Delay Outgoing Traffic

The network delay operates at the ip level and affects single packets (network layer, level 3). Thus, it works for UDP and TCP traffic and you may encounter HTTP requests that are delayed by a multiple of the specified delay.

In this example the traffic is delayed by 500ms. If you tap the wire (using tcpdump) and feed it into Wireshark it looks like shown in the image above.

The first incoming packet initiates the tcp connection and is accepted by the second packet, which is delayed exactly be the 500ms.\
With the fourth packet we receive a HTTP request in the payload. Which is acknowledged and answered with a HTTP response in packet four to seven, which are also delayed by 500ms and thus the total latency for the HTTP request sums up to 1 second.

Parameters

Parameter	Description	Default
Duration	How long should the traffic be delayed?	30s
Hostname	Restrict to which hosts the traffic is delayed
IP Address	Restrict to which IP address the traffic is delayed
Network Delay	How much should the traffic be delayed?	500ms
Network Interface	Target Network Interface which should be attacked. All if none specified.
Port Number	Restrict to which port number the traffic is delayed
Jitter	Random +-30% jitter to network delay	true

Useful Templates

See all

Latency progressively increases for a Linux Host

Latency of a Host progressively increases to analyse at which point the communication breaks. Additionally, you may want to add one of our observability checks.

Structure

We start by adding a 250ms latency on the host's outgoing traffic for 30 seconds. Next, we stepwise increase the latency to 500ms, 750ms, and 1s - each for 30 seconds. In between, we have small wait steps to ease analysis in external observability tools for each phase.