ndt-users list created

[Peter Boothe <>]

Hi! I wrote the code which added WSS support to NDT.

The NDT server doesn't (and can't!) automatically bind a port to accept TLS connections. Instead, you need to give the the --private_key and --certificate_file commandline options (and maybe --tls_port as well - I forget if there is a default for that, but if there is it is 3010).  Starting the server with --help will show you all the commandline options and you can find TLS support in there. Please double check with --help, because I honestly forget if the option is --private_key or --private_key_file.

WSS support is pretty recent (which is why it is not yet well documented), so you'll likely need to build from source head, rather than use one of the precompiled binaries - I don't know that PerfSONAR has distributed a version with WSS support yet. Starting the server with --help and looking for tls/ssl commandline options will tell you if your binary supports WSS. If there is no --tls_port flag, your binary is not recent enough.

  -Peter

On Fri, Apr 15, 2016 at 11:22 AM, Brian Farrell <> wrote:

Hello!

My groups is using the _javascript_ NDT library to do browser-based speed tests. We need to require our website to use HTTPS, meaning that the _javascript_ NDT library must connect with WSS.

I believe the question I need answered is: Does the NDT server automatically bind a port to accept SSL connections, or is there some configuration I need to do? My instance of NDT doesn't seem to be binding port 3010.

When I look at the NDT test from M-Lab https://www.measurementlab.net/tools/ndt/, I see that it's using a WSS connection over port 3010. However, searching the NDT codebase, the only reference to a port 3010 is in the _javascript_ client. There's no mention of port 3010 in the docs or man pages. 

I'm running NDT 3.7.0.2 on a CentOS machine. I get NDT distributed through PerfSONAR, which might be preventing SSL connections. However, I wanted to ask this community, since there doesn't seem to be any explicit discussion on SSL vs non-SSL tests.

Thanks,

Brian Farrell

--

Brian Farrell

Project Associate

Center for Geospatial Information Technology

--

ᴹ̶LAB | Measure the Internet, save the data, and make it universally accessible and useful.