[deploy][M2] Deception at home + intel loop #168

New issue

Open

opened 2026-07-11 13:44:20 +00:00 by vxfemboy · 0 comments

vxfemboy commented

2026-07-11 13:44:20 +00:00

(Migrated from github.com)

Milestone tracker. Run the deception firewall in front of Incus on tenant/hosting space only (never infra/anycast IPs), with believable personas, a tarpit tier, and the honeypot feeding the mitigation plane.

Features:

#12 Deception → mitigation intel loop (the point of one box)
#25 Coherent per-IP personas (extends banner fast-flux) — on the deception epic
#26 Tarpit tier (extends the generic emulator) — on the deception epic
Deception container scoped to tenant IPs (shares #6)

Milestone tracker. Run the deception firewall in front of Incus **on tenant/hosting space only** (never infra/anycast IPs), with believable personas, a tarpit tier, and the honeypot feeding the mitigation plane. **Features:** - [ ] #12 Deception → mitigation intel loop (the point of one box) - [ ] #25 Coherent per-IP personas (extends banner fast-flux) — on the deception epic - [ ] #26 Tarpit tier (extends the generic emulator) — on the deception epic - [ ] Deception container scoped to tenant IPs (shares #6)