6366ebc17e
Instead of sharing the NTP rate limiting with NTS-KE, specify a new service for NTS-KE and use it in the NTS-KE server. Add ntsratelimit directive for configuration.
94 lines
2.4 KiB
C
94 lines
2.4 KiB
C
/*
|
|
**********************************************************************
|
|
* Copyright (C) Miroslav Lichvar 2016
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of version 2 of the GNU General Public License as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*
|
|
**********************************************************************
|
|
*/
|
|
|
|
#include <config.h>
|
|
#include "test.h"
|
|
|
|
#if defined(FEAT_NTP) || defined(FEAT_CMDMON)
|
|
|
|
#include <clientlog.c>
|
|
|
|
void
|
|
test_unit(void)
|
|
{
|
|
int i, j, index;
|
|
CLG_Service s;
|
|
struct timespec ts;
|
|
IPAddr ip;
|
|
char conf[][100] = {
|
|
"clientloglimit 10000",
|
|
"ratelimit interval 3 burst 4 leak 3",
|
|
"cmdratelimit interval 3 burst 4 leak 3",
|
|
"ntsratelimit interval 6 burst 8 leak 3",
|
|
};
|
|
|
|
CNF_Initialise(0, 0);
|
|
for (i = 0; i < sizeof conf / sizeof conf[0]; i++)
|
|
CNF_ParseLine(NULL, i + 1, conf[i]);
|
|
|
|
CLG_Initialise();
|
|
|
|
TEST_CHECK(ARR_GetSize(records) == 16);
|
|
|
|
for (i = 0; i < 500; i++) {
|
|
DEBUG_LOG("iteration %d", i);
|
|
|
|
ts.tv_sec = (time_t)random() & 0x0fffffff;
|
|
ts.tv_nsec = 0;
|
|
|
|
for (j = 0; j < 1000; j++) {
|
|
TST_GetRandomAddress(&ip, IPADDR_UNSPEC, i % 8 ? -1 : i / 8 % 9);
|
|
DEBUG_LOG("address %s", UTI_IPToString(&ip));
|
|
|
|
s = random() % MAX_SERVICES;
|
|
index = CLG_LogServiceAccess(s, &ip, &ts);
|
|
TEST_CHECK(index >= 0);
|
|
CLG_LimitServiceRate(s, index);
|
|
|
|
UTI_AddDoubleToTimespec(&ts, (1 << random() % 14) / 100.0, &ts);
|
|
}
|
|
}
|
|
|
|
DEBUG_LOG("records %u", ARR_GetSize(records));
|
|
TEST_CHECK(ARR_GetSize(records) == 64);
|
|
|
|
s = CLG_NTP;
|
|
|
|
for (i = j = 0; i < 10000; i++) {
|
|
ts.tv_sec += 1;
|
|
index = CLG_LogServiceAccess(s, &ip, &ts);
|
|
TEST_CHECK(index >= 0);
|
|
if (!CLG_LimitServiceRate(s, index))
|
|
j++;
|
|
}
|
|
|
|
DEBUG_LOG("requests %d responses %d", i, j);
|
|
TEST_CHECK(j * 4 < i && j * 6 > i);
|
|
|
|
CLG_Finalise();
|
|
CNF_Finalise();
|
|
}
|
|
#else
|
|
void
|
|
test_unit(void)
|
|
{
|
|
TEST_REQUIRE(0);
|
|
}
|
|
#endif
|