mbproxy: initial commit through Phase 9 (TxId multiplexing)

Adds the mbproxy service end-to-end. Phases 00-08 implement the
production-ready single-listener / 1:1-backend transparent Modbus TCP
proxy with bidirectional BCD rewriting for the ~54-PLC DL205/DL260
fleet. Phase 9 replaces the connection layer with a single backend
socket per PLC plus MBAP TxId rewriting, lifting the H2-ECOM100's
4-concurrent-client cap as an operational ceiling.

Phase 9 additions of note:
- PlcMultiplexer + UpstreamPipe + TxIdAllocator + CorrelationMap
- InFlightRequest with IReadOnlyList<InterestedParty> (load-bearing
  for Phase 10 read coalescing — do not collapse to a single field)
- Per-request watchdog: surfaces Modbus exception 0x0B to upstream
  on BackendRequestTimeoutMs, defending against lost responses,
  dead-PLC paths, and pymodbus 3.13.0's concurrent-multiplexed-
  request bug (its ServerRequestHandler.last_pdu state race)
- Status DTO + HTML gain inFlight / maxInFlight / txIdWraps /
  disconnectCascades / queueDepth (Tier 1.6 in docs/kpi.md)

Tests: 263 unit + 38 E2E. Multiplexer correctness under truly
concurrent backend traffic is proved against a stub backend in
PlcMultiplexerTests; MultiplexerE2ETests paces requests so pymodbus
3.13's single-PDU framer stays in known-good mode.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Joseph Doherty
2026-05-14 01:49:35 -04:00
parent 2e937228a0
commit 56eee3c563
105 changed files with 18430 additions and 0 deletions
@@ -0,0 +1,317 @@
using System.Collections.Concurrent;
using System.Net;
using System.Net.Sockets;
using Mbproxy;
using Mbproxy.Configuration;
using Mbproxy.Options;
using Mbproxy.Proxy;
using Mbproxy.Proxy.Supervision;
using Microsoft.Extensions.Logging;
using Microsoft.Extensions.Logging.Abstractions;
using Microsoft.Extensions.Options;
using Polly;
using Xunit;
namespace Mbproxy.Tests.Configuration;
/// <summary>
/// Unit tests for <see cref="ConfigReconciler.ApplyAsync"/> using a fake
/// <see cref="IOptionsMonitor{T}"/> and real (but fast-recovery) supervisors.
/// Tests operate at the Apply level — no file I/O, no real config reload chain.
/// </summary>
[Trait("Category", "Unit")]
public sealed class ConfigReconcilerTests : IAsyncDisposable
{
// ── Helpers ───────────────────────────────────────────────────────────────────────────
private static int PickFreePort()
{
var l = new TcpListener(IPAddress.Loopback, 0);
l.Start();
int port = ((IPEndPoint)l.LocalEndpoint).Port;
l.Stop();
return port;
}
private static PlcOptions MakePlc(string name, int listenPort, string host = "127.0.0.1")
=> new() { Name = name, ListenPort = listenPort, Host = host, Port = 502 };
private static MbproxyOptions MakeOptions(PlcOptions[] plcs, BcdTagListOptions? global = null)
=> new()
{
Plcs = plcs,
BcdTags = global ?? new BcdTagListOptions(),
AdminPort = 8080,
};
private static ResiliencePipeline FastRecovery()
{
var profile = new RecoveryProfile { InitialBackoffMs = [50, 50], SteadyStateMs = 50 };
return PolicyFactory.BuildListenerRecovery(profile, NullLogger.Instance);
}
private PlcListenerSupervisor BuildSupervisor(PlcOptions plc)
{
ILoggerFactory lf = NullLoggerFactory.Instance;
return new PlcListenerSupervisor(
plc,
new ConnectionOptions(),
new NoopPduPipeline(),
lf.CreateLogger<PlcListener>(),
lf.CreateLogger<Mbproxy.Proxy.Multiplexing.PlcMultiplexer>(),
lf.CreateLogger($"Mbproxy.Proxy.UpstreamPipe.{plc.Name}"),
perPlcContext: null,
FastRecovery(),
lf.CreateLogger<PlcListenerSupervisor>(),
backendConnectPipeline: null);
}
private ConfigReconciler BuildReconciler(
IOptionsMonitor<MbproxyOptions> monitor,
ServiceCounters? counters = null)
{
return new ConfigReconciler(
monitor,
NullLoggerFactory.Instance,
counters ?? new ServiceCounters());
}
// The reconciler and supervisors tracked for cleanup.
