CN109120483A - A kind of firewall box performance test methods and device - Google Patents
A kind of firewall box performance test methods and device Download PDFInfo
- Publication number
- CN109120483A CN109120483A CN201811276639.7A CN201811276639A CN109120483A CN 109120483 A CN109120483 A CN 109120483A CN 201811276639 A CN201811276639 A CN 201811276639A CN 109120483 A CN109120483 A CN 109120483A
- Authority
- CN
- China
- Prior art keywords
- test
- concurrency
- amount
- newly
- built
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
- H04L43/0888—Throughput
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/50—Testing arrangements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Environmental & Geological Engineering (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
Abstract
Disclose a kind of firewall box performance test methods and device.A kind of firewall box performance test methods, which is characterized in that the described method includes: obtaining the flow structure in target network environment；According to the amount of test data of ratio and target network environment in the flow structure, the newly-built amount of test, test concurrency and test handling capacity are determined；According to the newly-built amount of the test and test concurrency, the value of newly-built amount with Relation Parameters in the preset relation of concurrency is determined；And according to the test handling capacity, determine the size of the data packet for test；Based on the newly-built amount of test, test concurrency, test handling capacity, Relation Parameters value and data package size, it is configured to the data traffic of test；Constructed data traffic is used, the performance of target firewall box in test target network environment.
Description
Technical field
This specification embodiment is related to network communication technology field more particularly to a kind of firewall box performance test methods
And device.
Background technique
In a network environment, it may include illegal network operation, seriously endanger user network safety, therefore commonly using anti-
Wall with flues (Firewall) technology blocks the threat in external network.In order to guarantee the network security of effective protection user,
It needs to test the performance of firewall.
In the prior art, refer to generally be directed to the newly-built connection number of firewall box, concurrent connection number and handling capacity three
Mark, is tested based on HTTP and udp protocol, and is usually by modification parameter that the influence of wherein 2 indexs is smaller, thus
Individually test the maximum value of another index.And in the practical application of firewall box, 3 indexs are usually to interact,
The maximum value of each index is individually tested, the practical application reference significance of cuckoo firewall box is simultaneously little.
Summary of the invention
In view of this, this specification embodiment provides a kind of firewall box performance test methods and device, technical solution
It is as follows:
A kind of firewall box performance test methods, which is characterized in that the described method includes:
The flow structure in target network environment is obtained, the flow structure includes: data in the target network environment
The ratio of the newly-built amount of flow, concurrency and handling capacity；
According to the amount of test data of ratio and target network environment in the flow structure, determines the newly-built amount of test, surveys
Try concurrency and test handling capacity；
According to the newly-built amount of the test and test concurrency, newly-built amount and Relation Parameters in the preset relation of concurrency are determined
Value；And
According to the test handling capacity, the size of the data packet for test is determined；
Based on the newly-built amount of test, test concurrency, test handling capacity, Relation Parameters value and data package size, it is configured to
The data traffic of test；
Constructed data traffic is used, the performance of target firewall box in test target network environment.
A kind of firewall box performance testing device, which is characterized in that described device includes:
Structure obtains module, and for obtaining the flow structure in target network environment, the flow structure includes: the mesh
Mark the ratio of the newly-built amount of data traffic, concurrency and handling capacity in network environment；
Test volume determining module, for the test data according to ratio and target network environment in the flow structure
Amount determines the newly-built amount of test, test concurrency and test handling capacity；
Parameter value determining module, for determining newly-built amount and concurrency according to the newly-built amount of the test and test concurrency
Preset relation in Relation Parameters value；And according to the test handling capacity, determine the size of the data packet for test；
Flow constructing module, for based on the newly-built amount of test, test concurrency, test handling capacity, Relation Parameters value and number
According to packet size, it is configured to the data traffic of test；
Performance test module, for using constructed data traffic, target firewall is set in test target network environment
Standby performance.
