Website Load Testing Tools - NETSEC

Latest

Learning, Sharing, Creating

Cybersecurity Memo

Tuesday, November 8, 2022

Website Load Testing Tools

There are many Website Load Testing applications, here are some I recently tested. This post is to simply record some screenshots and steps I were using them. 




Website Speed Test


https://pagespeed.web.dev/






loader.io

Simple Cloud-based LOAD TESTING Site:  https://loader.io/


1. Add target hosts:

You will be asked to verify the ownership of this host by uploading a assigned file to it.If you have paid plan, you will be able to use DNS as verification method. 

2. Create a new test and run a test


3. Watch the testin real-time. 


4. Share test result:

Result sample: https://bit.ly/3t4A8qB

K6.io


Online Load Testing: https://k6.io/

Trial Subscription:


K6 provides a trial plan for 50 tests. Max concurrent VUs/test is 50 VUs and max test duration/test is 12 minutes. Data retention period is 7 days. 


Steps:

1. Create a project


2. Create a new test

3. Using a test buider
3.1 Choose load zones

3.2 Create a scenario with a new request


4. Using Scrpt Editor

Script:


import { sleep } from 'k6'
import http from 'k6/http'

// See https://k6.io/docs/using-k6/options
export const options = {
  stages: [
    { duration: '1m', target: 20 },
    { duration: '3m', target: 20 },
    { duration: '1m', target: 0 },
  ],
  thresholds: {
    http_req_failed: ['rate<0.02'], // http errors should be less than 2%
    http_req_duration: ['p(95)<2000'], // 95% requests should be below 2s
  },
  ext: {
    loadimpact: {
      distribution: {
        'amazon:us:ashburn': { loadZone: 'amazon:us:ashburn', percent: 100 },
      },
    },
  },
}

export default function main() {
  let response = http.get('https://blog.51sec.org/')
  sleep(1)
}


5. View test result

Performing testing:


Finished:



Notes:
If you have enabled Cloudflare security features to protect your website, such as WAF, Bots , you had better to disable them first. Else you will get failed error on your K6 test page since CloudFlare will send out JS Challenge to fight back to those suspicious traffic. 






Videos

TBD 







References






No comments:

Post a Comment