Cyber RangeTechnical Documentation

How the platform is built, secured, operated and scored, written from the code itself.

Hands-on labs, built on demand

Each student gets a private set of three Linux containers (Kali, meta, dvwa) on its own OVN network, created by the provisioning API in about a minute and removed when the scenario's time limit (30 to 60 minutes) runs out.

Lab infrastructure

Four scored scenarios

Network reconnaissance, SQL injection and XSS, SIEM alert triage, and vulnerability hardening. Progress is detected automatically from the lab itself.

Scenario lifecycle

Three roles, enforced twice

Student, Instructor and Admin come from Keycloak realm roles, behind a password plus a required authenticator code. The portal hides and redirects; the API re-checks every request by introspecting the token.

Roles and RBAC

Defensive by design

No inbound ports except SSH from one address, services bound to private addresses, a Cloudflare Tunnel for public access, and a documented threat model.

Security architecture

Who this is for

This site is the team's technical reference for the Cyber Range capstone. Use it to understand, explain, troubleshoot and defend the system during the capstone presentation and oral defense.

New to the project? Start with How the System Works. It explains everything in plain language first, then technically.
Prefer to watch? The explainer videos cover the platform, each role and each scenario in about a minute each.
Preparing for the panel? Go to the Technical Defense Cheat Sheet.
Operating the host? Use Deployment and Troubleshooting.

How to read these pages

Accuracy rules used on this site

Every major statement names the source file it was verified in (paths are relative to the repository root).
Anything that could not be verified from the repository is marked Unknown / Needs Verification.
Where the code and older documentation disagree, the code is treated as the source of truth and the difference is flagged. The full list is on Accuracy Notes & Open Questions.

Snapshot, not live state

These pages document main at commit 6971373 (2026-10-23, merge of pull request 314; includes everything through pull request 315). Everything described here is merged. Settings on the live host can differ from the repository; those differences are called out where known. See What changed in this update for the changes since the previous snapshot (220e6d3).

The platform in one picture

Details for every box are in System Architecture.