config/qos/makeqosscripts.pl

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2007-2013  IPFire Team  <info@ipfire.org>                     #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 use strict;
  23 # enable only the following on debugging purpose
  24 # use warnings;
  25
  26 require '/var/ipfire/general-functions.pl';
  27 require "${General::swroot}/lang.pl";
  28 require "${General::swroot}/header.pl";
  29
  30 my %qossettings = ();
  31 my %checked = ();
  32 my %netsettings = ();
  33 my $message = "";
  34 my $errormessage = "";
  35 my $c = "";
  36 my $direntry = "";
  37 my $classentry = "";
  38 my $l7ruleentry = "";
  39 my $portruleentry = "";
  40 my $tosruleentry = "";
  41 my @tmp = ();
  42 my @classes = ();
  43 my @l7rules = ();
  44 my @portrules = ();
  45 my @tosrules = ();
  46 my @tmpline = ();
  47 my @classline = ();
  48 my @tosruleline = ();
  49 my @l7ruleline = ();
  50 my @portruleline = ();
  51 my @proto = ();
  52 my %selected= () ;
  53 my $classfile = "/var/ipfire/qos/classes";
  54 my $level7file = "/var/ipfire/qos/level7config";
  55 my $portfile = "/var/ipfire/qos/portconfig";
  56 my $tosfile = "/var/ipfire/qos/tosconfig";
  57 my $fqcodel_options = "limit 10240 quantum 1514";
  58
  59 &General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
  60
  61 $qossettings{'ENABLED'} = 'off';
  62 $qossettings{'EDIT'} = 'no';
  63 $qossettings{'OUT_SPD'} = '';
  64 $qossettings{'INC_SPD'} = '';
  65 $qossettings{'DEF_OUT_SPD'} = '';
  66 $qossettings{'DEF_INC_SPD'} = '';
  67 $qossettings{'DEFCLASS_INC'} = '';
  68 $qossettings{'DEFCLASS_OUT'} = '';
  69 $qossettings{'ACK'} = '';
  70 $qossettings{'RED_DEV'} = `cat /var/ipfire/red/iface`;
  71 $qossettings{'IMQ_DEV'} = 'imq0';
  72 $qossettings{'TOS'} = '';
  73 $qossettings{'VALID'} = 'yes';
  74 $qossettings{'IMQ_MODE'} = 'PREROUTING';
  75
  76 &General::readhash("${General::swroot}/qos/settings", \%qossettings);
  77
  78 open( FILE, "< $classfile" ) or die "Unable to read $classfile";
  79 @classes = <FILE>;
  80 close FILE;
  81 open( FILE, "< $level7file" ) or die "Unable to read $level7file";
  82 @l7rules = <FILE>;
  83 close FILE;
  84 open( FILE, "< $portfile" ) or die "Unable to read $portfile";
  85 @portrules = <FILE>;
  86 close FILE;
  87 open( FILE, "< $tosfile" ) or die "Unable to read $tosfile";
  88 @tosrules = <FILE>;
  89 close FILE;
  90
  91 ############################################################################################################################
  92 ############################################################################################################################
  93
  94 print <<END
  95 #/bin/bash
  96 #################################################
  97 # This is an autocreated QoS-Script for         #
  98 # IPFIRE                                        #
  99 # Copyright by the IPFire Team (GPLv2)          #
 100 # www.ipfire.org                                #
 101 #################################################
 102
 103 ### SYSTEMVARIABLES:
 104 # RED INTERFACE:        $qossettings{'RED_DEV'}
 105 # IMQ DEVICE:           $qossettings{'IMQ_DEV'}
 106
 107 eval \$(/usr/local/bin/readhash /var/ipfire/main/settings)
 108 if [ "\$RRDLOG" == "" ]; then
 109         RRDLOG=/var/log/rrd
 110 fi
 111
 112 case "\$1" in
 113
 114   status)
 115         case "\$2" in
 116           qdisc)
 117                 echo "[qdisc]"
 118                 tc -s qdisc show dev $qossettings{'RED_DEV'}
 119                 tc -s qdisc show dev $qossettings{'IMQ_DEV'}
 120                 exit 0
 121           ;;
 122           class)
 123                 echo "[class]"
 124                 tc -s class show dev $qossettings{'RED_DEV'}
 125                 tc -s class show dev $qossettings{'IMQ_DEV'}
 126                 exit 0
 127           ;;
