parent
88d05579ad
commit
6e8e1faabe
@ -0,0 +1,90 @@ |
||||
import ./make-test-python.nix ({lib, pkgs, ...}: |
||||
let |
||||
hosts = '' |
||||
192.168.2.101 acme.test |
||||
''; |
||||
|
||||
in |
||||
{ |
||||
name = "nginx-http3"; |
||||
meta.maintainers = with pkgs.lib.maintainers; [ izorkin ]; |
||||
|
||||
nodes = { |
||||
server = { pkgs, ... }: { |
||||
networking = { |
||||
interfaces.eth1 = { |
||||
ipv4.addresses = [ |
||||
{ address = "192.168.2.101"; prefixLength = 24; } |
||||
]; |
||||
}; |
||||
extraHosts = hosts; |
||||
firewall.allowedTCPPorts = [ 443 ]; |
||||
firewall.allowedUDPPorts = [ 443 ]; |
||||
}; |
||||
|
||||
security.pki.certificates = [ |
||||
(builtins.readFile ./common/acme/server/ca.cert.pem) |
||||
]; |
||||
|
||||
services.nginx = { |
||||
enable = true; |
||||
package = pkgs.nginxQuic; |
||||
|
||||
virtualHosts."acme.test" = { |
||||
onlySSL = true; |
||||
sslCertificate = ./common/acme/server/acme.test.cert.pem; |
||||
sslCertificateKey = ./common/acme/server/acme.test.key.pem; |
||||
http2 = true; |
||||
http3 = true; |
||||
reuseport = true; |
||||
root = lib.mkForce (pkgs.runCommandLocal "testdir2" {} '' |
||||
mkdir "$out" |
||||
cat > "$out/index.html" <<EOF |
||||
<html><body>Hello World!</body></html> |
||||
EOF |
||||
cat > "$out/example.txt" <<EOF |
||||
Check http3 protocol. |
||||
EOF |
||||
''); |
||||
}; |
||||
}; |
||||
}; |
||||
|
||||
client = { pkgs, ... }: { |
||||
environment.systemPackages = [ pkgs.curlHTTP3 ]; |
||||
networking = { |
||||
interfaces.eth1 = { |
||||
ipv4.addresses = [ |
||||
{ address = "192.168.2.201"; prefixLength = 24; } |
||||
]; |
||||
}; |
||||
extraHosts = hosts; |
||||
}; |
||||
|
||||
security.pki.certificates = [ |
||||
(builtins.readFile ./common/acme/server/ca.cert.pem) |
||||
]; |
||||
}; |
||||
}; |
||||
|
||||
testScript = '' |
||||
start_all() |
||||
|
||||
# Check http connections |
||||
client.succeed("curl --verbose --http3 https://acme.test | grep 'Hello World!'") |
||||
|
||||
# Check downloadings |
||||
client.succeed("curl --verbose --http3 https://acme.test/example.txt --output /tmp/example.txt") |
||||
client.succeed("cat /tmp/example.txt | grep 'Check http3 protocol.'") |
||||
|
||||
# Check header reading |
||||
client.succeed("curl --verbose --http3 --head https://acme.test | grep 'content-type'") |
||||
|
||||
# Check change User-Agent |
||||
client.succeed("curl --verbose --http3 --user-agent 'Curl test 3.0' https://acme.test") |
||||
server.succeed("cat /var/log/nginx/access.log | grep 'Curl test 3.0'") |
||||
|
||||
server.shutdown() |
||||
client.shutdown() |
||||
''; |
||||
}) |
Loading…
Reference in new issue