mirror of
https://github.com/Telecominfraproject/wlan-ap.git
synced 2025-12-22 11:53:02 +00:00
077009a263
This patch backports some fixes in netfilter ratelimiting kernel module for wifi6 (linux v4.4.60). These fixes are ported from until following commit id 6e323887565fe8a23c6c85faf9e395a24affd05c in the mainline kernel. Also, fix bugs in client ratelimiting. Per Client Ratelimiting will be used henceforth instead of Per ssid Ratelimiting. Signed-off-by: Chaitanya Godavarthi <chaitanya.kiran@netexperience.com>
106 lines
3.2 KiB
Bash
Executable File
106 lines
3.2 KiB
Bash
Executable File
#Add/Delete Rate limiting for wifi client based on MAC address
|
|
. /lib/functions.sh
|
|
|
|
rate=0
|
|
iface=$2
|
|
handle_interface() {
|
|
local ifa rlimit
|
|
ifa=$1
|
|
if [ "$ifa" == $iface ]; then
|
|
config_get rlimit $iface rlimit
|
|
if [ -z "$rlimit" -o "$rlimit" == "0" ]; then
|
|
rate=0
|
|
return
|
|
fi
|
|
if [ $2 == "download" ]; then
|
|
config_get rate $iface cdrate
|
|
elif [ $2 == "upload" ]; then
|
|
config_get rate $iface curate
|
|
fi
|
|
# Convert from Kbits to KBytes
|
|
rate=$((rate/8))
|
|
fi
|
|
|
|
}
|
|
|
|
if [ -z "$1" -o -z "$2" -o -z "$3" ]; then
|
|
exit 1
|
|
fi
|
|
|
|
logger -t "mac-rate" "$1 $2 $3"
|
|
|
|
bridge=`uci get wireless.$iface.network`
|
|
if [ "$bridge" == "lan" ]; then
|
|
dlchain="download_nat"
|
|
ulchain="upload_nat"
|
|
else
|
|
dlchain="download"
|
|
ulchain="upload"
|
|
fi
|
|
|
|
if [ "$1" == "add" ]; then
|
|
config_load wireless
|
|
|
|
config_foreach handle_interface wifi-iface download
|
|
exists=`nft list chain bridge nft-qos-ssid-lan-bridge $dlchain -a | grep -ic $3`
|
|
logger -t "mac-rate" "exists = $exists"
|
|
if [ "$exists" -ne 0 ]; then
|
|
old_drate=`nft list chain bridge nft-qos-ssid-lan-bridge $dlchain -a | grep -i $3 | awk -F'kbytes' '{print $1}' | awk '{print $NF}'`
|
|
logger -t "mac-rate" "old_drate=$old_drate"
|
|
if [ "$old_drate" -ne "$rate" ]; then
|
|
changed=1
|
|
id=`nft list chain bridge nft-qos-ssid-lan-bridge $dlchain -a | grep -i $3 | awk -F "handle " '{print $2;exit}'`
|
|
if [ -n "$id" ]; then
|
|
nft delete rule bridge nft-qos-ssid-lan-bridge $dlchain handle $id
|
|
fi
|
|
logger -t "mac-rate" "changed DL $old_drate to $rate, del $3"
|
|
else
|
|
changed=0
|
|
logger -t "mac-rate" "Not changed DL $old_drate to $rate"
|
|
fi
|
|
fi
|
|
|
|
if [ "$exists" == 0 -o "$changed" == 1 ]; then
|
|
if [ "$rate" -ne 0 ]; then
|
|
dok=`nft add rule bridge nft-qos-ssid-lan-bridge $dlchain ether daddr $3 limit rate over $rate kbytes/second drop`
|
|
fi
|
|
fi
|
|
|
|
config_foreach handle_interface wifi-iface upload
|
|
exists=`nft list chain bridge nft-qos-ssid-lan-bridge $ulchain -a | grep -ic $3`
|
|
if [ "$exists" -ne 0 ]; then
|
|
old_urate=`nft list chain bridge nft-qos-ssid-lan-bridge $ulchain -a | grep -i $3 | awk -F'kbytes' '{print $1}' | awk '{print $NF}'`
|
|
if [ "$old_urate" -ne "$rate" ]; then
|
|
changed=1
|
|
id=`nft list chain bridge nft-qos-ssid-lan-bridge $ulchain -a | grep -i $3 | awk -F "handle " '{print $2;exit}'`
|
|
if [ -n "$id" ]; then
|
|
nft delete rule bridge nft-qos-ssid-lan-bridge $ulchain handle $id
|
|
fi
|
|
|
|
logger -t "mac-rate" "changed UL $old_urate to $rate del $3"
|
|
else
|
|
changed=0
|
|
logger -t "mac-rate" "Not changed UL $old_urate to $rate"
|
|
fi
|
|
fi
|
|
|
|
if [ "$exists" == 0 -o "$changed" == 1 ]; then
|
|
if [ "$rate" -ne 0 ]; then
|
|
uok=`nft add rule bridge nft-qos-ssid-lan-bridge $ulchain ether saddr $3 limit rate over $rate kbytes/second drop`
|
|
fi
|
|
fi
|
|
|
|
elif [ "$1" == "del" ]; then
|
|
id=`nft list chain bridge nft-qos-ssid-lan-bridge $dlchain -a | grep -i $3 | awk -F "handle " '{print $2;exit}'`
|
|
logger -t "mac-rate" "$id $3"
|
|
if [ -n "$id" ]; then
|
|
nft delete rule bridge nft-qos-ssid-lan-bridge $dlchain handle $id
|
|
fi
|
|
|
|
id=`nft list chain bridge nft-qos-ssid-lan-bridge $ulchain -a | grep -i $3 | awk -F "handle " '{print $2;exit}'`
|
|
if [ -n "$id" ]; then
|
|
nft delete rule bridge nft-qos-ssid-lan-bridge $ulchain handle $id
|
|
fi
|
|
|
|
fi
|