Gateway performance test method and device, electronic equipment and storage medium

The establishment rate of network security connection between the test equipment and the target gateway is dynamically adjusted. According to the CPU utilization rate of the target gateway, the problem of new connection performance of ZNTA gateway such as fire wall equipment in existing technology cannot be tested. Accurate testing.

CN119382963APending Publication Date: 2025-01-28HILLSTONE NETWORKS CO LTD +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411495851.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-10-24
Publication Date
2025-01-28

AI Technical Summary

Technical Problem

The existing technology cannot effectively test the new connection performance of ZNTA gateways such as firewall devices, and cannot determine how many new ZNTA connections a device can create per second.

Method used

By controlling N testing equipment to establish a network security connection with the target gateway, dynamically adjust the connection to establish a rate according to the CPU utilization rate of the target gateway, count the successful number of connections to be established within the time of each unit to determine the performance information of the gateway.

Benefits of technology

The establishment rate of dynamic adjustment connection is achieved, which can test the new network security connection performance of the target gateway within each unit time, and solve the problem of new connection performance of ZNTA gateways such as firewall equipment in existing technology.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119382963A_ABST
    Figure CN119382963A_ABST
Patent Text Reader

Abstract

The invention discloses a gateway performance test method and device, electronic equipment and a storage medium, and relates to the technical field of communication. The method comprises: controlling each of N test devices to establish a network security connection with a target gateway at a target rate, N being a positive integer, the target rate representing the number of network security connections established by the test device with the target gateway within a unit time, N being a positive integer, the target rate representing the number of network security connections established by the test device with the target gateway within a unit time, and the target rate representing the number of network security connections established by the test device with the target gateway within a unit time; the target rate is adjusted when the CPU utilization rate of the target gateway meets a preset condition; counting the number of network security connections established between each test device and the target gateway in each unit time; and determining performance information of the target gateway according to the number of the network security connections established between each test device and the target gateway in each unit time. According to the method and the device, the technical problem that the new connection performance of ZNTA gateways such as firewall equipment cannot be tested in the prior art is solved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a gateway performance testing method, device, electronic device and storage medium. Background Art

[0002] Zero Trust Network Access (ZTNA) is a secure network connection concept based on the core idea of ​​not trusting any entity inside or outside the enterprise boundary. Only after verifying the identity of the accessing user, the device used, the access time and other environmental attributes, will ZTNA grant the user the most controllable access rights within the smallest scope. Users can securely access private applications in the cloud and data center from any location and through any device.

[0003] When using ZTNA in practice, many scenarios involve a large number of users initiating connections to the ZTNA gateway at the same time, and the gateway's ability to handle new connections is crucial. When purchasing firewall devices as ZTNA gateways, ZTNA new connection data can be used as an important indicator, so it is necessary to test the ZTNA new connection performance data of the firewall device.

[0004] The existing ZTNA concurrent testing scheme is to select multiple clients, add 1 to the initial online and offline loop variable until the preset number of loops is completed, and determine the stability of the ZTNA gateway in the process. However, the number of loops in this scheme is a manually set value, which can only test the stability under concurrency, and cannot test the specific ZTNA new connection performance of the firewall device, that is, the maximum number of new ZTNA connections that the firewall device can create per second.

[0005] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0006] The present application provides a gateway performance testing method, device, electronic device and storage medium to at least solve the technical problem in the prior art that the new connection performance of a ZNTA gateway such as a firewall device cannot be tested.

[0007] According to one aspect of the present application, a method for testing gateway performance is provided, comprising: controlling each of N test devices to establish a network security connection with a target gateway at a target rate, wherein N is a positive integer, the target rate represents the number of network security connections established between the test device and the target gateway per unit time, and the target rate is adjusted when the CPU utilization of the target gateway meets a preset condition; counting the number of network security connections successfully established between each of the test devices and the target gateway per unit time; and determining performance information of the target gateway based on the number of network security connections successfully established between each of the test devices and the target gateway per unit time.

[0008] Optionally, in the gateway performance testing method provided in the present application, before controlling each of the N test devices to establish a network security connection with the target gateway at a target rate, the gateway performance testing method also includes: obtaining script parameters, wherein the script parameters include at least connection parameters of the target gateway, configuration parameters of the network security connection, a preset threshold of the CPU utilization of the target gateway, and an initial creation rate of the network security connection, wherein the initial creation rate represents the number of network security connections established by the test device with the target gateway within a unit time during initialization; performing initialization operations on the N test devices and the target gateway according to the script parameters, wherein the initialization operation is used to control the N test devices to start establishing network security connections with the target gateway in parallel.

[0009] Optionally, in the gateway performance testing method provided in the present application, the target rate is the rate within the t-th unit time, and each of the N test devices is controlled to establish a network security connection with the target gateway at the target rate, including: when it is detected that the CPU utilization of the target gateway within the t-th unit time is less than a preset threshold of the CPU utilization of the target gateway, determining that the CPU utilization of the target gateway meets a first preset condition, increasing the target rate, and controlling each of the test devices to establish the network security connection with the target gateway according to the increased target rate within the t+1-th unit time; or, when it is detected that When the CPU utilization of the target gateway within the t-th unit time is greater than the preset threshold, it is determined that the CPU utilization of the target gateway satisfies the second preset condition, the target rate is reduced, and each of the test devices is controlled to establish the network security connection with the target gateway according to the reduced target rate within the t+1-th unit time; or, when it is detected that the CPU utilization of the target gateway within the t-th unit time is equal to the preset threshold, the target rate is kept unchanged, and each of the test devices is controlled to establish the network security connection with the target gateway according to the unchanged target rate within the t+1-th unit time.

[0010] Optionally, in the gateway performance testing method provided in the present application, when it is detected that the CPU utilization of the target gateway in the t-th unit time is less than a preset threshold, the target rate is increased, including: taking the CPU utilization of the target gateway in the t-th unit time as the first data; taking the CPU utilization of the target gateway in the t-1 unit time as the second data; taking the total number of network security connections successfully established between N test devices and the target gateway in the t-th unit time as the third data; determining the total number of new network security connections that need to be established in the t+1-th unit time based on the first data, the second data, the third data and the preset threshold; and increasing the target rate based on the total number of new network security connections that need to be established in the t+1-th unit time.

