diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2023-01-11 21:55:15 +0000 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2023-01-11 21:55:15 +0000 |
| commit | a92592c77ed477aff76b59881f68cbc4b2a13112 (patch) | |
| tree | 34975f7b7770bf5a0b53d42b22a24db00cb30021 | |
| parent | f0ff270537676f8473bad957e81746731fc3fd03 (diff) | |
Testsuite: operational notes for TFO
| -rw-r--r-- | test/confs/4060 | 1 | ||||
| -rw-r--r-- | test/scripts/4027-TFO-socks/4027 | 3 | ||||
| -rw-r--r-- | test/scripts/4058-pipe-conn-tfo/4058 | 3 | ||||
| -rw-r--r-- | test/scripts/4068-pipe-conn-gnutls-tfo/4068 | 3 | ||||
| -rw-r--r-- | test/scripts/4069-pipe-conn-openssl-tfo/4069 | 4 |
5 files changed, 14 insertions, 0 deletions
diff --git a/test/confs/4060 b/test/confs/4060 index b6e071202..fa643ae4c 100644 --- a/test/confs/4060 +++ b/test/confs/4060 @@ -6,6 +6,7 @@ OPT= CONNECTCOND= keep_environment = PATH +add_environment = SSLKEYLOGFILE=DIR/spool/sslkeys exim_path = EXIM_PATH host_lookup_order = bydns spool_directory = DIR/spool diff --git a/test/scripts/4027-TFO-socks/4027 b/test/scripts/4027-TFO-socks/4027 index 74045356f..a7412aecd 100644 --- a/test/scripts/4027-TFO-socks/4027 +++ b/test/scripts/4027-TFO-socks/4027 @@ -1,5 +1,8 @@ # socks5 proxy on smtp transport, TCP Fast Open # +# NOTE: ensure that TFO is fully enabled in the kernel. +# For linux: sysctl net.ipv4.tcp_fastopen=3 +# munge loopback # # diff --git a/test/scripts/4058-pipe-conn-tfo/4058 b/test/scripts/4058-pipe-conn-tfo/4058 index 2a0639095..999cfad4a 100644 --- a/test/scripts/4058-pipe-conn-tfo/4058 +++ b/test/scripts/4058-pipe-conn-tfo/4058 @@ -1,5 +1,8 @@ # Early-pipelining, with TFO # +# NOTE: ensure that TFO is fully enabled in the kernel. +# For linux: sysctl net.ipv4.tcp_fastopen=3 +# # # Packet delays so we can see TFO operational in packet captures # Wipe any stored TFO cookie, to start from known state. diff --git a/test/scripts/4068-pipe-conn-gnutls-tfo/4068 b/test/scripts/4068-pipe-conn-gnutls-tfo/4068 index 9a454391a..4e9dfa500 100644 --- a/test/scripts/4068-pipe-conn-gnutls-tfo/4068 +++ b/test/scripts/4068-pipe-conn-gnutls-tfo/4068 @@ -1,5 +1,8 @@ # early-pipe, starttls, tfo # +# NOTE: ensure that TFO is fully enabled in the kernel. +# For linux: sysctl net.ipv4.tcp_fastopen=3 +# # Not attempted without a cache entry exim -bd -DSERVER=server -oX PORT_D **** diff --git a/test/scripts/4069-pipe-conn-openssl-tfo/4069 b/test/scripts/4069-pipe-conn-openssl-tfo/4069 index 2339b0c12..41ec3a5ae 100644 --- a/test/scripts/4069-pipe-conn-openssl-tfo/4069 +++ b/test/scripts/4069-pipe-conn-openssl-tfo/4069 @@ -1,9 +1,13 @@ # early-pipe, starttls, tfo # +# NOTE: ensure that TFO is fully enabled in the kernel. +# For linux: sysctl net.ipv4.tcp_fastopen=3 +# # Network delay so we can see tfo efects # Clear any previously-obtained tfo cookie: sudo perl system ("tc qdisc add dev lo root netem delay 50ms"); +system ("[ -e /proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec ] && echo 0 > /proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec"); system ("ip tcp_metrics delete 127.0.0.1"); **** # |