Generate realistic SaaS, East-West Custom TCP, and Enterprise Multicast (IGMPv3/PIM) traffic. Replay stateful PCAPs, inspect live packets in the browser, measure sub-second failover convergence, automate VyOS underlay routers, and orchestrate multi-branch labs from a single container.
Stigix deploys seamlessly across Datacenters, Branch sites, and Cloud instances. A Leader node orchestrates Central Global Provisioning, while every peer acts concurrently as a traffic sender, custom TCP/Multicast listener, and SLA responder.
"I built this after years of writing one-off scripts for SD-WAN POCs and never finding a single lab platform that matched what I see in the field."
Every new POC used to mean another set of throwaway scripts to generate SaaS traffic, validate URL/DNS security, or time tunnel convergence. Nothing reusable, and nothing that correlated underlay router impairments with overlay application telemetry.
Stigix brings everything into one container: realistic North-South and East-West traffic generation, multicast overlay validation, live packet inspection, security policy testing, and sub-second failover measurement.
Problems it solves
.pcap export. Pair with the Stateful PCAP Replay engine to replay .pcap/.zip captures across SASE and audit enforcement verdicts (Bypass, TCP RST, Block Page).STX-...), sync 8 config bundles from the Leader, proxy any branch UI via Remote View, and trigger 1-click Fleet Remote Upgrades. Includes an interactive CLI and a FastMCP server exposing 89 tools to Claude Desktop for autonomous testing and executive report generation →Generate weighted SaaS traffic across WAN circuits, inject deterministic VyOS underlay latency or link failures, and measure exact tunnel switchover times with 1000 PPS UDP probes and exportable PoC report cards.
Emulate ERP/POS/SCADA TCP workloads with 8 server degradation modes to prove Network RTT vs Server Response Time isolation, or validate IGMPv3 & PIM-SM multicast replication and DSCP preservation across SD-WAN branches.
Compare logical SD-WAN overlay tunnels and SASE ServiceLinks against physical VyOS router ports on a single canvas. Inspect live wire packets in the browser with Web Wireshark to isolate transport vs policy issues.
Validate URL filtering, DNS sinkholing, EICAR, C2 beacons, and AI DLP policies, or replay real-world .pcap/.zip attack captures across SASE to verify firewall enforcement verdicts in real time.
Stream G.711/G.729 RTP calls between branches to benchmark MOS scores under congestion, while placing 100+ virtual IoT devices on the LAN via Scapy DHCP/ARP to validate device profiling and micro-segmentation.
Join 10+ branch nodes to a central Leader with a single token command, distribute standardized test bundles globally, switch UI context to any remote branch over NAT, and generate executive PDF reports via FastMCP.
flows query command tracing end-to-end network sessions against the Prisma Flow Browser to verify active circuit path selection (BR8-INET1 to DC1-INET).
Real-world SASE & SD-WAN validation studies produced from live lab scenarios orchestrated by Stigix and analyzed with AI assistants via FastMCP.
End-to-end IGMPv3 and PIM-SM/SSM multicast validation between Datacenter DC1 and Branch BR8 over Prisma SD-WAN, covering DSCP preservation, WAN impairment resilience, and blackhole diagnostics.
How Prisma SD-WAN and Stigix demonstrated automatic failover in ~3 minutes during a silent internet breakout failure where Layer 3 BFD keepalives remained completely blind.
Architectural deep-dive decomposing end-to-end user latency into Network RTT and Server Response Time (SRT) without agents or SSL decryption using dual synchronized telemetry.
Stigix ships a fully interactive terminal console inside the container with support for Custom Apps, Multicast, Global Provisioning, DEM probes, and Controller mesh management.
stigix-cli --exec "<command>". Full command history is saved to JSON for auditability and compliance.