 128           filter)
 129                 echo "[filter]"
 130                 tc -s filter show dev $qossettings{'RED_DEV'}
 131                 tc -s filter show dev $qossettings{'IMQ_DEV'}
 132                 exit 0
 133           ;;
 134           iptables)
 135                 echo "[iptables]"
 136                 iptables -t mangle -n -L QOS-OUT -v -x 2> /dev/null
 137                 iptables -t mangle -n -L QOS-INC -v -x 2> /dev/null
 138                 iptables -t mangle -n -L QOS-TOS -v -x 2> /dev/null
 139                 exit 0
 140           ;;
 141         esac
 142         \$0 \$1 qdisc
 143         \$0 \$1 class
 144         \$0 \$1 filter
 145         \$0 \$1 iptables
 146         exit 0
 147   ;;
 148   start)
 149         ###
 150         ### $qossettings{'RED_DEV'}
 151         ###
 152
 153         ### INIT KERNEL
 154         modprobe sch_htb
 155
 156         ### ADD HTB QDISC FOR $qossettings{'RED_DEV'}
 157         tc qdisc del dev $qossettings{'RED_DEV'} root >/dev/null 2>&1
 158         tc qdisc add dev $qossettings{'RED_DEV'} root handle 1: htb default $qossettings{'DEFCLASS_OUT'}
 159
 160         ### MAIN RATE LIMIT
 161         tc class add dev $qossettings{'RED_DEV'} parent 1: classid 1:1 htb rate $qossettings{'OUT_SPD'}kbit
 162
 163         ### CLASSES FOR $qossettings{'RED_DEV'}
 164 END
 165 ;
 166 foreach $classentry (sort @classes)
 167 {
 168         @classline = split( /\;/, $classentry );
 169         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 170                 $qossettings{'DEVICE'} = $classline[0];
 171                 $qossettings{'CLASS'} = $classline[1];
 172                 $qossettings{'PRIO'} = $classline[2];
 173                 $qossettings{'RATE'} = $classline[3];
 174                 $qossettings{'CEIL'} = $classline[4];
 175                 $qossettings{'BURST'} = $classline[5];
 176                 $qossettings{'CBURST'} = $classline[6];
 177                 print "\ttc class add dev $qossettings{'DEVICE'} parent 1:1 classid 1:$qossettings{'CLASS'} htb rate $qossettings{'RATE'}kbit ceil $qossettings{'CEIL'}kbit prio $qossettings{'PRIO'} ";
 178                 if (($qossettings{'BURST'} ne '') && ($qossettings{'BURST'} ne 0)) {
 179                         print "burst $qossettings{'BURST'}k ";
 180                 }
 181                 if (($qossettings{'CBURST'} ne '') && ($qossettings{'CBURST'} ne 0)) {
 182                         print "cburst $qossettings{'CBURST'}k";
 183                 }
 184                 print "\n";
 185         }
 186 }
 187
 188 print "\n\t### ATTACH QDISC TO LEAF CLASSES\n";
 189 foreach $classentry (sort @classes)
 190 {
 191         @classline = split( /\;/, $classentry );
 192         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 193                 $qossettings{'DEVICE'} = $classline[0];
 194                 $qossettings{'CLASS'} = $classline[1];
 195                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 1:$qossettings{'CLASS'} handle $qossettings{'CLASS'}: fq_codel $fqcodel_options\n";
 196         }
 197 }
 198 print "\n\t### FILTER TRAFFIC INTO CLASSES\n";
 199 foreach $classentry (sort @classes)
 200 {
 201         @classline = split( /\;/, $classentry );
 202         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 203                 $qossettings{'DEVICE'} = $classline[0];
 204                 $qossettings{'CLASS'} = $classline[1];
 205                 print "\ttc filter add dev $qossettings{'DEVICE'} parent 1:0 prio 0 protocol ip handle $qossettings{'CLASS'} fw flowid 1:$qossettings{'CLASS'}\n";
 206         }
 207 }
 208 print <<END
 209
 210         ### add l7-filter to PREROUTING chain to see all traffic
 211         iptables -t mangle -A PREROUTING -m layer7 --l7proto unset
 212
 213         ### ADD QOS-OUT CHAIN TO THE MANGLE TABLE IN IPTABLES
