Survey: Vendor NETCONF and REST API Support
Time for another fill-in-the-blanks survey: how many vendors support NETCONF and/or REST API in their data center switches, routers, firewalls and load balancers?
Please help me complete the tables by writing a comment – and do keep in mind that it only counts if it’s documented in a public configuration guide on vendor’s web site.
Also, I’m not aware of any vendor using standard NETMOD YANG models. If someone does, please let me know.
The pure XML column indicates whether the box returns all information in real XML format as opposed to text printout in an XML envelope.
Updates to the blog post:
- 2015-10-29: Data Center Switches and Routers tables updated based on feedback from Nitzan, Johannes, Unknown and Martin. Thank you!
- 2015-10-31: Updates based on feedback from Anonymous, Oliver, and Erop. Thank you!
Data Center Switches
Vendor | NETCONF | Pure XML? | REST API |
|---|---|---|---|
Arista | No | Yes | |
Brocade VDX | Yes | ? | Yes |
Cisco NX-OS | Yes | Most? | ? |
Dell Force10 | ? | Yes | |
HP | Yes | ? | |
Juniper | Yes | Yes | Yes |
Updates:
- Junos 14.2 has REST API, it’s coming to QFX switches in 14.1X53-D35;
- Dell Force10 has REST API;
- HP Comware switches have NETCONF support;
Routers
Vendor | NETCONF | Pure XML? | REST API |
|---|---|---|---|
Alcatel Lucent | Yes | ? | |
Brocade MLX | Yes | ? | |
Cisco IOS / IOS XE | Yes | Some | No |
Cisco CSR 1000V | Yes | Some | Yes (JSON) |
Cisco IOS XR | Yes | ? | |
Juniper | Yes | Yes | Yes |
Updates:
- IOS XR has NETCONF;
- REST API is only available on CSR 1000V, not on IOS or IOS XE in general;
- Juniper MX routers have REST API in Junos release 15.1;
- Brocade MLX routers and ALU routers have NETCONF support;
Firewalls and load balancers
Information on load balancers and firewalls highly appreciated – please write a comment.
Sincerely yours, Mathieu.
(This is a good thing, it means anything you can do on the switch, you can do remotely, and vice versa)
http://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs_r5-3/security/configuration/guide/b-syssec-cg53x-crs/Implementing_the_Network_Configuration_Protocol.html
Juniper MX has rest API
http://www.juniper.net/documentation/en_US/junos14.2/information-products/pathway-pages/rest-api/rest-api.html#overview
Nitzan
http://www.cisco.com/c/dam/en/us/td/docs/security/asa/api/asapedia_rest_api.pdf
I've installed it on our 5585-Xs and it seems to be working, but I haven't had time to do anything useful with it.
Cisco ISE (XML)
Cisco ACS (XML)
Cisco ASA > 9.3(2) (JSON)
Cisco CSR 1000V (JSON)
Cisco ASR1001-X, ASR1002-X (JSON)
Cisco Nexus 1000V (XML)
Cisco Nexus 9000 (JSON, XML)
APIC (JSON, XML)
You cannot say that in general NX-OS or IOS-XE supports REST API - it heavily depends on the platform
iControl SOAP: Released in version 4.1.1 (way back in 2003)
api reference: https://devcentral.f5.com/wiki/icontrol.apireference.ashx
iControl REST: Released in version 11.5 (EA in 11.4)
api reference: https://devcentral.f5.com/wiki/iControlREST.HomePage.ashx
user guide 11.4: https://devcentral.f5.com/d/icontrol-rest-user-guide?download=true
user guide 11.5: https://devcentral.f5.com/d/icontrol-rest-user-guide-version-1150?download=true
user guide 11.6: https://devcentral.f5.com/d/the-user-guide-for-the-icontrol-rest-interface-in-big-ip-version-1160?download=true
user guide 12.0: https://devcentral.f5.com/d/the-user-guide-for-the-icontrol-rest-interface-in-big-ip-version-120?download=true
Wanted to complete the chart. : )
https://www.juniper.net/techpubs/en_US/junos15.1x49/information-products/topic-collections/netconf-guide/netconf-guide.pdf
https://www.juniper.net/techpubs/en_US/junos15.1x49/information-products/topic-collections/junos-xml-management-protocol-guide/junos-xml-management-protocol-guide.pdf
https://www.juniper.net/techpubs/en_US/junos15.1/information-products/pathway-pages/rest-api/rest-api.html
-Rich
http://www.dell.com/support/Manuals/us/en/19/Topic/force10-open-automation/OA_9.9.0.0_CLI_Config_Pub-v1/en-us/GUID-42809B97-40C0-4624-946A-A8BE703EE8E7
-Martin
https://www.paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/technical-documentation/pan-os-61/XML-API-6.1.pdf
Kemp Load Balancers:
https://support.kemptechnologies.com/hc/en-us/articles/203863435-RESTful-API
https://kc.mcafee.com/corporate/index?page=content&id=PD25999
Brocade's virtual ADC (Was Riverbed SteelApp) also has a REST API
Brocade's ADX Load Balancers (ServerIron) have a SOAP XML API
http://www1.brocade.com/downloads/documents/html_product_manuals/SIADX_12500_XAPG/wwhelp/wwhimpl/js/html/wwhelp.htm#href=API_Title.01.1.html
--Paul
http://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Switches/H3C_S12500_Series_Switches/Command/Command/H3C_S12500_CR-Release7328-6W730/12/201402/817898_1285_0.htm
From the documentation it looks that for Juniper the rest API is for MX (routers ) and not for QFX (switches )
Nitzan
QFX does support REST API’s but due to a known issue (PR/1073572) in 14.1X53 REST requests to the QFX are accepted; however, you get nothing back.
This bug has been fixed in 14.1X53-D35, which should be released soon. (14.1X53-D30 is the current release for all QFX, except the QFX10002 which runs 15.1X53)
Hope this helps,
http://pubs.vmware.com/NSX-62/topic/com.vmware.ICbase/PDF/nsx_62_api.pdf
Brocade MLX routers support NETCONF, not sure about the rest.
http://www.citrix.com/go/citrix-developer/netscaler-developer-community/nitro-sdk.html
http://docs.citrix.com/en-us/netscaler/11/nitro-api.html
NETCONF vendors:
Alaxala – Ethernet switches
Juniper Networks - JUNOS 7.5 and later
BATM/Telco Systems –T-Metro 7224
Nexor - Messaging Gateways
BigBand - MSP2800
RuggedCom - RX5000 and MX5000
Brocade
- NetIron XMR, CES, and CER
- MLX Series
- VDX (Announced, not released)
Sonus - NBS5200 Session Border Controller
Taseon - TN 320
Cisco
- IOS 12.4(9)T and later
- IOS XE 2.1 and later
Verivue - MDX 9020
Edgeware - WTV-2X
Ericsson - SEA 20
H3C presentation - S9500E Series Routing Switches P
Huawei - AR3200/2200 Enterprise Routers