|
@@ -124,23 +124,10 @@ func TestSSH(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "SSH",
|
|
tunnelProtocol: "SSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -150,23 +137,10 @@ func TestOSSH(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -176,23 +150,11 @@ func TestFragmentedOSSH(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
forceFragmenting: true,
|
|
forceFragmenting: true,
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -202,24 +164,11 @@ func TestPrefixedOSSH(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
applyPrefix: true,
|
|
applyPrefix: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -229,23 +178,10 @@ func TestUnfrontedMeek(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "UNFRONTED-MEEK-OSSH",
|
|
tunnelProtocol: "UNFRONTED-MEEK-OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -255,23 +191,11 @@ func TestFragmentedUnfrontedMeek(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "UNFRONTED-MEEK-OSSH",
|
|
tunnelProtocol: "UNFRONTED-MEEK-OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
forceFragmenting: true,
|
|
forceFragmenting: true,
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -282,23 +206,10 @@ func TestUnfrontedMeekHTTPS(t *testing.T) {
|
|
|
tunnelProtocol: "UNFRONTED-MEEK-HTTPS-OSSH",
|
|
tunnelProtocol: "UNFRONTED-MEEK-HTTPS-OSSH",
|
|
|
tlsProfile: protocol.TLS_PROFILE_RANDOMIZED,
|
|
tlsProfile: protocol.TLS_PROFILE_RANDOMIZED,
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -309,23 +220,11 @@ func TestFragmentedUnfrontedMeekHTTPS(t *testing.T) {
|
|
|
tunnelProtocol: "UNFRONTED-MEEK-HTTPS-OSSH",
|
|
tunnelProtocol: "UNFRONTED-MEEK-HTTPS-OSSH",
|
|
|
tlsProfile: protocol.TLS_PROFILE_RANDOMIZED,
|
|
tlsProfile: protocol.TLS_PROFILE_RANDOMIZED,
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
forceFragmenting: true,
|
|
forceFragmenting: true,
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -336,23 +235,10 @@ func TestUnfrontedMeekHTTPSTLS13(t *testing.T) {
|
|
|
tunnelProtocol: "UNFRONTED-MEEK-HTTPS-OSSH",
|
|
tunnelProtocol: "UNFRONTED-MEEK-HTTPS-OSSH",
|
|
|
tlsProfile: protocol.TLS_PROFILE_CHROME_70,
|
|
tlsProfile: protocol.TLS_PROFILE_CHROME_70,
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -363,23 +249,10 @@ func TestUnfrontedMeekSessionTicket(t *testing.T) {
|
|
|
tunnelProtocol: "UNFRONTED-MEEK-SESSION-TICKET-OSSH",
|
|
tunnelProtocol: "UNFRONTED-MEEK-SESSION-TICKET-OSSH",
|
|
|
tlsProfile: protocol.TLS_PROFILE_CHROME_58,
|
|
tlsProfile: protocol.TLS_PROFILE_CHROME_58,
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -390,23 +263,10 @@ func TestUnfrontedMeekSessionTicketTLS13(t *testing.T) {
|
|
|
tunnelProtocol: "UNFRONTED-MEEK-SESSION-TICKET-OSSH",
|
|
tunnelProtocol: "UNFRONTED-MEEK-SESSION-TICKET-OSSH",
|
|
|
tlsProfile: protocol.TLS_PROFILE_CHROME_70,
|
|
tlsProfile: protocol.TLS_PROFILE_CHROME_70,
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -419,23 +279,9 @@ func TestQUICOSSH(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "QUIC-OSSH",
|
|
tunnelProtocol: "QUIC-OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -448,23 +294,10 @@ func TestLimitedQUICOSSH(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "QUIC-OSSH",
|
|
tunnelProtocol: "QUIC-OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
limitQUICVersions: true,
|
|
limitQUICVersions: true,
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -473,24 +306,9 @@ func TestWebTransportAPIRequests(t *testing.T) {
|
|
|
runServer(t,
|
|
runServer(t,
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
- enableSSHAPIRequests: false,
|
|
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
- requireAuthorization: false,
|
|
|
|
|
omitAuthorization: true,
|
|
omitAuthorization: true,
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -501,22 +319,9 @@ func TestHotReload(t *testing.T) {
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
doHotReload: true,
|
|
doHotReload: true,
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -528,21 +333,9 @@ func TestDefaultSponsorID(t *testing.T) {
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
doHotReload: true,
|
|
doHotReload: true,
|
|
|
doDefaultSponsorID: true,
|
|
doDefaultSponsorID: true,