Technical solution provided by this specification embodiment, can with the actual flow structure in simulated target network environment,
Data protocol type and the similar test data flow of discharge pattern are constructed, so that test obtains the fire prevention closer to actual conditions
Wall equipment performance provides more acurrate, more practical test result for user.
It should be understood that above general description and following detailed description be only it is exemplary and explanatory, not
This specification embodiment can be limited.
In addition, any embodiment in this specification embodiment does not need to reach above-mentioned whole effects.
Detailed description of the invention
In order to illustrate more clearly of this specification embodiment or technical solution in the prior art, below will to embodiment or
Attached drawing needed to be used in the description of the prior art is briefly described, it should be apparent that, the accompanying drawings in the following description is only
The some embodiments recorded in this specification embodiment for those of ordinary skill in the art can also be attached according to these
Figure obtains other attached drawings.
Fig. 1 is the flow diagram of this specification embodiment firewall box performance test methods；
Fig. 2 is the structural schematic diagram of this specification embodiment firewall box performance testing device；
Fig. 3 is the structural schematic diagram that this specification example structure obtains module；
Fig. 4 is a kind of structural schematic diagram of this specification embodiment parameter value determining module；
Fig. 5 is another structural schematic diagram of this specification embodiment parameter value determining module.
Specific embodiment
In order to make those skilled in the art more fully understand the technical solution in this specification embodiment, below in conjunction with this
Attached drawing in specification embodiment is described in detail the technical solution in this specification embodiment, it is clear that described
Embodiment is only a part of the embodiment of this specification, instead of all the embodiments.The embodiment of base in this manual,
Those of ordinary skill in the art's every other embodiment obtained, all should belong to the range of protection.
In view of the problems of the existing technology, this specification provides a kind of firewall box performance test methods, referring to Fig. 1
Shown, this method may comprise steps of:
S101 obtains the flow structure in target network environment, and the flow structure includes: in the target network environment
The ratio of the newly-built amount of data traffic, concurrency and handling capacity；
It actually include creating amount, concurrency and gulping down in data traffic in the target network environment that firewall box is applied to
The amount of spitting.Newly-built amount refers to that the HTTP that firewall is capable of handling creates connection request number, and concurrency refers to firewall box maximum
The connection number that can be safeguarded, handling capacity refer to the maximum capacity of firewall processing data packet.Therefore, if obtaining includes target network
The flow structure of the ratio of the newly-built amount of data traffic, concurrency and handling capacity in network environment, can be according to the proportion structure
Simulating actual conditions are configured to the data traffic of test.
Including in a kind of specific embodiment of this specification embodiment, in data traffic may various protocols type
Flow, for example, HTTP flow, ftp flow amount, flow media flux, etc..The data flow of test is configured in simulating actual conditions
When amount, the flow of different agreement type can also be simulated respectively.
Specifically, several data protocol types for including in target network environment can be determined first, and then statistics institute is true
The ratio of the data traffic of fixed each data protocol type, for example, altogether including HTTP flow, ftp flow amount in target network environment
And the data traffic of three kinds of protocol types of flow media flux, and be HTTP flow to the statistical result of three kinds of flow proportionals:
Ftp flow amount: flow media flux=8:1:1.
Further, it is also possible to be directed to identified each data protocol type, count in the data traffic of the type create amount,
The ratio of concurrency and handling capacity.For example, being counted newly-built amount: concurrency: handling capacity=1:40:4 for HTTP flow；It is right
In ftp flow amount, newly-built amount: concurrency: handling capacity=1:10:50 is counted；For flow media flux, newly-built amount is counted: simultaneously
Hair amount: handling capacity=1:10:10.
S102 determines that test is newly-built according to the amount of test data of ratio and target network environment in the flow structure
Amount, test concurrency and test handling capacity；
The amount of test data constructed in this specification scheme, be according to the actual situation in create amount, concurrency and handling capacity
Ratio construction, therefore according to the ratio in the flow structure obtained in S101, and for total data volume of test,
Newly-built amount, test concurrency and test handling capacity are tested to determine.
