Stigix generates realistic SaaS and East-West custom TCP enterprise traffic, orchestrates zero-touch multi-node mesh provisioning, runs active DEM performance probes, executes automated security tests, measures failover convergence, automates VyOS routers, simulates voice and IoT devices, and visualizes Prisma SD-WAN overlay topology — in labs, demos, and POC environments.
Stigix deploys seamlessly across Datacenters, Branch sites, and Cloud instances. A Leader node orchestrates Central Global Provisioning, while every peer acts concurrently as a traffic sender, custom TCP host listener, and SLA responder.
"I built this after years of writing one-off scripts for SD-WAN POCs and never finding a single lab platform that matched what I see in the field."
The pattern was always the same: a new POC, a new set of one-off scripts to simulate SaaS traffic, test URL filtering, or measure failover convergence. Nothing reusable. Nothing that handled both the traffic side and the security validation side in the same tool.
Stigix was built to change that — a single platform for generating realistic application traffic, running security policy tests, simulating voice and IoT devices, measuring SD-WAN convergence time, and giving you a real-time view of what's happening across the network.
Problems it solves
30s cycle) of 8 configuration bundles (Applications, Synthetic Probes, SLA, Security Policies, Voice, IoT, Prisma SD-WAN, and Custom TCP Apps) from the Leader to all registered branch peers. Zero-downtime hot reloading, revision tracking, local site overrides, and one-click rollbacks.curl ... | sudo bash -s -- --controller <URL>) to instantly join remote Linux nodes, branch servers, and Raspberry Pis to a central Stigix Leader. Dynamic target synthesis automatically exposes learned peers across the mesh with self-filtering and heartbeat monitoring — zero external dependencies.auth login, status, tcp-app, provision, and controller. Persistent command history file for scripting and audit. Tab-completion for all parameters.Generate weighted SaaS and line-of-business traffic across specific interfaces and verify that application steering rules behave as intended. Confirm that video, voice, and critical SaaS flows follow the expected path based on policy — before and after configuration changes.
Replicate line-of-business ERP (SAP/Oracle), POS checkout systems, database replication, and industrial SCADA protocols across SD-WAN overlays. Inject realistic server processing latencies, socket resets, and application-level errors to observe and validate dynamic path selection under real application stress.
Deploy and centrally orchestrate a multi-site SD-WAN testbed across 10+ branch locations from a single Leader node. Onboard remote Linux boxes in 30 seconds with 1-line curl commands, and distribute standardized test suites, custom applications, and security policies across the entire mesh with Global Provisioning.
Inject deterministic or looping application degradations (e.g. alternating 60s normal phase with 60s slow 1500ms latency or packet drops) to force SD-WAN controllers to trigger application-aware SLA failovers. Measure failover times with microsecond-accurate UDP probes without physical cable pulling.
Visually compare logical SD-WAN overlay tunnels (Active/Backup/Down) with physical VyOS router chassis ports. Trace packet paths, compare transit subnets and circuit IDs with one click, and pinpoint whether an application outage originates from an underlay link impairment or an overlay policy misconfiguration.
Validate URL filtering categories, DNS security, and IPS policies against real test destinations. Run scheduled security test cycles and capture results persistently. Confirm that blocking and alerting rules fire correctly before go-live or after a policy change.
Simulate realistic IoT device presence at Layer 2/3 and validate that DHCP profiling, micro-segmentation, and traffic classification work correctly. Test threat prevention detection against active IoT attack vectors (DNS Flood, C2 Beacon, Port Scan, Data Exfiltration).
Measure exact tunnel transition times during link failure or SD-WAN path change events. Use VyOS network impairment orchestration to induce failures on demand and capture convergence timing with high-precision UDP probes at up to 1000 PPS alongside RTP voice simulation and MOS scoring.
Simulate DLP exfiltration, Prompt Injection, exploit attempts, and EICAR uploads against live AI platforms (ChatGPT, Grok, Gemini, Perplexity). Validate that AI Security policies detect and block sensitive data leaving through AI chat interfaces — a rapidly growing attack vector in enterprise environments.
Build repeatable, visually compelling demo environments for customer presentations and partner enablement sessions. Feed SASE and SD-WAN dashboards with realistic multi-application traffic and security event telemetry without requiring access to production environments.
flows query command tracing end-to-end network sessions against the Prisma Flow Browser to verify active circuit path selection (BR8-INET1 to DC1-INET).
Real-world SASE & SD-WAN validation studies produced from live lab scenarios orchestrated by Stigix and analyzed with AI assistants via FastMCP.
How Prisma SD-WAN and Stigix demonstrated automatic failover in ~3 minutes during a silent internet breakout failure where Layer 3 BFD keepalives remained completely blind.
Architectural deep-dive decomposing end-to-end user latency into Network RTT and Server Response Time (SRT) without agents or SSL decryption using dual synchronized telemetry.
Live failover benchmark between branch office BR8 and datacenter DC1 measuring sub-second packet loss and active path evolution during induced WAN circuit impairments.
Stigix ships a fully interactive terminal console inside the container with support for Custom Apps, Global Provisioning, DEM probes, and Controller mesh management.
stigix-cli --exec "<command>". Full command history is saved to JSON for auditability and compliance.