|
Packit Service |
3880ab |
/*
|
|
Packit Service |
3880ab |
* m_police.c Parse/print policing module options.
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* This program is free software; you can u32istribute it and/or
|
|
Packit Service |
3880ab |
* modify it under the terms of the GNU General Public License
|
|
Packit Service |
3880ab |
* as published by the Free Software Foundation; either version
|
|
Packit Service |
3880ab |
* 2 of the License, or (at your option) any later version.
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
|
|
Packit Service |
3880ab |
* FIXES: 19990619 - J Hadi Salim (hadi@cyberus.ca)
|
|
Packit Service |
3880ab |
* simple addattr packaging fix.
|
|
Packit Service |
3880ab |
* 2002: J Hadi Salim - Add tc action extensions syntax
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include <stdio.h>
|
|
Packit Service |
3880ab |
#include <stdlib.h>
|
|
Packit Service |
3880ab |
#include <unistd.h>
|
|
Packit Service |
3880ab |
#include <fcntl.h>
|
|
Packit Service |
3880ab |
#include <sys/socket.h>
|
|
Packit Service |
3880ab |
#include <netinet/in.h>
|
|
Packit Service |
3880ab |
#include <arpa/inet.h>
|
|
Packit Service |
3880ab |
#include <string.h>
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include "utils.h"
|
|
Packit Service |
3880ab |
#include "tc_util.h"
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int act_parse_police(struct action_util *a, int *argc_p,
|
|
Packit Service |
3880ab |
char ***argv_p, int tca_id, struct nlmsghdr *n);
|
|
Packit Service |
3880ab |
static int print_police(struct action_util *a, FILE *f, struct rtattr *tb);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
struct action_util police_action_util = {
|
|
Packit Service |
3880ab |
.id = "police",
|
|
Packit Service |
3880ab |
.parse_aopt = act_parse_police,
|
|
Packit Service |
3880ab |
.print_aopt = print_police,
|
|
Packit Service |
3880ab |
};
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static void usage(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
fprintf(stderr,
|
|
Packit Service |
3880ab |
"Usage: ... police rate BPS burst BYTES[/BYTES] [ mtu BYTES[/BYTES] ]\n"
|
|
Packit Service |
3880ab |
" [ peakrate BPS ] [ avrate BPS ] [ overhead BYTES ]\n"
|
|
Packit Service |
3880ab |
" [ linklayer TYPE ] [ CONTROL ]\n"
|
|
Packit Service |
3880ab |
"Where: CONTROL := conform-exceed <EXCEEDACT>[/NOTEXCEEDACT]\n"
|
|
Packit Service |
3880ab |
" Define how to handle packets which exceed (<EXCEEDACT>)\n"
|
|
Packit Service |
3880ab |
" or conform (<NOTEXCEEDACT>) the configured bandwidth limit.\n"
|
|
Packit Service |
3880ab |
" EXCEEDACT/NOTEXCEEDACT := { pipe | ok | reclassify | drop | continue |\n"
|
|
Packit Service |
3880ab |
" goto chain <CHAIN_INDEX> }\n");
|
|
Packit Service |
3880ab |
exit(-1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int act_parse_police(struct action_util *a, int *argc_p, char ***argv_p,
|
|
Packit Service |
3880ab |
int tca_id, struct nlmsghdr *n)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
int argc = *argc_p;
|
|
Packit Service |
3880ab |
char **argv = *argv_p;
|
|
Packit Service |
3880ab |
int res = -1;
|
|
Packit Service |
3880ab |
int ok = 0;
|
|
Packit Service |
3880ab |
struct tc_police p = { .action = TC_POLICE_RECLASSIFY };
|
|
Packit Service |
3880ab |
__u32 rtab[256];
|
|
Packit Service |
3880ab |
__u32 ptab[256];
|
|
Packit Service |
3880ab |
__u32 avrate = 0;
|
|
Packit Service |
3880ab |
int presult = 0;
|
|
Packit Service |
3880ab |
unsigned buffer = 0, mtu = 0, mpu = 0;
|
|
Packit Service |
3880ab |
unsigned short overhead = 0;
|
|
Packit Service |
3880ab |
unsigned int linklayer = LINKLAYER_ETHERNET; /* Assume ethernet */
|
|
Packit Service |
3880ab |
int Rcell_log = -1, Pcell_log = -1;
|
|
Packit Service |
3880ab |
struct rtattr *tail;
|
|
Packit Service |
3880ab |
