On 10/15/2018 11:25 AM, Edoardo Putti wrote:

    Hi everyone,

    I am looking and playing with Openwisp and Netjson. I hope i can
    ask u
    some questions.

    Currently i am trying to automate a managed switch. I came to the
    horrible conclusion it only allows for changes using web-ui. I made a
    very basic webscraper that is able to do some very basic things like
    enabling / disabling network ports or enabling / disabling Power over
    Ethernet (POE)

    Would such a module be something u see as being in the scope of
    netjson?

    I mean having some kind of adapter <Openwisp/configuration
    frontend> -
    <Adapter script> - <Switch WebUI>. The way i see netjson would be
    as a
    universal configuration format. Having something like Openwisp
    produce a
    netjson file and having something else (could be the device itself)
    applying it on the device.


Hi Pimmetje,

this was something that Federico was working on some time ago but
I haven't seen it working yet. The concept of backend in netjsonconfig
is a transformer from netjson to something else the device can understand.
You can make a new backend[0] that does exactly this, output the NetJSON
from NetJSON and put it into an archive for your devices to fetch.
Ill have a look thx
As you can't always have a process on the device to check there was
exploratory work on a connector that could connect and apply configurations on
devices that do not run OpenWRT, such as your managed switch.



    I miss somethings in the netjson standard

    - encryption. I think there should be a standard way to encrypt
    netjson
    files on the wire with for example a shared key. U could leave
    that to
    the transport but i think it would be better to have a way of
    doing it
    in a standard.


Also something that is backend specific as the backend should
generate an archive that can be encrypted if needed.

You should ask yourself what you want form encryption

- confidentiality, connections from device to controller should be secure
- authenticity, the device can authenticate the controller payload
- secrecy, the controller payload can only be read by those with the key
secrecy / confidentiality for devices with low memory. But maybe to as relevant because most devices will be able to make multiple https connections without trouble. But for low memory device it could be something nice to have.
and then implement it in the backend and configuration process

    - push vs pull:
    Now all openwisp device do a configuration pull every x minutes. I
    think
    that's a waste of resources on the controller side. What it your
    vision
    on using MQTT/AMQP or another open protocol to push configurations to
    devices. Advantage in this case would also be that u don't need to
    pull
    config that often or not at all. The configuration can be applied
    within
    seconds after the are changed on the server no matter where the
    device
    is located (behind NAT/Firewall).


Rigth now the configuration is not sent a NetJSON over the wire and
it will remain like this as it's easier to debug things on the server than
on the device.
In case of a adapter script u need a standard format. I think netjson would be a nice fit. The conversion in this case is done on the adapter script.
Another question you should ask is how you should send the updates
as this drives the configuration update procedure and you may have to
implement some update logic in the new backend to prevent stupid things
from happening (add wireless without radio). This is all new work without
anything done yet.
Next to the save button a apply button. Should do the trick. :)

    This would also allow for a new possibility of having a easy way
    to get
    data from the device. And also integration in home-automation systems
    would be a lot easier.


Yes it's true but the focus should always be on WISP, wireless internet providers.
No wireless without internet. No internet without routers & switches.
For network managements there are already protocols like NETCONF and SMTP
so maybe it's better to look into them before reinventing the wheel
Sure i know. But details that need to be in the controller. It would be nice to see the connected clients, other access points in the area. Not something u would find in a SMTP interface.

    Kind regards,

    Pimmetje


Cheers

edoput
[0]: http://netjsonconfig.openwisp.org/en/stable/backends/create_your_backend.html
--
You received this message because you are subscribed to the Google Groups "OpenWISP" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]>.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups 
"OpenWISP" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to