Krkn vs Toxiproxy

Krkn injects deliberate failures into Kubernetes clusters so teams can examine resilience under disruption. Its 20-plus scenarios cover pods, containers, nodes, networks, applications, resources, storage and time. The recommended krknctl command-line tool discovers, runs and coordinates scenarios; other choices include pre-built containers, a browser dashboard and a standalone Python program. Krkn evaluates Prometheus metrics against SLO pass/fail criteria and can review metrics during and after scenarios. Dashboard integrations include Elasticsearch and Grafana, and telemetry can be sent to S3 or Elasticsearch. Cerberus monitors Kubernetes and OpenShift health, providing a go/no-go signal, reports and a metrics API; it can also report failures in Slack. Krkn-AI uses evolutionary algorithms against user-defined objectives to identify experiments. Krkn says it saves recovery state and can restore a cluster, but some disruptive scenarios may leave the target unrecoverable. It is intended for resilience measurement, not security provision, and does not currently adhere to compliance standards. Requirements include Kubernetes or OpenShift 1.21+, cluster-admin kubeconfig access, and Docker 20.10+ or Podman 4.0+.

Toxiproxy is a free, open-source TCP proxy for testing how software responds to network and system problems in development, testing, and CI. Applications route test connections through it, then users change connection behavior through an HTTP API or command-line interface. Built-in toxics can add latency or jitter, restrict bandwidth, delay socket closure, time out or reset connections, slice TCP data, limit transmitted data, or drop packets. Settings support deterministic connection changes as well as randomized chaos. The API manages proxies and toxics, resets proxies, and returns version information and Prometheus-compatible metrics. It listens on port 8474; configuring a proxy with listen port 0 assigns an ephemeral port. Client libraries are listed for Ruby, Go, Python, .NET, PHP, Node.js, Java, Haskell, Rust, and Elixir. Installation options include Linux packages and binaries, Homebrew and MacPorts, a Windows download, a container image, and building from source with Go. The project identifies its license as MIT. Its HTTP API is unauthenticated by default, though bearer-token authentication is supported.