,7 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
perror(iptablesfile);
exit(-1);
}
- iptables_save_line(iptablespreamble, FALSE);
+ iptables_save_line(iptablespreamble, IPv4);
if(ip6prefix)
{
@@ -715,8 +753,8 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
perror(ip6tablesfile);
exit(-1);
}
- iptables_save_line(iptablespreamble, TRUE);
- iptables_save_line(ip6preamble, TRUE);
+ iptables_save_line(iptablespreamble, IPv6);
+ iptables_save_line(ip6preamble, IPv6);
}
run_iptables_restore();
@@ -735,23 +773,51 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
}
iptables_file=fopen(iptablesfile,"w");
- iptables_save_line(iptablespreamble, FALSE);
+ iptables_save_line(iptablespreamble, IPv4);
if(ip6prefix)
{
ip6tables_file=fopen(ip6tablesfile,"w");
- iptables_save_line(iptablespreamble, TRUE);
- iptables_save_line(ip6preamble, TRUE);
+ iptables_save_line(iptablespreamble, IPv6);
+ iptables_save_line(ip6preamble, IPv6);
+ }
+
+ if(qos_free_zone && *qos_free_zone != '0') /* this is currently supported only for IPv4 */
+ {
+ for_each(interface, interfaces)
+ {
+ sprintf(str,"-A %s -%c %s -o %s -j ACCEPT", interface->chain, (interface->is_upstream?'d':'s'), qos_free_zone, interface->name);
+ iptables_save_line(str, IPv4);
+ }
}
- if(qos_free_zone && *qos_free_zone!='0') /* this is currently supported only for IPv4 */
+ if(qos_free_dst_ipset && *qos_free_dst_ipset != '0') /* this is currently supported only for IPv4 */
{
for_each(interface, interfaces)
{
- sprintf(str,"-A %s -s %s -o %s -j ACCEPT", interface->chain, qos_free_zone, interface->name);
- iptables_save_line(str, FALSE);
+ sprintf(str,"-A %s -m set --match-set %s %s -o %s -j ACCEPT", interface->chain, qos_free_dst_ipset, (interface->is_upstream?"dst":"src"), interface->name);
+ iptables_save_line(str, IPv4);
+ }
+ }
+
+ if(qos_free_src_ipset && *qos_free_src_ipset != '0') /* this is currently supported only for IPv4 */
+ {
+ for_each(interface, interfaces)
+ {
+ sprintf(str,"-A %s -m set --match-set %s %s -o %s -j ACCEPT", interface->chain, qos_free_src_ipset, (interface->is_upstream?"src":"dst"), interface->name);
+ iptables_save_line(str, IPv4);
}
}
+ for_each(qosfreeinterface, qosfreeinterfaces)
+ {
+ sprintf(str,"-A FORWARD -i %s -j ACCEPT", qosfreeinterface->name);
+ iptables_save_line(str, IPv4);
+ iptables_save_line(str, IPv6);
+ sprintf(str,"-A POSTROUTING -o %s -j ACCEPT", qosfreeinterface->name);
+ iptables_save_line(str, IPv4);
+ iptables_save_line(str, IPv6);
+ }
+
if(ip_count > idxtable_treshold1 && !just_flush)
{
int idxcount=0, bitmask=32-idxtable_bitmask1;
@@ -760,12 +826,12 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);
/*-----------------------------------------------------------------*/
- iptables_save_line(":post_common - [0:0]", FALSE);
- iptables_save_line(":forw_common - [0:0]", FALSE);
+ iptables_save_line(":post_common - [0:0]", IPv4);
+ iptables_save_line(":forw_common - [0:0]", IPv4);
if(ip6prefix)
{
- iptables_save_line(":post_common - [0:0]", TRUE);
- iptables_save_line(":forw_common - [0:0]", TRUE);
+ iptables_save_line(":post_common - [0:0]", IPv6);
+ iptables_save_line(":forw_common - [0:0]", IPv6);
}
for_each(ip,ips) if(ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))
@@ -868,10 +934,12 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
buf = interface->chain;
}
- sprintf(str,"-A %s -d %s/%d -o %s -j %s_%s", buf, subnet, idx->bitmask, interface->name, interface->idxprefix, idx->id);
