Skip to content

GitLab

Switch branch/tag
  1. 23 Jul, 2011 1 commit
    • Irfan Sheriff's avatar
      Add config update support for hostapd · 78dcb76a
      Irfan Sheriff authored 
      Additional fixes:

Fix putting hostapd in daemon mode which results in init taking it over
and failure to stop

Also fix security check

Bug: 5069108
Change-Id: Ie0e2f975516975d270e48c9081480d85e201251f
      78dcb76a
  3. 22 Jul, 2011 1 commit
  5. 21 Jul, 2011 1 commit
  7. 20 Jul, 2011 1 commit
  9. 19 Jul, 2011 1 commit
  11. 18 Jul, 2011 1 commit
  13. 12 Jul, 2011 1 commit
  15. 08 Jul, 2011 1 commit
  17. 07 Jul, 2011 2 commits
  19. 30 Jun, 2011 1 commit
    • JP Abgrall's avatar
      bandwidthcontroller: brute-force cleanup to catch costly_<iface> chains. · 39f8f242
      JP Abgrall authored 
      To help with development, where re-enable is used as a cleanup mechanism
we no remove ALL user chains.
Normally we only expect
  costly, penalty_box, and costly_<iface>.
If in the future we have more chains outside of those, this will need
revisiting.

Change-Id: I45e504bc1fe4ad973c00308967a474c73e959666
      39f8f242
  21. 29 Jun, 2011 1 commit
  23. 28 Jun, 2011 2 commits
  25. 27 Jun, 2011 4 commits
  27. 25 Jun, 2011 1 commit
  29. 24 Jun, 2011 5 commits
    • JP Abgrall's avatar
      BandwidthController: cleanup ipv4/v6, set/remove multiple quotas. · 0dad7c2f
      JP Abgrall authored 
      Regroup the ipv4/ipv6 choice deeper down to avoid copypasted code.
Shared quota accross ifaces.
Single quota per ifaces.

Nothing preventing an iface from have a single and shared quota.
Might be close to having a working combination.

Added commands:
 - shared quota
  ndc bandwidth setquotas <quotaBytes> <iface> ...
  ndc bandwidth setquota <iface> <quotaBytes>
  ndc bandwidth removequota <iface>
  ndc bandwidth removequotas <iface> ...

 - quota per iface
  ndc bandwidth setiquota <iface> <quotaBytes>
  ndc bandwidth removeiquota <iface>

Change-Id: I370d223da3c8b6e16e8d0a455309ae9e0756a721
      0dad7c2f
    • Mike J. Chen's avatar
      Change string notification for link state change. · a583f8be
      Mike J. Chen authored 
      
Changed from linkstatus to linkstate to be more like the
notification function name.

Change-Id: Ie9674ca04bf9a9bdff2583786c301452d02b19fc
Signed-off-by: default avatarMike J. Chen <mjchen@google.com>
      a583f8be
    • Mike J. Chen's avatar
      Revert "Revert "Add NETLINK_ROUTE socket creation and event propagation"" · 564df4ef
      Mike J. Chen authored 
      This reverts commit 19fb0c4e

.

Conflicts:

	NetlinkManager.cpp

Brings back Stan Chesnutt's change related to adding NETLINK_ROUTE
socket creation and event propagation.

Change-Id: I8c0625a95b7996ef75b883ce764c3244dd553a47
Signed-off-by: default avatarMike J. Chen <mjchen@google.com>
      564df4ef
    • JP Abgrall's avatar
      netd:bandwidth: initial pass at app-rules, and some ipv6. · fa6f46d3
      JP Abgrall authored 
      Adds initial per-app penalty box rules, and prepares for
handling per iface quota.

The following commands work:

* penalty box

ndc bandwidth addnaughtyapps <uid> ...
ndc bandwidth removenaughtyapps <uid> ...

* Shared quota

 - add (updates the bytes, if they differ from last time)

ndc bandwidth setquota <iface> <bytes>
ndc bandwidth setquota <iface1> <bytes>
ndc bandwidth setquota <iface2> <bytes>

  - remove
ndc bandwidth removequota <iface>
[ oldschool: ndc bandwidth setquota <iface> -1 ]

Change-Id: Ibefc16e81c7713feb47577a9687dcd032dedf06e
      fa6f46d3
    • JP Abgrall's avatar
      NatController: remove flushing the INPUT/OUTPUT tables. · 2ad29740
      JP Abgrall authored 
      It doesn't use them, so it should not have to flush them.
This is a minimalistic attempt to cooperate with the BandwidthController.

Change-Id: Ia175a86403adf034ac6f44d7ebc4ebe941881368
      2ad29740
  31. 23 Jun, 2011 2 commits
  33. 18 Jun, 2011 1 commit
  35. 17 Jun, 2011 1 commit
  37. 16 Jun, 2011 1 commit
    • JP Abgrall's avatar
      system/netd: bandwidth management initial support (uid+tag stats) · 4a5f5ca3
      JP Abgrall authored 
      This is a minimalistic version to get accounting of data going
through tagged socket per uid.

When netd starts up the BandwidthController, it will look at the
properties for
   persist.bandwidth.enable=1
and enabled it.

It needs the kernel with the xt_qtaguid + iptables/netfilter goodness.
stlport is ok to use.

The "owner" netfilter module used is actually our xt_qtaguid that acts as it
(just until we get around to talking directly the to kernel).

Once
  "ndc bandwidth enable"
is invoked all traffic is counted against the UIDs receiving/sending it.
This allows BlockGuard.java to "tag" sockets and see stats for the tags.

Data shows up in
  /proc/net/xt_qtaguid/stats

  /proc/net/xt_qtaguid/iface_stat/<iface>/
     rx_packets_tcp
     rx_bytes_tcp
     ...
There is no <uid>/...

Supported commands:
 - "ndc bandwidth enable"
   will setup the needed iptable entries to track tag/uid.
 - "ndc bandwidth disable"
   will remove the iptable entries.
 - "ndc bandwidth setquota <iface> <value>"
   will set a quota on the iface.
   Once quota is reached, packets are rejected.
   With the correct kernel, rejects are turned in socket errors.

TODO
----
 * make bandwidth controller cooperate with tethering.
   - they both manipulate the iptables.

Change-Id: Ieb9e7c60ef8c974e99828f7833065d59b2922bf3
      4a5f5ca3
  39. 02 Jun, 2011 1 commit
  41. 28 May, 2011 2 commits
  43. 20 May, 2011 1 commit
  45. 19 May, 2011 1 commit
  47. 18 May, 2011 1 commit
  49. 13 May, 2011 1 commit
  51. 12 May, 2011 1 commit
    • Robert Greenwalt's avatar
      Add v4/v6 route add/remove to netd. · e019b659
      Robert Greenwalt authored 
      Now we can move this out of the framework.
Also adds v6 support and explicit route removal (rather than the big hammer of "remove all").

Change-Id: Ia7f1b12b2175c566c4906064796131a2f7e81466
      e019b659
  53. 03 May, 2011 3 commits