Spirent TestCenter和Avalanche被Fortinet公司採用來測試其六個端口的100G高性能防火牆

Fortinet uses Spirent TestCenter and Avalanche to test their 100G Datacenter firewall FortiGate-3810D

 

Fortinet是全球高性能網絡安全領域的領導者，而思博倫通信則是網絡、設備及服務測試領域的領先供應商。兩家公司合作，在Fortinet最新的FortiGate®-3810D防火牆設備上執行了一系列全面的性能測試。

 

FortiGate®-3810D是一種專門為大型企業、通信服務提供商（CSP）和數據中心環境而設計的產品。它提供了六個100Gbps的以太網接口（6x100GbE）在3U設備上。在防火牆市場中，它是同類尺寸中第一個已上市的100G設備。 Fortinet請思博倫使用Avalanche和Spirent Test Center負載生成器，對該設備在3層和7層OSI模型下的性能進行了測試。

 

在該測試會話中，最關鍵的指標之一就是測量IPv6與IPv4是否會對網絡造成不同的影響。 Fortinet第6版的網絡處理器（NP）引入了IPv6流量加速能力，在測試過程中表現良好，IPv4和IPv6流量之間不存在任何性能差異。這類要求已經成為今天數據中心中的普遍要求。

100G以太網接口接受了直接（即直接連接負載生成器）和間接（通過互聯交換機）測試，並且達到了預期的良好表現。為執行對FortiGate-3810D的測試，我們採用了RFC 3511和RFC 2544測試方法。這些測試有三重目的:

將設備推至最高性能
驗證高負載下的行為
驗證IPv6測試流量是否會導致相較於IPv4測試流量的性能下降
 

如欲了解關於該測試結果的更多詳情，請下載完整的測試白皮書。

 

 

Fortinet’s FortiGate-3810D is a High Performance Datacenter firewall, providing six 100Gbps Ethernet interfaces (6x100GbE) in a 3U appliance. It is the first 100G appliance form factor to appear in the firewall market. Fortinet asked Spirent to test & measure the performance of the appliance using the Avalanche and Spirent Test Center load generators, both at the Layer 3 and Layer 7 of the OSI model.

 

One of the key metrics of the test session was to measure the impact—if any—of IPv6 on the performances when compared to IPv4. The version 6 of Fortinet’s Network Processor (NP), which introduces the acceleration of IPv6 traffic, has performed well with no performance differences between IPv4 and IPv6.  Such requirement is common in today’s Datacenters.

 

The 100GbE interfaces were tested both directly (load generator directly connected) and indirectly (through an interconnection switch) and behaved as expected.

 

In order to perform the test of the FortiGate-3810D, we applied RFC 3511 and RFC 2544 test methodologies.

 

The engagement goals were threefold:

• Push the device to its maximum performances
• Validate the behavior under high load
• Validate that IPv6 test traffic caused no degradation of performance when compared to the IPv4 test traffic

For more details on the results of this test please download the complete test report.