Infrastructure Layer

Latency Attack

The Latency Gremlin injects latency into IP packets at the transport layer, targeted by supplied port and host arguments.


The Latency Gremlin uses existing Quality of Service (QOS) and Differentiated Services (diffserv) facilities in the Linux kernel to emulate packet latency.

This Gremlin does not interact with iptables, and so it does not interfere with any existing iptables rulesets.

This Gremlin requires the NET_ADMIN capability, which is enabled for Gremlin by default at installation time. See capabilities(7)


The Latency Gremlin uses a custom driver to emulate packet latency.

This Gremlin was introduced with Windows agent 1.0.11.


IP Addresses-i IP addressFalse0.0.1Only impact traffic to these IP addresses. Also accepts CIDR values (i.e.
Device-d interfaceFalseDevice discovery0.0.1Impact traffic over this network interface.
Hostnames-h hostnamesFalse^api.gremlin.com0.0.1Only impact traffic to these hostnames.
Egress Ports-p port numbersFalse^530.0.1Only impact egress traffic to these destination ports. Also accepts port ranges (e.g. 8080-8085).
Source Ports-s port numbersFalse0.0.1Only impact egress traffic from these source ports. Also accepts port ranges (e.g. 8080-8085).
MS-m intFalse1000.0.1How long to delay egress packets (millis).
Protocol-P {TCP, UDP, ICMP}Falseall1.5.3Only impact a specific protocol.
ProvidersWebUI and API OnlyFalse0.0.1External service providers to affect.
TagsWebUI and API OnlyFalse0.0.1Only impact traffic to hosts running Gremlin clients associated with these tags.
Length-l intFalse600.0.1The length of the attack (seconds).