[0011] Optionally, in the gateway performance testing method provided in the present application, the target rate is increased according to the total number of new network security connections that need to be established within the t+1th unit time, including: obtaining the target rate within the tth unit time; calculating the ratio of the total number of new network security connections that need to be established within the t+1th unit time to the number of devices of the test device; rounding the ratio to obtain a fourth data; summing the target rate within the tth unit time and the fourth data to obtain a sum result; and increasing the target rate to the sum result.

[0012] Optionally, in the gateway performance testing method provided in the present application, the performance information of the target gateway is determined based on the number of network security connections successfully established between each of the test devices and the target gateway in each unit time, including: determining the performance information of the target gateway based on the number of network security connections established between each of the test devices and the target gateway in each unit time, and the CPU utilization of the target gateway in each unit time.

[0013] Optionally, the performance information of the target gateway is determined based on the number of network security connections established between each of the test devices and the target gateway in each unit time, and the CPU utilization of the target gateway in each unit time, including: determining the number of newly created network security connections in the tth unit time compared with the t-1th unit time based on the number of network security connections established between each of the test devices and the target gateway in each unit time; generating a target statistical graph based on the number of newly created network security connections in the tth unit time compared with the t-1th unit time, and the CPU utilization of the target gateway in the tth unit time and the t-1 unit time; and determining the performance information of the target gateway in different unit times based on the target statistical graph.

[0014] Optionally, in the gateway performance testing method provided in the present application, before initializing N test devices and the target gateway according to the script parameters, the gateway performance testing method also includes: upon detecting that a network security connection has been established between the target gateway and any terminal device, disconnecting the network security connection between the target gateway and any terminal device.

[0015] According to another aspect of the present application, a gateway performance testing device is also provided, including: a control unit, used to control each of N test devices to establish a network security connection with a target gateway at a target rate, wherein N is a positive integer, and the target rate represents the number of network security connections established by the test device with the target gateway within a unit time, and the target rate is adjusted when the CPU utilization of the target gateway meets a preset condition; a statistical unit, used to count the number of network security connections successfully established between each of the test devices and the target gateway within each unit time; and a performance testing unit, used to determine the performance information of the target gateway based on the number of network security connections successfully established between each of the test devices and the target gateway within each unit time.

[0016] According to another aspect of the present application, a computer-readable storage medium is provided, wherein a computer program is stored in the computer-readable storage medium, wherein when the computer program runs, the device where the computer-readable storage medium is located executes the above-mentioned gateway performance testing method.

[0017] According to another aspect of the present application, an electronic device is also provided, wherein the electronic device includes one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by one or more processors, the one or more processors execute the above-mentioned gateway performance testing method.

[0018] In the present application, a method of dynamically adjusting the rate of establishing a network security connection between a test device and a target gateway according to the CPU utilization of the target gateway is adopted. First, each of the N test devices is controlled to establish a network security connection with the target gateway at a target rate, wherein N is a positive integer, and the target rate is adjusted when the CPU utilization of the target gateway meets a preset condition. Then, the number of network security connections established between each test device and the target gateway per unit time is counted, and then the performance information of the target gateway is determined according to the number of network security connections established between each test device and the target gateway per unit time, and the CPU utilization of the target gateway per unit time.

[0019] It can be seen from the above content that by adopting the technical solution of the present application, the rate of creating a network security connection between the target gateway and each of the N test devices can be dynamically adjusted according to the change of the CPU utilization of the target gateway, and the performance information of the target gateway can be determined according to the number of network security connections established between each test device and the target gateway in each unit time, as well as the CPU utilization of the target gateway in each unit time. This not only achieves the effect of dynamically setting the number of cyclic tests, but also can dynamically test and obtain the performance information of the target gateway when establishing a new network security connection in each unit time, that is, it can test and obtain how many new network security connections a gateway device such as a firewall can establish at most in each unit time, thereby solving the technical problem in the prior art that the new connection performance of a ZNTA gateway such as a firewall device cannot be tested. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0021] Figure 1 is a flowchart of an optional gateway performance testing method according to an embodiment of the present application;

[0022] Figure 2 is a schematic diagram of an optional target gateway performance test process according to an embodiment of the present application;

[0023] Figure 3 is a flow chart of an optional performance testing method for a firewall device according to an embodiment of the present application;

[0024] Figure 4 It is a schematic diagram of an optional gateway performance testing device according to an embodiment of the present application. DETAILED DESCRIPTION

[0025] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0026] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0027] It should also be noted that the information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) collected by this application are information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of relevant data are in compliance with the relevant laws, regulations and standards of the relevant regions, necessary confidentiality measures are taken, and public order and good customs are not violated, and corresponding operation portals are provided for users to choose to authorize or refuse. For example, an interface is set up between this system and relevant users or organizations. Before obtaining relevant information, it is necessary to send an acquisition request to the aforementioned user or organization through the interface, and obtain relevant information after receiving the consent information fed back by the aforementioned user or organization.

[0028] According to an embodiment of the present application, an embodiment of a method for testing gateway performance is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0029] Optionally, a main control device, such as a PC (Personal Computer) can be used as the execution subject of the gateway performance test method in the embodiment of the present application, wherein the main control device can establish a communication connection with the test device and the target gateway, so that information can be obtained from the test device and the target gateway, and instructions can also be sent to the test device and the target gateway. It should be noted that in addition to using the main control device as the execution subject, other software systems, embedded systems, devices or equipment can also be used as the execution subject of the gateway performance test method in the embodiment of the present application. The present application does not specifically limit the specific form of the execution subject. For the convenience of explanation, the following is an illustrative description of the scheme of the embodiment of the present application using the main control PC as the execution subject.

[0030] Figure 1 is a flow chart of an optional gateway performance testing method according to an embodiment of the present application, such as Figure 1 As shown, the method comprises the following steps:

[0031] Step S101: Control each of the N test devices to establish a network security connection with a target gateway at a target rate.

