capirca
Multi-platform ACL generation system (by google)
fwbuilder
A clone of the SourceForge fwbuilder repostiory (by fwbuilder)
| capirca | fwbuilder | |
|---|---|---|
| 9 | 2 | |
| 753 | 274 | |
| 1.7% | 1.5% | |
| 5.6 | 4.2 | |
| 15 days ago | about 1 month ago | |
| Python | C++ | |
| Apache License 2.0 | - |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
capirca
Posts with mentions or reviews of capirca.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-03-13.
-
Automated ACL Configuration
Capirca could help with some of that https://github.com/google/capirca
- Is there any Linux CLI app I can use to compress a huge list of CIDRs to their optimum form?
-
Aerleon a vendor agnostic firewall management system
Great question! Fortinet themselves have an open PR on Capirca which you can view here https://github.com/google/capirca/pull/222 It has been in a stalemate for years now because of CLA issues. I reached out to people I know there while I was quietly forking and I get the feeling they have lost steam dealing with Google on this which I don't blame them for. I pinged them again since we launched and if I don't hear anything I will begin to make my own since I know lots of people want it.
-
centralized Linux firewall management
Sadly there's not much choice for Open Source software. FWBuilder is good (also supports Cisco and Procurve devices as well as iptables) but rather old. Capirca is actively maintained and supports a lot of target devices. Sadly I think that's about it for the open source policy management tools.
-
What's everyone using for centralized management and deployment of switch and router ACLs?
Have you looked at Capirca for the multi-vendor ACL generation part of it?
-
Capirca
Capirca uses common definitions of networks, services and high-level policy files to generate network ACLs. This multi-platform solution was originally developed by Google for their own use but is now open source. rankinrez finds it a good way to document firewall rules and objects.
- A Good Way to Document Firewall Rules & Objects?
-
Netbox for Firewall Rules?
You could use capirca https://github.com/google/capirca I wrote a plugin that allows you to manage the ACLs in NetBox. See https://github.com/991jo/netbox_capirca_plugin Warning: The Features are currently very limited and it does not yet work with NetBox 3. The code is almost finished for 3.1, I will probably be able to release it next week.
- ACL and Network Flow Visualization Tool
fwbuilder
Posts with mentions or reviews of fwbuilder.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-12-29.
-
centralized Linux firewall management
A good way would be source control (git) combined with configuration management (ansible, puppet, chef, etc). Perhaps throw in a CI/CD pipeline. But, if you don't have the interest, will, or time to learn these tools and techniques you could check out firewall builder.
-
Finding "obsolete" rules in iptables
One can use https://github.com/fwbuilder/fwbuilder - it is able to import iptables rules and "compile" them afterwards which will lead to errors once it finds a rule "shadows" another one.
What are some alternatives?
When comparing capirca and fwbuilder you can also consider the following projects:
netbox_capirca_plugin - A Plugin to manage ACLs and Firewall rules with capirca inside NetBox.
jc - CLI tool and python library that converts the output of popular command-line tools, file-types, and common strings to JSON, YAML, or Dictionaries. This allows piping of output to tools like jq and simplifying automation scripts.
netbox-acls - A NetBox plugin for Access Lists based off of the NetBox Plugin Demo
nftables - Ansible role to manage Nftables rules and packages.
iprange - manage IP ranges
cli - Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)
aerleon - Multi-platform ACL generation system