Skip to content

Latest commit

 

History

History
37 lines (28 loc) · 1.89 KB

File metadata and controls

37 lines (28 loc) · 1.89 KB

🚀 Future Considerations & Scalability Roadmap

While the current version of the ensp-automation-framework is fully functional and production-ready for eNSP environments, the following enhancements represent the logical next steps for enterprise-scale deployment.


🏗️ Scale-Out Enhancements

Goal: Moving from lab to global infrastructure.

  1. Secret Management:
    • Integrate with HashiCorp Vault or AWS Secrets Manager to remove credentials from YAML files entirely.
    • Implement multi-factor authentication (MFA) support for SSH gateway jumps.
  2. Database Integration:
    • Migrate from static YAML inventory to a dynamic NetBox or Nautobot (SoT) integration via REST API.
  3. Advanced Concurrency:
    • Transition from ThreadPoolExecutor to Asyncio (Scrapli) for even higher performance when managing 1000+ devices.

🔒 Security & Compliance

Goal: Achieving zero-trust network automation.

  1. Pre-Change Simulation:
    • Integrate with Batfish to simulate the impact of configuration changes on routing and security policies before pushing to real hardware.
  2. Post-Change Rollback:
    • Implement an automated "Check-point & Rollback" feature that reverts changes if connectivity or health-check tests fail after deployment.

🐳 DevOps & CI/CD

Goal: Full integration into the software development lifecycle.

  1. Dockerized Execution:
    • Provide a lightweight container image to ensure "Run Anywhere" capability without local Python environment dependencies.
  2. GitHub Actions Integration:
    • Automated linting (Ruff) and unit testing (Pytest) on every commit.
  3. Mocking Suite:
    • Expand the current Mock Mode to include a full "Digital Twin" of the network for offline development and training.

This roadmap is provided for architectural context and demonstrates the framework's readiness for further enterprise expansion.