Automation, API
-
I've recently started looking into some automation, & wondering if it's possible to introduce a degree of automation & remote/scripted management?
In particular I've been looking at systems like OpenStack & Puppet (amongst others), and I would much rather the my pfSense handle the network stack of my environment (rather than Quantum).Other than a very ugly set of XML hacks (that might not work all that well to begin with), and maybe to a degree with LDAP auth, is it possible to interface with pfSense programmatically via some API?
"Simple" tasks like defining DHCP, VLAN's, NAT, rules, QoS, etc
For now, I guess I'm happy with using the GUI (served me very well so far), but this can become problematic when trying to scale beyond a few dozen nodes.
-
Not quite yet. We do have an XMLRPC API for the CARP/HA config sync but it doesn't include functions for all of what you describe. You can look at xmlrpc.php in /usr/local/www/ and the other similarly named files in /etc and /etc/inc/
We do have a central management system in the works for pfSense but it's still a ways out from a release. It will be a commercial product though and not OSS.
-
It's a pity it's won't be FLOSS.
I've been looking at a number of automation & management systems, in particular in the VM-space, and if pfSense had some sort of API that could be coded to, it should lend itself extremely well to integration with such 3rd-party systems.
-
Not quite yet. We do have an XMLRPC API for the CARP/HA config sync but it doesn't include functions for all of what you describe. You can look at xmlrpc.php in /usr/local/www/ and the other similarly named files in /etc and /etc/inc/
We do have a central management system in the works for pfSense but it's still a ways out from a release. It will be a commercial product though and not OSS.
are there any relase dare or name of that project
I am intered in to by tool like that -
When is pfsense team planning to release the central management application?
I'm interested in this solution