private readonly List<ConfigReconciler> _reconcilers = [];
private readonly List<PlcListenerSupervisor> _supervisors = [];
public async ValueTask DisposeAsync()
{
foreach (var r in _reconcilers) r.Dispose();
using var cts = new CancellationTokenSource(TimeSpan.FromSeconds(5));
foreach (var s in _supervisors)
{
try { await s.StopAsync(cts.Token); } catch { /* best effort */ }
await s.DisposeAsync();
}
}
// ── Test 1: Happy path ────────────────────────────────────────────────────────────────
[Fact]
public async Task Apply_HappyPath_StartsAndStopsSupervisors_PerPlan()
{
int portA = PickFreePort();
int portB = PickFreePort();
var plcA = MakePlc("A", portA);
var initial = MakeOptions([plcA]);
var next = MakeOptions([plcA, MakePlc("B", portB)]);
// Build initial supervisor for A.
var supA = BuildSupervisor(plcA);
_supervisors.Add(supA);
await supA.StartAsync(CancellationToken.None);
var supervisors = new Dictionary<string, PlcListenerSupervisor>(StringComparer.Ordinal)
{
["A"] = supA,
};
var monitor = new FakeOptionsMonitor(initial);
var reconciler = BuildReconciler(monitor);
_reconcilers.Add(reconciler);
reconciler.Attach(supervisors, initial);
// Apply a config that adds PLC-B.
using var cts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
bool applied = await reconciler.ApplyAsync(next, cts.Token);
Assert.True(applied, "Apply should succeed for a valid config");
// The supervisor dictionary must now contain both A and B.
Assert.True(supervisors.ContainsKey("A"), "Supervisor A should still exist");
Assert.True(supervisors.ContainsKey("B"), "Supervisor B should have been added");
_supervisors.Add(supervisors["B"]);
}
// ── Test 2: Validation fails → no mutation ────────────────────────────────────────────
[Fact]
public async Task Apply_ValidationFails_NoMutationOccurs_AndLogsRejected()
{
int portA = PickFreePort();
var plcA = MakePlc("A", portA);
var initial = MakeOptions([plcA]);
// Invalid next: duplicate listen port.
var invalid = MakeOptions([plcA, MakePlc("B", portA)]); // port conflict
var supA = BuildSupervisor(plcA);
_supervisors.Add(supA);
await supA.StartAsync(CancellationToken.None);
var supervisors = new Dictionary<string, PlcListenerSupervisor>(StringComparer.Ordinal)
{
["A"] = supA,
};
var counters = new ServiceCounters();
var monitor = new FakeOptionsMonitor(initial);
var reconciler = BuildReconciler(monitor, counters);
_reconcilers.Add(reconciler);
reconciler.Attach(supervisors, initial);
using var cts = new CancellationTokenSource(TimeSpan.FromSeconds(5));
bool applied = await reconciler.ApplyAsync(invalid, cts.Token);
Assert.False(applied, "Apply should return false for invalid config");
// State must NOT have mutated: B must not have been added.
Assert.False(supervisors.ContainsKey("B"), "B must not have been added after rejection");
Assert.Single((IEnumerable<KeyValuePair<string, PlcListenerSupervisor>>)supervisors);
// Rejected counter must have been bumped.
Assert.Equal(1, counters.ReloadRejectedCount);
Assert.Equal(0, counters.ReloadAppliedCount);
}
// ── Test 3: Reseat does NOT restart the supervisor ────────────────────────────────────
[Fact]
public async Task Apply_ReseatTagMap_DoesNotRestartSupervisor()
{
int portA = PickFreePort();
var plcA = MakePlc("A", portA);
var globalBefore = new BcdTagListOptions
{
Global = [new BcdTagOptions { Address = 1072, Width = 16 }],
};
var globalAfter = new BcdTagListOptions
{
Global =
[
new BcdTagOptions { Address = 1072, Width = 16 },
new BcdTagOptions { Address = 1080, Width = 16 },
],
};
var initial = MakeOptions([plcA], global: globalBefore);
var next = MakeOptions([plcA], global: globalAfter);
var supA = BuildSupervisor(plcA);
_supervisors.Add(supA);
await supA.StartAsync(CancellationToken.None);
// Wait until bound.
using var waitCts = new CancellationTokenSource(TimeSpan.FromSeconds(5));
await supA.WaitForInitialBindAttemptAsync(waitCts.Token);
Assert.Equal(SupervisorState.Bound, supA.Snapshot().State);
var supervisors = new Dictionary<string, PlcListenerSupervisor>(StringComparer.Ordinal)
{
["A"] = supA,
};
var monitor = new FakeOptionsMonitor(initial);
var reconciler = BuildReconciler(monitor);
_reconcilers.Add(reconciler);
reconciler.Attach(supervisors, initial);
using var cts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
bool applied = await reconciler.ApplyAsync(next, cts.Token);
Assert.True(applied);
// The supervisor instance must be the SAME object — no restart.
