scripts to test different haproxy cookie mode behaviors

cookie-suite.sh

modes=(
    #'insert'
    'indirect'
    #'insert indirect'
    #'insert preserve'
    'indirect preserve'
    #'insert indirect preserve'
    'rewrite'
    'prefix'
)

for mode in "${modes[@]}"; do
    cfg=$(mktemp haproxy.XXXXXXXX.cfg)
    sed "s/@COOKIE-MODE@/$mode/" haproxy.cfg.in >$cfg

    container_id=$(docker run -d -v $PWD/$cfg:/usr/local/etc/haproxy/haproxy.cfg:ro haproxy:1.8)
    container_addr=$(docker container inspect $container_id | jq -r .[].NetworkSettings.IPAddress)

    trap 'docker rm -f $container_id; rm -f $cfg' EXIT

    until curl -fs $container_addr/get >/dev/null; do
        if [ "$(docker container inspect $container_id | jq .[].State.ExitCode)" != 0 ]; then
            echo >&2 "container bombed: $(
                docker container inspect $container_id | jq -r .[].State.Error)"
            docker logs $container_id
            exit 1
        fi
        sleep 0.1;
    done

    bash cookie-test.sh "$mode" "$container_addr"

    docker rm -f $container_id >/dev/null
    rm -f $cfg
    trap - EXIT
done

cookie-test.sh

main() {
    local mode=$1; shift
    local httpbin=$1; shift
    local result

    for test in ${all_tests[*]}; do
        if ! result=$($test $httpbin); then
            complain "$test: $result"
            continue
        fi

        printf "%-32s\t%-32s\t%s\n" $test "$mode"  "$result"
    done
}

#curl() {
#    echo >&2 "$test: curl $*"
#    command curl -v "$@" 2> >(sed "s/^/$test: /" >/dev/tty)
#}

all_tests=()

complain() {
    if tty -s <&2; then
        tput >&2 setaf 1
        echo >&2 "$@"
        tput >&2 sgr 0
    else
        echo >&2 "$@"
    fi
}

#all_tests+=(test-no-cookie-visibility)
test-no-cookie-visibility() {
    local result=$(curl -s $1/cookies | jq -c .cookies.build)
    case "$result" in
        null) echo invisible;;
        '"one"') echo visible;;
        *) echo "$result"; return 1;;
    esac
}

all_tests+=(test-known-cookie-visibility)
test-known-cookie-visibility() {
    local result=$(curl -s -b build=one $1/cookies | jq -c .cookies.build)
    case "$result" in
        null) echo invisible;;
        '"one"') echo visible;;
        *) echo "$result"; return 1;;
    esac
}

all_tests+=(test-unknown-cookie-visibility)
test-unknown-cookie-visibility() {
    local result=$(curl -s -b build=two $1/cookies | jq -c .cookies.build)
    case "$result" in
        null) echo invisible;;
        '"one"') echo reset;;
        '"two"') echo visible;;
        *) echo "$result"; return 1;;
    esac
}

all_tests+=(test-no-cookie-proxy-assertiveness)
test-no-cookie-proxy-assertiveness() {
    local result=$(curl -sI $1/get | grep -m1 ^Set-Cookie:)
    case "$result" in
        "Set-Cookie: build=one;"*|\
        "Set-Cookie: build=1f6f913c14e23c49;"*)
            echo assertive;;
        "") echo non assertive;;
        *) echo "$result"; return 1;;
    esac
}

all_tests+=(test-known-cookie-proxy-assertiveness)
test-known-cookie-proxy-assertiveness() {
    local result=$(curl -s -b build=one $1/cookies | grep -m1 ^Set-Cookie:)
    case "$result" in
        "Set-Cookie: build=one;"*|\
        "Set-Cookie: build=1f6f913c14e23c49;"*)
            echo assertive;;
        "") echo non assertive;;
        *) echo "$result"; return 1;;
    esac
}

all_tests+=(test-unknown-cookie-proxy-assertiveness)
test-unknown-cookie-proxy-assertiveness() {
    local result=$(curl -s -b build=two $1/cookies | grep -m1 ^Set-Cookie:)
    case "$result" in
        "Set-Cookie: build=one;"*|\
        "Set-Cookie: build=1f6f913c14e23c49;"*)
            echo assertive;;
        "") echo non assertive;;
        *) echo "$result"; return 1;;
    esac
}

all_tests+=(test-set-cookie)
test-set-cookie() {
    local result=$(curl -sI $1/cookies/set/build/four | grep -m1 ^Set-Cookie:)
    case "$result" in
        "Set-Cookie: build=one;"*|\
        "Set-Cookie: build=1f6f913c14e23c49;"*)
            echo proxy value;;
        "Set-Cookie: build=four;"*)
            echo server value;;
        "Set-Cookie: build=one~four;"*|\
        "Set-Cookie: build=1f6f913c14e23c49~four;"*)
            echo combined value;;
        *) echo "$result"; return 1;;
    esac
}

all_tests+=(test-reset-cookie)
test-reset-cookie() {
    local result=$(curl -sI $1/cookies/delete?build | grep -m1 ^Set-Cookie:)
    case "$result" in
        "Set-Cookie: build=one;"*|\
        "Set-Cookie: build=1f6f913c14e23c49;"*)
            echo proxy value;;
        "Set-Cookie: build=; Expires=Thu, 01-Jan-1970 00:00:00 GMT;"*)
            echo server value;;
        "Set-Cookie: build=one~; Expires=Thu, 01-Jan-1970 00:00:00 GMT;"*|\
        "Set-Cookie: build=1f6f913c14e23c49~; Expires=Thu, 01-Jan-1970 00:00:00 GMT;"*)
            echo combined value;;
        *) echo "$result"; return 1;;
    esac
}

main "$@"

haproxy.cfg.in

global
    daemon
    maxconn 256

defaults
    mode http
    timeout connect 5000ms
    timeout client 50000ms
    timeout server 50000ms

listen http-in
    bind *:80
    #cookie build @COOKIE-MODE@ nocache httponly dynamic
    #dynamic-cookie-key "potatoes"
    #server httpbin 172.17.0.2:80 maxconn 32 weight 1
    cookie build @COOKIE-MODE@ nocache httponly
    server httpbin 172.17.0.2:80 maxconn 32 cookie one weight 1

The address in haproxy.cfg.in should point to an httpbin container.