README

The first (known to me) RADIUS server which was implemented natively in PHP! Based on the incredible possibilities of ReactPHP I was able to write this library. Currently RFC2865, RFC2866, RFC2868 + RFC2869 are implemented, if you want to contribute, you may follow up with RFC2867 (I'm always happy about PRs ;) ).

Example

Enter ./Example/ directory:

cd ./Example/

Load vendor Libs:

composer install

Install radclient from freeRADIUS-Project:

sudo apt install freeradius-utils

Run SkyDiablo/SkyRadius Example-Server:

php radius.php

Run the radclient in an separate console session

echo "User-Name=test,User-Password=mypass,Framed-Protocol=PPP" | radclient -x 127.0.0.1:3500 auth test

Sent Access-Request Id 31 from 0.0.0.0:52235 to 127.0.0.1:3500 length 50
        User-Name = "test"
        User-Password = "mypass"
        Framed-Protocol = PPP
        Cleartext-Password = "mypass"
Received Access-Accept Id 31 from 127.0.0.1:3500 to 0.0.0.0:0 length 110
        Reply-Message = "Echo Test-Radius-Server"
        User-Name = "test"
        User-Password = "ѣ\3332a\274\016({\312A\257P\3623\214\273-\342\331Z\035\024:\267\254i#h'\200\262\021f˷c\305y2*\201qlNh\234\236u\377\207"
        Framed-Protocol = PPP

As you can see, the echo is missing the attribute Cleartext-Password -> it isn't implemented by default, yet ;)
Also ignore the cryptic looking User-Password attribute, server-side encrypting for this attribute is also missing. But given by RFC, the server should never be doing this!

Benchmark

In extension to the example given above, you can stress-test your SkyDiablo/SkyRadius instance by improving the requests:

echo "User-Name=test,User-Password=mypass,Framed-Protocol=PPP" | radclient -n 1000 -c 99999999999 127.0.0.1:3500 auth test

In my setup I was able to handle 15k requests/sec at 90% CPU load with the demo-server mentioned here. For this I have started the radclient 5 times with -n 40000 on the same server and piped the output into > /dev/null. Used CPU: Intel(R) Xeon(R) Gold 6140 CPU @ 2.30GHz with 2 cores:

Running tests

Install development dependencies from the project root:

composer install

Run the full PHPUnit suite:

composer test

Alternatively, invoke PHPUnit directly:

./vendor/bin/phpunit

Run a single test class or method:

./vendor/bin/phpunit tests/AttributeTest.php
./vendor/bin/phpunit --filter testMethodName

Configuration lives in phpunit.xml at the project root. Deprecations, warnings, and PHPUnit notices are printed in full after the test run (displayDetailsOnAllIssues is enabled). Tests require PHP 8.1 or newer (PHPUnit 12 is used as the test runner).

TODOs

Attribute Dictionary Loader
- YAML
- JSON

Thanks

Thank you reactPHP for your brilliant work!
BaconFist has provided the benchmark server, thank you!

skydiablo / skyradius

Maintainers

Package info

Statistics

Security