VIAVI CyberFlood CF50 test appliance, front view

VIAVI / Series · Network Security and Performance Testing

VIAVI CyberFlood Layer 4–7 Application and Security Performance Test Solution

Test solution that emulates real-world Layer 4–7 workloads to test network security controls, application performance and AI inference systems.

HTTP Uni-directional Throughput: 950 Gbps
HTTP Bidirectional Throughput: >1.2 Tbps
HTTP Connections per Second: >6 Million
TLS v1.2 Throughput: >500 Gbps

View Models Datasheet

Overview

CyberFlood is a test solution from VIAVI that generates realistic application traffic to validate the performance, scalability and resiliency of app-aware network infrastructure. It runs on virtual, cloud, container and high-performance appliance platforms. It generates stateful Layer 4–7 traffic for testing AI inference infrastructure, firewalls, SASE and ZTNA architectures, VPNs, load balancers and AI-driven environments.

The solution reproduces production conditions, including encrypted, high-bandwidth and policy-rich workloads. This lets teams find performance limits and gaps before deployment. Tests are set up through a multi-user web interface. They can draw on hundreds of thousands of application and user scenarios from the VIAVI TestCloud database, and users can also import their own applications and recorded web sessions.

Hardware platforms

The CyberFlood appliances have a built-in CyberFlood controller, so no separate hosting platform is needed. The C200 is a 1U appliance with 4 x QSFP28 interfaces. The CF30 and CF50 are compact 1RU units for enterprise, data center and service provider validation. The CF400 and the native-400G CF1000 are 2RU appliances. Several units can be stacked into one test system to reach multi-terabit scale. The appliances also run VIAVI Avalanche software for directed one-ended and two-ended testing.

Methodologies and automation

NetSecOPEN standard methodologies are built into CyberFlood. They include goal-seeking tests that automatically find the maximum performance of a device under test. Automation is available through the CyberFlood RESTful API and the Avalanche Tcl API. A CyberFlood Model Context Protocol (MCP) Server, part of the VIAVI NITRO AI portfolio, lets AI agents configure, run, monitor and analyze CyberFlood tests using natural language.

Models in this series

Model	Description
CF1000	CyberFlood CF1000 Terabit-Scale Layer 4–7 Application and Security Test Appliance Native 400G 2U CyberFlood appliance generating over 1.2 Tbps of stateful Layer 4–7 application traffic and over 500 Gbps of encrypted traffic.	Details →
CF400	CyberFlood CF400 Layer 4-7 Application and Security Performance Test Appliance 2RU CyberFlood and Avalanche test appliance generating over 400 Gbps of stateful Layer 4-7 application traffic with 8 x 100G QSFP28 interfaces.	Details →
CF400Q	CyberFlood CF400Q Multi-Speed 8 x 100G QSFP28 Layer 4-7 Application Performance Test Appliance Multi-speed 2RU CyberFlood and Avalanche appliance with 8 x 100G QSFP28 ports for stateful Layer 4-7 application and encrypted traffic testing.	Details →
C200	VIAVI C200 Appliance for CyberFlood and Avalanche – 1U Layer 4-7 Application Performance Test Platform 1U Layer 4-7 stateful traffic test appliance with 4 x QSFP28 ports for 10G to 100G, built-in CyberFlood controller and Avalanche support.	Details →
CF30	VIAVI CyberFlood CF30 1RU Layer 4-7 Application Performance Test Appliance Compact 1RU CyberFlood appliance with 8 x 10G/1G SFP+ ports that generates over 75 Gbps of HTTP and over 35 Gbps of HTTPS Layer 4-7 traffic.	Details →
CF50	VIAVI CyberFlood CF50 Application Performance Testing Appliance Compact 1RU CyberFlood appliance with 8 x 10G/1G SFP+ and 2 x 100G QSFP28 ports for stateful Layer 4-7 and HTTPS traffic testing.	Details →

Key Features

Benchmarking of AI inference performance and security at scale using realistic AI/LLM agentic workloads
App-aware L4–7 device testing with realistic application mixes, browser emulation and automated goal-seeking
Traditional and quantum-safe HTTPS/TLS throughput, connection rate and concurrent session testing with terabit-class traffic generation
Vendor-neutral benchmarking with NetSecOPEN methodologies
Available on virtual, cloud, container and high-performance appliance platforms
Built-in CyberFlood controller on hardware appliances
Support for TLS v1.2 and TLS v1.3 with selectable certificate and cipher suites, including Post-Quantum Cryptography (PQC)
Advanced Mixed Traffic user action lists for HTTP, HTTP/2, HTTP/3, HTTPS, SMTP, POP3, IMAP4, FTP, DNS over TLS and HTTPS and other protocols
ZTNA testing emulating authenticated, unauthenticated and unauthorized users via SAML and OIDC
IPSec and SSL VPN capacity testing from tunnel setup to data traffic handling
Traffic replay of custom traffic profiles at scale
DNS tests with hundreds of thousands of DNS queries per second
Realistic web testing by importing and replaying recorded web sessions
Long-duration soak testing with the TestCloud application load
CyberFlood RESTful API and Avalanche Tcl API automation
CyberFlood Model Context Protocol (MCP) Server for AI agent driven test control

