config/qos/makeqosscripts.pl

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2007  Michael Tremer & Christian Schmidt                      #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 use strict;
  23 # enable only the following on debugging purpose
  24 # use warnings;
  25
  26 require '/var/ipfire/general-functions.pl';
  27 require "${General::swroot}/lang.pl";
  28 require "${General::swroot}/header.pl";
  29
  30 my %qossettings = ();
  31 my %checked = ();
  32 my %netsettings = ();
  33 my $message = "";
  34 my $errormessage = "";
  35 my $c = "";
  36 my $direntry = "";
  37 my $classentry = "";
  38 my $subclassentry = "";
  39 my $l7ruleentry = "";
  40 my $portruleentry = "";
  41 my $tosruleentry = "";
  42 my @tmp = ();
  43 my @classes = ();
  44 my @subclasses = ();
  45 my @l7rules = ();
  46 my @portrules = ();
  47 my @tosrules = ();
  48 my @tmpline = ();
  49 my @classline = ();
  50 my @subclassline = ();
  51 my @tosruleline = ();
  52 my @l7ruleline = ();
  53 my @portruleline = ();
  54 my @proto = ();
  55 my %selected= () ;
  56 my $classfile = "/var/ipfire/qos/classes";
  57 my $subclassfile = "/var/ipfire/qos/subclasses";
  58 my $level7file = "/var/ipfire/qos/level7config";
  59 my $portfile = "/var/ipfire/qos/portconfig";
  60 my $tosfile = "/var/ipfire/qos/tosconfig";
  61
  62 &General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
  63
  64 $qossettings{'ENABLED'} = 'off';
  65 $qossettings{'EDIT'} = 'no';
  66 $qossettings{'OUT_SPD'} = '';
  67 $qossettings{'INC_SPD'} = '';
  68 $qossettings{'DEF_OUT_SPD'} = '';
  69 $qossettings{'DEF_INC_SPD'} = '';
  70 $qossettings{'DEFCLASS_INC'} = '';
  71 $qossettings{'DEFCLASS_OUT'} = '';
  72 $qossettings{'ACK'} = '';
  73 $qossettings{'MTU'} = '1492';
  74 $qossettings{'RED_DEV'} = `cat /var/ipfire/red/iface`;
  75 $qossettings{'IMQ_DEV'} = 'imq0';
  76 $qossettings{'TOS'} = '';
  77 $qossettings{'VALID'} = 'yes';
  78 $qossettings{'IMQ_MODE'} = 'PREROUTING';
  79
  80 &General::readhash("${General::swroot}/qos/settings", \%qossettings);
  81
  82 open( FILE, "< $classfile" ) or die "Unable to read $classfile";
  83 @classes = <FILE>;
  84 close FILE;
  85 open( FILE, "< $subclassfile" ) or die "Unable to read $subclassfile";
  86 @subclasses = <FILE>;
  87 close FILE;
  88 open( FILE, "< $level7file" ) or die "Unable to read $level7file";
  89 @l7rules = <FILE>;
  90 close FILE;
  91 open( FILE, "< $portfile" ) or die "Unable to read $portfile";
  92 @portrules = <FILE>;
  93 close FILE;
  94 open( FILE, "< $tosfile" ) or die "Unable to read $tosfile";
  95 @tosrules = <FILE>;
  96 close FILE;
  97
  98 ############################################################################################################################
  99 ############################################################################################################################
 100
 101 print <<END
 102 #/bin/bash
 103 #################################################
 104 # This is an autocreated QoS-Script for         #
 105 # IPFIRE                                        #
 106 # Copyright by the IPFire Team (GPLv2)          #
 107 # www.ipfire.org                                #
 108 #################################################
 109
 110 ### SYSTEMVARIABLES:
 111 # RED INTERFACE:        $qossettings{'RED_DEV'}
 112 # IMQ DEVICE:           $qossettings{'IMQ_DEV'}
 113
 114 case "\$1" in
 115
 116   status)
 117         case "\$2" in
 118           qdisc)
 119                 echo "[qdisc]"
 120                 tc -s qdisc show dev $qossettings{'RED_DEV'}
 121                 tc -s qdisc show dev $qossettings{'IMQ_DEV'}
 122                 exit 0
 123           ;;
 124           class)
 125                 echo "[class]"
 126                 tc -s class show dev $qossettings{'RED_DEV'}
 127                 tc -s class show dev $qossettings{'IMQ_DEV'}
 128                 exit 0
 129           ;;
 130           filter)
 131                 echo "[filter]"
 132                 tc -s filter show dev $qossettings{'RED_DEV'}
 133                 tc -s filter show dev $qossettings{'IMQ_DEV'}
 134                 exit 0
 135           ;;
 136           iptables)
 137                 echo "[iptables]"
 138                 iptables -t mangle -n -L QOS-OUT -v -x 2> /dev/null
