Skip to content

Conversation

@WesleyRosenblum
Copy link
Contributor

Description of changes:

This change adds a script for executing the quic-attack fuzz testing introduced in #1968.
The script uses ultraman to launch 4 s2n-quic servers, each using a different fuzzing strategy. These strategies are:

  • fuzzing the remote port on datagrams
  • fuzzing the payloads of incoming and outgoing packets
  • fuzzing both remote port and payloads
  • no fuzzing

16 clients are launched, 2 for each of the fuzzing strategies listed above, for each of the 4 servers.

Call-outs:

I decreased the Toggle value for the remote port fuzzing, as a lower value seemed more effective in getting coverage.

I added set a lower max handshake duration and max idle timeout for the fuzz test so the connections that had exceeded the maximum amount of connection migrations wouldn't sit around for the default of 5 minutes and instead would be closed so new connections could be tested.

Testing:

Ran manually

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Copy link
Contributor

@camshaft camshaft left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great!

@WesleyRosenblum WesleyRosenblum merged commit 4cfd149 into main Oct 10, 2023
@WesleyRosenblum WesleyRosenblum deleted the WesleyRosenblum/quicattackscript branch October 10, 2023 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants