Add e2e test coverage for non-HTTP egress traffic #1017

Activity

1. haiyanmeng

   self-assigned this

   on Aug 17, 2026
2. haiyanmeng

   added

   area/network

   on Aug 17, 2026
3. haiyanmeng

   added the

   Task

   issue type on Aug 17, 2026
4. haiyanmeng commented on Aug 18, 2026

   

   haiyanmeng

   on Aug 18, 2026

   CollaboratorAuthor

   More actions

   #1024 adds test coverage for SSH traffic

   I plan to add e2e test coverage for WebSockets and SSE today.

   Are there other types of traffic we need to cover? Bowei Du (@bowei) Lior Lieberman (@LiorLieberman)
5. bowei commented on Aug 18, 2026

   

   Bowei Du (bowei)

   on Aug 18, 2026

   Last edited by haiyanmeng

   Collaborator

   More actions

   We can add to fill out the matrix. I do not expect everything to pass:

   (All HTTP variants should be tested with HTTP/1.1, HTTP/2, HTTP/3)
   (All protocols should be tested against IPv4, IPv6)

   • TCP ping/pong, client-initiated
     • e2e: cover egress for raw TCP and SSH traffic, in both speaking orders #1024
   • TCP pong/ping, client connects, server sends data first
     • e2e: cover egress for raw TCP and SSH traffic, in both speaking orders #1024
   • GRPC request / response
     • e2e: cover egress on grpc requests and bidi streaming #1119
   • GRPC bi-di streaming
     • e2e: cover egress on grpc requests and bidi streaming #1119
   • {HTTP,HTTPS} on standard port
     • TestActorEgressHTTP and TestActorEgressHTTPS
   • HTTP/1.1 on non-80 port
     • e2e: add a egress test on http request to non 80 port #1054
   • HTTPS/1.1 on non-443 port
     - Yufan Su (@yufan-su) will work on this
   • HTTP upgrade to WebSocket
     - Yufan Su (@yufan-su) will work on this
   • HTTPS upgrade to WebSocket
     - Yufan Su (@yufan-su) will work on this
   • HTTP CONNECT (Actor itself initiates a CONNECT)
   • HTTPS CONNECT (Actor itself initiates a CONNECT)
   • HTTP/3 QUIC plaintext
   • HTTP/3 QUIC encrypted
   • UDP ping/pong
   • SSH protocol
     • e2e: cover egress for raw TCP and SSH traffic, in both speaking orders #1024
   • DNS
   • mysql protocol

   👍React with 👍2Reacted by haiyanmeng and Adhita Selvaraj
6. Bowei Du (bowei)

   pinned and unpinned a comment on Aug 18, 2026
7. Aditya Shantanu (aditya-shantanu)

   added

   kind/featureAn enhancement / feature request or implementationAn enhancement / feature request or implementation

   on Aug 18, 2026
8. haiyanmeng

   added a commit that references this issue on Aug 24, 2026

   e2e: add a egress test on http request to non 80 port (#1054)

   ...

   8cb13f2
9. haiyanmeng commented on Aug 25, 2026

   

   haiyanmeng

   on Aug 25, 2026

   CollaboratorAuthor

   More actions

   Yufan Su (@yufan-su) , I am going to work on the test coverage for raw TCP and SSH traffic next.

   Can you add test coverage for HTTPS/1.1 on non-443 port, HTTP upgrade to WebSocket, and HTTPS upgrade to WebSocket?

   👍React with 👍1Reacted by Yufan Su
10. haiyanmeng

    changed the title [-]Add e2e test coverage for non-HTTP traffic[/-] [+]Add e2e test coverage for non-HTTP egress traffic[/+] on Aug 25, 2026
11. haiyanmeng

    added a commit that references this issue on Aug 27, 2026

    e2e: merge the networking e2e test fixtures into one binary called te…

    ...

    00afdf9
12. haiyanmeng commented on Sep 13, 2026

    

    haiyanmeng

    on Sep 13, 2026

    CollaboratorAuthor

    More actions

    Adhita Selvaraj (@swiftdiaries) , do you want to pick up the work of adding test coverage for HTTPS/1.1 on non-443 port, HTTP upgrade to WebSocket, and HTTPS upgrade to WebSocket? One example to look into is TestActorEgressNonStandardPort. Thanks!

    👍React with 👍1Reacted by Adhita Selvaraj

    ❤️React with ❤️1Reacted by Adhita Selvaraj
13. haiyanmeng

    assigned

    Bowei Du (bowei)

    and unassigned

    haiyanmeng

    on Oct 2, 2026
14. Deepak DHAKAD (dhakad22klx)

    added a commit that references this issue on Oct 10, 2026

    Add E2E HTTPS egress tests and reject WebSocket upgrades (agent-subst…

    ...

    f200630