| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142 | # Section to configure the load-tester plugin, see LOAD TESTS in# strongswan.conf(5) for details.load-tester {    # Whether to keep dynamic addresses even after the associated SA got    # terminated.    # addrs_keep = no    # Network prefix length to use when installing dynamic addresses. If set to    # -1 the full address is used (i.e. 32 or 128).    # addrs_prefix = 16    # Directory to load (intermediate) CA certificates from.    # ca_dir =    # Seconds to start CHILD_SA rekeying after setup.    # child_rekey = 600    # URI to a CRL to include as certificate distribution point in generated    # certificates.    # crl =    # Delay between initiatons for each thread.    # delay = 0    # Delete an IKE_SA as soon as it has been established.    # delete_after_established = no    # Digest algorithm used when issuing certificates.    # digest = sha1    # DPD delay to use in load test.    # dpd_delay = 0    # Base port to be used for requests (each client uses a different port).    # dynamic_port = 0    # EAP secret to use in load test.    # eap_password = default-pwd    # Enable the load testing plugin. WARNING: Never enable this plugin on    # productive systems. It provides preconfigured credentials and allows an    # attacker to authenticate as any user.    # enable = no    # CHILD_SA proposal to use for load tests.    # esp = aes128-sha1    # Fake the kernel interface to allow load-testing against self.    # fake_kernel = no    # Seconds to start IKE_SA rekeying after setup.    # ike_rekey = 0    # Global limit of concurrently established SAs during load test.    # init_limit = 0    # Address to initiate from.    # initiator = 0.0.0.0    # Authentication method(s) the intiator uses.    # initiator_auth = pubkey    # Initiator ID used in load test.    # initiator_id =    # Initiator ID to match against as responder.    # initiator_match =    # Traffic selector on initiator side, as proposed by initiator.    # initiator_tsi =    # Traffic selector on responder side, as proposed by initiator.    # initiator_tsr =    # Number of concurrent initiator threads to use in load test.    # initiators = 0    # Path to the issuer certificate (if not configured a hard-coded default    # value is used).    # issuer_cert =    # Path to private key that is used to issue certificates (if not configured    # a hard-coded default value is used).    # issuer_key =    # Number of IKE_SAs to initiate by each initiator in load test.    # iterations = 1    # Whether to load the plugin. Can also be an integer to increase the    # priority of this plugin.    load = yes    # IPsec mode to use, one of tunnel, transport, or beet.    # mode = tunnel    # Provide INTERNAL_IPV4_ADDRs from a named pool.    # pool =    # Preshared key to use in load test.    # preshared_key = <default-psk>    # IKE proposal to use in load test.    # proposal = aes128-sha1-modp768    # Request an INTERNAL_IPV4_ADDR from the server.    # request_virtual_ip = no    # Address to initiation connections to.    # responder = 127.0.0.1    # Authentication method(s) the responder uses.    # responder_auth = pubkey    # Responder ID used in load test.    # responder_id =    # Traffic selector on initiator side, as narrowed by responder.    # responder_tsi = initiator_tsi    # Traffic selector on responder side, as narrowed by responder.    # responder_tsr = initiator_tsr    # Shutdown the daemon after all IKE_SAs have been established.    # shutdown_when_complete = no    # Socket provided by the load-tester plugin.    # socket = unix://${piddir}/charon.ldt    # IKE version to use (0 means use IKEv2 as initiator and accept any version    # as responder).    # version = 0    # Section that contains key/value pairs with address pools (in CIDR    # notation) to use for a specific network interface e.g. eth0 =    # 10.10.0.0/16.    addrs {    }}
 |