Keysight Technologies, Inc.

Ixia

Keysight Technologies Singapore (sales) Pte. Ltd.

Keysight Technologies Singapore (holdings) Pte. Ltd.

Keysight Technologies Singapore (holdings) Pte. Lte.

Matthew Ryan Bergeron

Winston Wencheng Liu

Kristopher Len Raney

Christian Paul Sommers

Jonathan Glenn Stroud

Dan Mihailescu

Peter Joseph Marsico

Alon Regev

Gerald Raymond Pepper

Noah Steven Gintis

Razvan Ionut Stan

Thomas Ameling

Kingshuk Mandal

Bryan Rittmeyer

Konstantin Belov

Soumava Das

Johnny Tsung Lin Ho

A method for customizing data plane pipeline processing to generate test packets using Berkeley packet filter (BPF) hook entry points is disclosed. The method includes receiving a program code script for customizing a performance of one or more stages of a multistage processing pipeline platform configured for conducting a network operation process, wherein the multistage processing pipeline platform includes one or more predefined hook entry points and compiling the program code script to generate a customized plug-in component that is deployed in at least one of the one or more predefined hook entry points of the multistage processing pipeline platform. The method further includes initiating execution of the customized plug-in component in response to a triggering of the at least one of the one or more predefined hook entry points of a stage element of the multistage processing pipeline platform, wherein the execution of the customized plug-in component dynamically configures at least one feature of the network operation process at runtime.

Methods, systems, and computer readable media for customizing data plane pipeline processing using Berkeley packet filter (BPF) hook entry points

Methods, systems, and computer readable media for testing a system under test (SUT). An example system includes a distributed processing node emulator configured for emulating a multi-processing node distributed computing system using a processing node communications model and generating intra-processing node communications and inter-processing node communications in the multi-processing node distributed computing system. At least a portion of the inter-processing node communications comprises one or more messages communicated with the SUT by way of a switching fabric. The system includes a test execution manager configured for managing the distributed processing node emulator to execute a pre-defined test case, monitoring the SUT, and outputting a test report based on monitoring the SUT during execution of the pre-defined test case.

Methods, systems, and computer readable media for testing a system under test using a processing node communications model

One example method occurs at a test system implemented using at least one processor, the method comprising: sending, via an application programming interface (API) and to a first traffic generator, a first instruction for setting a rate of background test packets sent to or via a system under test (SUT) for a test session; sending the background test packets to or via the SUT during the test session; receiving, from at least one feedback entity, feedback indicating at least one traffic metric associated with the background test packets sent to or via the SUT during the test session; generating, using the feedback, a second instruction for adjusting the rate of background test packets sent during the test session; and providing, via the API and to the first traffic generator, the second instruction for adjusting the rate of background test packets sent to or via the SUT during the test session.

Methods, systems, and computer readable media for providing adaptive background test traffic in a test environment

Methods, systems, and computer readable media for smart network interface card testing are disclosed. One example method occurs at a network interface card (NIC) comprising a network processing unit executing a monitoring agent for monitoring data traversing the NIC. The method includes obtaining, from a test system or a test traffic generator, at least one test packet; generating, using the monitoring agent, NIC processing information associated with processing the at least one test packet, wherein generating the NIC processing information includes monitoring application layer events, presentation layer events, session layer events, transport layer events, network layer events, driver layer events, kernel layer events, or other events involving the NIC and generating the NIC processing information using the monitored events; and storing or providing the NIC processing information for data analysis.

Methods, systems, and computer readable media for smart network interface card testing

The subject matter described herein includes methods, systems, and computer readable media for stateless service traffic generation. A method for stateless service traffic generation occurs at a network equipment test system. The method includes generating, at a first transmit port associated with the network equipment test system, a first test packet flow comprising one or more packets, wherein the first test packet flow indicates a match and action instruction for triggering an action at a second transmit port associated with the network equipment test system; sending the first test packet flow toward a node associated with a data center under test (DCUT); receiving the first test packet flow from the node associated with the DCUT; and performing, using the match and action instruction, the action at the second transmit port associated with the network equipment test system.

Methods, systems and computer readable media for stateless service traffic generation

According to one method, the method occurs at a first test device located inline between at least one traffic source and a network and/or system under test (NSUT), wherein the first test device is implemented using at least one processor and at least one memory. The method includes receiving, from a test controller, impairment rules generated from baseline metrics based on monitored live traffic for effecting traffic impairments; receiving traffic destined to the NSUT; impairing the traffic destined to the NSUT based on the impairment rules; sending the impaired traffic towards the NSUT, wherein the NSUT processes the impaired traffic; and sending, from the test device or a related tap, response information from the NSUT to the test controller for analyzing NSUT performance.

