mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 22:15:20 +00:00
Code Issues Releases Wiki Activity

Tune the performance of the jitter test

Browse Source
This commit is contained in:
Ondřej Surý
2019-11-21 00:05:58 +08:00
parent 434c4e99f3
commit ffb7ae8beb
2 changed files with 10 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bin/tests/system/autosign/ns3/named.conf.in
View File

@@ -101,6 +101,8 @@ zone "jitter.nsec3.example" {
allow-update { any; }; allow-update { any; };
auto-dnssec maintain; auto-dnssec maintain;
sig-validity-interval 10 2; sig-validity-interval 10 2;
sig-signing-nodes 1000;
sig-signing-signatures 100;
}; };
zone "secure.nsec3.example" { zone "secure.nsec3.example" {

21
bin/tests/system/autosign/tests.sh
View File

@@ -103,7 +103,7 @@ checkjitter () {
_low=$((_mean-_limit)) _low=$((_mean-_limit))
_high=$((_mean+_limit)) _high=$((_mean+_limit))
# Find outliers. # Find outliers.
echo_i "checking whether all frequencies falls into <$_low;$_high> interval" echo_i "checking whether all frequencies fall into <$_low;$_high> range"
for _num in $_expiretimes for _num in $_expiretimes
do do
if [ $_num -gt $_high ] || [ $_num -lt $_low ]; then if [ $_num -gt $_high ] || [ $_num -lt $_low ]; then
@@ -1027,19 +1027,14 @@ $KEYGEN -a rsasha1 -3 -q -K ns3 jitter.nsec3.example > /dev/null
# Trigger zone signing. # Trigger zone signing.
$RNDCCMD 10.53.0.3 sign jitter.nsec3.example. 2>&1 | sed 's/^/ns3 /' | cat_i $RNDCCMD 10.53.0.3 sign jitter.nsec3.example. 2>&1 | sed 's/^/ns3 /' | cat_i
# Wait until zone has been signed. # Wait until zone has been signed.
i=0 check_if_nsec3param_exists() {
while [ "$i" -lt 20 ]; do $DIG $DIGOPTS NSEC3PARAM jitter.nsec3.example @10.53.0.3 > dig.out.ns3.1.test$n || return 1
failed=0 grep -q "^jitter\.nsec3\.example\..*NSEC3PARAM" dig.out.ns3.1.test$n || return 1
$DIG $DIGOPTS axfr jitter.nsec3.example @10.53.0.3 > dig.out.ns3.test$n || failed=1 }
grep "NSEC3PARAM" dig.out.ns3.test$n > /dev/null || failed=1 retry_quiet 20 check_if_nsec3param_exists || ret=1
[ $failed -eq 0 ] && break $DIG $DIGOPTS AXFR jitter.nsec3.example @10.53.0.3 > dig.out.ns3.2.test$n || ret=1
echo_i "waiting ... ($i)"
sleep $((i/5))
i=$((i+1))
done
[ $failed != 0 ] && echo_i "error: no NSEC3PARAM found in AXFR" && ret=1
# Check jitter distribution. # Check jitter distribution.
checkjitter dig.out.ns3.test$n || ret=1 checkjitter dig.out.ns3.2.test$n || ret=1
n=`expr $n + 1` n=`expr $n + 1`
if [ $ret != 0 ]; then echo_i "failed"; fi if [ $ret != 0 ]; then echo_i "failed"; fi
status=`expr $status + $ret` status=`expr $status + $ret`