[0032] In step S101, N is a positive integer greater than or equal to 1, the target rate represents the number of network security connections established between the test device and the target gateway per unit time, and the target rate is adjusted when the CPU utilization of the target gateway meets a preset condition.

[0033] In this embodiment, the target rate is used to indicate the number of network security connections established between each test device and the target gateway within a unit time.

[0034] Here, the concurrent programs on each test device can be controlled to establish multiple network security connections with the target gateway. The multiple network security connections can be the same or different, and different network security connections are, for example, network security connections based on different TLS protocols or different authentication methods or IPv4 / IPv6. Optionally, in step S101, the master control PC can send a control instruction to each of the N test devices, wherein the control instruction includes the address and port of the target gateway to instruct the N test devices to establish a network security connection with the target gateway at a target rate.

[0035] Optionally, the test device may be referred to as a test PC device, wherein the test device includes but is not limited to various devices that can establish a network security connection with the gateway, such as a notebook computer, a desktop computer, a smart phone, a server device, etc. In addition, the test device may be used to assist in testing various functions of the target gateway, for example, testing the processor performance of the target gateway, testing the performance of the target gateway in establishing a network security connection, and so on.

[0036] Optionally, the target gateway may be a firewall device or any other device that can achieve a secure network connection.

[0037] Optionally, the above-mentioned network security connection can be a ZTNA connection, wherein ZTNA (ZeroTrust Network Access) is a network security architecture that aims to protect enterprise networks by minimizing access to sensitive data and resources. The core idea of ​​ZTNA is to no longer trust any user, device or service in the internal or external network by default, but to require verification and authorization for each access request. ZTNA can be implemented through various technical means, such as software-defined boundaries, identity and access management solutions, endpoint security tools, etc. The goal of this architecture is to create a more secure, flexible and scalable network environment to cope with ever-changing network security threats.

[0038] It should be noted that in addition to the above-mentioned ZTNA connection, the network security connection can also be other types of connections, such as a virtual private network (VPN) connection, where the VPN connection creates a secure, dedicated connection on the public network through encryption technology, allowing remote users to securely access corporate resources; Secure Sockets Layer / Transport Layer Security (SSL / TLS) connection, where the (SSL / TLS) connection is used to provide an encrypted protocol in Internet communications to protect the privacy and integrity of data transmission.

[0039] For a single test device, it can be used to test the performance information of the target gateway when processing a ZTNA connection with a test device, including but not limited to the target gateway's ZTNA new connection performance, the target gateway's processor performance information when creating a ZTNA connection, memory performance information, etc.

[0040] By deploying multiple test devices, multiple test devices can be controlled to test the newly created ZTNA connection performance of the target gateway during the test process. In addition, setting different IPs for multiple test devices can also prevent the problem of traffic imbalance caused by the limitation of the number of IPs when using a single machine for testing. It should also be noted that in this application, the rate at which each of the N test devices establishes a network security connection with the target gateway (i.e., the number of concurrent connections per second) is not fixed, but the target rate is adjusted when the CPU utilization of the target gateway meets the preset conditions. CPU utilization refers to the proportion of CPU resources used during operation.

[0041] Exemplarily, the target rate is lowered when the CPU utilization of the target gateway satisfies a first preset condition, and the first preset condition includes: the CPU utilization of the target gateway is greater than a preset threshold of the CPU utilization of the target gateway.

[0042] Also exemplarily, the target rate is increased when the CPU utilization of the target gateway satisfies a second preset condition, and the second preset condition includes: the CPU utilization of the target gateway is less than a preset threshold of the CPU utilization of the target gateway.

[0043] As another example, the target rate remains unchanged when the CPU utilization of the target gateway is equal to a preset threshold of the CPU utilization of the target gateway.

[0044] In some examples, each increase in the target rate may be performed by a preset increase, and / or each increase in the target rate may be performed by a preset decrease.

[0045] In other examples, the current increase in the target rate may be performed by increasing the amount of change between the two previous target rates, and / or the current decrease in the target rate may be performed by decreasing the amount of change between the two previous target rates.

[0046] Step S102, counting the number of network security connections successfully established between each test device and the target gateway in each unit time.

[0047] Optionally, in step S102, during the performance test phase of the target gateway, the number of network security connections established between each test device and the target gateway in each unit time may be counted.

[0048] Optionally, the host PC can query the number of network security connections successfully established between each test device and the target gateway from the target gateway. For example, each time the target gateway successfully establishes a network security connection with a test device, the information of the connection will be recorded in the status table. By querying the status table, the host PC can count the number of network security connections established between each test device and the target gateway per unit time. Step S103, determine the performance information of the target gateway according to the number of network security connections established between each test device and the target gateway per unit time.

[0049] Optionally, the unit time may be 1 second or other duration.

[0050] Optionally, in step S103, during the performance test phase of the target gateway, in addition to counting the number of network security connections established between each test device and the target gateway in each unit time, the CPU utilization of each target gateway in each unit time may also be counted. Finally, based on the counted number of network security connections and the CPU utilization of the target gateway, a statistical graph may be generated to characterize the performance information of the target gateway. For example, a statistical graph of newly established ZTNA connections may be generated, thereby clearly showing the CPU utilization of the target gateway in each unit time and the number of newly established ZTNA connections in each unit time.

[0051] Optionally, since the host PC has established a communication connection with the target gateway, the host PC can actively query the CPU utilization of the target gateway in each unit time, or the target gateway can actively report the CPU utilization of the target gateway in each unit time to the host PC.

[0052] Based on the contents of the above steps S101 to S103, it can be known that in the present application, the method of dynamically adjusting the rate of establishing a network security connection between the test device and the target gateway according to the CPU utilization of the target gateway is adopted. First, N test devices are controlled to establish a network security connection with the target gateway at a target rate, wherein N is an integer greater than 1, and the target rate changes with the change of the CPU utilization of the target gateway. Then, the number of network security connections established between each test device and the target gateway per unit time is counted, and then the performance information of the target gateway is determined according to the number of network security connections established between each test device and the target gateway per unit time, and the CPU utilization of the target gateway per unit time.

