+ All Categories
Home > Documents > Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates...

Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates...

Date post: 09-May-2020
Category:
Upload: others
View: 4 times
Download: 0 times
Share this document with a friend
1
Transcript
Page 1: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

1

Probably the world’s best stateful traffic generation

and analysis platform

Page 2: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

2

LEARN MORE

OVERVIEW TYPES OF TESTS HARDWARE SOFTWARE KEY FEATURES

1 2 3 4 5

Page 3: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

3

OVERVIEWVulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks, NICs, packet brokers, NAT routers, bandwidth-shapers and so on perform in a wide range of real-world scenarios.

Page 4: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

4

WHAT TYPES OF TESTING?

• Performance Testing• Functional Testing• QoS and Service Validation• Security

WHO USES VULCAN?

• Enterprise IT & Security• Government & Defense• Academia• Network Service Provider• Network Equipment

Manufactures

WHAT DUTs CAN YOU TEST?

• Firewalls• Wireline & Wireless Networks• Deep Packet Inspection• Packet Brokers• NAT Routers• Bandwidth shapers

Vulcan and youOVERVIEW

Page 5: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

5

Why choose VulcanOVERVIEW

• Low HW prices

• Free SW licenses & 1-year free upgrades

• 3 years HW warranty

• Free lifetime tech support

PRICE/PERFORMANCE EASE OF USE

• Responsive and easy to use management software with an extensive set of analytic and reporting tools.

• Simple licensing system

ROCK SOLID HW

• Robust product platform

• Compact VulcanCompact 1U chassis covers 1, 2.5, 5, 10, 25, 40GE Speeds

• 1U and 2U rack mountable hardware with a wide range of port speeds offers low entry and yet a scalable solution

UNIQUE PRODUCT FEATURES

• Highly scalable UDP/TCP layer 4 traffic generation.

• High performance TLS testing suite.

• Import own application traffic or use AppMix, an extensive library of application/protocol traffic.

Page 6: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

6

System DiagramOVERVIEW

Page 7: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

7

TYPES OF TESTSVulcan is typically used for these core test solutions

Page 8: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

8

Performance TestingTYPES OF TESTS

Measuring performance, capacity and responsiveness of network devices is important to determine the overall user experience.

Layer 1 throughput and application goodput measurements reveals bottlenecks causing retransmissions and loss that can help optimizing network devices and infrastructures. The responsiveness of a network device is characterized as sessions per sec., as well as application transactions per sec. Capacity is characterized by how many simultaneous sessions/traffic flows it can handle.

• Large scale generation and analysis of TCP and UDP flows• High performance CPS and CC stress testing• Analysis of TCP throughput, and Round-Trip Time latency• High performance SSL 3.0 and TLS 1.0, 1.1, 1.2 stress

testing• Support for different TLS cipher suites and certificate key

sizes.• Scalable application traffic replay

T C P T e s t i n g T e s t i n g N G F W S A p p l i c a t i o n E m u l a t i o n

W H I T E P A P E R S _____________________________________________________________________________________________________________________________________________________________

Page 9: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

9

Verifying correct implementation of network devices during development is crucial, but often overseen is validation of correct configuration during and after deployment.

Use VulcanManager to define test cases targeting specific functionality. With the built-in high-performance TCP, UDP and application library VulcanAppMix, simple to very complex traffic scenarios spanning over multiple test ports can be configured.

• Gateway subnet to subnet routing• Network Address Translation• Traffic filtering and shaping• Lossless traffic capture for in-depth PCAP analysis of the network behavior

of the DUT/SUT.

Functional TestingTYPES OF TESTS

A d v a n c e d L a y e r 4 r e p l a y A p p l i c a t i o n E m u l a t i o n

W H I T E P A P E R S _____________________________________________________________________________________________________________________________________________________________

Page 10: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

10

QoS and Service ValidationTYPES OF TESTS

Vulcan makes it easy to test the capacity and performance of WANs (& SD-WANs) of service providers and large enterprise networks – where the focus is more on system-wide performance.

Relevant test parameters are:• End-to-end throughput and latency in a managed IP network• Optimal Maximum Segment Size (MSS). • Traffic prioritization using Differentiated Services (DS) and other QoS mechanisms. • Verify guaranteed bandwidths according to SLAs.

• Gateway subnet to subnet routing• Network Address Translation• Traffic filtering and shaping• Deep Packet Inspection• Intrusion Detection and Prevention Systems• Application traffic replay

S D W A N T C P T e s t i n g

W H I T E P A P E R S _____________________________________________________________________________________________________________________________________________________________

Page 11: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

11

Security Testing TYPES OF TESTS

The increasingly demands for security in terms of both privacy, trust as well as protecting systems from data leak and intrusion requires means for both performance and functional testing.

With Vulcans TLS features and application replay, performance and behavior of security devices can be verified. In focus for such test are both the ability to detect security breach, but also to verify that the implemented security means works as expected under high load.

