Function TestUnified_HotReloadSwitchesMode

internal/sniproxy/unified_test.go:113–164

(t *testing.T)

}

func TestUnified_HotReloadSwitchesMode(t *testing.T) {
	// 先配成透明，再热切到终止
	transparentBackend := startEchoTLS(t, "x.example.com")
	terminatingBackend := startEchoPlaintext(t)

	cert := genSelfSigned(t)
	proxy := &UnifiedProxy{Addr: "127.0.0.1:0"}
	proxy.SetTLSConfig(&tls.Config{Certificates: []tls.Certificate{cert}})
	proxy.SetRoutes([]Route{
		{SNI: "x.example.com", Backend: transparentBackend, Mode: ModeTransparent},
	})

	ln, _ := net.Listen("tcp", "127.0.0.1:0")
	addr := ln.Addr().String()
	_ = ln.Close()
	proxy.Addr = addr

	ctx, cancel := context.WithCancel(context.Background())
	defer cancel()
	var wg sync.WaitGroup
	wg.Add(1)
	go func() { defer wg.Done(); _ = proxy.Serve(ctx) }()
	t.Cleanup(func() { cancel(); wg.Wait() })

	waitForListen(t, addr)

	// 切到终止模式
	proxy.SetRoutes([]Route{
		{SNI: "x.example.com", Backend: terminatingBackend, Mode: ModeTerminating},
	})

	conn, err := net.Dial("tcp", addr)
	if err != nil {
		t.Fatal(err)
	}
	defer conn.Close()
	tc := tls.Client(conn, &tls.Config{ServerName: "x.example.com", InsecureSkipVerify: true})
	_ = tc.SetDeadline(time.Now().Add(3 * time.Second))
	if err := tc.Handshake(); err != nil {
		t.Fatalf("handshake after hot reload: %v", err)
	}
	if _, err := tc.Write([]byte("hi")); err != nil {
		t.Fatal(err)
	}
	got := make([]byte, 2)
	if _, err := io.ReadFull(tc, got); err != nil {
		t.Fatal(err)
	}
	if string(got) != "hi" {
		t.Errorf("got %q, want 'hi'", got)
	}
}