Solution Set - Testing Framework on
AWS Cloud
1
Blazeclan
Cloud Testing: Why it Matters
Cloud IT Better 2
Source : Aberdeen Research
Poor Application
Performance
= Loss of Revenue
60% organizations loss 9% of revenue due to Poor Application
Blazeclan
Challenges
Cloud IT Better 3
Large Scale
High Availability
Security Concerns
Cloud
Architectures
Cost Effective
On Demand
Accurate
Agile
Needs
Advance Testing
Framework
Blazeclan
Load Testing – Custom Load Testing Script
Cloud IT Better 4
- Increased User
Load
- Increased
Transactions
- Increased database
volume
Condition for an
application to Scale
Up or Scale out
Custom load testing
scripts, deployed on a
slave-master
architecture that
emulate thousands of
virtual users
performing real-life
transactions on a
system emulating
production traffic.
-Create test scripts
-Launch EC2
Machines
-Configure test
-Execute using
Jmeter
-Download Test
results
Testing on AWS Cloud Load Testing Testing Scripts
Blazeclan Cloud IT Better 5
Controller
Master Slaves Slaves Slaves
Virtual
Users Virtual
Users Virtual
Users
Web App
Server
Security Group
EC2 Instance
Security Group
EC2 Instance
Security Group
EC2 Instance
Security Group
EC2 Instance
Auto scaling Group
Web App
Server Web App
Server
Web App
Server
Availability Zone #
Region
Load
testing
scripts
Requests E L B
Instance starts if threshold meets
Default Instances
for load serving
Add
Auto Scaling
Load Testing – On AWS
Blazeclan
Load Testing on AWS – What it Includes
Cloud IT Better 6
Real-Time Analytics
Test Cloud
Rapid
Powerful
reporting
Dynamic
Create your
test Scenario
Accurate
and easy
to
simulate
load
Build,
execute, &
analyze
performance
Blazeclan
Vulnerability Assessment Testing – BlazeClan VAS
Cloud IT Better 7
Vulnerability testing
- identify the security holes.
- vulnerabilities in the application.
- forecasts the potential hazards.
Blazeclan VAS
Vulnerability
Assessment tool
Browser based
tool
Built on top of
Open VAS
Image courtesy :
http://dgdsbygo8mp3h.cloudfront.net/sites/default/files/Article-
Images/cissp-article4-image01.png
The scanner very
Efficiently executes
the actual Network
Vulnerability Tests
(NVTs) on the target.
Blazeclan Cloud IT Better 8
OpenVAS
Scanner
Amazon
Route 53
Elastic
Load
Balancer
Region
EC2 Instances
Auto scaling Group
Availability Zone #
Security Group
Web App
Server
OpenVAS
Manager
NVT’s
BlazeClan
VAS Browser based
client
SC
AN
TA
RG
ET
S
Internet
NVT Feeds
BlazeClan VAS – Architectural Diagram
Blazeclan
Vulnerability (Security) Testing – What it Includes
Cloud IT Better 9
• Discovery
• Vulnerability Scan
• Vulnerability Assessment
• Security Assessment
• Penetration Test
• Security Audit
• Configuration of the application or the server
• Services running on the server
• Existing user or customer data hosted by the application
• Spoofing
• URL manipulation
• SQL injection
• XSS (Cross Site Scripting)
Blazeclan
Availability Testing - Chaos Monkey
Cloud IT Better 10
Chaos Monkey,
“randomly disables
production instances to
make sure it can survive
common types of failure
without any customer
impact”
Availability testing
means:
Run application for
a period of time
Collect failures
Compare the
percentage of
availability.
EC2 EC2 EC2 EC2
Auto scaling Group
Auto Scaling group launches new instances
as and when threshold condition meets.
- Identify the
failure events
- Repair time
- Recovery from
failures
Availability testing
Blazeclan
Checking for availability by killing instances
Cloud IT Better 11
Web App
Server
CHAOS
MONKEY Amazon
Route 53
www.example.co
m
Elastic
Load
Balancer
Region
Availability Zone #1 Availability Zone #2 Availability Zone #4 Availability Zone #3
Security Group
EC2 Instance
Security Group
EC2 Instance
Security Group
EC2 Instance
Security Group
EC2 Instance
Web App Server
Web App Server
Web App Server
Auto scaling Group
Instance starts if threshold meets
Chaos monkey
attacking
instances
randomly
Chaos monkey
attacking instances
randomly
1
2
3
5
6
7
Web App
Server Web App
Server
Web App
Server 3 3 3
4
5
6
7
Blazeclan
How Chaos Monkey Works
Cloud IT Better 12
Web App Server
Security Group
EC2 Instance
Security Group
EC2 Instance
Security Group
EC2 Instance
Security Group
EC2 Instance
Web App Server
Web App Server
Web App Server
Auto scaling Group
Monitoring
Server
Activities
Conditions on meeting
threshold
Add a
Resource
Remove a
Resource
Attacking a
Resource
Randomly
Attacking a
Resource
Randomly
Chaos Monkey
Rep
ort
ing
se
rve
r
ac
tivit
ies
Launch
new Server
Chaos Monkey
Blazeclan
Availability Test - What it Includes
Cloud IT Better 13
The availability
testing is
performed to
remove single
point of failures
Test the Change
Control Process
Test
Catastrophic
Failure
Test the
Failover
Technologies
Mean
Time To
Recover
Test the
Monitoring
Technology
Test the Help
Desk
Procedures
Test for
Resource
Conflicts
Mean Time
Between
Failure
Mean
Logistics
Delay
Time
Blazeclan
Solution Features
Cloud IT Better 14
Pre-Build
Scripts
Quick Start
Reports and
Analytics
Repository of pre-
build test scripts of
load and
performance testing.
Running
application and
Pre-baked AMI
in the cloud.
Graphical reports
and detailed
Analytics
Blazeclan
Advantage BlazeClan
Cloud IT Better 15
Cloud Focus
Pre-build Solutions
Faster Time to Market
Thank you
Thank you
www.datamation.com
Follow Us On :
Our Blog : http://blog.blazeclan.com/