 214         iptables -t mangle -N QOS-OUT
 215         iptables -t mangle -N QOS-TOS
 216         iptables -t mangle -I POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT
 217         iptables -t mangle -A POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-TOS
 218
 219         ### Don't change mark on traffic for the ipsec tunnel
 220         iptables -t mangle -A QOS-OUT -m mark --mark 50 -j RETURN
 221
 222         ### MARK ACKs
 223         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags SYN,RST SYN -j TOS --set-tos 4
 224         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags SYN,RST SYN -j MARK --set-mark $qossettings{'ACK'}
 225         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags SYN,RST SYN -j RETURN
 226
 227         iptables -t mangle -A QOS-OUT -p icmp -m length --length 40:100 -j MARK --set-mark $qossettings{'ACK'}
 228         iptables -t mangle -A QOS-OUT -p icmp -m length --length 40:100 -j RETURN
 229
 230         iptables -t mangle -A QOS-OUT -p tcp --syn -m length --length 40:68 -j TOS --set-tos 4
 231         iptables -t mangle -A QOS-OUT -p tcp --syn -m length --length 40:68 -j MARK --set-mark $qossettings{'ACK'}
 232         iptables -t mangle -A QOS-OUT -p tcp --syn -m length --length 40:68 -j RETURN
 233
 234         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j TOS --set-tos 4
 235         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j MARK --set-mark $qossettings{'ACK'}
 236         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j RETURN
 237
 238         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j TOS --set-tos 4
 239         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j MARK --set-mark $qossettings{'ACK'}
 240         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j RETURN
 241
 242         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL RST -j TOS --set-tos 4
 243         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL RST -j MARK --set-mark $qossettings{'ACK'}
 244         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL RST -j RETURN
 245
 246         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,RST -j TOS --set-tos 4
 247         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,RST -j MARK --set-mark $qossettings{'ACK'}
 248         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,RST -j RETURN
 249
 250         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,FIN -j TOS --set-tos 4
 251         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,FIN -j MARK --set-mark $qossettings{'ACK'}
 252         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,FIN -j RETURN
 253
 254         ### SET TOS
 255 END
 256 ;
 257         foreach $tosruleentry (sort @tosrules)
 258         {
 259                 @tosruleline = split( /\;/, $tosruleentry );
 260                 $qossettings{'CLASS'} = $tosruleline[0];
 261                 $qossettings{'TOS'} = abs $tosruleline[2] * 2;
 262                 if ( $tosruleline[1] eq $qossettings{'RED_DEV'} )
 263                 {
 264                         print "\tiptables -t mangle -A QOS-OUT -m tos --tos $qossettings{'TOS'} -j MARK --set-mark $qossettings{'CLASS'}\n";
 265                         print "\tiptables -t mangle -A QOS-OUT -m tos --tos $qossettings{'TOS'} -j RETURN\n";
 266                 }
 267         }
 268
 269 print "\n\t### SET PORT-RULES\n";
 270         foreach $portruleentry (sort @portrules)
 271         {
 272                 @portruleline = split( /\;/, $portruleentry );
 273                 if ( $portruleline[1] eq $qossettings{'RED_DEV'} )
 274                 {
 275                         $qossettings{'CLASS'} = $portruleline[0];
 276                         $qossettings{'DEVICE'} = $portruleline[1];
 277                         $qossettings{'PPROT'} = $portruleline[2];
