From morakhad at cisco.com Wed Sep 21 19:45:48 2011 From: morakhad at cisco.com (Mohammed Rakhada) Date: Wed, 21 Sep 2011 20:45:48 +0100 Subject: Problems with SSL via Proxy Message-ID: <1316634348.23945.23.camel@localhost> Hello, I am having trouble trying to use Web Polygraph with a Proxy. I seem to have tracked it down to Web Polygraph not sending a Host Header with the request and so the Proxy rejects the connections. I have captured the network traffic during this to see what is happening and I can see that for a request sent from my browser the Host Header is sent but not when a request comes from Web Polygraph. >From Web Polygraph to Proxy: CONNECT 192.168.29.104:443 HTTP/1.1 Proxy-Connection: close >From Browser to Proxy: CONNECT 192.168.29.104:443 HTTP/1.1 User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.22) Gecko/20110905 Ubuntu/10.04 (lucid) Firefox/3.6.22 Proxy-Connection: keep-alive Host: 192.168.29.104 Here is an extract from my polygraph.pg file so you can see what I am trying to do. Is there some configuration missing? Been stuck on this problem for a while, originally had a problem trying to jsut run basic SSL tests. When going direct from Client to Server (no proxy involved), web-polygraph runs fine. If you require any further information please do let me know. I am running v 4.4.0. SslWrap wrap = { protocols = [ "SSLv3", "TLSv1" ]; root_certificate = "/opt/home/user/CA-priv+pub.pem"; ciphers = [ "ALL:HIGH: !SSLv2: !aNULL: !AES128-SHA: !AES256-SHA:": 100% ]; rsa_key_sizes = [ 512bit, 1024bit, 2048bit ]; ssl_config_file = "/opt/home/user/myssl.conf"; session_resumption = 40%; session_cache = 100; }; DnsResolver dr = { servers = [ '127.0.0.1:53' ]; timeout = 5sec; }; Server PlainServer = { kind = "HTTP"; contents = [ cntJPG: 26%, cntGIF: 28%, cntPNG: 9%, cntPDF: 0.05%, cntZIP: 0.22%, cntMalware, cntEXE: 0.43%, cntSWF: 1.9%, cntJavascript: 32% ]; direct_access = contents; addresses = [ '192.168.29.104:8080' , '192.168.29.104:80' ]; }; Server SSL = PlainServer; SSL = { kind = "HTTPS"; addresses = [ '192.168.29.104:443' ]; ssl_wraps = [ wrap ]; }; Robot R = { kind = "robot"; pop_model = { pop_distr = popUnif(); }; recurrence = 15% ; req_rate = 1/sec; ssl_wraps = [ wrap ]; origins = [ PlainServer.addresses, SSL.addresses ]; http_proxies = [ '192.168.111.42:8080' ]; addresses = [ '192.168.29.101' ** 200 , '192.168.29.103' ** 5 , '192.168.29.105' ** 2 , '192.168.29.107' ** 200, '192.168.29.109' ** 200 , '192.168.29.111' ** 200 , '192.168.29.113' ** 200 , '192.168.29.115' ** 200 ]; }; use (hostnames); use (SSL,PlainServer,R); -------------- next part -------------- An HTML attachment was scrubbed... URL: From dmitry.kurochkin at measurement-factory.com Thu Sep 22 09:40:11 2011 From: dmitry.kurochkin at measurement-factory.com (Dmitry Kurochkin) Date: Thu, 22 Sep 2011 13:40:11 +0400 Subject: Problems with SSL via Proxy In-Reply-To: <1316634348.23945.23.camel@localhost> References: <1316634348.23945.23.camel@localhost> Message-ID: <87fwjogbk4.fsf@gmail.com> Hi Mohammed. On Wed, 21 Sep 2011 20:45:48 +0100, Mohammed Rakhada wrote: > Hello, > > I am having trouble trying to use Web Polygraph with a Proxy. > > I seem to have tracked it down to Web Polygraph not sending a Host > Header with the request and so the Proxy rejects the connections. > > I have captured the network traffic during this to see what is happening > and I can see that for a request sent from my browser the Host Header is > sent but not when a request comes from Web Polygraph. > This is a bug indeed. Polygraph never sends Host header in CONNECT requests, though RFC 2616 requires client to send Host header in any HTTP/1.1 request. Apparently, many proxies ignore the missing Host header and use the URI. Please try the attached patch and let me know if it helps. Regards, Dmitry > >From Web Polygraph to Proxy: > > CONNECT 192.168.29.104:443 HTTP/1.1 > Proxy-Connection: close > > >From Browser to Proxy: > > CONNECT 192.168.29.104:443 HTTP/1.1 > User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.22) > Gecko/20110905 Ubuntu/10.04 (lucid) Firefox/3.6.22 > Proxy-Connection: keep-alive > Host: 192.168.29.104 > > Here is an extract from my polygraph.pg file so you can see what I am > trying to do. Is there some configuration missing? Been stuck on this > problem for a while, originally had a problem trying to jsut run basic > SSL tests. When going direct from Client to Server (no proxy involved), > web-polygraph runs fine. If you require any further information please > do let me know. > > I am running v 4.4.0. > > SslWrap wrap = { > protocols = [ "SSLv3", "TLSv1" ]; > root_certificate = "/opt/home/user/CA-priv+pub.pem"; > ciphers = [ "ALL:HIGH: !SSLv2: !aNULL: !AES128-SHA: !AES256-SHA:": > 100% ]; > rsa_key_sizes = [ 512bit, 1024bit, 2048bit ]; > ssl_config_file = "/opt/home/user/myssl.conf"; > session_resumption = 40%; > session_cache = 100; > }; > > > DnsResolver dr = { > servers = [ '127.0.0.1:53' ]; > timeout = 5sec; > }; > > > Server PlainServer = { > kind = "HTTP"; > contents = [ cntJPG: 26%, cntGIF: 28%, cntPNG: 9%, cntPDF: > 0.05%, cntZIP: 0.22%, cntMalware, cntEXE: 0.43%, cntSWF: 1.9%, > cntJavascript: 32% ]; > direct_access = contents; > addresses = [ '192.168.29.104:8080' , '192.168.29.104:80' ]; > }; > > Server SSL = PlainServer; > > SSL = { > kind = "HTTPS"; > addresses = [ '192.168.29.104:443' ]; > ssl_wraps = [ wrap ]; > }; > > Robot R = { > kind = "robot"; > pop_model = { pop_distr = popUnif(); }; > recurrence = 15% ; > req_rate = 1/sec; > ssl_wraps = [ wrap ]; > origins = [ PlainServer.addresses, SSL.addresses ]; > http_proxies = [ '192.168.111.42:8080' ]; > addresses = [ '192.168.29.101' ** 200 , '192.168.29.103' ** 5 , > '192.168.29.105' ** 2 , '192.168.29.107' ** 200, '192.168.29.109' ** > 200 , '192.168.29.111' ** 200 , '192.168.29.113' ** 200 , > '192.168.29.115' ** 200 ]; > }; > > use (hostnames); > use (SSL,PlainServer,R); > > _______________________________________________ > Users mailing list > Users at web-polygraph.org > http://www.web-polygraph.org/mailman/listinfo/users -------------- next part -------------- A non-text attachment was scrubbed... Name: http-connect-host-header-v4.4.0.patch Type: text/x-diff Size: 1666 bytes Desc: not available URL: From morakhad at cisco.com Thu Sep 22 10:00:20 2011 From: morakhad at cisco.com (Mohammed Rakhada (morakhad)) Date: Thu, 22 Sep 2011 12:00:20 +0200 Subject: Problems with SSL via Proxy References: <1316634348.23945.23.camel@localhost> <87fwjogbk4.fsf@gmail.com> Message-ID: <58E62AE37FBEDD419F31C57AD5A7835C0B7CE5@XMB-AMS-210.cisco.com> Thanks Dmitry I will try this out now and give you my feedback. Regards, Mohammed Rakhada -----Original Message----- From: Dmitry Kurochkin [mailto:dmitry.kurochkin at measurement-factory.com] Sent: Thu 22/09/2011 10:40 To: Mohammed Rakhada (morakhad); users Subject: Re: Problems with SSL via Proxy Hi Mohammed. On Wed, 21 Sep 2011 20:45:48 +0100, Mohammed Rakhada wrote: > Hello, > > I am having trouble trying to use Web Polygraph with a Proxy. > > I seem to have tracked it down to Web Polygraph not sending a Host > Header with the request and so the Proxy rejects the connections. > > I have captured the network traffic during this to see what is happening > and I can see that for a request sent from my browser the Host Header is > sent but not when a request comes from Web Polygraph. > This is a bug indeed. Polygraph never sends Host header in CONNECT requests, though RFC 2616 requires client to send Host header in any HTTP/1.1 request. Apparently, many proxies ignore the missing Host header and use the URI. Please try the attached patch and let me know if it helps. Regards, Dmitry > >From Web Polygraph to Proxy: > > CONNECT 192.168.29.104:443 HTTP/1.1 > Proxy-Connection: