CyberFlood CF1000 Terabit-Scale Layer 4–7 Application and Security Test Appliance

Native 400G 2U CyberFlood appliance generating over 1.2 Tbps of stateful Layer 4–7 application traffic and over 500 Gbps of encrypted traffic.

HTTP Uni-directional Throughput: 950 Gbps
HTTP Bidirectional Throughput: >1.2 Tbps
HTTP Connections per Second: >6 Million
TLS v1.2 Throughput: >500 Gbps

Datasheet

Overview

The VIAVI CF1000 is a native 400G, terabit-scale Layer 4–7 stateful traffic and application test platform in a 2U appliance. It is designed to validate the performance of content-aware networks, security systems, application delivery infrastructure and AI inference workloads, generating realistic cryptographic workloads, including post-quantum cryptography, and application traffic at scale.

Paired with CyberFlood and Avalanche software, a single CF1000 can generate over 1.2 Tbps of application traffic and over 500 Gbps of encrypted traffic without external switching infrastructure. The appliance provides 4 x 400G OSFP and 8 x 100G QSFP28 interfaces, and users can define load variables and build tests with mixed traffic profiles that emulate real-world network scenarios.

Modular terabit scale

The CF1000 includes an integrated CyberFlood controller, so testing can start through the web-based CyberFlood interface without an external hosting platform. Multiple CF1000 units can be stacked into a single test system to reach multi-terabit scale for validating security controls, application delivery platforms and hyperscale AI data center networks.

Software and methodologies

CyberFlood generates application traffic based on actual application scenarios for load and functional testing, and includes the NetSecOPEN standard methodologies with goal-seeking tests that find the maximum performance of a device under test. The CF1000 supports detailed user behavior modeling, including multiple browser types, SSL/TLS versions, authentication methods, think times and HTTP aborts, as well as HTTP basic and proxy authentication and HTTP Adaptive Bitrate video testing. Avalanche is supported for directed one-ended and two-ended testing, and the CyberFlood Model Context Protocol (MCP) Server lets AI agents configure, run, monitor and analyze tests through natural language.

Key Features

Over 1.2 Tbps of bidirectional stateful Layer 4-7 traffic from a single appliance
4 x 400G OSFP and 8 x 100G QSFP28 interfaces in a 2U appliance
Over 500 Gbps of encrypted throughput and 820K TLS connections per second
Integrated CyberFlood controller with web-based interface
Multiple CF1000 units can be stacked into a single test system for multi-terabit scale
Compatible with CyberFlood and Avalanche software
Automatic goal seeking to determine maximum device capabilities
Throughput with mixed traffic from a database of hundreds of thousands of application scenarios
HTTP/3 test support
Performance operation modes to adjust CPU and memory allocation behind test interfaces
Long-duration soak testing with TestCloud application load
AI inference testing with multi-turn conversations and multi-modal prompts
IPSec and SSL VPN testing including tunnel setup, maximum tunnels and data rates
ZTNA testing of Zero Trust Policy Enforcement Points
Realistic web testing by importing and replaying recorded web sessions
NetSecOPEN standard methodologies built into CyberFlood
CyberFlood Model Context Protocol (MCP) Server for AI-agent driven test control
HTTP Adaptive Bitrate (ABR) video testing for Apple, Microsoft and Adobe environments

Specifications

Performance

HTTP Uni-directional Throughput	950 Gbps Single CF1000 as client and server
HTTP Bidirectional Throughput	>1.2 Tbps Single CF1000 as client and server
HTTP Connections per Second	>6 Million Single CF1000 as client and server
TLS v1.2 Throughput	>500 Gbps Single CF1000 as client and server; AES-128-GCM-SHA256 cipher suite
TLS v1.2 Connections per Second	820 K Single CF1000 as client and server; AES-128-GCM-SHA256 cipher suite

Hardware Configuration

Available Hardware Configurations	CF1000 with 4 x 400G OSFP and 8 x 100G QSFP28
Interfaces	4 x 400G interfaces; 8 x 100G interfaces OSFP and QSFP28 transceivers are sold separately

Software License Options

Performance Testing Software	Includes HTTP/HTTPS Throughput, HTTP/HTTPS CPS, HTTP/HTTPS Concurrent Connections, DNS, Throughput with Mixed Traffic (default protocols), Advanced Mixed Traffic, and Network Traffic Replay test methodologies.
TestCloud Subscription	Allows options for always up-to-date downloadable content for application scenarios.

