userspace-ha-validation

Automate deployment cycles and iperf3 throughput benchmarking for userspace HA firewall clusters.

8|2|Updated Feb 8, 2026
One-click install
npx skills add https://github.com/psaab/xpf --skill userspace-ha-validation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: userspace-ha-validation
Source: https://github.com/psaab/xpf/tree/main/.codex/skills/userspace-ha-validation
Command: npx skills add https://github.com/psaab/xpf --skill userspace-ha-validation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ping, mtr, iperf3, rdisc6, and includes scripts (resource) components.

What problem does it solve?

This skill automates the complex validation of isolated userspace high-availability firewall clusters, ensuring that dataplane transitions and HA failover mechanisms function correctly under load.

Core Features & Use Cases

  • Automated Phase Cycling: Orchestrates deployment and validation cycles across multiple firewall nodes.
  • Performance Benchmarking: Executes repeated iperf3 throughput tests and compares results against defined performance thresholds.
  • Network Integrity Checks: Verifies IPv6 router advertisements, routing table consistency, and deterministic TTL-expired probe responses.

Quick Start

Execute the userspace phase cycle script from the repository root to deploy the cluster and initiate the full validation suite.

Frequently Asked Questions about userspace-ha-validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate HA failover and network throughput in a userspace firewall cluster?

You can validate userspace HA firewall failover by automating deployment cycles and running multi-node iperf3 throughput tests against defined performance thresholds. This orchestrates dataplane transitions and verifies network integrity automatically.

What is the best way to verify AF_XDP dataplane changes under failover load?

The best way to verify AF_XDP dataplane changes is to execute an automated phase cycle script that orchestrates deployment across multiple firewall nodes while running performance benchmarking and network integrity checks under load.

Do I need iperf3 and rdisc6 to test IPv6 router advertisements and TTL-expired probes?

Yes, you need rdisc6 to check IPv6 route advertisements and iperf3 for multi-node throughput analysis. The validation suite also uses ping and mtr to verify deterministic TTL-expired probe responses and routing table consistency.

How does automated phase cycling work for isolated high-availability firewalls?

Automated phase cycling works by orchestrating deployment and validation cycles across multiple isolated firewall nodes. It ensures that HA failover mechanisms and dataplane transitions function correctly under active network load.

Can I use this to benchmark network throughput across multiple firewall nodes?

Yes, you can benchmark network throughput across multiple firewall nodes by executing repeated iperf3 tests. The validation suite compares these throughput results against defined performance thresholds to verify cluster integrity.

Why are my TTL-expired probes failing during userspace HA firewall testing?

TTL-expired probes may fail if deterministic probe responses are not properly configured or if routing table consistency is broken. The validation suite automates these checks using ping and mtr to isolate the failure point.