Who rated this post

So interestingly there appears to be some extra not-yet-published leading edge tests that can be added on to the standard hcp command with the --tac option once hcp has been updated to the latest version:

sk183223: HealthCheck Point Addon

I always found it interesting to informally track what new tests are added to hcp with each new update as these tend to be driven by what current cases TAC is seeing, and in some cases has tipped me off to an issue even before an SK article was created or a Checkmates post appeared.  So let's take a look at these leading-edge TAC tests that aren't run by default!

EDIT: There is no need to download a new copy of hcp with curl_cli as shown in this screenshot, please see my follow-up post below.

EDIT: There is no need to download a new copy of hcp with curl_cli as shown in this screenshot, please see my follow-up post below.

Some definitely juicy ones here:

• Missing routes from kernel which I actually mentioned in my Be Your Own TAC Part Deux presentation due to an unreachable next-hop address
• IKEv2 Narrowing Issue Detection which was a major VPN interoperability issue at one point
• Dynamic Balancing and GNAT Validation which I assume is checking for a situation where Dynamic Balancing/Split is disabled to to GNAT being off (which happens on gateways with less than 8 cores even if they support Dynamic Split)
• dynamic_split --z occurrences not completely sure here, perhaps if split flapping was detected and an anti-flap penalty was enforced?
• ARP Drops assume this is due to invalid next hops (sk182582)
• RAD Tests Oh yes definitely...

The cool part is if you aren't sure exactly what a certain hcp test means (even if it is a TAC test), you can always go look at the python source code for the test itself and see precisely what it is looking for here: /etc/hcp/tests/*/*.py