Indirect testing using impairment rules

A method executed by a dynamic session key acquisition (DSKA) engine residing in a virtual environment includes receiving session decryption information extraction instructions that configure the DSKA engine to obtain session decryption information for at least one communication session involving a virtual machine and obtaining the session decryption information from the virtual machine in accordance with the session decryption information extraction instructions. The session decryption information includes cryptographic keys utilized by an application server instance in the virtual machine to establish the at least one communication session. The session decryption information obtained from the virtual machine is stored and provided to a network traffic monitoring (NTM) agent. The NTM agent utilizes the session decryption information to decrypt copies of encrypted network traffic flows belonging to the at least one communication session involving the virtual machine.

Monitoring encrypted network traffic flows in a virtual environment using dynamic session key acquisition techniques

One method occurs at a test controller of a network test system implemented using at least one processor. The method includes receiving test configuration information for configuring a testing scenario comprising an emulated data center environment implemented using multiple network emulation platforms that are interconnected, wherein the test configuration information includes switching fabric topology information for defining the emulated data center environment; configuring, using the test configuration information, the emulated data center environment including sending a set of configuration instructions to each of the network emulation platforms, wherein each set of configuration instructions include resource allocation instructions for allocating ASIC switch resources of a respective network emulation platform to one or more emulated switches; and configuring, using the test configuration information, a test session for testing a system under test (SUT) using the emulated data center environment and a network visibility infrastructure.

Methods, systems, and computer readable media for network testing using an emulated data center environment

According to one method, the method occurs at a test system implemented using at least one processor. The method includes receiving test configuration information associated with a test session for configuring a test infrastructure connecting at least one test application and a system under test (SUT), wherein the test infrastructure includes at least two CTI devices that are dynamically configurable to perform one or more test related functions; configuring, using test configuration information, the test infrastructure to handle traffic for the test session; initiating the test session, wherein the test session involves using the at least two CTI devices and the at least one test application to test the SUT; and obtaining and reporting test results associated with the test session.

Methods, systems, and computer readable media for network testing using configurable test infrastructure

Methods, systems, and computer readable media for optimizing storage of application data in memory are disclosed. According to one method for optimizing storage of application data in memory, the method includes receiving application data associated with an application. The method also includes generating, using information about the application, information about a processor, and information about a memory, a memory map indicating one or more memory locations in the memory for storing the application data. The method further includes storing, using the memory map, the application data in the one or more memory locations. The method also includes executing, using the processor, the application that uses the application data.

Optimizing storage of application data in memory

According to one method, the method occurs during a test session for testing a system under test (SUT) and at a network test system comprising physical application-specific integrated circuit (ASIC) switching resources, wherein the network test system emulates a data center switching fabric comprising virtualized data center switching fabric elements: transmitting, to an inline impairment device, a test packet via an egress portion of an external physical port interface associated with the network test system, wherein the inline impairment device is connected via the external physical port interface associated with the network test system; receiving, from the inline impairment device, an impaired packet via an ingress portion of the external physical port interface associated with the network test system, wherein the impaired packet is generated when the impairment device applies at least one impairment to the test packet; and transmitting, using one or more of the virtualized data center switching fabric elements, the impaired packet to the SUT.

Methods, systems, and computer readable media for impairment testing using an impairment device

A method for dynamic firewall configuration for accessing service hosted in virtual networks includes monitoring, in a virtual network, changes in an Internet protocol (IP) address of a service hosted in a virtual network. The method further includes detecting a change the IP address of the service hosted in the virtual network. The method further includes communicating notification of the change in IP address to a firewall policy management interface. The method further includes, automatically configuring a firewall to allow access to the service hosted in the virtual network.

Dynamic firewall configuration and control for accessing services hosted in virtual networks

A method for network flow metadata processing at a network packet broker includes, receiving, as input at the network packet broker, network flow metadata, the network flow metadata including a network flow statistic generated by a network device regarding packets in the network flow. The method further includes accessing, by the network packet broker, a network flow metadata processing rules database and identifying a network flow metadata processing rule to apply to the network flow metadata. The method further includes processing, by the network packet broker, the network flow metadata using the network flow metadata processing rule. The method further includes forwarding, by the network packet broker and based on results of the processing, egress network flow metadata to a network tool.

Methods, systems, and computer readable media for processing network flow metadata at a network packet broker

Systems and methods are disclosed for drop detection and protection with respect to packet monitoring in virtual processing environments. Tap agents monitor and capture packets from the network traffic associated with network applications running within these virtual processing environments. Sequence numbers are added in packet encapsulation before tap packets are forwarded to tool agents. The tool agents then use the sequence numbers to detect packet drops within the tap packets. After drop detection, the tool agents send drop detection messages to an agent controller, and the agent controller generates and sends reconfiguration messages to the tap agents based upon the drop detection messages. The tool agents can also send drop detection messages directly to the tap agents. The tap agents adjust their operations based upon the reconfiguration messages and/or the drop detection messages to reduce packet drops within subsequent tap packets communications.

Growing community of inventors

Thousand Oaks, CA, United States of America

Matthew Ryan Bergeron