While the current version of the ensp-automation-framework is fully functional and production-ready for eNSP environments, the following enhancements represent the logical next steps for enterprise-scale deployment.
Goal: Moving from lab to global infrastructure.
- Secret Management:
- Integrate with HashiCorp Vault or AWS Secrets Manager to remove credentials from YAML files entirely.
- Implement multi-factor authentication (MFA) support for SSH gateway jumps.
- Database Integration:
- Migrate from static YAML inventory to a dynamic NetBox or Nautobot (SoT) integration via REST API.
- Advanced Concurrency:
- Transition from
ThreadPoolExecutorto Asyncio (Scrapli) for even higher performance when managing 1000+ devices.
- Transition from
Goal: Achieving zero-trust network automation.
- Pre-Change Simulation:
- Integrate with Batfish to simulate the impact of configuration changes on routing and security policies before pushing to real hardware.
- Post-Change Rollback:
- Implement an automated "Check-point & Rollback" feature that reverts changes if connectivity or health-check tests fail after deployment.
Goal: Full integration into the software development lifecycle.
- Dockerized Execution:
- Provide a lightweight container image to ensure "Run Anywhere" capability without local Python environment dependencies.
- GitHub Actions Integration:
- Automated linting (Ruff) and unit testing (Pytest) on every commit.
- Mocking Suite:
- Expand the current Mock Mode to include a full "Digital Twin" of the network for offline development and training.
This roadmap is provided for architectural context and demonstrates the framework's readiness for further enterprise expansion.