close > > >From Browser to Proxy: > > CONNECT 192.168.29.104:443 HTTP/1.1 > User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.22) > Gecko/20110905 Ubuntu/10.04 (lucid) Firefox/3.6.22 > Proxy-Connection: keep-alive > Host: 192.168.29.104 > > Here is an extract from my polygraph.pg file so you can see what I am > trying to do. Is there some configuration missing? Been stuck on this > problem for a while, originally had a problem trying to jsut run basic > SSL tests. When going direct from Client to Server (no proxy involved), > web-polygraph runs fine. If you require any further information please > do let me know. > > I am running v 4.4.0. > > SslWrap wrap = { > protocols = [ "SSLv3", "TLSv1" ]; > root_certificate = "/opt/home/user/CA-priv+pub.pem"; > ciphers = [ "ALL:HIGH: !SSLv2: !aNULL: !AES128-SHA: !AES256-SHA:": > 100% ]; > rsa_key_sizes = [ 512bit, 1024bit, 2048bit ]; > ssl_config_file = "/opt/home/user/myssl.conf"; > session_resumption = 40%; > session_cache = 100; > }; > > > DnsResolver dr = { > servers = [ '127.0.0.1:53' ]; > timeout = 5sec; > }; > > > Server PlainServer = { > kind = "HTTP"; > contents = [ cntJPG: 26%, cntGIF: 28%, cntPNG: 9%, cntPDF: > 0.05%, cntZIP: 0.22%, cntMalware, cntEXE: 0.43%, cntSWF: 1.9%, > cntJavascript: 32% ]; > direct_access = contents; > addresses = [ '192.168.29.104:8080' , '192.168.29.104:80' ]; > }; > > Server SSL = PlainServer; > > SSL = { > kind = "HTTPS"; > addresses = [ '192.168.29.104:443' ]; > ssl_wraps = [ wrap ]; > }; > > Robot R = { > kind = "robot"; > pop_model = { pop_distr = popUnif(); }; > recurrence = 15% ; > req_rate = 1/sec; > ssl_wraps = [ wrap ]; > origins = [ PlainServer.addresses, SSL.addresses ]; > http_proxies = [ '192.168.111.42:8080' ]; > addresses = [ '192.168.29.101' ** 200 , '192.168.29.103' ** 5 , > '192.168.29.105' ** 2 , '192.168.29.107' ** 200, '192.168.29.109' ** > 200 , '192.168.29.111' ** 200 , '192.168.29.113' ** 200 , > '192.168.29.115' ** 200 ]; > }; > > use (hostnames); > use (SSL,PlainServer,R); > > _______________________________________________ > Users mailing list > Users at web-polygraph.org > http://www.web-polygraph.org/mailman/listinfo/users -------------- next part -------------- An HTML attachment was scrubbed... URL: From morakhad at cisco.com Thu Sep 22 10:27:16 2011 From: morakhad at cisco.com (Mohammed Rakhada) Date: Thu, 22 Sep 2011 11:27:16 +0100 Subject: Problems with SSL via Proxy In-Reply-To: <87fwjogbk4.fsf@gmail.com> References: <1316634348.23945.23.camel@localhost> <87fwjogbk4.fsf@gmail.com> Message-ID: <1316687236.23945.33.camel@localhost> Hello Dmitry, The patch worked fine for me. Thanks for this. I'll continue to test and if it uncovers anything unusual I'll let you know. Thanks for your help and prompt fix. Regards, Mohammed Rakhada -----Original Message----- From: Dmitry Kurochkin To: morakhad at cisco.com, users Subject: Re: Problems with SSL via Proxy Date: Thu, 22 Sep 2011 13:40:11 +0400 Hi Mohammed. On Wed, 21 Sep 2011 20:45:48 +0100, Mohammed Rakhada wrote: > Hello, > > I am having trouble trying to use Web Polygraph with a Proxy. > > I seem to have tracked it down to Web Polygraph not sending a Host > Header with the request and so the Proxy rejects the connections. > > I have captured the network traffic during this to see what is happening > and I can see that for a request sent from my browser the Host Header is > sent but not when a request comes from Web Polygraph. > This is a bug indeed. Polygraph never sends Host header in CONNECT requests, though RFC 2616 requires client to send Host header in any HTTP/1.1 request. Apparently, many proxies ignore the missing Host header and use the URI. Please try the attached patch and let me know if it helps. Regards, Dmitry > >From Web Polygraph to Proxy: > > CONNECT 192.168.29.104:443 HTTP/1.1 > Proxy-Connection: close > > >From Browser to Proxy: > > CONNECT 192.168.29.104:443 HTTP/1.1 > User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.22) > Gecko/20110905 Ubuntu/10.04 (lucid) Firefox/3.6.22 > Proxy-Connection: keep-alive > Host: 192.168.29.104 > > Here is an extract from my polygraph.pg file so you can see what I am > trying to do. Is there some configuration missing? Been stuck on this > problem for a while, originally had a problem trying to jsut run basic > SSL tests. When going direct from Client to Server (no proxy involved), > web-polygraph runs fine. If you require any further information please > do let me know. > > I am running v 4.4.0. > > SslWrap wrap = { > protocols = [ "SSLv3", "TLSv1" ]; > root_certificate = "/opt/home/user/CA-priv+pub.pem"; > ciphers = [ "ALL:HIGH: !SSLv2: !aNULL: !AES128-SHA: !AES256-SHA:": > 100% ]; > rsa_key_sizes = [ 512bit, 1024bit, 2048bit ]; > ssl_config_file = "/opt/home/user/myssl.conf"; > session_resumption = 40%; > session_cache = 100; > }; > > > DnsResolver dr = { > servers = [ '127.0.0.1:53' ]; > timeout = 5sec; > }; > > > Server PlainServer = { > kind = "HTTP"; > contents = [ cntJPG: 26%, cntGIF: 28%, cntPNG: 9%, cntPDF: > 0.05%, cntZIP: 0.22%, cntMalware, cntEXE: 0.43%, cntSWF: 1.9%, > cntJavascript: 32% ]; > direct_access = contents; > addresses = [ '192.168.29.104:8080' , '192.168.29.104:80' ]; > }; > > Server SSL = PlainServer; > > SSL = { > kind = "HTTPS"; > addresses = [ '192.168.29.104:443' ]; > ssl_wraps = [ wrap ]; > }; > > Robot R = { > kind = "robot"; > pop_model = { pop_distr = popUnif(); }; > recurrence = 15% ; > req_rate = 1/sec; > ssl_wraps = [ wrap ]; > origins = [ PlainServer.addresses, SSL.addresses ]; > http_proxies = [ '192.168.111.42:8080' ]; > addresses = [ '192.168.29.101' ** 200 , '192.168.29.103' ** 5 , > '192.168.29.105' ** 2 , '192.168.29.107' ** 200, '192.168.29.109' ** > 200 , '192.168.29.111' ** 200 , '192.168.29.113' ** 200 , > '192.168.29.115' ** 200 ]; > }; > > use (hostnames); > use (SSL,PlainServer,R); > > _______________________________________________ > Users mailing list > Users at web-polygraph.org > http://www.web-polygraph.org/mailman/listinfo/users differences between files attachment (http-connect-host-header-v4.4.0.patch) http-connect-host-header-v4.4.0.patch - patch for Web Polygraph v4.4.0 Send Host header in HTTP CONNECT requests. Per RFC 2616, a client MUST include a Host header field in all HTTP/1.1 request messages. Before the change, Polygraph did not send Host header in CONNECT requests. diff --git src/client/HttpCltXact.cc src/client/HttpCltXact.cc index 018389f..76ec454 100644 --- src/client/HttpCltXact.cc +++ src/client/HttpCltXact.cc @@ -344,40 +344,45 @@ bool HttpCltXact::controlledPostWrite(Size &size, bool &needMore) { return true; } void HttpCltXact::makeReq(WrBuf &buf) { ofixedstream os(buf.space(), buf.spaceSize()); if (theState == stConnWaiting) { if (theOid.connect()) makeConnectReq(os); else makeExplicitReq(os); newState(stSpaceWaiting); } } // make a CONNECT request void HttpCltXact::makeConnectReq(ostream &os) { os << rlpConnect; Oid2UrlHost(theOid, true, os); makeReqVersion(os); + + os << hfpHost; + Oid2UrlHost(theOid, true, os); + os << crlf; + makeHopByHopHdrs(os); static int reqCount = 0; finishReqHdrs(os, !reqCount++); // no body for CONNECT requests theReqOid.type(TheBodilessContentId); } // make a non-CONNECT request void HttpCltXact::makeExplicitReq(ostream &os) { Assert(the100ContinueState == csNone); Assert(!theReqContentCfg); Assert(!theBodyIter); // decide whether the request should have a body if (theOid.post() || theOid.put()) { theReqSize.expectedBody(true); theReqContentCfg = theOwner->selectReqContent(theOid, theReqOid); theBodyIter = theReqContentCfg->getBodyIter(theReqOid); theBodyIter->start(&theConn->theWrBuf); -------------- next part -------------- An HTML attachment was scrubbed... URL: From sarah.milani at gmail.com Thu Sep 29 