CyberFlood CF400 Layer 4-7 Application and Security Performance Test Appliance

2RU CyberFlood and Avalanche test appliance generating over 400 Gbps of stateful Layer 4-7 application traffic with 8 x 100G QSFP28 interfaces.

HTTP Bandwidth (Bi-directional): 590 Gbps
HTTPS Bandwidth: 280 Gbps
HTTP Connections (GET) per second: 4,500,000
HTTPS Connections (GET) per second: 300,000

Datasheet

Overview

The VIAVI CF400 is a Layer 4-7 stateful traffic performance appliance for the CyberFlood and Avalanche testing tools. It generates over 400 Gbps of application throughput, including high-strength cryptographic and realistic application traffic, and is used to test the performance limits of network devices, web applications and media services.

The CF400 is offered in a dual-speed 8 x 100G QSFP28 configuration and in a multi-speed QSFP28/QSFP+ configuration (CF400Q). The multi-speed version provides native connectivity for 10G, 25G, 40G, 50G and 100G Layer 4-7 application traffic. Built-in cryptographic acceleration supports up to 200 Gbps of encrypted throughput and 200,000 connections per second from a single appliance.

Modular Scale

The appliance includes a built-in CyberFlood controller, so tests can be run from the web-based CyberFlood interface without an additional hosting platform. Multiple appliances can be stacked into a single test system to validate multi-terabit security controls, application delivery platforms and hyperscale data center networks.

Software

CyberFlood generates realistic application traffic scenarios for load and functional testing and includes NetSecOPEN standard methodologies with goal-seeking tests that find the maximum performance of a device under test. Avalanche software on the CF400 provides configurable user behavior, browser emulation, think times, HTTP aborts, HTTP basic and proxy authentication, and HTTP Adaptive Bitrate video testing.

Key Features

Over 400 Gbps of stateful Layer 4-7 application traffic
200 Gbps of encrypted throughput and 200,000 connections per second from a single appliance
8 x 100G, 16 x 10G, 16 x 25G, 8 x 40G or 16 x 50G interface configurations
Built-in CyberFlood controller
Modular architecture: multiple appliances can be stacked into a single test system
Compatible with CyberFlood and Avalanche for one-ended and two-ended testing
Automatic goal seeking to determine maximum device capabilities
Throughput with mixed traffic from hundreds of thousands of application scenarios
HTTP/3 test support
TLS v1.2 and TLS v1.3 testing including Post-Quantum Cryptography (PQC)
NetSecOPEN standard methodologies built in
Performance operation modes to adjust CPU and memory allocation behind test interfaces
Long-duration soak tests with the TestCloud application load
IPSec and SSL VPN capacity testing including tunnel setup, maximum tunnels and data rates
ZTNA testing of Zero Trust Policy Enforcement Points
Realistic web testing by importing and replaying recorded web sessions
Advanced Mixed Traffic included as a standard option
CyberFlood RESTful API and Avalanche Tcl API automation

Specifications

Performance Examples

HTTP Bandwidth (Bi-directional)	590 Gbps Single CF400 as client and server
HTTPS Bandwidth	280 Gbps Single CF400 as client and server; TLS v1.3 with AES-128-GCM-SHA256 cipher suite
HTTP Connections (GET) per second	4,500,000 Single CF400 as client and server
HTTPS Connections (GET) per second	300,000 Single CF400 as client and server; TLS v1.3 with AES-128-GCM-SHA256 cipher suite
HTTP Concurrent Connections	320,000,000 Single CF400 as client and server
Encrypted throughput	200 Gbps Stated in datasheet text with 200,000 connections per second from a single appliance; the performance example table lists 280 Gbps HTTPS bandwidth
Stateful application traffic	>400 Gbps Stateful Layer 4-7 traffic

Available Hardware Configurations

CF400 with 8 x 100G QSFP28 CF400	8 x 100G interfaces; 8 x 40G interfaces
CF400Q (Multi-Speed) with 8 x 100G QSFP28 CF400Q	8 x 100G interfaces; 16 x 10G interfaces; 16 x 25 interfaces; 8 x 40G interfaces; 16 x 50G interfaces Multi-speed QSFP28/QSFP+ configuration

