Deploy in Exoscale

Learn how to deploy your first TrapEye instance in Exoscale. This guide focuses on the manual deployment through the Exoscale portal, but the same workflow applies when using IaC tools such as Terraform or the Exoscale CLI.

Create a New Instance

Navigate to Compute → Private Networks in the Exoscale Portal and choose the private network where the TrapEye deception engine will be deployed. Write down the name and zone of the private network, you will need this information during the instance creation process.
Go to Compute → Instance and create a new instance.
Choose a name for your virtual machine. Then click on the Commercial Template icon, search for the TrapEye template, and select it from the list.
Select the zone that corresponds to your chosen private network. Then choose a size for your instance using the recommended values below:
Resource Minimum Value Recommended Value
CPU 1 vCPUs 2 vCPUs
Memory 1024 MiB (1 GB) 4096 MiB (4 GB)
Disk 10GB 10GB
In the instance configuration section:
- Do not configure SSH keys.
- For Public IP Assignment, select: inet4 (IPv4).
Select the private network identified in the earlier steps.
TrapEye agents are specifically designed to support only one network interface per instance. This design ensures attackers cannot use a trap to pivot or move laterally within your environment.
When multiple network interfaces are present, TrapEye automatically detects and prioritizes binding to the private network interface over any public interface.
You may select the default Security Group. Since TrapEye is only intended to interact with your internal (private) network, there is no requirement to expose the instance via ingress rules.
From the TrapEye Platform, go to Management → Installation and copy the values for url, entity_uuid, and auth_token.

Resource	Minimum Value	Recommended Value
CPU	1 vCPUs	2 vCPUs
Memory	1024 MiB (1 GB)	4096 MiB (4 GB)
Disk	10GB	10GB

Replace the placeholder values in the template below with your TrapEye configuration parameters, then paste the final result into the User Data field.

#cloud-config
write_files:
  - path: /etc/trapeye/auth-config.toml
    permissions: '0600'
    content: |
      url = "INGESTION-URL-HERE"
      entity_uuid = "ENTITY-UUID-HERE"
      auth_token = "ENTITY-TOKEN-HERE"

Example:

Config Menu

Click Create to provision the virtual machine.

Setup complete

Your TrapEye virtual machine has been successfully deployed in Exoscale.

It will now appear in the Devices section of the TrapEye Deception Platform, and you will begin receiving real-time alerts as soon as any activity is detected.