Stress-testing your network
BreakingPoint, Mu Dynamics and other high-end tools help you know whether your network can stand up to real-world attacks
By Neil Roiter
July 19, 2010 — CSO —
Contemporary IT infrastructure and applications operate in an extreme environment barely envisioned a decade ago, pushing networks to the limit and challenging the security industry to keep pace.
A handful of high-end testing products have had to evolve quickly to meet those challenges and evaluate how network and security devices perform under stress, and isolate and repair flaws.
Here's why, in a nutshell: Service provider and enterprise networks are performance-challenged, being called upon to support enormous high-speed traffic loads. That traffic is increasingly complex, comprising a growing array of protocols and applications supporting converged IP services—voice, video, data—and performance-sensitive online transactions. Throw in plenty of malicious-attack traffic and see how networks, network devices and network-based security products, from firewalls to intrusion-prevention systems (IPS), perform under stress.
How do carriers know if their infrastructure will support their service-level agreements with demanding enterprise customers? How do enterprises know if their networks and data centers can support their business requirements and whether their network and security vendors' gear is really up to the job? And how do network and security vendors know that their products can deliver what they claim in their data sheets?
In this Toolbox, we'll explain how products from BreakingPoint Systems, Ixia, Mu Dynamics and Spirent Communications can be used to test networking and security gear and the applications they support to the limit, and how different types of organizations can leverage their unique capabilities.
The marketThese are very expensive products that require permanent test-lab facilities and dedicated, expert staffing to deliver their full benefit.
Historically, the market has focused primarily on network equipment manufacturers and large service providers. Ixia and Spirent, which have specialized in generating heavy traffic, have dominated in testing load-bearing capabilities in the lower layers of the Open System Interconnection (OSI) stack.
The market has grown broader as the traffic mix has grown more complex, adding more and more protocols, high-performance applications, and attack traffic. Security vendors are important buyers now, and some government agencies "look a lot like a carrier or service provider," says Elisabeth Rainge, IDC program director for network software.
Security-sensitive agencies, especially in defense and cybersecurity, are also good customers, especially for those products emphasizing security.
Mu and BreakingPoint have entered the competition in recent years, emphasizing power security and application testing. Ixia and Spirent, which are well known for load testing, are moving up the stack as well, augmenting application and security capabilities.