 278                         $qossettings{'QIP'} = $portruleline[3];
 279                         $qossettings{'QPORT'} = $portruleline[4];
 280                         $qossettings{'DIP'} = $portruleline[5];
 281                         $qossettings{'DPORT'} = $portruleline[6];
 282                         print "\tiptables -t mangle -A QOS-OUT ";
 283                         if ($qossettings{'QIP'} ne ''){
 284                                 print "-s $qossettings{'QIP'} ";
 285                         }
 286                         if ($qossettings{'DIP'} ne ''){
 287                                 print "-d $qossettings{'DIP'} ";
 288                         }
 289                         print "-p $qossettings{'PPROT'} ";
 290 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 291 #                               print "-m multiport ";
 292 #                       }
 293                         if ($qossettings{'QPORT'} ne ''){
 294                                 print "--sport $qossettings{'QPORT'} ";
 295                         }
 296                         if ($qossettings{'DPORT'} ne ''){
 297                                 print "--dport $qossettings{'DPORT'} ";
 298                         }
 299                         print "-j MARK --set-mark $qossettings{'CLASS'}\n";
 300                         print "\tiptables -t mangle -A QOS-OUT ";
 301                         if ($qossettings{'QIP'} ne ''){
 302                                 print "-s $qossettings{'QIP'} ";
 303                         }
 304                         if ($qossettings{'DIP'} ne ''){
 305                                 print "-d $qossettings{'DIP'} ";
 306                         }
 307                         print "-p $qossettings{'PPROT'} ";
 308 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 309 #                               print "-m multiport ";
 310 #                       }
 311                         if ($qossettings{'QPORT'} ne ''){
 312                                 print "--sport $qossettings{'QPORT'} ";
 313                         }
 314                         if ($qossettings{'DPORT'} ne ''){
 315                                 print "--dport $qossettings{'DPORT'} ";
 316                         }
 317                         print "-j RETURN\n\n";
 318                 }
 319         }
 320
 321 print <<END
 322
 323         ### SET LEVEL7-RULES
 324 END
 325 ;
 326         foreach $l7ruleentry (sort @l7rules)
 327         {
 328                 @l7ruleline = split( /\;/, $l7ruleentry );
 329                 if ( $l7ruleline[1] eq $qossettings{'RED_DEV'} )
 330                 {
 331                         $qossettings{'CLASS'} = $l7ruleline[0];
 332                         $qossettings{'DEVICE'} = $l7ruleline[1];
 333                         $qossettings{'L7PROT'} = $l7ruleline[2];
 334                         $qossettings{'QIP'} = $l7ruleline[3];
 335                         $qossettings{'DIP'} = $l7ruleline[4];
 336                         print "\tiptables -t mangle -A QOS-OUT ";
 337                         if ($qossettings{'QIP'} ne ''){
 338                                 print "-s $qossettings{'QIP'} ";
 339                         }
 340                         if ($qossettings{'DIP'} ne ''){
 341                                 print "-d $qossettings{'DIP'} ";
 342                         }
 343                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-mark $qossettings{'CLASS'}\n";
 344                         print "\tiptables -t mangle -A QOS-OUT ";
 345                         if ($qossettings{'QIP'} ne ''){
 346                                 print "-s $qossettings{'QIP'} ";
 347                         }
 348                         if ($qossettings{'DIP'} ne ''){
 349                                 print "-d $qossettings{'DIP'} ";