__u64 rate64 = 0, prate64 = 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (a) /* new way of doing things */
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (argc <= 0)
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
while (argc > 0) {
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "index") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (get_u32(&p.index, *argv, 10))
|
|
Packit Service |
3880ab |
invarg("index", *argv);
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "burst") == 0 ||
|
|
Packit Service |
3880ab |
strcmp(*argv, "buffer") == 0 ||
|
|
Packit Service |
3880ab |
strcmp(*argv, "maxburst") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (buffer)
|
|
Packit Service |
3880ab |
duparg("buffer/burst", *argv);
|
|
Packit Service |
3880ab |
if (get_size_and_cell(&buffer, &Rcell_log, *argv) < 0)
|
|
Packit Service |
3880ab |
invarg("buffer", *argv);
|
|
Packit Service |
3880ab |
} else if (strcmp(*argv, "mtu") == 0 ||
|
|
Packit Service |
3880ab |
strcmp(*argv, "minburst") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (mtu)
|
|
Packit Service |
3880ab |
duparg("mtu/minburst", *argv);
|
|
Packit Service |
3880ab |
if (get_size_and_cell(&mtu, &Pcell_log, *argv) < 0)
|
|
Packit Service |
3880ab |
invarg("mtu", *argv);
|
|
Packit Service |
3880ab |
} else if (strcmp(*argv, "mpu") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (mpu)
|
|
Packit Service |
3880ab |
duparg("mpu", *argv);
|
|
Packit Service |
3880ab |
if (get_size(&mpu, *argv))
|
|
Packit Service |
3880ab |
invarg("mpu", *argv);
|
|
Packit Service |
3880ab |
} else if (strcmp(*argv, "rate") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (rate64)
|
|
Packit Service |
3880ab |
duparg("rate", *argv);
|
|
Packit Service |
3880ab |
if (get_rate64(&rate64, *argv))
|
|
Packit Service |
3880ab |
invarg("rate", *argv);
|
|
Packit Service |
3880ab |
} else if (strcmp(*argv, "avrate") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (avrate)
|
|
Packit Service |
3880ab |
duparg("avrate", *argv);
|
|
Packit Service |
3880ab |
if (get_rate(&avrate, *argv))
|
|
Packit Service |
3880ab |
invarg("avrate", *argv);
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "peakrate") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (prate64)
|
|
Packit Service |
3880ab |
duparg("peakrate", *argv);
|
|
Packit Service |
3880ab |
if (get_rate64(&prate64, *argv))
|
|
Packit Service |
3880ab |
invarg("peakrate", *argv);
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "reclassify") == 0 ||
|
|
Packit Service |
3880ab |
matches(*argv, "drop") == 0 ||
|
|
Packit Service |
3880ab |
matches(*argv, "shot") == 0 ||
|
|
Packit Service |
3880ab |
matches(*argv, "continue") == 0 ||
|
|
Packit Service |
3880ab |
matches(*argv, "pass") == 0 ||
|
|
Packit Service |
3880ab |
matches(*argv, "ok") == 0 ||
|
|
Packit Service |
3880ab |
matches(*argv, "pipe") == 0 ||
|
|
Packit Service |
3880ab |
matches(*argv, "goto") == 0) {
|
|
Packit Service |
3880ab |
if (!parse_action_control(&argc, &argv, &p.action, false))
|
|
Packit Service |
3880ab |
goto action_ctrl_ok;
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
} else if (strcmp(*argv, "conform-exceed") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (!parse_action_control_slash(&argc, &argv, &p.action,
|
|
Packit Service |
3880ab |
&presult, true))
|
|
Packit Service |
3880ab |
goto action_ctrl_ok;
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "overhead") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (get_u16(&overhead, *argv, 10))
|
|
Packit Service |
3880ab |
invarg("overhead", *argv);
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "linklayer") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (get_linklayer(&linklayer, *argv))
|
|
Packit Service |
3880ab |
invarg("linklayer", *argv);
|
|
Packit Service |
3880ab |
} else if (strcmp(*argv, "help") == 0) {
|
|
Packit Service |
3880ab |
usage();
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
NEXT_ARG_FWD();
|
|
Packit Service |
