2019-01-02 00:55:51 +00:00
|
|
|
/* SPDX-License-Identifier: MIT
|
2018-05-03 13:04:00 +00:00
|
|
|
*
|
2019-01-02 00:55:51 +00:00
|
|
|
* Copyright (C) 2017-2019 WireGuard LLC. All Rights Reserved.
|
2018-05-03 13:04:00 +00:00
|
|
|
*/
|
|
|
|
|
2018-02-12 21:29:11 +00:00
|
|
|
package ratelimiter
|
2017-07-11 16:48:29 +00:00
|
|
|
|
|
|
|
import (
|
|
|
|
"net"
|
|
|
|
"testing"
|
|
|
|
"time"
|
|
|
|
)
|
|
|
|
|
|
|
|
type RatelimiterResult struct {
|
|
|
|
allowed bool
|
|
|
|
text string
|
|
|
|
wait time.Duration
|
|
|
|
}
|
|
|
|
|
|
|
|
func TestRatelimiter(t *testing.T) {
|
|
|
|
|
|
|
|
var ratelimiter Ratelimiter
|
|
|
|
var expectedResults []RatelimiterResult
|
|
|
|
|
|
|
|
Nano := func(nano int64) time.Duration {
|
|
|
|
return time.Nanosecond * time.Duration(nano)
|
|
|
|
}
|
|
|
|
|
|
|
|
Add := func(res RatelimiterResult) {
|
|
|
|
expectedResults = append(
|
|
|
|
expectedResults,
|
|
|
|
res,
|
|
|
|
)
|
|
|
|
}
|
|
|
|
|
2018-02-11 22:01:55 +00:00
|
|
|
for i := 0; i < packetsBurstable; i++ {
|
2017-07-11 16:48:29 +00:00
|
|
|
Add(RatelimiterResult{
|
|
|
|
allowed: true,
|
|
|
|
text: "inital burst",
|
|
|
|
})
|
|
|
|
}
|
|
|
|
|
|
|
|
Add(RatelimiterResult{
|
|
|
|
allowed: false,
|
|
|
|
text: "after burst",
|
|
|
|
})
|
|
|
|
|
|
|
|
Add(RatelimiterResult{
|
|
|
|
allowed: true,
|
2018-02-11 22:01:55 +00:00
|
|
|
wait: Nano(time.Second.Nanoseconds() / packetsPerSecond),
|
2017-07-11 16:48:29 +00:00
|
|
|
text: "filling tokens for single packet",
|
|
|
|
})
|
|
|
|
|
|
|
|
Add(RatelimiterResult{
|
|
|
|
allowed: false,
|
|
|
|
text: "not having refilled enough",
|
|
|
|
})
|
|
|
|
|
|
|
|
Add(RatelimiterResult{
|
|
|
|
allowed: true,
|
2018-02-11 22:01:55 +00:00
|
|
|
wait: 2 * (Nano(time.Second.Nanoseconds() / packetsPerSecond)),
|
2017-07-11 16:48:29 +00:00
|
|
|
text: "filling tokens for two packet burst",
|
|
|
|
})
|
|
|
|
|
|
|
|
Add(RatelimiterResult{
|
|
|
|
allowed: true,
|
|
|
|
text: "second packet in 2 packet burst",
|
|
|
|
})
|
|
|
|
|
|
|
|
Add(RatelimiterResult{
|
|
|
|
allowed: false,
|
|
|
|
text: "packet following 2 packet burst",
|
|
|
|
})
|
|
|
|
|
|
|
|
ips := []net.IP{
|
|
|
|
net.ParseIP("127.0.0.1"),
|
|
|
|
net.ParseIP("192.168.1.1"),
|
|
|
|
net.ParseIP("172.167.2.3"),
|
|
|
|
net.ParseIP("97.231.252.215"),
|
|
|
|
net.ParseIP("248.97.91.167"),
|
|
|
|
net.ParseIP("188.208.233.47"),
|
|
|
|
net.ParseIP("104.2.183.179"),
|
|
|
|
net.ParseIP("72.129.46.120"),
|
|
|
|
net.ParseIP("2001:0db8:0a0b:12f0:0000:0000:0000:0001"),
|
|
|
|
net.ParseIP("f5c2:818f:c052:655a:9860:b136:6894:25f0"),
|
|
|
|
net.ParseIP("b2d7:15ab:48a7:b07c:a541:f144:a9fe:54fc"),
|
|
|
|
net.ParseIP("a47b:786e:1671:a22b:d6f9:4ab0:abc7:c918"),
|
|
|
|
net.ParseIP("ea1e:d155:7f7a:98fb:2bf5:9483:80f6:5445"),
|
|
|
|
net.ParseIP("3f0e:54a2:f5b4:cd19:a21d:58e1:3746:84c4"),
|
|
|
|
}
|
|
|
|
|
|
|
|
ratelimiter.Init()
|
|
|
|
|
|
|
|
for i, res := range expectedResults {
|
|
|
|
time.Sleep(res.wait)
|
|
|
|
for _, ip := range ips {
|
|
|
|
allowed := ratelimiter.Allow(ip)
|
|
|
|
if allowed != res.allowed {
|
|
|
|
t.Fatal("Test failed for", ip.String(), ", on:", i, "(", res.text, ")", "expected:", res.allowed, "got:", allowed)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|