hansjone/netx
1
0
Fork 0
mirror of https://github.com/hansjone/netx.git synced 2026-10-09 04:20:45 +08:00
Code Issues Projects Releases 1 Packages Wiki Activity Actions 2

Adopt production-safe runtime defaults and forwarder retry limits.

Browse source 
Lower CLI/WebCRT/audit caps, log startup capacity warnings, and bound oclaw requeues so reconnect storms cannot thrash memory.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-08-02 18:08:28 +08:00
parent d56020d84c
commit fa577aa3bd
22 changed files with 238 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tests/test_webcrt.py
View file

@ -304,8 +304,8 @@ class WebcrtServiceTests(unittest.TestCase):
self.assertTrue(called_creds["hop_enabled"])
self.assertEqual(called_creds["hop_vendor"], "bastion")
self.assertIn("session_log", mock_open.call_args.kwargs)
self.assertEqual(mock_open.call_args.kwargs.get("keepalive"), 0)
self.assertEqual(out.get("keepalive_sec"), 0)
self.assertEqual(mock_open.call_args.kwargs.get("keepalive"), 30)
self.assertEqual(out.get("keepalive_sec"), 30)
fake.remote_conn.resize_pty.assert_called()
self.assertEqual(out["ne_id"], "ne-hop")
self.assertFalse(out.get("cli_hop")) # bastion hop is not vendor CLI hop guard
@ -867,8 +867,8 @@ class WebcrtServiceTests(unittest.TestCase):
self.assertIn("filename=", dispo)
self.assertIn("filename*=UTF-8''", dispo)
self.assertNotIn("\n", dispo)
self.assertEqual(int(cfg.settings.webcrt_sftp_max_file_bytes), 512 * 1024 * 1024)
self.assertEqual(int(cfg.settings.webcrt_sftp_list_max_entries), 5000)
self.assertEqual(int(cfg.settings.webcrt_sftp_max_file_bytes), 256 * 1024 * 1024)
self.assertEqual(int(cfg.settings.webcrt_sftp_list_max_entries), 2000)
def test_sftp_rename_rejects_bad_paths(self) -> None:
from unittest.mock import MagicMock