Validate firewall policy enforcement and dataplane throughput with real traffic capture.
npx skills add https://github.com/psaab/xpf --skill security-matrix
Please help me install this Agent Skill. Skill: security-matrix Source: https://github.com/psaab/xpf/tree/main/.claude/skills/security-matrix Command: npx skills add https://github.com/psaab/xpf --skill security-matrix
This Skill addresses the critical need to verify that firewall policy changes and dataplane updates do not introduce regressions in traffic forwarding, security enforcement, or throughput performance.
Execute the security-matrix skill to run the full suite of directional policy tests and throughput benchmarks against the current environment.
High-intent search queries and answers about installing and using this skill.
Validate firewall policy enforcement by testing directional traffic flow across trust, untrust, and DMZ zones to ensure security rules are strictly enforced. This confirms that allow and block behaviors match the intended policy configuration.
Benchmark dataplane throughput by measuring line-rate performance in high-availability clusters to ensure no packet loss or retransmits occur under load. This verifies the high-performance dataplane can handle expected traffic volume.
Negative control testing confirms security policies are active by verifying that traffic is blocked immediately upon policy removal. This proves the firewall is actively enforcing rules rather than allowing traffic by default.
Yes, this supports network engineering workflows involving Junos-style stateful firewall configuration, policy compiler updates, and high-performance AF_XDP dataplane verification. It requires precise environment isolation and real traffic capture.
Firewall policy verification requires environment isolation and traffic analysis to accurately confirm policy-driven forwarding and blocking behaviors. Without isolation, external traffic or noise could mask regressions in security enforcement or throughput.
psaabAutomate deployment cycles and iperf3 throughput benchmarking for userspace HA firewall clusters.
josavicentevwAutomate security scanning and governance across CI/CD pipelines and compliance workflows.
vecearDesign and execute k6 load tests for web applications and APIs.
zzw4257Deploys and configures ModSecurity to inspect HTTP traffic and block malicious requests.
