Data Plane Client Plugins
Before configuring a specific plugin, review the setting groups displayed in the constructor.
Table 11 — Common plugin setting groups in version 2.1
| Group | Used by | Purpose |
|---|---|---|
| Sources | All client plugins and some server plugins | Agent, interface, and network from which traffic is sent or received. When multiple networks are selected, a distribution weight is assigned to each. The interface can be an aggregate of several agent ports (see Port aggregation (LAG)). |
| Targets | Client plugins | Destination network or external address. For tasks that use access groups, the target may come from the access configuration. |
| IP header (L3) | Most plugins | TTL, DSCP/ToS, ECN, and other IP-layer settings. |
| TCP header (L4) | TCP and stateful plugins | MSS, Window Scale, window size, initial sequence number, and TCP session settings. |
| HTTP settings | HTTP, WAF, File Transfer, Malware File Transfer, DNS over HTTP | HTTP version, HTTPS/TLS, method, path, headers, query parameters, request body, redirects, and cookies. |
| TLS settings | HTTPS, DNS over TLS, CVE Replay, File Transfer | TLS version, certificate, cipher suites, and secure connection settings. |
| Session settings | Stateful plugins | Total sessions, connection opening rate, reconnect behavior, RPS/CPS limits, and intervals. |
| PPS/QPS | Stateless plugins, DNS, UDP/TCP flood, RoCEv2 | Packet or query generation rate. |
| Payload | UDP/TCP flood, RoCEv2, L2 convergence | Packet payload size, pattern, or user-defined data. |
| Duration | All plugins | Plugin runtime or operation until the task is stopped manually. |
| Network tunnels | Plugins with tunneling support | Objects from the Network Tunnels library: VLAN, VXLAN, GRE, MPLS, IP-in-IP, and IPsec. |
| Advanced settings | All plugins | Limits the number of CPU cores used by a scenario. A value of 0 uses the agent's available resources. |
Table 12 — Data Plane plugin catalog in version 2.1
| Plugin | ID | Type | Sides | Main setting groups |
|---|---|---|---|---|
| HTTP | 1 | Stateful L7 | Client, server | Sources, targets, HTTP, TLS, sessions, CPS/RPS, duration, L3/L4, tunnels |
| WAF | 2 | Stateful L7 | Client | Sources, targets, HTTP, WAF modules, TLS, sessions, CPS/RPS, duration, L3/L4, tunnels |
| SYN Flood | 3 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| SYN/ACK Flood | 4 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| ACK Flood | 5 | Stateless L4 | Client | Sources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels |
| RST Flood | 6 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| FIN Flood | 7 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| PSH/ACK Flood | 8 | Stateless L4 | Client | Sources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels |
| Xmas Flood | 9 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| UDP Flood | 11 | Stateless L4 | Client | Sources, targets, L3, payload, checksum, random IP ID, PPS, duration, tunnels |
| MHDDoS Emulation | 23 | Stateful/Multi | Client | Duration, subplugin set, selected vector settings, tunnels |
| RST/ACK Flood | 24 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| FIN/ACK Flood | 25 | Stateless L4 | Client | Sources, targets, L3/L4, checksum, random IP ID/sequence, PPS, duration, tunnels |
| PSH Flood | 26 | Stateless L4 | Client | Sources, targets, L3/L4, payload, checksum, random IP ID/sequence, PPS, duration, tunnels |
| HTTP/2 Rapid Reset | 27 | Stateful L7 | Client | Sources, targets, HTTP/2, TLS, sessions, CPS/RPS, duration |
| GRE Flood | 28 | Stateless L3/L4 | Client | Sources, targets, L3, GRE, payload, PPS, duration, tunnels |
| File Transfer (HTTP) | 37 | Stateful L7 | Client, server | Sources, targets, HTTP, TLS, file selection, sessions, CPS/RPS, duration, L3/L4, tunnels |
| RoCEv2 (beta) | 38 | Stateless L4 | Client, server | Sources, targets, L3, RoCEv2, payload, PPS, duration, tunnels |
| Elephant Flow TCP | 39 | Stateful L4 | Client, server | Sources, targets, L3/L4, sessions, CPS, frame size, duration, tunnels |
| Elephant Flow UDP | 40 | Stateless L4 | Client, server | Sources, targets, L3, PPS, frame size, checksum, duration, tunnels |
| Malware File Transfer (HTTP) | 41 | Stateful L7 | Client, server | Sources, targets, HTTP, TLS, PTI file selection, sessions, CPS/RPS, duration, L3/L4, tunnels |
| L2 Convergence Measurement (UDP) | 45 | Stateful L4 | Client, server | Sources, targets, L3, payload, PPS, flows, IP fragmentation, QoS-DUT, duration |
| Dynamic Applications | 77 | Stateful L7 | Client, server | Sources, targets, applications, users, CPS, rate, parameters, L3, duration, tunnels |
| PCAP Replay | 99 | Stateful/Stateless L3–L7 | Client, server | Sources, targets, PCAP, mode, sessions, replacements, L3/L4/TLS, CPS/PPS, duration, tunnels |