 139                 iptables -t mangle -n -L QOS-INC -v -x 2> /dev/null
 140                 iptables -t mangle -n -L QOS-TOS -v -x 2> /dev/null
 141                 exit 0
 142           ;;
 143         esac
 144         \$0 \$1 qdisc
 145         \$0 \$1 class
 146         \$0 \$1 filter
 147         \$0 \$1 iptables
 148         exit 0
 149   ;;
 150   start)
 151         ###
 152         ### $qossettings{'RED_DEV'}
 153         ###
 154
 155         ### INIT KERNEL
 156         modprobe sch_htb
 157
 158         ### SET QUEUE LENGTH & MTU - has just to be tested!!! IMPORTANT
 159         ip link set dev $qossettings{'RED_DEV'} qlen $qossettings{'QLENGTH'}
 160         #ip link set dev $qossettings{'RED_DEV'} mtu $qossettings{'MTU'}
 161
 162         ### ADD HTB QDISC FOR $qossettings{'RED_DEV'}
 163         tc qdisc add dev $qossettings{'RED_DEV'} root handle 1: htb default $qossettings{'DEFCLASS_OUT'}
 164
 165         ### MAIN RATE LIMIT
 166         tc class add dev $qossettings{'RED_DEV'} parent 1: classid 1:1 htb rate $qossettings{'OUT_SPD'}kbit
 167
 168         ### CLASSES FOR $qossettings{'RED_DEV'}
 169 END
 170 ;
 171 foreach $classentry (sort @classes)
 172 {
 173         @classline = split( /\;/, $classentry );
 174         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 175                 $qossettings{'DEVICE'} = $classline[0];
 176                 $qossettings{'CLASS'} = $classline[1];
 177                 $qossettings{'PRIO'} = $classline[2];
 178                 $qossettings{'RATE'} = $classline[3];
 179                 $qossettings{'CEIL'} = $classline[4];
 180                 $qossettings{'BURST'} = $classline[5];
 181                 $qossettings{'CBURST'} = $classline[6];
 182                 print "\ttc class add dev $qossettings{'DEVICE'} parent 1:1 classid 1:$qossettings{'CLASS'} htb rate $qossettings{'RATE'}kbit ceil $qossettings{'CEIL'}kbit prio $qossettings{'PRIO'} ";
 183                 if (($qossettings{'BURST'} ne '') && ($qossettings{'BURST'} ne 0)) {
 184                         print "burst $qossettings{'BURST'}k ";
 185                 }
 186                 if (($qossettings{'CBURST'} ne '') && ($qossettings{'CBURST'} ne 0)) {
 187                         print "cburst $qossettings{'CBURST'}k";
 188                 }
 189                 print "\n";
 190         }
 191 }
 192 foreach $subclassentry (sort @subclasses) {
 193         @subclassline = split( /\;/, $subclassentry );
 194         if ($qossettings{'RED_DEV'} eq $subclassline[0]) {
 195                 $qossettings{'DEVICE'} = $subclassline[0];
 196                 $qossettings{'CLASS'} = $subclassline[1];
 197                 $qossettings{'SCLASS'} = $subclassline[2];
 198                 $qossettings{'SPRIO'} = $subclassline[3];
 199                 $qossettings{'SRATE'} = $subclassline[4];
 200                 $qossettings{'SCEIL'} = $subclassline[5];
 201                 $qossettings{'SBURST'} = $subclassline[6];
 202                 $qossettings{'SCBURST'} = $subclassline[7];
 203                 print "\ttc class add dev $qossettings{'DEVICE'} parent 1:$qossettings{'CLASS'} classid 1:$qossettings{'SCLASS'} htb rate $qossettings{'SRATE'}kbit ceil $qossettings{'SCEIL'}kbit prio $qossettings{'SPRIO'} ";
 204                 if ($qossettings{'SBURST'} > 0) {
 205                         print "burst $qossettings{'SBURST'}k ";
 206                 }
 207                 if (($qossettings{'SCBURST'} ne '') && ($qossettings{'SCBURST'} ne 0)) {
 208                         print "cburst $qossettings{'CBURST'}k";
 209                 }
 210                 print "\n";
 211         }
 212 }
 213
 214 print "\n\t### ATTACH QDISC TO LEAF CLASSES\n";
 215 foreach $classentry (sort @classes)
 216 {
 217         @classline = split( /\;/, $classentry );
 218         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 219                 $qossettings{'DEVICE'} = $classline[0];
 220                 $qossettings{'CLASS'} = $classline[1];
 221                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 1:$qossettings{'CLASS'} handle $qossettings{'CLASS'}: sfq perturb $qossettings{'SFQ_PERTUB'}\n";
 222         }
 223 }
 224 foreach $subclassentry (sort @subclasses) {
 225         @subclassline = split( /\;/, $subclassentry );
 226         if ($qossettings{'RED_DEV'} eq $subclassline[0]) {