3880ab |
action_ctrl_ok:
|
|
Packit Service |
3880ab |
ok++;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (!ok)
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (rate64 && avrate)
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* Must at least do late binding, use TB or ewma policing */
|
|
Packit Service |
3880ab |
if (!rate64 && !avrate && !p.index && !mtu) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "'rate' or 'avrate' or 'mtu' MUST be specified.\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
/* When the TB policer is used, burst is required */
|
|
Packit Service |
3880ab |
if (rate64 && !buffer && !avrate) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "'burst' requires 'rate'.\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (prate64) {
|
|
Packit Service |
3880ab |
if (!rate64) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "'peakrate' requires 'rate'.\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if (!mtu) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "'mtu' is required, if 'peakrate' is requested.\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (rate64) {
|
|
Packit Service |
3880ab |
p.rate.rate = (rate64 >= (1ULL << 32)) ? ~0U : rate64;
|
|
Packit Service |
3880ab |
p.rate.mpu = mpu;
|
|
Packit Service |
3880ab |
p.rate.overhead = overhead;
|
|
Packit Service |
3880ab |
if (tc_calc_rtable_64(&p.rate, rtab, Rcell_log, mtu,
|
|
Packit Service |
3880ab |
linklayer, rate64) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "POLICE: failed to calculate rate table.\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
p.burst = tc_calc_xmittime(rate64, buffer);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
p.mtu = mtu;
|
|
Packit Service |
3880ab |
if (prate64) {
|
|
Packit Service |
3880ab |
p.peakrate.rate = (prate64 >= (1ULL << 32)) ? ~0U : prate64;
|
|
Packit Service |
3880ab |
p.peakrate.mpu = mpu;
|
|
Packit Service |
3880ab |
p.peakrate.overhead = overhead;
|
|
Packit Service |
3880ab |
if (tc_calc_rtable_64(&p.peakrate, ptab, Pcell_log, mtu,
|
|
Packit Service |
3880ab |
linklayer, prate64) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "POLICE: failed to calculate peak rate table.\n");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
tail = addattr_nest(n, MAX_MSG, tca_id);
|
|
Packit Service |
3880ab |
addattr_l(n, MAX_MSG, TCA_POLICE_TBF, &p, sizeof(p));
|
|
Packit Service |
3880ab |
if (rate64) {
|
|
Packit Service |
3880ab |
addattr_l(n, MAX_MSG, TCA_POLICE_RATE, rtab, 1024);
|
|
Packit Service |
3880ab |
if (rate64 >= (1ULL << 32))
|
|
Packit Service |
3880ab |
addattr64(n, MAX_MSG, TCA_POLICE_RATE64, rate64);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if (prate64) {
|
|
Packit Service |
3880ab |
addattr_l(n, MAX_MSG, TCA_POLICE_PEAKRATE, ptab, 1024);
|
|
Packit Service |
3880ab |
if (prate64 >= (1ULL << 32))
|
|
Packit Service |
3880ab |
addattr64(n, MAX_MSG, TCA_POLICE_PEAKRATE64, prate64);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
if (avrate)
|
|
Packit Service |
3880ab |
addattr32(n, MAX_MSG, TCA_POLICE_AVRATE, avrate);
|
|
Packit Service |
3880ab |
if (presult)
|
|
Packit Service |
3880ab |
addattr32(n, MAX_MSG, TCA_POLICE_RESULT, presult);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
addattr_nest_end(n, tail);
|
|
Packit Service |
3880ab |
res = 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
*argc_p = argc;
|
|
Packit Service |
3880ab |
*argv_p = argv;
|
|
Packit Service |
3880ab |
return res;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int parse_police(int *argc_p, char ***argv_p, int tca_id, struct nlmsghdr *n)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
return act_parse_police(NULL, argc_p, argv_p, tca_id, n);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int print_police(struct action_util *a, FILE *f, struct rtattr *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
SPRINT_BUF(b1);
|
|
Packit Service |
