Every user-facing flow in a microservices platform depends on dozens of downstream services. When teams only test the happy path, a single dependency failure can cascade into a major outage — and we've lived through that at trivago. Knowing the problem isn't enough. SRE and platform teams need a safe way for developers to inject failures before production does it for them — without breaking shared environments or paging the whole on-call rotation. In this talk we'll share how we built Emulate Fault: a developer-facing fault injection tool powered by Istio, our service mesh. We'll walk through the architecture — how we deliver personal, isolated failures (timeouts, errors, latency) scoped to a single session — and what resilience patterns on the application side actually make a difference when dependencies misbehave. Using a real incident and bugs we caught with this approach, you'll leave with practical ideas for bringing controlled, mesh-backed fault injection to your own platform — before a 3 AM pager proves the gaps for you.
Armin Aminian is an SRE at trivago, where he helps teams build and operate resilient systems across a large microservices platform serving millions of users.
