Toxiproxy - TCP Chaos Testing Proxy for Resilience

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Catch dependency failures before they reach production. Toxiproxy sits between your application and its upstream services - databases, caches, queues, and APIs - and injects controllable failures called toxics: latency, bandwidth limits, timeouts, connection resets, and data slicing. Because failures are deterministic and scriptable, you can reproduce a slow database or a flaky network in a test suite or staging environment exactly, on demand, instead of waiting for it to happen in production.

This image delivers Toxiproxy fully installed and running under systemd, so a working proxy is available within minutes of launch with no manual compilation or configuration editing required.

Out-of-the-box demo included:

• A small bundled upstream on the loopback interface
• A demo proxy forwarding a public port to that upstream
• A sample latency toxic already applied

List the proxies or curl through the demo port and you immediately see a real, failure-injecting TCP proxy on first boot.

The Toxiproxy control API is unauthenticated by design and can create proxies to arbitrary destinations. This image addresses that risk with multiple layers:

• Control API bound to the loopback interface only - never exposed to the network
• Remote access fronted by an nginx reverse proxy over TLS
• HTTP Basic credential generated uniquely per instance at first boot - never baked into the image
• Only SSH, the demo proxy data port, and the authenticated control-API endpoint are opened
• Operating system ships fully patched with unattended security updates enabled
• systemd manages all services for automatic restarts and clean logging

• Pre-production resilience validation: verify your application handles slow or failed dependencies gracefully before deploying to production
• Automated test suites: script toxic injection via the HTTP control API to include failure scenarios in CI/CD pipelines
• Staging environment chaos: reproduce exact production failure modes on demand for debugging and root-cause analysis
• Dependency timeout tuning: validate that your connection pools, retries, and circuit breakers behave correctly under degraded conditions

Deploy directly from AWS Marketplace onto any supported EC2 instance, alongside your existing VPC and security groups. After launch, retrieve your unique per-instance HTTP Basic credential over SSH from the root-only credentials file at /root/toxiproxy-credentials.txt, then point your application at the proxy ports instead of directly at your dependencies. Open only the ports your test clients need in the instance security group.

This product includes 24/7 technical support from cloudimg via email and live chat. The support team assists with deployment, control-API usage, toxic design for your specific failure modes, and security configuration.

This is a repackaged open source software product with additional charges for cloudimg support services. Toxiproxy is distributed under the MIT license. cloudimg is not affiliated with or endorsed by Shopify or the Toxiproxy project. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.