 227                 $qossettings{'DEVICE'} = $subclassline[0];
 228                 $qossettings{'SCLASS'} = $subclassline[2];
 229                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 1:$qossettings{'SCLASS'} handle $qossettings{'SCLASS'}: sfq perturb $qossettings{'SFQ_PERTUB'}\n";
 230         }
 231 }
 232 print "\n\t### FILTER TRAFFIC INTO CLASSES\n";
 233 foreach $classentry (sort @classes)
 234 {
 235         @classline = split( /\;/, $classentry );
 236         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 237                 $qossettings{'DEVICE'} = $classline[0];
 238                 $qossettings{'CLASS'} = $classline[1];
 239                 print "\ttc filter add dev $qossettings{'DEVICE'} parent 1:0 prio 0 protocol ip handle $qossettings{'CLASS'} fw flowid 1:$qossettings{'CLASS'}\n";
 240         }
 241 }
 242 foreach $subclassentry (sort @subclasses) {
 243         @subclassline = split( /\;/, $subclassentry );
 244         if ($qossettings{'RED_DEV'} eq $subclassline[0]) {
 245                 $qossettings{'DEVICE'} = $subclassline[0];
 246                 $qossettings{'CLASS'} = $subclassline[1];
 247                 $qossettings{'SCLASS'} = $subclassline[2];
 248                 print "\ttc filter add dev $qossettings{'DEVICE'} parent 1:0 prio 0 protocol ip handle $qossettings{'SCLASS'} fw flowid 1:$qossettings{'SCLASS'}\n";
 249         }
 250 }
 251 print <<END
 252
 253         ### ADD QOS-OUT CHAIN TO THE MANGLE TABLE IN IPTABLES
 254         iptables -t mangle -N QOS-OUT
 255         iptables -t mangle -N QOS-TOS
 256         iptables -t mangle -I POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT
 257         iptables -t mangle -A POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-TOS
 258
 259         ### MARK ACKs
 260         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags SYN,RST SYN -j TOS --set-tos 4
 261         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags SYN,RST SYN -j MARK --set-mark $qossettings{'ACK'}
 262         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags SYN,RST SYN -j RETURN
 263
 264         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p icmp -m length --length 40:100 -j MARK --set-mark $qossettings{'ACK'}
 265         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p icmp -m length --length 40:100 -j RETURN
 266
 267         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --syn -m length --length 40:68 -j TOS --set-tos 4
 268         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --syn -m length --length 40:68 -j MARK --set-mark $qossettings{'ACK'}
 269         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --syn -m length --length 40:68 -j RETURN
 270
 271         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j TOS --set-tos 4
 272         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j MARK --set-mark $qossettings{'ACK'}
 273         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j RETURN
 274
 275         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j TOS --set-tos 4
 276         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j MARK --set-mark $qossettings{'ACK'}
 277         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j RETURN
 278
 279         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL RST -j TOS --set-tos 4
 280         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL RST -j MARK --set-mark $qossettings{'ACK'}
 281         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL RST -j RETURN
 282
 283         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK,RST -j TOS --set-tos 4
 284         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK,RST -j MARK --set-mark $qossettings{'ACK'}
 285         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK,RST -j RETURN
 286
 287         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK,FIN -j TOS --set-tos 4
 288         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK,FIN -j MARK --set-mark $qossettings{'ACK'}
 289         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -p tcp --tcp-flags ALL ACK,FIN -j RETURN
 290
 291         ### SET TOS
 292 END
 293 ;
 294         foreach $tosruleentry (sort @tosrules)
 295         {
 296                 @tosruleline = split( /\;/, $tosruleentry );
