IPFire project releases fireperf, an open-source connection-rate testing tool for firewalls and routers
The IPFire project has released fireperf, a free, open-source tool that opens connections at a fixed rate and reports how the device in the middle handled each one. It targets administrators, developers and testers who evaluate firewalls, routers, IPS and other stateful systems. Unlike iperf3, which measures bandwidth, fireperf measures new-connection rate and state handling over time. This is product news with no direct threat or vulnerability.
Detalhes técnicos
- fireperf logs the handshake time for every connection it opens and records the reason for each failure: timeout, refusal, or resource exhaustion on the test machine.
- It holds connections open and rechecks them, showing how many a firewall discarded after a long idle period. This exposes devices that post clean throughput but expire state behind the scenes.
- Its event-loop design lets one server handle any number of simultaneous clients on the same port, each running its own test. iperf3 runs one test at a time.
- It can simulate request-response patterns, such as a 100-byte request answered by 10 KB, and can create many short-lived connections to put an IPS under maximum load.
- It is interoperable with iperf and iperf3 servers, and iperf3 clients can test against a fireperf server.
- Output is a live terminal graph with a per-client overview, line-by-line text, or one JSON object per second with
--json.
Remediação
Not applicable. Signed packages are available for Debian, Arch Linux, RHEL and compatible distributions (AlmaLinux, Rocky Linux), and openSUSE Tumbleweed. Building from source needs a C compiler, Autotools, pkg-config, ncursesw, gettext and intltool, with liburing 2.3 or later optional but recommended.
Linha do tempo
-
IPFire project releases fireperf, an open-source connection-rate testing tool for firewalls and routers
ler a análise desta fonte ocultar
The IPFire project has released fireperf, a free, open-source tool that opens connections at a fixed rate and reports how the device in the middle handled each one. It targets administrators, developers and testers who evaluate firewalls, routers, IPS and other stateful systems. Unlike iperf3, which measures bandwidth, fireperf measures new-connection rate and state handling over time. This is product news with no direct threat or vulnerability.
Technical Details
- fireperf logs the handshake time for every connection it opens and records the reason for each failure: timeout, refusal, or resource exhaustion on the test machine.
- It holds connections open and rechecks them, showing how many a firewall discarded after a long idle period. This exposes devices that post clean throughput but expire state behind the scenes.
- Its event-loop design lets one server handle any number of simultaneous clients on the same port, each running its own test. iperf3 runs one test at a time.
- It can simulate request-response patterns, such as a 100-byte request answered by 10 KB, and can create many short-lived connections to put an IPS under maximum load.
- It is interoperable with iperf and iperf3 servers, and iperf3 clients can test against a fireperf server.
- Output is a live terminal graph with a per-client overview, line-by-line text, or one JSON object per second with
--json.
Remediation
Not applicable. Signed packages are available for Debian, Arch Linux, RHEL and compatible distributions (AlmaLinux, Rocky Linux), and openSUSE Tumbleweed. Building from source needs a C compiler, Autotools, pkg-config, ncursesw, gettext and intltool, with liburing 2.3 or later optional but recommended.