具有双向TLS的AB（Apache Bench）测试

时间：2019-01-21 17:23:15

标签： nginx openssl apachebench

我使用具有相互tls身份验证的Nginx服务器。 为了卷曲，一切都很好（我生成了所需的响应）

对于AB测试负载，我得到了奇怪的东西 我使用以下命令ab -n 100000 -c 5000 -t 10000 -v 2 -E ../../containers/ngx-rosal/certs/client/rsa/clientB-key-crt.pem https://meteotravel.ru/ < / p> 

LOG: header received:
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 21 Jan 2019 19:50:12 GMT
Content-Type: text/html
Content-Length: 872
Last-Modified: Wed, 16 Jan 2019 19:29:51 GMT
Connection: keep-alive
ETag: "5c3f862f-368"
Accept-Ranges: bytes

<!DOCTYPE html>
<html>
<head>
    <title>Welcome to nginx!</title>
    <style>
        body {
            width: 35em;
            margin: 0 auto;
            font-family: Tahoma, Verdana, Arial, sans-serif;
        }
    </style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<h1>YAHOOOOOO</h1>
<h1>YAHOOOOOO</h1>
<h1>YAHOOOOOO</h1>
<h1>YAHOOOOOO</h1>
<h5>
   ohrwoqhro[whr[ohwqrohwro[ihwq[rhwqohrwrohwq
    werhowiehroqihro[wqhr[0ohwqohrwoqhro[whr[ohwqrohwro[ihwq[rhwqohrwrohwq
   </h5>
<p>If you see this page, the nginx web server is successfully installed and
    working. Further configuration is required.</p>

<p>For online documentation and support please refer to
    <a href="http://nginx.org/">nginx.org</a>.<br/>
    Commercial support is available at
    <a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>


Peer certificate
Certificate version: 1
Valid from: Dec 19 14:57:14 2018 GMT
Valid to  : Dec 19 14:57:14 2019 GMT
Public key is 2048 bits
The issuer name is /C=RU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=abc.com/emailAddress=admin@abc.com
The subject name is /C=RU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=meteotravel.ru/emailAddress=mail@devprofi.ru
Extension Count: 0
Transport Protocol      :TLSv1.2
Cipher Suite Protocol   :TLSv1.2
Cipher Suite Name       :ECDHE-RSA-AES256-GCM-SHA384
Cipher Suite Cipher Bits:256 (256)
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: FE75A19E671FD2873DD2BB2580716A3A5B3EDAC2959C3C6AE96E7BB0DD48CA03
    Session-ID-ctx: 
    Master-Key: 189FDF9E7E77DF276D0645EBAB49EC70322EB4A7D63D4D5E9CBBC6B33A82AA8EF6C84EF7922489EF1AA3C25361B95950
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1548089386
    Timeout   : 7200 (sec)
    Verify return code: 20 (unable to get local issuer certificate)
    Extended master secret: yes
LOG: header received:
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 21 Jan 2019 19:47:24 GMT
Content-Type: text/html
Content-Length: 872
Last-Modified: Wed, 16 Jan 2019 19:29:51 GMT
Connection: keep-alive
ETag: "5c3f862f-368"
Accept-Ranges: bytes

<!DOCTYPE html>
<html>
<head>
    <title>Welcome to nginx!</title>
    <style>
        body {
            width: 35em;
            margin: 0 auto;
            font-family: Tahoma, Verdana, Arial, sans-serif;
        }
    </style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<h1>YAHOOOOOO</h1>
<h1>YAHOOOOOO</h1>
<h1>YAHOOOOOO</h1>
<h1>YAHOOOOOO</h1>
<h5>
   ohrwoqhro[whr[ohwqrohwro[ihwq[rhwqohrwrohwq
    werhowiehroqihro[wqhr[0ohwqohrwoqhro[whr[ohwqrohwro[ihwq[rhwqohrwrohwq
   </h5>
<p>If you see this page, the nginx web server is successfully installed and
    working. Further configuration is required.</p>

<p>For online documentation and support please refer to
    <a href="http://nginx.org/">nginx.org</a>.<br/>
    Commercial support is available at
    <a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

使用选项-v 1，我收到许多消息错误SSL读取失败（5）-关闭连接 使用-k选项（keepalive）效果更好。失败请求的数量更少。

在nginx日志上（调试模式），我得到了 2019/01/21 20:04:32 [info] 16＃16：* 216512客户端超时（110：连接
SSL握手时，客户端：10.244.5.0，服务器：0.0.0.0：443） 2019/01/21 20:04:32 [info] 25＃25：* 216516客户端超时（110：连接
SSL握手时，客户端：10.244.5.0，服务器：0.0.0.0：443

客户端上的OpenSSl版本 OpenSSL 1.1.0h 2018年3月27日

服务器上的OpenSSl版本 OpenSSL 1.1.0h 2018年3月27日

nginx -V Nginx版本：Nginx / 1.13.6 由gcc 5.4.0 20160609构建（Ubuntu 5.4.0-6ubuntu1〜16.04.11） 使用OpenSSL 1.1.0h内置2018年3月27日 启用TLS SNI支持 配置参数：--prefix = / etc / nginx --with-ld-opt = -Wl，-rpath，/ usr / local / lib --add-module = / usr / app / ngx_devel_kit-0.3.0 --add -module = / usr / app / lua-nginx-module-0.10.13 --sbin-path = / usr / sbin / nginx --modules-path = / usr / lib / nginx / modules --conf-path = / etc / nginx / nginx.conf-错误日志路径= / var / log / nginx / error.log --http日志路径= / var / log / nginx / access.log --http客户端主体-temp-path = / var / cache / nginx / client_temp --http-proxy-temp-path = / var / cache / nginx / proxy_temp --http-fastcgi-temp-path = / var / cache / nginx / fastcgi_temp- -http-uwsgi-temp-path = / var / cache / nginx / uwsgi_temp --http-scgi-temp-path = / var / cache / nginx / scgi_temp --pid-path = / var / run / nginx.pid- -lock-path = / var / run / nginx.lock --user = root --group = www-data --user = www-data --group = www-data --with-compat --with-file- aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_mo dule --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-流--with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt ='-g -O2 -fstack-protector --param = ssp-buffer-size = 4 -Wformat -Werror = format -security -Wp，-D_FORTIFY_SOURCE = 2 -fPIC'-with-ld-opt ='-Wl，-Bsymbolic函数-Wl，-z，relro -Wl，-z，现在-Wl，-按需-pie'

如何解决此问题？

我将nginx错误日志切换为调试并获取该日志

[debug] 26#26: *27497 http check ssl handshake
 [debug] 26#26: *27497 http recv(): 1
 [debug] 26#26: *27497 https ssl handshake: 0x16
 [debug] 26#26: *27497 tcp_nodelay
 [debug] 26#26: *27497 SSL server name: "meteotravel.ru"
 [debug] 26#26: *27497 SSL_do_handshake: -1
2019/01/21 23:50:01 [debug] 26#26: *27497 SSL_get_error: 2
2019/01/21 23:50:01 [debug] 26#26: *27497 reusable connection: 0
2019/01/21 23:50:02 [debug] 26#26: *27497 SSL handshake handler: 0
2019/01/21 23:50:02 [debug] 26#26: *27497 SSL_do_handshake: -1
2019/01/21 23:50:02 [debug] 26#26: *27497 SSL_get_error: 5

0 个答案:

没有答案
相关问题
最新问题