name: wolfSSH Network Contention Test

on:
  push:
    branches: [ 'master', 'main', 'release/**' ]
  pull_request:
    branches: [ '*' ]
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  create_matrix:
    runs-on: ubuntu-latest
    outputs:
        versions: ${{ steps.json.outputs.versions }}
    steps:
      - name: Create wolfSSL version matrix
        id: json
        run: |
          current=`curl -s https://api.github.com/repos/wolfssl/wolfssl/releases | grep tag_name | cut -d : -f 2,3 | tr -d \" | tr -d , | tr -d ' ' | head -1`
          last=`curl -s https://api.github.com/repos/wolfssl/wolfssl/releases | grep tag_name | cut -d : -f 2,3 | tr -d \" | tr -d , | tr -d ' ' | head -2 | tail -1`
          VERSIONS=$(echo "[ \"master\", \"$current\", \"$last\" ]")
          echo "wolfSSL versions found: $VERSIONS"
          echo "versions=$VERSIONS" >> $GITHUB_OUTPUT

  build_wolfssl:
    needs: create_matrix
    strategy:
      fail-fast: false
      matrix:
        os: [ ubuntu-latest ]
        wolfssl: ${{ fromJson(needs.create_matrix.outputs['versions']) }}
    name: Build wolfssl
    runs-on: ${{ matrix.os }}
    timeout-minutes: 4
    steps:
      - name: Checking cache for wolfssl
        uses: actions/cache@v5
        id: cache-wolfssl
        with:
          path: build-dir/
          key: wolfssh-contention-wolfssl-${{ matrix.wolfssl }}-${{ matrix.os }}
          lookup-only: true

      - name: Checkout, build, and install wolfssl
        if: steps.cache-wolfssl.outputs.cache-hit != 'true'
        uses: wolfSSL/actions-build-autotools-project@v1
        with:
          repository: wolfssl/wolfssl
          ref: ${{ matrix.wolfssl }}
          path: wolfssl
          configure: --enable-ssh
          check: false
          install: true

  test_sftp_contention:
    needs:
      - build_wolfssl
      - create_matrix
    strategy:
      fail-fast: false
      matrix:
        os: [ ubuntu-latest ]
        wolfssl: ${{ fromJson(needs.create_matrix.outputs['versions']) }}
        block_prob: [ 30, 50, 70 ]
    name: SFTP contention test (prob=${{ matrix.block_prob }}%)
    runs-on: ${{ matrix.os }}
    timeout-minutes: 15
    steps:
      - name: Checking cache for wolfssl
        uses: actions/cache@v5
        with:
          path: build-dir/
          key: wolfssh-contention-wolfssl-${{ matrix.wolfssl }}-${{ matrix.os }}
          fail-on-cache-miss: true

      - uses: actions/checkout@v6
        with:
          path: wolfssh/

      - name: autogen
        working-directory: ./wolfssh/
        run: ./autogen.sh

      - name: configure with TEST_BLOCK
        working-directory: ./wolfssh/
        run: |
          ./configure --enable-sftp \
            LDFLAGS="-L${{ github.workspace }}/build-dir/lib" \
            CPPFLAGS="-I${{ github.workspace }}/build-dir/include -DWOLFSSH_TEST_BLOCK -DWOLFSSH_BLOCK_PROB=${{ matrix.block_prob }} -DWOLFSSH_NO_FPKI"

      - name: make
        working-directory: ./wolfssh/
        run: make

      - name: Setup network delay with tc/netem
        run: |
          sudo tc qdisc add dev lo root netem delay 10ms 5ms loss 0.1%
          echo "Network delay configured:"
          tc qdisc show dev lo

      - name: Run SFTP contention tests
        working-directory: ./wolfssh/
        timeout-minutes: 10
        run: ./scripts/sftp.test

      - name: Install expect for extended tests
        run: sudo apt-get update && sudo apt-get install -y expect

      - name: Create large test files
        working-directory: ./wolfssh/
        run: |
          dd if=/dev/urandom of=test_1kb.dat bs=1K count=1
          dd if=/dev/urandom of=test_2mb.dat bs=1M count=2
          dd if=/dev/urandom of=test_10mb.dat bs=1M count=10
          echo "Test files created:"
          ls -la test_*.dat

      - name: Run extended SFTP file transfer tests
        working-directory: ./wolfssh/
        timeout-minutes: 10
        run: |
          # Start echoserver in non-blocking mode
          ./examples/echoserver/echoserver -N -f &
          SERVER_PID=$!
          sleep 2

          # Create expect script for file transfers
          cat > /tmp/sftp_test.exp << 'EXPECTEOF'
          #!/usr/bin/expect -f
          set timeout 120
          set testfile [lindex $argv 0]
          set outfile [lindex $argv 1]

          spawn ./examples/sftpclient/wolfsftp -N -h 127.0.0.1 -p 22222 -u jill
          expect "Password:"
          send "upthehill\r"
          expect "wolfSSH sftp>"
          send "get $testfile $outfile\r"
          expect "wolfSSH sftp>"
          send "exit\r"
          expect eof
          EXPECTEOF
          chmod +x /tmp/sftp_test.exp

          # Test 1KB file transfer
          echo "Testing 1KB file transfer..."
          /tmp/sftp_test.exp test_1kb.dat /tmp/recv_1kb.dat
          if ! cmp -s test_1kb.dat /tmp/recv_1kb.dat; then
            echo "FAILED: 1KB file integrity check"
            kill $SERVER_PID 2>/dev/null || true
            exit 1
          fi
          echo "1KB file transfer: PASSED"

          # Test 2MB file transfer
          echo "Testing 2MB file transfer..."
          /tmp/sftp_test.exp test_2mb.dat /tmp/recv_2mb.dat
          if ! cmp -s test_2mb.dat /tmp/recv_2mb.dat; then
            echo "FAILED: 2MB file integrity check"
            kill $SERVER_PID 2>/dev/null || true
            exit 1
          fi
          echo "2MB file transfer: PASSED"

          # Test 10MB file transfer
          echo "Testing 10MB file transfer..."
          /tmp/sftp_test.exp test_10mb.dat /tmp/recv_10mb.dat
          if ! cmp -s test_10mb.dat /tmp/recv_10mb.dat; then
            echo "FAILED: 10MB file integrity check"
            kill $SERVER_PID 2>/dev/null || true
            exit 1
          fi
          echo "10MB file transfer: PASSED"

          kill $SERVER_PID 2>/dev/null || true
          echo "All extended SFTP tests PASSED"

      - name: Cleanup network delay
        if: always()
        run: sudo tc qdisc del dev lo root netem || true