123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142 |
- # Section to configure the load-tester plugin, see LOAD TESTS in
- # strongswan.conf(5) for details.
- load-tester {
- # Whether to keep dynamic addresses even after the associated SA got
- # terminated.
- # addrs_keep = no
- # Network prefix length to use when installing dynamic addresses. If set to
- # -1 the full address is used (i.e. 32 or 128).
- # addrs_prefix = 16
- # Directory to load (intermediate) CA certificates from.
- # ca_dir =
- # Seconds to start CHILD_SA rekeying after setup.
- # child_rekey = 600
- # URI to a CRL to include as certificate distribution point in generated
- # certificates.
- # crl =
- # Delay between initiatons for each thread.
- # delay = 0
- # Delete an IKE_SA as soon as it has been established.
- # delete_after_established = no
- # Digest algorithm used when issuing certificates.
- # digest = sha1
- # DPD delay to use in load test.
- # dpd_delay = 0
- # Base port to be used for requests (each client uses a different port).
- # dynamic_port = 0
- # EAP secret to use in load test.
- # eap_password = default-pwd
- # Enable the load testing plugin. WARNING: Never enable this plugin on
- # productive systems. It provides preconfigured credentials and allows an
- # attacker to authenticate as any user.
- # enable = no
- # CHILD_SA proposal to use for load tests.
- # esp = aes128-sha1
- # Fake the kernel interface to allow load-testing against self.
- # fake_kernel = no
- # Seconds to start IKE_SA rekeying after setup.
- # ike_rekey = 0
- # Global limit of concurrently established SAs during load test.
- # init_limit = 0
- # Address to initiate from.
- # initiator = 0.0.0.0
- # Authentication method(s) the intiator uses.
- # initiator_auth = pubkey
- # Initiator ID used in load test.
- # initiator_id =
- # Initiator ID to match against as responder.
- # initiator_match =
- # Traffic selector on initiator side, as proposed by initiator.
- # initiator_tsi =
- # Traffic selector on responder side, as proposed by initiator.
- # initiator_tsr =
- # Number of concurrent initiator threads to use in load test.
- # initiators = 0
- # Path to the issuer certificate (if not configured a hard-coded default
- # value is used).
- # issuer_cert =
- # Path to private key that is used to issue certificates (if not configured
- # a hard-coded default value is used).
- # issuer_key =
- # Number of IKE_SAs to initiate by each initiator in load test.
- # iterations = 1
- # Whether to load the plugin. Can also be an integer to increase the
- # priority of this plugin.
- load = yes
- # IPsec mode to use, one of tunnel, transport, or beet.
- # mode = tunnel
- # Provide INTERNAL_IPV4_ADDRs from a named pool.
- # pool =
- # Preshared key to use in load test.
- # preshared_key = <default-psk>
- # IKE proposal to use in load test.
- # proposal = aes128-sha1-modp768
- # Request an INTERNAL_IPV4_ADDR from the server.
- # request_virtual_ip = no
- # Address to initiation connections to.
- # responder = 127.0.0.1
- # Authentication method(s) the responder uses.
- # responder_auth = pubkey
- # Responder ID used in load test.
- # responder_id =
- # Traffic selector on initiator side, as narrowed by responder.
- # responder_tsi = initiator_tsi
- # Traffic selector on responder side, as narrowed by responder.
- # responder_tsr = initiator_tsr
- # Shutdown the daemon after all IKE_SAs have been established.
- # shutdown_when_complete = no
- # Socket provided by the load-tester plugin.
- # socket = unix://${piddir}/charon.ldt
- # IKE version to use (0 means use IKEv2 as initiator and accept any version
- # as responder).
- # version = 0
- # Section that contains key/value pairs with address pools (in CIDR
- # notation) to use for a specific network interface e.g. eth0 =
- # 10.10.0.0/16.
- addrs {
- }
- }
|