As previously described, it may include the flow of various protocols type in data traffic, correspondingly, reality can also be simulated
Situation construction includes the amount of test data of various protocols type, therefore, in a kind of specific embodiment of this specification embodiment
In, it can be first according to the test of the ratio of the data traffic of each data protocol type counted and target network environment
Data volume determines the amount of test data of each data protocol type.It then, can basis for any data protocol type
The ratio of amount, concurrency and handling capacity and the amount of test data of identified the type are created in the data traffic of the type,
Determine the newly-built amount of the test of the type, test concurrency and test handling capacity.
S103 determines newly-built amount and closes in the preset relation of concurrency according to the newly-built amount of the test and test concurrency
It is the value of parameter；And according to the test handling capacity, determine the size of the data packet for test；
The ratio of all kinds of flows in the amount of test data that determination need to construct, so that it is determined that after the test volume of all kinds of flows,
When actual configuration test data, it is preferred that emphasis is how to realize newly-built amount, concurrency and handling capacity, according to identified ratio and deposit
Obtain amount of test data.
Firstly, for newly-built amount and concurrency, specific numerical relation can be constructed in advance therebetween, and pass through test
Newly-built amount determines the value of Relation Parameters in preset relation with test concurrency.Further, it is also possible to preparatory for different protocol types
Different numerical relations is constructed, accordingly, in the value for determining Relation Parameters, any data protocol type can be directed to,
Determine the newly-built amount of the type and the preset relation of concurrency；Then concurrency is measured and tests according to the test of the type is newly-built,
Determine the value of Relation Parameters in the newly-built amount of the type and the preset relation of concurrency.
For example, the preset relation of newly-built amount and concurrency can be with are as follows: newly-built amount=concurrency/climbing time, climb the time
Refer to and creates or concurrently as 0 to the time required for setting maximum value.Then can further, according to the newly-built amount of the test with
Test concurrency, the value of calculated relationship parameter climbing time.
Further, it is also possible to which setting Relation Parameters connect the value of aging waiting time according to the value of the climbing time, such as set
Setting the connection aging waiting time is equal to the climbing time, to realize routinely newly-built connection, avoids reaching test when concurrency
When aim parameter, be not achieved because creating quantitative change and being 0 expected from proportion structure in amount of test data.
In another example the preset relation of newly-built amount and concurrency can be with are as follows: concurrency=newly-built amount * is torn open the chain waiting time, and
And further, according to the newly-built amount of the test and test concurrency, calculated relationship parameter tears the value of chain waiting time open.
S104, based on the newly-built amount of test, test concurrency, test handling capacity, Relation Parameters value and data package size, construction
Data traffic for test；
When being configured to the data traffic of test based on this programme, it can individually control, adjust each protocol type
The numerical value of amount, concurrency and handling capacity is created in test data flow.
S105 uses constructed data traffic, the performance of target firewall box in test target network environment.
As it can be seen that using above scheme data protocol class can be constructed with the actual flow structure in simulated target network environment
Type and the similar test data flow of discharge pattern are so that test obtains the firewall box performance closer to actual conditions
User provides more acurrate, more practical test result.
Corresponding to above method embodiment, this specification embodiment also provides a kind of firewall box performance testing device,
It is shown in Figure 2, the apparatus may include:
Structure obtains module 110, and for obtaining the flow structure in target network environment, the flow structure includes: institute
State the ratio of the newly-built amount of data traffic, concurrency and handling capacity in target network environment；
Test volume determining module 120, for the test number according to ratio and target network environment in the flow structure
According to amount, the newly-built amount of test, test concurrency and test handling capacity are determined；
Parameter value determining module 130, for according to the newly-built amount of the test and test concurrency, determine newly-built amount with it is concurrent
The value of Relation Parameters in the preset relation of amount；And according to the test handling capacity, determine the big of the data packet for test
It is small；
Flow constructing module 140, for based on the newly-built amount of test, test concurrency, test handling capacity, Relation Parameters value and
Data package size is configured to the data traffic of test；
Performance test module 150, for using constructed data traffic, target firewall in test target network environment
The performance of equipment.
