Annotation of embedaddon/strongswan/conf/plugins/load-tester.opt, revision 1.1

1.1     ! misho       1: charon.plugins.load-tester {}
        !             2:        Section to configure the load-tester plugin, see LOAD TESTS in
        !             3:        **strongswan.conf**(5) for details.
        !             4: 
        !             5: charon.plugins.load-tester.addrs {}
        !             6:        Section that contains key/value pairs with address pools (in CIDR notation)
        !             7:        to use for a specific network interface e.g. eth0 = 10.10.0.0/16.
        !             8: 
        !             9: charon.plugins.load-tester.addrs_keep = no
        !            10:        Whether to keep dynamic addresses even after the associated SA got
        !            11:        terminated.
        !            12: 
        !            13: charon.plugins.load-tester.addrs_prefix = 16
        !            14:        Network prefix length to use when installing dynamic addresses.
        !            15:        If set to -1 the full address is used (i.e. 32 or 128).
        !            16: 
        !            17: charon.plugins.load-tester.ca_dir =
        !            18:        Directory to load (intermediate) CA certificates from.
        !            19: 
        !            20: charon.plugins.load-tester.child_rekey = 600
        !            21:        Seconds to start CHILD_SA rekeying after setup.
        !            22: 
        !            23: charon.plugins.load-tester.crl
        !            24:        URI to a CRL to include as certificate distribution point in generated
        !            25:        certificates.
        !            26: 
        !            27: charon.plugins.load-tester.delay = 0
        !            28:        Delay between initiations for each thread.
        !            29: 
        !            30: charon.plugins.load-tester.delete_after_established = no
        !            31:        Delete an IKE_SA as soon as it has been established.
        !            32: 
        !            33: charon.plugins.load-tester.digest = sha1
        !            34:        Digest algorithm used when issuing certificates.
        !            35: 
        !            36: charon.plugins.load-tester.dpd_delay = 0
        !            37:        DPD delay to use in load test.
        !            38: 
        !            39: charon.plugins.load-tester.dynamic_port = 0
        !            40:        Base port to be used for requests (each client uses a different port).
        !            41: 
        !            42: charon.plugins.load-tester.eap_password = default-pwd
        !            43:        EAP secret to use in load test.
        !            44: 
        !            45: charon.plugins.load-tester.enable = no
        !            46:        Enable the load testing plugin. **WARNING**: Never enable this plugin on
        !            47:        productive systems. It provides preconfigured credentials and allows an
        !            48:        attacker to authenticate as any user.
        !            49: 
        !            50: charon.plugins.load-tester.esp = aes128-sha1
        !            51:        CHILD_SA proposal to use for load tests.
        !            52: 
        !            53: charon.plugins.load-tester.fake_kernel = no
        !            54:        Fake the kernel interface to allow load-testing against self.
        !            55: 
        !            56: charon.plugins.load-tester.ike_rekey = 0
        !            57:        Seconds to start IKE_SA rekeying after setup.
        !            58: 
        !            59: charon.plugins.load-tester.init_limit = 0
        !            60:        Global limit of concurrently established SAs during load test.
        !            61: 
        !            62: charon.plugins.load-tester.initiator = 0.0.0.0
        !            63:        Address to initiate from.
        !            64: 
        !            65: charon.plugins.load-tester.initiators = 0
        !            66:        Number of concurrent initiator threads to use in load test.
        !            67: 
        !            68: charon.plugins.load-tester.initiator_auth = pubkey
        !            69:        Authentication method(s) the initiator uses.
        !            70: 
        !            71: charon.plugins.load-tester.initiator_id =
        !            72:        Initiator ID used in load test.
        !            73: 
        !            74: charon.plugins.load-tester.initiator_match =
        !            75:        Initiator ID to match against as responder.
        !            76: 
        !            77: charon.plugins.load-tester.initiator_tsi =
        !            78:        Traffic selector on initiator side, as proposed by initiator.
        !            79: 
        !            80: charon.plugins.load-tester.initiator_tsr =
        !            81:        Traffic selector on responder side, as proposed by initiator.
        !            82: 
        !            83: charon.plugins.load-tester.iterations = 1
        !            84:        Number of IKE_SAs to initiate by each initiator in load test.
        !            85: 
        !            86: charon.plugins.load-tester.issuer_cert =
        !            87:        Path to the issuer certificate (if not configured a hard-coded default value
        !            88:        is used).
        !            89: 
        !            90: charon.plugins.load-tester.issuer_key =
        !            91:        Path to private key that is used to issue certificates (if not configured a
        !            92:        hard-coded default value is used).
        !            93: 
        !            94: charon.plugins.load-tester.mode = tunnel
        !            95:        IPsec mode to use, one of _tunnel_, _transport_, or _beet_.
        !            96: 
        !            97: charon.plugins.load-tester.pool =
        !            98:        Provide INTERNAL_IPV4_ADDRs from a named pool.
        !            99: 
        !           100: charon.plugins.load-tester.preshared_key = <default-psk>
        !           101:        Preshared key to use in load test.
        !           102: 
        !           103: charon.plugins.load-tester.proposal = aes128-sha1-modp768
        !           104:        IKE proposal to use in load test.
        !           105: 
        !           106: charon.plugins.load-tester.responder = 127.0.0.1
        !           107:        Address to initiation connections to.
        !           108: 
        !           109: charon.plugins.load-tester.responder_auth = pubkey
        !           110:        Authentication method(s) the responder uses.
        !           111: 
        !           112: charon.plugins.load-tester.responder_id =
        !           113:        Responder ID used in load test.
        !           114: 
        !           115: charon.plugins.load-tester.responder_tsi = initiator_tsi
        !           116:        Traffic selector on initiator side, as narrowed by responder.
        !           117: 
        !           118: charon.plugins.load-tester.responder_tsr = initiator_tsr
        !           119:        Traffic selector on responder side, as narrowed by responder.
        !           120: 
        !           121: charon.plugins.load-tester.request_virtual_ip = no
        !           122:        Request an INTERNAL_IPV4_ADDR from the server.
        !           123: 
        !           124: charon.plugins.load-tester.shutdown_when_complete = no
        !           125:        Shutdown the daemon after all IKE_SAs have been established.
        !           126: 
        !           127: charon.plugins.load-tester.socket = unix://${piddir}/charon.ldt
        !           128:        Socket provided by the load-tester plugin.
        !           129: 
        !           130: charon.plugins.load-tester.version = 0
        !           131:        IKE version to use (0 means use IKEv2 as initiator and accept any version as
        !           132:        responder).

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>