• TLS/SSL• Deep Packet Inspection• Intrusion Detection and Prevention System

T r a n s p o r t L a y e r S e c u r i t y T e s t i n g N G F W S

W H I T E P A P E R S _____________________________________________________________________________________________________________________________________________________________

Page 12: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

12

HARDWAREDifferent chassis and speed licenses options to fit all needs.

W R I T E Y O U R T I T L E

Page 13: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

13

VulcanBayHARDWARE

S p e c i f i c a t i o n s

19” rack size, 2U.

Vul-28PE-10G-CU: Throughput 120Gbps, up to 12 x 4-speed 10G/5G/2.5G/1G

BASE-T interfaces.

Vul-28PE-25G: Throughput 140Gbps, up to 12 x 3-speed 25G/10G/1G SFP28

interfaces.

Vul-28PE-40G: Throughput 140Gbps,2 x QSFP+ 40GBase. Up to 8 x 3-speed

25G/10G/1G SFP28 interfaces.

• 28 million Concurrent Connections (CC)• 2.5 million Connections Per Second (CPS)• 3.0 million Transactions Per Second (TPS)• 1.00.000 Concurrent TLS Sessions

Page 14: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

14

VulcanCompactHARDWARE

S p e c i f i c a t i o n s

19” Rack size, 1U:

C-Vul-28PE-10G: Throughput 20Gbps, 2 x 2-speed 10GbE/1GbE SFP+ interfaces.

C-Vul-28PE-10G CU: Throughput 20Gbps, 2 x 4-speed

10GbE/5.0GbE/2.5GbE/10GbE RJ45 interfaces

C-Vul-28PE-25G: Throughput 40Gbps, 2 x 3-speed 25GbE/10Gbe/1GbE SFP28

and SFP+ interfaces

• 14 million Concurrent Connections (CC)• 2.5 million Connections Per Second (CPS)• 3.0 million Transactions Per Second (TPS)• 500.000 Concurrent TLS Sessions

Page 15: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

15

Enables 1G

on a Test PortEnables 1GE/

2.5GE/5GE/10GE

on a Test Port

Enables 1GE/2.5GE/

5GE/10GE/25GE

on a Test Port

Enables 1GE/2.5GE/

5GE/10GE/25GE/

40GE on a Test Port

1G 10G 25G 40G

Speed LicensesHARDWARE

V u l - V 1 G - P V u l - V 1 0 G - P V u l - V 2 5 G - P V u l - V 4 0 G - P

Page 16: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

16

SOFTWAREAt Xena we work hard to make sure your work is easy. All our software are designed to be intuitive and user-friendly.

Page 17: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

17

VulcanManagerSOFTWARE

The main software of the Vulcan line, it’s the one you’ll use most of the time

A MS Windows application used to configure and generate streams of Ethernet traffic between our stateful test equipment and devices under test (DUTs) at port speeds up to 40 Gbps and analyze the results.

Included for free with every Vulcan system. Latest version can always be downloaded here

Page 18: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

18

Test ConfigurationSOFTWARE

1. ’Tool bar’ with most common actions and configuration ‘Traffic Light’.

2. Explores to easily navigate through test configuration and statistics.

3. Configuration and detail views with graphical elements.

1

23

Page 19: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

19

Test ExecutionSOFTWARE

1. Easily setup, control and monitor test execution.

2. Use Realtime Statistics Explorer to easily navigate through the hierarchy of live statistics counters and charts.

3. View extensive set of real-time statistics and monitor test progression with real time updated gauges and charts.

1

2

3

Page 20: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

20

Statistics and ReportingSOFTWARE

1. Open previously stored test results for comparison and report creation.

2. Use Statistics Explorer to easily navigate through the hierarchy of statistics counters and charts.

3. Analyze counters and charts in details.

1

2

3

Page 21: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

21

VulcanAppMixSOFTWARE

Test your networks or devices with application traffic.

VulcanAppMix is a free library of application traffic and protocols, that makes it easy to set up large-scale realistic traffic situations from various applications, using pre-defined traffic and mix templates.

Page 22: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

22

VulcanAppMix ApplicationsSOFTWARE

AmazonApp Store AppApple MapAWS S3Bing SearchBitTorrentBloombergChromeChrome IncognitoCNNDNSDropboxeBayEmail applicationFacebookFacebook Messenger

Finance orders (FIX4.0)Finance orders (FIX4.1)Finance orders (FIX4.2)Finance orders (FIX4.3)Finance orders (FIX4.4)Finance orders (FIX5.0)Finance orders (FIXT1.1)FirefoxFirefox PrivateFlickrGmail WebGoogle AppGoogle CalendarGoogle Hangouts AppGoogle SearchGoogle Drive

Google MapsHotmail WebInstagramiOS CalendarIoT PublishIoT Publish over TLSiTunes AppLINE AppLinkedInMobile BankMySQLMySQL over TLSOutlook Web MailPayPalQQ AppReddit

Remote DesktopRSS FeedSIP VoIPSkypeSlack AppTumblrTwitterVideo stream 1080p over HTTPVideo stream 1080p over RTPWeChat AppWeiboWikipedia SearchYahooYahoo Mail WebYouTube