Assert.Same(supA, supervisors["A"]);
// Supervisor must still be Bound — it was NOT stopped and restarted.
Assert.Equal(SupervisorState.Bound, supA.Snapshot().State);
}
// ── Test 4: Concurrent reloads are serialised ─────────────────────────────────────────
[Fact]
public async Task Apply_ConcurrentReloads_Are_Serialised()
{
// Start with an empty config (no PLCs) so Apply is fast but still real.
var initial = MakeOptions([]);
var monitor = new FakeOptionsMonitor(initial);
// We'll count how many concurrent executions happen simultaneously.
int concurrentPeak = 0;
int inProgress = 0;
var counters = new ServiceCounters();
var reconciler = BuildReconciler(monitor, counters);
_reconcilers.Add(reconciler);
reconciler.Attach(new Dictionary<string, PlcListenerSupervisor>(StringComparer.Ordinal), initial);
// Fire 5 concurrent Apply calls — they must execute one-at-a-time.
var opts = MakeOptions([]);
using var cts = new CancellationTokenSource(TimeSpan.FromSeconds(20));
// Wrap ApplyAsync in a task that measures concurrency.
// We use a short Task.Delay inside to make concurrent calls more visible.
var tasks = Enumerable.Range(0, 5).Select(_ => Task.Run(async () =>
{
// Increment in-progress and capture peak.
int current = Interlocked.Increment(ref inProgress);
Interlocked.Exchange(ref concurrentPeak,
Math.Max(Interlocked.CompareExchange(ref concurrentPeak, 0, 0), current));
await Task.Delay(5, cts.Token); // tiny delay to increase collision chance
bool result = await reconciler.ApplyAsync(opts, cts.Token);
Interlocked.Decrement(ref inProgress);
return result;
}, cts.Token)).ToArray();
var results = await Task.WhenAll(tasks);
// All 5 should have been applied (empty config is always valid).
Assert.All(results, r => Assert.True(r));
// The serialisation check: while the above measurement isn't perfect
// (the Interlocked peak is set before the semaphore wait, not inside),
// the key invariant we verify is that all 5 completed successfully
// without deadlock or exception — proving the semaphore doesn't deadlock
// under concurrent load.
Assert.Equal(5, counters.ReloadAppliedCount);
}
}
/// <summary>
/// Minimal fake <see cref="IOptionsMonitor{T}"/> backed by a fixed value.
/// </summary>
internal sealed class FakeOptionsMonitor : IOptionsMonitor<MbproxyOptions>
{
private MbproxyOptions _value;
private readonly List<Action<MbproxyOptions, string?>> _callbacks = [];
public FakeOptionsMonitor(MbproxyOptions value) => _value = value;
public MbproxyOptions CurrentValue => _value;
public MbproxyOptions Get(string? name) => _value;
public IDisposable? OnChange(Action<MbproxyOptions, string?> listener)
{
_callbacks.Add(listener);
return new DisposableAction(() => _callbacks.Remove(listener));
}
/// <summary>Simulates an appsettings file change notification.</summary>
public void TriggerChange(MbproxyOptions newValue)
{
_value = newValue;
foreach (var cb in _callbacks)
cb(newValue, null);
}
private sealed class DisposableAction(Action action) : IDisposable
{
public void Dispose() => action();
}
}
@@ -0,0 +1,346 @@
using System.Collections.Concurrent;
using System.Net;
using System.Net.Sockets;
using System.Text.Json;
using Mbproxy;
using Mbproxy.Configuration;
using Mbproxy.Proxy;
using Mbproxy.Proxy.Supervision;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting;
using Serilog;
using Serilog.Core;
using Serilog.Events;
using Shouldly;
using Xunit;
namespace Mbproxy.Tests.Configuration;
/// <summary>
/// End-to-end hot-reload tests. Each test:
/// <list type="number">
/// <item>Writes a temp appsettings.json file.</item>
/// <item>Builds a real host that reads it with <c>reloadOnChange: true</c>.</item>
/// <item>Mutates the file and waits for the reconciler to apply the change.</item>
/// <item>Asserts the running state reflects the new config.</item>
/// </list>
///
/// These tests do NOT require the pymodbus simulator because they use
/// <see cref="NoopPduPipeline"/> and loopback-only sockets.
