Skip to main content

Data Plane Client Plugins

Before configuring a specific plugin, review the setting groups displayed in the constructor.

Table 11 — Common plugin setting groups in version 2.1

GroupUsed byPurpose
SourcesAll client plugins and some server pluginsAgent, interface, and network from which traffic is sent or received. When multiple networks are selected, a distribution weight is assigned to each.
TargetsClient pluginsDestination network or external address. For tasks that use access groups, the target may come from the access configuration.
IP header (L3)Most pluginsTTL, DSCP/ToS, ECN, and other IP-layer settings.
TCP header (L4)TCP and stateful pluginsMSS, Window Scale, window size, initial sequence number, and TCP session settings.
HTTP settingsHTTP, WAF, File Transfer, Malware File Transfer, DNS over HTTPHTTP version, HTTPS/TLS, method, path, headers, query parameters, request body, redirects, and cookies.
TLS settingsHTTPS, DNS over TLS, CVE Replay, File TransferTLS version, certificate, cipher suites, and secure connection settings.
Session settingsStateful pluginsTotal sessions, connection opening rate, reconnect behavior, RPS/CPS limits, and intervals.
PPS/QPSStateless plugins, DNS, UDP/TCP flood, RoCEv2Packet or query generation rate.
PayloadUDP/TCP flood, RoCEv2, L2 convergencePacket payload size, pattern, or user-defined data.
DurationAll pluginsPlugin runtime or operation until the task is stopped manually.
Network tunnelsPlugins with tunneling supportObjects from the Network Tunnels library: VLAN, VXLAN, GRE, MPLS, IP-in-IP, and IPsec.
Advanced settingsAll pluginsLimits the number of CPU cores used by a scenario. A value of 0 uses the agent's available resources.

Table 12 — Data Plane plugin catalog in version 2.1

PluginIDTypeSidesMain setting groups
HTTP1Stateful L7Client, serverSources, targets, HTTP, TLS, sessions, CPS/RPS, duration, L3/L4, tunnels
WAF2Stateful L7ClientSources, targets, HTTP, WAF modules, TLS, sessions, CPS/RPS, duration, L3/L4, tunnels
SYN Flood3Stateless L4ClientSources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels
SYN/ACK Flood4Stateless L4ClientSources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels
ACK Flood5Stateless L4ClientSources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels
RST Flood6Stateless L4ClientSources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels
FIN Flood7Stateless L4ClientSources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels
PSH/ACK Flood8Stateless L4ClientSources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels
Xmas Flood9Stateless L4ClientSources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels
UDP Flood11Stateless L4ClientSources, targets, L3, payload, checksum, random IP ID, PPS, duration, tunnels
MHDDoS Emulation23Stateful/MultiClientDuration, subplugin set, selected vector settings, tunnels
RST/ACK Flood24Stateless L4ClientSources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels
FIN/ACK Flood25Stateless L4ClientSources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels
PSH Flood26Stateless L4ClientSources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels
HTTP/2 Rapid Reset27Stateful L7ClientSources, targets, HTTP/2, TLS, sessions, CPS/RPS, duration
GRE Flood28Stateless L3/L4ClientSources, targets, L3, GRE, payload, PPS, duration, tunnels
File Transfer (HTTP)37Stateful L7Client, serverSources, targets, HTTP, TLS, file selection, sessions, CPS/RPS, duration, L3/L4, tunnels
RoCEv2 (beta)38Stateless L4Client, serverSources, targets, L3, RoCEv2, payload, PPS, duration, tunnels
Elephant Flow TCP39Stateful L4Client, serverSources, targets, L3/L4, sessions, CPS, frame size, duration, tunnels
Elephant Flow UDP40Stateless L4Client, serverSources, targets, L3, PPS, frame size, checksum, duration, tunnels
Malware File Transfer (HTTP)41Stateful L7Client, serverSources, targets, HTTP, TLS, PTI file selection, sessions, CPS/RPS, duration, L3/L4, tunnels
L2 Convergence Measurement (UDP)45Stateful L4Client, serverSources, targets, L3, payload, PPS, flows, duration
Dynamic Applications77Stateful L7Client, serverSources, targets, applications, users, CPS, rate, parameters, L3, duration, tunnels
PCAP Replay99Stateful/Stateless L3–L7Client, serverSources, targets, PCAP, mode, sessions, replacements, L3/L4/TLS, CPS/PPS, duration, tunnels
Network Vulnerabilities (CVE)100Stateful L3–L7Client, serverSources, targets, CVE, variant/quick test, step timeout, sessions, TLS, duration, tunnels
Fuzzing (L3–L7)102Stateless/Stateful L3–L4Client, serverSources, targets, malformed UDP/TCP packet modules, flow, field ranges, sessions, CPS/PPS, duration
ICMP Flood103Stateless L3ClientSources, targets, L3, ICMP type/code, payload, checksum, PPS, duration, tunnels
ICMP Fragmentation Flood104Stateless L3ClientSources, targets, L3, payload, ICMP Echo fragments, checksum, PPS, duration, tunnels
Ping Flood105Stateless L3ClientSources, targets, L3, Echo Request (type=8/code=0), payload, PPS, duration, tunnels
Ping of Death Flood106Stateless L3ClientSources, targets, L3, oversized ICMP Echo via fragments, payload, PPS, duration, tunnels
DNS Amplification (UDP)107Stateless L7ClientSources, targets, L3, DNS ANY+EDNS0, domains, QPS, duration, tunnels
UDP Fragmentation Flood108Stateless L4ClientSources, targets, L3, UDP as IPv4 fragments, payload, checksum, PPS, duration, tunnels
DNS Flood109Stateless L7ClientSources, targets, L3, DNS query, domains/RD, QPS, duration, tunnels
NTP Amplification (UDP)110Stateless L4ClientSources, targets, L3, NTP monlist-like UDP/123, PPS, duration, tunnels
Compromised Host111Stateful L7Client, serverSources, targets, PTI C2 campaigns, bot ID, beacon, artifacts, sessions, TLS, duration, tunnels
Latency Measurement (IP/UDP)113Stateless L4Client, serverSources, targets, L3, payload, flows, PPS per flow, duration

For flood and DDoS plugins, including TCP/UDP/GRE/DNS/ICMP/MHDDoS and amplification/fragmentation scenarios, see DoS and DDoS Attacks. HTTP/2 Rapid Reset is described under WAF.

Plugins marked disabled in the product dictionary are not shown in the current catalog: IP Fragmentation Flood (10), DNS over UDP (12), the Reflection Emulation family (13–22), and DNS over TCP/TLS/HTTP (34–36). Any retained documentation sections for these plugins are marked as unavailable in the current version.