Persistent Cyber Training Environment (PCTE) Cyber Range Software

Request for Information (RFI) Title: Persistent Cyber Training Environment (PCTE) Cyber Range Development Software Application Project (Simulated Internet for Cyber Range Training Events [Grey Space]) Issued By: Army Contracting Command Orlando in support of PEO STRI, PM CT2, PdM CRT PCTE Issue Date: 18 June 2026 Response Due Date: 14 July 2026 Introduction The Capability Program Executive Simulation Training, Test and Threat (CPE ST3), Program Manager Cyber Test and Training (PM CT2), Product Manager Cyber Resilience and Training (PdM CRT), Persistent Cyber Training Environment (PCTE) is seeking information from vendors and technology providers regarding a simulated internet capability (often called a Cyber Range or Grey Space Network). The purpose of this RFI is to explore available capabilities with a focus on realism, scale, and control. This RFI is not a solicitation for proposals but rather a means to gather information for potential future procurement. Vendors are encouraged to provide detailed responses that address the requirements outlined below. PCTE is built on a hierarchical, two‑plane architecture: a Control Plane (CP) hosts hardened, accredited services (training portal, help‑desk, dashboards, etc.) and provisions resources, while a logically isolated Event Plane (EP) runs virtual machines, containers, and software‑defined networking to create dynamic cyber‑range environments; the platform is deployed across regional compute/storage (RCS) sites and newer enterprise compute/storage (ENT) sites, leveraging VMware Cloud Foundation, NSX‑T for SDN, F5 edge firewalls, and Red Hat SSO for authentication. Objectives The primary objectives of the simulated internet capability are: To create a realistic and highly scalable cyber range environment / Grey Space Network for cybersecurity training and exercises. To generate realistic background traffic . Capture vendor specify platform's maximum throughput (Gbps) and concurrent session generation limits for background traffic. Assess vendor support for advanced protocol states , specifically: Domain Name System Security Extensions (DNSSEC) validation, Border Gateway Protocol (BGP) hijacking scenarios, Hyper Text Transfer Protocol Secure (HTTPS) inspection/decryption capabilities, and the simulation of localized, autonomous root-CA hierarchies. To integrate with existing and future PCTE on-prem and cloud security tools, network environments, and cloud infrastructure . To ensure high levels of PCTE functionality, security, automation, and reporting capabilities . Concept of Operations 1. Purpose The Simulated Internet within the Persistent Cyber Training Environment (PCTE) provides a realistic, controlled, and isolated network ecosystem that emulates the complexity and unpredictability of the real-world internet. Its primary purpose is to support persistent, scalable, and repeatable cyber training, mission rehearsal, and cyber operations experimentation for military and allied users, without risk to actual networks. 2. Objectives Realism: Accurately mimic internet services, protocols, and user behaviors to provide authentic training scenarios. Isolation: Ensure complete separation from live networks to prevent unintended impacts or data leakage. Scalability: Support a wide range of training events, from small team exercises to large-scale, multi-organization operations. Repeatability: Enable rapid reconfiguration and reset of the environment for multiple training iterations. Observability: Provide robust monitoring, logging, and after-action review capabilities. 3. Operational Overview 3.1 Environment Composition Core Internet Backbone: Simulated ISPs, backbone routers, and peering points. Public Services: Emulated DNS, web, email, social media, and cloud services. User Population: Automated user agents generating realistic traffic and behaviors. Adversary Infrastructure: Simulated threat actors, botnets, and command-and-control (C2) servers. Defensive Infrastructure: Blue team tools, sensors, and monitoring systems. 3.2 User Roles Trainees: Blue, red, and purple team members conducting operations. Instructors/Controllers: Scenario designers, exercise controllers, and observers. Support Staff: System administrators and technical support personnel. 4. Key Functions 4.1 Scenario Generation Dynamic Topology Creation: Automated deployment of network topologies and services based on exercise requirements. Service Emulation: Realistic simulation of internet services (web, DNS, email, etc.) with configurable vulnerabilities and behaviors. User Simulation: Automated generation of benign and malicious user traffic. 4.2 Exercise Execution Isolated Operations: All activities occur within the simulated environment, with no external connectivity. Attack/Defense Play: Red teams conduct offensive operations; blue teams defend; purple teams coordinate and analyze. Live Monitoring: Real-time visibility into network and host activities for both participants and observers.