| # Licensed to the Apache Software Foundation (ASF) under one |
| # or more contributor license agreements. See the NOTICE file |
| # distributed with this work for additional information |
| # regarding copyright ownership. The ASF licenses this file |
| # to you under the Apache License, Version 2.0 (the |
| # "License"); you may not use this file except in compliance |
| # with the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| import os |
| |
| Test.Summary = ''' |
| Test PUSHing an object into the cache and the GETting it with a few variations on the client connection protocol. |
| ''' |
| |
| # NOTE: You can also use this to test client-side communication when GET-ing very large (multi-GB) objects |
| # by increasing the value of the obj_kilobytes variable below. (But do not increase it on any shared branch |
| # that we do CI runs on.) |
| |
| Test.SkipUnless(Condition.HasCurlFeature('http2')) |
| |
| ts = Test.MakeATSProcess("ts1", enable_tls=True) |
| ts.addDefaultSSLFiles() |
| |
| ts.Disk.records_config.update( |
| { |
| 'proxy.config.diags.debug.enabled': 1, |
| 'proxy.config.diags.debug.tags': 'http|dns|cache', |
| 'proxy.config.http.cache.required_headers': 0, # No required headers for caching |
| 'proxy.config.http.push_method_enabled': 1, |
| 'proxy.config.proxy_name': 'Poxy_Proxy', # This will be the server name. |
| 'proxy.config.ssl.server.cert.path': ts.Variables.SSLDir, |
| 'proxy.config.ssl.server.private_key.path': ts.Variables.SSLDir, |
| 'proxy.config.url_remap.remap_required': 0 |
| }) |
| |
| ts.Disk.ssl_multicert_yaml.AddLines( |
| """ |
| ssl_multicert: |
| - dest_ip: "*" |
| ssl_cert_name: server.pem |
| ssl_key_name: server.key |
| """.split("\n")) |
| |
| ts.Disk.remap_config.AddLine(f'map https://localhost:{ts.Variables.ssl_port} http://localhost:{ts.Variables.port}') |
| ts.Disk.remap_config.AddLine(f'map https://localhost:{ts.Variables.ssl_portv6} http://localhost:{ts.Variables.port}') |
| |
| # Size of object to get. (NOTE: If you increase this significantly you may also have to increase cache |
| # capacity in tests/gold_tests/autest-size/min_cfg/storage.yaml. Also, for very large objects, if |
| # proxy.config.diags.debug.enabled is 1, the PUSH request will timeout and fail.) |
| # |
| obj_kilobytes = 10 * 1024 |
| obj_bytes = obj_kilobytes * 10 |
| header = "HTTP/1.1 200 OK\r\nContent-length: {}\r\n\r\n".format(obj_bytes) |
| |
| |
| def create_pushfile(): |
| f = open(Test.RunDirectory + "/objfile", "w") |
| f.write(header) |
| f.write("x" * obj_bytes) |
| f.close() |
| return True |
| |
| |
| ipv4flag = "" |
| if not Condition.CurlUsingUnixDomainSocket(): |
| ipv4flag = "--ipv4" |
| |
| tr = Test.AddTestRun("PUSH an object to the cache") |
| # Delay on readiness of TS IPv4 ssl port |
| tr.Processes.Default.StartBefore(ts, ready=lambda: create_pushfile()) |
| # Put object with URL http://localhost/bigobj in cache using PUSH request. |
| tr.MakeCurlCommand( |
| "-v -H 'Content-Type: application/octet-stream' --data-binary @{}/objfile -X PUSH http://localhost:{}/bigobj -H 'Content-Length:{}'" |
| .format(Test.RunDirectory, ts.Variables.port, |
| len(header) + obj_bytes), |
| ts=ts) |
| tr.Processes.Default.ReturnCode = 0 |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("HTTP/1.1 201 Created", "The PUSH request should have succeeded") |
| |
| tr = Test.AddTestRun("GET bigobj: cleartext, HTTP/1.1, IPv4") |
