#!/usr/bin/env bash

domains=(
  amd.com aws.com c.6sc.co j.6sc.co b.6sc.co intel.com r.bing.com th.bing.com
  www.amd.com www.aws.com ipv6.6sc.co www.xbox.com www.sony.com rum.hlx.page
  www.bing.com xp.apple.com www.wowt.com www.apple.com www.intel.com
  www.tesla.com www.xilinx.com www.oracle.com www.icloud.com apps.apple.com
  c.marsflag.com www.nvidia.com snap.licdn.com aws.amazon.com drivers.amd.com
  cdn.bizibly.com s.go-mpulse.net tags.tiqcdn.com cdn.bizible.com
  ocsp2.apple.com cdn.userway.org download.amd.com d1.awsstatic.com
  s0.awsstatic.com mscom.demdex.net a0.awsstatic.com go.microsoft.com
  apps.mzstatic.com sisu.xboxlive.com www.microsoft.com s.mp.marsflag.com
  images.nvidia.com vs.aws.amazon.com c.s-microsoft.com statici.icloud.com
  beacon.gtv-pub.com ts4.tc.mm.bing.net ts3.tc.mm.bing.net
  d2c.aws.amazon.com ts1.tc.mm.bing.net ce.mf.marsflag.com
  d0.m.awsstatic.com t0.m.awsstatic.com ts2.tc.mm.bing.net
  tag.demandbase.com assets-www.xbox.com logx.optimizely.com
  azure.microsoft.com aadcdn.msftauth.net d.oracleinfinity.io
  assets.adobedtm.com lpcdn.lpsnmedia.net res-1.cdn.office.net
  is1-ssl.mzstatic.com electronics.sony.com intelcorp.scene7.com
  acctcdn.msftauth.net cdnssl.clicktale.net catalog.gamepass.com
  consent.trustarc.com gsp-ssl.ls.apple.com munchkin.marketo.net
  s.company-target.com cdn77.api.userway.org cua-chat-ui.tesla.com
  assets-xbxweb.xbox.com ds-aksb-a.akamaihd.net static.cloud.coveo.com
  api.company-target.com devblogs.microsoft.com s7mbrstream.scene7.com
  fpinit.itunes.apple.com digitalassets.tesla.com d.impactradius-event.com
  downloadmirror.intel.com iosapps.itunes.apple.com se-edge.itunes.apple.com
  publisher.liveperson.net tag-logger.demandbase.com
  services.digitaleast.mobi configuration.ls.apple.com
  gray-wowt-prod.gtv-cdn.com visualstudio.microsoft.com
  prod.log.shortbread.aws.dev amp-api-edge.apps.apple.com
  store-images.s-microsoft.com cdn-dynmedia-1.microsoft.com
  github.gallerycdn.vsassets.io prod.pa.cdn.uis.awsstatic.com
  a.b.cdn.console.awsstatic.com d3agakyjgjv5i8.cloudfront.net
  vscjava.gallerycdn.vsassets.io location-services-prd.tesla.com
  ms-vscode.gallerycdn.vsassets.io ms-python.gallerycdn.vsassets.io
  gray-config-prod.api.arc-cdn.net i7158c100-ds-aksb-a.akamaihd.net
  downloaddispatch.itunes.apple.com
  res.public.onecdn.static.microsoft
  gray.video-player.arcpublishing.com
  gray-config-prod.api.cdn.arcpublishing.com
  img-prod-cms-rt-microsoft-com.akamaized.net
  prod.us-east-1.ui.gcr-chat.marketing.aws.dev
)

# 选 10 个
selected_domains=$(printf "%s\n" "${domains[@]}" | shuf | head -n 10)

echo "Testing TLS handshake latency (random 10 domains, sorted):"
echo "--------------------------------------------------------"

# 临时文件收集结果
tmpfile="$(mktemp)"

# 超时/失败统一给一个很大的数，便于排序时放到最后
TIMEOUT_SENTINEL=999999

for d in $selected_domains; do
  t1=$(date +%s%3N)
  if timeout 1 openssl s_client -connect "$d:443" -servername "$d" </dev/null &>/dev/null; then
    t2=$(date +%s%3N)
    ms=$((t2 - t1))
    # 记录：ms<TAB>domain
    printf "%s\t%s\n" "$ms" "$d" >> "$tmpfile"
  else
    # 失败/超时：999999<TAB>domain
    printf "%s\t%s\n" "$TIMEOUT_SENTINEL" "$d" >> "$tmpfile"
  fi
done

# 排序输出：ms 小的在前；999999 显示为 timeout
sort -n -k1,1 "$tmpfile" | while IFS=$'\t' read -r ms d; do
  if [[ "$ms" == "$TIMEOUT_SENTINEL" ]]; then
    echo "$d: timeout"
  else
    echo "$d: ${ms} ms"
  fi
done

rm -f "$tmpfile"