Distributed Network Load Generation for Nonintrusive DoS Testing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for validating network connectivity and simulating denial-of-service (DoS) attacks in distributed computing systems often disrupt live operations, failing to provide nonintrusive, scalable, and comprehensive testing.
Innovation Solution
A method for generating network load using available resources across multiple source computing devices, dynamically scaling the load to validate network connectivity and simulate DoS attacks without interfering with live traffic, by selecting devices based on available bandwidth and compute capacity, and monitoring performance metrics to adjust the load accordingly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network load is generated to validate network connectivity and simulate DoS attacks, then testing comprehensiveness is improved, but disruption to live operations increases
Solution Approach 1:
The system segments the distributed computing resources into multiple source computing devices, each capable of generating network load independently. This segmentation allows the load generation to be distributed across multiple devices rather than concentrated on a single device, reducing the impact on any single network path and enabling nonintrusive testing of network connectivity and DoS simulation capabilities.
Solution Approach 2:
The source computing devices are selected from the existing distributed computing system resources, making them serve dual purposes: supporting live operations and generating network load for testing. This multi-functionality allows the system to use its own resources for validation without requiring external testing infrastructure, thereby minimizing additional disruption while achieving comprehensive testing.
2Manufacturing precision
If network load is incrementally increased to validate desired level of network connectivity, then testing thoroughness is improved, but resource consumption increases
Solution Approach 1:
The system dynamically scales the network load generation by incrementally increasing the load magnitude and adjusting the number of active source computing devices based on system performance and available resources. This dynamic approach allows thorough validation of network connectivity at different load levels while adapting resource consumption to system capacity, preventing resource exhaustion during testing.
Solution Approach 2:
The system monitors performance metrics during load generation and uses this feedback to adjust the load magnitude and source device allocation. This feedback mechanism ensures that the network connectivity validation is performed at the desired level of precision while consuming only the necessary amount of resources, avoiding both under-testing and resource waste.
3Productivity
If multiple source computing devices are used to generate network load in parallel, then testing capability is improved, but system complexity increases
Solution Approach 1:
The source computing devices self-select based on their available resources and capabilities, with the system automatically identifying and allocating devices for load generation based on current system state. This self-service approach reduces the complexity of manual coordination while enabling multiple devices to work in parallel, thereby improving network load generation capacity without proportionally increasing system complexity.
Data Source
AI summary
A method for nonintrusive network load generation may include determining available resources in a distributed computing system, where the distributed computing system includes a plurality of computing devices and a target deployment. Based on an amount of available resources between the target deployment and a plurality of source computing devices, the plurality of source computing devices may be selected to generate a network load directed from the plurality of source computing devices to the target deployment. The plurality of source computing devices may be a subset of the plurality of computing devices in the distributed computing system. A network-traffic generator service may be provided to the plurality of source computing devices in order to generate the network load directed from the plurality of source computing devices to the target deployment. The performance of the distributed computing system in response to the generated network load may be monitored.