Joseph Doherty
9cad9ed0fc
v2-ci / build (push) Failing after 41s
v2-ci / unit-tests (tests/Core/ZB.MOM.WW.OtOpcUa.Cluster.Tests) (push) Has been skipped
v2-ci / unit-tests (tests/Server/ZB.MOM.WW.OtOpcUa.ControlPlane.Tests) (push) Has been skipped
v2-ci / unit-tests (tests/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer.Tests) (push) Has been skipped
v2-ci / unit-tests (tests/Server/ZB.MOM.WW.OtOpcUa.Runtime.Tests) (push) Has been skipped
v2-ci / unit-tests (tests/Server/ZB.MOM.WW.OtOpcUa.Security.Tests) (push) Has been skipped
v2-ci / integration (tests/Server/ZB.MOM.WW.OtOpcUa.Host.IntegrationTests) (push) Has been skipped
v2-ci / integration (tests/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer.IntegrationTests) (push) Has been skipped
Adds <summary>/<param>/<returns>/<inheritdoc> where missing and removes project bookkeeping IDs (task/tracking refs) from shipped code comments, so the docs read cleanly and CommentChecker is quiet except for known false positives (PLC/protocol terms, event/IEqualityComparer inheritdoc). Doc/comment-only; no logic changed; solution builds clean.
33 lines
1.5 KiB
C#
33 lines
1.5 KiB
C#
namespace ZB.MOM.WW.OtOpcUa.Core.Abstractions;
|
|
|
|
/// <summary>
|
|
/// Stability tier of a driver type. Determines which cross-cutting runtime protections
|
|
/// apply — per-tier retry defaults, memory-tracking thresholds, and whether out-of-process
|
|
/// supervision with process-level recycle is in play.
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// <list type="bullet">
|
|
/// <item><b>A</b> — managed, known-good SDK; low blast radius. In-process. Fast retries.
|
|
/// Examples: OPC UA Client (OPCFoundation stack), S7 (S7NetPlus).</item>
|
|
/// <item><b>B</b> — native or semi-trusted SDK with an in-process footprint. Examples: Modbus.</item>
|
|
/// <item><b>C</b> — unmanaged SDK with COM/STA constraints, leak risk, or other out-of-process
|
|
/// requirements. Must run as a separate Host process behind a Proxy with a supervisor that
|
|
/// can recycle the process on hard-breach. Example: Galaxy (MXAccess COM).</item>
|
|
/// </list>
|
|
///
|
|
/// <para>Process-kill protections (<c>MemoryRecycle</c>, <c>ScheduledRecycleScheduler</c>) are
|
|
/// Tier C only — killing an in-process Tier A/B driver also kills
|
|
/// every OPC UA session and every co-hosted driver, blast-radius worse than the leak.</para>
|
|
/// </remarks>
|
|
public enum DriverTier
|
|
{
|
|
/// <summary>Managed SDK, in-process, low blast radius.</summary>
|
|
A,
|
|
|
|
/// <summary>Native or semi-trusted SDK, in-process.</summary>
|
|
B,
|
|
|
|
/// <summary>Unmanaged SDK, out-of-process required with Proxy+Host+Supervisor.</summary>
|
|
C,
|
|
}
|