[0053] From the above content, it can be seen that by adopting the technical solution of the present application, the generation rate of the network security connection between the target gateway and N test devices can be dynamically adjusted according to the change of the CPU utilization of the target gateway, and the performance information of the target gateway can be determined according to the number of network security connections established between each test device and the target gateway in each unit time, and the CPU utilization of the target gateway in each unit time. In this way, not only can the performance information of the target gateway when establishing a new network security connection in each unit time be tested, but also the technical problem that the existing technology cannot test the new connection performance of ZNTA gateways such as firewall devices can be solved.

[0054] In an optional embodiment, before controlling each of the N test devices to establish a network security connection with the target gateway at a target rate, a script parameter is obtained, wherein the script parameter includes at least the connection parameter of the target gateway, the configuration parameter of the network security connection, the preset threshold of the CPU utilization of the target gateway, and the initial creation rate of the network security connection, wherein the initial creation rate represents the number of network security connections established by the test device with the target gateway within a unit time during initialization. Then, an initialization operation is performed on the N test devices and the target gateway according to the script parameters, wherein the initialization operation is used to control the N test devices to start establishing a network security connection with the target gateway in parallel.

[0055] Optionally, the complete solution of this application is divided into the following parts:

[0056] The first part is to set the script parameters in the script of the master PC (Personal Computer), including at least: the configuration parameters of the target gateway (such as a firewall device), the configuration parameters of the ZTNA connection, the preset threshold of the CPU utilization of the target gateway, and the initial creation rate of the ZTNA connection. Among them, the connection parameters of the target gateway include: the IP address of the target gateway and the administrator username and password. The configuration parameters of the ZTNA connection include: ZTNA gateway connection method (IP address, port), login method, TLS protocol type (national secret / non-national secret). Among them, the login method can be username and password / OAuth (Open Authorization, an authentication method is a secure and open network authorization protocol) authentication method.

[0057] In the second part, the master PC script is run to automatically push the concurrent program and the configuration parameters of the ZTNA connection to multiple controlled PCs (corresponding to the N test devices mentioned above). The controlled PC automatically runs the concurrent program and creates a new ZTNA connection with the target gateway in a concurrent manner according to the set login method and initial creation rate.

[0058] In the third part, the control PC obtains the CPU utilization of the target gateway in each unit time (for example, per second), and compares it with the preset threshold of the CPU utilization. If the current CPU utilization does not reach the preset threshold, the creation rate of the ZTNA connection (i.e., the target rate) is automatically adjusted. If the CPU utilization reaches the preset threshold, the current target rate is kept unchanged, and the ZTNA connection between the test device and the target gateway is created according to the current target rate. Finally, the control PC determines the number of newly created ZTNA connections in each unit time compared to the previous unit time based on the number of ZTNA connections established between each test device and the target gateway in each unit time, and finally calculates the performance data of the target gateway under different CPU utilizations when creating ZTNA connections.

[0059] In an optional embodiment, Figure 2 is a schematic diagram of an optional target gateway performance test process according to an embodiment of the present application, such as Figure 2 As shown, N test devices include: test PC1, test PC2...test PCn, and the target gateway is a firewall device. First, prepare the concurrent test program on the master PC, and set the script parameters in the script, including: connection parameters of the firewall device, configuration parameters of the ZTNA connection, preset thresholds of the CPU utilization of the firewall device, and the initial creation rate of the network security connection (for example, if the maximum creation rate of the ZTNA connection of the firewall device needs to be tested, the CPU utilization is set to 100%).

[0060] Alternatively, if Figure 2 As shown in the figure, the N test PCs and the firewall device are designed for concurrent connection. The master PC sends the configuration parameters and concurrent programs of the ZTNA connection to each controlled PC (corresponding to Figure 2 The controlled PC creates the test program and parameters at the initial creation rate (corresponding to Figure 2 The specified rate in the protocol initiates a ZTNA connection creation request, which can also be understood as a user going online in the firewall device.

[0061] Optionally, the control PC uses the management IP and administrator username and password of the firewall device to obtain the CPU utilization and online users of the firewall device in real time every second (one online user represents one ZTNA connection). In this process, the control PC can adjust the creation rate of the ZTNA connection between the controlled PC and the firewall device in real time by comparing the CPU utilization of the firewall device with the preset threshold of the CPU utilization.

[0062] From the above content, it can be seen that the configuration parameters of the test program and network connection can be automatically uploaded to the controlled PC through the master PC script, so as to set the IPv4 / IPv6 address of the controlled PC and realize the rapid deployment of the test environment. In addition, this application supports the configuration of different TLS protocols (national secret / non-national secret), different authentication methods (user name and password / OAuth authentication method), and users with the same name / users with different names in the script parameters, which has the advantage of high configuration flexibility.

[0063] In an optional embodiment, the target rate is the rate within the t-th unit time, and the N test devices are controlled to establish a network security connection with the target gateway at the target rate, including the following three cases:

[0064] The first case: when it is detected that the CPU utilization of the target gateway within the t-th unit time is less than the preset threshold of the CPU utilization of the target gateway, it is determined that the CPU utilization of the target gateway meets the first preset condition, the target rate is increased, and each of the test devices is controlled to establish the network security connection with the target gateway according to the increased target rate within the t+1-th unit time.

[0065] The second situation: when it is detected that the CPU utilization of the target gateway within the t-th unit time is greater than the preset threshold, it is determined that the CPU utilization of the target gateway meets the second preset condition, the target rate is reduced, and each of the test devices is controlled to establish the network security connection with the target gateway according to the reduced target rate within the t+1-th unit time.

[0066] The third situation: when it is detected that the CPU utilization of the target gateway within the t-th unit time is equal to the preset threshold, the target rate is kept unchanged, and each of the test devices is controlled to establish the network security connection with the target gateway according to the unchanged target rate within the t+1-th unit time.

