Benchmarking - Re: [FW1] Throughput testing fw1 (fwd)

[Bruce Potter <gdead@fortnocs.com>]

useful

---------- Forwarded message ----------
Date: Thu, 11 Nov 1999 13:20:13 +0000
From: Ian Simpson <Ian.Simpson@snsl.co.uk>
To: spencer.kennedy@bt.com,
    fw-1-mailinglist@lists.us.checkpoint.com
Subject: Re: [FW1] Throughput testing fw1


Hi,

I have been looking at several benchmarking utilities lately for the purpose of conducting a firewall-1 performance evaluation.

Netperf for tcp/udp throughput:
http://www.netperf.org/netperf/NetperfPage.html 

Netpipe also for tcp/udp throughput:
http://www.scl.ameslab.gov/Projects/ClusterCookbook/nprun.html 

Webbench HTTP testing:
http://www.zdnet.com/zdbop/stories/main/0,8829,2387760,00.html 

Also for commercial benchmarks see:
www.benchmarkfactory.com. 

You pose a topical question regarding how Smartbits connections will be handled by FW-1's stateful inspection. Before reading Lance Spitzner's
http://www.enteract.com/~lspitz/fwtable.html document I would have agreed with you. It appears that if a rule allows the connection, it will be accepted and entered into the connections table. 
Over the next couple of weeks I will be running all sort of benchmarks against V3 and V4 FW-1 on various Solaris platforms using SmartBits. I imagine that the conclusions of the above document will be confirmed.

Hope this helps,

regds,
Ian

>>> <spencer.kennedy@bt.com> 11/11/99 12:21pm >>>


Does anyone know of any good tools for testing throughput and max number of consecutive sessions across fw1?  

I think traditional throughput testing
tools (like smartbits) simply send single packets across a device and do not
do the TCP three way handshake.  These packets will, therefore, be drooped
by fw1's stateful inspection engine.

Also, does anyone know of a reference/URL to 'ball park' figures for
throughput and max consecutive sessions on various platforms Solaris/NT/IPSO

running fw1?

Thanks,

Spencer Kennedy
Security and Advanced Networks
Data Network Engineering

BT Advanced Communications Technology Centre

 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html 
================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================