/// </summary>
[Trait("Category", "E2E")]
public sealed class HotReloadE2ETests : IAsyncLifetime
{
// ── Helpers ───────────────────────────────────────────────────────────────────────────
private static int PickFreePort()
{
var l = new TcpListener(IPAddress.Loopback, 0);
l.Start();
int port = ((IPEndPoint)l.LocalEndpoint).Port;
l.Stop();
return port;
}
/// <summary>
/// Writes a minimal appsettings.json with the given PLC entries and optional global
/// BCD tags. Uses JSON rather than the raw config API so that
/// <c>Microsoft.Extensions.Configuration.Json</c> / <see cref="FileSystemWatcher"/>
/// pick up the change exactly as they would in production.
/// </summary>
private static void WriteConfig(
string path,
IEnumerable<(string name, int listenPort)> plcs,
IEnumerable<(int addr, int width)>? globalBcdTags = null,
int adminPort = 8080)
{
var plcArr = plcs.Select((p, i) => new
{
Name = p.name,
ListenPort = p.listenPort,
Host = "127.0.0.1",
Port = 502,
}).ToArray();
var globalArr = (globalBcdTags ?? []).Select(t => new { Address = t.addr, Width = t.width }).ToArray();
var doc = new
{
Mbproxy = new
{
AdminPort = adminPort,
BcdTags = new { Global = globalArr },
Plcs = plcArr,
Connection = new { BackendConnectTimeoutMs = 500, BackendRequestTimeoutMs = 500 },
},
};
// Write to a temp path then rename-replace, which is the exact pattern that causes
// FileSystemWatcher to fire 2-3 times and exercises the debounce.
string tmp = path + ".tmp";
File.WriteAllText(tmp, JsonSerializer.Serialize(doc, new JsonSerializerOptions { WriteIndented = true }));
File.Move(tmp, path, overwrite: true);
}
/// <summary>Waits up to <paramref name="timeout"/> for <paramref name="predicate"/> to become true.</summary>
private static async Task WaitForAsync(Func<bool> predicate, TimeSpan timeout, string failMessage)
{
using var cts = new CancellationTokenSource(timeout);
while (!predicate() && !cts.IsCancellationRequested)
await Task.Delay(50, cts.Token).ConfigureAwait(false);
predicate().ShouldBeTrue(failMessage);
}
private IHost BuildHost(string configPath, ILogEventSink? logSink = null)
{
var logger = logSink is not null
? new LoggerConfiguration()
.MinimumLevel.Information()
.WriteTo.Sink(logSink)
.CreateLogger()
: new LoggerConfiguration().MinimumLevel.Fatal().CreateLogger();
var builder = Host.CreateApplicationBuilder();
// Wire the JSON file with reloadOnChange: true (the production pattern).
builder.Configuration.Sources.Clear();
builder.Configuration.AddJsonFile(configPath, optional: false, reloadOnChange: true);
builder.Services.AddSerilog(logger, dispose: false);
builder.AddMbproxyOptions();
builder.Services.AddSingleton<IPduPipeline, NoopPduPipeline>();
builder.Services.AddHostedService<ProxyWorker>();
return builder.Build();
}
// Temp config file path, unique per test run to avoid collisions.
private string _configPath = "";
public ValueTask InitializeAsync()
{
_configPath = Path.Combine(Path.GetTempPath(), $"mbproxy_test_{Guid.NewGuid():N}.json");
return ValueTask.CompletedTask;
}
public ValueTask DisposeAsync()
{
try { File.Delete(_configPath); } catch { /* best effort */ }
return ValueTask.CompletedTask;
}
// ── E2E 1: Add a PLC at runtime → new listener binds ─────────────────────────────────
[Fact(Timeout = 5_000)]
public async Task E2E_AddPlcAtRuntime_NewListenerBinds_AndIsReachable()
{
int portA = PickFreePort();
int portB = PickFreePort();
// Start the host with only PLC-A.
WriteConfig(_configPath, [("PLC-A", portA)]);
using var host = BuildHost(_configPath);
using var startCts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
await host.StartAsync(startCts.Token);
// Wait for PLC-A to bind.
await WaitForAsync(
() => CanConnect(portA),
TimeSpan.FromSeconds(5),
"PLC-A listener should be reachable after startup");
// Add PLC-B by rewriting the config file.
WriteConfig(_configPath, [("PLC-A", portA), ("PLC-B", portB)]);
// Wait up to 3 s for the new listener to appear.
await WaitForAsync(
() => CanConnect(portB),
TimeSpan.FromSeconds(3),
"PLC-B listener should bind within 3 s of config reload");
using var stopCts = new CancellationTokenSource(TimeSpan.FromSeconds(5));
await host.StopAsync(stopCts.Token);
}
// ── E2E 2: Remove a PLC at runtime → port closes ─────────────────────────────────────
// Timeout 10 s: this test does 5 s startup-wait + 3 s reload-wait + cleanup. The
// hot-reload propagation window needs the headroom; tightening to 5 s causes flakes.