+ sprintf(str, "-A %s -%c %s/%d -o %s -j %s_%s",
+ buf, (interface->is_upstream?'s':'d'), subnet, idx->bitmask, interface->name, interface->idxprefix, idx->id);
iptables_save_line(str, idx->ipv6);
- sprintf(str,"-A %s -d %s/%d -o %s -j %s_common", buf, subnet, idx->bitmask, interface->name, interface->idxprefix);
+ sprintf(str, "-A %s -%c %s/%d -o %s -j %s_common",
+ buf, (interface->is_upstream?'s':'d'), subnet, idx->bitmask, interface->name, interface->idxprefix);
iptables_save_line(str, idx->ipv6);
}
}
@@ -880,11 +948,11 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
for_each(interface, interfaces)
{
sprintf(str,"-A %s -o %s -j %s_common", interface->chain, interface->name, interface->idxprefix);
- iptables_save_line(str, FALSE);
+ iptables_save_line(str, IPv4);
if(ip6prefix)
{
sprintf(str,"-A %s -o %s -j %s_common", interface->chain, interface->name, interface->idxprefix);
- iptables_save_line(str, TRUE);
+ iptables_save_line(str, IPv6);
}
}
}
@@ -1174,6 +1242,7 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
printf("Writing statistics into HTML page %s ...\n", html);
/*-----------------------------------------------------------------*/
write_htmlandlogs(html, d, total, just_preview);
+ printf("\n");
}
if(just_preview)
@@ -1257,24 +1326,29 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
#endif
/* ------------------------------------------------ iptables classify */
- sprintf(str, "-A %s -d %s/%d -o %s -j %s%d",
- chain, ip->addr, ip->mask,
+ sprintf(str, "-A %s -%c %s/%d -o %s -j %s%d",
+ chain, (interface->is_upstream?'s':'d'), ip->addr, ip->mask,
interface->name, mark_iptables, ip->mark);
iptables_save_line(str, ip->v6);
- sprintf(str, "-A %s -d %s/%d -o %s %s-j ACCEPT",
- chain, ip->addr, ip->mask, interface->name, limit_pkts);
+ sprintf(str, "-A %s -%c %s/%d -o %s %s-j ACCEPT",
+ chain, (interface->is_upstream?'s':'d'),ip->addr, ip->mask,
+ interface->name, limit_pkts);
iptables_save_line(str, ip->v6);
- /* classify overlimit packets to separate overlimit class */
- sprintf(str, "-A %s -d %s/%d -o %s -j %s%d",
- chain, ip->addr, ip->mask,
- interface->name, mark_iptables, OVERLIMIT_CLASS);
- iptables_save_line(str, ip->v6);
-
- sprintf(str, "-A %s -d %s/%d -o %s -j ACCEPT",
- chain, ip->addr, ip->mask, interface->name);
- iptables_save_line(str, ip->v6);
+ if(*limit_pkts) /* non-empty string?*/
+ {
+ /* classify overlimit packets to separate overlimit class */
+ sprintf(str, "-A %s -%c %s/%d -o %s -j %s%d",
+ chain, (interface->is_upstream?'s':'d'), ip->addr, ip->mask,
+ interface->name, mark_iptables, OVERLIMIT_CLASS);
+ iptables_save_line(str, ip->v6);
+
+ sprintf(str, "-A %s -%c %s/%d -o %s -j ACCEPT",
+ chain, (interface->is_upstream?'s':'d'), ip->addr, ip->mask,
+ interface->name);
+ iptables_save_line(str, ip->v6);
+ }
if(ip->min)
{
@@ -1341,15 +1415,15 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
sprintf(str, "-A %s -o %s -j %s%d",
chain, interface->name, mark_iptables, FREE_CLASS);
- iptables_save_line(str, FALSE); /* only for IPv4 */
+ iptables_save_line(str, IPv4); /* only for IPv4 */
}
sprintf(str,"-A %s -o %s -j %s", chain, interface->name, final_chain);
- iptables_save_line(str, FALSE);
+ iptables_save_line(str, IPv4);
if(ip6prefix)
{
sprintf(str,"-A %s -o %s -j %s", chain, interface->name, final_chain);
- iptables_save_line(str, TRUE);
+ iptables_save_line(str, IPv6);
}
if(free_min) /* allocate free bandwith if it is not zero... */