15:37:23 2011 From: sarah.milani at gmail.com (Sarah Milani) Date: Thu, 29 Sep 2011 11:37:23 -0400 Subject: plotter error Message-ID: When i try to generate a report with command: ./polygraph-reporter --label "squid" /tmp/*.log --plotter /usr/local/gnuplot/bin/gnuplot I get this error message: --plotter: read error; (s2) No such file or directory How can i fix this? Best Regards -- Sarah Milani -------------- next part -------------- An HTML attachment was scrubbed... URL: From dmitry.kurochkin at measurement-factory.com Thu Sep 29 15:56:38 2011 From: dmitry.kurochkin at measurement-factory.com (Dmitry Kurochkin) Date: Thu, 29 Sep 2011 19:56:38 +0400 Subject: plotter error In-Reply-To: References: Message-ID: <8762kbpcjt.fsf@gmail.com> Hi Sarah. On Thu, 29 Sep 2011 11:37:23 -0400, Sarah Milani wrote: > When i try to generate a report with command: > > ./polygraph-reporter --label "squid" /tmp/*.log --plotter > /usr/local/gnuplot/bin/gnuplot > > I get this error message: > > --plotter: read error; (s2) No such file or directory > > How can i fix this? > Log files should go after all other options on reporter command line. This should work: ./polygraph-reporter --label "squid" --plotter /usr/local/gnuplot/bin/gnuplot /tmp/*.log Regards, Dmitry > > Best Regards > > -- > Sarah Milani > _______________________________________________ > Users mailing list > Users at web-polygraph.org > http://www.web-polygraph.org/mailman/listinfo/users From sarah.milani at gmail.com Thu Sep 29 17:41:40 2011 From: sarah.milani at gmail.com (Sarah Milani) Date: Thu, 29 Sep 2011 13:41:40 -0400 Subject: plotter error In-Reply-To: <8762kbpcjt.fsf@gmail.com> References: <8762kbpcjt.fsf@gmail.com> Message-ID: Hi Dmitry Thanks for your answer! the report was generated, however the figures are not loaded....: *"**Figure 'Document hit ratio trace' not available: something went wrong while generating the graph"* In the console that i ran the command, i get this errors messages: *set term png small ^ "/tmp/polyrep/squid/figures/object.rep.load.trace.scope=sides=client__phases=dfl t.gp", line 1: unknown or ambiguous terminal type; type just 'set terminal' for a list error: cannot plot /tmp/polyrep/squid/figures/object.rep.load.trace.scope=sides= client__phases=dflt.gp; consult error messages above, if any plot file was: set term png small set output '/tmp/polyrep/squid/figures/object.rep.load.trace.scope=sides=client_ _phases=dflt.png' * Is necessary set something in gnuplot? =/ Thanks for support. 2011/9/29 Dmitry Kurochkin > Hi Sarah. > > On Thu, 29 Sep 2011 11:37:23 -0400, Sarah Milani > wrote: > > When i try to generate a report with command: > > > > ./polygraph-reporter --label "squid" /tmp/*.log --plotter > > /usr/local/gnuplot/bin/gnuplot > > > > I get this error message: > > > > --plotter: read error; (s2) No such file or directory > > > > How can i fix this? > > > > Log files should go after all other options on reporter command line. > This should work: > > ./polygraph-reporter --label "squid" --plotter > /usr/local/gnuplot/bin/gnuplot /tmp/*.log > > Regards, > Dmitry > > > > > Best Regards > > > > -- > > Sarah Milani > > _______________________________________________ > > Users mailing list > > Users at web-polygraph.org > > http://www.web-polygraph.org/mailman/listinfo/users > -- Atenciosamente, Sarah Milani "T? te tornas eternamente respons?vel por aquilo que clicas" -------------- next part -------------- An HTML attachment was scrubbed... URL: From dmitry.kurochkin at measurement-factory.com Thu Sep 29 18:03:28 2011 From: dmitry.kurochkin at measurement-factory.com (Dmitry Kurochkin) Date: Thu, 29 Sep 2011 22:03:28 +0400 Subject: plotter error In-Reply-To: References: <8762kbpcjt.fsf@gmail.com> Message-ID: <87wrcrns3z.fsf@gmail.com> On Thu, 29 Sep 2011 13:41:40 -0400, Sarah Milani wrote: > Hi Dmitry > Thanks for your answer! the report was