nixos/tests/proxy.nix

   1 import ./make-test-python.nix ({ pkgs, ...} :
   2
   3 let
   4   backend = { pkgs, ... }: {
   5     services.httpd = {
   6       enable = true;
   7       adminAddr = "foo@example.org";
   8       virtualHosts.localhost.documentRoot = "${pkgs.valgrind.doc}/share/doc/valgrind/html";
   9     };
  10     networking.firewall.allowedTCPPorts = [ 80 ];
  11   };
  12 in {
  13   name = "proxy";
  14   meta = with pkgs.lib.maintainers; {
  15     maintainers = [ ];
  16   };
  17
  18   nodes = {
  19     proxy = { nodes, ... }: {
  20       services.httpd = {
  21         enable = true;
  22         adminAddr = "bar@example.org";
  23         extraModules = [ "proxy_balancer" "lbmethod_byrequests" ];
  24         extraConfig = ''
  25           ExtendedStatus on
  26         '';
  27         virtualHosts.localhost = {
  28           extraConfig = ''
  29             <Location /server-status>
  30               Require all granted
  31               SetHandler server-status
  32             </Location>
  33
  34             <Proxy balancer://cluster>
  35               Require all granted
  36               BalancerMember http://${nodes.backend1.config.networking.hostName} retry=0
  37               BalancerMember http://${nodes.backend2.config.networking.hostName} retry=0
  38             </Proxy>
  39
  40             ProxyStatus       full
  41             ProxyPass         /server-status !
  42             ProxyPass         /       balancer://cluster/
  43             ProxyPassReverse  /       balancer://cluster/
  44
  45             # For testing; don't want to wait forever for dead backend servers.
  46             ProxyTimeout      5
  47           '';
  48         };
  49       };
  50       networking.firewall.allowedTCPPorts = [ 80 ];
  51     };
  52
  53     backend1 = backend;
  54     backend2 = backend;
  55
  56     client = { ... }: { };
  57   };
  58
  59   testScript = ''
  60     start_all()
  61
  62     proxy.wait_for_unit("httpd")
  63     backend1.wait_for_unit("httpd")
  64     backend2.wait_for_unit("httpd")
  65     client.wait_for_unit("network.target")
  66
  67     # With the back-ends up, the proxy should work.
  68     client.succeed("curl --fail http://proxy/")
  69
  70     client.succeed("curl --fail http://proxy/server-status")
  71
  72     # Block the first back-end.
  73     backend1.block()
  74
  75     # The proxy should still work.
  76     client.succeed("curl --fail http://proxy/")
  77     client.succeed("curl --fail http://proxy/")
  78
  79     # Block the second back-end.
  80     backend2.block()
  81
  82     # Now the proxy should fail as well.
  83     client.fail("curl --fail http://proxy/")
  84
  85     # But if the second back-end comes back, the proxy should start
  86     # working again.
  87     backend2.unblock()
  88     client.succeed("curl --fail http://proxy/")
  89   '';
  90 })