Week 08

This week i am going to explore how to perform stress test on Fortinet Firewall 1500D device. to test the performance on the firewall there should be and packet generator to produce packet with relevant frames size. we cannot use simple PC to generate traffic since it adds operating system processing and network card overhead when generate packets.

Xena provides a new class of professional gigabit Ethernet test infrastructure for the Ethernet ecosystem, delivering a breakthrough price performance benchmark for load stress and functional testing of Ethernet equipment and network infrastructure. In addition, the world’s highest density and lowest power consumption per test port delivers a test platform ready for the future.

Developers and providers of Ethernet based network appliances and services can deploy the Xena Networks test platform as an ideal complement or alternative to existing test equipment solutions, at a price point which obsolete in-house custom built test solution projects

The Xena test platform provides an open environment where L2-3 traffic can be generated and performance analyzed at wire speed. Our user friendly .NET based GUI client is provided for test execution and remote management of test equipment located in multiple locations. In addition, an open TCP/IP command line based scripting API allows users to script and automate testing from any software and tool environment.

The Xena Ethernet Test Infrastructure platform provides a suite of test modules with copper and optical interface speeds of 10/100/1000 Mbps, 10 Gbps, 40 Gbps, and 100 Gbps. 

Reference : https://xenanetworks.com/product/vulcancompact/

However in normal circumference PC with iPerf3 software can be used generate unicast or multicast traffic for performance testing with less overhead with less accuracy. Basically iPerf3 is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, buffers and protocols (TCP, UDP, SCTP with IPv4 and IPv6). For each test it reports the bandwidth, loss, and other parameters.

Reference : https://iperf.fr/

Two PC has been used with iPerf software and once works as server which generate IP packet and other iPerf PC would receive the same. based on the iPerf client-server communication it determine bandwidth,delay and jitter.

below configuration shows, constructing a multicast packet destined 226.94.1.1 by iPerf Server

root@mcastserver:~# iperf -s -u -B 226.94.1.1 -i 1

Server listening on UDP port 5001
Binding to local address 226.94.1.1
Joining multicast group 226.94.1.1
Receiving 1470 byte datagrams

UDP buffer size: 122 KByte (default)

[ 3] local 226.94.1.1 port 5001 connected with 212.11.66.254 port 49525
[ ID] Interval Transfer Bandwidth Jitter Lost/Total
Datagrams
[ 3] 0.0- 1.0 sec 128 KBytes 1.05 Mbits/sec 0.037 ms 0/ 89
(0%)
[ 3] 1.0- 2.0 sec 128 KBytes 1.05 Mbits/sec 0.020 ms 0/ 89
(0%)
[ 3] 2.0- 3.0 sec 128 KBytes 1.05 Mbits/sec 0.021 ms 0/ 89
(0%)
[ 3] 0.0- 3.0 sec 386 KBytes 1.05 Mbits/sec 0.022 ms 0/ 269
(0%)
^C

below configuration shows, lightning multicast packet destined 226.94.1.1 by iPerf Server

root@mcastclient:~# iperf -c 226.94.1.1 -u -T 32 -t 3 -i 1

Client connecting to 226.94.1.1, UDP port 5001
Sending 1470 byte datagrams
Setting multicast TTL to 32

UDP buffer size: 122 KByte (default)

[ 3] local 212.11.66.254 port 49525 connected with 226.94.1.1 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0- 1.0 sec 129 KBytes 1.06 Mbits/sec
[ 3] 1.0- 2.0 sec 128 KBytes 1.05 Mbits/sec
[ 3] 2.0- 3.0 sec 128 KBytes 1.05 Mbits/sec
[ 3] 0.0- 3.0 sec 386 KBytes 1.05 Mbits/sec
[ 3] Sent 269 datagrams