As part of my work at Tempesta Technologies, I built a testing framework and a comprehensive suite of functional tests for Tempesta xFW - an open-source volumetric DDoS protection system based on Linux XDP and eBPF. The framework enables isolated testing of the application across a wide range of network configurations by leveraging Linux network namespaces.
This made it possible to reliably validate host, gateway, and scrubbing modes, different traffic patterns, and policy enforcement under realistic multi-interface and multi-tenant topologies, significantly improving test coverage and confidence in the data plane.