Annotation of embedaddon/strongswan/conf/plugins/load-tester.opt, revision 1.1.1.2

1.1       misho       1: charon.plugins.load-tester {}
                      2:        Section to configure the load-tester plugin, see LOAD TESTS in
                      3:        **strongswan.conf**(5) for details.
                      4: 
                      5: charon.plugins.load-tester.addrs {}
                      6:        Section that contains key/value pairs with address pools (in CIDR notation)
                      7:        to use for a specific network interface e.g. eth0 = 10.10.0.0/16.
                      8: 
                      9: charon.plugins.load-tester.addrs_keep = no
                     10:        Whether to keep dynamic addresses even after the associated SA got
                     11:        terminated.
                     12: 
                     13: charon.plugins.load-tester.addrs_prefix = 16
                     14:        Network prefix length to use when installing dynamic addresses.
                     15:        If set to -1 the full address is used (i.e. 32 or 128).
                     16: 
                     17: charon.plugins.load-tester.ca_dir =
                     18:        Directory to load (intermediate) CA certificates from.
                     19: 
                     20: charon.plugins.load-tester.child_rekey = 600
                     21:        Seconds to start CHILD_SA rekeying after setup.
                     22: 
                     23: charon.plugins.load-tester.crl
                     24:        URI to a CRL to include as certificate distribution point in generated
                     25:        certificates.
                     26: 
                     27: charon.plugins.load-tester.delay = 0
                     28:        Delay between initiations for each thread.
                     29: 
                     30: charon.plugins.load-tester.delete_after_established = no
                     31:        Delete an IKE_SA as soon as it has been established.
                     32: 
                     33: charon.plugins.load-tester.digest = sha1
                     34:        Digest algorithm used when issuing certificates.
                     35: 
                     36: charon.plugins.load-tester.dpd_delay = 0
                     37:        DPD delay to use in load test.
                     38: 
                     39: charon.plugins.load-tester.dynamic_port = 0
                     40:        Base port to be used for requests (each client uses a different port).
                     41: 
                     42: charon.plugins.load-tester.eap_password = default-pwd
                     43:        EAP secret to use in load test.
                     44: 
                     45: charon.plugins.load-tester.enable = no
                     46:        Enable the load testing plugin. **WARNING**: Never enable this plugin on
                     47:        productive systems. It provides preconfigured credentials and allows an
                     48:        attacker to authenticate as any user.
                     49: 
                     50: charon.plugins.load-tester.esp = aes128-sha1
                     51:        CHILD_SA proposal to use for load tests.
                     52: 
                     53: charon.plugins.load-tester.fake_kernel = no
                     54:        Fake the kernel interface to allow load-testing against self.
                     55: 
                     56: charon.plugins.load-tester.ike_rekey = 0
                     57:        Seconds to start IKE_SA rekeying after setup.
                     58: 
                     59: charon.plugins.load-tester.init_limit = 0
                     60:        Global limit of concurrently established SAs during load test.
                     61: 
                     62: charon.plugins.load-tester.initiator = 0.0.0.0
                     63:        Address to initiate from.
                     64: 
                     65: charon.plugins.load-tester.initiators = 0
                     66:        Number of concurrent initiator threads to use in load test.
                     67: 
                     68: charon.plugins.load-tester.initiator_auth = pubkey
                     69:        Authentication method(s) the initiator uses.
                     70: 
                     71: charon.plugins.load-tester.initiator_id =
                     72:        Initiator ID used in load test.
                     73: 
                     74: charon.plugins.load-tester.initiator_match =
                     75:        Initiator ID to match against as responder.
                     76: 
                     77: charon.plugins.load-tester.initiator_tsi =
                     78:        Traffic selector on initiator side, as proposed by initiator.
                     79: 
                     80: charon.plugins.load-tester.initiator_tsr =
                     81:        Traffic selector on responder side, as proposed by initiator.
                     82: 
                     83: charon.plugins.load-tester.iterations = 1
                     84:        Number of IKE_SAs to initiate by each initiator in load test.
                     85: 
                     86: charon.plugins.load-tester.issuer_cert =
                     87:        Path to the issuer certificate (if not configured a hard-coded default value
                     88:        is used).
                     89: 
                     90: charon.plugins.load-tester.issuer_key =
                     91:        Path to private key that is used to issue certificates (if not configured a
                     92:        hard-coded default value is used).
                     93: 
                     94: charon.plugins.load-tester.mode = tunnel
                     95:        IPsec mode to use, one of _tunnel_, _transport_, or _beet_.
                     96: 
                     97: charon.plugins.load-tester.pool =
                     98:        Provide INTERNAL_IPV4_ADDRs from a named pool.
                     99: 
                    100: charon.plugins.load-tester.preshared_key = <default-psk>
                    101:        Preshared key to use in load test.
                    102: 
                    103: charon.plugins.load-tester.proposal = aes128-sha1-modp768
                    104:        IKE proposal to use in load test.
                    105: 
                    106: charon.plugins.load-tester.responder = 127.0.0.1
                    107:        Address to initiation connections to.
                    108: 
                    109: charon.plugins.load-tester.responder_auth = pubkey
                    110:        Authentication method(s) the responder uses.
                    111: 
                    112: charon.plugins.load-tester.responder_id =
                    113:        Responder ID used in load test.
                    114: 
                    115: charon.plugins.load-tester.responder_tsi = initiator_tsi
                    116:        Traffic selector on initiator side, as narrowed by responder.
                    117: 
                    118: charon.plugins.load-tester.responder_tsr = initiator_tsr
                    119:        Traffic selector on responder side, as narrowed by responder.
                    120: 
                    121: charon.plugins.load-tester.request_virtual_ip = no
1.1.1.2 ! misho     122:        Request an INTERNAL_IPV4_ADDR and INTERNAL_IPV6_ADDR from the server.
1.1       misho     123: 
                    124: charon.plugins.load-tester.shutdown_when_complete = no
                    125:        Shutdown the daemon after all IKE_SAs have been established.
                    126: 
                    127: charon.plugins.load-tester.socket = unix://${piddir}/charon.ldt
                    128:        Socket provided by the load-tester plugin.
                    129: 
                    130: charon.plugins.load-tester.version = 0
                    131:        IKE version to use (0 means use IKEv2 as initiator and accept any version as
                    132:        responder).

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>