You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| Linux |[Arbitrary Stress-ng Stressor](#arbitrary-stress-ng-stressor)| General system stress testing |
35
37
| Linux |[Linux DiskIO Pressure](#linux-disk-io-pressure)| Disk I/O performance degradation |
36
38
| Windows |[DiskIO Pressure](#disk-io-pressure)| Disk I/O performance degradation |
37
-
| Windows |[DNS Failure](#dns-failure)| DNS resolution issues |
38
-
| Windows |[Network Disconnect (Via Firewall)](#network-disconnect-via-firewall)| Network disruption |
39
+
39
40
40
41
## App Service
41
42
@@ -165,8 +166,8 @@ These actions are building blocks for constructing effective experiments. Use th
165
166
|-|-|
166
167
| Capability name | NetworkDisconnect-1.1 |
167
168
| Target type | Microsoft-Agent |
168
-
| Supported OS types | Windows, Linux |
169
-
| Description | Blocks outbound network traffic for specified port range and network block. At least one destinationFilter or inboundDestinationFilter array must be provided. |
169
+
| Supported OS types | Windows, Linux (outbound traffic only) |
170
+
| Description | Blocks network traffic for specified port range and network block. At least one destinationFilter or inboundDestinationFilter array must be provided. |
170
171
| Prerequisites |**Windows:** The agent must run as administrator, which happens by default if installed as a VM extension. |
171
172
||**Linux:** The `tc` (Traffic Control) package is used for network faults. If it isn't already installed, the agent automatically attempts to install it from the default package manager. |
@@ -220,6 +221,7 @@ The parameters **destinationFilters** and **inboundDestinationFilters** use the
220
221
* The agent-based network faults currently only support IPv4 addresses.
221
222
* The network disconnect fault only affects new connections. Existing active connections continue to persist. You can restart the service or process to force connections to break.
222
223
* When running on Windows, the network disconnect fault currently only works with TCP or UDP packets.
224
+
* When running on Linux, this fault can only affect **outbound** traffic, not inbound traffic. The fault can affect **both inbound and outbound** traffic on Windows environments (via the `inboundDestinationFilters` and `destinationFilters` parameters).
223
225
224
226
### Network Disconnect (Via Firewall)
225
227
@@ -1595,11 +1597,11 @@ Currently, a maximum of 4 process names can be listed in the processNames parame
1595
1597
1596
1598
| Property | Value |
1597
1599
|-|-|
1598
-
| Capability name | SecurityRule-1.0 |
1600
+
| Capability name | SecurityRule-1.0, SecurityRule-1.1|
1599
1601
| Target type | Microsoft-NetworkSecurityGroup |
1600
1602
| Description | Enables manipulation or rule creation in an existing Azure network security group (NSG) or set of Azure NSGs, assuming the rule definition is applicable across security groups. Useful for: <ul><li>Simulating an outage of a downstream or cross-region dependency/nondependency.<li>Simulating an event that's expected to trigger a logic to force a service failover.<li>Simulating an event that's expected to trigger an action from a monitoring or state management service.<li>Using as an alternative for blocking or allowing network traffic where Chaos Agent can't be deployed. |
| name | A unique name for the security rule that's created. The fault fails if another rule already exists on the NSG with the same name. Must begin with a letter or number. Must end with a letter, number, or underscore. May contain only letters, numbers, underscores, periods, or hyphens. |
0 commit comments