How it works

Technical Specifications

Configurable firewall behavior:
  • Direct
  • NAT only
  • Port restricted NAT
  • Symmetric NAT
  • UDP blocked NAT
  • HTTP proxy enforcing scenarios
  • Connectivity error scenarios
  • Physical firewall from any vendor
  • Physical NAT from any vendor
Configurable network behavior:
  • Delay
  • Jitter
  • Packet loss
  • Duplicate packets
  • Packet reordering
System Components
  • PANE Server software
PANE is installed on a server with multiple physical or virtual network interfaces. The server acts as a network gateway providing access to network resources, irrespective of the protocols or operating systems the user use.

PANE provides a per-client configurable network emulation and firewall selection mechanism and is controlled by a command line tool. The tool is used to independently configure:
1. Firewall/NAT type, and
2. Network behavior, such as delay, jitter, packet loss, etc.

Each client can instantly change path and thereby send traffic across different firewall and NAT types. Each PANE client can use its own configuration which is independent of other clients in a system. Client nodes use the IP address of the PANE gateway as its default route. PANE directs and controls the flow of data through the network in order to determine the appropriate path and destination for packets.

PANE supports Exception Rules allowing certain administrative traffic, such as remote desktop connections, NFS/Samba traffic, or ssh login, to pass through without interpretation or interruption.

Use Cases

Typical use cases include:
  • Validation of a product’s operation when placed behind different firewall types.
  • Test different firewall types, or combinations of such, in order to validate client behavior
  • Test of a product’s capabilities to adapt to sudden or unexpected network changes
  • Functional and (media) quality testing when subject to network issues, such as packet loss, delay, or reordering
  • Reproduction of error scenarios in a controlled environment
  • Automated regression testing across all known relevant network topologies