On Wednesday 14 December 2005 06:47 pm, James Morris wrote:
> On Wed, 14 Dec 2005, Joy Latten wrote:
> > A while back I took up some SELinux performance work that a colleague of
> > mine, Kylie Hall had done. The patch added ipv4 address, ipv6 address
> > and port caches to SELinux. I believe I sent the patch a while back
> > also, but can do so again if anyone is interested. The caches are
> > exercised in such SELinux hooks as socket_bind(), socket_connect() and
> > socket_sock_rcv_skb(). Bandwidth has allowed me some time to work on
> > this. Can anyone recommend a benchmark that will exercise this code? I
> > figured something that utilized many ip addresses or ports.
>
> apachebench is a good basic test, and you can also try webstone, lmbench
> and iperf.
>
> Not sure how to realistically simulate large numbers of IP addresses.

You might consider, budget permitting, something like Net Avalanche <spirentcom>. Rack mountable thingy designed for stress testing using realistic traffic: "simulates up to 50,000 simultaneously-connected users with unique IP addresses". (Every home should have one.)

• s harp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



application/pgp-signature attachment: stored