Specifications

Performance Examples

HTTP Uni-directional Throughput CF1000	950 Gbps Single CF1000 as client and server
HTTP Bidirectional Throughput CF1000	>1.2 Tbps Single CF1000 as client and server
HTTP Connections per Second CF1000	>6 Million Single CF1000 as client and server
TLS v1.2 Throughput CF1000	>500 Gbps AES-128-GCM-SHA256 cipher suite
TLS v1.2 Connections per Second CF1000	820 K AES-128-GCM-SHA256 cipher suite
HTTP Bandwidth (Bi-directional) CF400	590 Gbps Single CF400 as client and server
HTTPS Bandwidth CF400	280 Gbps TLS v1.3 with AES-128-GCM-SHA256 cipher suite
HTTP Connections (GET) per second CF400	4,500,000
HTTPS Connections (GET) per second CF400	300,000 TLS v1.3 with AES-128-GCM-SHA256 cipher suite
HTTP Concurrent Connections CF400	320,000,000
HTTP Bandwidth (Bi-directional) CF30	>75 Gbps Single CF30 as client and server
HTTPS Bandwidth CF30	>35 Gbps ECDHE-ECDSA cipher
HTTP GETs/Sec CF30	>1,000,000
HTTPS GETs/Sec CF30	>100,000 ECDHE-ECDSA cipher
HTTP Sustained Connections CF30	>78,000,000
HTTP Bandwidth (Bi-directional) CF50	>75 Gbps (8 x 10G); >190 Gbps (2 x 100G) Single CF50 as client and server; one profile can be active at any time
HTTPS Bandwidth CF50	>35 Gbps (8 x 10G); >65 Gbps (2 x 100G) ECDHE-ECDSA cipher
HTTP GETs/Sec CF50	>2,000,000 (8 x 10G); >1,500,000 (2 x 100G)
HTTPS GETs/Sec CF50	>90,000 (8 x 10G); >65,000 (2 x 100G) ECDHE-ECDSA cipher
HTTP Sustained Connections CF50	>78,000,000 (8 x 10G); >78,000,000 (2 x 100G)

Interfaces and Hardware

Network Interfaces C200	4 x QSFP28; up to 16 x 10G Fiber (SR4), up to 8 x 25G Fiber (SR4), up to 4 x 40G Fiber (SR4 or LR4), up to 4 x 50G Fiber (SR4), up to 4 x 100G Fiber (SR4 or LR4) DAC cable support for 10G/40G and 100G; transceivers sold separately
Number of Test Users C200	Up to 16 users on specific configurations
CPU C200	32 high-powered cores for advanced traffic generation
Cryptographic Processing C200	256 Symmetric and 320 Asymmetric Cores
Hardware Configuration CF1000	4 x 400G interfaces; 8 x 100G interfaces CF1000 with 4 x 400G OSFP and 8 x 100G QSFP28; transceivers sold separately
Hardware Configuration CF30	8x10G/1G SFP+ Includes 8x10G/1G MMF SFP+ transceivers
Hardware Configuration CF400	8 x 100G interfaces; 8 x 40G interfaces CF400 with 8 x 100G QSFP28
Hardware Configuration CF400Q	8 x 100G interfaces; 16 x 10G interfaces; 16 x 25 interfaces; 8 x 40G interfaces; 16 x 50G interfaces CF400Q (Multi-Speed) with 8 x 100G QSFP28; QSFP28 and QSFP+ transceivers sold separately
Hardware Configuration CF50	8x10G/1G SFP+ (Includes 8 dual rate 10G/1G MMF SFP+ transceivers); 2x100G QSFP28 QSFP transceivers for 100G are sold separately

Software and Automation

HTTPS/TLS Testing CF1000, CF400, CF400Q, CF50	Support for TLS v1.2, and TLS v1.3 with selectable certificate and cipher suites, including Post-Quantum Cryptography (PQC)
HTTPS/TLS Testing C200	Support for legacy, TLS v1.2, and TLS v1.3 with selectable certificate and cipher suites, including Post-Quantum Cryptography (PQC)
HTTPS/TLS Testing CF30	Support for TLS v1.2, and TLS v1.3 with selectable certificate and cipher suites
Automation	CyberFlood RESTful API and Avalanche Tcl API

