Infrastructure Scenario Tests

We test Corax against real-world infrastructure failures across every vendor, platform, and scenario. Browse the results below.

276
Total Tests
100.0%
Pass Rate
276
Passed
0
Failed

vMotion Failure During DRS Rebalance

PASS

A DRS-triggered vMotion fails mid-migration due to a vMotion network MTU mismatch. The VM enters a stuck state — partially migrated, with the source host holding the memory pages and the destination unable to complete the switchover.

VendorPattern: VMWARE_EVENTSeverity: CRITICALConfidence: 92%Remote Hands27 correlated

VMFS Datastore Inaccessible — All VMs on Store Frozen

PASS

A VMFS 6 datastore becomes inaccessible due to a storage path failure (all-paths-down APD condition). All 22 VMs on the datastore freeze with I/O errors. vSphere triggers APD timeout handling after 140 seconds.

VendorPattern: VMWARE_EVENTSeverity: CRITICALConfidence: 90%Remote Hands50 correlated

vCenter Server Unavailable — Management Plane Down

PASS

The vCenter Server Appliance (VCSA) becomes unresponsive due to a database corruption in the embedded PostgreSQL. All management operations are impossible. VMs continue running but no changes, migrations, or monitoring can occur.

VendorPattern: VMWARE_EVENTSeverity: CRITICALConfidence: 92%Remote Hands22 correlated

ESXi Host Purple Screen of Death

PASS

An ESXi 8.0 host experiences a Purple Screen of Death (PSOD) due to a faulty network driver. All 35 VMs on the host crash simultaneously. HA attempts to restart them on surviving hosts but resource contention causes slow recovery.

VendorPattern: VMWARE_EVENTSeverity: CRITICALConfidence: 92%Remote Hands37 correlated

Meraki License Expiry — Features Disabled Across Network

PASS

Meraki Enterprise licenses expire on a Saturday night. Dashboard access becomes read-only. Advanced features including Auto VPN, traffic shaping, and client analytics are disabled. APs continue broadcasting but without content filtering or group policies.

VendorPattern: MERAKI_EVENTSeverity: CRITICALConfidence: 95%Remote Hands23 correlated

Meraki VPN Hub Failure — Auto VPN Mesh Disrupted

PASS

The Meraki VPN concentrator hub at the data center fails, breaking all Auto VPN tunnels in the mesh. 8 branch sites lose connectivity to central resources including file shares, ERP, and VoIP.

VendorPattern: MERAKI_EVENTSeverity: CRITICALConfidence: 85%Remote Hands56 correlated

Meraki AP Fleet Offline — 20 APs Lose Cloud Connectivity

PASS

An upstream switch reboot causes 20 Meraki MR46 access points to lose their uplink simultaneously. APs lose Meraki Dashboard cloud connectivity and fall into local management mode. SSIDs remain broadcasting but no new clients can authenticate via RADIUS.

VendorPattern: MERAKI_EVENTSeverity: CRITICALConfidence: 85%Remote Hands46 correlated

Meraki MX Appliance Failover — Warm Spare Takes Over

PASS

The primary Meraki MX450 appliance at a large campus fails due to a firmware crash. The warm spare MX450 assumes the primary role after a 45-second failover gap. All site-to-site VPN tunnels and client connections are disrupted during the transition.

VendorPattern: MERAKI_EVENTSeverity: CRITICALConfidence: 95%Remote Hands46 correlated

UniFi AP Mass Isolation After Controller Update

PASS

A UniFi controller update introduces a bug that causes all APs to lose their management connection. APs continue serving clients with last-known config, but cannot be managed, updated, or monitored.

VendorPattern: UBIQUITI_EVENTSeverity: CRITICALConfidence: 85%Remote Hands22 correlated

MPLS PE-CE Link Failure Isolating Branch Office

PASS

The MPLS PE-CE link at a remote branch office fails. The branch is completely isolated from the WAN. No backup link exists. 30 employees cannot access any corporate resources.

VendorPattern: MPLS_EVENTSeverity: CRITICALConfidence: 85%Remote Hands26 correlated

SD-WAN Path Failover — Primary ISP Down

PASS

The primary MPLS circuit at a branch office goes down. SD-WAN fails over to the backup broadband link. Voice quality degrades due to higher jitter on the broadband path.

VendorPattern: SDWAN_EVENTSeverity: CRITICALConfidence: 85%Remote Hands36 correlated

Nutanix CVM Crash — Node Storage Offline

PASS

A Nutanix Controller VM (CVM) crashes on one node of a 4-node cluster. All VMs on that node lose local storage access. The cluster attempts to serve I/O from surviving CVMs but performance degrades significantly.

VendorPattern: NUTANIX_EVENTSeverity: CRITICALConfidence: 85%Remote Hands36 correlated

Cisco Port Security Violation — MAC Spoofing

PASS

An attacker spoofs a MAC address to bypass network access control. Port security detects the violation and shuts down the port, but not before the attacker exfiltrates data for 30 seconds.

VendorPattern: CISCO_EVENTSeverity: CRITICALConfidence: 95%Remote Hands9 correlated

OSPF Adjacency Loss Between Core Routers

PASS

An OSPF adjacency between two core routers drops due to a unidirectional fiber failure. Routes are withdrawn, causing a major routing blackhole for half the campus network.

VendorPattern: CISCO_EVENTSeverity: CRITICALConfidence: 85%Remote Hands31 correlated

FortiGate UTM Blocking Critical SaaS Application

PASS

A FortiGuard web filter update incorrectly categorizes a critical SaaS application as malware. All employee access to the application is blocked by the UTM policy.

VendorPattern: FORTINET_EVENTSeverity: CRITICALConfidence: 95%Remote Hands20 correlated

FortiGate HA Cluster Failover

PASS

The primary FortiGate in an HA pair crashes due to a firmware bug, triggering failover to the secondary unit. All active VPN tunnels drop and need to re-establish.

VendorPattern: FORTINET_EVENTSeverity: CRITICALConfidence: 85%Remote Hands37 correlated
PreviousPage 3 of 3

Every scenario is tested against Corax's Neural Engine in a production environment with AI-powered root cause analysis.

Tests run continuously as new infrastructure patterns are added.