2022-04-18 12:22:39 +02:00
|
|
|
import ./make-test-python.nix ({lib, pkgs, ...}:
|
|
|
|
|
let
|
|
|
|
|
hosts = ''
|
|
|
|
|
192.168.2.101 acme.test
|
|
|
|
|
'';
|
|
|
|
|
|
|
|
|
|
in
|
|
|
|
|
{
|
|
|
|
|
name = "nginx-http3";
|
|
|
|
|
meta.maintainers = with pkgs.lib.maintainers; [ izorkin ];
|
|
|
|
|
|
|
|
|
|
nodes = {
|
|
|
|
|
server = { pkgs, ... }: {
|
|
|
|
|
networking = {
|
|
|
|
|
interfaces.eth1 = {
|
|
|
|
|
ipv4.addresses = [
|
|
|
|
|
{ address = "192.168.2.101"; prefixLength = 24; }
|
|
|
|
|
];
|
|
|
|
|
};
|
|
|
|
|
extraHosts = hosts;
|
|
|
|
|
firewall.allowedTCPPorts = [ 443 ];
|
|
|
|
|
firewall.allowedUDPPorts = [ 443 ];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
security.pki.certificates = [
|
|
|
|
|
(builtins.readFile ./common/acme/server/ca.cert.pem)
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
services.nginx = {
|
|
|
|
|
enable = true;
|
|
|
|
|
package = pkgs.nginxQuic;
|
|
|
|
|
|
|
|
|
|
virtualHosts."acme.test" = {
|
|
|
|
|
onlySSL = true;
|
|
|
|
|
sslCertificate = ./common/acme/server/acme.test.cert.pem;
|
|
|
|
|
sslCertificateKey = ./common/acme/server/acme.test.key.pem;
|
|
|
|
|
http2 = true;
|
|
|
|
|
http3 = true;
|
2023-03-30 21:46:17 +02:00
|
|
|
http3_hq = false;
|
|
|
|
|
quic = true;
|
2022-04-18 12:22:39 +02:00
|
|
|
reuseport = true;
|
2023-03-30 21:46:17 +02:00
|
|
|
root = lib.mkForce (pkgs.runCommandLocal "testdir" {} ''
|
2022-04-18 12:22:39 +02:00
|
|
|
mkdir "$out"
|
|
|
|
|
cat > "$out/index.html" <<EOF
|
|
|
|
|
<html><body>Hello World!</body></html>
|
|
|
|
|
EOF
|
|
|
|
|
cat > "$out/example.txt" <<EOF
|
|
|
|
|
Check http3 protocol.
|
|
|
|
|
EOF
|
|
|
|
|
'');
|
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
client = { pkgs, ... }: {
|
|
|
|
|
environment.systemPackages = [ pkgs.curlHTTP3 ];
|
|
|
|
|
networking = {
|
|
|
|
|
interfaces.eth1 = {
|
|
|
|
|
ipv4.addresses = [
|
|
|
|
|
{ address = "192.168.2.201"; prefixLength = 24; }
|
|
|
|
|
];
|
|
|
|
|
};
|
|
|
|
|
extraHosts = hosts;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
security.pki.certificates = [
|
|
|
|
|
(builtins.readFile ./common/acme/server/ca.cert.pem)
|
|
|
|
|
];
|
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
testScript = ''
|
|
|
|
|
start_all()
|
|
|
|
|
|
2022-06-25 20:31:26 +02:00
|
|
|
server.wait_for_unit("nginx")
|
|
|
|
|
server.wait_for_open_port(443)
|
|
|
|
|
|
2022-04-18 12:22:39 +02:00
|
|
|
# Check http connections
|
2023-05-28 18:55:00 +02:00
|
|
|
client.succeed("curl --verbose --http3-only https://acme.test | grep 'Hello World!'")
|
2022-04-18 12:22:39 +02:00
|
|
|
|
|
|
|
|
# Check downloadings
|
2023-05-28 18:55:00 +02:00
|
|
|
client.succeed("curl --verbose --http3-only https://acme.test/example.txt --output /tmp/example.txt")
|
2022-04-18 12:22:39 +02:00
|
|
|
client.succeed("cat /tmp/example.txt | grep 'Check http3 protocol.'")
|
|
|
|
|
|
|
|
|
|
# Check header reading
|
2023-05-28 18:55:00 +02:00
|
|
|
client.succeed("curl --verbose --http3-only --head https://acme.test | grep 'content-type'")
|
|
|
|
|
client.succeed("curl --verbose --http3-only --head https://acme.test | grep 'HTTP/3 200'")
|
|
|
|
|
client.succeed("curl --verbose --http3-only --head https://acme.test/error | grep 'HTTP/3 404'")
|
2022-04-18 12:22:39 +02:00
|
|
|
|
|
|
|
|
# Check change User-Agent
|
2023-05-28 18:55:00 +02:00
|
|
|
client.succeed("curl --verbose --http3-only --user-agent 'Curl test 3.0' https://acme.test")
|
2022-04-18 12:22:39 +02:00
|
|
|
server.succeed("cat /var/log/nginx/access.log | grep 'Curl test 3.0'")
|
|
|
|
|
|
|
|
|
|
server.shutdown()
|
|
|
|
|
client.shutdown()
|
|
|
|
|
'';
|
|
|
|
|
})
|
