May the GitOps Be with You: Conquering Network ACL Challenges
Talkat GitOpsCon North America 2024 · on Monday, 2024-04-15· at 15:55· Level 3 | Room 322 | Track 2·
summary
Describes a concrete GitOps pipeline that treats ACLs as code in git, generates platform-specific ACLs from high-level policies using capira or earon, validates them with presubmit tests, and deploys via Ansible/Puppet; integrates with netbox as source-of-truth, uses container-tagged ACL artifacts for rollbacks and supports slow rollouts for backbone vs all-at-once for campuses. Implementation reduces manual misconfigurations, enables diffs in CI, backs up device configs to git (oxidize) and correlates ACL update metrics for faster troubleshooting.
AI-written summary · about
chapters (12)
- 0:00GitOps and Network ACLs intro
- 1:48Network ACL challenges
- 4:14GitOps simplifies ACL mgmt
- 7:25ACL components and definitions
- 9:15Platform-independent ACL tools
- 10:20Testing ACL configs
- 11:25CICD pipeline for deploying ACLs
- 12:28Diff checks in ACL configs
- 14:15ACL management best practices
- 16:24Git unavailability and rollbacks
- 17:30ACL change tracking
- 18:31Conclusion and Q&A
related talks
40m"GitOps for Infrastructure"
34mInfrastructure as Software with GitOps
02h 47mA GitOps Architecture from Scratch: Gitlab, Ansible, Terraform, Kub and AWS
23mA GitOps approach to Zero Touch Provisioning for the 5G vRAN Ed...
33mIntent-based holistic data center management
15mInfrastructure as a Code: Best Practices and Myths
27mGitOps Your Gateway: Automating Traffic Management at...
59mBeyond Configuration Management