go-httpbin

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## go-httpbin - Hardened HTTP Testing Service by cloudimg

This is a repackaged open source software product with additional charges for cloudimg support services.

go-httpbin is a fast, dependency-free HTTP request and response testing service - a Go implementation of the well-known httpbin. It exposes a rich set of endpoints for exercising and debugging anything that speaks HTTP.

### What You Get

A fully configured, production-hardened AMI with go-httpbin running as a systemd service behind nginx. A working test endpoint answers requests within minutes of launch - no configuration required.

### Key Endpoints

• Echo endpoints (/get, /post, /put, /delete) that reflect method, headers, query arguments, and body back as JSON
• Status code endpoints (/status/{code}) returning any HTTP status you request
• Utility endpoints for headers, client IP, redirects, delays, streaming, gzip, deflate, basic auth challenges, cookies, UUIDs, and random bytes

### Who This Is For

go-httpbin is the tool you point your HTTP clients, SDKs, proxies, API gateways, load balancers, and CI pipelines at when you need a predictable, controllable server on the other end. Verify your client handles a 429 with a Retry-After header, a slow response, a chunked stream, or a redirect chain correctly - go-httpbin gives you an endpoint for each scenario with no external dependencies and no shared public rate limits.

### Architecture and Security

Secure by default and never an open reflector. go-httpbin binds to the loopback interface only. nginx is the single network-facing surface, terminating TLS on port 443 with a per-instance self-signed certificate and fronting the entire service with HTTP basic authentication. An unauthenticated health endpoint is available for load balancer and liveness probes, and plain HTTP on port 80 redirects to HTTPS.

Nothing secret is baked into the image. On first boot, a one-shot service generates a unique HTTP basic auth password for the user "httpbin" and a unique self-signed TLS certificate, then writes credentials to a root-only file. This prevents the service from being abused as an open reflector or SSRF relay.

### Key Capabilities

• Request inspection endpoints echoing method, headers, arguments, and body as JSON
• Arbitrary status code responses for testing error handling and retries
• Configurable delays, streaming, chunked, and drip responses for timeout and backpressure testing
• Gzip, deflate, and encoding endpoints
• Redirect, cookie, cache, and basic auth challenge endpoints
• Single static binary with no runtime dependencies - starts instantly and uses minimal memory

### AWS Integration

Deploy on any EC2 instance type. The lightweight Go binary runs efficiently even on t3.micro instances. Use with Application Load Balancers via the unauthenticated health check endpoint. Integrate into AWS CodePipeline or CodeBuild workflows for automated HTTP client testing.

### Get Started

1. Launch the AMI on your preferred EC2 instance

2. Retrieve the per-instance credentials from the root-only file

3. Point your HTTP client, test suite, or CI job at the HTTPS endpoint with the basic auth user and password

cloudimg engineers provide 24/7 support and can help you wire go-httpbin into your test and CI workflows, front it with a real domain and trusted certificate, and tune it for your environment.