*Disclaimer:* This is a thought experiment and should be treated as such. Please weigh in with the good and bad of this idea...
A couple of us have been discussing the idea of potentially replacing the ACS VR with the VyOS [1] (Open Source Vyatta VM). There may be a license issue because I think it is licensed under GPL, but for the sake of discussion, let's assume we can overcome any license issues. I have spent some time recently with the VyOS and I have to admit, I was pretty impressed. It is simple and intuitive and it gives you a lot more options for auditing the configuration etc... Items of potential interest: - Clean up our current VR script spaghetti to a simpler more auditable configuration workflow. - Gives a cleaner path for IPv6 support. - Handles VPN configuration via the same configuration interface. - Support for OSPF & BGP. - VPN support through OpenVPN & StrongSwan. - Easily supports HA (redundant routers) through VRRP. - VXLAN support. - Transaction based changes to the VR with rollback on error. Items that could be difficult to solve: - Userdata password reset workflow and implementation. - Upgrade process. The VyOS is not the only option if we were to consider this approach. Another option, which I don't know as well, would be CloudRouter (AGPL license) [2] which is purely API driven. Anyway, would love to hear your thoughts... Will [1] https://vyos.io/ [2] https://cloudrouter.org/
