Task #15: The Frostwall Protocol — GRE Tunnel Security Architecture #41

New Issue

mkrause612 · 2026-03-19T14:19:40-05:00

mkrause612 commented

2026-03-19 14:19:40 -05:00

The Frostwall Protocol — GRE Tunnel Security Architecture
Time: 3-4 hours
Status: DEPRIORITIZED — March 14, 2026
Priority: LOW — no active DDoS problem, email unblocked via Billing VPS
Documentation: docs/tasks/frostwall-protocol/

Custom DDoS protection using GRE tunnels from Command Center to TX1/NC1. Hides real IPs, protects email reputation.

Why urgent now: Email is needed soon — Holly staff email, staff comms, subscriber notifications. Frostwall → Mailcow is the only path to get there. This is the critical blocker.

Core Components:

GRE tunneling (encrypted links)
1-to-1 NAT/DMZ forwarding
Iron Wall UFW rules
IP hierarchy (scrubbing → backend → binding)

Blocks: Mailcow (email) → Holly email, staff email, subscriber comms, all Tier 2+ infrastructure
Deployment doc: https://docs.google.com/document/d/12Kh-AhUgJLOJrBgIjMiGi3xRZH1basRz

Full docs: docs/core/tasks.md or task directory

The Frostwall Protocol — GRE Tunnel Security Architecture **Time:** 3-4 hours **Status:** DEPRIORITIZED — March 14, 2026 **Priority:** LOW — no active DDoS problem, email unblocked via Billing VPS **Documentation:** `docs/tasks/frostwall-protocol/` Custom DDoS protection using GRE tunnels from Command Center to TX1/NC1. Hides real IPs, protects email reputation. **Why urgent now:** Email is needed soon — Holly staff email, staff comms, subscriber notifications. Frostwall → Mailcow is the only path to get there. This is the critical blocker. **Core Components:** - GRE tunneling (encrypted links) - 1-to-1 NAT/DMZ forwarding - Iron Wall UFW rules - IP hierarchy (scrubbing → backend → binding) **Blocks:** Mailcow (email) → Holly email, staff email, subscriber comms, all Tier 2+ infrastructure **Deployment doc:** https://docs.google.com/document/d/12Kh-AhUgJLOJrBgIjMiGi3xRZH1basRz **Full docs:** `docs/core/tasks.md` or task directory

mkrause612 added the

area/operations labels 2026-03-19 14:19:40 -05:00

mkrause612 added this to the Firefrost Operations project 2026-03-19 14:42:10 -05:00

mkrause612 referenced this issue

2026-03-19 15:10:55 -05:00

Task #41: Blueprint Extension Installation — Node Usage Status #59

mkrause612 changed title from ~~Task #7: The Frostwall Protocol — GRE Tunnel Security Architecture~~ to Task #15: The Frostwall Protocol — GRE Tunnel Security Architecture

2026-03-19 15:11:04 -05:00

mkrause612 referenced this issue

2026-03-20 21:05:22 -05:00

Task #1: Builder Rank & Holly Tool Setup #86

mkrause612 referenced this issue

2026-03-21 02:29:15 -05:00

Task #41: Blueprint Extension Installation — Node Usage Status #125

mkrause612 referenced this issue

2026-03-21 02:33:03 -05:00

Task #1: Builder Rank & Holly Tool Setup #154

mkrause612 referenced this issue

2026-03-21 02:33:55 -05:00