| Network Vulnerabilities (CVE) | 100 | Stateful L3–L7 | Client, server | Sources, targets, CVE, variant/quick test, step timeout, sessions, TLS, duration, tunnels |
| Fuzzing (L3–L7) | 102 | Stateless/Stateful L3–L4 | Client, server | Sources, targets, malformed UDP/TCP packet modules, flow, field ranges, sessions, CPS/PPS, duration |
| ICMP Flood | 103 | Stateless L3 | Client | Sources, targets, L3, ICMP type/code, payload, checksum, PPS, duration, tunnels |
| ICMP Fragmentation Flood | 104 | Stateless L3 | Client | Sources, targets, L3, payload, ICMP Echo fragments, checksum, PPS, duration, tunnels |
| Ping Flood | 105 | Stateless L3 | Client | Sources, targets, L3, Echo Request (type=8/code=0), payload, PPS, duration, tunnels |
| Ping of Death Flood | 106 | Stateless L3 | Client | Sources, targets, L3, oversized ICMP Echo via fragments, payload, PPS, duration, tunnels |
| DNS Amplification (UDP) | 107 | Stateless L7 | Client | Sources, targets, L3, DNS ANY+EDNS0, domains, QPS, duration, tunnels |
| UDP Fragmentation Flood | 108 | Stateless L4 | Client | Sources, targets, L3, UDP as IPv4 fragments, payload, checksum, PPS, duration, tunnels |
| DNS Flood | 109 | Stateless L7 | Client | Sources, targets, L3, DNS query, domains/RD, QPS, duration, tunnels |
| NTP Amplification (UDP) | 110 | Stateless L4 | Client | Sources, targets, L3, NTP monlist-like UDP/123, PPS, duration, tunnels |
| Compromised Host | 111 | Stateful L7 | Client, server | Sources, targets, PTI C2 campaigns, bot ID, beacon, artifacts, sessions, TLS, duration, tunnels |
| Latency Measurement (IP/UDP) | 113 | Stateless L4 | Client, server | Sources, targets, L3, payload, flows, PPS per flow, duration |
| RFC 2544 | 114 | Stateless L2-L3 | Client, server | Sources, targets, frame check mode, RFC 2544 methodologies, frame sizes, trial settings, ports |
| RFC 2889 | 115 | Stateless L2 | Client, server | Sources, targets, frame check mode, RFC 2889 methodologies, frame sizes, trial settings, MAC addresses, ports |
| ITU-T Y.1564 | 117 | Stateless L2-L3 | Client, server | Sources, targets, tests, CIR steps, services (frame, CIR/EIR, VLAN, DSCP, color mode, SAC), trial settings, ports |
| Packet Constructor | 118 | Stateless L2-L4 | Client, server | Sources, targets, streams, header stack, field modes, groups, frame size, payload, rate, frame count, tracking, duration |
For flood and DDoS plugins, including TCP/UDP/GRE/DNS/ICMP/MHDDoS and amplification/fragmentation scenarios, see DoS and DDoS Attacks. HTTP/2 Rapid Reset is described under WAF. Performance benchmarking methodologies are described in RFC 2544 and RFC 2889, Ethernet service activation testing in ITU-T Y.1564, and frame generation from a header template in Packet Constructor.
Plugins marked disabled in the product dictionary are not shown in the current catalog: IP Fragmentation Flood (10), DNS over UDP (12), the Reflection Emulation family (13–22), and DNS over TCP/TLS/HTTP (34–36). Any retained documentation sections for these plugins are marked as unavailable in the current version.
Port aggregation (LAG)
The tester can connect to the DUT with several agent ports as one aggregated link, for example as a host attached to a Leaf pair in MC-LAG or ESI-LAG. To do this, enable the Aggregate ports (LAG) checkbox in the Sources of a client entry or in the Receiver of a server entry. The checkbox is available for agents with two or more ports.
| Setting | Description |
|---|---|
| LAG ports | 2 to 4 agent ports with one driver on one NUMA node. The aggregate takes the MAC address of the first port |
| Mode | LACP (802.3ad) or Static, no LACP. The mode must match the port-channel configuration on the switch |
| Flow hashing | How transmitted flows are spread over the aggregate ports: L3+L4: IP addresses and ports (default), L2+L3: MAC and IP addresses, or L2: MAC addresses |
- In LACP mode, the task starts when all aggregate ports have been negotiated with the switch and carry traffic. If some ports are not negotiated 3 s after the first one, the task starts with a warning that lists these ports. If no port is negotiated, the task fails with a hint to check the port-channel on the switch.
- The LACP rate (fast or slow) cannot be selected on the tester side: the tester answers in fast mode when the switch requests it.
- In one task, an agent port can belong to only one LAG and cannot be used on its own at the same time.
- For RFC 2544, RFC 2889, and ITU-T Y.1564, the LAG speed is the sum of its port speeds. All aggregate ports must be up in full duplex, and the total speed must not exceed 800 Gbit/s.
- Port state and LACP state changes are written to the task log with timestamps. This helps you tell the tester reaction from the DUT reaction when you measure convergence.