 297                 $qossettings{'CLASS'} = $tosruleline[0];
 298                 $qossettings{'TOS'} = abs $tosruleline[2] * 2;
 299                 if ( $tosruleline[1] eq $qossettings{'RED_DEV'} )
 300                 {
 301                         print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -m tos --tos $qossettings{'TOS'} -j MARK --set-mark $qossettings{'CLASS'}\n";
 302                         print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -m tos --tos $qossettings{'TOS'} -j RETURN\n";
 303                 }
 304         }
 305
 306 print "\n\t### SET PORT-RULES\n";
 307         foreach $portruleentry (sort @portrules)
 308         {
 309                 @portruleline = split( /\;/, $portruleentry );
 310                 if ( $portruleline[1] eq $qossettings{'RED_DEV'} )
 311                 {
 312                         $qossettings{'CLASS'} = $portruleline[0];
 313                         $qossettings{'DEVICE'} = $portruleline[1];
 314                         $qossettings{'PPROT'} = $portruleline[2];
 315                         $qossettings{'QIP'} = $portruleline[3];
 316                         $qossettings{'QPORT'} = $portruleline[4];
 317                         $qossettings{'DIP'} = $portruleline[5];
 318                         $qossettings{'DPORT'} = $portruleline[6];
 319                         print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} ";
 320                         if ($qossettings{'QIP'} ne ''){
 321                                 print "-s $qossettings{'QIP'} ";
 322                         }
 323                         if ($qossettings{'DIP'} ne ''){
 324                                 print "-d $qossettings{'DIP'} ";
 325                         }
 326                         print "-p $qossettings{'PPROT'} ";
 327 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 328 #                               print "-m multiport ";
 329 #                       }
 330                         if ($qossettings{'QPORT'} ne ''){
 331                                 print "--sport $qossettings{'QPORT'} ";
 332                         }
 333                         if ($qossettings{'DPORT'} ne ''){
 334                                 print "--dport $qossettings{'DPORT'} ";
 335                         }
 336                         print "-j MARK --set-mark $qossettings{'CLASS'}\n";
 337                         print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} ";
 338                         if ($qossettings{'QIP'} ne ''){
 339                                 print "-s $qossettings{'QIP'} ";
 340                         }
 341                         if ($qossettings{'DIP'} ne ''){
 342                                 print "-d $qossettings{'DIP'} ";
 343                         }
 344                         print "-p $qossettings{'PPROT'} ";
 345 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 346 #                               print "-m multiport ";
 347 #                       }
 348                         if ($qossettings{'QPORT'} ne ''){
 349                                 print "--sport $qossettings{'QPORT'} ";
 350                         }
 351                         if ($qossettings{'DPORT'} ne ''){
 352                                 print "--dport $qossettings{'DPORT'} ";
 353                         }
 354                         print "-j RETURN\n\n";
 355                 }
 356         }
 357
 358 print <<END
 359
 360         ### SET LEVEL7-RULES
 361 END
 362 ;
 363         foreach $l7ruleentry (sort @l7rules)
 364         {
 365                 @l7ruleline = split( /\;/, $l7ruleentry );
 366                 if ( $l7ruleline[1] eq $qossettings{'RED_DEV'} )
 367                 {
 368                         $qossettings{'CLASS'} = $l7ruleline[0];
 369                         $qossettings{'DEVICE'} = $l7ruleline[1];
 370                         $qossettings{'L7PROT'} = $l7ruleline[2];
 371                         $qossettings{'QIP'} = $l7ruleline[3];
 372                         $qossettings{'DIP'} = $l7ruleline[4];
 373                         print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} ";
 374                         if ($qossettings{'QIP'} ne ''){
 375                                 print "-s $qossettings{'QIP'} ";
 376                         }
 377                         if ($qossettings{'DIP'} ne ''){