 350                         }
 351                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
 352                 }
 353         }
 354
 355 print <<END
 356
 357         ### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
 358         iptables -t mangle -A QOS-OUT -m mark --mark 0 -j MARK --set-mark $qossettings{'DEFCLASS_OUT'}
 359
 360         ###
 361         ### $qossettings{'IMQ_DEV'}
 362         ###
 363
 364         tc qdisc del dev $qossettings{'RED_DEV'} ingress >/dev/null 2>&1
 365         tc qdisc add dev $qossettings{'RED_DEV'} handle ffff: ingress
 366
 367         ### BRING UP $qossettings{'IMQ_DEV'}
 368         if [ ! -d "/sys/class/net/$qossettings{'IMQ_DEV'}" ]; then
 369                 ip link add name $qossettings{'IMQ_DEV'} type ifb
 370         fi
 371
 372         ip link set $qossettings{'IMQ_DEV'} up
 373
 374         tc filter add dev $qossettings{'RED_DEV'} parent ffff: protocol all u32 match u32 0 0 \\
 375                 action mirred egress redirect dev $qossettings{'IMQ_DEV'}
 376
 377         ### ADD HTB QDISC FOR $qossettings{'IMQ_DEV'}
 378         tc qdisc del dev $qossettings{'IMQ_DEV'} root >/dev/null 2>&1
 379         tc qdisc add dev $qossettings{'IMQ_DEV'} root handle 2: htb default $qossettings{'DEFCLASS_INC'}
 380
 381         ### MAIN RATE LIMIT
 382         tc class add dev $qossettings{'IMQ_DEV'} parent 2: classid 2:1 htb rate $qossettings{'INC_SPD'}kbit
 383
 384         ### CLASSES FOR $qossettings{'IMQ_DEV'}
 385 END
 386 ;
 387 foreach $classentry (sort @classes)
 388 {
 389         @classline = split( /\;/, $classentry );
 390         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 391                 $qossettings{'DEVICE'} = $classline[0];
 392                 $qossettings{'CLASS'} = $classline[1];
 393                 $qossettings{'PRIO'} = $classline[2];
 394                 $qossettings{'RATE'} = $classline[3];
 395                 $qossettings{'CEIL'} = $classline[4];
 396                 $qossettings{'BURST'} = $classline[5];
 397                 $qossettings{'CBURST'} = $classline[6];
 398                 print "\ttc class add dev $qossettings{'DEVICE'} parent 2:1 classid 2:$qossettings{'CLASS'} htb rate $qossettings{'RATE'}kbit ceil $qossettings{'CEIL'}kbit prio $qossettings{'PRIO'} ";
 399                 if (($qossettings{'BURST'} ne '') && ($qossettings{'BURST'} ne 0)) {
 400                         print "burst $qossettings{'BURST'}k ";
 401                 }
 402                 if (($qossettings{'CBURST'} ne '') && ($qossettings{'CBURST'} ne 0)) {
 403                         print "cburst $qossettings{'CBURST'}k";
 404                 }
 405                 print "\n";
 406         }
 407 }
 408
 409 print "\n\t### ATTACH QDISC TO LEAF CLASSES\n";
 410 foreach $classentry (sort @classes)
 411 {
 412         @classline = split( /\;/, $classentry );
 413         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 414                 $qossettings{'DEVICE'} = $classline[0];
 415                 $qossettings{'CLASS'} = $classline[1];
 416                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 2:$qossettings{'CLASS'} handle $qossettings{'CLASS'}: fq_codel $fqcodel_options\n";
 417         }
 418 }
 419 print "\n\t### FILTER TRAFFIC INTO CLASSES\n";
 420 foreach $classentry (sort @classes)
 421 {
 422         @classline = split( /\;/, $classentry );
 423         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 424                 $qossettings{'DEVICE'} = $classline[0];
 425                 $qossettings{'CLASS'} = $classline[1];
 426                 print "\ttc filter add dev $qossettings{'DEVICE'} parent 2:0 prio 0 protocol ip handle $qossettings{'CLASS'} fw flowid 2:$qossettings{'CLASS'}\n";
 427         }
 428 }
 429
 430 if ( $qossettings{'IMQ_MODE'} eq 'POSTROUTING' )
