Solution Set - Testing Framework on

AWS Cloud

1

Blazeclan

Cloud Testing: Why it Matters

Cloud IT Better 2

Source : Aberdeen Research

Poor Application

Performance

= Loss of Revenue

60% organizations loss 9% of revenue due to Poor Application

Blazeclan

Challenges

Cloud IT Better 3

Large Scale

High Availability

Security Concerns

Cloud

Architectures

Cost Effective

On Demand

Accurate

Agile

Needs

Advance Testing

Framework

Blazeclan

Load Testing – Custom Load Testing Script

Cloud IT Better 4

- Increased User

Load

- Increased

Transactions

- Increased database

volume

Condition for an

application to Scale

Up or Scale out

Custom load testing

scripts, deployed on a

slave-master

architecture that

emulate thousands of

virtual users

performing real-life

transactions on a

system emulating

production traffic.

-Create test scripts

-Launch EC2

Machines

-Configure test

-Execute using

Jmeter

-Download Test

results

Testing on AWS Cloud Load Testing Testing Scripts

Blazeclan Cloud IT Better 5

Controller

Master Slaves Slaves Slaves

Virtual

Users Virtual

Users Virtual

Users

Web App

Server

Security Group

EC2 Instance

Security Group

EC2 Instance

Security Group

EC2 Instance

Security Group

EC2 Instance

Auto scaling Group

Web App

Server Web App

Server

Web App

Server

Availability Zone #

Region

Load

testing

scripts

Requests E L B

Instance starts if threshold meets

Default Instances

for load serving

Add

Auto Scaling

Load Testing – On AWS

Blazeclan

Load Testing on AWS – What it Includes

Cloud IT Better 6

Real-Time Analytics

Test Cloud

Rapid

Powerful

reporting

Dynamic

Create your

test Scenario

Accurate

and easy

to

simulate

load

Build,

execute, &

analyze

performance

Blazeclan

Vulnerability Assessment Testing – BlazeClan VAS

Cloud IT Better 7

Vulnerability testing

- identify the security holes.

- vulnerabilities in the application.

- forecasts the potential hazards.

Blazeclan VAS

Vulnerability

Assessment tool

Browser based

tool

Built on top of

Open VAS

Image courtesy :

http://dgdsbygo8mp3h.cloudfront.net/sites/default/files/Article-

Images/cissp-article4-image01.png

The scanner very

Efficiently executes

the actual Network

Vulnerability Tests

(NVTs) on the target.

Blazeclan Cloud IT Better 8

OpenVAS

Scanner

Amazon

Route 53

Elastic

Load

Balancer

Region

EC2 Instances

Auto scaling Group

Availability Zone #

Security Group

Web App

Server

OpenVAS

Manager

NVT’s

BlazeClan

VAS Browser based

client

SC

AN

TA

RG

ET

S

Internet

NVT Feeds

BlazeClan VAS – Architectural Diagram

Blazeclan

Vulnerability (Security) Testing – What it Includes

Cloud IT Better 9

• Discovery

• Vulnerability Scan

• Vulnerability Assessment

• Security Assessment

• Penetration Test

• Security Audit

• Configuration of the application or the server

• Services running on the server

• Existing user or customer data hosted by the application

• Spoofing

• URL manipulation

• SQL injection

• XSS (Cross Site Scripting)

Blazeclan

Availability Testing - Chaos Monkey

Cloud IT Better 10

Chaos Monkey,

“randomly disables

production instances to

make sure it can survive

common types of failure

without any customer

impact”

Availability testing

means:

Run application for

a period of time

Collect failures

Compare the

percentage of

availability.

EC2 EC2 EC2 EC2

Auto scaling Group

Auto Scaling group launches new instances

as and when threshold condition meets.

- Identify the

failure events

- Repair time

- Recovery from

failures

Availability testing

Blazeclan

Checking for availability by killing instances

Cloud IT Better 11

Web App

Server

CHAOS

MONKEY Amazon

Route 53

www.example.co

m

Elastic

Load

Balancer

Region

Availability Zone #1 Availability Zone #2 Availability Zone #4 Availability Zone #3

Security Group

EC2 Instance

Security Group

EC2 Instance

Security Group

EC2 Instance

Security Group

EC2 Instance

Web App Server

Web App Server

Web App Server

Auto scaling Group

Instance starts if threshold meets

Chaos monkey

attacking

instances

randomly

Chaos monkey

attacking instances

randomly

1

2

3

5

6

7

Web App

Server Web App

Server

Web App

Server 3 3 3

4

5

6

7

Blazeclan

How Chaos Monkey Works

Cloud IT Better 12

Web App Server

Security Group

EC2 Instance

Security Group

EC2 Instance

Security Group

EC2 Instance

Security Group

EC2 Instance

Web App Server

Web App Server

Web App Server

Auto scaling Group

Monitoring

Server

Activities

Conditions on meeting

threshold

Add a

Resource

Remove a

Resource

Attacking a

Resource

Randomly

Attacking a

Resource

Randomly

Chaos Monkey

Rep

ort

ing

se

rve

r

ac

tivit

ies

Launch

new Server

Chaos Monkey

Blazeclan

Availability Test - What it Includes

Cloud IT Better 13

The availability

testing is

performed to

remove single

point of failures

Test the Change

Control Process

Test

Catastrophic

Failure

Test the

Failover

Technologies

Mean

Time To

Recover

Test the

Monitoring

Technology

Test the Help

Desk

Procedures

Test for

Resource

Conflicts

Mean Time

Between

Failure

Mean

Logistics

Delay

Time

Blazeclan

Solution Features

Cloud IT Better 14

Pre-Build

Scripts

Quick Start

Reports and

Analytics

Repository of pre-

build test scripts of

load and

performance testing.

Running

application and

Pre-baked AMI

in the cloud.

Graphical reports

and detailed

Analytics

Blazeclan

Advantage BlazeClan

Cloud IT Better 15

Cloud Focus

Pre-build Solutions

Faster Time to Market

Thank you

Thank you

www.datamation.com

Follow Us On :

Our Blog : http://blog.blazeclan.com/