add performance pipeline #10
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: performance | |
| on: | |
| schedule: | |
| - cron: '0 0 * * *' | |
| push: | |
| branches: | |
| - master | |
| jobs: | |
| benchmark: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| openssl: [openssl-3.2] | |
| nginx: [release-1.25.3] | |
| steps: | |
| - name: Install packages | |
| run: sudo apt update -y && sudo apt-get install -y wrk | |
| - name: Config | |
| run: | | |
| cat <<EOF > nginx.conf | |
| worker_processes auto; | |
| pid nginx.pid; | |
| error_log /dev/stdout debug; | |
| events { | |
| worker_connections 4096; | |
| } | |
| http { | |
| server { | |
| listen 0.0.0.0:4433 ssl http2; | |
| access_log /dev/null; | |
| ssl_certificate_key "data:-----BEGIN EC PARAMETERS-----\nBggqhkjOPQMBBw==\n-----END EC PARAMETERS-----\n-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIL02pwZutbzkmdIM0QpvD7W3pcL2dGaeWrbQ8pNCHPFeoAoGCCqGSM49\nAwEHoUQDQgAE0Jektzpg3tJx3iPU05WwG4GweCwGWv87kkZQGB+6vG/kQQeOhnZ7\n7TCroQgY4ZVnBRZTD0lvxSyR6rwt3lWQ4A==\n-----END EC PRIVATE KEY-----\n"; | |
| ssl_certificate "data:-----BEGIN CERTIFICATE-----\nMIIBtjCCAV2gAwIBAgIUN/O0uv7B+18ohuf05ygsoC82liswCgYIKoZIzj0EAwIw\nMTELMAkGA1UEBhMCVVMxDDAKBgNVBAsMA1dlYjEUMBIGA1UEAwwLZXhhbXBsZS5v\ncmcwHhcNMjIwNzI4MTgzMzA2WhcNMjMwNzI5MTgzMzA2WjAxMQswCQYDVQQGEwJV\nUzEMMAoGA1UECwwDV2ViMRQwEgYDVQQDDAtleGFtcGxlLm9yZzBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABNCXpLc6YN7Scd4j1NOVsBuBsHgsBlr/O5JGUBgfurxv\n5EEHjoZ2e+0wq6EIGOGVZwUWUw9Jb8Uskeq8Ld5VkOCjUzBRMB0GA1UdDgQWBBSH\n9cc3JRcpyPh3nEa41Ux6RDGjLTAfBgNVHSMEGDAWgBSH9cc3JRcpyPh3nEa41Ux6\nRDGjLTAPBgNVHRMBAf8EBTADAQH/MAoGCCqGSM49BAMCA0cAMEQCIChRR5U7MMYQ\ntMK0zhNnt2SqRy30VcPIm9qoEms5cNxdAiBb273P7vSkj/PmDd1WsFVkg9NymBaT\n0nsIem2LKav60g==\n-----END CERTIFICATE-----\n"; | |
| default_type "application/json"; | |
| return 200 "#http_ssl_ja3\n#http2_fingerprint\n\nPADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING"; | |
| } | |
| } | |
| EOF | |
| cat nginx.conf | |
| - name: Clone | |
| run: | | |
| git clone -b ${{ matrix.openssl }} --depth=1 https://github.com/openssl/openssl | |
| git clone -b ${{ matrix.nginx }} --depth=1 https://github.com/nginx/nginx | |
| git clone -b master https://github.com/${GITHUB_REPOSITORY} | |
| - name: Baseline Build | |
| run: | | |
| cd nginx | |
| ./auto/configure --with-openssl=$(pwd)/../openssl --with-http_ssl_module --with-stream_ssl_module --with-stream --with-http_v2_module | |
| make | |
| - name: Baseline Performance | |
| run: | | |
| pkill nginx || true | |
| nginx/objs/nginx -p . -c nginx.conf | |
| sleep 1 | |
| wrk -c 2000 -d 10s -t 2 https://127.0.0.1:4433 | tee performance-baseline.txt | |
| - name: Patch | |
| run: | | |
| patch -p1 -d openssl < nginx-ssl-fingerprint/patches/openssl.${{ matrix.openssl }}.patch | |
| patch -p1 -d nginx < nginx-ssl-fingerprint/patches/nginx-$(echo ${{ matrix.nginx }} | cut -b9-12).patch | |
| - name: Build | |
| run: | | |
| cd nginx | |
| ./auto/configure --with-openssl=$(pwd)/../openssl --add-module=$(pwd)/../nginx-ssl-fingerprint --with-http_ssl_module --with-stream_ssl_module --with-stream --with-http_v2_module | |
| make | |
| - name: Performance | |
| run: | | |
| pkill nginx || true | |
| sed -i 's/#http/$http/g' nginx.conf | |
| nginx/objs/nginx -p . -c nginx.conf | |
| sleep 1 | |
| wrk -c 2000 -d 10s -t 2 https://127.0.0.1:4433 | tee performance-fingerprint.txt |