Introduction

Limits container network bandwidth for all matching egress traffic.

Details

Note: If you are going to attack containers using network attacks, all containers in the target's linux network namespace (e.g. all containers belonging to the same Kubernetes Pod or Replica Set) will be affected. In case you want to target the traffic of a single container in the namespace you can for example use the port parameter to limit the blast radius.

This attack affects network traffic for protocols that use port numbers (e.g., TCP, UDP). Protocols like ICMP, which do not use ports, remain unaffected and will continue to function normally.

Use Cases

• Understand your service's performance under load
• Test your service's resilience to network attacks
• Test your service's resilience to decreased bandwidth

Parameters

Parameter	Description	Default
Network Bandwidth	How much traffic should be allowed per second?	1024kbit
Fail on Host Network	Emit failure when the targeted container is using the host network	true
Duration	How long should the traffic be affected?	30s
Hostname	Restrict to which hosts the traffic is reduced
IP Address	Restrict to which IP address the traffic is reduced
Network Interface	Target Network Interface which should be affected. All if none specified.
Ports	Restrict to which ports the traffic is reduced