Docs/Cloud Sync

Cloud Sync

Paid Feature

Connect your TarPit.pro agent to the cloud platform for centralized monitoring and fleet management.

What Cloud Sync Provides

Geo-Location

See attacker countries, cities, and ISPs

Attack History

Browse and search past attacks

Fleet Bans

Sync bans across all your agents

Real-time Dashboard

Live attack feed with WebSocket

Cloud Tiers

TierPriceStorageRetention
Free$0100 attacks24 hours
StarterSee pricing10,000 attacks30 days
Pro$25/mo100,000 attacks90 days

All paid plans are billed annually. Add +$1/mo for +10,000 attack storage.

Getting Started

1. Create an Account

Sign up at tarpit.pro/register and choose your tier.

2. Get Your Agent Token

After signing up, go to Dashboard → Settings → Agent Tokens and create a new token. Copy the token, it will only be shown once.

3. Activate Your Agent

tarpit-pro activate <your-token>

You should see:

License activated successfully!
Tier: Starter
Company: Your Company Name
Agent ID: agent_abc123

4. Restart the Agent

sudo tarpit-pro service restart

How Cloud Sync Works

┌─────────────┐     ┌──────────────────┐     ┌─────────────┐
│   Agent     │────▶│  Receiver Node   │────▶│  Central    │
│  (Your VPS) │     │  (Geo-nearest)   │     │    API      │
└─────────────┘     └──────────────────┘     └─────────────┘
                              │                      │
                              │      NATS mTLS       │
                              └──────────────────────┘
                                         │
                                         ▼
                                  ┌─────────────┐
                                  │  PostgreSQL │
                                  │  + Vault    │
                                  └─────────────┘
  • Agent: Runs on your server, catches attacks
  • Receiver: Low-latency ingestion (EU, US, Asia)
  • NATS: Encrypted message bus between nodes
  • Central API: Stores attacks, serves dashboard

Offline Resilience

If your agent loses connectivity to the cloud:

  • Attacks are buffered locally in SQLite
  • Local IP banning continues to work
  • When connectivity returns, buffered attacks sync automatically
  • No data is lost during outages

Fleet Management

Deploy multiple agents under one account. When one agent bans an IP, it can propagate to all others:

View Fleet

tarpit-pro fleet list

View Fleet Bans

tarpit-pro fleet bans

Force Sync

tarpit-pro fleet sync

Deactivating Cloud Sync

To revert to free tier (local-only mode):

tarpit-pro deactivate

Your agent will continue working locally with iptables. Cloud features will be disabled.