- remove Java plugins (velocity/paper), dashboard, all MC-specific code
(handshake, death_code, varint, hostname-HMAC); available in history pre-v0.2
- merge crates/* into one package with src/bin/{rampart,rampart-manager,rampart-cli}
- ProtocolHandler trait + registry (no implementations yet), universal PoW kept
- XDP: universal L3/L4 filter (xdp/core/) + pluggable hook API (xdp/hooks/),
fix IPv6 saddr bug; clang build verified
- docs: bilingual knowledge base (docs/kb/: attacks x4, defense-levels,
practice x3), rewrite README/architecture for universal concept
- TODO.md v4.0: <=300-line module limit, competitor benchmark section (ref/)
- deploy/CI/docs cleanup: no MC references, new binary names
cargo build/clippy(-D warnings)/test green (55 tests)
51 lines
1.7 KiB
Bash
Executable file
51 lines
1.7 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
NET="rampart-test"
|
|
DIR="$(cd "$(dirname "$0")" && pwd)"
|
|
|
|
echo "=== Сборка rampart ==="
|
|
cargo build --release --bin rampart
|
|
|
|
echo "=== Создание сети ==="
|
|
docker network create "$NET" 2>/dev/null || true
|
|
|
|
echo "=== Backend stub (TCP echo) ==="
|
|
docker rm -f backend 2>/dev/null || true
|
|
docker run -d --name backend --network "$NET" \
|
|
alpine sh -c "apk add socat && socat TCP-LISTEN:25566,fork EXEC:'cat'"
|
|
|
|
echo "=== Rampart Edge ==="
|
|
docker rm -f rampart 2>/dev/null || true
|
|
TMPDIR=$(mktemp -d)
|
|
cp "$DIR/../../target/release/rampart" "$TMPDIR/"
|
|
cp "$DIR/../docker/Dockerfile.test" "$TMPDIR/Dockerfile"
|
|
docker build -t rampart "$TMPDIR"
|
|
rm -rf "$TMPDIR"
|
|
docker run -d --name rampart --network "$NET" \
|
|
-p 25565:25565 -p 9090:9090 \
|
|
-e RAMPART_CONFIG=/etc/rampart/config.toml \
|
|
-v "$DIR/config.test.toml:/etc/rampart/config.toml" \
|
|
rampart
|
|
|
|
echo "=== Attacker ==="
|
|
docker rm -f attacker 2>/dev/null || true
|
|
docker run -d --name attacker --network "$NET" \
|
|
--cap-add=NET_RAW --cap-add=NET_ADMIN \
|
|
-v "$DIR/stress/flood.py:/flood.py:ro" \
|
|
debian:bookworm-slim bash -c "
|
|
apt-get update -qq && apt-get install -y -qq python3 iproute2 >/dev/null && \
|
|
while true; do sleep 10; done
|
|
"
|
|
|
|
echo ""
|
|
echo "=== Готово ==="
|
|
echo "Rampart edge: localhost:25565"
|
|
echo "Metrics: http://localhost:9090/metrics"
|
|
echo ""
|
|
echo "Пример атаки:"
|
|
echo " docker exec attacker python3 /flood.py --target rampart --port 25566 --mode connect --duration 30 --threads 50"
|
|
echo "Легитимный клиент:"
|
|
echo " python3 $DIR/stress/legit.py --target localhost --port 25565"
|
|
echo ""
|
|
echo "Для остановки: docker rm -f rampart backend attacker"
|