[0067] Optionally, the master PC uploads the concurrent test program to the controlled PC via sftp (Secure File Transfer Protocol), and the controlled PC uses IO (I / O multiplexing, a technology for simultaneously processing multiple input / output (I / O) operations in a computer operating system) multiplexing to establish an asynchronous concurrent connection with the firewall device through the concurrent test program. For example, the controlled PC can initiate a request to create a new ZTNA connection to the firewall device in a concurrent manner based on the configuration parameters of the ZTNA connection and the initial creation rate of the ZTNA.

[0068] Optionally, in the first case, the control PC can also connect to the firewall device through the management IP and administrator username and password of the firewall device, and use the query command to obtain the CPU utilization and online users of the firewall device in real time every second. By comparing the real-time CPU utilization with the preset threshold of CPU utilization, the online rate is adjusted in real time. For example, if the CPU utilization of the target gateway is less than the preset threshold in the t-th unit time, the ZTNA creation rate (i.e., the target rate) is automatically increased, and the N test PCs are controlled to establish a ZTNA connection with the firewall device according to the increased target rate in the t+1-th unit time.

[0069] Optionally, in the second case, if it is detected that the CPU utilization of the target gateway in the t-th unit time is greater than the preset threshold, the target rate is reduced, and the N test PCs are controlled to establish a ZTNA connection with the firewall device in the t+1-th unit time according to the reduced target rate. For example, when the CPU utilization is too high (greater than the preset threshold), the target rate is dynamically adjusted (the rate is reduced), so that the number of network security connections between the test device and the target gateway will be reduced, and the CPU utilization can be linked to decrease accordingly, thereby reaching the preset threshold. The target rate when the CPU utilization reaches the preset threshold can be used as the optimal target rate.

[0070] In addition, in actual application, if the CPU utilization is too low (lower than the preset threshold), the target rate can be dynamically adjusted (increased). In this way, the number of network security connections between the test device and the target gateway will increase, and the CPU utilization can be linked to increase accordingly, thereby reaching the preset threshold of utilization. Ultimately, the target rate when the CPU utilization reaches the preset threshold can be used as the optimal target rate.

[0071] It should be noted that the first case and the second case may appear alternately, thereby achieving dynamic adjustment of the target rate, and ultimately achieving a situation where the CPU utilization is equal to the preset threshold (ie, the third case).

[0072] It is understandable that when the CPU utilization of the security gateway reaches the preset threshold, the CPU resources of the security gateway can be fully utilized while reserving sufficient processing capacity for the burst load of the security gateway.

[0073] Here, the preset threshold may be set based on expert experience or through machine learning. For example, the preset threshold is set to 80% or other appropriate values, which are not specifically limited here.

[0074] Optionally, in the third case, if it is detected that the CPU utilization of the target gateway in the tth unit time is equal to a preset threshold, the target rate is kept unchanged, and the N test PCs are controlled to establish a ZTNA connection with the firewall device according to the unchanged target rate in the t+1th unit time.

[0075] From the above content, it can be seen that according to the relationship between the real-time CPU utilization of the firewall device and the preset threshold, as the trigger condition for whether to adjust the concurrent creation rate of ZTNA connections, the performance information of the firewall device when creating ZTNA connections under different CPU resources can be determined.

[0076] In an optional embodiment, when it is detected that the CPU utilization of the target gateway in the tth unit time is less than a preset threshold, the target rate is increased, including: taking the CPU utilization of the target gateway in the tth unit time as the first data; taking the CPU utilization of the target gateway in the t-1th unit time as the second data; taking the total number of network security connections successfully established between N test devices and the target gateway in the tth unit time as the third data; determining the total number of new network security connections that need to be established in the t+1th unit time based on the first data, the second data, the third data and the preset threshold; and increasing the target rate based on the total number of new network security connections that need to be established in the t+1th unit time.

[0077] Optionally, assuming that the CPU utilization of the firewall device in the t-th unit time is a, the CPU utilization of the firewall device in the t-1th unit time is b, the preset threshold of CPU utilization is s, and the total number of network security connections successfully established between the N test devices and the target gateway in the t-th unit time is d, the total number of network security connections that need to be newly established in the t+1th unit time k can be calculated by the following formula (1). In addition, if a=b, assign ab=1.

[0078] k=d*(sa) / (ab) (1)

[0079] It should be noted that, after calculating the total number of new network security connections that need to be established within the t+1th unit time, the target rate can be increased or decreased according to the total number of new network security connections that need to be established within the t+1th unit time, thereby achieving the purpose of dynamically adjusting the concurrent creation rate of ZTNA connections according to the real-time CPU utilization of the firewall device.

[0080] It should also be noted that when using the above formula (1) to adjust the target rate, if s>a and k is a negative number, the inverse of k is taken as the number of network security connections that need to be increased. If s<a and k is a positive number, the inverse of k is taken as the number of network security connections that need to be reduced.

[0081] In an optional embodiment, the target rate is increased according to the total number of new network security connections that need to be established within the t+1th unit time, including: obtaining the target rate within the tth unit time; calculating the ratio of the total number of new network security connections that need to be established within the t+1th unit time to the number of devices of the test device; rounding the ratio to obtain a fourth data; summing the target rate within the tth unit time and the fourth data to obtain a sum result; and increasing the target rate to the sum result.

[0082] Optionally, assuming that the target rate in the t-th unit time is v, the target rate m in the t+1-th unit time can be calculated by the following formula (2):

[0083] m=v+[k / N] (2)

[0084] Wherein, in formula (2), k is the total number of network security connections that need to be newly established within the t+1th unit time, N is the number of controlled PCs, and [k / N] represents the fourth data obtained after rounding K / N. The master PC sends the target rate within the t+1th unit time to the controlled PC, and the test program on the controlled PC sends the total number of ZTNAs that need to be newly established within the t-th unit time to the t+1th unit time and the configuration parameters of the ZTNA connection to the core thread of the test program. The core thread creates a new ZTNA connection by I / O multiplexing according to the total number of ZTNAs that need to be newly established within the t-th unit time to the t+1th unit time.

