resuse existing pieces

Author: DeagleGross

docker/nginx/nginx-plain-tls.conf

@@ -0,0 +1,47 @@
+# perf: define how many processes can be used ('auto' for one per core, doesn't work on docker)
+worker_processes WORKER_PROCESSES;
+
+events { 
+    # perf: ensures that each worker accepts as many connections as possible
+    multi_accept        on;
+    worker_connections  1024; 
+    use                 epoll;
+}   
+
+http {
+
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+
+    upstream backend {
+        server DOWNSTREAM_ADDRESS:DOWNSTREAM_PORT;
+        keepalive 1024; # more than twice the number of client connections, since warmup will already reserve a set
+    }
+    
+    server {
+        listen 8080 ssl;
+
+        ssl_certificate /etc/ssl/certs/testCert.crt;
+        ssl_certificate_key /etc/ssl/private/testCert.rsa;
+
+        # Disable TLS session resumption
+        ssl_session_cache off;
+        ssl_session_tickets off;
+
+        server_name _;
+
+        access_log off;
+        error_log stdout info;
+
+        # returns plain text response
+        location /hello-world {
+            return 200 'Hello World!';
+            add_header Content-Type text/plain;
+        }
+
+        location / {
+            proxy_pass DOWNSTREAM_SCHEME://backend;
+            proxy_http_version 1.1;
+            proxy_set_header Connection ""; # Remove the Connection header if the client sends it, we don't want to close the upstream connection
+        }
+    }
+}

docker/nginx/nginx.dockerfile

@@ -4,6 +4,9 @@ ARG SERVER_SCHEME=http
 # http, http2
 ARG SERVER_PROTOCOL=http
 
+# custom scenario
+ARG CUSTOM_SCENARIO=default
+
 # NOTE: nginx doesn't support http2 connections to the upstream server
 
 FROM mcr.microsoft.com/cbl-mariner/base/nginx:1 AS base
@@ -20,17 +23,17 @@ ADD run.sh /
 RUN chmod +x /run.sh
 
 # Listening to http connections
-FROM base AS scheme-http-http
+FROM base AS scheme-http-http-default
 # ARG SERVER_SCHEME 
 ADD nginx-http.conf /etc/nginx/nginx.conf
 
 # Listening to https connections
-FROM base AS scheme-https-http
+FROM base AS scheme-https-http-default
 # ARG SERVER_SCHEME
 ADD nginx-https.conf /etc/nginx/nginx.conf
 
 # Listening to h2 connections
-FROM base AS scheme-https-http2
+FROM base AS scheme-https-http2-default
 # ARG SERVER_SCHEME
 ADD nginx-http2.conf /etc/nginx/nginx.conf
 
@@ -40,10 +43,15 @@ ADD nginx-http2.conf /etc/nginx/nginx.conf
 # ADD nginx-http2.conf /etc/nginx/nginx.conf
 
 # Listening to gRPC connections
-FROM base AS scheme-https-grpc
+FROM base AS scheme-https-grpc-default
 # ARG SERVER_SCHEME
 ADD nginx-grpc.conf /etc/nginx/nginx.conf
 
-FROM scheme-${SERVER_SCHEME}-${SERVER_PROTOCOL} AS final
+# Listening to simple TLS connections
+FROM base AS scheme-https-http-tls
+# ARG SERVER_SCHEME
+ADD nginx-plain-tls.conf /etc/nginx/nginx.conf
+
+FROM scheme-${SERVER_SCHEME}-${SERVER_PROTOCOL}-${CUSTOM_SCENARIO} AS final
 
 ENTRYPOINT ["/run.sh"]

docker/nginx/run.sh

@@ -7,4 +7,6 @@ sed -i "s|DOWNSTREAM_SCHEME|$DOWNSTREAM_SCHEME|g" /etc/nginx/nginx.conf
 sed -i "s|DOWNSTREAM_ADDRESS|$DOWNSTREAM_ADDRESS|g" /etc/nginx/nginx.conf
 sed -i "s|DOWNSTREAM_PORT|$DOWNSTREAM_PORT|g" /etc/nginx/nginx.conf
 cat /etc/nginx/nginx.conf
+
+echo "$(date) - Application started."
 nginx -g "daemon off;"

scenarios/tls.benchmarks.yml

@@ -72,6 +72,24 @@ jobs:
     environmentVariables:
       urls: "https://*:8080" # any ip, port 8080
 
+  dockerLinuxNginxServer:
+    source:
+      Repository: https://github.com/aspnet/benchmarks.git
+      BranchOrCommit: main
+      DockerFile: docker/nginx/nginx.dockerfile
+      DockerImageName: nginx-reverseproxy
+      DockerContextDirectory: docker/nginx
+    environmentVariables:
+        DOWNSTREAM_SCHEME: '{{downstreamScheme}}'
+        DOWNSTREAM_ADDRESS: '{{downstreamAddress}}'
+        DOWNSTREAM_PORT: '{{downstreamPort}}'
+        WORKER_PROCESSES: '{{cores}}'
+    buildArguments: 
+      - SERVER_SCHEME=https
+      - SERVER_PROTOCOL=http
+      - CUSTOM_SCENARIO=tls
+    port: 8080
+
 scenarios:
 
 # HTTP.SYS