Batfish
Analyse network configurations before a change.
Batfish analyses network configurations without touching the devices. It answers questions such as ‘Is this network reachable from there?’ or ‘What does this ACL change?’ before a change is rolled out. This allows checks to be built into a pipeline.
We place it in Assess: the approach is strong, but coverage depends on the vendor and features. A pilot should show whether your own devices and configurations are sufficiently supported.
- network changes are to be checked automatically
- firewall and routing rules are complex
- pipelines for network changes already exist
- you use devices or features that Batfish does not model
- there is no pipeline for network changes yet
Which tools suit your operations?
In an initial call we review your tool landscape and show where a change pays off and where it does not.