| tr.MakeCurlCommand(f'--verbose {ipv4flag} --http1.1 http://localhost:{ts.Variables.port}/bigobj', ts=ts) |
| tr.Processes.Default.ReturnCode = 0 |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("HTTP/1.1 200 OK", "Should fetch pushed object") |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("Content-length: 102400", "Content size should be accurate") |
| |
| if not Condition.CurlUsingUnixDomainSocket(): |
| tr = Test.AddTestRun("GET bigobj: TLS, HTTP/1.1, IPv4") |
| tr.MakeCurlCommand(f'--verbose --ipv4 --http1.1 --insecure https://localhost:{ts.Variables.ssl_port}/bigobj', ts=ts) |
| tr.Processes.Default.ReturnCode = 0 |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("HTTP/1.1 200 OK", "Should fetch pushed object") |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("Content-length: 102400", "Content size should be accurate") |
| |
| tr = Test.AddTestRun("GET bigobj: TLS, HTTP/2, IPv4") |
| tr.MakeCurlCommand(f'--verbose --ipv4 --http2 --insecure https://localhost:{ts.Variables.ssl_port}/bigobj', ts=ts) |
| tr.Processes.Default.ReturnCode = 0 |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("HTTP/2 200", "Should fetch pushed object") |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("content-length: 102400", "Content size should be accurate") |
| |
| tr = Test.AddTestRun("GET bigobj: TLS, HTTP/2, IPv6") |
| tr.MakeCurlCommand(f'--verbose --ipv6 --http2 --insecure https://localhost:{ts.Variables.ssl_portv6}/bigobj', ts=ts) |
| tr.Processes.Default.ReturnCode = 0 |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("HTTP/2 200", "Should fetch pushed object") |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression("content-length: 102400", "Content size should be accurate") |
| |
| # Verify that PUSH requests are rejected when push_method_enabled is 0 (the |
| # default configuration). |
| ts = Test.MakeATSProcess("ts2", enable_tls=True) |
| ts.addDefaultSSLFiles() |
| |
| ts.Disk.records_config.update( |
| { |
| 'proxy.config.diags.debug.enabled': 1, |
| 'proxy.config.diags.debug.tags': 'http|dns|cache', |
| 'proxy.config.http.cache.required_headers': 0, # No required headers for caching |
| 'proxy.config.proxy_name': 'Poxy_Proxy', # This will be the server name. |
| 'proxy.config.ssl.server.cert.path': ts.Variables.SSLDir, |
| 'proxy.config.ssl.server.private_key.path': ts.Variables.SSLDir, |
| 'proxy.config.url_remap.remap_required': 0 |
| }) |
| |
| ts.Disk.ssl_multicert_yaml.AddLines( |
| """ |
| ssl_multicert: |
| - dest_ip: "*" |
| ssl_cert_name: server.pem |
| ssl_key_name: server.key |
| """.split("\n")) |
| |
| ts.Disk.remap_config.AddLine(f'map https://localhost:{ts.Variables.ssl_port} http://localhost:{ts.Variables.port}') |
| ts.Disk.remap_config.AddLine(f'map https://localhost:{ts.Variables.ssl_portv6} http://localhost:{ts.Variables.port}') |
| |
| tr = Test.AddTestRun("PUSH request is rejected when push_method_enabled is 0") |
| tr.Processes.Default.StartBefore(ts) |
| tr.MakeCurlCommand( |
| "-v -H 'Content-Type: application/octet-stream' --data-binary @{}/objfile -X PUSH http://localhost:{}/bigobj -H 'Content-Length:{}'" |
| .format(Test.RunDirectory, ts.Variables.port, |
| len(header) + obj_bytes), |
| ts=ts) |
| tr.Processes.Default.ReturnCode = 0 |
| tr.Processes.Default.Streams.All = Testers.ContainsExpression( |
| "403 Access Denied", "The PUSH request should have received a 403 response.") |