Add a rules-based framework which automatically evaluates configuration files against a device type-specific set of user-configurable compliance rules (Is a NTP server configured? Is is the right one?)
We should keep the rules engine as simple as possible to make it easy to extend the rule set (regular expressions are probably sufficient, with the option of writing custom code for anything that requires more complicated logic).
Open questions:
- User interface
- Rules configuration (YAML file? database?)
- Public knowledge base
- Implement as task?
Add a rules-based framework which automatically evaluates configuration files against a device type-specific set of user-configurable compliance rules (Is a NTP server configured? Is is the right one?)
We should keep the rules engine as simple as possible to make it easy to extend the rule set (regular expressions are probably sufficient, with the option of writing custom code for anything that requires more complicated logic).
Open questions: