MÓDULO PERSONAS.Art

100 personas / 20 countries / real NREN public IPs.

Function

Synthetic webservers that the DUT inspects. 20 Synthetic Personas (VLANs 101-120, archetypes real-app/skin/mock/har-replay) + 10 Cloned Personas (VLANs 200-209, real public websites cloned).

Hybrid plane: persona pods are DATA (serve test traffic); controller logic is MGMT (UI orchestration + CPOS tier adapter).

Identity

Element	Value
Plane	hybrid (controller MGMT, pods DATA)
Internal code	persona-* pods + persona controller
K8s namespace	persona-<name> per Synthetic; clone-persona-{1..10} per Cloned
Network	VLAN 101-120 (Synthetic), 200-209 (Cloned)
Public IPs	200.130.x.x range (real RNP edge link space)

Operator controls

• /admin/personas — list / status per persona
• /admin/clone/persona-slots/{n} — Cloned persona orchestration via PATCH (operator picks site to clone)
• Per-persona TLS profile (default: TLS 1.3 + ECDHE+AEAD only)

Key telemetry

• persona_caddy_requests_total{persona, host}
• persona_caddy_tls_handshakes_total{tls_version}
• persona_pod_status{persona} — Running / Pending / Failed

Notes

Personas serve real public IPs (200.130.x.x). PURE Test Kind in production mode requires PIE-PA 3-layer defense (per ADR 0021) to mitigate MITM-class risk.

Related

• ADR 0007
• Memory: project_ip_addressing_v43