Shown in Figure 3 in a kind of specific embodiment of this specification embodiment, the structure obtains module 110,
May include:
Type determination module 111, for determining several data protocol types for including in target network environment；
Ration statistics submodule 112, the ratio of the data traffic for counting identified each data protocol type；With
And for identified each data protocol type: counting and create amount, concurrency and handling capacity in the data traffic of the type
Ratio.
In a kind of specific embodiment of this specification embodiment, the test volume determining module 120 can be used specifically
In:
According to the ratio of the data traffic of each data protocol type counted and the test data of target network environment
Amount, determines the amount of test data of each data protocol type；
For any data protocol type: according to amount newly-built in the data traffic of the type, concurrency and handling capacity
Ratio and identified the type amount of test data, determine the newly-built amount of the test of the type, test concurrency and test
Handling capacity.
In a kind of specific embodiment of this specification embodiment, the parameter value determining module 130 can be used specifically
In:
For any data protocol type: determining the newly-built amount of the type and the preset relation of concurrency；
According to the newly-built amount of the test of the type and test concurrency, the newly-built amount of the type and the default pass of concurrency are determined
The value of Relation Parameters in system.
In a kind of specific embodiment of this specification embodiment, the preset relation of the newly-built amount and concurrency can
To include: newly-built amount=concurrency/climbing time；
Shown in Figure 4, the parameter value determining module 130 may include:
First determines submodule 131, for according to the newly-built amount of the test and test concurrency, the climbing of calculated relationship parameter
The value of time；
Second determines submodule 132, for the value according to the climbing time, when setting Relation Parameters connect aging waiting
Between value.
In a kind of specific embodiment of this specification embodiment, the preset relation of the newly-built amount and concurrency can
To include: that concurrency=newly-built amount * tears the chain waiting time open；
Shown in Figure 5, the parameter value determining module 130 may include:
Third determines submodule 133, for according to the newly-built amount of the test and test concurrency, calculated relationship parameter to tear chain open
The value of waiting time.
The function of each unit and the realization process of effect are specifically detailed in the above method and correspond to step in above-mentioned apparatus
Realization process, details are not described herein.
For device embodiment, since it corresponds essentially to embodiment of the method, so related place is referring to method reality
Apply the part explanation of example.The apparatus embodiments described above are merely exemplary, wherein described be used as separation unit
The unit of explanation may or may not be physically separated, and component shown as a unit can be or can also be with
It is not physical unit, it can it is in one place, or may be distributed over multiple network units.It can be according to actual
The purpose for needing to select some or all of the modules therein to realize this specification example scheme.Ordinary skill people
Member can understand and implement without creative efforts.
Although this specification includes many specific implementation details, these are not necessarily to be construed as the model for limiting any invention
It encloses or range claimed, and is primarily used for describing the feature of the specific embodiment of specific invention.In this specification
Certain features described in multiple embodiments can also be combined implementation in a single embodiment.On the other hand, individually implementing
Various features described in example can also be performed separately in various embodiments or be implemented with any suitable sub-portfolio.This
Outside, although feature can work in certain combinations as described above and even initially so be claimed, institute is come from
One or more features in claimed combination can be removed from the combination in some cases, and claimed
Combination can be directed toward the modification of sub-portfolio or sub-portfolio.
Similarly, although depicting operation in the accompanying drawings with particular order, this is understood not to require these behaviour
Make the particular order shown in execute or sequentially carry out or require the operation of all illustrations to be performed, to realize desired knot
Fruit.In some cases, multitask and parallel processing may be advantageous.In addition, the various system modules in above-described embodiment
Separation with component is understood not to be required to such separation in all embodiments, and it is to be understood that described
Program assembly and system can be usually integrated in together in single software product, or be packaged into multiple software product.