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -553,22 +346,10 @@ func TestDenyTrafficRules(t *testing.T) {
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
doHotReload: true,
|
|
doHotReload: true,
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
denyTrafficRules: true,
|
|
denyTrafficRules: true,
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -579,22 +360,10 @@ func TestOmitAuthorization(t *testing.T) {
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
doHotReload: true,
|
|
doHotReload: true,
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
omitAuthorization: true,
|
|
omitAuthorization: true,
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -605,22 +374,9 @@ func TestNoAuthorization(t *testing.T) {
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
doHotReload: true,
|
|
doHotReload: true,
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
- requireAuthorization: false,
|
|
|
|
|
omitAuthorization: true,
|
|
omitAuthorization: true,
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -631,22 +387,8 @@ func TestUnusedAuthorization(t *testing.T) {
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
doHotReload: true,
|
|
doHotReload: true,
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
- requireAuthorization: false,
|
|
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -656,23 +398,8 @@ func TestTCPOnlySLOK(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
- doTunneledNTPRequest: false,
|
|
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -682,23 +409,8 @@ func TestUDPOnlySLOK(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
- doTunneledWebRequest: false,
|
|
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -708,23 +420,10 @@ func TestLivenessTest(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
forceLivenessTest: true,
|
|
forceLivenessTest: true,
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -734,23 +433,11 @@ func TestPruneServerEntries(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
forceLivenessTest: true,
|
|
forceLivenessTest: true,
|
|
|
doPruneServerEntries: true,
|
|
doPruneServerEntries: true,
|
|
|
- doDanglingTCPConn: false,
|
|
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -760,23 +447,12 @@ func TestBurstMonitorAndDestinationBytes(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
doBurstMonitor: true,
|
|
doBurstMonitor: true,
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
doDestinationBytes: true,
|
|
doDestinationBytes: true,
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -786,21 +462,10 @@ func TestChangeBytesConfig(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
- doSplitTunnel: false,
|
|
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
doDestinationBytes: true,
|
|
doDestinationBytes: true,
|
|
|
doChangeBytesConfig: true,
|
|
doChangeBytesConfig: true,
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
@@ -812,23 +477,11 @@ func TestSplitTunnel(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
doSplitTunnel: true,
|
|
doSplitTunnel: true,
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
doLogHostProvider: true,
|
|
doLogHostProvider: true,
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
@@ -838,24 +491,11 @@ func TestOmitProvider(t *testing.T) {
|
|
|
&runServerConfig{
|
|
&runServerConfig{
|
|
|
tunnelProtocol: "OSSH",
|
|
tunnelProtocol: "OSSH",
|
|
|
enableSSHAPIRequests: true,
|
|
enableSSHAPIRequests: true,
|
|
|
- doHotReload: false,
|
|
|
|
|
- doDefaultSponsorID: false,
|
|
|
|
|
- denyTrafficRules: false,
|
|
|
|
|
requireAuthorization: true,
|
|
requireAuthorization: true,
|
|
|
- omitAuthorization: false,
|
|
|
|
|
doTunneledWebRequest: true,
|
|
doTunneledWebRequest: true,
|
|
|
doTunneledNTPRequest: true,
|
|
doTunneledNTPRequest: true,
|
|
|
- forceFragmenting: false,
|
|
|
|
|
- forceLivenessTest: false,
|
|
|
|
|
- doPruneServerEntries: false,
|
|
|
|
|
doDanglingTCPConn: true,
|
|
doDanglingTCPConn: true,
|
|
|
- doPacketManipulation: false,
|
|
|
|
|
- doBurstMonitor: false,
|
|
|
|
|
doSplitTunnel: true,
|
|
doSplitTunnel: true,
|
|
|
- limitQUICVersions: false,
|
|
|
|
|
- doDestinationBytes: false,
|
|
|
|
|
- doChangeBytesConfig: false,
|
|
|
|
|
- doLogHostProvider: false,
|
|
|
|
|
})
|
|
})
|
|
|
}
|
|
}
|
|
|
|
|
|