[Fact(Timeout = 10_000)]
public async Task E2E_RemovePlcAtRuntime_ClosesUpstreamConnections()
{
int portA = PickFreePort();
int portB = PickFreePort();
// Start with both PLCs.
WriteConfig(_configPath, [("PLC-A", portA), ("PLC-B", portB)]);
using var host = BuildHost(_configPath);
using var startCts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
await host.StartAsync(startCts.Token);
// Wait for both listeners.
await WaitForAsync(
() => CanConnect(portA) && CanConnect(portB),
TimeSpan.FromSeconds(5),
"Both PLC-A and PLC-B should bind at startup");
// Remove PLC-B.
WriteConfig(_configPath, [("PLC-A", portA)]);
// Wait up to 3 s for PLC-B's port to close.
await WaitForAsync(
() => !CanConnect(portB),
TimeSpan.FromSeconds(3),
"PLC-B port should stop accepting connections after removal");
// PLC-A must still work.
CanConnect(portA).ShouldBeTrue("PLC-A listener must remain bound");
using var stopCts = new CancellationTokenSource(TimeSpan.FromSeconds(5));
await host.StopAsync(stopCts.Token);
}
// ── E2E 3: Global BCD tag list change → reseat without restart ────────────────────────
[Fact(Timeout = 5_000)]
public async Task E2E_ChangeGlobalBcdTagList_RewriteReflectsImmediately()
{
// This test verifies that after a global tag list change, the supervisor for
// the PLC is reseated (new context) without being restarted.
// We check by reading the reconciler's applied count.
int portA = PickFreePort();
WriteConfig(_configPath, [("PLC-A", portA)], globalBcdTags: []);
var sink = new HotReloadCapturingSink();
using var host = BuildHost(_configPath, logSink: sink);
using var startCts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
await host.StartAsync(startCts.Token);
await WaitForAsync(
() => CanConnect(portA),
TimeSpan.FromSeconds(5),
"PLC-A should bind at startup");
var counters = host.Services.GetRequiredService<ServiceCounters>();
int beforeCount = counters.ReloadAppliedCount;
// Add a global BCD tag → should trigger a reseat (not a restart).
WriteConfig(_configPath, [("PLC-A", portA)], globalBcdTags: [(1072, 16)]);
// Wait for the reconciler to apply.
await WaitForAsync(
() => counters.ReloadAppliedCount > beforeCount,
TimeSpan.FromSeconds(3),
"ReloadAppliedCount should increment after config change");
// Give Serilog a small window to flush the log event through the pipeline
// into the capturing sink (Serilog dispatch is synchronous on this path, but
// the CapturingSink enqueue happens on whatever thread ApplyAsync ran on).
await Task.Delay(100, TestContext.Current.CancellationToken);
// Verify the reload.applied event was logged.
await WaitForAsync(
() => sink.Events.Any(e => e.MessageTemplate.Text.Contains("Config reload applied")),
TimeSpan.FromSeconds(2),
"mbproxy.config.reload.applied must be logged");
var appliedEvents = sink.Events
.Where(e => e.MessageTemplate.Text.Contains("Config reload applied"))
.ToList();
appliedEvents.ShouldNotBeEmpty("mbproxy.config.reload.applied must be logged");
// PLC-A must still be bound (reseat does not restart).
CanConnect(portA).ShouldBeTrue("PLC-A must remain bound after reseat");
using var stopCts = new CancellationTokenSource(TimeSpan.FromSeconds(5));
await host.StopAsync(stopCts.Token);
}
// ── E2E 4: Invalid reload → does not mutate running state ────────────────────────────
[Fact(Timeout = 5_000)]
public async Task E2E_InvalidReload_DoesNotMutateRunningState()
{
int portA = PickFreePort();
int portB = PickFreePort();
WriteConfig(_configPath, [("PLC-A", portA)]);
var sink = new HotReloadCapturingSink();
using var host = BuildHost(_configPath, logSink: sink);
using var startCts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
await host.StartAsync(startCts.Token);
await WaitForAsync(
() => CanConnect(portA),
TimeSpan.FromSeconds(5),
"PLC-A should bind at startup");
var counters = host.Services.GetRequiredService<ServiceCounters>();
// Write a BROKEN config: both PLCs on the same port → duplicate ListenPort error.