The specific embodiment of theme has been described as a result,.Other embodiments are within the scope of the appended claims.?
In some cases, the movement recorded in claims can be executed in different order and still realize desired result.This
Outside, the processing described in attached drawing and it is nonessential shown in particular order or sequential order, to realize desired result.In certain realities
In existing, multitask and parallel processing be may be advantageous.
The foregoing is merely the preferred embodiments of this specification embodiment, do not implement to limit this specification
Example, all within the spirit and principle of this specification embodiment, any modification, equivalent substitution, improvement and etc. done should all include
Within the scope of the protection of this specification embodiment.
Claims (10)
1. a kind of firewall box performance test methods, which is characterized in that the described method includes:
The flow structure in target network environment is obtained, the flow structure includes: data traffic in the target network environment
Newly-built amount, the ratio of concurrency and handling capacity；
According to the amount of test data of ratio and target network environment in the flow structure, the newly-built amount of test, test are determined simultaneously
Hair amount and test handling capacity；
According to the newly-built amount of the test and test concurrency, newly-built amount and Relation Parameters in the preset relation of concurrency are determined
Value；And
According to the test handling capacity, the size of the data packet for test is determined；
Based on the newly-built amount of test, test concurrency, test handling capacity, Relation Parameters value and data package size, it is configured to test
Data traffic；
Constructed data traffic is used, the performance of target firewall box in test target network environment.
2. the method according to claim 1, wherein the flow structure obtained in target network environment, packet
It includes:
Determine several data protocol types for including in target network environment；
The ratio of the data traffic of each data protocol type determined by counting；And
For identified each data protocol type: counting and create amount, concurrency and handling capacity in the data traffic of the type
Ratio.
3. according to the method described in claim 2, it is characterized in that, the ratio and target network according in the flow structure
The amount of test data of network environment determines the newly-built amount of test, test concurrency and test handling capacity, comprising:
According to the ratio of the data traffic of each data protocol type counted and the amount of test data of target network environment,
Determine the amount of test data of each data protocol type；
For any data protocol type:
According to the survey for the ratio and identified the type for creating amount, concurrency and handling capacity in the data traffic of the type
Data volume is tried, determines the newly-built amount of the test of the type, test concurrency and test handling capacity.
4. according to the method described in claim 3, it is characterized in that, described according to the newly-built amount of the test and test concurrency,
Determine the value of newly-built amount with Relation Parameters in the preset relation of concurrency, comprising:
For any data protocol type:
Determine the newly-built amount of the type and the preset relation of concurrency；
According to the newly-built amount of the test of the type and test concurrency, determine in the newly-built amount of the type and the preset relation of concurrency
The value of Relation Parameters.
5. the method according to claim 1, wherein the preset relation of the newly-built amount and concurrency, comprising:
Newly-built amount=concurrency/climbing time；
It is described that amount and test concurrency are created according to the test, determine the amount of creating and Relation Parameters in the preset relation of concurrency
Value, comprising:
Newly-built amount and test concurrency, the value of calculated relationship parameter climbing time are tested according to described；
According to the value of the climbing time, setting Relation Parameters connect the value of aging waiting time.
6. the method according to claim 1, wherein the preset relation of the newly-built amount and concurrency, comprising:
Concurrency=newly-built amount * tears the chain waiting time open；
It is described that amount and test concurrency are created according to the test, determine the amount of creating and Relation Parameters in the preset relation of concurrency
Value, comprising:
According to the newly-built amount of the test and test concurrency, calculated relationship parameter tears the value of chain waiting time open.