generated, however the figures are > not loaded....: > > *"**Figure 'Document hit ratio trace' not available: something went wrong > while generating the graph"* > > In the console that i ran the command, i get this errors messages: > > > *set term png small > ^ > "/tmp/polyrep/squid/figures/object.rep.load.trace.scope=sides=client__phases=dfl > t.gp", line 1: unknown or ambiguous terminal type; type just 'set terminal' > for a list > > error: cannot plot > /tmp/polyrep/squid/figures/object.rep.load.trace.scope=sides= > client__phases=dflt.gp; consult error messages above, if any > plot file was: > set term png small > set output > '/tmp/polyrep/squid/figures/object.rep.load.trace.scope=sides=client_ > _phases=dflt.png' > * > Is necessary set something in gnuplot? =/ > I guess the gnuplot is built without PNG support. Here is what I get on my system: gnuplot> set term png small Terminal type set to 'png' Options are 'nocrop small size 640,480 ' gnuplot> set term qwe small ^ unknown or ambiguous terminal type; type just 'set terminal' for a list Consider using gnuplot package that comes with your system. It should have PNG support. Otherwise you need to rebuild gnuplot with PNG support enabled. Regards, Dmitry > Thanks for support. > > > > 2011/9/29 Dmitry Kurochkin > > > Hi Sarah. > > > > On Thu, 29 Sep 2011 11:37:23 -0400, Sarah Milani > > wrote: > > > When i try to generate a report with command: > > > > > > ./polygraph-reporter --label "squid" /tmp/*.log --plotter > > > /usr/local/gnuplot/bin/gnuplot > > > > > > I get this error message: > > > > > > --plotter: read error; (s2) No such file or directory > > > > > > How can i fix this? > > > > > > > Log files should go after all other options on reporter command line. > > This should work: > > > > ./polygraph-reporter --label "squid" --plotter > > /usr/local/gnuplot/bin/gnuplot /tmp/*.log > > > > Regards, > > Dmitry > > > > > > > > Best Regards > > > > > > -- > > > Sarah Milani > > > _______________________________________________ > > > Users mailing list > > > Users at web-polygraph.org > > > http://www.web-polygraph.org/mailman/listinfo/users > > > > > > -- > Atenciosamente, > > Sarah Milani > > "T? te tornas eternamente respons?vel por aquilo que clicas" From davidparks21 at yahoo.com Thu Sep 29 20:51:09 2011 From: davidparks21 at yahoo.com (David Parks) Date: Thu, 29 Sep 2011 13:51:09 -0700 Subject: Digest authentication support? Message-ID: <008f01cc7ee9$85510160$8ff30420$@com> I'm a new user and I'd like to test a squid-proxy which uses digest authentication. I didn't see it in the documentation or any google searches, I wonder if digest auth is supported in polygraph? Thanks, David -------------- next part -------------- An HTML attachment was scrubbed... URL: From dmitry.kurochkin at measurement-factory.com Thu Sep 29 21:46:38 2011 From: dmitry.kurochkin at measurement-factory.com (Dmitry Kurochkin) Date: Fri, 30 Sep 2011 01:46:38 +0400 Subject: Digest authentication support? In-Reply-To: <008f01cc7ee9$85510160$8ff30420$@com> References: <008f01cc7ee9$85510160$8ff30420$@com> Message-ID: <87bou39g3l.fsf@gmail.com> Hi David. On Thu, 29 Sep 2011 13:51:09 -0700, "David Parks" wrote: > I'm a new user and I'd like to test a squid-proxy which uses digest > authentication. > Welcome! > > > I didn't see it in the documentation or any google searches, I wonder if > digest auth is supported in polygraph? > Unfortunately, Polygraph supports only Basic, NTLM and Negotiate HTTP authentication schemes. Support for Digest authentication scheme would be a nice feature for Web Polygraph. But so far nobody had much interest in it. For what it's worth, Squid does support Basic and NTLM schemes. So you may try testing with them instead of Digest. Regards, Dmitry > > > Thanks, > > David > > > > _______________________________________________ > Users mailing list > Users at web-polygraph.org > http://www.web-polygraph.org/mailman/listinfo/users From sarah.milani at gmail.com Fri Sep 30 18:08:05 2011 From: sarah.milani at gmail.com (Sarah Milani) Date: Fri, 30 Sep 2011 14:08:05 -0400 Subject: polymix-3.pg Message-ID: Hi Everbody *i plan to use polymix-3.pg to run a performance test of my squid proxy. **I am using the same machine to run client and server, (*initially)* in the same proxy **network . Before *run polymix, i already read this : http://www.measurement-factory.com/docs/PolyMix-3/ , however i still have some questions : 1 - Where i set objects sizes (html, figures and download) ? 2 - What variables must be defined? And which files? (cause i set up only polymis-3.pg) 3 - Is there any additional procedures that must be executed before the polygraph? Best Regards Sarah Milani -- Atenciosamente, Sarah Milani "T? te tornas eternamente respons?vel por aquilo que clicas" -------------- next part -------------- An HTML attachment was scrubbed... URL: From dmitry.kurochkin at measurement-factory.com Fri Sep 30 19:59:18 2011 From: dmitry.kurochkin at measurement-factory.com (Dmitry Kurochkin) Date: Fri, 30 Sep 2011 23:59:18 +0400 Subject: polymix-3.pg In-Reply-To: References: Message-ID: <87zkhl94yx.fsf@gmail.com> Hi Sarah. On Fri, 30 Sep 2011 14:08:05 -0400, Sarah Milani wrote: > Hi Everbody > > *i plan to use polymix-3.pg to run a performance test of my squid proxy. > **I am using the same machine to run client and server, (*initially)* in > the same proxy **network . PolyMix are complex workloads with many Robots and Servers. Usually, a single machine is not enough to run high load tests because Polygraph reaches CPU or network limits. Consider using the latest version of PolyMix workloads - PolyMix-4. > Before *run polymix, i already read this : > http://www.measurement-factory.com/docs/PolyMix-3/ , however i still have > some questions : > You should also read PolyMix-3 documentation at [1]. Also, please keep in mind that PolyMix documentation was written for an old Polygraph version. Many new features were added to Polygraph since then. In particular Polygraph client and server now create required aliases on start (though, client and server address creation may conflict if both are run on the same system, use the aka tool to create them manually in this case). To set PolyMix-3 parameters, you should copy polymix-3.pg from Polygraph installation (e.g. Debian package has it in /usr/share/polygraph/workloads/) or tarball somewhere and edit it. > > 1 - Where i set objects sizes (html, figures and download) ? Everything is configured in the workload. Polimix-3.pg includes other workloads which have all the details. Object sizes are defined in contents.pg. But you should not edit it directly. Instead copy polymix-3.pg somewhere and put all changes there. You can set PGL fields like: ... // include all the boring details #include "polymix-3-guts.pg" // customize some fields cntImage.size = exp(10KB); ... > 2 - What variables must be defined? And which files? (cause i set up only > polymis-3.pg) PolyMix workloads have few parameters that you need to set. Most have appropriate default values. All undefined parameters are in polymix-3.pg and have comments. > 3 - Is there any additional procedures that must be executed before the > polygraph? > You need to configure routes on the proxy so it can reach Polygraph Robots and Servers. If you run without a proxy, routing needs to be configured on client and server systems. You may also need to adjust system configuration (e.g. network buffers size, open file limit). Regards, Dmitry [1] http://www.web-polygraph.org/docs/workloads/polymix-4/ > > Best Regards > > Sarah Milani > > > -- > Atenciosamente, > > Sarah Milani > > "T? te tornas eternamente respons?vel por aquilo que clicas" > _______________________________________________ > Users mailing list > Users at web-polygraph.org > http://www.web-polygraph.org/mailman/listinfo/users From dmitry.kurochkin at measurement-factory.com Fri Sep 30 21:57:39 2011 From: dmitry.kurochkin at measurement-factory.com (Dmitry Kurochkin) Date: Sat, 01 Oct 2011 01:57:39 +0400 Subject: polymix-3.pg In-Reply-To: <87zkhl94yx.fsf@gmail.com> References: <87zkhl94yx.fsf@gmail.com> Message-ID: <87pqih8zho.fsf@gmail.com> On Fri, 30 Sep 2011 23:59:18 +0400, Dmitry Kurochkin wrote: > Hi Sarah. > > On Fri, 30 Sep 2011 14:08:05 -0400, Sarah Milani wrote: > > Hi Everbody > > > > *i plan to use polymix-3.pg to run a performance test of my squid proxy. > > **I am using the same machine to run client and server, (*initially)* in > > the same proxy **network . > > PolyMix are complex workloads with many Robots and Servers. Usually, a > single machine is not enough to run high load tests because Polygraph > reaches CPU or network limits. > > Consider using the latest version of PolyMix workloads - PolyMix-4. > > > Before *run polymix, i already read this : > > http://www.measurement-factory.com/docs/PolyMix-3/ , however i still have > > some questions : > > > > You should also read PolyMix-3 documentation at [1]. > > Also, please keep in mind that PolyMix documentation was written for an > old Polygraph version. Many new features were added to Polygraph since > then. In particular Polygraph client and server now create required > aliases on start (though, client and server address creation may > conflict if both are run on the same system, use the aka tool to create > them manually in this case). > > To set PolyMix-3 parameters, you should copy polymix-3.pg from Polygraph > installation (e.g. Debian package has it in > /usr/share/polygraph/workloads/) or tarball somewhere and edit it. > > > > > 1 - Where i set objects sizes (html, figures and download) ? > > Everything is configured in the workload. Polimix-3.pg includes other > workloads which have all the details. > > Object sizes are defined in contents.pg. But you should not edit it > directly. Instead copy polymix-3.pg somewhere and put all changes > there. You can set PGL fields like: > > ... > // include all the boring details > #include "polymix-3-guts.pg" > > // customize some fields > cntImage.size = exp(10KB); > ... > Sorry, this would not work. Since cntImage is _used_ in polymix-3-guts.pg, you cannot customize it after use. The Server agent, for example, will retain the wring/old settings. There are no pointers in PGL. If guts customization is needed, a better approach is to literally include the polymix-3-guts.pg file (i.e., insert its contents) into your copy of polymix-3.pg and then edit whatever is needed. Regards, Dmitry > > 2 - What variables must be defined? And which files? (cause i set up only > > polymis-3.pg) > > PolyMix workloads have few parameters that you need to set. Most have > appropriate default values. All undefined parameters are in > polymix-3.pg and have comments. > > > 3 - Is there any additional procedures that must be executed before the > > polygraph? > > > > You need to configure routes on the proxy so it can reach Polygraph > Robots and Servers. If you run without a proxy, routing needs to be > configured on client and server systems. > > You may also need to adjust system configuration (e.g. network buffers > size, open file limit). > > Regards, > Dmitry > > [1] http://www.web-polygraph.org/docs/workloads/polymix-4/ > > > > > Best Regards > > > > Sarah Milani > > > > > > -- > > Atenciosamente, > > > > Sarah Milani > > > > "T? te tornas eternamente respons?vel por aquilo que clicas" > > _______________________________________________ > > Users mailing list > > Users at web-polygraph.org > > http://www.web-polygraph.org/mailman/listinfo/users > _______________________________________________ > Users mailing list > Users at web-polygraph.org > http://www.web-polygraph.org/mailman/listinfo/users