IETF RFC 9411
[ACTIVE]
Benchmarking Methodology for Network Security Device Performance
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 51
- Abstract
- This document provides benchmarking terminology and methodology for next-generation network security devices, including next-generation firewalls (NGFWs) and next-generation intrusion prevention systems (NGIPSs). The main areas covered in this document are test terminology, test configuration parameters, and benchmarking methodology for NGFWs and NGIPSs. (It is assumed that readers have a working knowledge of these devices and the security functionality they contain.) This document aims to improve the applicability, reproducibility, and transparency of benchmarks and to align the test methodology with today's increasingly complex layer 7 security-centric network application use cases. As a result, this document makes RFC 3511 obsolete.
- Publication Date
- 2023-03-01
- Status Note
- Informational
- DOI
10.17487/RFC9411- Link
- https://doi.org/10.17487/RFC9411
- Author(s)
- Balamuhunthan BalarajahCarsten RossenhoevelBrian Monkman
- Keyword(s)
- NGFW, NGIPS, Benchmarking, Security Testing
Latest version of IETF RFC 9411
Document Versions — IETF RFC 9411
-
▶ IETF RFC 9411 (2023-03-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 8174 [Active*]
Bibliographic Reference(s)
- undertow, "An in depth overview of HTTP/2", <https://undertow.io/blog/2015/04/27/An-in-depth-overview-of-HTTP2.html>. EXTERNAL
- CVE, "Current CVSS Score Distribution For All Vulnerabilities", <https://www.cvedetails.com/>. EXTERNAL
- Wikipedia, "Next-generation firewall", January 2023, <https://en.wikipedia.org/w/index.php?title=Next-generation_firewall&oldid=1133673904>. EXTERNAL
- Oku, K. and J. Iyengar, "QUIC vs TCP: Which is Better?", April 2020, <https://www.fastly.com/blog/measuring-quic-vs-tcp-computational-efficiency>. EXTERNAL
- IETF RFC 2544 [Active*]
- IETF RFC 2647 [Active*]
- IETF RFC 3511 [Superseded*]
- IETF RFC 5180 [Active*]
- IETF RFC 6815 [Active*]
- IETF RFC 6890 [Active*]
- IETF RFC 8200 [Active*]
- IETF RFC 8446 [Superseded*]
- IETF RFC 9000 [Active*]
- RFC9001 — QUIC-TLS EXTERNAL
- RFC9002 — QUIC-RECOVERY EXTERNAL
- IETF RFC 9113 [Active*]
- RFC9114 — RFC9114 EXTERNAL
- RFC9204 — RFC9204 EXTERNAL
- IETF RFC 9293 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9411.json
Supersedes:
IETF RFC 3511 [Superseded*]
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9411, Benchmarking Methodology for Network Security Device Performance. Available at https://doi.org/10.17487/RFC9411
Snippet:
IETF RFC 9411, Benchmarking Methodology for Network Security Device Performance. Available at https://doi.org/10.17487/RFC9411
HTML (ISO 690 compliant)
Preview:
IETF RFC 9411, Benchmarking Methodology for Network Security Device Performance. Available at https://doi.org/10.17487/RFC9411
Snippet:
<span class="citation"><cite>IETF RFC 9411</cite>, Benchmarking Methodology for Network Security Device Performance. Available at <a href="https://doi.org/10.17487/RFC9411" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9411</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9411, Benchmarking Methodology for Network Security Device Performance
doi: 10.17487/RFC9411
url: https://doi.org/10.17487/RFC9411
doi: 10.17487/RFC9411
url: https://doi.org/10.17487/RFC9411
Snippet:
<li> <cite id="bib-rfc9411">IETF RFC 9411</cite>, Benchmarking Methodology for Network Security Device Performance <span class="doi">10.17487/RFC9411</span> </li>