Quick start

Start the suite

docker compose up -d

All three servers come up in a few seconds.

Connect to open62541-nm (port 24840)

The NodeManagement server. Anonymous full access, no security.

endpoint:        opc.tcp://localhost:24840
security policy: None
security mode:   None
identity:        Anonymous

Any client can connect with one line:

opcua-cli browse opc.tcp://localhost:24840 "ns=0;i=85"
# or, since i=85 (Objects) is the default browse target:
opcua-cli browse opc.tcp://localhost:24840

Quote the NodeId — the ; would otherwise be interpreted as a shell command separator.

You should see the standard Objects folder's children. The address space is whatever open62541's ci_server example ships — mostly empty by design. Tests populate it themselves via AddNodes.

A minimal AddNodes round-trip using php-opcua/opcua-client:

use PhpOpcua\Client\ClientBuilder;
use PhpOpcua\Client\Types\NodeClass;

$client = ClientBuilder::create()
    ->connect('opc.tcp://localhost:24840');

// AddNodes — create a folder under Objects.
$results = $client->addNodes([
    [
        'parentNodeId'       => 'i=85',                 // Objects
        'referenceTypeId'    => 'i=35',                 // Organizes
        'requestedNewNodeId' => 'ns=1;s=my-folder',
        'browseName'         => '1:MyFolder',
        'nodeClass'          => NodeClass::Object,
        'attributes'         => ['displayName' => 'MyFolder'],
        'typeDefinition'     => 'i=61',                 // FolderType
    ],
]);

// Browse confirms it exists.
foreach ($client->browse('i=85') as $ref) {
    echo "  • {$ref->displayName->text}  ({$ref->nodeId})\n";
}

// DeleteNodes — clean up.
$client->deleteNodes([
    ['nodeId' => 'ns=1;s=my-folder', 'deleteTargetReferences' => true],
]);

$client->disconnect();

See opcua-client Managing nodes for the full attribute shape and error handling.

See NodeManagement · Services reference for the full API.

Connect to open62541-all-security (port 24841)

Every RSA policy, every mode, Anonymous + username/password.

Anonymous over None

The simplest combination:

endpoint:        opc.tcp://localhost:24841
security policy: None
security mode:   None
identity:        Anonymous

Username over Basic256Sha256 + SignAndEncrypt

endpoint:        opc.tcp://localhost:24841
security policy: Basic256Sha256
security mode:   SignAndEncrypt
identity:        admin / admin123

Users:

Same credentials as uanetstandard-test-suite's userpass server.

The server's certificate is self-signed — your client either needs to pin its fingerprint (TOFU) or use auto-accept mode. See Trust posture.

Negative paths

Discover endpoints

GetEndpoints on the all-security server returns multiple descriptors — one per (policy, mode) the open62541 build supports:

opcua-cli get-endpoints opc.tcp://localhost:24841

Expect 11 endpoints — one per (policy, mode) combination. For the policy matrix, see Policies and modes.

Stop

docker compose down

Where to read next

• Servers · Overview — what each server does in detail.
• NodeManagement · Overview — why this suite exists.
• Security and authentication — the policy/mode details for the all-security server.