NATO UNCLASSIFIED // ILLUSTRATIVE — CONCEPT OF EMPLOYMENT // NATO SOFCOM
eSNS
ENHANCED SHADOW NET FOR SPECIAL OPERATIONS FORCES
NATO SOFCOM · TACTICAL → OPERATIONAL → STRATEGIC · ZERO-TRUST · HYPERSCALE · COMMERCIAL CLOUD · TRANSPORT-AGNOSTIC
SCENARIO REF / EX-NORTHERN-FORGE-26
DTG /
22 MAY 2026 · 14:08:31Z
LINK /
ACTIVE — 5G · MILSATCOM · LEO · MESH
POSTURE /
SHAPING — AMBER
RANGE FROM FLOT
1000+ km
STRATEGIC HQ
500 km
OVER THE HORIZON
↕ logical
eSNS CLOUD ENV.
zero-trust
PERIMETER GATES
100 km
OPERATIONAL — SOTF / COY
30 km
FIRES / EW BUBBLE
0 km · FLOT
SOF EDGE
UKRAINE → NATO
LL → LA
Lessons Applied
From the Ukrainian tactical network
to NATO doctrine.
LA · 01
Commercial cloud as warfighter platform
Hyperscale carries the load. No bespoke iron at the edge.
UA proved scale; NATO inherits the pattern.
LA · 02
Smartphone-as-EUD
COTS handset is the operator's terminal —
attested, hardened, replaceable, deniable.
LA · 03
Transport-agnostic by design
5G, LEO, MILSATCOM, mesh — whichever
link survives, the mission keeps moving.
LA · 04
Zero-trust, not perimeter trust
Every request authenticated, every device
attested. Compromise contains itself.
LA · 05
Data sovereignty by containment
Common tools, partitioned data — by
operation, by nation, by JOA.
LA · 06
Edge → strategic in one fabric
The team on target and the staff in
Mons see the same COP. No re-keying.
SYMBOLOGY · APP-6
Friendly unit
Hostile element
Zero-trust gate
eSNS data flow
STRATEGIC · OVER-THE-HORIZON
SHAPE
MONS · BE
NATO SOFCOM
MONS · BE
NATIONAL SOF HQ
FRAMEWORK NATION
LEO · COMMERCIAL
eSNS CLOUD ENVIRONMENT
ZERO-DAY COMMS · HYPERSCALE · COMMERCIAL · DATA SOVEREIGNTY
● ZERO-TRUST ACTIVE
MISSION TOOLS · COMMON TO ALL TENANTS
COMMS
Element
video · voice · text · translate
VIDEO
Compass
live streaming
FILES
Nextcloud
file sharing
SA
TAK Server
geo / blue force
COP
Common Op Pic
all-source
ANALYTICS
LightHouse
data visualization & fusion
DATA SOVEREIGNTY · CONTAINERIZED TENANTS · COMMON TOOLS · PARTITIONED DATA
TENANT · BY OPERATION
● ISOLATED
OP TRIDENT REACH
Cross-nation, single named operation
AD ID telemetry
Commercial satellite — EO/SAR
Edge sensors — UGS / UAS
CTD — counter-threat data
UTILIZATION
TENANTS
14 nations
RETENTION
OP-bounded
KEY MGMT
OP-owned HSM
TENANT · BY COUNTRY
● ISOLATED
NATIONAL TENANCY
Sovereign data per nation, shareable on demand
Per-nation tactical sensors
National intel feeds — sanitized
Domestic comms / chat archives
CTD — national caveat
FLAGS
FRA
DEU
LTU
POL
NOR
CAVEAT
REL TO partner
KEY MGMT
National HSM
RESIDENCY
EU regions only
TENANT · BY JOA
● ISOLATED
JOA — EASTERN FLANK
Joint Operations Area, all participants
Theater-wide ISR mosaic
Joint sensor fusion — TAK / COP
Allied liaison cells
CTD — theater watchlist
BOUNDARY
JOA-E · live
CONTRIB
7 nations · 1 op
SHARING
ABAC · need-to-know
KEY MGMT
JOA HSM · split
Common tools · partitioned data — one fabric, many sovereignties.
ZERO-TRUST PERIMETER · EVERY REQUEST AUTHENTICATED
CLOUDFLARE
VPN · WARP tunnel · DDoS · TLS termination · identity-aware proxy
edge-to-cloud encrypted transport
MAAS360
UEM · device enrollment · attestation · remote wipe · app whitelist
EUD posture & lifecycle
TRELLIX
XDR · endpoint detection & response · behavioral telemetry · IOC hunt
threat detection on-device
OPERATIONAL · 30–100 km
SOTF · A
FWD MISSION HUB
JFO
Joint Fires
CALL FOR FIRE
RDR
EN RADAR
EARLY WARN · SURV
ADA
EN ADA
SAM · MR-LR
EW
EN EW EMITTER
JAM · GNSS · COMMS
TACTICAL · 0–30 km · SOF EDGE
FLOT
EUD
COTS handset
attested · MAAS360
SOF TEAM · FORWARD
SR · DA · ISR · 4 PAX
UAS · ISR
UAS · STRIKE
UAS · LOITER
EUDS ENROLLED
1,500
eSNS · hyperscale commercial cloud · zero-trust · transport-agnostic · tactical edge → strategic HQ · over-the-horizon · NATO SOFCOM
CONOPS · v3.4 · ILLUSTRATIVE
FRAME 01 / 01 · NORTHERN-FORGE-26