Resiliency Testing with Toxiproxy
summary
Shopify built Toxiproxy to sit between app and service in dev and test and injects latency and black holes at the TCP layer so tests see realistic network failures. The team wires Toxiproxy into CI, writes hundreds of Toxiproxy tests (examples: take MySQL writer down, boot with all proxies blackholed) and runs them on deploy to prevent regressions. It’s open source on GitHub, authentic for supported failures but not a substitute for chaos engineering.
AI-written summary · about
chapters (5)
related talks
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
36mZero Trust at Shopify Scale: Automating MTLS Across Thousands of Services
25mThe Voight-Kampff Test for Discovering Vulnerabilities
25mHacking Like a FED
28mHow to Inject Faults into Common HTTPS Clients and Services
12mHTTPT: A Probe-Resistant Proxy
52mAppSec at DevOps Speed and Portfolio Scale
47mSecurity Pre-Cognition