Version 1 (modified by, 8 years ago) (diff)


Internet2 FlowSpace Firewall Tests

This page outlines testing planned for the Advanced Layer 2 Services (AL2S) FlowSpace Firewall (FSF) feature.

The tests will verify the ability of FSF to provide advertised features for various scenarios that will use both ION and AL2S GENI endpoints. GENI slices will be setup to validate the following:

  • FSF ability to support a simple learning switch controller for various topologies.
  • FSF ability to support multiple concurrent add/delete learning switch controller request.
  • Verify ability to use different learning switch controller implementations (FloodLight, POX)
  • Ability to query statistics for switch, links, firewall rules with FloodLight rest API.


  • Testing will start with simple 2 node topology connected to AL2s.
  • All ION to AL2S cross-connects will be used to verify ability to support OpenFlow connections.
  • End-point traffic types generated will include UDP, TCP, ICMP.

FSF-T1 Functional Tests

  1. Create VLANs between AL2S InstaGENI end-point
  2. Delete VLANs and verify release of VLANs via AL2S router proxy.
  3. Submit multiple concurrent requests to add and to delete flow spaces.
  4. Query FSF status and rules via FloodLight rest API.
  5. Generate traffic outside of pre-defined flowspace and verify that it is handled properly.

Topology Scenarios

FSF-T2 Two Site tests

Initial testing will take place with two sites that are already connected to AL2S. Functional testing will executed in this topology.

FSF-T3 ION to AL2S interconnects tests

FSF-T4 Linear topology tests

FSF-T5 Star Topology tests

Attachments (4)

Download all attachments as: .zip