 431 {
 432 print <<END
 433
 434         ### ADD QOS-INC CHAIN TO THE MANGLE TABLE IN IPTABLES
 435         iptables -t mangle -N QOS-INC
 436         iptables -t mangle -A POSTROUTING -i $qossettings{'RED_DEV'} -p ah -j RETURN
 437         iptables -t mangle -A POSTROUTING -i $qossettings{'RED_DEV'} -p esp -j RETURN
 438         iptables -t mangle -A POSTROUTING -i $qossettings{'RED_DEV'} -p ip -j RETURN
 439         iptables -t mangle -I FORWARD -i $qossettings{'RED_DEV'} -j QOS-INC
 440         iptables -t mangle -A FORWARD -i $qossettings{'RED_DEV'} -j QOS-TOS
 441
 442         ### SET TOS
 443 END
 444 ;
 445 }
 446 else
 447 {
 448 print <<END
 449
 450         ### ADD QOS-INC CHAIN TO THE MANGLE TABLE IN IPTABLES
 451         iptables -t mangle -N QOS-INC
 452         iptables -t mangle -A PREROUTING -i $qossettings{'RED_DEV'} -p ah -j RETURN
 453         iptables -t mangle -A PREROUTING -i $qossettings{'RED_DEV'} -p esp -j RETURN
 454         iptables -t mangle -A PREROUTING -i $qossettings{'RED_DEV'} -p ip -j RETURN
 455         iptables -t mangle -I PREROUTING -i $qossettings{'RED_DEV'} -j QOS-INC
 456         iptables -t mangle -A PREROUTING -i $qossettings{'RED_DEV'} -j QOS-TOS
 457
 458         ### SET TOS
 459 END
 460 ;
 461 }
 462
 463         foreach $tosruleentry (sort @tosrules)
 464         {
 465                 @tosruleline = split( /\;/, $tosruleentry );
 466                 $qossettings{'CLASS'} = $tosruleline[0];
 467                 $qossettings{'TOS'} = abs $tosruleline[2] * 2;
 468                 if ( $tosruleline[1] eq $qossettings{'IMQ_DEV'} )
 469                 {
 470                         print "\tiptables -t mangle -A QOS-INC -m tos --tos $qossettings{'TOS'} -j MARK --set-mark $qossettings{'CLASS'}\n";
 471                         print "\tiptables -t mangle -A QOS-INC -m tos --tos $qossettings{'TOS'} -j RETURN\n";
 472                 }
 473
 474         }
 475
 476 print "\n\t### SET PORT-RULES\n";
 477         foreach $portruleentry (sort @portrules)
 478         {
 479                 @portruleline = split( /\;/, $portruleentry );
 480                 if ( $portruleline[1] eq $qossettings{'IMQ_DEV'} )
 481                 {
 482                         $qossettings{'CLASS'} = $portruleline[0];
 483                         $qossettings{'DEVICE'} = $portruleline[1];
 484                         $qossettings{'PPROT'} = $portruleline[2];
 485                         $qossettings{'QIP'} = $portruleline[3];
 486                         $qossettings{'QPORT'} = $portruleline[4];
 487                         $qossettings{'DIP'} = $portruleline[5];
 488                         $qossettings{'DPORT'} = $portruleline[6];
 489                         print "\tiptables -t mangle -A QOS-INC ";
 490                         if ($qossettings{'QIP'} ne ''){
 491                                 print "-s $qossettings{'QIP'} ";
 492                         }
 493                         if ($qossettings{'DIP'} ne ''){
 494                                 print "-d $qossettings{'DIP'} ";
 495                         }
 496                         print "-p $qossettings{'PPROT'} ";
 497 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 498 #                               print "-m multiport ";
 499 #                       }
 500                         if ($qossettings{'QPORT'} ne ''){
 501                                 print "--sport $qossettings{'QPORT'} ";
 502                         }
 503                         if ($qossettings{'DPORT'} ne ''){
 504                                 print "--dport $qossettings{'DPORT'} ";
 505                         }
 506                         print "-j MARK --set-mark $qossettings{'CLASS'}\n";
 507                         print "\tiptables -t mangle -A QOS-INC ";
 508                         if ($qossettings{'QIP'} ne ''){
