FAQ

FAQ

Do I need anything installed first? Yes, and these are separate from redStackPRO: Terraform, Python 3.8 or newer, the AWS CLI or the gcloud CLI (whichever cloud you target), and a cloud account with credentials and billing set up. (ssh and tar are needed too; they ship with macOS, Linux, and Git for Windows.) redStackPRO generates the files; it does not install any of these for you. See Getting Started and Deploying a Range, and Cloud Prerequisites for the permissions your cloud identity needs and CLI setup quick-starts.

Does redStackPRO hold my cloud credentials? No. It generates a working directory and hands it to you. You drive the deploy yourself, under your own credentials: Terraform runs on your machine, and deploy.sh installs and runs Ansible on your jumpbox. See Concepts.

Which providers can I deploy to? GCP and AWS, tested end to end for both target ranges and attack infrastructure. Azure, Proxmox, and ESXi are on the roadmap, not yet supported. Proxmox and ESXi cannot allocate a public address on their own, so redirector reachability there depends on a network redStackPRO does not control. See Providers.

Can multiple operators share one deployment? Yes, on an Offense (attack infrastructure) jumpbox. Name your operators (handle plus role) and each gets their own Guacamole portal login on the shared lab password. Set the jumpbox access_mode to wireguard or openvpn and every operator also gets a personal VPN credential generated on the jumpbox at apply. Add or remove a teammate on a running box with sudo rsp-operator add <handle>. A Defense range ignores operators and access_mode and keeps the plain public portal. See Deploying a Range.

What is the difference between the canvas and the topology? The canvas is the surface you work on. The topology is what you build on it, the infrastructure as nodes and edges. The topology is the thing that compiles and deploys.

Can I edit a shipped lab? Yes. A lab opens read-only so the baseline is safe. Clone it and the copy is yours to change. See Labs.

Where do the walkthrough solutions come from? They ship with the labs, under docs/solutions/ in the repo (one folder per lab, linked from Labs). Each one is generated from, or hand-authored against, the same topology that gets deployed, so it matches what you get. redStackPRO is a validation range, so the solutions are references, not spoilers.

Docker or from source? Docker is the fastest way to run the canvas. From source is for developing on redStackPRO itself. See Getting Started.

Can I use Postgres instead of SQLite? Yes. The Compose file has an optional Postgres profile for a shared deployment. SQLite is the default for a single user.

Why does the compiler refuse my redirector? It needs a real domain. A redirector answers to the internet by name, and nothing can invent that. Supply one with --hostname or in the inspector. See Redirectors and Cover Stories.

Is it free? Yes, MIT. The GOAD range blueprints are derived from GOAD and carry GPLv3.