It is often very difficult to test networking changes in production. For example, firewall rules. What sort of tools do people use for this?