Minderbinder：一款基于eBPF的进程安全测试工具

agents_of_chaos:
  syscall




    
:  
    # Stop curl from using `openat`
    - name: break_curl_openat
      syscall: openat
      ret_code: -2 # NOENT / no such file or directory
      targets:
        - process_name: curl
      delay_ms: 100 # Milliseconds to wait after the process starts. For openat, this gives the process a chance to start properly.
      failure_rate: 100
  outgoing_network:
    - name: break_wget_network
      targets:
        - process_name: wget
      delay_ms: 100 # Milliseconds. In this case, 100ms should be enough to get a DNS request through for the endpoint, before breaking the actual transfer to the HTTP server
      failure_rate: 100      

sudo ./minderbinder --interface enp67s0 config.yaml

func TestYourAPIHandler_DownstreamFailure(t *testing.T) {
// Create a new request
req := httptest.NewRequest(http.MethodGet, "/your-api-endpoint", nil)
 
// Record the response
rec := httptest.NewRecorder()
 
// Failure configuration
cfg := FailureConfig{
OutgoingNetwork: [] OutgoingNetworkFailure {
            {
                Protocol: "TCP",
                DestPort: 443,
                FailureRate: 100
            }
        }
}
 
// Wrap the actual handler call with Minderbinder. Because Minderbinder is injecting
    // failures into this process using eBPF, we don't need to elaborately craft stubs here;
    // we can setup the
    minderbinder := &Minderbinder{}
minderbinder.WithFailures(cfg, func() (*http.Response, error) {
// Call the API handler
YourAPIHandler(rec, req)
return nil
})
 
// We should get a 502 / bad gateway back
assert.Equal(t, http.StatusBadGateway, rec.Code)
assert.Equal(t, "Downstream service failed\n", rec.Body.String())
}