feat: use different public-key length certs for TLS

.config/CredScanSuppressions.json

@@ -18,11 +18,27 @@
       "_justification": "Legitimate development X.509 Certificate Private Key"
     },
     {
-      "file": "src/BenchmarksApps/TLS/HttpSys/testCert.pfx",
+      "file": "src/BenchmarksApps/TLS/Certificates/2048/testCert-2048.pfx",
       "_justification": "Legitimate development X.509 Certificate Private Key"
     },
     {
-      "file": "src/BenchmarksApps/TLS/Kestrel/testCert.pfx",
+      "file": "src/BenchmarksApps/TLS/Certificates/2048/cert.pem",
+      "_justification": "Legitimate development X.509 Certificate Private Key"
+    },
+    {
+      "file": "src/BenchmarksApps/TLS/Certificates/2048/key.pem",
+      "_justification": "Legitimate development X.509 Certificate Private Key"
+    },
+    {
+      "file": "src/BenchmarksApps/TLS/Certificates/4096/testCert-4096.pfx",
+      "_justification": "Legitimate development X.509 Certificate Private Key"
+    },
+    {
+      "file": "src/BenchmarksApps/TLS/Certificates/4096/cert.pem",
+      "_justification": "Legitimate development X.509 Certificate Private Key"
+    },
+    {
+      "file": "src/BenchmarksApps/TLS/Certificates/4096/key.pem",
       "_justification": "Legitimate development X.509 Certificate Private Key"
     },
     {

scenarios/tls.benchmarks.yml

@@ -1,6 +1,7 @@
 imports:
   - https://raw.githubusercontent.com/dotnet/crank/main/src/Microsoft.Crank.Jobs.Bombardier/bombardier.yml
   - https://raw.githubusercontent.com/dotnet/crank/main/src/Microsoft.Crank.Jobs.HttpClient/httpclient.yml
+  - https://github.com/dotnet/crank/blob/main/src/Microsoft.Crank.Jobs.Wrk/wrk.yml?raw=true
   - https://github.com/aspnet/Benchmarks/blob/main/scenarios/aspnet.profiles.yml?raw=true
   - https://github.com/aspnet/Benchmarks/blob/main/build/azure.profile.yml?raw=true
 
@@ -18,11 +19,12 @@ jobs:
       # behavioral settings
       mTLS: false # enables settings on http.sys to negotiate client cert on connections
       tlsRenegotiation: false # enables client cert validation
+      certPublicKeyLength: 2048 # controls cert with such a length is used for the test
       # debug settings
       certValidationConsoleEnabled: false
       statsEnabled: false
       logRequestDetails: false
-    arguments: "--urls https://{{serverAddress}}:{{serverPort}} --mTLS {{mTLS}} --certValidationConsoleEnabled {{certValidationConsoleEnabled}} --statsEnabled {{statsEnabled}} --tlsRenegotiation {{tlsRenegotiation}} --logRequestDetails {{logRequestDetails}}"
+    arguments: "--urls https://{{serverAddress}}:{{serverPort}} --mTLS {{mTLS}} --certValidationConsoleEnabled {{certValidationConsoleEnabled}} --statsEnabled {{statsEnabled}} --tlsRenegotiation {{tlsRenegotiation}} --logRequestDetails {{logRequestDetails}} --certPublicKeyLength {{certPublicKeyLength}}"
 
   kestrelServer:
     source:
@@ -35,11 +37,12 @@ jobs:
       mTLS: false
       tlsRenegotiation: false
       tlsProtocols: "tls12,tls13"
+      certPublicKeyLength: 2048 # controls cert with such a length is used for the test
       # debug settings
       certValidationConsoleEnabled: false
       statsEnabled: false
       logRequestDetails: false
-    arguments: "--urls https://{{serverAddress}}:{{serverPort}} --mTLS {{mTLS}} --certValidationConsoleEnabled {{certValidationConsoleEnabled}} --tlsProtocols {{tlsProtocols}} --statsEnabled {{statsEnabled}} --tlsRenegotiation {{tlsRenegotiation}} --logRequestDetails {{logRequestDetails}}"
+    arguments: "--urls https://{{serverAddress}}:{{serverPort}} --mTLS {{mTLS}} --certValidationConsoleEnabled {{certValidationConsoleEnabled}} --tlsProtocols {{tlsProtocols}} --statsEnabled {{statsEnabled}} --tlsRenegotiation {{tlsRenegotiation}} --logRequestDetails {{logRequestDetails}} --certPublicKeyLength {{certPublicKeyLength}}"
 
   dockerLinuxKestrelServer:
     sources:
@@ -58,13 +61,28 @@ jobs:
       certValidationConsoleEnabled: false
       statsEnabled: false  
 