7. a kind of firewall box performance testing device, which is characterized in that described device includes:
Structure obtains module, and for obtaining the flow structure in target network environment, the flow structure includes: the target network
The ratio of the newly-built amount of data traffic, concurrency and handling capacity in network environment；
Test volume determining module, for the amount of test data according to ratio and target network environment in the flow structure, really
Fixed test is newly-built to measure, tests concurrency and test handling capacity；
Parameter value determining module, for testing newly-built amount and test concurrency according to described, determining newly-built amount is pre- with concurrency
If the value of Relation Parameters in relationship；And according to the test handling capacity, determine the size of the data packet for test；
Flow constructing module, for based on the newly-built amount of test, test concurrency, test handling capacity, Relation Parameters value and data packet
Size is configured to the data traffic of test；
Performance test module, for using constructed data traffic, target firewall box in test target network environment
Performance.
8. device according to claim 7, which is characterized in that the structure obtains module, comprising:
Type determination module, for determining several data protocol types for including in target network environment；
Ration statistics submodule, the ratio of the data traffic for counting identified each data protocol type；And for institute
Determining each data protocol type: the ratio that amount, concurrency and handling capacity are created in the data traffic of the type is counted.
9. device according to claim 7, which is characterized in that the preset relation of the newly-built amount and concurrency, comprising: new
The amount of building=concurrency/climbing time；
The parameter value determining module, comprising:
First determines submodule, for according to the newly-built amount of the test and test concurrency, calculated relationship parameter to be climbed the time
Value；
Second determines submodule, and for the value according to the climbing time, setting Relation Parameters connect the value of aging waiting time.
10. device according to claim 7, which is characterized in that the preset relation of the newly-built amount and concurrency, comprising:
Concurrency=newly-built amount * tears the chain waiting time open；
The parameter value determining module, comprising:
Third determines submodule, for testing newly-built amount and test concurrency according to described, when calculated relationship parameter tears chain waiting open
Between value.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811276639.7A CN109120483B (en) | 2018-10-30 | 2018-10-30 | Firewall equipment performance test method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811276639.7A CN109120483B (en) | 2018-10-30 | 2018-10-30 | Firewall equipment performance test method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109120483A true CN109120483A (en) | 2019-01-01 |
| CN109120483B CN109120483B (en) | 2020-08-04 |
Family
ID=64855717
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811276639.7A Active CN109120483B (en) | 2018-10-30 | 2018-10-30 | Firewall equipment performance test method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109120483B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110535730A (en) * | 2019-09-23 | 2019-12-03 | 杭州迪普科技股份有限公司 | The IP authentication function test method and device of the network equipment |
| CN111726265A (en) * | 2020-06-19 | 2020-09-29 | 北京环境特性研究所 | Application layer firewall performance evaluation method and device |
| CN114157592A (en) * | 2021-11-09 | 2022-03-08 | 北京天融信网络安全技术有限公司 | Test system and method for network equipment flow management |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20090113045A1 (en) * | 2007-10-30 | 2009-04-30 | Embarq Holdings Company, Llc | System and method for an integrated DSL/cable modem performance test |
| CN102006616A (en) * | 2010-11-09 | 2011-04-06 | 中兴通讯股份有限公司 | Test system and test method |
| CN102082707A (en) * | 2010-12-24 | 2011-06-01 | 汉柏科技有限公司 | Parallel processing performance test method for multinuclear firewall |
| CN102970186A (en) * | 2012-12-03 | 2013-03-13 | 网神信息技术（北京）股份有限公司 | Equipment performance detection method and equipment performance detection device |
| CN103618642A (en) * | 2013-11-26 | 2014-03-05 | 广东电网公司电力科学研究院 | Firewall TCP concurrent connection testing method based on maximum new connection rate |
| CN105245393A (en) * | 2014-06-30 | 2016-01-13 | 中国移动通信集团公司 | Method and device for testing performance of firewall |
