How to Inject Faults into Common HTTPS Clients and Services
summary
Cloud-native tool Chaos Mesh adds an HTTPChaos capability that injects faults without changing application code by running a transparent proxy inside a target process netns using veth pairs and TPROXY. It supports abort, delay (example: 1s), JSON merge patch of request/response bodies, and replace responses (example: force 502). HTTPS is handled by presenting server certs or generating and signing forged certs and injecting a root CA. Rules are Kubernetes CRDs, installable with a one-line script, and plugins run via WebAssembly.
AI-written summary · about
chapters (20)
- 0:00Intro
- 2:04Chaos Tools
- 4:20Chaos Mesh project
- 4:44Cloud Native
- 6:58Build-in Dashboard
- 7:27Powerful Chaos Toolkit
- 9:25Faults in HTTP
- 11:01Implementation details
- 11:48chaos-tproxy
- 12:37Network Topology
- 13:54Transparent Proxy
- 14:28Sub Network Namespace
- 16:29Rule of HTTP-Chaos
- 18:27HTTP Delay
- 19:06HTTP Patch
- 19:38HTTP Replace
- 20:45Same Certificates with Servers
- 21:22Self-Signed Certificates
- 22:12Plugins
- 23:52Native Executable File
related talks
35mTransparent Chaos Testing with Envoy , Cilium and BPF
43mCyber Chaos Engineering
34mInjecting Security at the Cloud Edge
40mSecurity & Chaos Engineering: Resilient Distributed Systems
28mBuilding Safety, Security and Resilience through Chaos
27mExecuting Chaos Engineering in Production at a Critical Financial Institution
40mLeveraging Cloud SDNs to Solve OWASP Top Ten
40mReimagining Application Networking and Security