load-tester.conf 3.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142
  1. # Section to configure the load-tester plugin, see LOAD TESTS in
  2. # strongswan.conf(5) for details.
  3. load-tester {
  4. # Whether to keep dynamic addresses even after the associated SA got
  5. # terminated.
  6. # addrs_keep = no
  7. # Network prefix length to use when installing dynamic addresses. If set to
  8. # -1 the full address is used (i.e. 32 or 128).
  9. # addrs_prefix = 16
  10. # Directory to load (intermediate) CA certificates from.
  11. # ca_dir =
  12. # Seconds to start CHILD_SA rekeying after setup.
  13. # child_rekey = 600
  14. # URI to a CRL to include as certificate distribution point in generated
  15. # certificates.
  16. # crl =
  17. # Delay between initiatons for each thread.
  18. # delay = 0
  19. # Delete an IKE_SA as soon as it has been established.
  20. # delete_after_established = no
  21. # Digest algorithm used when issuing certificates.
  22. # digest = sha1
  23. # DPD delay to use in load test.
  24. # dpd_delay = 0
  25. # Base port to be used for requests (each client uses a different port).
  26. # dynamic_port = 0
  27. # EAP secret to use in load test.
  28. # eap_password = default-pwd
  29. # Enable the load testing plugin. WARNING: Never enable this plugin on
  30. # productive systems. It provides preconfigured credentials and allows an
  31. # attacker to authenticate as any user.
  32. # enable = no
  33. # CHILD_SA proposal to use for load tests.
  34. # esp = aes128-sha1
  35. # Fake the kernel interface to allow load-testing against self.
  36. # fake_kernel = no
  37. # Seconds to start IKE_SA rekeying after setup.
  38. # ike_rekey = 0
  39. # Global limit of concurrently established SAs during load test.
  40. # init_limit = 0
  41. # Address to initiate from.
  42. # initiator = 0.0.0.0
  43. # Authentication method(s) the intiator uses.
  44. # initiator_auth = pubkey
  45. # Initiator ID used in load test.
  46. # initiator_id =
  47. # Initiator ID to match against as responder.
  48. # initiator_match =
  49. # Traffic selector on initiator side, as proposed by initiator.
  50. # initiator_tsi =
  51. # Traffic selector on responder side, as proposed by initiator.
  52. # initiator_tsr =
  53. # Number of concurrent initiator threads to use in load test.
  54. # initiators = 0
  55. # Path to the issuer certificate (if not configured a hard-coded default
  56. # value is used).
  57. # issuer_cert =
  58. # Path to private key that is used to issue certificates (if not configured
  59. # a hard-coded default value is used).
  60. # issuer_key =
  61. # Number of IKE_SAs to initiate by each initiator in load test.
  62. # iterations = 1
  63. # Whether to load the plugin. Can also be an integer to increase the
  64. # priority of this plugin.
  65. load = yes
  66. # IPsec mode to use, one of tunnel, transport, or beet.
  67. # mode = tunnel
  68. # Provide INTERNAL_IPV4_ADDRs from a named pool.
  69. # pool =
  70. # Preshared key to use in load test.
  71. # preshared_key = <default-psk>
  72. # IKE proposal to use in load test.
  73. # proposal = aes128-sha1-modp768
  74. # Request an INTERNAL_IPV4_ADDR from the server.
  75. # request_virtual_ip = no
  76. # Address to initiation connections to.
  77. # responder = 127.0.0.1
  78. # Authentication method(s) the responder uses.
  79. # responder_auth = pubkey
  80. # Responder ID used in load test.
  81. # responder_id =
  82. # Traffic selector on initiator side, as narrowed by responder.
  83. # responder_tsi = initiator_tsi
  84. # Traffic selector on responder side, as narrowed by responder.
  85. # responder_tsr = initiator_tsr
  86. # Shutdown the daemon after all IKE_SAs have been established.
  87. # shutdown_when_complete = no
  88. # Socket provided by the load-tester plugin.
  89. # socket = unix://${piddir}/charon.ldt
  90. # IKE version to use (0 means use IKEv2 as initiator and accept any version
  91. # as responder).
  92. # version = 0
  93. # Section that contains key/value pairs with address pools (in CIDR
  94. # notation) to use for a specific network interface e.g. eth0 =
  95. # 10.10.0.0/16.
  96. addrs {
  97. }
  98. }