3880ab |
SPRINT_BUF(b2);
|
|
Packit Service |
3880ab |
struct tc_police *p;
|
|
Packit Service |
3880ab |
struct rtattr *tb[TCA_POLICE_MAX+1];
|
|
Packit Service |
3880ab |
unsigned int buffer;
|
|
Packit Service |
3880ab |
unsigned int linklayer;
|
|
Packit Service |
3880ab |
__u64 rate64, prate64;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (arg == NULL)
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
parse_rtattr_nested(tb, TCA_POLICE_MAX, arg);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (tb[TCA_POLICE_TBF] == NULL) {
|
|
Packit Service |
3880ab |
fprintf(f, "[NULL police tbf]");
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
#ifndef STOOPID_8BYTE
|
|
Packit Service |
3880ab |
if (RTA_PAYLOAD(tb[TCA_POLICE_TBF]) < sizeof(*p)) {
|
|
Packit Service |
3880ab |
fprintf(f, "[truncated police tbf]");
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
#endif
|
|
Packit Service |
3880ab |
p = RTA_DATA(tb[TCA_POLICE_TBF]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
rate64 = p->rate.rate;
|
|
Packit Service |
3880ab |
if (tb[TCA_POLICE_RATE64] &&
|
|
Packit Service |
3880ab |
RTA_PAYLOAD(tb[TCA_POLICE_RATE64]) >= sizeof(rate64))
|
|
Packit Service |
3880ab |
rate64 = rta_getattr_u64(tb[TCA_POLICE_RATE64]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
fprintf(f, " police 0x%x ", p->index);
|
|
Packit Service |
3880ab |
fprintf(f, "rate %s ", sprint_rate(rate64, b1));
|
|
Packit Service |
3880ab |
buffer = tc_calc_xmitsize(rate64, p->burst);
|
|
Packit Service |
3880ab |
fprintf(f, "burst %s ", sprint_size(buffer, b1));
|
|
Packit Service |
3880ab |
fprintf(f, "mtu %s ", sprint_size(p->mtu, b1));
|
|
Packit Service |
3880ab |
if (show_raw)
|
|
Packit Service |
3880ab |
fprintf(f, "[%08x] ", p->burst);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
prate64 = p->peakrate.rate;
|
|
Packit Service |
3880ab |
if (tb[TCA_POLICE_PEAKRATE64] &&
|
|
Packit Service |
3880ab |
RTA_PAYLOAD(tb[TCA_POLICE_PEAKRATE64]) >= sizeof(prate64))
|
|
Packit Service |
3880ab |
prate64 = rta_getattr_u64(tb[TCA_POLICE_PEAKRATE64]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (prate64)
|
|
Packit Service |
3880ab |
fprintf(f, "peakrate %s ", sprint_rate(prate64, b1));
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (tb[TCA_POLICE_AVRATE])
|
|
Packit Service |
3880ab |
fprintf(f, "avrate %s ",
|
|
Packit Service |
3880ab |
sprint_rate(rta_getattr_u32(tb[TCA_POLICE_AVRATE]),
|
|
Packit Service |
3880ab |
b1));
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
print_action_control(f, "action ", p->action, "");
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (tb[TCA_POLICE_RESULT]) {
|
|
Packit Service |
3880ab |
__u32 action = rta_getattr_u32(tb[TCA_POLICE_RESULT]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
print_action_control(f, "/", action, " ");
|
|
Packit Service |
3880ab |
} else
|
|
Packit Service |
3880ab |
fprintf(f, " ");
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
fprintf(f, "overhead %ub ", p->rate.overhead);
|
|
Packit Service |
3880ab |
linklayer = (p->rate.linklayer & TC_LINKLAYER_MASK);
|
|
Packit Service |
3880ab |
if (linklayer > TC_LINKLAYER_ETHERNET || show_details)
|
|
Packit Service |
3880ab |
fprintf(f, "linklayer %s ", sprint_linklayer(linklayer, b2));
|
|
Packit Service |
3880ab |
fprintf(f, "\n\tref %d bind %d", p->refcnt, p->bindcnt);
|
|
Packit Service |
3880ab |
if (show_stats) {
|
|
Packit Service |
3880ab |
if (tb[TCA_POLICE_TM]) {
|
|
Packit Service |
3880ab |
struct tcf_t *tm = RTA_DATA(tb[TCA_POLICE_TM]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
print_tm(f, tm);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
fprintf(f, "\n");
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int tc_print_police(FILE *f, struct rtattr *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
return print_police(&police_action_util, f, arg);
|
|
Packit Service |
3880ab |
}
|