Software License Options

Performance Testing Software	Includes HTTP/HTTPS Throughput, HTTP/HTTPS CPS, HTTP/HTTPS Concurrent Connections, DNS, Throughput with Mixed Traffic (default protocols), Advanced Mixed Traffic, and Network Traffic Replay test methodologies
TestCloud Subscription	Allows options for always up-to-date downloadable content for application scenarios

CyberFlood Feature Details

Web Based Interface	Multi-user web-based interface
Application Scenarios	Hundreds of thousands of current and popular application and user scenarios Usable in custom mixed traffic tests
HTTPS/TLS Testing	Support for TLS v1.2, and TLS v1.3 with selectable certificate and cipher suites, including Post-Quantum Cryptography (PQC)
HTTP Connections Tests	Open thousands to millions of new connections per second
HTTP Bandwidth Tests	Find the maximum throughput achievable using emulated, realistic HTTP clients and HTTP servers and leveraging a configurable network topology
HTTP Open Connection Tests	Open millions of concurrent TCP connections within the state table of your DUT to find the maximum concurrency it can support
VPN Testing	Site to site and remote access IPSec and SSL VPN from tunnel setup to data traffic handling Expanding set of SSL VPN dialects
Advanced Mixed Traffic Assessment	User action lists for HTTP, HTTP/2, HTTP/3, HTTPS, SMTP, POP3, IMAP4, FTP, DNS over TLS and HTTPS, and other protocols
Mixed Traffic Tests	Individually measure the bandwidth and success rate of each application added to the test Built-in applications or extended applications with TestCloud
ZTNA Testing	Emulating authenticated, unauthenticated & unauthorized users via SAML and OIDC to validate least-privilege access policies
Traffic Replay	Replay your own traffic profiles at scale
DNS Tests	Hundreds of thousands of DNS queries per second
Automation	CyberFlood RESTful API and Avalanche Tcl API

Physical

Dimensions	2RU - 3.5” H x 17.2” W x 22.6” D Fits standard 19” rack
Weight	34 lbs (15.6 kg)

Environmental

Operating Environment	0°C – 40°C (32°F – 104°F)
Non-Operating Environment	-40°C – 70°C (-40°F – 158°F)
Operating Relative Humidity	8% – 90% Non-condensing
Non-operating Relative Humidity	5% – 95% Non-condensing

Power

Power Requirements	100-240 Vac, 50/60Hz, 2000W

Client Requirements

Controller access client	Any Windows, Mac or Linux PC running the latest browser versions; Firefox browser; Google Chrome browser Minimum requirements to run CyberFlood

Specifications are taken from the manufacturer's documentation. See the datasheet for complete and current values.

Applications

Network performance testing
Web application testing
High-performance HTTPS/TLS testing
SSL VPN/IPSec performance testing
Application identification testing
Advanced video application testing
Mobile network firewall testing
Zero-Trust scale and performance testing
UDP/TCP traffic replay at scale
Firewall and application firewall testing
Load balancer testing
SD-WAN and SASE testing
Proxy, cache and content filter testing
IDS/IPS testing
IPSec VPN gateway testing
Application server performance testing

Included

Built-in CyberFlood controller
Advanced Mixed Traffic (standard option on the CF400)

Options & Accessories

Option	Description
CF-KIT-001-CF400	CF400 Base Appliance Kit 8 x QSFP28 (add-on unit) — QSFP28 and QSFP+ transceivers are sold separately.
CF-KIT-002-CF400	CF400 Performance Kit 8 x QSFP28 — Includes HTTP/HTTPS Throughput, HTTP/HTTPS CPS, HTTP/HTTPS Concurrent Connections, DNS, Throughput with Mixed Traffic (default protocols), Advanced Mixed Traffic, and Network Traffic Replay test methodologies. Transceivers sold separately.
CF-KIT-004-CF400Q	CF400 Multi-speed Base Appliance Kit 8 x QSFP28 (add-on unit) — QSFP28 and QSFP+ transceivers are sold separately.
CF-KIT-005-CF400Q	CF400 Multi-speed Performance Kit 8 x QSFP28 — Includes HTTP/HTTPS Throughput, HTTP/HTTPS CPS, HTTP/HTTPS Concurrent Connections, DNS, Throughput with Mixed Traffic (default protocols), Advanced Mixed Traffic, and Network Traffic Replay test methodologies. Transceivers sold separately.