[0085] From the above content, it can be seen that through the above formula (2), the target rate in the next unit time can be calculated based on the target rate in the current unit time, thereby achieving the technical effect of dynamic adjustment of the target rate.

[0086] In an optional embodiment, the performance information of the target gateway is determined based on the number of network security connections established between each test device and the target gateway per unit time and the CPU utilization of the target gateway per unit time.

[0087] Optionally, if the CPU of the target gateway is a multi-core CPU, obtaining the CPU utilization of the target gateway per unit time refers to obtaining an average utilization of multiple CPU cores of the target gateway per unit time.

[0088] It should be noted that by adding the CPU utilization of the target gateway as a reference factor for evaluating the performance information of the target gateway, the maximum number of network security connections that can be created by the target gateway at different CPU utilizations can be determined, and the impact of the target gateway on the CPU utilization when creating different numbers of network security connections can also be determined.

[0089] In an optional embodiment, the performance information of the target gateway is determined based on the number of network security connections established between each of the test devices and the target gateway in each unit time, and the CPU utilization of the target gateway in each unit time, including: determining the number of newly created network security connections in the tth unit time compared with the t-1th unit time based on the number of network security connections established between each of the test devices and the target gateway in each unit time; generating a target statistical graph based on the number of newly created network security connections in the tth unit time compared with the t-1th unit time, and the CPU utilization of the target gateway in the tth unit time and the t-1 unit time; and determining the performance information of the target gateway in different unit times based on the target statistical graph.

[0090] Optionally, the number of newly created ZTNA connections per unit time = the number of ZTNA connections in the current unit time - the number of ZTNA connections in the previous unit time. During the performance test phase of the target gateway, the control PC counts the number of newly created network security connections per unit time and the CPU utilization of the target gateway per unit time until the test process is completed. After the test is completed, the control PC can automatically generate a target statistical chart of newly created ZTNA connections, thereby displaying the CPU utilization of the target gateway per unit time and the number of newly created ZTNA connections per unit time through the target statistical chart.

[0091] It should be noted that due to the development of cloud service technology and remote office technology, the distinction between traditional network boundaries has become increasingly blurred, and the application of zero-trust network access has become more and more widespread. This application provides a gateway performance testing method based on the ZTNA connection creation process, which dynamically adjusts the ZTNA connection creation rate of multiple PCs according to the CPU utilization of the gateway, thereby testing and obtaining the performance information displayed by the gateway in the process of creating a new ZTNA connection. Finally, the user can evaluate the gateway based on the tested gateway performance information, and select a suitable gateway (such as a firewall device) based on the actual usage scenario.

[0092] In an optional embodiment, before initializing N test devices and the target gateway according to the script parameters, the gateway performance testing method also includes: upon detecting that a network security connection has been established between the target gateway and any terminal device, disconnecting the network security connection between the target gateway and any terminal device.

[0093] Optionally, Figure 3 is a flow chart of an optional performance testing method for a firewall device according to an embodiment of the present application, such as Figure 3 As shown, first, the host PC sets the script parameters in the main control PC script, and the script parameters include at least: the connection parameters of the target gateway (such as a firewall device), the configuration parameters of the ZTNA connection, the preset threshold of the CPU utilization of the target gateway, and the initial creation rate of the ZTNA connection. Among them, the connection parameters of the target gateway include: the IP address of the target gateway and the administrator username and password. The configuration parameters of the ZTNA connection include: ZTNA gateway connection method (IP address, port), login method (such as username and password / OAuth authentication method), and TLS protocol type (national secret / non-national secret). Then, the host PC disconnects the ZTNA connection between the firewall device and any terminal device to avoid interfering with the subsequent performance test process.

[0094] Alternatively, if Figure 3 As shown, the host PC automatically pushes the configuration parameters of the concurrent program and ZTNA connection to multiple controlled PCs, and the controlled PCs automatically run the concurrent program and establish a new ZTNA connection with the target gateway in a concurrent manner according to the set login method and initial creation rate. Among them, the corresponding IP can be configured for the controlled PC as needed.

[0095] Alternatively, if Figure 3As shown, the controlled PC initiates a ZTNA connection creation request at the initial creation rate, which can also be understood as an online user in the firewall device. The master PC uses the query command to obtain the CPU utilization and online users of the firewall device in real time every second through the management IP and administrator username and password of the firewall device (one online user represents one ZTNA connection). In this process, the master PC can compare the CPU utilization of the firewall device with the preset threshold of the CPU utilization. If the current CPU utilization does not reach the preset threshold, the creation rate of the ZTNA connection (i.e., the target rate) is automatically adjusted. If the CPU utilization reaches the preset threshold, the current target rate is maintained unchanged, and the ZTNA connection between the test device and the target gateway is created according to the current target rate. Finally, after the test duration reaches the preset duration, the master PC determines the number of newly created ZTNA connections in each unit time compared with the previous unit time based on the number of ZTNA connections established between each test device and the target gateway in each unit time, and finally calculates the performance data of the target gateway under different CPU utilizations when creating a ZTNA connection.

[0096] It can be seen from the above content that according to the technical solution of this application, at least the following technical effects can be achieved:

[0097] 1. According to the technical solution of the present application, the new ZTNA performance under different CPU utilization rates can be accurately tested, and users can reasonably select the corresponding gateway device model or divide the business scenarios according to the performance test results and usage scenarios.

[0098] 2. According to the technical solution of the present application, during the concurrent test process, the creation rate of the ZTNA connection can be dynamically adjusted, the performance information of the gateway devices such as firewall devices when creating ZTNA connections under different CPU resources can be tested, and the test report can be output.

[0099] 3. Concurrent programs and script parameters can be automatically uploaded to the test PC, which greatly reduces the time spent on running software and configuring parameters during the test process and improves work efficiency.

[0100] 4. It can test the performance of gateway devices such as firewall devices when creating ZTNA connections using different TLS protocols and login methods.

