Return to load-tester.conf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins

Annotation of embedaddon/strongswan/conf/plugins/load-tester.conf, revision 1.1.1.2

1.1       misho       1: # Section to configure the load-tester plugin, see LOAD TESTS in
                      2: # strongswan.conf(5) for details.
                      3: load-tester {
                      4: 
                      5:     # Whether to keep dynamic addresses even after the associated SA got
                      6:     # terminated.
                      7:     # addrs_keep = no
                      8: 
                      9:     # Network prefix length to use when installing dynamic addresses. If set to
                     10:     # -1 the full address is used (i.e. 32 or 128).
                     11:     # addrs_prefix = 16
                     12: 
                     13:     # Directory to load (intermediate) CA certificates from.
                     14:     # ca_dir =
                     15: 
                     16:     # Seconds to start CHILD_SA rekeying after setup.
                     17:     # child_rekey = 600
                     18: 
                     19:     # URI to a CRL to include as certificate distribution point in generated
                     20:     # certificates.
                     21:     # crl =
                     22: 
                     23:     # Delay between initiations for each thread.
                     24:     # delay = 0
                     25: 
                     26:     # Delete an IKE_SA as soon as it has been established.
                     27:     # delete_after_established = no
                     28: 
                     29:     # Digest algorithm used when issuing certificates.
                     30:     # digest = sha1
                     31: 
                     32:     # DPD delay to use in load test.
                     33:     # dpd_delay = 0
                     34: 
                     35:     # Base port to be used for requests (each client uses a different port).
                     36:     # dynamic_port = 0
                     37: 
                     38:     # EAP secret to use in load test.
                     39:     # eap_password = default-pwd
                     40: 
                     41:     # Enable the load testing plugin. WARNING: Never enable this plugin on
                     42:     # productive systems. It provides preconfigured credentials and allows an
                     43:     # attacker to authenticate as any user.
                     44:     # enable = no
                     45: 
                     46:     # CHILD_SA proposal to use for load tests.
                     47:     # esp = aes128-sha1
                     48: 
                     49:     # Fake the kernel interface to allow load-testing against self.
                     50:     # fake_kernel = no
                     51: 
                     52:     # Seconds to start IKE_SA rekeying after setup.
                     53:     # ike_rekey = 0
                     54: 
                     55:     # Global limit of concurrently established SAs during load test.
                     56:     # init_limit = 0
                     57: 
                     58:     # Address to initiate from.
                     59:     # initiator = 0.0.0.0
                     60: 
                     61:     # Authentication method(s) the initiator uses.
                     62:     # initiator_auth = pubkey
                     63: 
                     64:     # Initiator ID used in load test.
                     65:     # initiator_id =
                     66: 
                     67:     # Initiator ID to match against as responder.
                     68:     # initiator_match =
                     69: 
                     70:     # Traffic selector on initiator side, as proposed by initiator.
                     71:     # initiator_tsi =
                     72: 
                     73:     # Traffic selector on responder side, as proposed by initiator.
                     74:     # initiator_tsr =
                     75: 
                     76:     # Number of concurrent initiator threads to use in load test.
                     77:     # initiators = 0
                     78: 
                     79:     # Path to the issuer certificate (if not configured a hard-coded default
                     80:     # value is used).
                     81:     # issuer_cert =
                     82: 
                     83:     # Path to private key that is used to issue certificates (if not configured
                     84:     # a hard-coded default value is used).
                     85:     # issuer_key =
                     86: 
                     87:     # Number of IKE_SAs to initiate by each initiator in load test.
                     88:     # iterations = 1
                     89: 
                     90:     # Whether to load the plugin. Can also be an integer to increase the
                     91:     # priority of this plugin.
                     92:     load = yes
                     93: 
                     94:     # IPsec mode to use, one of tunnel, transport, or beet.
                     95:     # mode = tunnel
                     96: 
                     97:     # Provide INTERNAL_IPV4_ADDRs from a named pool.
                     98:     # pool =
                     99: 
                    100:     # Preshared key to use in load test.
                    101:     # preshared_key = <default-psk>
                    102: 
                    103:     # IKE proposal to use in load test.
                    104:     # proposal = aes128-sha1-modp768
                    105: 
1.1.1.2 ! misho     106:     # Request an INTERNAL_IPV4_ADDR and INTERNAL_IPV6_ADDR from the server.
1.1       misho     107:     # request_virtual_ip = no
                    108: 
                    109:     # Address to initiation connections to.
                    110:     # responder = 127.0.0.1
                    111: 
                    112:     # Authentication method(s) the responder uses.
                    113:     # responder_auth = pubkey
                    114: 
                    115:     # Responder ID used in load test.
                    116:     # responder_id =
                    117: 
                    118:     # Traffic selector on initiator side, as narrowed by responder.
                    119:     # responder_tsi = initiator_tsi
                    120: 
                    121:     # Traffic selector on responder side, as narrowed by responder.
                    122:     # responder_tsr = initiator_tsr
                    123: 
                    124:     # Shutdown the daemon after all IKE_SAs have been established.
                    125:     # shutdown_when_complete = no
                    126: 
                    127:     # Socket provided by the load-tester plugin.
                    128:     # socket = unix://${piddir}/charon.ldt
                    129: 
                    130:     # IKE version to use (0 means use IKEv2 as initiator and accept any version
                    131:     # as responder).
                    132:     # version = 0
                    133: 
                    134:     # Section that contains key/value pairs with address pools (in CIDR
                    135:     # notation) to use for a specific network interface e.g. eth0 =
                    136:     # 10.10.0.0/16.
                    137:     addrs {
                    138: 
                    139:     }
                    140: 
                    141: }
                    142: