In recent years, the open source operating system OpenWrt has become a popular option for replacing proprietary firmware on networking devices such as home routers or access points. In order to configure an OpenWrt system, like setting up firewall rules, the user has to either sign in to the web interface or use SSH to manually change configuration files on the device. While the current approach is sufficient for small home networks, it only allows for limited automation of management tasks and configuration management becomes time-consuming, for example, on larger campus networks where access control lists on OpenWrt access points need updates regularly. This paper describes our efforts to implement the RESTCONF configuration management protocol standardized by the IETF on OpenWrt systems that have limited CPU and memory resources. We detail our design choices that make our implementation resource efficient for the use cases we target and we compare our implementation against other similar solutions. Our implementation is available on GitHub under an open source license.
翻译:近年来,开源操作系统OpenWrt已成为家用路由器或接入点等网络设备上替代专有固件的热门选择。为配置OpenWrt系统(如设置防火墙规则),用户需登录Web界面或通过SSH手动修改设备配置文件。虽然现有方法足以满足小型家庭网络需求,但管理任务的自动化程度有限,且配置管理变得耗时——例如在需要定期更新OpenWrt接入点访问控制列表的大型园区网络中。本文描述了我们在CPU和内存资源受限的OpenWrt系统上,实现由IETF标准化的RESTCONF配置管理协议的工作。我们详细阐述了使实现针对目标用例实现资源高效的设计选择,并将我们的实现与其他类似方案进行了对比。本实现已在GitHub上以开源许可证发布。