 378                                 print "-d $qossettings{'DIP'} ";
 379                         }
 380                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-mark $qossettings{'CLASS'}\n";
 381                         print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} ";
 382                         if ($qossettings{'QIP'} ne ''){
 383                                 print "-s $qossettings{'QIP'} ";
 384                         }
 385                         if ($qossettings{'DIP'} ne ''){
 386                                 print "-d $qossettings{'DIP'} ";
 387                         }
 388                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
 389                 }
 390         }
 391
 392 print <<END
 393
 394         ### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
 395         iptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} -m mark --mark 0 -j MARK --set-mark $qossettings{'DEFCLASS_OUT'}
 396
 397         ###
 398         ### $qossettings{'IMQ_DEV'}
 399         ###
 400
 401         ### BRING UP $qossettings{'IMQ_DEV'}
 402         if [ `lsmod | grep -q ipt_IMQ` ]; then
 403                 insmod ipt_IMQ
 404                 sleep 2
 405         fi
 406         modprobe imq numdevs=1
 407         ip link set $qossettings{'IMQ_DEV'} up
 408
 409         ### SET QUEUE LENGTH & MTU - has just to be tested!!! IMPORTANT
 410         ip link set dev $qossettings{'IMQ_DEV'} qlen $qossettings{'QLENGTH'}
 411         # ip link set dev $qossettings{'IMQ_DEV'} mtu $qossettings{'MTU'}
 412
 413         ### ADD HTB QDISC FOR $qossettings{'IMQ_DEV'}
 414         tc qdisc add dev $qossettings{'IMQ_DEV'} root handle 2: htb default $qossettings{'DEFCLASS_INC'}
 415
 416         ### MAIN RATE LIMIT
 417         tc class add dev $qossettings{'IMQ_DEV'} parent 2: classid 2:1 htb rate $qossettings{'INC_SPD'}kbit
 418
 419         ### CLASSES FOR $qossettings{'IMQ_DEV'}
 420 END
 421 ;
 422 foreach $classentry (sort @classes)
 423 {
 424         @classline = split( /\;/, $classentry );
 425         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 426                 $qossettings{'DEVICE'} = $classline[0];
 427                 $qossettings{'CLASS'} = $classline[1];
 428                 $qossettings{'PRIO'} = $classline[2];
 429                 $qossettings{'RATE'} = $classline[3];
 430                 $qossettings{'CEIL'} = $classline[4];
 431                 $qossettings{'BURST'} = $classline[5];
 432                 $qossettings{'CBURST'} = $classline[6];
 433                 print "\ttc class add dev $qossettings{'DEVICE'} parent 2:1 classid 2:$qossettings{'CLASS'} htb rate $qossettings{'RATE'}kbit ceil $qossettings{'CEIL'}kbit prio $qossettings{'PRIO'} ";
 434                 if (($qossettings{'BURST'} ne '') && ($qossettings{'BURST'} ne 0)) {
 435                         print "burst $qossettings{'BURST'}k ";
 436                 }
 437                 if (($qossettings{'CBURST'} ne '') && ($qossettings{'CBURST'} ne 0)) {
 438                         print "cburst $qossettings{'CBURST'}k";
 439                 }
 440                 print "\n";
 441         }
 442 }
 443 foreach $subclassentry (sort @subclasses) {
 444         @subclassline = split( /\;/, $subclassentry );
 445         if ($qossettings{'IMQ_DEV'} eq $subclassline[0]) {
 446                 $qossettings{'DEVICE'} = $subclassline[0];
 447                 $qossettings{'CLASS'} = $subclassline[1];
 448                 $qossettings{'SCLASS'} = $subclassline[2];
 449                 $qossettings{'SPRIO'} = $subclassline[3];
 450                 $qossettings{'SRATE'} = $subclassline[4];
 451                 $qossettings{'SCEIL'} = $subclassline[5];
 452                 $qossettings{'SBURST'} = $subclassline[6];
 453                 $qossettings{'SCBURST'} = $subclassline[7];
 454                 print "\ttc class add dev $qossettings{'DEVICE'} parent 2:$qossettings{'CLASS'} classid 2:$qossettings{'SCLASS'} htb rate $qossettings{'SRATE'}kbit ceil $qossettings{'SCEIL'}kbit prio $qossettings{'SPRIO'} ";
 455                 if ($qossettings{'SBURST'} > 0) {
 456                         print "burst $qossettings{'SBURST'}k ";
 457                 }
 458                 if (($qossettings{'SCBURST'} ne '') && ($qossettings{'SCBURST'} ne 0)) {
