To　date,　security　researchers　evaluate　their　solutions　of　mitigating　distributed　denial-of-service　(DDoS)　attacks　via　kernel-based　or　kernel-bypassing　testing　tools.　However,　kernel-based　tools　exhibit　poor　scalability　in　attack　traffic　generation　while　kernel-bypassing　tools　incur　unacceptable　monetary　cost.　We　propose　Excalibur,　a　scalable　and　low-cost　testing　framework　for　evaluating　DDoS　defense　solutions.　The　key　idea　is　to　leverage　the　emerging　programmable　switch　to　empower　testing　tasks　with　Tbps-level　scalability　and　low　cost.　Specifically,　Excalibur　offers　intent-based　primitives　to　enable　academic　researchers　to　customize　testing　tasks　on　demand.　Moreover,　in　view　of　switch　resource　limitations,　Excalibur　coordinates　both　a　server　and　a　programmable　switch　to　jointly　perform　testing　tasks.　It　realizes　flexible　attack　traffic　generation,　which　requires　a　large　number　of　resources,　in　the　server　while　using　the　switch　to　increase　the　sending　rate　of　attack　traffic　to　Tbps-level.　We　have　implemented　Excalibur　on　a　64×　100　Gbps　Tofino　switch.　Our　experiments　on　a　64×　100　Gbps　Tofino　switch　show　that　Excalibur　achieves　orders-of-magnitude　higher　scalability　and　lower　cost　than　existing　tools.　©　1993-2012　IEEE.