Data Plane Client Plugins
Before configuring a specific plugin, review the setting groups displayed in the constructor.
Table 11 — Common plugin setting groups in version 2.1
| Group | Used by | Purpose |
|---|---|---|
| Sources | All client plugins and some server plugins | Agent, interface, and network from which traffic is sent or received. When multiple networks are selected, a distribution weight is assigned to each. |
| Targets | Client plugins | Destination network or external address. For tasks that use access groups, the target may come from the access configuration. |
| IP header (L3) | Most plugins | TTL, DSCP/ToS, ECN, and other IP-layer settings. |
| TCP header (L4) | TCP and stateful plugins | MSS, Window Scale, window size, initial sequence number, and TCP session settings. |
| HTTP settings | HTTP, WAF, File Transfer, Malware File Transfer, DNS over HTTP | HTTP version, HTTPS/TLS, method, path, headers, query parameters, request body, redirects, and cookies. |
| TLS settings | HTTPS, DNS over TLS, CVE Replay, File Transfer | TLS version, certificate, cipher suites, and secure connection settings. |
| Session settings | Stateful plugins | Total sessions, connection opening rate, reconnect behavior, RPS/CPS limits, and intervals. |
| PPS/QPS | Stateless plugins, DNS, UDP/TCP flood, RoCEv2 | Packet or query generation rate. |
| Payload | UDP/TCP flood, RoCEv2, L2 convergence | Packet payload size, pattern, or user-defined data. |
| Duration | All plugins | Plugin runtime or operation until the task is stopped manually. |
| Network tunnels | Plugins with tunneling support | Objects from the Network Tunnels library: VLAN, VXLAN, GRE, MPLS, IP-in-IP, and IPsec. |
| Advanced settings | All plugins | Limits the number of CPU cores used by a scenario. A value of 0 uses the agent's available resources. |
Table 12 — Data Plane plugin catalog in version 2.1
| Plugin | ID | Type | Sides | Main setting groups |
|---|---|---|---|---|
| HTTP | 1 | Stateful L7 | Client, server | Sources, targets, HTTP, TLS, sessions, CPS/RPS, duration, L3/L4, tunnels |
| WAF | 2 | Stateful L7 | Client | Sources, targets, HTTP, WAF modules, TLS, sessions, CPS/RPS, duration, L3/L4, tunnels |
| SYN Flood | 3 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| SYN/ACK Flood | 4 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| ACK Flood | 5 | Stateless L4 | Client | Sources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels |
| RST Flood | 6 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| FIN Flood | 7 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| PSH/ACK Flood | 8 | Stateless L4 | Client | Sources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels |
| Xmas Flood | 9 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| UDP Flood | 11 | Stateless L4 | Client | Sources, targets, L3, payload, checksum, random IP ID, PPS, duration, tunnels |
| MHDDoS Emulation | 23 | Stateful/Multi | Client | Duration, subplugin set, selected vector settings, tunnels |
| RST/ACK Flood | 24 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| FIN/ACK Flood | 25 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| PSH Flood | 26 | Stateless L4 | Client | Sources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels |
| HTTP/2 Rapid Reset | 27 | Stateful L7 | Client | Sources, targets, HTTP/2, TLS, sessions, CPS/RPS, duration |
| GRE Flood | 28 | Stateless L3/L4 | Client | Sources, targets, L3, GRE, payload, PPS, duration, tunnels |
| File Transfer (HTTP) | 37 | Stateful L7 | Client, server | Sources, targets, HTTP, TLS, file selection, sessions, CPS/RPS, duration, L3/L4, tunnels |
| RoCEv2 (beta) | 38 | Stateless L4 | Client, server | Sources, targets, L3, RoCEv2, payload, PPS, duration, tunnels |
| Elephant Flow TCP | 39 | Stateful L4 | Client, server | Sources, targets, L3/L4, sessions, CPS, frame size, duration, tunnels |
| Elephant Flow UDP | 40 | Stateless L4 | Client, server | Sources, targets, L3, PPS, frame size, checksum, duration, tunnels |
| Malware File Transfer (HTTP) | 41 | Stateful L7 | Client, server | Sources, targets, HTTP, TLS, PTI file selection, sessions, CPS/RPS, duration, L3/L4, tunnels |
| L2 Convergence Measurement (UDP) | 45 | Stateful L4 | Client, server | Sources, targets, L3, payload, PPS, flows, duration |
| Dynamic Applications | 77 | Stateful L7 | Client, server | Sources, targets, applications, users, CPS, rate, parameters, L3, duration, tunnels |
| PCAP Replay | 99 | Stateful/Stateless L3–L7 | Client, server | Sources, targets, PCAP, mode, sessions, replacements, L3/L4/TLS, CPS/PPS, duration, tunnels |
| Network Vulnerabilities (CVE) | 100 | Stateful L3–L7 | Client, server | Sources, targets, CVE, variant/quick test, step timeout, sessions, TLS, duration, tunnels |
| Fuzzing (L3–L7) | 102 | Stateless/Stateful L3–L4 | Client, server | Sources, targets, malformed UDP/TCP packet modules, flow, field ranges, sessions, CPS/PPS, duration |
| ICMP Flood | 103 | Stateless L3 | Client | Sources, targets, L3, ICMP type/code, payload, checksum, PPS, duration, tunnels |
| ICMP Fragmentation Flood | 104 | Stateless L3 | Client | Sources, targets, L3, payload, ICMP Echo fragments, checksum, PPS, duration, tunnels |
| Ping Flood | 105 | Stateless L3 | Client | Sources, targets, L3, Echo Request (type=8/code=0), payload, PPS, duration, tunnels |
| Ping of Death Flood | 106 | Stateless L3 | Client | Sources, targets, L3, oversized ICMP Echo via fragments, payload, PPS, duration, tunnels |
| DNS Amplification (UDP) | 107 | Stateless L7 | Client | Sources, targets, L3, DNS ANY+EDNS0, domains, QPS, duration, tunnels |
| UDP Fragmentation Flood | 108 | Stateless L4 | Client | Sources, targets, L3, UDP as IPv4 fragments, payload, checksum, PPS, duration, tunnels |
| DNS Flood | 109 | Stateless L7 | Client | Sources, targets, L3, DNS query, domains/RD, QPS, duration, tunnels |
| NTP Amplification (UDP) | 110 | Stateless L4 | Client | Sources, targets, L3, NTP monlist-like UDP/123, PPS, duration, tunnels |
| Compromised Host | 111 | Stateful L7 | Client, server | Sources, targets, PTI C2 campaigns, bot ID, beacon, artifacts, sessions, TLS, duration, tunnels |
| Latency Measurement (IP/UDP) | 113 | Stateless L4 | Client, server | Sources, targets, L3, payload, flows, PPS per flow, duration |
For flood and DDoS plugins, including TCP/UDP/GRE/DNS/ICMP/MHDDoS and amplification/fragmentation scenarios, see DoS and DDoS Attacks. HTTP/2 Rapid Reset is described under WAF.
Plugins marked disabled in the product dictionary are not shown in the current catalog: IP Fragmentation Flood (10), DNS over UDP (12), the Reflection Emulation family (13–22), and DNS over TCP/TLS/HTTP (34–36). Any retained documentation sections for these plugins are marked as unavailable in the current version.