CyberFlood Feature Details

Web Based Interface	Easy to use multi-user web-based interface makes setting up and executing comprehensive tests fast, easy and consistent.
Application Scenarios	Hundreds of thousands of current and popular applications and user scenarios that can be easily used in custom mixed traffic tests.
HTTPS/TLS Testing	Support for TLS v1.2, and TLS v1.3 with selectable certificate and cipher suites, including Post-Quantum Cryptography (PQC).
HTTP Connections Tests	Open thousands to millions of new connections per second to ensure your DUT can handle the new connection rate of your network.
HTTP Bandwidth Tests	Find the maximum throughput achievable using emulated, realistic HTTP clients and HTTP servers and leveraging a configurable network topology.
HTTP Open Connection Tests	Open millions of concurrent TCP connections within the state table of your DUT to find the maximum concurrency it can support. Leverage HTTP as the protocol for added realism during this test.
VPN Testing	Easily assess capacities and capabilities of site to site and remote access IPSec and SSL VPN from tunnel setup to data traffic handling.
Advanced Mixed Traffic Assessment	Create custom and highly configurable tests and assessments with user action lists that execute a set of user application interactions for HTTP, HTTP/2, HTTP/3, HTTPS, SMTP, POP3, IMAP4, SSH/SFTP/SCP, SIP, Streaming, DNS over TLS and HTTPS, and other protocols.
Mixed Traffic Tests	Measure the impact on application performance when using real-world built-in applications or extended applications with the power of TestCloud. Individually measure the bandwidth and success rate of each application added to the test to confirm the impact of the network under test.
AI Inference Testing	Validate the end-to-end AI inference infrastructure and LLM application performance. Evaluate how network components, API gateways, firewalls, ADCs, GPU capacity, and security controls impact LLM inference throughput, latency, and accuracy.
ZTNA Testing	Validate the scale and performance of the ZTNA architecture by emulating authenticated, unauthenticated and unauthorized users via SAML and OIDC to validate least-privilege access policies
Traffic Replay	Replay your own traffic profiles at scale to determine the impact of customer traffic flows on network devices and services
DNS Tests	Overload your DUT by sending hundreds of thousands of DNS queries per second for it to process and traverse, as well as process the corresponding events that occur on the DNS responses
Automation	CyberFlood RESTful API and Avalanche Tcl API

Physical

Dimensions	2RU - 3.5” H x 17.2” W x 22.6” D; fits standard 19” rack
Weight	34 lbs (15.6 kg)

Environmental

Operating Environment	0°C to 40°C (32°F to 104°F)
Non-Operating Environment	-20°C to 70°C (-4°F to 158°F)
Operating Relative Humidity	8% to 90% non-condensing
Non-operating Relative Humidity	5% to 95% non-condensing

Power

Power Requirements	100-240 Vac, 50/60 Hz, 2000 W

Specifications are taken from the manufacturer's documentation. See the datasheet for complete and current values.

Applications

Network performance testing
Web application testing
AI inference assessment
High-performance HTTPS/TLS testing
SSL VPN/IPSec performance testing
Application identification testing
Advanced video application testing
Mobile network firewall testing
Zero-Trust scale and performance testing
UDP/TCP traffic replay at scale
Firewall and application firewall testing
Load balancer and SD-WAN testing
SASE testing
IDS/IPS and DDoS mitigation system testing
Proxy, cache and content filter testing
IPSec VPN gateway testing
Application server performance testing

Included

Integrated CyberFlood controller

Options & Accessories

Option	Description
CF-KIT-001-CF1000	CF1000 Base Appliance Kit 4 x OSFP and 8 x QSFP28 (add-on unit) — OSFP and QSFP28 transceivers are sold separately.
CF-KIT-002-CF1000	CF1000 Performance Kit 4 x OSFP and 8 x QSFP28 — Includes HTTP/HTTPS Throughput, HTTP/HTTPS CPS, HTTP/HTTPS Concurrent Connections, DNS, Throughput with Mixed Traffic (default protocols), Advanced Mixed Traffic, and Network Traffic Replay test methodologies. OSFP and QSFP28 transceivers are sold separately.