 509                                 print "-s $qossettings{'QIP'} ";
 510                         }
 511                         if ($qossettings{'DIP'} ne ''){
 512                                 print "-d $qossettings{'DIP'} ";
 513                         }
 514                         print "-p $qossettings{'PPROT'} ";
 515 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 516 #                               print "-m multiport ";
 517 #                       }
 518                         if ($qossettings{'QPORT'} ne ''){
 519                                 print "--sport $qossettings{'QPORT'} ";
 520                         }
 521                         if ($qossettings{'DPORT'} ne ''){
 522                                 print "--dport $qossettings{'DPORT'} ";
 523                         }
 524                         print "-j RETURN\n\n";
 525                 }
 526         }
 527
 528 print <<END
 529
 530         ### SET LEVEL7-RULES
 531 END
 532 ;
 533         foreach $l7ruleentry (sort @l7rules)
 534         {
 535                 @l7ruleline = split( /\;/, $l7ruleentry );
 536                 if ( $l7ruleline[1] eq $qossettings{'IMQ_DEV'} )
 537                 {
 538                         $qossettings{'CLASS'} = $l7ruleline[0];
 539                         $qossettings{'DEVICE'} = $l7ruleline[1];
 540                         $qossettings{'L7PROT'} = $l7ruleline[2];
 541                         $qossettings{'QIP'} = $l7ruleline[3];
 542                         $qossettings{'DIP'} = $l7ruleline[4];
 543                         print "\tiptables -t mangle -A QOS-INC ";
 544                         if ($qossettings{'QIP'} ne ''){
 545                                 print "-s $qossettings{'QIP'} ";
 546                         }
 547                         if ($qossettings{'DIP'} ne ''){
 548                                 print "-d $qossettings{'DIP'} ";
 549                         }
 550                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-mark $qossettings{'CLASS'}\n";
 551                         print "\tiptables -t mangle -A QOS-INC ";
 552                         if ($qossettings{'QIP'} ne ''){
 553                                 print "-s $qossettings{'QIP'} ";
 554                         }
 555                         if ($qossettings{'DIP'} ne ''){
 556                                 print "-d $qossettings{'DIP'} ";
 557                         }
 558                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
 559                 }
 560         }
 561
 562 print <<END
 563         ### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
 564         iptables -t mangle -A QOS-INC -m mark --mark 0 -j MARK --set-mark $qossettings{'DEFCLASS_INC'}
 565
 566         ### SETTING TOS BITS
 567 END
 568 ;
 569         foreach $classentry (sort @classes)
 570         {
 571                 @classline = split( /\;/, $classentry );
 572                 $qossettings{'CLASS'} = $classline[1];
 573                 $qossettings{'TOS'} = abs $classline[7] * 2;
 574                 if ($qossettings{'TOS'} ne "0") {
 575                         print "\tiptables -t mangle -A QOS-TOS -m mark --mark $qossettings{'CLASS'} -j TOS --set-tos $qossettings{'TOS'}\n";
 576                         print "\tiptables -t mangle -A QOS-TOS -m mark --mark $qossettings{'CLASS'} -j RETURN\n";
 577                 }
 578         }
 579
 580 print <<END
 581
 582         ## STARTING COLLECTOR
 583         /usr/local/bin/qosd $qossettings{'RED_DEV'} >/dev/null 2>&1
 584         /usr/local/bin/qosd $qossettings{'IMQ_DEV'} >/dev/null 2>&1
 585
 586         for i in \$(ls \$RRDLOG/class_*.rrd); do
 587                 rrdtool update \$i \$(date +%s): 2>/dev/null
 588         done
 589
 590         echo "Quality of Service was successfully started!"
