feat: VDS stress test harness (edge-only) and load-test results
- deploy/test/stress/: multi-IP masked handshake flood (flood.py), legit client during attack (legit.py), full orchestration (run-stress.sh), edge Dockerfile with socat stub backend and high/defense configs - docs/research/load-test-report.md: v3 VDS loopback results (2026-08-04) - README.md: performance table update (4k conn/s raw, 99.6% blocked in defense, legit clients RTT 2-6ms during attack) - docs/testing.md: multi-IP masked stress-test procedure
This commit is contained in:
parent
d41bd6e815
commit
0b53ed720b
11 changed files with 660 additions and 0 deletions
|
|
@ -184,6 +184,25 @@ done
|
|||
# (отправляем handshake по 1 байту с задержкой 100ms)
|
||||
```
|
||||
|
||||
### Готовый много-IP стресс-тест на VDS (edge-only)
|
||||
|
||||
`deploy/test/stress/` — полный цикл без Redis/Velocity/Paper: edge-контейнер с stub-бэкендом
|
||||
(socat echo) + attacker-контейнер со 100 source IP. Атака **маскируется под обычный трафик**
|
||||
(валидные handshake со случайными hostname), во время флуда параллельно заходят легитимные
|
||||
клиенты (`legit.py`), замеряющие RTT.
|
||||
|
||||
```bash
|
||||
# На VDS
|
||||
git clone https://github.com/loki5512344/rampart.git && cd rampart
|
||||
cargo build --release --bin rampart-core
|
||||
cp target/release/rampart-core deploy/test/stress/edge-ctx/rampart-core
|
||||
cd deploy/test/stress && bash run-stress.sh
|
||||
```
|
||||
|
||||
Фазы: A — сырая пропускная способность (лимиты 100k), B — защита (дефолт 5 pps/IP),
|
||||
C — SYN flood, D — активные соединения. Результаты прогона 2026-08-04 —
|
||||
в [load-test-report.md](research/load-test-report.md).
|
||||
|
||||
---
|
||||
|
||||
## 6. CI Pipeline
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue