benchmark: add tls benchmark for legacy SecurePair

PR-URL: #20344
Refs: #20263
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>

Author: Alex Fernández

benchmark/tls/secure-pair.js

@@ -0,0 +1,105 @@
+'use strict';
+constcommon=require('../common.js');
+constbench=common.createBenchmark(main,{
+dur: [5],
+securing: ['SecurePair','TLSSocket'],
+size: [2,1024,1024*1024]
+});
+
+constfs=require('fs');
+consttls=require('tls');
+constnet=require('net');
+constpath=require('path');
+
+constcert_dir=path.resolve(__dirname,'../../test/fixtures');
+constREDIRECT_PORT=28347;
+
+functionmain({ dur, size, securing }){
+constchunk=Buffer.alloc(size,'b');
+
+constoptions={
+key: fs.readFileSync(`${cert_dir}/test_key.pem`),
+cert: fs.readFileSync(`${cert_dir}/test_cert.pem`),
+ca: [fs.readFileSync(`${cert_dir}/test_ca.pem`)],
+ciphers: 'AES256-GCM-SHA384',
+isServer: true,
+requestCert: true,
+rejectUnauthorized: true,
+};
+
+constserver=net.createServer(onRedirectConnection);
+server.listen(REDIRECT_PORT,()=>{
+constproxy=net.createServer(onProxyConnection);
+proxy.listen(common.PORT,()=>{
+constclientOptions={
+port: common.PORT,
+ca: options.ca,
+key: options.key,
+cert: options.cert,
+isServer: false,
+rejectUnauthorized: false,
+};
+constconn=tls.connect(clientOptions,()=>{
+setTimeout(()=>{
+constmbits=(received*8)/(1024*1024);
+bench.end(mbits);
+if(conn)
+conn.destroy();
+server.close();
+proxy.close();
+},dur*1000);
+bench.start();
+conn.on('drain',write);
+write();
+});
+conn.on('error',(e)=>{
+thrownewError(`Client error: ${e}`);
+});
+
+functionwrite(){
+while(false!==conn.write(chunk));
+}
+});
+});
+
+functiononProxyConnection(conn){
+constclient=net.connect(REDIRECT_PORT,()=>{
+switch(securing){
+case'SecurePair':
+securePair(conn,client);
+break;
+case'TLSSocket':
+secureTLSSocket(conn,client);
+break;
+default:
+thrownewError('Invalid securing method');
+}
+});
+}
+
+functionsecurePair(conn,client){
+constserverCtx=tls.createSecureContext(options);
+constserverPair=tls.createSecurePair(serverCtx,true,true,false);
+conn.pipe(serverPair.encrypted);
+serverPair.encrypted.pipe(conn);
+serverPair.on('error',(error)=>{
+thrownewError(`Pair error: ${error}`);
+});
+serverPair.cleartext.pipe(client);
+}
+
+functionsecureTLSSocket(conn,client){
+constserverSocket=newtls.TLSSocket(conn,options);
+serverSocket.on('error',(e)=>{
+thrownewError(`Socket error: ${e}`);
+});
+serverSocket.pipe(client);
+}
+
+letreceived=0;
+functiononRedirectConnection(conn){
+conn.on('data',(chunk)=>{
+received+=chunk.length;
+});
+}
+}

test/sequential/test-benchmark-tls.js

@@ -20,6 +20,7 @@ runBenchmark('tls',
 'dur=0.1',
 'n=1',
 'size=2',
+'securing=SecurePair',
 'type=asc'
 ],
 {