Network Device Test Profile Generation from Telemetry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for validating network devices or security devices before deployment in a target network environment often fail to accurately represent the specific traffic patterns, leading to potential issues or interference with the target network, as generic test profiles may not adequately match the expected traffic conditions.
Innovation Solution
A system and method for deriving test profiles based on security and network telemetry information extracted from the target environment, using a test generator to determine performance-related parameters and generate a test profile that closely matches the expected traffic patterns, allowing for validation of network devices without onsite testing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If generic test profiles are used for validating network devices, then validation can be performed quickly and easily, but the test profiles do not accurately represent the specific traffic patterns of the target network environment
Solution Approach 1:
The system performs preliminary monitoring of the target network environment to collect telemetry data and analyze traffic patterns before generating the test profile. This preliminary action ensures that the generated test profile accurately reflects the actual network conditions without requiring time-consuming onsite testing during validation.
Solution Approach 2:
The system creates a copy of the target network environment's traffic patterns by analyzing telemetry data and generating a virtual test profile that replicates actual network conditions. This copying approach allows validation to be performed using synthesized traffic data rather than requiring physical presence in the target environment.
2Measurement precision
If packet capture and replay is performed to validate network devices, then actual traffic patterns can be tested, but stateful network devices cannot be properly validated and the process is complex
Solution Approach 1:
The system replaces the mechanical approach of capturing and replaying actual packets with an analytical approach that uses telemetry data to generate synthetic test profiles. This substitution simplifies the testing system by eliminating the need for complex packet capture infrastructure and replay mechanisms while maintaining accurate representation of traffic patterns.
Solution Approach 2:
The system extracts essential traffic pattern characteristics from telemetry data without requiring actual packet captures. By taking out only the necessary performance parameters and traffic metadata needed for test profile generation, the system avoids the complexity of handling complete packet streams while still achieving accurate validation.
3Measurement precision
If onsite testing is conducted to validate network devices in the target environment, then accurate validation can be performed, but the new device may cause problems or interfere with network operations
Solution Approach 1:
The system introduces a virtual test environment as an intermediary between the validator and the actual target network. By generating test profiles from telemetry data and performing validation in this virtual space, the system achieves accurate validation without placing physical test devices into the production network, thereby eliminating interference risks.
Solution Approach 2:
The system performs all necessary validation activities in advance using generated test profiles before deploying the new network device to the target environment. This preliminary validation ensures that any potential issues are identified and resolved beforehand, preventing harmful interference with live network operations.
Data Source
AI summary
Systems and methods for deriving test profiles for validating network devices based on security and network telemetry information extracted from the target network environment is provided. According to one embodiment, security and network telemetry information are extracted by a test generator during a monitoring period from one or more network devices running within a target network environment. Performance related parameters and data associated with the performance related parameters are then determined for the target network environment. A test profile is generated for validating a network device under test proposed to be installed within the target network environment based on any or a combination of the performance related parameters, the data associated with the performance related parameters, the security and network telemetry information and a set of capabilities of the network device under test.