---
title: "Deploy Toxiproxy Network Fault Testing"
description: "Inject latency and failures into private test-service connections."
category: "Other"
url: https://railway.com/deploy/toxiproxy-network-fault-testing
---

# Deploy Toxiproxy Network Fault Testing

Inject latency and failures into private test-service connections.

**[Deploy Toxiproxy Network Fault Testing on Railway](https://railway.com/template/toxiproxy-network-fault-testing)**

Machine-readable deploy manifest (JSON, validated by TemplateCI): https://railway.com/deploy/toxiproxy-network-fault-testing/manifest.json

- **Creator:** orenaksakal
- **Category:** Other

## Template content

### toxiproxy

- **Source:** orenaksakal/railway-templates
- **Health check:** /healthz
- **Public domain:** Yes

### app

- **Image:** ghcr.io/shopify/toxiproxy:2.12.0@sha256:9378ed52a28bc50edc1350f936f518f31fa95f0d15917d6eb40b8e376d1a214e
- **Start command:** `/toxiproxy -host=0.0.0.0 -port=8474`
- **Health check:** /version

## Documentation

# Deploy and Host Toxiproxy Network Fault Testing on Railway

Inject latency and failures into private test-service connections.

**Draft status:** Configuration and upstream documentation reviewed. Container startup, Railway application workflows, restart behavior, backup restoration and costs remain unverified.

## About Hosting

Inject latency and failures into private test-service connections.

| Service | Role | Persistent path |
| --- | --- | --- |
| `app` | Private application or dependency | `None` |
| `toxiproxy` | Public owner gateway | `None` |

## Why Deploy

Run this application in your own Railway project, with explicit configuration and storage under your control.

## Common Use Cases

- Inject latency and failures into private test-service connections.

## Dependencies for Toxiproxy Network Fault Testing

### Deployment Dependencies

The application images are pinned by registry digest. Database services, when included, stay on the private network. One replica is supported for each volume-backed service.

## First use

Open the `toxiproxy` service's HTTPS domain. Sign in to the owner gateway with username `admin` and its generated `ACCESS_PASSWORD`. Complete the application's own setup afterward.

API calls must also send `X-Template-Key` with that owner password. The gateway forwards native Bearer tokens, strips Basic Authorization, and limits requests to 32 MiB. Browser sessions receive a secure owner cookie. Native clients, webhooks and public sharing require specific compatibility checks before use. Gateway `/healthz` only checks the proxy, not application readiness.

Use the protected REST API with X-Template-Key to create a proxy listening on 0.0.0.0:8666 and forwarding to your test dependency. Point a test application in the same project at the app private domain on port 8666, then add a latency or timeout toxic.

## Scope and limitations

- Only the administration API is routed publicly. Proxy listener ports stay private; choose a distinct port for each proxy.
- Runtime proxy and toxic configuration is in memory. Recreate it from test fixtures after restarts.
- Use test workloads; intentionally injected network failures affect every client using the selected proxy.

## Acceptance checks before use

- Create a proxy to a controlled service, verify connectivity, add a latency toxic and measure the effect.
- Delete the toxic and verify normal connectivity returns.
- Confirm generated credentials are distinct on a second fresh deployment.
- Back up every listed persistent path and database, then restore into a separate test project.
- Measure Railway usage with representative data and workload before estimating operating costs.

## Backups and upgrades

Back up databases, file volumes, encryption keys and configuration together. Keep a copy outside the running project. Review upstream migration notes before changing a digest; rollback can require restoring a compatible database and files, not just selecting an older image.

## Sources and selection evidence

- [Upstream documentation](https://github.com/Shopify/toxiproxy/blob/v2.12.0/README.md): Official GHCR image, admin API port 8474, proxy creation and toxics API.
- [Upstream documentation](https://github.com/Shopify/toxiproxy/blob/v2.12.0/Dockerfile): Scratch image binary is /toxiproxy; no shell is assumed.
- [Upstream project](https://github.com/Shopify/toxiproxy)

Product and alias searches found no matching public Railway listing during this research. This is a bounded search result; private, unindexed or differently named listings may exist. It is not evidence of demand or revenue.

Upstream software retains its own license and edition restrictions. This deployment draft does not imply upstream endorsement.


## Similar templates

- [Rocky Linux](https://railway.com/deploy/rocky-linux) — Hosted Rocky Linux 9 workspace with SSH and persistent storage. 🚀
- [Foundry Virtual Tabletop](https://railway.com/deploy/X5tR6G) — A Self-Hosted & Modern Roleplaying Platform
- [Letta Code Remote](https://railway.com/deploy/letta-code-remote) — Run a Letta Code agent 24/7. No inbound ports, just deploy.

Open this page in a browser: https://railway.com/deploy/toxiproxy-network-fault-testing