Unit Testing and Monitoring Your Network Flows with Fwunit

Configuration of network flows, particularly across multiple firewalls, cloud providers, and datacenters, is complex, prone to error, and difficult for people who are not network engineers to follow. In a DevOps environment, we want to enjoy the benefits of software development even for our infrastructure. SDN lets us *write* our network, but what about continuous integration testing? Viewing changes over time? Visibility and intelligibility to other team members? Fwunit is a tool to address those needs and more.

Dustin has been a system administrator and software developer at Mozilla for five years, working with the Release Engineering team. His responsibilities include configuration management, network access-control administration, web services development and deployment, and administration of the multi-layered continuous-integration build system. His spare-time activities include homebrewing and, of late, curling.

Michal has been with Mozilla Corporation for over three years. Building on his experience, which includes designing and deploying networks and managed security solutions on an ISP and data center scale, he now focuses on network security. Michal designed and implemented the Network Security Monitoring system that monitors Mozilla’s datacenter, AWS, and office environments. He works in finding new ways to detect threats, correlate events and measure compliance. Previously he worked on the RSBAC project—a mandatory access control system for a Linux kernel. He tries hard to spend his free time behind a wheel and the camera.