Using P4 to build a DDoS stresser platform

This paper presents a high-performance framework for flexible network load and DDoS attack pattern generation utilizing a P4-programmable Intel Tofino switch. Central to the concept of Sovereign IT, this approach grants operators complete control over both hardware and code. By providing a system open for inspection and adaptation, it offers a transparent and verifiable alternative to proprietary “black-box” solutions. We demonstrate the ability to generate line-rate traffic at 100 Gbit/s to evaluate network and end-system resilience against volumetric ICMP, UDP, and TCP SYN floods. Building upon existing research, this work provides a scalable methodology for identifying performance bottlenecks and hardening infrastructure against evolving threats. By offering a re-programmable platform for autonomous stress-testing, this framework enables operators of critical infrastructure to assess network robustness in high-bandwidth environments without vendor dependency. The complete implementation is provided as open-source to support reproducible advances in network security.