InfotecsTech Builds Custom Kubernetes-Based Traffic Generator for NGFW RnD and Performance Testing
InfotecsTech has detailed the development of its proprietary traffic generator designed to accompany NGFW research, development, and performance validation. The project began with the need to test an active-active NGFW cluster and generate diverse data flows without relying on expensive commercial appliances.
Commercial solutions from IXIA and Xinertel were rejected because of prohibitive pricing at hundreds of gigabits, limited flexibility for testing advanced NGFW features, and geopolitical acquisition barriers. Instead, the team created a scalable, automatable platform that integrates directly into the development workflow.
The architecture runs on Kubernetes with minimal hardware requirements of Debian 12, 8 GB RAM per CPU socket, and 1 Gbit/s network interfaces. A master node provides three core services: Registry for Docker images and metadata, Discovery for managing heterogeneous hardware, and Crux as the REST API operator that orchestrates test execution.
Containerized generators include Cisco TRex for stateless and stateful L3-L7 traffic with DSCP marking, an SIPp-based SIP generator supporting TLS and custom failure scenarios, an FTP generator built on pyftpdlib and aioftp, and a Yandex Tank plus Nginx setup for live TLS sessions using various cipher suites. Additional modules cover APT, DDoS, and web attacks plus Selenium-driven legitimate clients against OWASP Juice Shop.
Real-world test scenarios demonstrated peak VoIP call rates, sustained concurrent connections exceeding 160 million, 400 Gbit/s UDP throughput with 1518-byte packets, 5 million connections per second, and IMIX traffic at 300 Gbit/s with 110 million packets per second. The platform also evaluates behavior under packet loss and integrates Camunda for automated policy application and result collection.
Related articles
Why AI Chatbots Misread Polished Reports and How to Prepare AI-Ready Content
Beautifully designed reports often confuse AI systems because visual layout does not preserve logical relationships between elements. When design is stripped away, machines may lose connections between headings, numbers, tables, and footnotes, leading to incorrect interpretations of key facts such as revenue growth. The solution is to create AI Ready content that maintains structure, semantics, and context even after text extraction or copying. This approach aligns closely with web accessibility standards from W3C and benefits both human readers using assistive technologies and automated analysis tools. Organizations are advised to use tagged PDFs following PDF/UA and ISO 14289-2:2024, provide data in XLSX or CSV alongside visual charts, and ensure every important figure travels with its full context including period, unit, and comparison base. The same principles apply to presentations, press releases, websites, and multimedia content.
Statistical Analysis in OSINT: Tools, Methods and Real-World Intelligence Applications
The article explains why statistical processing has become an essential component of professional OSINT work when analysts face large volumes of raw data. It outlines five core tasks that statistical methods solve: actor profiling, disinformation monitoring through time-series and graph analysis, financial intelligence, geospatial verification, and threat assessment. The text compares popular tools including Maltego, Gephi, Python, R, Power BI, Tableau and SpiderFoot, stressing that real investigations usually combine several of them. Detailed examples show how Pearson correlation, Louvain clustering and TF-IDF or BERT embeddings help identify coordinated botnets in social media. Famous leaks such as Panama Papers and Pandora Papers are presented as landmark cases where regression models, cluster analysis and network graphs exposed hidden ownership structures. The piece also lists open statistical sources from national agencies, international organisations and technical platforms, and reviews key mathematical techniques from basic descriptive statistics to ARIMA, CUSUM, DBSCAN and dimensionality reduction methods.
Bot Traffic Overtakes Human Traffic in 2024 as AI Agents and Scrapers Surge
Analysis of internet traffic from 2013 to 2026 shows automated bots steadily eroding human dominance online. Imperva data reveals human traffic fell to 47 percent by 2025 while malicious bots reached 40 percent. Good bots such as search crawlers remain stable, but gray AI agents and scrapers now drive much of the growth. Companies face rising infrastructure costs from bot traffic that generates no revenue, described as an invisible tax. Cloudflare and Akamai reports confirm high volumes of automated requests, with many classified as harmful scraping. The trend raises concerns about a synthetic internet shaped more by AI recommendations than human activity.
Understanding Security Alerts Only Becomes Clear When You Start Writing Detection Rules Yourself
A cybersecurity professional who spent years as a SOC analyst reviewing alerts before moving into detection engineering shares key insights on why alerts behave differently depending on perspective. The article explains the inherent trade-offs in tuning detection rules, the architectural reasons alerts often arrive without full context, and why default priorities rarely match any single organization's environment. It highlights how false positives are not simply developer errors but calculated risks between coverage and noise. The piece also stresses the value of feedback loops between SOC teams and detection developers to improve overall security effectiveness.