Function TestManager_TransparentOnly

internal/sniproxy/manager_test.go:67–124

(t *testing.T)

}

func TestManager_TransparentOnly(t *testing.T) {
	backend := startEchoTLS(t, "x.example.com")

	// 提前探测一个空闲端口
	ln, _ := net.Listen("tcp", "127.0.0.1:0")
	addr := ln.Addr().String()
	_ = ln.Close()

	statePath := filepath.Join(t.TempDir(), "state.json")
	m := NewManager(statePath)
	defer m.Close()

	cfg := ManagerConfig{
		Listen: addr,
		Routes: []Route{
			{SNI: "x.example.com", Backend: backend, Mode: ModeTransparent},
		},
	}
	if err := m.Apply(cfg); err != nil {
		t.Fatalf("Apply: %v", err)
	}
	waitForListen(t, addr)

	// 校验持久化
	data, err := os.ReadFile(statePath)
	if err != nil {
		t.Fatalf("state not written: %v", err)
	}
	var got ManagerConfig
	if err := json.Unmarshal(data, &got); err != nil {
		t.Fatalf("state not valid JSON: %v", err)
	}
	if got.Listen != addr {
		t.Errorf("persisted Listen = %q, want %q", got.Listen, addr)
	}

	// 功能验证：一次 TLS 连接应经过透明代理到 backend
	conn, err := net.Dial("tcp", addr)
	if err != nil {
		t.Fatal(err)
	}
	defer conn.Close()
	tc := tls.Client(conn, &tls.Config{ServerName: "x.example.com", InsecureSkipVerify: true})
	_ = tc.SetDeadline(time.Now().Add(3 * time.Second))
	if err := tc.Handshake(); err != nil {
		t.Fatalf("handshake: %v", err)
	}
	if _, err := tc.Write([]byte("hi")); err != nil {
		t.Fatal(err)
	}
	buf := make([]byte, 2)
	if _, err := io.ReadFull(tc, buf); err != nil {
		t.Fatalf("read: %v", err)
	}
	if string(buf) != "hi" {
		t.Errorf("echo = %q, want hi", buf)
	}
}