Forum Discussion

mister_paul_717's avatar
mister_paul_717
Icon for Nimbostratus rankNimbostratus
Sep 30, 2009

Load Testing - any advice?

We're planning on doing some load testing against our site with ASM, and want a certain percentage of the requests to be "attacks". I'm wondering if there are specific types of attacks that are better than others for generating a significant load. I could send nothing but a bunch of requests for foo.exe (invalid object type), but also could make it more complex. Any suggestions?

 

 

Paul
app sec
BIG-IP Access Policy Manager (APM)
security
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 01, 2009
    Hi Paul,

     

     

    It would be ideal to mimic live traffic in the load testing. Your live traffic would probably have a variety of violations. Depending on what type of load testing kit you have, you might try recording a real browser session where you manually exercise the web application submitting some data which triggers violations.

     

     

    Aaron