[0101] 5. This application adopts an IO multiplexing model, which does not have high requirements for the test PC. A single-core virtual machine can be used as a controlled PC for testing. During the test, by controlling multiple controlled PCs and setting different IPs, it can also prevent the problem of traffic imbalance caused by the limitation of the number of IPs when using a single machine for testing. At the same time, ZTNA test scenarios covering different PCs and different hardware environments can also be carried out.

[0102] An example of an optional application scenario is as follows:

[0103] According to the solution of the embodiment of the present application, a ZTNA new connection performance test device can be provided, which dynamically adjusts the concurrent rate of multiple PCs according to the CPU utilization, and tests the new ZTNA connection performance of the firewall device through the device, so that the user can determine whether the firewall device can meet the needs of the usage scenario according to the new ZTNA connection performance of the firewall device. It can be seen that according to the solution of the present application, it can assist users in selecting the corresponding model of gateway devices, which has reference significance for equipment procurement.

[0104] In addition, the solution of the embodiment of the present application can also assist users in reasonably dividing the business resources that need to be processed by the gateway device. For example, it is known that other business of the user needs to occupy 40% of the gateway CPU resources. On this basis, according to the solution of the present application, the new ZTNA connection performance that can be achieved by the gateway based on the remaining 60% CPU resources is tested, and the relevant ZTNA-related business resources are allocated to the gateway according to the test results.

[0105] According to another aspect of the embodiment of the present application, a gateway performance testing device is also provided, wherein: Figure 4 is a schematic diagram of an optional gateway performance testing device according to an embodiment of the present application, such as Figure 4 As shown, the gateway performance testing device includes: a control unit 401, a statistical unit 402, and a performance testing unit 403.

[0106] A control unit 401 is used to control each of the N test devices to establish a network security connection with the target gateway at a target rate, wherein N is a positive integer, and the target rate represents the number of network security connections established between the test device and the target gateway per unit time, and the target rate is adjusted when the CPU utilization of the target gateway meets a preset condition; a statistical unit 402 is used to count the number of network security connections successfully established between each of the test devices and the target gateway per unit time; a performance testing unit 403 is used to determine the performance information of the target gateway based on the number of network security connections successfully established between each of the test devices and the target gateway per unit time.

[0107] Optionally, the test device for gateway performance further includes: an acquisition unit and an initialization operation execution unit. The acquisition unit is used to acquire script parameters, wherein the script parameters at least include connection parameters of the target gateway, configuration parameters of the network security connection, a preset threshold of the CPU utilization of the target gateway, and an initial creation rate of the network security connection, wherein the initial creation rate represents the number of network security connections established by the test device with the target gateway within a unit time during initialization; and the initialization operation execution unit is used to perform initialization operations on N test devices and the target gateway according to the script parameters, wherein the initialization operation is used to control the N test devices to start establishing network security connections with the target gateway in parallel.

[0108] Optionally, the target rate is the rate within the tth unit time, and the control unit 401 includes: a rate adjustment subunit and a first control subunit. Among them, the rate adjustment subunit is used to determine that the CPU utilization of the target gateway meets the first preset condition when it is detected that the CPU utilization of the target gateway in the t-th unit time is less than the preset threshold of the CPU utilization of the target gateway, increase the target rate, and control each of the test devices to establish the network security connection with the target gateway according to the increased target rate in the t+1-th unit time; or, when it is detected that the CPU utilization of the target gateway in the t-th unit time is greater than the preset threshold, determine that the CPU utilization of the target gateway meets the second preset condition, reduce the target rate, and control each of the test devices to establish the network security connection with the target gateway according to the reduced target rate in the t+1-th unit time; the first control subunit is used to keep the target rate unchanged when it is detected that the CPU utilization of the target gateway in the t-th unit time is equal to the preset threshold, and control each of the test devices to establish the network security connection with the target gateway according to the unchanged target rate in the t+1-th unit time.

[0109] Optionally, the rate adjustment subunit includes: a first processing module, a second processing module, a third processing module, a fourth processing module and a fifth processing module. Among them, the first processing module is used to use the CPU utilization of the target gateway in the t-th unit time as the first data; the second processing module is used to use the CPU utilization of the target gateway in the t-1 unit time as the second data; the third processing module is used to use the total number of network security connections successfully established between the N test devices and the target gateway in the t-th unit time as the third data; the fourth processing module is used to determine the total number of new network security connections that need to be established in the t+1th unit time based on the first data, the second data, the third data and the preset threshold; the fifth processing module is used to increase the target rate according to the total number of new network security connections that need to be established in the t+1th unit time.

[0110] Optionally, a fifth processing module is used to obtain the target rate in the tth unit time; calculate the ratio of the total number of new network security connections that need to be established in the t+1th unit time to the number of test devices; round the ratio to obtain fourth data; sum the target rate in the tth unit time and the fourth data to obtain a sum result; and adjust the target rate up to the sum result.

[0111] Optionally, the performance testing unit 403 is used to determine the performance information of the target gateway based on the number of network security connections established between each of the test devices and the target gateway in each unit time, and the CPU utilization of the target gateway in each unit time.

[0112] Optionally, the performance test unit 403 includes: a first determination subunit, a generation subunit, and a second determination subunit. The first determination subunit is used to determine the number of newly created network security connections in the t-th unit time compared to the t-1th unit time based on the number of network security connections established between each of the test devices and the target gateway in each unit time; the generation subunit is used to generate a target statistical graph based on the number of newly created network security connections in the t-th unit time compared to the t-1th unit time, and the CPU utilization of the target gateway in the t-th unit time and the t-1th unit time; the second determination subunit is used to determine the performance information of the target gateway in different unit times based on the target statistical graph.

[0113] Optionally, the gateway performance testing device further includes: a processing unit, configured to disconnect the network security connection between the target gateway and any terminal device when detecting that the target gateway has established the network security connection with any terminal device.

[0114] According to another aspect of the present application, a computer-readable storage medium is provided, wherein a computer program is stored in the computer-readable storage medium, wherein when the computer program is executed, the device where the computer-readable storage medium is located executes the above-mentioned gateway performance testing method.

[0115] According to another aspect of the present application, an electronic device is also provided, wherein the electronic device includes one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute the above-mentioned gateway performance testing method.

