Batfish deployment and capabilities

As engineers embrace infrastructure-as-code, building in testing and sanity checks of the proposed changes becomes critical. Batfish is an open-source tool that does network configuration analysis. Some of the project’s capabilities include analysis of system information, routing and forwarding tables, and ACLs. Batfish is written in python and is consumable in python, but also has Ansible modules available.

We will demonstrate using Batfish to ensure our ACLs are doing what we expect them to do. Finally, we will look at using Batfish in a CI pipeline for automated analysis of configurations upon check-in to version control.

Presentation link: https://www.slideshare.net/joelwking/using-batfish-for-network-analysis