Task #15: The Frostwall Protocol — GRE Tunnel Security Architecture #175

New Issue

mkrause612 · 2026-03-21T02:33:37-05:00

mkrause612 commented

2026-03-21 02:33:37 -05:00

Task #15: The Frostwall Protocol — GRE Tunnel Security Architecture

Time Estimate: 3-4 hours

Documentation: docs/tasks/ (see operations manual)

Time: 3-4 hours
Status: DEPRIORITIZED — March 14, 2026
Priority: LOW — no active DDoS problem, email unblocked via Billing VPS
Documentation: docs/tasks/frostwall-protocol/

Custom DDoS protection using GRE tunnels from Command Center to TX1/NC1. Hides real IPs, protects email reputation.

Why urgent now: Email is needed soon — Holly staff email, staff comms, subscriber notifications. Frostwall → Mailcow is the only path to get there. This is the critical blocker.

Core Components:

GRE tunneling (encrypted links)
1-to-1 NAT/DMZ forwarding
Iron Wall UFW rules
IP hierarchy (scrubbing → backend → binding)

Blocks: Mailcow (email) → Holly email, staff email, subscriber comms, all Tier 2+ infrastructure
Deployment doc: https://docs.google.com/document/d/12Kh-AhUgJLOJrBgIjMiGi3xRZH1basRzv9Pa_-x1t_0/edit

Source: docs/core/tasks.md (Task #15)

### Task #15: The Frostwall Protocol — GRE Tunnel Security Architecture **Time Estimate:** 3-4 hours **Documentation:** `docs/tasks/` (see operations manual) --- **Time:** 3-4 hours **Status:** DEPRIORITIZED — March 14, 2026 **Priority:** LOW — no active DDoS problem, email unblocked via Billing VPS **Documentation:** `docs/tasks/frostwall-protocol/` Custom DDoS protection using GRE tunnels from Command Center to TX1/NC1. Hides real IPs, protects email reputation. **Why urgent now:** Email is needed soon — Holly staff email, staff comms, subscriber notifications. Frostwall → Mailcow is the only path to get there. This is the critical blocker. **Core Components:** - GRE tunneling (encrypted links) - 1-to-1 NAT/DMZ forwarding - Iron Wall UFW rules - IP hierarchy (scrubbing → backend → binding) **Blocks:** Mailcow (email) → Holly email, staff email, subscriber comms, all Tier 2+ infrastructure **Deployment doc:** https://docs.google.com/document/d/12Kh-AhUgJLOJrBgIjMiGi3xRZH1basRzv9Pa_-x1t_0/edit --- --- **Source:** `docs/core/tasks.md` (Task #15)

mkrause612 added the

area/billing area/email area/networking for/holly labels 2026-03-21 02:33:37 -05:00

Sign in to join this conversation.