WriteConfig(_configPath, [("PLC-A", portA), ("PLC-B", portA)]);
// Wait for the rejected event.
await WaitForAsync(
() => counters.ReloadRejectedCount >= 1,
TimeSpan.FromSeconds(3),
"ReloadRejectedCount should increment for invalid config");
// Wait for the log event to propagate into the capturing sink.
await WaitForAsync(
() => sink.Events.Any(e =>
e.Level == LogEventLevel.Error &&
e.MessageTemplate.Text.Contains("Config reload rejected")),
TimeSpan.FromSeconds(2),
"mbproxy.config.reload.rejected must be logged");
// Verify the reload.rejected event was logged.
var rejectedEvents = sink.Events
.Where(e => e.Level == LogEventLevel.Error &&
e.MessageTemplate.Text.Contains("Config reload rejected"))
.ToList();
rejectedEvents.ShouldNotBeEmpty("mbproxy.config.reload.rejected must be logged");
// Host must still be running with old config.
CanConnect(portA).ShouldBeTrue("PLC-A must remain bound after rejected reload");
// PLC-B must NOT have been added (rejected = no partial apply).
CanConnect(portB).ShouldBeFalse("PLC-B must not have been added after rejection");
// Applied count must not have changed.
counters.ReloadAppliedCount.ShouldBe(0, "No reload should have been applied");
using var stopCts = new CancellationTokenSource(TimeSpan.FromSeconds(5));
await host.StopAsync(stopCts.Token);
}
// ── Helpers ───────────────────────────────────────────────────────────────────────────
private static bool CanConnect(int port)
{
try
{
using var c = new TcpClient();
c.Connect("127.0.0.1", port);
return true;
}
catch
{
return false;
}
}
}
/// <summary>Serilog <see cref="ILogEventSink"/> that stores events for assertion (hot-reload tests).</summary>
internal sealed class HotReloadCapturingSink : ILogEventSink
{
private readonly ConcurrentQueue<LogEvent> _events = new();
public IEnumerable<LogEvent> Events => _events;
public void Emit(LogEvent logEvent) => _events.Enqueue(logEvent);
}
@@ -0,0 +1,196 @@
using Mbproxy.Configuration;
using Mbproxy.Options;
using Xunit;
namespace Mbproxy.Tests.Configuration;
/// <summary>
/// Unit tests for <see cref="ReloadPlan.Compute"/>.
/// All tests verify the pure function logic — no side effects, no DI, no sockets.
/// </summary>
[Trait("Category", "Unit")]
public sealed class ReloadPlanTests
{
// ── Helpers ───────────────────────────────────────────────────────────────────────────
private static PlcOptions MakePlc(
string name, int listenPort, string host = "127.0.0.1", int port = 502)
=> new() { Name = name, ListenPort = listenPort, Host = host, Port = port };
private static MbproxyOptions MakeOptions(
PlcOptions[] plcs,
BcdTagListOptions? global = null)
=> new()
{
Plcs = plcs,
BcdTags = global ?? new BcdTagListOptions(),
};
private static BcdTagListOptions GlobalWith(params (ushort addr, byte width)[] tags)
=> new()
{
Global = tags.Select(t => new BcdTagOptions { Address = t.addr, Width = t.width }).ToList(),
};
// ── 1. Add one PLC ───────────────────────────────────────────────────────────────────
[Fact]
public void Compute_AddOnePlc_OnlyToAddPopulated()
{
var current = MakeOptions([MakePlc("A", 5020)]);
var next = MakeOptions([MakePlc("A", 5020), MakePlc("B", 5021)]);
var plan = ReloadPlan.Compute(current, next);
Assert.Single(plan.ToAdd);
Assert.Equal("B", plan.ToAdd[0].Name);
Assert.Empty(plan.ToRemove);
Assert.Empty(plan.ToRestart);
Assert.Empty(plan.ToReseat);
}
// ── 2. Remove one PLC ────────────────────────────────────────────────────────────────
[Fact]
public void Compute_RemoveOnePlc_OnlyToRemovePopulated()
{
var current = MakeOptions([MakePlc("A", 5020), MakePlc("B", 5021)]);
var next = MakeOptions([MakePlc("A", 5020)]);
var plan = ReloadPlan.Compute(current, next);
Assert.Empty(plan.ToAdd);
Assert.Single(plan.ToRemove);
Assert.Equal("B", plan.ToRemove[0]);
Assert.Empty(plan.ToRestart);
Assert.Empty(plan.ToReseat);
}
// ── 3. Changed ListenPort → goes to ToRestart, NOT ToReseat ──────────────────────────
[Fact]
public void Compute_ChangePort_GoesToToRestart_NotToReseat()
{
var current = MakeOptions([MakePlc("A", 5020)]);
var next = MakeOptions([MakePlc("A", 5022)]); // ListenPort changed
var plan = ReloadPlan.Compute(current, next);
Assert.Empty(plan.ToAdd);
Assert.Empty(plan.ToRemove);
Assert.Single(plan.ToRestart);
Assert.Equal("A", plan.ToRestart[0].Name);
Assert.Equal(5022, plan.ToRestart[0].New.ListenPort);
Assert.Empty(plan.ToReseat);
}
// ── 3b. Changed Host → goes to ToRestart ─────────────────────────────────────────────
[Fact]
public void Compute_ChangeHost_GoesToToRestart()
{
var current = MakeOptions([MakePlc("A", 5020, host: "10.0.0.1")]);
var next = MakeOptions([MakePlc("A", 5020, host: "10.0.0.2")]);
var plan = ReloadPlan.Compute(current, next);
Assert.Single(plan.ToRestart);
Assert.Empty(plan.ToReseat);
}
// ── 4. Changed per-PLC tag override → goes to ToReseat ───────────────────────────────
[Fact]
public void Compute_ChangePerPlcTagOverride_GoesToToReseat()
{
var global = GlobalWith((1072, 16));
// Current: PLC-A has no overrides.
