服务器流量使用限制

#!/bin/bash

INTERFACE="eth0"  # 设置为你的网络接口名称
MONTHLY_LIMIT_GB=160  # 每月流量限制 (GB)
WARNING_THRESHOLD=0.9  # 警告阈值（90%）
LOG_FILE="/var/log/vnstat_monitor.log"
STATE_FILE="/var/run/vnstat_monitor_state"
LIMIT_TYPE="SUM"  # 可选值: "MAX" (入站和出站的最大值), "SUM" (入站和出站的总和)
ACTION_ON_LIMIT="SHUTDOWN"  # 可选值: "DROP" (封锁流量), "SHUTDOWN" (关机)

# 自定义通知信息
NOTIFICATION_URL="https://xxx.xx.com/xxx" # 默认通知地址
NOTIFICATION_TITLE="阿里云HK流量告警"  # 通知标题
WARNING_MESSAGE="流量使用已达到{PERCENT}%（{USAGE}GB/{LIMIT}GB）"  # 警告消息
LIMIT_REACHED_MESSAGE="流量使用超过{LIMIT}GB，{ACTION}！"  # 达到限制时的消息
RESET_MESSAGE="流量已被重置，网络已解封。"  # 重置消息

echo "Starting vnstat monitor script" > $LOG_FILE

# 函数：获取每月已使用流量 (GB)
get_monthly_usage() {
    local rx=$(vnstat -i "$INTERFACE" --json m | jq '.interfaces[0].traffic.month[0].rx')
    local tx=$(vnstat -i "$INTERFACE" --json m | jq '.interfaces[0].traffic.month[0].tx')
    local rx_gb=$(echo "scale=3; $rx / 1024 / 1024 / 1024" | bc)
    local tx_gb=$(echo "scale=3; $tx / 1024 / 1024 / 1024" | bc)
  
    if [ "$LIMIT_TYPE" = "MAX" ]; then
        echo "$rx_gb $tx_gb" | awk '{if ($1 > $2) print $1; else print $2}'
    else
        echo "scale=3; $rx_gb + $tx_gb" | bc
    fi
}

# 函数：封锁网络
block_network() {
    echo "$(date +%Y-%m-%d_%H:%M:%S) 封锁网络。" >> $LOG_FILE
    iptables -I INPUT -i "$INTERFACE" -j DROP
    iptables -I OUTPUT -o "$INTERFACE" -j DROP
    echo "BLOCKED=true" > $STATE_FILE
}

# 函数：解封网络
unblock_network() {
    echo "$(date +%Y-%m-%d_%H:%M:%S) 解封网络。" >> $LOG_FILE
    iptables -D INPUT -i "$INTERFACE" -j DROP
    iptables -D OUTPUT -o "$INTERFACE" -j DROP
    echo "BLOCKED=false" > $STATE_FILE
}

# 函数：关机
shutdown_system() {
    echo "$(date +%Y-%m-%d_%H:%M:%S) 流量超限，系统即将关机。" >> $LOG_FILE
    sleep 10
    shutdown -h now
}

# 函数：发送通知
send_notification() {
    local title="$1"
    local message="$2"
    curl -X POST -d "" "$NOTIFICATION_URL/$title/$message" > /dev/null 2>&1
    echo "$(date +%Y-%m-%d_%H:%M:%S) 已发送通知: $title - $message" >> $LOG_FILE
}

# 函数：替换消息中的占位符
replace_placeholders() {
    local message="$1"
    local usage="$2"
    local limit="$3"
    local percent="$4"
    local action="$5"
  
    message="${message//\{USAGE\}/$usage}"
    message="${message//\{LIMIT\}/$limit}"
    message="${message//\{PERCENT\}/$percent}"
    message="${message//\{ACTION\}/$action}"
  
    echo "$message"
}

# 初始化状态
if [ -f "$STATE_FILE" ]; then
    source $STATE_FILE
else
    BLOCKED=false
    WARNED=false
    echo "BLOCKED=false" > $STATE_FILE
    echo "WARNED=false" >> $STATE_FILE
fi

while true; do
    sleep 60  # 每分钟检查一次

    # 获取每月已使用流量
    MONTHLY_USAGE=$(get_monthly_usage)
    echo "$(date +%Y-%m-%d_%H:%M:%S) Current monthly usage ($LIMIT_TYPE): $MONTHLY_USAGE GB" >> $LOG_FILE

    # 检查是否需要发出警告
    WARNING_LIMIT=$(echo "$MONTHLY_LIMIT_GB * $WARNING_THRESHOLD" | bc)
    if (( $(echo "$MONTHLY_USAGE >= $WARNING_LIMIT" | bc -l) )) && ! $WARNED; then
        USAGE_PERCENT=$(echo "scale=1; $MONTHLY_USAGE / $MONTHLY_LIMIT_GB * 100" | bc)
        WARNING_MSG=$(replace_placeholders "$WARNING_MESSAGE" "$MONTHLY_USAGE" "$MONTHLY_LIMIT_GB" "$USAGE_PERCENT" "")
        send_notification "$NOTIFICATION_TITLE" "$WARNING_MSG"
        WARNED=true
        echo "WARNED=true" >> $STATE_FILE
    fi

    # 检查是否需要采取行动
    if (( $(echo "$MONTHLY_USAGE >= $MONTHLY_LIMIT_GB" | bc -l) )) && ! $BLOCKED; then
        if [ "$ACTION_ON_LIMIT" = "DROP" ]; then
            block_network
            ACTION_MSG="网络已被封锁"
        elif [ "$ACTION_ON_LIMIT" = "SHUTDOWN" ]; then
            ACTION_MSG="系统即将关机"
        fi
        LIMIT_MSG=$(replace_placeholders "$LIMIT_REACHED_MESSAGE" "$MONTHLY_USAGE" "$MONTHLY_LIMIT_GB" "100" "$ACTION_MSG")
        send_notification "$NOTIFICATION_TITLE" "$LIMIT_MSG"
      
        if [ "$ACTION_ON_LIMIT" = "SHUTDOWN" ]; then
            shutdown_system
        fi
    fi

    # 每月 1 号 0 点重置状态
    if [[ "$(date +%d)" == "01" ]] && [[ "$(date +%H:%M)" == "00:00" ]]; then
        if $BLOCKED; then
            unblock_network
            send_notification "$NOTIFICATION_TITLE" "$RESET_MESSAGE"
        fi
        WARNED=false
        echo "WARNED=false" > $STATE_FILE
    fi
done

INTERFACE="eth0"
MONTHLY_LIMIT_GB=160
WARNING_THRESHOLD=0.9
LIMIT_TYPE="MAX"
ACTION_ON_LIMIT="DROP"