 459                         print "cburst $qossettings{'CBURST'}k";
 460                 }
 461                 print "\n";
 462         }
 463 }
 464
 465 print "\n\t### ATTACH QDISC TO LEAF CLASSES\n";
 466 foreach $classentry (sort @classes)
 467 {
 468         @classline = split( /\;/, $classentry );
 469         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 470                 $qossettings{'DEVICE'} = $classline[0];
 471                 $qossettings{'CLASS'} = $classline[1];
 472                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 2:$qossettings{'CLASS'} handle $qossettings{'CLASS'}: sfq perturb $qossettings{'SFQ_PERTUB'}\n";
 473         }
 474 }
 475 foreach $subclassentry (sort @subclasses) {
 476         @subclassline = split( /\;/, $subclassentry );
 477         if ($qossettings{'IMQ_DEV'} eq $subclassline[0]) {
 478                 $qossettings{'DEVICE'} = $subclassline[0];
 479                 $qossettings{'SCLASS'} = $subclassline[2];
 480                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 2:$qossettings{'SCLASS'} handle $qossettings{'SCLASS'}: sfq perturb $qossettings{'SFQ_PERTUB'}\n";
 481         }
 482 }
 483 print "\n\t### FILTER TRAFFIC INTO CLASSES\n";
 484 foreach $classentry (sort @classes)
 485 {
 486         @classline = split( /\;/, $classentry );
 487         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 488                 $qossettings{'DEVICE'} = $classline[0];
 489                 $qossettings{'CLASS'} = $classline[1];
 490                 print "\ttc filter add dev $qossettings{'DEVICE'} parent 2:0 prio 0 protocol ip handle $qossettings{'CLASS'} fw flowid 2:$qossettings{'CLASS'}\n";
 491         }
 492 }
 493 foreach $subclassentry (sort @subclasses) {
 494         @subclassline = split( /\;/, $subclassentry );
 495         if ($qossettings{'IMQ_DEV'} eq $subclassline[0]) {
 496                 $qossettings{'DEVICE'} = $subclassline[0];
 497                 $qossettings{'CLASS'} = $subclassline[1];
 498                 $qossettings{'SCLASS'} = $subclassline[2];
 499                 print "\ttc filter add dev $qossettings{'DEVICE'} parent 2:0 prio 0 protocol ip handle $qossettings{'SCLASS'} fw flowid 2:$qossettings{'SCLASS'}\n";
 500         }
 501 }
 502
 503 if ( $qossettings{'IMQ_MODE'} eq 'POSTROUTING' )
 504 {
 505 print <<END
 506
 507         ### ADD QOS-INC CHAIN TO THE MANGLE TABLE IN IPTABLES
 508         iptables -t mangle -N QOS-INC
 509         iptables -t mangle -A POSTROUTING -m mark ! --mark 0 -o ! $qossettings{'RED_DEV'} -j IMQ --todev 0
 510         iptables -t mangle -I FORWARD -i $qossettings{'RED_DEV'} -j QOS-INC
 511         iptables -t mangle -A FORWARD -i $qossettings{'RED_DEV'} -j QOS-TOS
 512
 513         ### SET TOS
 514 END
 515 ;
 516 }
 517 else
 518 {
 519 print <<END
 520
 521         ### ADD QOS-INC CHAIN TO THE MANGLE TABLE IN IPTABLES
 522         iptables -t mangle -N QOS-INC
 523         iptables -t mangle -A PREROUTING -i $qossettings{'RED_DEV'} -j IMQ --todev 0
 524         iptables -t mangle -I PREROUTING -i $qossettings{'RED_DEV'} -j QOS-INC
 525         iptables -t mangle -A PREROUTING -i $qossettings{'RED_DEV'} -j QOS-TOS
 526
 527         ### SET TOS
 528 END
 529 ;
 530 }
 531
 532         foreach $tosruleentry (sort @tosrules)
 533         {
 534                 @tosruleline = split( /\;/, $tosruleentry );
 535                 $qossettings{'CLASS'} = $tosruleline[0];
 536                 $qossettings{'TOS'} = abs $tosruleline[2] * 2;
 537                 if ( $tosruleline[1] eq $qossettings{'IMQ_DEV'} )
 538                 {
 539                         print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} -m tos --tos $qossettings{'TOS'} -j MARK --set-mark $qossettings{'CLASS'}\n";
 540                         print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} -m tos --tos $qossettings{'TOS'} -j RETURN\n";
 541                 }
 542
 543         }
 544
 545 print "\n\t### SET PORT-RULES\n";
 546         foreach $portruleentry (sort @portrules)
 547         {
 548                 @portruleline = split( /\;/, $portruleentry );
 549                 if ( $portruleline[1] eq $qossettings{'IMQ_DEV'} )
 550                 {
 551                         $qossettings{'CLASS'} = $portruleline[0];
 552                         $qossettings{'DEVICE'} = $portruleline[1];