Physical

Dimensions C200	Height 1U, width 17.5” inches (without rack mounts), depth 37.1” inches
Weight C200	46 lbs. (11kg) As printed; the lb and kg figures do not match
Dimensions CF1000, CF400, CF400Q	2RU - 3.5” H x 17.2” W x 22.6” D; fits standard 19” rack
Weight CF1000, CF400, CF400Q	34 lbs (15.6 kg)
Dimensions CF30, CF50	1RU - 1.7 in H x 17.2 in W x 15.7 in D; Fits standard 19 in rack
Weight CF30, CF50	18 lbs (8.16 kg)

Environmental

Operating Environment C200	0° to 35°C ambient temperature
Non-operating Environment C200	-20C to 70C
Relative Humidity C200	10% to 70% (non-condensing)
Operating Environment CF1000	0°C to 40°C (32°F to 104°F)
Non-Operating Environment CF1000	-20°C to 70°C (-4°F to 158°F)
Operating Environment CF400, CF400Q	0°C – 40°C (32°F – 104°F)
Non-Operating Environment CF400, CF400Q	-40°C – 70°C (-40°F – 158°F)
Operating Environment CF30, CF50	0°C - 40°C (32°F -104°F)
Non-Operating Environment CF30, CF50	-40°C - 70°C (-40°F - 158°F)
Operating Relative Humidity CF1000, CF400, CF400Q, CF30, CF50	8% to 90% (non-condensing)
Non-operating Relative Humidity CF1000, CF400, CF400Q, CF30, CF50	5% to 95% (non-condensing)

Power and Regulatory

Power Requirements C200	Dual outlet 100-240V, 50/60 Hz–1600W 15A
Power Requirements CF1000, CF400, CF400Q	100-240 Vac, 50/60 Hz, 2000 W
Power Requirements CF30, CF50	100-240 Vac, 50/60 Hz - 600 W
Regulatory Approvals C200	FCC Class A, EN 55022 Class A, EN 55024, EN 61000-3-3:2013, 61000-3-2:2014 or equivalent Product Safety requirement

Applications

AI inference infrastructure and LLM application validation
AI-driven networking and cloud-native environments
SASE and ZTNA validation
Firewall and NGFW performance testing
IDS/IPS and malware defense testing
Proxy and content filtering testing
Load balancer and application delivery testing
SSL VPN/IPSec performance testing
High-performance HTTPS/TLS testing including PQC
Web application testing
Application identification testing
Advanced video application testing
Mobile network firewall testing
Replay of UDP/TCP traffic at scale

Options & Accessories

Option	Description
CF-KIT-001-C200	C200 with 4 x QSFP28 Interfaces CyberFlood Capacity License (add on unit) — QSFP28 transceivers are sold separately
CF-KIT-002-C200	C200 with 4 x QSFP28 Interfaces with CyberFlood Performance Licenses — QSFP28 transceivers are sold separately
CF-KIT-001-CF1000	CF1000 Base Appliance Kit 4 x OSFP and 8 x QSFP28 (add-on unit)
CF-KIT-002-CF1000	CF1000 Performance Kit 4 x OSFP and 8 x QSFP28 — Includes HTTP/HTTPS Throughput, HTTP/HTTPS CPS, HTTP/HTTPS Concurrent Connections, DNS, Throughput with Mixed Traffic (default protocols), Advanced Mixed Traffic, and Network Traffic Replay test methodologies
CF-KIT-001-CF30	CF30 Base Appliance Kit 10G/1G 8XSFP+ ADD-ON — 8 SFP+ 10G/1G MMF transceivers are included
CF-KIT-002-CF30	CF30 10G/1G Performance Kit 8XSFP+ — 8 SFP+ 10G/1G MMF transceivers are included
CF-KIT-001-CF400	CF400 Base Appliance Kit 8 x QSFP28 (add-on unit)
CF-KIT-002-CF400	CF400 Performance Kit 8 x QSFP28
CF-KIT-004-CF400Q	CF400 Multi-speed Base Appliance Kit 8 x QSFP28 (add-on unit)
CF-KIT-005-CF400Q	CF400 Multi-speed Performance Kit 8 x QSFP28
CF-KIT-001-CF50	CF50 Base Appliance Kit 8x10G/1G SFP+ and 2x100G QSFP28 add-on for existing CF Controllers — Includes 8 dual rate 10G/1G SFP+ MMF transceivers
CF-KIT-002-CF50	CF50 Performance Kit 8X10G/1G SFP+ and 2x100G QSFP28 — Includes 8 dual rate 10G/1G SFP+ MMF transceivers
CF-SW-ADV-C100-C200	Advanced Mixed Traffic for C100/C200 Appliance
CFV-SW-ADV	Advanced Mixed Traffic for CyberFlood Virtual