var current = MakeOptions([MakePlc("A", 5020)], global: global);
// Next: PLC-A adds address 1080.
var plcWithOverride = new PlcOptions
{
Name = "A",
ListenPort = 5020,
Host = "127.0.0.1",
Port = 502,
BcdTags = new PlcBcdOverrides
{
Add = [new BcdTagOptions { Address = 1080, Width = 16 }],
},
};
var next = new MbproxyOptions
{
Plcs = [plcWithOverride],
BcdTags = global,
};
var plan = ReloadPlan.Compute(current, next);
Assert.Empty(plan.ToAdd);
Assert.Empty(plan.ToRemove);
Assert.Empty(plan.ToRestart);
Assert.Single(plan.ToReseat);
Assert.Equal("A", plan.ToReseat[0].Name);
}
// ── 5. Changed global tag list → all PLCs reseat, no restart ─────────────────────────
[Fact]
public void Compute_ChangeGlobalTagList_AllPlcsReseat_NoRestart()
{
var globalBefore = GlobalWith((1072, 16));
var globalAfter = GlobalWith((1072, 16), (1080, 32)); // new 32-bit tag added
var current = MakeOptions([MakePlc("A", 5020), MakePlc("B", 5021)], global: globalBefore);
var next = MakeOptions([MakePlc("A", 5020), MakePlc("B", 5021)], global: globalAfter);
var plan = ReloadPlan.Compute(current, next);
Assert.Empty(plan.ToAdd);
Assert.Empty(plan.ToRemove);
Assert.Empty(plan.ToRestart);
// Both PLCs should be reseated because the global tag list changed.
Assert.Equal(2, plan.ToReseat.Count);
Assert.Contains(plan.ToReseat, r => r.Name == "A");
Assert.Contains(plan.ToReseat, r => r.Name == "B");
}
// ── 6. No changes → all empty ────────────────────────────────────────────────────────
[Fact]
public void Compute_NoChanges_AllSectionsEmpty()
{
var global = GlobalWith((1072, 16));
var opts = MakeOptions([MakePlc("A", 5020)], global: global);
var plan = ReloadPlan.Compute(opts, opts);
Assert.Empty(plan.ToAdd);
Assert.Empty(plan.ToRemove);
Assert.Empty(plan.ToRestart);
Assert.Empty(plan.ToReseat);
}
// ── 7. Connection options propagated ─────────────────────────────────────────────────
[Fact]
public void Compute_ConnectionOptions_AreFromNextSnapshot()
{
var current = new MbproxyOptions
{
Plcs = [MakePlc("A", 5020)],
Connection = new ConnectionOptions { BackendConnectTimeoutMs = 1000 },
};
var next = new MbproxyOptions
{
Plcs = [MakePlc("A", 5020)],
Connection = new ConnectionOptions { BackendConnectTimeoutMs = 9999 },
};
var plan = ReloadPlan.Compute(current, next);
Assert.Equal(9999, plan.Connection.BackendConnectTimeoutMs);
}
}
@@ -0,0 +1,158 @@
using Mbproxy.Configuration;
using Mbproxy.Options;
using Xunit;
namespace Mbproxy.Tests.Configuration;
/// <summary>
/// Unit tests for <see cref="ReloadValidator.Validate"/>.
/// Each test covers one specific failure mode or the happy path.