 553                         $qossettings{'PPROT'} = $portruleline[2];
 554                         $qossettings{'QIP'} = $portruleline[3];
 555                         $qossettings{'QPORT'} = $portruleline[4];
 556                         $qossettings{'DIP'} = $portruleline[5];
 557                         $qossettings{'DPORT'} = $portruleline[6];
 558                         print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} ";
 559                         if ($qossettings{'QIP'} ne ''){
 560                                 print "-s $qossettings{'QIP'} ";
 561                         }
 562                         if ($qossettings{'DIP'} ne ''){
 563                                 print "-d $qossettings{'DIP'} ";
 564                         }
 565                         print "-p $qossettings{'PPROT'} ";
 566 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 567 #                               print "-m multiport ";
 568 #                       }
 569                         if ($qossettings{'QPORT'} ne ''){
 570                                 print "--sport $qossettings{'QPORT'} ";
 571                         }
 572                         if ($qossettings{'DPORT'} ne ''){
 573                                 print "--dport $qossettings{'DPORT'} ";
 574                         }
 575                         print "-j MARK --set-mark $qossettings{'CLASS'}\n";
 576                         print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} ";
 577                         if ($qossettings{'QIP'} ne ''){
 578                                 print "-s $qossettings{'QIP'} ";
 579                         }
 580                         if ($qossettings{'DIP'} ne ''){
 581                                 print "-d $qossettings{'DIP'} ";
 582                         }
 583                         print "-p $qossettings{'PPROT'} ";
 584 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 585 #                               print "-m multiport ";
 586 #                       }
 587                         if ($qossettings{'QPORT'} ne ''){
 588                                 print "--sport $qossettings{'QPORT'} ";
 589                         }
 590                         if ($qossettings{'DPORT'} ne ''){
 591                                 print "--dport $qossettings{'DPORT'} ";
 592                         }
 593                         print "-j RETURN\n\n";
 594                 }
 595         }
 596
 597 print <<END
 598
 599         ### SET LEVEL7-RULES
 600 END
 601 ;
 602         foreach $l7ruleentry (sort @l7rules)
 603         {
 604                 @l7ruleline = split( /\;/, $l7ruleentry );
 605                 if ( $l7ruleline[1] eq $qossettings{'IMQ_DEV'} )
 606                 {
 607                         $qossettings{'CLASS'} = $l7ruleline[0];
 608                         $qossettings{'DEVICE'} = $l7ruleline[1];
 609                         $qossettings{'L7PROT'} = $l7ruleline[2];
 610                         $qossettings{'QIP'} = $l7ruleline[3];
 611                         $qossettings{'DIP'} = $l7ruleline[4];
 612                         print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} ";
 613                         if ($qossettings{'QIP'} ne ''){
 614                                 print "-s $qossettings{'QIP'} ";
 615                         }
 616                         if ($qossettings{'DIP'} ne ''){
 617                                 print "-d $qossettings{'DIP'} ";
 618                         }
 619                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-mark $qossettings{'CLASS'}\n";
 620                         print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} ";
 621                         if ($qossettings{'QIP'} ne ''){
 622                                 print "-s $qossettings{'QIP'} ";
 623                         }
 624                         if ($qossettings{'DIP'} ne ''){
 625                                 print "-d $qossettings{'DIP'} ";
 626                         }
 627                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
 628                 }
 629         }
 630
 631 print <<END
 632         ### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
 633         iptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} -m mark --mark 0 -j MARK --set-mark $qossettings{'DEFCLASS_INC'}