+  dockerLinuxNginxServer:
+    sources:
+      dockerNginx:
+        repository: https://github.com/aspnet/benchmarks.git
+        branchOrCommit: main
+    dockerFile: dockerNginx/src/BenchmarksApps/TLS/Nginx/Dockerfile
+    dockerImageName: dockerNginx
+    dockerContextDirectory: dockerNginx/src/BenchmarksApps/TLS
+    port: 8080
+    readyStateText: Application started.
+    environmentVariables:
+      urls: "https://*:8080" # any ip, port 8080
+
 scenarios:
 
 # HTTP.SYS
 
   tls-handshakes-httpsys:
     application:
       job: httpSysServer
+      variables:
+        certPublicKeyLength: 2048
     load:
       job: httpclient
       variables:
@@ -78,14 +96,12 @@ scenarios:
     application:
       job: httpSysServer
       variables:
+        certPublicKeyLength: 2048
         mTLS: true # enables settings on http.sys to negotiate client cert on connections
         tlsRenegotiation: true # enables client cert validation
-        certValidationConsoleEnabled: false # only for debug purposes
-        serverPort: 8080 # IMPORTANT: not to intersect with other tests in case http.sys configuration impacts other benchmarks
     load:
       job: httpclient
       variables:
-        serverPort: 8080 # in sync with server
         path: /hello-world
         presetHeaders: connectionclose
         connections: 32
@@ -98,9 +114,8 @@ scenarios:
     application:
       job: httpSysServer
       variables:
-        mTLS: false
+        certPublicKeyLength: 2048
         tlsRenegotiation: true
-        certValidationConsoleEnabled: false # only for debug purposes
     load:
       job: httpclient
       variables:
@@ -117,6 +132,8 @@ scenarios:
   tls-handshakes-kestrel:
     application:
       job: kestrelServer
+      variables:
+        certPublicKeyLength: 2048
     load:
       job: httpclient
       variables:
@@ -130,8 +147,8 @@ scenarios:
     application:
       job: kestrelServer
       variables:
+        certPublicKeyLength: 2048
         mTLS: true
-        certValidationConsoleEnabled: false # only for debug purposes
     load:
       job: httpclient
       variables:
@@ -147,9 +164,9 @@ scenarios:
     application:
       job: kestrelServer
       variables:
+        certPublicKeyLength: 2048
         mTLS: false
         tlsRenegotiation: true
-        certValidationConsoleEnabled: false # only for debug purposes
     load:
       job: httpclient
       variables:
@@ -221,6 +238,21 @@ scenarios:
       job: dockerLinuxKestrelServer
       # openssl version is already pre-installed with base image (latest)
       dockerFile: dockerKestrel/src/BenchmarksApps/TLS/Kestrel/Dockerfile.azurelinux
+    load:
+      job: httpclient
+      variables:
+        path: /hello-world
+        serverPort: 8080
+        presetHeaders: connectionclose
+        connections: 32
+        serverScheme: https
+        sslProtocol: tls12
+
+  tls-handshakes-docker-nginx:
+    application:
+      job: dockerLinuxNginxServer
+      buildArguments:
+      - CERT_KEY_LENGTH=2048
     load:
       job: httpclient
       variables:

src/BenchmarksApps/TLS/Certificates/2048/cert.pem

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

src/BenchmarksApps/TLS/Certificates/2048/key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

src/BenchmarksApps/TLS/Certificates/4096/cert.pem

@@ -0,0 +1,35 @@
+Bag Attributes
+    localKeyID: 6A 28 3F AA A7 FF FC 12 9D F2 4C C0 E7 52 11 86 C7 92 62 19 
+subject=CN = localhost
+
+issuer=CN = localhost
+
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

src/BenchmarksApps/TLS/Certificates/4096/key.pem

@@ -0,0 +1,55 @@
+Bag Attributes
+    localKeyID: 6A 28 3F AA A7 FF FC 12 9D F2 4C C0 E7 52 11 86 C7 92 62 19 
+Key Attributes: <No Attributes>
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

src/BenchmarksApps/TLS/Certificates/README.md

@@ -0,0 +1,5 @@
+# Certificates
+
+Certificate public-key length contributes to performant significantly, therefore there are 2 sets of certificates in corresponding directories ([2048 bit](./2048/) and [4096 bit](./4096/)).
+
+Both directories have a `testCert.pfx` and `cert.pem`/`key.pem` (different certs, but same key-length).