/// </summary>
[Trait("Category", "Unit")]
public sealed class ReloadValidatorTests
{
// ── Helpers ───────────────────────────────────────────────────────────────────────────
private static PlcOptions MakePlc(string name, int listenPort, string host = "127.0.0.1")
=> new() { Name = name, ListenPort = listenPort, Host = host, Port = 502 };
private static MbproxyOptions MakeOptions(
PlcOptions[] plcs,
int adminPort = 8080,
BcdTagListOptions? global = null)
=> new()
{
Plcs = plcs,
AdminPort = adminPort,
BcdTags = global ?? new BcdTagListOptions(),
};
// ── 1. Duplicate PLC name → fails ────────────────────────────────────────────────────
[Fact]
public void Validate_DuplicatePlcName_Fails()
{
var opts = MakeOptions([
MakePlc("PLC-A", 5020),
MakePlc("PLC-A", 5021), // same name
]);
bool valid = ReloadValidator.Validate(opts, out var errors);
Assert.False(valid);
Assert.Contains(errors, e => e.Contains("PLC-A") && e.Contains("uplicate"));
}
// ── 2. Duplicate ListenPort → fails ──────────────────────────────────────────────────
[Fact]
public void Validate_DuplicateListenPort_Fails()
{
var opts = MakeOptions([
MakePlc("PLC-A", 5020),
MakePlc("PLC-B", 5020), // same port
]);
bool valid = ReloadValidator.Validate(opts, out var errors);
Assert.False(valid);
Assert.Contains(errors, e => e.Contains("5020") && e.Contains("uplicate"));
}
// ── 3. AdminPort collides with a PLC's ListenPort → fails ────────────────────────────
[Fact]
public void Validate_AdminPortCollidesWith_PlcListenPort_Fails()
{
var opts = MakeOptions(
plcs: [MakePlc("PLC-A", 5020)],
adminPort: 5020); // collides with PLC-A
bool valid = ReloadValidator.Validate(opts, out var errors);
Assert.False(valid);
Assert.Contains(errors, e => e.Contains("AdminPort") && e.Contains("5020"));
}
// ── 4. Per-PLC BCD map build error → fails ────────────────────────────────────────────
[Fact]
public void Validate_PerPlc_BcdMapBuildError_Fails()
{
// A 32-bit tag at address 100 and a 16-bit tag at 101 collide on high register.
var global = new BcdTagListOptions
{
Global =
[
new BcdTagOptions { Address = 100, Width = 32 },
new BcdTagOptions { Address = 101, Width = 16 }, // overlaps 100's high register
],
};
var opts = MakeOptions([MakePlc("PLC-A", 5020)], global: global);
bool valid = ReloadValidator.Validate(opts, out var errors);
Assert.False(valid);
Assert.Contains(errors, e => e.Contains("PLC-A"));
}
// ── 5. Port out of range → fails ─────────────────────────────────────────────────────
[Fact]
public void Validate_PortOutOfRange_Fails()
{
// ListenPort 0 is below the valid [1, 65535] range.
var opts = MakeOptions([MakePlc("PLC-A", 0)]);
bool valid = ReloadValidator.Validate(opts, out var errors);
Assert.False(valid);
Assert.Contains(errors, e => e.Contains("0") && e.Contains("range"));
}
// ── 5b. AdminPort out of range → fails ───────────────────────────────────────────────
[Fact]
public void Validate_AdminPortOutOfRange_Fails()
{
var opts = MakeOptions([MakePlc("PLC-A", 5020)], adminPort: 70000);
bool valid = ReloadValidator.Validate(opts, out var errors);
Assert.False(valid);
Assert.Contains(errors, e => e.Contains("70000") && e.Contains("range"));
}
// ── 6. Happy path → passes ───────────────────────────────────────────────────────────
[Fact]
public void Validate_HappyPath_Passes()
{
var global = new BcdTagListOptions
{
Global = [new BcdTagOptions { Address = 1072, Width = 16 }],
};
var opts = MakeOptions(
plcs: [MakePlc("PLC-A", 5020), MakePlc("PLC-B", 5021)],
adminPort: 8080,
global: global);
bool valid = ReloadValidator.Validate(opts, out var errors);
Assert.True(valid);
Assert.Empty(errors);
}
// ── 7. Empty PLC name → fails ────────────────────────────────────────────────────────
[Fact]
public void Validate_EmptyPlcName_Fails()
{
var opts = MakeOptions([MakePlc("", 5020)]);
bool valid = ReloadValidator.Validate(opts, out var errors);
Assert.False(valid);
Assert.Contains(errors, e => e.Contains("non-empty"));
}
}