 591         exit 0
 592   ;;
 593   clear|stop)
 594         ### RESET EVERYTHING TO A KNOWN STATE
 595         killall qosd >/dev/null 2>&1
 596
 597         # DELETE QDISCS
 598         tc qdisc del dev $qossettings{'RED_DEV'} root >/dev/null 2>&1
 599         tc qdisc del dev $qossettings{'RED_DEV'} ingress >/dev/null 2>&1
 600         tc qdisc add root dev $qossettings{'RED_DEV'} fq_codel >/dev/null 2>&1
 601         tc qdisc del dev $qossettings{'IMQ_DEV'} root >/dev/null 2>&1
 602         tc qdisc del dev $qossettings{'IMQ_DEV'} ingress >/dev/null 2>&1
 603         tc qdisc add root dev $qossettings{'IMQ_DEV'} fq_codel >/dev/null 2>&1
 604         # STOP IMQ-DEVICE
 605         ip link set $qossettings{'IMQ_DEV'} down >/dev/null 2>&1
 606         ip link del $qossettings{'IMQ_DEV'} >/dev/null 2>&1
 607
 608         # REMOVE & FLUSH CHAINS
 609         iptables -t mangle --delete POSTROUTING -i $qossettings{'RED_DEV'} -p ah -j RETURN >/dev/null 2>&1
 610         iptables -t mangle --delete POSTROUTING -i $qossettings{'RED_DEV'} -p esp -j RETURN >/dev/null 2>&1
 611         iptables -t mangle --delete POSTROUTING -i $qossettings{'RED_DEV'} -p ip -j RETURN >/dev/null 2>&1
 612         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -p ah -j RETURN >/dev/null 2>&1
 613         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -p esp -j RETURN >/dev/null 2>&1
 614         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -p ip -j RETURN >/dev/null 2>&1
 615         iptables -t mangle --delete POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT >/dev/null 2>&1
 616         iptables -t mangle --delete POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-TOS >/dev/null 2>&1
 617         iptables -t mangle --flush  QOS-OUT >/dev/null 2>&1
 618         iptables -t mangle --delete-chain QOS-OUT >/dev/null 2>&1
 619         iptables -t mangle --delete FORWARD -i $qossettings{'RED_DEV'} -j QOS-INC >/dev/null 2>&1
 620         iptables -t mangle --delete FORWARD -i $qossettings{'RED_DEV'} -j QOS-TOS >/dev/null 2>&1
 621         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -j QOS-INC >/dev/null 2>&1
 622         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -j QOS-TOS >/dev/null 2>&1
 623         iptables -t mangle --flush  QOS-INC >/dev/null 2>&1
 624         iptables -t mangle --delete-chain QOS-INC >/dev/null 2>&1
 625         iptables -t mangle --flush  QOS-TOS >/dev/null 2>&1
 626         iptables -t mangle --delete-chain QOS-TOS >/dev/null 2>&1
 627         # remove l7-filter
 628         iptables -t mangle --delete PREROUTING -m layer7 --l7proto unset
 629
 630         rmmod sch_htb >/dev/null 2>&1
 631
 632         for i in \$(ls \$RRDLOG/class_*.rrd); do
 633                 rrdtool update \$i \$(date +%s):
 634         done
 635
 636         echo "Quality of Service was successfully cleared!"
 637   ;;
 638   gen|generate)
 639         echo -n "Generating the QoS-Scripts..."
 640         /usr/bin/perl /var/ipfire/qos/bin/makeqosscripts.pl > /var/ipfire/qos/bin/qos.sh
 641         echo ".Done!"
 642         exit 0
 643         ;;
 644   restart)
 645         ### FIRST CLEAR EVERYTHING
 646         \$0 clear
 647
 648         ### THEN START
 649         \$0 start
 650         ;;
 651 esac
 652 ### EOF
 653 END
 654 ;
 655
 656 ############################################################################################################################
 657 ############################################################################################################################