modsecurity 性能测试

前提

4 cpu 8 men
modsecurity v2.9.3 全部规则 Core Rule Set ver.3.3.0

开启规则

ab -c 100 -n 10000 http://10.211.55.8/?a=%22%3E%3Cscript
This is ApacheBench, Version 2.3 <$Revision: 1843412 $>
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking 10.211.55.8 (be patient)
Completed 1000 requests
Completed 2000 requests
Completed 3000 requests
Completed 4000 requests
Completed 5000 requests
Completed 6000 requests
Completed 7000 requests
Completed 8000 requests
Completed 9000 requests
Completed 10000 requests
Finished 10000 requests


Server Software:        ThunderEye/1.2.1
Server Hostname:        10.211.55.8
Server Port:            80

Document Path:          /?a=%22%3E%3Cscript
Document Length:        157 bytes

Concurrency Level:      100
Time taken for tests:   10.700 seconds
Complete requests:      10000
Failed requests:        0
Non-2xx responses:      10000
Total transferred:      3110000 bytes
HTML transferred:       1570000 bytes
Requests per second:    934.55 [#/sec] (mean)
Time per request:       107.004 [ms] (mean)
Time per request:       1.070 [ms] (mean, across all concurrent requests)
Transfer rate:          283.83 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:        0    0   0.3      0       5
Processing:     2  106   9.2    104     132
Waiting:        1  106   9.2    104     132
Total:          6  106   9.0    104     132

Percentage of the requests served within a certain time (ms)
  50%    104
  66%    107
  75%    108
  80%    111
  90%    121
  95%    123
  98%    124
  99%    126
 100%    132 (longest request)

关闭规则

master1@k8sMaster1:/opt/waf/conf$ ab -c 100 -n 10000 http://10.211.55.8/?a=%22%3E%3Cscript
This is ApacheBench, Version 2.3 <$Revision: 1843412 $>
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking 10.211.55.8 (be patient)
Completed 1000 requests
Completed 2000 requests
Completed 3000 requests
Completed 4000 requests
Completed 5000 requests
Completed 6000 requests
Completed 7000 requests
Completed 8000 requests
Completed 9000 requests
Completed 10000 requests
Finished 10000 requests


Server Software:        ThunderEye/1.2.1
Server Hostname:        10.211.55.8
Server Port:            80

Document Path:          /?a=%22%3E%3Cscript
Document Length:        612 bytes

Concurrency Level:      100
Time taken for tests:   0.405 seconds
Complete requests:      10000
Failed requests:        0
Total transferred:      8490000 bytes
HTML transferred:       6120000 bytes
Requests per second:    24712.17 [#/sec] (mean)
Time per request:       4.047 [ms] (mean)
Time per request:       0.040 [ms] (mean, across all concurrent requests)
Transfer rate:          20488.89 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:        0    1   0.5      1       5
Processing:     1    3   0.6      3       7
Waiting:        0    2   0.6      2       5
Total:          2    4   0.5      4       7

Percentage of the requests served within a certain time (ms)
  50%      4
  66%      4
  75%      4
  80%      4
  90%      5
  95%      5
  98%      6
  99%      6
 100%      7 (longest request)