[or-cvs] r12274: Apply linux-tor-prio.sh patch from Marco B by way of Mike. (in tor/trunk: . contrib)

[nickm@xxxxxxxx]

Author: nickm
Date: 2007-10-29 15:43:35 -0400 (Mon, 29 Oct 2007)
New Revision: 12274

Modified:
   tor/trunk/
   tor/trunk/ChangeLog
   tor/trunk/contrib/linux-tor-prio.sh
Log:
 r16269@catbus:  nickm | 2007-10-29 15:41:16 -0400
 Apply linux-tor-prio.sh patch from Marco B by way of Mike.



Property changes on: tor/trunk
___________________________________________________________________
 svk:merge ticket from /tor/trunk [r16269] on 8246c3cf-6607-4228-993b-4d95d33730f1

Modified: tor/trunk/ChangeLog
===================================================================
--- tor/trunk/ChangeLog	2007-10-29 19:10:47 UTC (rev 12273)
+++ tor/trunk/ChangeLog	2007-10-29 19:43:35 UTC (rev 12274)
@@ -37,6 +37,11 @@
       to $PREFIX/share/tor/fallback-consensus) for a consensus.  This way
       we start knowing some directory caches.
 
+  - Utilities:
+    - Update linux-tor-prio.sh script to allow QoS based on the uid of
+      the Tor prossess.  See comments in scripts.  (Patch from Marco Bonetti
+      with tweaks from Mike Perry.)
+
   o Minor bugfixes:
     - Refuse to start if both ORPort and UseBridges are set. Bugfix
       on 0.2.0.x.

Modified: tor/trunk/contrib/linux-tor-prio.sh
===================================================================
--- tor/trunk/contrib/linux-tor-prio.sh	2007-10-29 19:10:47 UTC (rev 12273)
+++ tor/trunk/contrib/linux-tor-prio.sh	2007-10-29 19:43:35 UTC (rev 12274)
@@ -1,25 +1,25 @@
 #!/bin/bash
-# Written by Mike Perry
+# Written by Marco Bonetti & Mike Perry
 # Based on instructions from Dan Singletary's ADSL Bandwidth Management HOWTO
 # http://www.faqs.org/docs/Linux-HOWTO/ADSL-Bandwidth-Management-HOWTO.html
 # This script is Public Domain.
 
-# The following configuration works well for a ~5Mbit tor node. It requires
-# that you place your Tor traffic on a separate IP from the rest of your
-# traffic.
+# BEGIN USER TUNABLE PARAMETERS
 
-# BEGIN DEVICE PARAMETERS
-
 DEV=eth0
-BOX_IP=42.42.42.42
-TOR_IP=43.43.43.43
 
+# NOTE! You must START Tor under this UID. Using the Tor User/Group 
+# config setting is NOT sufficient.
+TOR_UID=$(id -u tor)
+
+# If the UID mechanism doesn't work for you, you can set this parameter
+# instead. If set, it will take precedence over the UID setting. Note that
+# you need multiple IPs for this to work.
+#TOR_IP="42.42.42.42"
+
 # Average ping to most places on the net, milliseconds
 RTT_LATENCY=40
 
-# END DEVICE PARAMETERS
-# BEGIN UPLOAD PARAMETERS
-
 # RATE_UP must be less than your connection's upload capacity. If it is
 # larger, then the bottleneck will be at your router's queue, which you
 # do not control. This will cause congestion and a revert to normal TCP
@@ -37,8 +37,6 @@
 #CHAIN=PREROUTING
 #CHAIN=POSTROUTING
 
-# END UPLOAD PARAMETERS
-
 MTU=1500
 AVG_PKT=900
 
@@ -56,18 +54,18 @@
 
 if [ "$1" = "status" ]
 then
-        echo "[qdisc]"
-        tc -s qdisc show dev $DEV
-        tc -s qdisc show dev imq0
-        echo "[class]"
-        tc -s class show dev $DEV
-        tc -s class show dev imq0
-        echo "[filter]"
-        tc -s filter show dev $DEV
-        tc -s filter show dev imq0
-        echo "[iptables]"
-        iptables -t mangle -L TORSHAPER-OUT -v -x 2> /dev/null
-        exit
+	echo "[qdisc]"
+	tc -s qdisc show dev $DEV
+	tc -s qdisc show dev imq0
+	echo "[class]"
+	tc -s class show dev $DEV
+	tc -s class show dev imq0
+	echo "[filter]"
+	tc -s filter show dev $DEV
+	tc -s filter show dev imq0
+	echo "[iptables]"
+	iptables -t mangle -L TORSHAPER-OUT -v -x 2> /dev/null
+	exit
 fi
 
 
@@ -84,8 +82,8 @@
 
 if [ "$1" = "stop" ]
 then
-        echo "Shaping removed on $DEV."
-        exit
+	echo "Shaping removed on $DEV."
+	exit
 fi
 
 # Outbound Shaping (limits total bandwidth to RATE_UP)
@@ -115,13 +113,19 @@
 iptables -t mangle -N TORSHAPER-OUT
 iptables -t mangle -I $CHAIN -o $DEV -j TORSHAPER-OUT
 
+
 # Set firewall marks
-# Low priority to Tor IP
-iptables -t mangle -A TORSHAPER-OUT -s $TOR_IP -j MARK --set-mark 21
+# Low priority to Tor
+if [ ""$TOR_IP == "" ]
+then
+	echo "Using UID-based QoS. UID $TOR_UID marked as low priority."
+	iptables -t mangle -A TORSHAPER-OUT -m owner --uid-owner $TOR_UID -j MARK --set-mark 21
+else
+	echo "Using IP-based QoS. $TOR_IP marked as low priority."
+	iptables -t mangle -A TORSHAPER-OUT -s $TOR_IP -j MARK --set-mark 21
+fi
 
 # High prio for everything else
-# Don't bother to use BOX_IP. Box probably has other IPs too...
-#iptables -t mangle -A TORSHAPER-OUT -s $BOX_IP -j MARK --set-mark 20
 iptables -t mangle -A TORSHAPER-OUT -m mark --mark 0 -j MARK --set-mark 20
 
 echo "Outbound shaping added to $DEV.  Rate for Tor upload at least: ${RATE_UP_TOR}Kbyte/sec."