mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-02 23:31:08 +08:00
77 lines
2.9 KiB
Go
77 lines
2.9 KiB
Go
/*
|
|
Copyright 2021 Gravitational, Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package alpnproxyauth
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/gravitational/teleport/lib/observability/tracing"
|
|
)
|
|
|
|
func TestDialLocalAuthServerNoServers(t *testing.T) {
|
|
s := NewAuthProxyDialerService(nil /* reverseTunnelServer */, "clustername", nil /* authServers */, nil, nil, tracing.NoopTracer("test"))
|
|
_, err := s.dialLocalAuthServer(context.Background(), nil, nil)
|
|
require.Error(t, err, "dialLocalAuthServer expected to fail")
|
|
require.Equal(t, "empty auth servers list", err.Error())
|
|
}
|
|
|
|
func TestDialLocalAuthServerNoAvailableServers(t *testing.T) {
|
|
// The 203.0.113.0/24 range is part of block TEST-NET-3 as defined in RFC-5735 (https://www.rfc-editor.org/rfc/rfc5735).
|
|
// IPs in this range do not appear on the public internet.
|
|
s := NewAuthProxyDialerService(nil /* reverseTunnelServer */, "clustername", []string{"203.0.113.1:3025"}, nil, nil, tracing.NoopTracer("test"))
|
|
ctx, cancel := context.WithTimeout(context.Background(), 500*time.Millisecond)
|
|
t.Cleanup(cancel)
|
|
_, err := s.dialLocalAuthServer(ctx, nil, nil)
|
|
require.Error(t, err, "dialLocalAuthServer expected to fail")
|
|
var netErr *net.OpError
|
|
require.ErrorAs(t, err, &netErr)
|
|
require.Equal(t, "dial", netErr.Op)
|
|
require.Equal(t, "203.0.113.1:3025", netErr.Addr.String())
|
|
}
|
|
|
|
func TestDialLocalAuthServerAvailableServers(t *testing.T) {
|
|
socket, err := net.Listen("tcp", "127.0.0.1:")
|
|
require.NoError(t, err)
|
|
t.Cleanup(func() { require.NoError(t, socket.Close()) })
|
|
|
|
authServers := make([]string, 1, 11)
|
|
authServers[0] = socket.Addr().String()
|
|
// multiple invalid servers to minimize chance that we select good one first try
|
|
for i := 0; i < 10; i++ {
|
|
// The 203.0.113.0/24 range is part of block TEST-NET-3 as defined in RFC-5735 (https://www.rfc-editor.org/rfc/rfc5735).
|
|
// IPs in this range do not appear on the public internet.
|
|
authServers = append(authServers, fmt.Sprintf("203.0.113.%d:3025", i+1))
|
|
}
|
|
s := NewAuthProxyDialerService(nil /* reverseTunnelServer */, "clustername", authServers, nil, nil, tracing.NoopTracer("test"))
|
|
require.Eventually(t, func() bool {
|
|
ctx, cancel := context.WithTimeout(context.Background(), 50*time.Millisecond)
|
|
t.Cleanup(cancel)
|
|
conn, err := s.dialLocalAuthServer(ctx, nil, nil)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
conn.Close()
|
|
return true
|
|
}, 5*time.Second, 10*time.Millisecond)
|
|
}
|