 634
 635         ### SETTING TOS BITS
 636 END
 637 ;
 638         foreach $classentry (sort @classes)
 639         {
 640                 @classline = split( /\;/, $classentry );
 641                 $qossettings{'CLASS'} = $classline[1];
 642                 $qossettings{'TOS'} = abs $classline[7] * 2;
 643                 if ($qossettings{'TOS'} ne "0") {
 644                         print "\tiptables -t mangle -A QOS-TOS -m mark --mark $qossettings{'CLASS'} -j TOS --set-tos $qossettings{'TOS'}\n";
 645                         print "\tiptables -t mangle -A QOS-TOS -m mark --mark $qossettings{'CLASS'} -j RETURN\n";
 646                 }
 647         }
 648         foreach $subclassentry (sort @subclasses)
 649         {
 650                 @subclassline = split( /\;/, $subclassentry );
 651                 $qossettings{'SUBCLASS'} = $subclassline[1];
 652                 $qossettings{'TOS'} = $subclassline[8];
 653                 $qossettings{'TOS'} = abs $qossettings{'TOS'} * 2;
 654                 if ($qossettings{'TOS'} ne "0") {
 655                         print "\tiptables -t mangle -A QOS-TOS -m mark --mark $qossettings{'SUBCLASS'} -j TOS --set-tos $qossettings{'TOS'}\n";
 656                         print "\tiptables -t mangle -A QOS-TOS -m mark --mark $qossettings{'SUBCLASS'} -j RETURN\n";
 657                 }
 658         }
 659
 660 print <<END
 661
 662         ## STARTING COLLECTOR
 663         ( sleep 10 && /usr/local/bin/qosd $qossettings{'RED_DEV'} >/dev/null 2>&1) &
 664         ( sleep 10 && /usr/local/bin/qosd $qossettings{'IMQ_DEV'} >/dev/null 2>&1) &
 665
 666         echo "Quality of Service was successfully started!"
 667         exit 0
 668   ;;
 669   clear|stop)
 670         ### RESET EVERYTHING TO A KNOWN STATE
 671         killall qosd >/dev/null 2>&1
 672         (sleep 3 && killall -9 qosd &>/dev/null) &
 673         # DELETE QDISCS
 674         tc qdisc del dev $qossettings{'RED_DEV'} root >/dev/null 2>&1
 675         tc qdisc del dev $qossettings{'IMQ_DEV'} root >/dev/null 2>&1
 676         # STOP IMQ-DEVICE
 677         ip link set $qossettings{'IMQ_DEV'} down >/dev/null 2>&1
 678         iptables -t mangle --delete POSTROUTING -m mark ! --mark 0 -o ! $qossettings{'RED_DEV'} -j IMQ --todev 0 >/dev/null 2>&1
 679         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -j IMQ --todev 0  >/dev/null 2>&1
 680         # rmmod imq # this crash on 2.6.25.xx
 681         # REMOVE & FLUSH CHAINS
 682         iptables -t mangle --delete POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT >/dev/null 2>&1
 683         iptables -t mangle --delete POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-TOS >/dev/null 2>&1
 684         iptables -t mangle --flush  QOS-OUT >/dev/null 2>&1
 685         iptables -t mangle --delete-chain QOS-OUT >/dev/null 2>&1
 686         iptables -t mangle --delete FORWARD -i $qossettings{'RED_DEV'} -j QOS-INC >/dev/null 2>&1
 687         iptables -t mangle --delete FORWARD -i $qossettings{'RED_DEV'} -j QOS-TOS >/dev/null 2>&1
 688         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -j QOS-INC >/dev/null 2>&1
 689         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -j QOS-TOS >/dev/null 2>&1
 690         iptables -t mangle --flush  QOS-INC >/dev/null 2>&1
 691         iptables -t mangle --delete-chain QOS-INC >/dev/null 2>&1
 692         iptables -t mangle --flush  QOS-TOS >/dev/null 2>&1
 693         iptables -t mangle --delete-chain QOS-TOS >/dev/null 2>&1
 694         rmmod sch_htb >/dev/null 2>&1
 695         echo "Quality of Service was successfully cleared!"
 696   ;;
 697   gen|generate)
 698         echo -n "Generateing the QoS-Scripts..."
 699         /usr/bin/perl /var/ipfire/qos/bin/makeqosscripts.pl > /var/ipfire/qos/bin/qos.sh
 700         echo ".Done!"
 701         exit 0
 702         ;;
 703   restart)
 704         ### FIRST CLEAR EVERYTHING
 705         \$0 clear
 706
 707         ### THEN START
 708         \$0 start
 709         ;;
 710 esac
 711 ### EOF
 712 END
 713 ;
 714
 715 ############################################################################################################################
 716 ############################################################################################################################