Return to load-tester.opt CVS log | Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins |
1.1 ! misho 1: charon.plugins.load-tester {} ! 2: Section to configure the load-tester plugin, see LOAD TESTS in ! 3: **strongswan.conf**(5) for details. ! 4: ! 5: charon.plugins.load-tester.addrs {} ! 6: Section that contains key/value pairs with address pools (in CIDR notation) ! 7: to use for a specific network interface e.g. eth0 = 10.10.0.0/16. ! 8: ! 9: charon.plugins.load-tester.addrs_keep = no ! 10: Whether to keep dynamic addresses even after the associated SA got ! 11: terminated. ! 12: ! 13: charon.plugins.load-tester.addrs_prefix = 16 ! 14: Network prefix length to use when installing dynamic addresses. ! 15: If set to -1 the full address is used (i.e. 32 or 128). ! 16: ! 17: charon.plugins.load-tester.ca_dir = ! 18: Directory to load (intermediate) CA certificates from. ! 19: ! 20: charon.plugins.load-tester.child_rekey = 600 ! 21: Seconds to start CHILD_SA rekeying after setup. ! 22: ! 23: charon.plugins.load-tester.crl ! 24: URI to a CRL to include as certificate distribution point in generated ! 25: certificates. ! 26: ! 27: charon.plugins.load-tester.delay = 0 ! 28: Delay between initiations for each thread. ! 29: ! 30: charon.plugins.load-tester.delete_after_established = no ! 31: Delete an IKE_SA as soon as it has been established. ! 32: ! 33: charon.plugins.load-tester.digest = sha1 ! 34: Digest algorithm used when issuing certificates. ! 35: ! 36: charon.plugins.load-tester.dpd_delay = 0 ! 37: DPD delay to use in load test. ! 38: ! 39: charon.plugins.load-tester.dynamic_port = 0 ! 40: Base port to be used for requests (each client uses a different port). ! 41: ! 42: charon.plugins.load-tester.eap_password = default-pwd ! 43: EAP secret to use in load test. ! 44: ! 45: charon.plugins.load-tester.enable = no ! 46: Enable the load testing plugin. **WARNING**: Never enable this plugin on ! 47: productive systems. It provides preconfigured credentials and allows an ! 48: attacker to authenticate as any user. ! 49: ! 50: charon.plugins.load-tester.esp = aes128-sha1 ! 51: CHILD_SA proposal to use for load tests. ! 52: ! 53: charon.plugins.load-tester.fake_kernel = no ! 54: Fake the kernel interface to allow load-testing against self. ! 55: ! 56: charon.plugins.load-tester.ike_rekey = 0 ! 57: Seconds to start IKE_SA rekeying after setup. ! 58: ! 59: charon.plugins.load-tester.init_limit = 0 ! 60: Global limit of concurrently established SAs during load test. ! 61: ! 62: charon.plugins.load-tester.initiator = 0.0.0.0 ! 63: Address to initiate from. ! 64: ! 65: charon.plugins.load-tester.initiators = 0 ! 66: Number of concurrent initiator threads to use in load test. ! 67: ! 68: charon.plugins.load-tester.initiator_auth = pubkey ! 69: Authentication method(s) the initiator uses. ! 70: ! 71: charon.plugins.load-tester.initiator_id = ! 72: Initiator ID used in load test. ! 73: ! 74: charon.plugins.load-tester.initiator_match = ! 75: Initiator ID to match against as responder. ! 76: ! 77: charon.plugins.load-tester.initiator_tsi = ! 78: Traffic selector on initiator side, as proposed by initiator. ! 79: ! 80: charon.plugins.load-tester.initiator_tsr = ! 81: Traffic selector on responder side, as proposed by initiator. ! 82: ! 83: charon.plugins.load-tester.iterations = 1 ! 84: Number of IKE_SAs to initiate by each initiator in load test. ! 85: ! 86: charon.plugins.load-tester.issuer_cert = ! 87: Path to the issuer certificate (if not configured a hard-coded default value ! 88: is used). ! 89: ! 90: charon.plugins.load-tester.issuer_key = ! 91: Path to private key that is used to issue certificates (if not configured a ! 92: hard-coded default value is used). ! 93: ! 94: charon.plugins.load-tester.mode = tunnel ! 95: IPsec mode to use, one of _tunnel_, _transport_, or _beet_. ! 96: ! 97: charon.plugins.load-tester.pool = ! 98: Provide INTERNAL_IPV4_ADDRs from a named pool. ! 99: ! 100: charon.plugins.load-tester.preshared_key = <default-psk> ! 101: Preshared key to use in load test. ! 102: ! 103: charon.plugins.load-tester.proposal = aes128-sha1-modp768 ! 104: IKE proposal to use in load test. ! 105: ! 106: charon.plugins.load-tester.responder = 127.0.0.1 ! 107: Address to initiation connections to. ! 108: ! 109: charon.plugins.load-tester.responder_auth = pubkey ! 110: Authentication method(s) the responder uses. ! 111: ! 112: charon.plugins.load-tester.responder_id = ! 113: Responder ID used in load test. ! 114: ! 115: charon.plugins.load-tester.responder_tsi = initiator_tsi ! 116: Traffic selector on initiator side, as narrowed by responder. ! 117: ! 118: charon.plugins.load-tester.responder_tsr = initiator_tsr ! 119: Traffic selector on responder side, as narrowed by responder. ! 120: ! 121: charon.plugins.load-tester.request_virtual_ip = no ! 122: Request an INTERNAL_IPV4_ADDR from the server. ! 123: ! 124: charon.plugins.load-tester.shutdown_when_complete = no ! 125: Shutdown the daemon after all IKE_SAs have been established. ! 126: ! 127: charon.plugins.load-tester.socket = unix://${piddir}/charon.ldt ! 128: Socket provided by the load-tester plugin. ! 129: ! 130: charon.plugins.load-tester.version = 0 ! 131: IKE version to use (0 means use IKEv2 as initiator and accept any version as ! 132: responder).