Skip to content
Tools · New

Batfish

Analyse network configurations before a change.

Batfish analyses network configurations without touching the devices. It answers questions such as ‘Is this network reachable from there?’ or ‘What does this ACL change?’ before a change is rolled out. This allows checks to be built into a pipeline.

We place it in Assess: the approach is strong, but coverage depends on the vendor and features. A pilot should show whether your own devices and configurations are sufficiently supported.

  • network changes are to be checked automatically
  • firewall and routing rules are complex
  • pipelines for network changes already exist
Not a good fit if …
  • you use devices or features that Batfish does not model
  • there is no pipeline for network changes yet

Which tools suit your operations?

In an initial call we review your tool landscape and show where a change pays off and where it does not.