Microsoft Web application stress tool: Web for stress testing

Web stress testing is currently a popular topic. Using web stress testing can effectively test some WebServerThe running status and response time of the Web server are very good methods for the web server's endurance test. Web stress testing usually uses some tools, such as Microsoft's web application stress,LinuxSiege, comprehensive web-CT, and so on, all of which are excellent web pressure.Test Tool.

Although these tools give usTest ServiceDevices are easy to bear, but their harm is even more astonishing. Even a more comprehensive test tool can be used to launch catastrophic Denial-of-attack attacks on a small Web server. Next, I will show you how to use Microsoft's web application stress for a web stress test. The purpose of this test is to let everyone see its great harm.

I. Brief Introduction to tools

Microsoft Web application stress tool is a website developed by MicrosoftTesterInstituteDevelopment, Specifically for actual useWebsite stress testingA set of tools. This set of powerful functionsStress testing toolsYou can use a small number of client computers to simulate the potential impact of a large number of users going online on the website service. Before the website actually goes online, perform a test on the website you designed as in the real environment, to identify potential system problems and further adjust and set up the system. It is because of these features that it has the d. o.s bombing function.

Tip: D. o.s blocks your service by crashing your service computer or pressing it across. To put it simply, it is to make your computer provide more services, so that your computer can be stuck on the verge of crash or crash.

Ii. Simple tool settings

Open the web application stress tool, a simple page (1). the top is the toolbar, the lower left is the function option, and the lower right is the detailed setting option. Before stress testing the target Web server, make necessary settings.

Figure 1

1. In the "Settings" function settings (2), one is the stress level (threads), which is specified hereProgramThe number of threads used in the background for requests is equivalent to simulating the number of client connections. A more vivid way is to set the number of bombing threads. Generally, enter 500 ~ 1000, because the number of threads is set based on the local capacity. If you have sufficient confidence in your machine configuration, the higher the setting, the better the bombing effect.

Figure 2

2. In "test run time", specify the duration of a stress test, which can be divided into days, hours, minutes, And seconds. Set the duration based on the actual situation!

3. The rest of the options are not very important. Here we will not waste any effort. You can try setting them yourself.

Iii. Stress Testing

After the introduction of the tool, we will prepare the following conditions: here we will discuss with a friend about the test, he is a single machine, and the machine configuration is CPU: athlonXP2500 +, 512 MB memory, 80 GB hard disk, etc. The machine configuration is not bad. He installed IIS on the machine and set up an external web server. The program in the Web Service is the Mobile Network 7.0. I used the stress testing tool to test this server.

Step 1: Right-click the tool and select Add to add a new test project: new script, in the master option, enter the IP address of the server to be tested. Select the Web connection method to be tested at the bottom. Select "get" as the mode verb and "path" as the path of the web page to be tested. Enter "/index. asp" as the homepage file (3) of the dynamic network ).

Figure 3

Step 2: set the number of stress level (threads) threads to 1000 in the "Settings" function settings. After that, click the gray triangle button in the tool to perform the test (4 ). After the test is completed, wait for a friend to send the task manager and connection view!

Figure 4

After the attack starts, you can see from the task manager that the CPU usage has reached 100%, and the loss rate has reached the maximum (5 ). Use the command in the CMD window. NetStat-An, you can see that my IP address is connected to port 80 on a friend's server (6 ). In addition, its web site cannot be opened, prompting too many users to connect, achieving the same purpose as the D. o.s attack.

Figure 5

Figure 6

Imagine that if multiple bots are used to perform a web stress test on a server, it would be a disaster tolerance for this server. Therefore, friends must consider it carefully before using it.