[0116] The above-mentioned embodiments or examples disclosed in the present application are not exhaustive, but are only illustrative of some embodiments or examples, and are not intended to be specific limitations on the scope of protection disclosed in the present application. In the absence of contradiction, each step in a certain embodiment or example in the present application can be implemented as an independent example, and the steps can be combined arbitrarily. For example, the scheme after removing some steps in a certain embodiment or example can also be implemented as an independent example, and the order of the steps in a certain embodiment or example can be arbitrarily exchanged. In addition, the optional methods or optional examples in a certain embodiment or example can be combined arbitrarily; in addition, the various embodiments or examples can be combined arbitrarily, for example, some or all steps of different embodiments or examples can be combined arbitrarily, and a certain embodiment or example can be combined arbitrarily with the optional methods or optional examples of other embodiments or examples.

[0117] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0118] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0119] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0120] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0121] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0122] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0123] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A gateway performance testing method, characterized in that: include: Control each of the N test devices to establish a network security connection with the target gateway at a target rate, wherein N is a positive integer, the target rate represents the number of network security connections established by the test device with the target gateway per unit time, and the target rate is adjusted when the CPU utilization of the target gateway meets a preset condition; Counting the number of network security connections successfully established between each of the test devices and the target gateway in each unit time; The performance information of the target gateway is determined according to the number of network security connections successfully established between each of the test devices and the target gateway in each unit time.

2. The method for testing gateway performance according to claim 1, characterized in that: Before controlling each of the N test devices to establish a network security connection with the target gateway at a target rate, the gateway performance testing method further includes: Obtain script parameters, wherein the script parameters include at least connection parameters of the target gateway, configuration parameters of the network security connection, a preset threshold of the CPU utilization of the target gateway, and an initial creation rate of the network security connection, wherein the initial creation rate represents the number of network security connections established by the test device with the target gateway within a unit time during initialization; An initialization operation is performed on each of the test devices and the target gateway according to the script parameters, wherein the initialization operation is used to control the N test devices to start establishing the network security connection with the target gateway in a parallel manner.

3. The method for testing gateway performance according to claim 1, characterized in that: The target rate is the rate within the t-th unit time, and controlling each of the N test devices to establish a network security connection with the target gateway at the target rate includes: When it is detected that the CPU utilization of the target gateway in the t-th unit time is less than the preset threshold value of the CPU utilization of the target gateway, it is determined that the CPU utilization of the target gateway meets the first preset condition, the target rate is increased, and each of the test devices is controlled to establish the network security connection with the target gateway according to the increased target rate in the t+1-th unit time, where t is a positive integer; or, When it is detected that the CPU utilization of the target gateway in the t-th unit time is greater than the preset threshold, it is determined that the CPU utilization of the target gateway meets the second preset condition, the target rate is reduced, and each of the test devices is controlled to establish the network security connection with the target gateway according to the reduced target rate in the t+1-th unit time; or, When it is detected that the CPU utilization of the target gateway within the tth unit time is equal to the preset threshold, the target rate is kept unchanged, and each of the test devices is controlled to establish the network security connection with the target gateway according to the unchanged target rate within the t+1th unit time.

4. The method for testing gateway performance according to claim 3, characterized in that: When it is detected that the CPU utilization of the target gateway in the t-th unit time is less than the preset threshold, increasing the target rate includes: Taking the CPU utilization rate of the target gateway in the t-th unit time as the first data; The CPU utilization rate of the target gateway in t-1 unit time is used as the second data; The total number of network security connections successfully established between the N test devices and the target gateway in the tth unit time is used as the third data; Determine the total number of newly created network security connections that need to be established within the t+1th unit time according to the first data, the second data, the third data and the preset threshold; The target rate is increased according to the total number of new network security connections that need to be established within the t+1th unit time.

5. The method for testing gateway performance according to claim 4, characterized in that: The target rate is increased according to the total number of newly established network security connections required within the t+1th unit time, including: Get the target rate in the tth unit time; Calculate the ratio of the total number of newly created network security connections required within the t+1th unit time to the number of devices of the test device; performing a rounding operation on the ratio to obtain fourth data; Performing a sum calculation on the target rate in the t-th unit time and the fourth data to obtain a sum result; The target rate is adjusted up to the summed result.

6. The method for testing gateway performance according to claim 1, characterized in that: Determining the performance information of the target gateway according to the number of network security connections successfully established between each of the test devices and the target gateway in each unit time includes: The performance information of the target gateway is determined according to the number of network security connections established between each of the test devices and the target gateway in each unit time and the CPU utilization of the target gateway in each unit time.

7. The method for testing gateway performance according to claim 6, characterized in that: Determining the performance information of the target gateway according to the number of network security connections established between each of the test devices and the target gateway in each unit time and the CPU utilization of the target gateway in each unit time includes: Determine the number of newly created network security connections in the t-th unit time compared to the t-1-th unit time according to the number of network security connections established between each of the test devices and the target gateway in each unit time; Generate a target statistical graph according to the number of newly created network security connections in the tth unit time compared to the t-1th unit time, and the CPU utilization of the target gateway in the tth unit time and the t-1th unit time; The performance information of the target gateway in different unit times is determined according to the target statistical graph.

8. A gateway performance testing device, characterized in that: include: A control unit, configured to control each of the N test devices to establish a network security connection with a target gateway at a target rate, wherein N is a positive integer, the target rate represents the number of network security connections established by the test device with the target gateway per unit time, and the target rate is adjusted when the CPU utilization of the target gateway meets a preset condition; A statistical unit, used for counting the number of network security connections successfully established between each of the test devices and the target gateway in each unit time; The performance testing unit is used to determine the performance information of the target gateway according to the number of network security connections successfully established between each of the test devices and the target gateway in each unit time.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein when the computer program is executed, the device where the computer-readable storage medium is located executes the gateway performance testing method according to any one of claims 1 to 7.

10. An electronic device, characterized in that: It includes one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute the gateway performance testing method described in any one of claims 1 to 7.