Mercurial > hg > nginx-tests
view quic_migration.t @ 1940:aec72dcee93b
Tests: unconditional QUIC datagram expansion with Initial packets.
Used to get rid of "quic UDP datagram is too small for initial packet" messages.
In future, we may need this to reconsider to allow mocking with custom padding,
but for now suppressing such messages is sufficiently good enough.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Mon, 11 Dec 2023 14:01:49 +0400 |
parents | b68471aee5ad |
children | 00124c7d0ef1 |
line wrap: on
line source
#!/usr/bin/perl # (C) Sergey Kandaurov # (C) Nginx, Inc. # Tests for quic connection migration. ############################################################################### use warnings; use strict; use Test::More; BEGIN { use FindBin; chdir($FindBin::Bin); } use lib 'lib'; use Test::Nginx; use Test::Nginx::HTTP3; ############################################################################### select STDERR; $| = 1; select STDOUT; $| = 1; plan(skip_all => '127.0.0.20 local address required') unless defined IO::Socket::INET->new( LocalAddr => '127.0.0.20' ); my $t = Test::Nginx->new()->has(qw/http http_v3 cryptx/) ->has_daemon('openssl')->plan(2); $t->write_file_expand('nginx.conf', <<'EOF'); %%TEST_GLOBALS%% daemon off; events { } http { %%TEST_GLOBALS_HTTP%% ssl_certificate_key localhost.key; ssl_certificate localhost.crt; server { listen 127.0.0.1:%%PORT_8980_UDP%% quic; server_name localhost; location / { add_header X-IP $remote_addr; } } } EOF $t->write_file('openssl.conf', <<EOF); [ req ] default_bits = 2048 encrypt_key = no distinguished_name = req_distinguished_name [ req_distinguished_name ] EOF my $d = $t->testdir(); foreach my $name ('localhost') { system('openssl req -x509 -new ' . "-config $d/openssl.conf -subj /CN=$name/ " . "-out $d/$name.crt -keyout $d/$name.key " . ">>$d/openssl.out 2>&1") == 0 or die "Can't create certificate for $name: $!\n"; } $t->write_file('index.html', ''); $t->run(); ############################################################################### # test that $remote_addr is not truncated after migration (ticket #2488), # to test, we migrate to another address large enough in text representation, # then send a request on the new path my $s = Test::Nginx::HTTP3->new(); $s->new_connection_id(1, 0, "connection_id_1", "reset_token_0001"); my $frames = $s->read(all => [{ type => 'NCID' }]); my ($frame) = grep { $_->{type} eq "NCID" } @$frames; $s->{socket} = IO::Socket::INET->new( Proto => "udp", LocalAddr => '127.0.0.20', PeerAddr => '127.0.0.1:' . port(8980), ); $s->{scid} = "connection_id_1"; $s->{dcid} = $frame->{cid}; $s->ping(); $frames = $s->read(all => [{ type => 'PATH_CHALLENGE' }]); ($frame) = grep { $_->{type} eq "PATH_CHALLENGE" } @$frames; $s->path_response($frame->{data}); $frames = $s->read(all => [{ sid => $s->new_stream(), fin => 1 }]); ($frame) = grep { $_->{type} eq "HEADERS" } @$frames; is($frame->{headers}{'x-ip'}, '127.0.0.20', 'remote addr after migration'); # test that $remote_addr is not truncated while in the process of migration; # the same but migration occurs on receiving a request stream itself, # which is the first non-probing frame on the new path; # this might lead to $remote_addr truncation in the following order: # - stream held original sockaddr/addr_text references on stream creation # - values were rewritten as part of handling connection migration # - stream was handled referencing rewritten values, with old local lengths # sockaddr and addr_text are expected to keep copies on stream creation $s = Test::Nginx::HTTP3->new(); $s->new_connection_id(1, 0, "connection_id_1", "reset_token_0001"); $frames = $s->read(all => [{ type => 'NCID' }]); ($frame) = grep { $_->{type} eq "NCID" } @$frames; $s->{socket} = IO::Socket::INET->new( Proto => "udp", LocalAddr => '127.0.0.20', PeerAddr => '127.0.0.1:' . port(8980), ); $s->{scid} = "connection_id_1"; $s->{dcid} = $frame->{cid}; my $sid = $s->new_stream(); $frames = $s->read(all => [{ type => 'PATH_CHALLENGE' }]); ($frame) = grep { $_->{type} eq "PATH_CHALLENGE" } @$frames; $s->path_response($frame->{data}); $frames = $s->read(all => [{ sid => $sid, fin => 1 }]); ($frame) = grep { $_->{type} eq "HEADERS" } @$frames; is($frame->{headers}{'x-ip'}, '127.0.0.1', 'remote addr on migration'); ###############################################################################