M0 - Set the limit of testing time or total request number in testing.M0 - Send/Receive HTTP&HTTPS requests/responses.WAF Bench (wb) is the ab-like tool for conducting performance testing. Generate YAML files from the WAF rule set.Ĭurrently, they are still in development.Generate YAML files from the real traffic logs.Its performance is better than FTW.įor test cases, we provide several generators for different purposes: There are two important factors for conducting a WAF correctness testing: the testing framework and test cases.įor the testing framework, we provide a FTW-Compatible Tool which leverages wb as its underlying tool. Automatic WAF Correctness TestingĪutomatic WAF correctness testing can relieve developers from the heavy and tedious verifying works. Besides, WAF Bench tool suits accepts YAML-based input, which can customize your packet and reproduce multiple different packets easily. In order to get the performance experienced by the real customer and further improve WAF’s efficiency, we build wb, an ab-like tool, which could send multiple and fully-customized packets in one invoking. In addition, ab can only customize some fields of the request, which is inconvenient for testing. ab, can test the performance under only one kind of customized request, which can not reproduce the real traffic scenario. The WAF’s performance fluctuates greatly as the input traffic varies.
Motivation Real Traffic Performance Testing WAF (Web Application Firewall) Bench tool suits is designed to verify the correctness and measure the performance of WAF.