load-tester.opt 4.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132
  1. charon.plugins.load-tester {}
  2. Section to configure the load-tester plugin, see LOAD TESTS in
  3. **strongswan.conf**(5) for details.
  4. charon.plugins.load-tester.addrs {}
  5. Section that contains key/value pairs with address pools (in CIDR notation)
  6. to use for a specific network interface e.g. eth0 = 10.10.0.0/16.
  7. charon.plugins.load-tester.addrs_keep = no
  8. Whether to keep dynamic addresses even after the associated SA got
  9. terminated.
  10. charon.plugins.load-tester.addrs_prefix = 16
  11. Network prefix length to use when installing dynamic addresses.
  12. If set to -1 the full address is used (i.e. 32 or 128).
  13. charon.plugins.load-tester.ca_dir =
  14. Directory to load (intermediate) CA certificates from.
  15. charon.plugins.load-tester.child_rekey = 600
  16. Seconds to start CHILD_SA rekeying after setup.
  17. charon.plugins.load-tester.crl
  18. URI to a CRL to include as certificate distribution point in generated
  19. certificates.
  20. charon.plugins.load-tester.delay = 0
  21. Delay between initiatons for each thread.
  22. charon.plugins.load-tester.delete_after_established = no
  23. Delete an IKE_SA as soon as it has been established.
  24. charon.plugins.load-tester.digest = sha1
  25. Digest algorithm used when issuing certificates.
  26. charon.plugins.load-tester.dpd_delay = 0
  27. DPD delay to use in load test.
  28. charon.plugins.load-tester.dynamic_port = 0
  29. Base port to be used for requests (each client uses a different port).
  30. charon.plugins.load-tester.eap_password = default-pwd
  31. EAP secret to use in load test.
  32. charon.plugins.load-tester.enable = no
  33. Enable the load testing plugin. **WARNING**: Never enable this plugin on
  34. productive systems. It provides preconfigured credentials and allows an
  35. attacker to authenticate as any user.
  36. charon.plugins.load-tester.esp = aes128-sha1
  37. CHILD_SA proposal to use for load tests.
  38. charon.plugins.load-tester.fake_kernel = no
  39. Fake the kernel interface to allow load-testing against self.
  40. charon.plugins.load-tester.ike_rekey = 0
  41. Seconds to start IKE_SA rekeying after setup.
  42. charon.plugins.load-tester.init_limit = 0
  43. Global limit of concurrently established SAs during load test.
  44. charon.plugins.load-tester.initiator = 0.0.0.0
  45. Address to initiate from.
  46. charon.plugins.load-tester.initiators = 0
  47. Number of concurrent initiator threads to use in load test.
  48. charon.plugins.load-tester.initiator_auth = pubkey
  49. Authentication method(s) the intiator uses.
  50. charon.plugins.load-tester.initiator_id =
  51. Initiator ID used in load test.
  52. charon.plugins.load-tester.initiator_match =
  53. Initiator ID to match against as responder.
  54. charon.plugins.load-tester.initiator_tsi =
  55. Traffic selector on initiator side, as proposed by initiator.
  56. charon.plugins.load-tester.initiator_tsr =
  57. Traffic selector on responder side, as proposed by initiator.
  58. charon.plugins.load-tester.iterations = 1
  59. Number of IKE_SAs to initiate by each initiator in load test.
  60. charon.plugins.load-tester.issuer_cert =
  61. Path to the issuer certificate (if not configured a hard-coded default value
  62. is used).
  63. charon.plugins.load-tester.issuer_key =
  64. Path to private key that is used to issue certificates (if not configured a
  65. hard-coded default value is used).
  66. charon.plugins.load-tester.mode = tunnel
  67. IPsec mode to use, one of _tunnel_, _transport_, or _beet_.
  68. charon.plugins.load-tester.pool =
  69. Provide INTERNAL_IPV4_ADDRs from a named pool.
  70. charon.plugins.load-tester.preshared_key = <default-psk>
  71. Preshared key to use in load test.
  72. charon.plugins.load-tester.proposal = aes128-sha1-modp768
  73. IKE proposal to use in load test.
  74. charon.plugins.load-tester.responder = 127.0.0.1
  75. Address to initiation connections to.
  76. charon.plugins.load-tester.responder_auth = pubkey
  77. Authentication method(s) the responder uses.
  78. charon.plugins.load-tester.responder_id =
  79. Responder ID used in load test.
  80. charon.plugins.load-tester.responder_tsi = initiator_tsi
  81. Traffic selector on initiator side, as narrowed by responder.
  82. charon.plugins.load-tester.responder_tsr = initiator_tsr
  83. Traffic selector on responder side, as narrowed by responder.
  84. charon.plugins.load-tester.request_virtual_ip = no
  85. Request an INTERNAL_IPV4_ADDR from the server.
  86. charon.plugins.load-tester.shutdown_when_complete = no
  87. Shutdown the daemon after all IKE_SAs have been established.
  88. charon.plugins.load-tester.socket = unix://${piddir}/charon.ldt
  89. Socket provided by the load-tester plugin.
  90. charon.plugins.load-tester.version = 0
  91. IKE version to use (0 means use IKEv2 as initiator and accept any version as
  92. responder).