ARENA

Topology builder

Draw the network. Arena builds it.

Trainers and admins compose labs on a canvas: virtual machines, routers, firewalls and isolated networks, wired port to port and deployed to Proxmox in one click. What you draw is what gets provisioned.

Available on EnterpriseHow ranges fit the platform →
vpn-entry10.161.0.0/16edge-rtr-01nexus9300v · 4 ports1/11/21/31/4dmz10.10.20.0/24internal10.10.30.0/24web-01ubuntu 22.04win-dc01server 2019db-01postgres 15jump-01kali rolling
draft · nothing provisioned yet

Drag, drop, wire

Place machines, routers and networks on the canvas and connect them port to port. What you draw is what gets provisioned.

Real appliances

Boot vendor router and firewall images, then push startup config over the serial console, with no guest agent required.

Isolated by default

Each network becomes its own SDN segment with static addressing, so two teams can run the same lab without ever seeing each other.

Version it like code

Every topology exports to the Arena DSL or YAML, so a lab can be reviewed, diffed and re-imported on another deployment.

Building blocks

Everything a range is made of.

The parts on the canvas map one to one onto what gets provisioned.

Virtual machine
A host in the range, from an image you choose. Flags are placed on machines.
Router
Boot vendor router images and push startup config over the serial console, with no guest agent required.
Firewall
Vendor firewall images, configured the same way as routers.
Network
An isolated SDN segment with static addressing and its own gateway.
VPN entry
The operator’s way in: an address pool and the routes pushed to everyone who connects.

From canvas to range

Four moves to a running lab.

No scripts to maintain and no hand-built VMs.

    01

    Draw

    Place machines, routers, firewalls and networks on the canvas.
    02

    Wire

    Connect them port to port. Each network becomes its own segment.
    03

    Deploy

    Provision the whole topology to Proxmox in one click.
    04

    Export

    Save it as Arena DSL or YAML to review, diff and re-import elsewhere.

Version it like code

A lab is a file you can review.

Every topology exports to the Arena DSL or YAML, so a lab can be reviewed, diffed and re-imported on another deployment.

# dmz-pivot · example export, shortenedlab: dmz-pivottarget: proxmoxnodes:  - name: vpn-entry    kind: vpn    pool: 10.161.0.0/16    push_route: 10.10.0.0/16  - name: edge-rtr-01    kind: router    template: nexus9300v    ports: { Eth1/1: dmz, Eth1/2: internal }  - name: dmz    kind: network    subnet: 10.10.20.0/24  - name: web-01    kind: vm    image: ubuntu 22.04    flags: 2

Questions

Asked before you are.

Who can use the topology builder?

It is part of Enterprise, together with custom challenge authoring, so trainers and admins can build the ranges their teams train on.

Where do labs run?

Topologies deploy to Proxmox. Each network becomes its own SDN segment with static addressing.

Can two teams run the same lab at once?

Yes. Segments are isolated by default, so two teams can run the same topology without ever seeing each other.

Can I move a lab to another deployment?

Yes. Export it to the Arena DSL or YAML and re-import it on another Arena deployment.

Keep reading

Step through the gate.

Make an account, open a challenge, find the way in.

Get startedSign in