Page 23: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

23

VulcanAppMix ProtocolsSOFTWARE

AFSBitTorrentDNSEchoFIX4.0FIX4.1FIX4.2FIX4.3FIX4.4FIX5.0FIXT1.1FTP (active)FTP (passive)HTTPHTTPS

IMAPIMAPSLDAPLLMNRMDNSMQTTMQTTSMS Exchange MAPINBNSNFSv2NFSv3POP3POP3 over TLSQUICRDP

RTP/RTCPRTSPSIPSMB2SMTPSMTP over TLSSRTPSSDPSSHv2TELNET (per-character)TELNET (per-line)TFTP Read RequestTFTP Write Request

Page 24: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

24

VulcanAppMix Application MixesSOFTWARE

AFSBitTorrentDNSEchoFIX4.0FIX4.1FIX4.2FIX4.3FIX4.4FIX5.0FIXT1.1FTP (active)FTP (passive)HTTPHTTPS

IMAPIMAPSLDAPLLMNRMDNSMQTTMQTTSMS Exchange MAPINBNSNFSv2NFSv3POP3POP3 over TLSQUICRDP

RTP/RTCPRTSPSIPSMB2SMTPSMTP over TLSSRTPSSDPSSHv2TELNET (per-character)TELNET (per-line)TFTP Read RequestTFTP Write Request

Page 25: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

25

VulcanAppMix Application MixesSOFTWARE

Datacenter

Enterpriseinternal

Enterpriseperimeter

Finance

Web

Enterprise InternalSegment

EnterprisePerimeter Finance Datacenter Web

Mbps 6100 5730 4350 5700 7530

61005730

4350

5700

7530

0

1000

2000

3000

4000

5000

6000

7000

8000

Mbp

s

Real-World Application Mix

Page 26: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

26

Key FeaturesThese are Vulcan’s most powerful technical features.

Page 27: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

27

Responsive and easy to use management software

KEY FEATURES

1. Test Configuration

2. Test Execution

3. Statistics and Reporting

1

2

3

Page 28: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

28

Highly scalable UDP/TCP layer 4 traffic generation

KEY FEATURES

TCP connections can be customized by modifying the MAC/IP/TCP headers to create variations in the generated packets.

Traffic rates are specified as a percentage of line rate, frames per second or bit-rate, and traffic generation is controlled by a load profile specifying the speed with which connections are established and terminated.

The TCP payload can be automatically generated (random, incrementing) or customized. Payloads can also be loaded from files and different congestion control algorithms can be used to test network behavior.

Page 29: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

29

High performance TLS testing suiteKEY FEATURES

VulcanManager supports SSL 3.0, TLS 1.0, 1.1, 1.2 performance testing e.g. handshakes per second, TLS throughput, concurrent TLS connections, etc.

Users can specify different cipher suites and certificate key sizes.

With native TLS, this lets you test a device that acts in TLS proxy mode, where the device decrypts traffic on one side and encrypts on the other.

Page 30: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

30

Use own application traffic or AppMix to create and scale realistic application traffic

KEY FEATURES

• Importing PCAP for Replay scenario• PCAP files are parsed and payload extracted for replay• Replay on top of TCP stack• Support one-to-many communication pattern in PCAP• Capable of scaling from one user to millions

Page 31: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

31

1U and 2U rack mounting hardware with a wide range of port speeds offers low entry and yet a scalable solution

KEY FEATURES

C-Vul-28PE-10G 2 x 2-speed 10GbE/1GbE SFP+ interfaces.

C-Vul-28PE-10G CU 2 x 4-speed 10GbE/5.0GbE/2.5GbE/10GbE RJ45 interfaces

C-Vul-28PE-25G 2 x 3-speed 25GbE/10Gbe/1GbE SFP28 and SFP+ interfaces

Vul-28PE-10G-CU 12 x 4-speed 10G/5G/2.5G/1G BASE-T interfaces.

Vul-28PE-25G 12 x 3-speed 25G/10G/1G SFP28 interfaces.

Vul-28PE-40G 2 x QSFP+ 40GBase. Up to 8 x 3-speed 25G/10G/1G SFP28 interfaces.

Page 32: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

32

Responsive and easy to use management software

Highly scalable UDP/TCP layer 4 traffic generation

High performance TLS testing suite

Use your own application traffic or AppMix to create and scale

realistic application traffic

1U and 2U rack mounting hardware with a wide range of port

speeds offers low entry and yet a scalable solution

Vulcan – making test engineers lives easierKEY FEATURES

Page 33: Probably the world’s best stateful traffic generation and analysis …€¦ · Vulcan generates stateful Ethernet traffic to analyze how firewalls, wireline & wireless networks,

33

s a l e s @ xe n a n e t w o r k s . c o mw w w. xe n a n e t w o r k s . c o ml i n ke d i n . c o m /c o m p a ny / xe n a - n e t w o r k s@ Xe n a N e t w o r k s

THANK YOUT e s t . I m p r o v e . R e p e a t .

Recommended