| US20160182346A1 (en) * | 2014-12-22 | 2016-06-23 | International Business Machines Corporation | Network performance testing in non-homogeneous networks |
-
2018
- 2018-10-30 CN CN201811276639.7A patent/CN109120483B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20090113045A1 (en) * | 2007-10-30 | 2009-04-30 | Embarq Holdings Company, Llc | System and method for an integrated DSL/cable modem performance test |
| CN102006616A (en) * | 2010-11-09 | 2011-04-06 | 中兴通讯股份有限公司 | Test system and test method |
| CN102082707A (en) * | 2010-12-24 | 2011-06-01 | 汉柏科技有限公司 | Parallel processing performance test method for multinuclear firewall |
| CN102970186A (en) * | 2012-12-03 | 2013-03-13 | 网神信息技术（北京）股份有限公司 | Equipment performance detection method and equipment performance detection device |
| CN103618642A (en) * | 2013-11-26 | 2014-03-05 | 广东电网公司电力科学研究院 | Firewall TCP concurrent connection testing method based on maximum new connection rate |
| CN105245393A (en) * | 2014-06-30 | 2016-01-13 | 中国移动通信集团公司 | Method and device for testing performance of firewall |
| US20160182346A1 (en) * | 2014-12-22 | 2016-06-23 | International Business Machines Corporation | Network performance testing in non-homogeneous networks |
Non-Patent Citations (1)
| Title |
|---|
| 申志华等: "防火墙性能测试研究", 《技术天地》 * |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110535730A (en) * | 2019-09-23 | 2019-12-03 | 杭州迪普科技股份有限公司 | The IP authentication function test method and device of the network equipment |
| CN110535730B (en) * | 2019-09-23 | 2020-12-29 | 杭州迪普科技股份有限公司 | IP authentication function test method and device of network equipment |
| CN111726265A (en) * | 2020-06-19 | 2020-09-29 | 北京环境特性研究所 | Application layer firewall performance evaluation method and device |
| CN114157592A (en) * | 2021-11-09 | 2022-03-08 | 北京天融信网络安全技术有限公司 | Test system and method for network equipment flow management |
| CN114157592B (en) * | 2021-11-09 | 2024-05-07 | 北京天融信网络安全技术有限公司 | Test system and method for network equipment flow management |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109120483B (en) | 2020-08-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109120483A (en) | A kind of firewall box performance test methods and device | |
| Keti et al. | Emulation of software defined networks using mininet in different simulation environments | |
| CN100471139C (en) | System and method for network test | |
| Fancy et al. | Performance evaluation of SDN controllers POX and floodlight in mininet emulation environment | |
| CN104253820B (en) | software defined network safety control system and control method | |
| CN110430096A (en) | A kind of gateway test method and equipment | |
| CN105393508B (en) | The method for controlling quality of service and equipment of software defined network | |
| Pena et al. | Development of a distributed firewall using software defined networking technology | |
| US7555420B2 (en) | Method and system for network emulation | |
| US9178823B2 (en) | Methods, systems, and computer readable media for generating simulated network traffic using different traffic flows and maintaining a configured distribution of traffic between the different traffic flows and a device under test | |
| CN110830330B (en) | Firewall testing method, device and system | |
| CN109597729A (en) | A kind of monitoring method and device based on analog subscriber test | |
| CN109246159B (en) | Method and device for verifying security policy | |
| CN103618645A (en) | Complex network environment test system and method with intelligent simulation function | |
| CN105227406A (en) | A kind of method of testing of router combination property | |
| CN109413069A (en) | The application method and device of virtual site firewall based on block chain | |
| CN104539483A (en) | Network testing system | |
| CN111352778B (en) | Network simulation processing method and device, electronic equipment and storage medium | |
| CN102209010A (en) | Network test system and method | |
| Alssaheli et al. | Implementation of network traffic monitoring using software defined networking Ryu controller | |
| Beshay et al. | On the fidelity of single-machine network emulation in linux | |
| CN110519107A (en) | Metropolitan Area Network (MAN) circuit expansion method and device | |
| CN109688088B (en) | Method, device and tester for testing escape resistance of network intrusion protection system | |
| CN102333012A (en) | Method and device for detecting peer-to-peer (P2P) flow | |
| CN106603328B (en) | A kind of method and device for testing fluidic device protocol identification ability |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |