1 files changed, 138 insertions, 0 deletions
diff --git a/conf/plugins/load-tester.conf b/conf/plugins/load-tester.conf
new file mode 100644
index 000000000..e69c029d6
--- /dev/null
+++ b/conf/plugins/load-tester.conf
@@ -0,0 +1,138 @@
+# Section to configure the load-tester plugin, see LOAD TESTS in
+# strongswan.conf(5) for details.
+load-tester {
+
+    # Whether to keep dynamic addresses even after the associated SA got
+    # terminated.
+    # addrs_keep = no
+
+    # Network prefix length to use when installing dynamic addresses. If set to
+    # -1 the full address is used (i.e. 32 or 128).
+    # addrs_prefix = 16
+
+    # Directory to load (intermediate) CA certificates from.
+    # ca_dir =
+
+    # Seconds to start CHILD_SA rekeying after setup.
+    # child_rekey = 600
+
+    # Delay between initiatons for each thread.
+    # delay = 0
+
+    # Delete an IKE_SA as soon as it has been established.
+    # delete_after_established = no
+
+    # Digest algorithm used when issuing certificates.
+    # digest = sha1
+
+    # DPD delay to use in load test.
+    # dpd_delay = 0
+
+    # Base port to be used for requests (each client uses a different port).
+    # dynamic_port = 0
+
+    # EAP secret to use in load test.
+    # eap_password = default-pwd
+
+    # Enable the load testing plugin. WARNING: Never enable this plugin on
+    # productive systems. It provides preconfigured credentials and allows an
+    # attacker to authenticate as any user.
+    # enable = no
+
+    # CHILD_SA proposal to use for load tests.
+    # esp = aes128-sha1
+
+    # Fake the kernel interface to allow load-testing against self.
+    # fake_kernel = no
+
+    # Seconds to start IKE_SA rekeying after setup.
+    # ike_rekey = 0
+
+    # Global limit of concurrently established SAs during load test.
+    # init_limit = 0
+
+    # Address to initiate from.
+    # initiator = 0.0.0.0
+
+    # Authentication method(s) the intiator uses.
+    # initiator_auth = pubkey
+
+    # Initiator ID used in load test.
+    # initiator_id =
+
+    # Initiator ID to match against as responder.
+    # initiator_match =
+
+    # Traffic selector on initiator side, as proposed by initiator.
+    # initiator_tsi =
+
+    # Traffic selector on responder side, as proposed by initiator.
+    # initiator_tsr =
+
+    # Number of concurrent initiator threads to use in load test.
+    # initiators = 0
+
+    # Path to the issuer certificate (if not configured a hard-coded default
+    # value is used).
+    # issuer_cert =
+
+    # Path to private key that is used to issue certificates (if not configured
+    # a hard-coded default value is used).
+    # issuer_key =
+
+    # Number of IKE_SAs to initiate by each initiator in load test.
+    # iterations = 1
+
+    # Whether to load the plugin. Can also be an integer to increase the
+    # priority of this plugin.
+    load = yes
+
+    # IPsec mode to use, one of tunnel, transport, or beet.
+    # mode = tunnel
+
+    # Provide INTERNAL_IPV4_ADDRs from a named pool.
+    # pool =
+
+    # Preshared key to use in load test.
+    # preshared_key = <default-psk>
+
+    # IKE proposal to use in load test.
+    # proposal = aes128-sha1-modp768
+
+    # Request an INTERNAL_IPV4_ADDR from the server.
+    # request_virtual_ip = no
+
+    # Address to initiation connections to.
+    # responder = 127.0.0.1
+
+    # Authentication method(s) the responder uses.
+    # responder_auth = pubkey
+
+    # Responder ID used in load test.
+    # responder_id =
+
+    # Traffic selector on initiator side, as narrowed by responder.
+    # responder_tsi = initiator_tsi
+
+    # Traffic selector on responder side, as narrowed by responder.
+    # responder_tsr = initiator_tsr
+
+    # Shutdown the daemon after all IKE_SAs have been established.
+    # shutdown_when_complete = no
+
+    # Socket provided by the load-tester plugin.
+    # socket = unix://${piddir}/charon.ldt
+
+    # IKE version to use (0 means use IKEv2 as initiator and accept any version
+    # as responder).
+    # version = 0
+
+    # Section that contains key/value pairs with address pools (in CIDR
+    # notation) to use for a specific network interface e.g. eth0 =
+    # 10.10.0.0/16.
+    addrs {
+
+    }
+
+}
+