capirca
Multi-platform ACL generation system (by google)
netbox_capirca_plugin
A Plugin to manage ACLs and Firewall rules with capirca inside NetBox. (by 991jo)
| capirca | netbox_capirca_plugin | |
|---|---|---|
| 9 | 1 | |
| 753 | 21 | |
| 1.7% | - | |
| 5.6 | 4.0 | |
| 22 days ago | over 1 year ago | |
| Python | Python | |
| Apache License 2.0 | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
capirca
Posts with mentions or reviews of capirca.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-03-13.
-
Automated ACL Configuration
Capirca could help with some of that https://github.com/google/capirca
- Is there any Linux CLI app I can use to compress a huge list of CIDRs to their optimum form?
-
Aerleon a vendor agnostic firewall management system
Great question! Fortinet themselves have an open PR on Capirca which you can view here https://github.com/google/capirca/pull/222 It has been in a stalemate for years now because of CLA issues. I reached out to people I know there while I was quietly forking and I get the feeling they have lost steam dealing with Google on this which I don't blame them for. I pinged them again since we launched and if I don't hear anything I will begin to make my own since I know lots of people want it.
-
centralized Linux firewall management
Sadly there's not much choice for Open Source software. FWBuilder is good (also supports Cisco and Procurve devices as well as iptables) but rather old. Capirca is actively maintained and supports a lot of target devices. Sadly I think that's about it for the open source policy management tools.
-
What's everyone using for centralized management and deployment of switch and router ACLs?
Have you looked at Capirca for the multi-vendor ACL generation part of it?
-
Capirca
Capirca uses common definitions of networks, services and high-level policy files to generate network ACLs. This multi-platform solution was originally developed by Google for their own use but is now open source. rankinrez finds it a good way to document firewall rules and objects.
- A Good Way to Document Firewall Rules & Objects?
-
Netbox for Firewall Rules?
You could use capirca https://github.com/google/capirca I wrote a plugin that allows you to manage the ACLs in NetBox. See https://github.com/991jo/netbox_capirca_plugin Warning: The Features are currently very limited and it does not yet work with NetBox 3. The code is almost finished for 3.1, I will probably be able to release it next week.
- ACL and Network Flow Visualization Tool
netbox_capirca_plugin
Posts with mentions or reviews of netbox_capirca_plugin.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-02-04.
-
Netbox for Firewall Rules?
You could use capirca https://github.com/google/capirca I wrote a plugin that allows you to manage the ACLs in NetBox. See https://github.com/991jo/netbox_capirca_plugin Warning: The Features are currently very limited and it does not yet work with NetBox 3. The code is almost finished for 3.1, I will probably be able to release it next week.
What are some alternatives?
When comparing capirca and netbox_capirca_plugin you can also consider the following projects:
netbox-acls - A NetBox plugin for Access Lists based off of the NetBox Plugin Demo
ntc-netbox-plugin-onboarding - A plugin for NetBox to easily onboard new devices.
nftables - Ansible role to manage Nftables rules and packages.
netbox-qrcode - NetBox Plugin for generate QR Codes
iprange - manage IP ranges
kafka-ease - A library for the easy and automated creation of topics and acls in Kafka.
cli - Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)
netbox-secretstore
fwbuilder - A clone of the SourceForge fwbuilder repostiory
netbox-dns - Netbox Dns is a netbox plugin for managing zone, nameserver and record inventory.
capirca vs netbox-acls
netbox_capirca_plugin vs ntc-netbox-plugin-onboarding
capirca vs nftables
netbox_capirca_plugin vs netbox-qrcode
capirca vs iprange
netbox_capirca_plugin vs kafka-ease
capirca vs cli
netbox_capirca_plugin vs netbox-secretstore
capirca vs fwbuilder
netbox_capirca_plugin vs netbox-dns