userspace-native-gre-iperf

Validate GRE userspace dataplane stability and redundancy-group failover with iperf3.

8|2|Updated Feb 8, 2026
One-click install
npx skills add https://github.com/psaab/xpf --skill userspace-native-gre-iperf
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: userspace-native-gre-iperf
Source: https://github.com/psaab/xpf/tree/main/.codex/skills/userspace-native-gre-iperf
Command: npx skills add https://github.com/psaab/xpf --skill userspace-native-gre-iperf

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires iperf3, python3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill addresses the complexity of verifying high-performance GRE tunnel stability and redundancy-group failover behavior within a userspace-driven firewall architecture.

Core Features & Use Cases

  • Dataplane Validation: Confirms that GRE transit traffic remains on the physical WAN path rather than leaking onto the persistent TUN anchor.
  • Failover Testing: Monitors long-lived TCP and UDP flows during redundancy-group transitions to ensure zero-throughput intervals are avoided.
  • Use Case: Use this when deploying or updating the xpf firewall to ensure that GRE traffic remains performant and isolated during critical HA failover events.

Quick Start

Execute the validation script with the iperf flag to test GRE transit stability and failover performance on the current cluster configuration.

Frequently Asked Questions about userspace-native-gre-iperf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test GRE tunnel failover stability with iperf3?

To test GRE tunnel failover stability with iperf3, execute integrated shell scripts that generate traffic bursts and trigger automated redundancy-group failovers. This monitors long-lived TCP and UDP flows to ensure zero-throughput intervals are avoided during HA transitions.

How does GRE transit traffic verification prevent leaking onto a TUN anchor?

GRE transit traffic verification confirms packets remain on the physical WAN path rather than leaking onto a persistent TUN anchor. It uses traceroute path checks alongside iperf3 bursts to validate dataplane isolation within xpf firewall deployments.

Do I need python3 and iperf3 installed to validate xpf firewall dataplane stability?

Yes, you need python3 and iperf3 installed to validate xpf firewall dataplane stability. These dependencies are required to execute the integrated shell scripts that perform traffic generation, path checks, and automated failover triggers.

Can I monitor long-lived flows during redundancy-group transitions in an HA event?

You can monitor long-lived flows during redundancy-group transitions in an HA event by running the validation scripts. These scripts track TCP and UDP persistence to verify that failover behavior maintains throughput without interruption.

What is the best way to verify native GRE userspace dataplane performance?

The best way to verify native GRE userspace dataplane performance is by executing integrated shell scripts that combine iperf3 traffic bursts with traceroute path checks. This validates that GRE transit remains performant and isolated during critical failover events.

Why does GRE traffic drop during firewall failover testing?

GRE traffic drops during firewall failover testing when redundancy-group transitions cause zero-throughput intervals. The validation scripts detect this by monitoring long-lived flows and verifying host-originated traffic handoff maintains persistence across HA events.