newsapps / beeswithmachineguns

A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
http://apps.chicagotribune.com/
MIT License
6.44k stars 632 forks source link

Add option to specify openssl cipher suite used by ab #191

Closed FliesLikeABrick closed 6 years ago

FliesLikeABrick commented 6 years ago

Apachebench has a useful -Z option for specifying the cipher suites to use during TLS negotiation. If BWMG would expose this, the tool can then be used to verify the key exchange and cipher performance of webservers, reverse proxies, and load balancer hardware (for example verifying a vendor's datasheet spec for ECDHE key generation+exchange rate versus RSA2048, etc).

Suggestion/proposal -- provide a -Z option for BWMG to allow specification of the openssl cipher suites, akin to ab's -Z option (just pass it through to ab on the remote instances)

FliesLikeABrick commented 6 years ago

Closing - resolved by PR #192 merge.