# Clixon Clixon is an automatic configuration manager where you generate interactive CLI, NETCONF, RESTCONF and embedded databases with transaction support from a YANG specification. * [Background](#background) * [Frequently asked questions](doc/FAQ.md) * [Installation](#installation) * [Licenses](#licenses) * [Support](#support) * [Dependencies](#dependencies) * [Extending](#extending) * [Yang](#yang) * [Netconf](#netconf) * [Restconf](#restconf) * [Datastore](datastore/README.md) * [Authentication and Authorization](#auth) * [Example](example/) * [Changelog](CHANGELOG.md) * [Runtime](#runtime) * [Clicon and Clixon project page](http://www.clicon.org) * [Tests](test/) * [Reference manual](http://www.clicon.org/doxygen/index.html) (Note: the link may not be up-to-date. It is better to build your own: `cd doc; make doc`) Background ========== Clixon was implemented to provide an open-source generic configuration tool. The existing [CLIgen](http://www.cligen.se) tool was extended to a framework. Most of the user projects are for embedded network and measuring devices, but can be deployed for more general use. Users of clixon currently include: * [Netgate](https://www.netgate.com) * [CloudMon360](http://cloudmon360.com) * [Grideye](http://hagsand.se/grideye) * [Netclean](https://www.netclean.com/solutions/whitebox) # only CLIgen * [Prosilient's PTAnalyzer](https://prosilient.com) # only CLIgen See also [Clicon project page](http://clicon.org). Installation ============ A typical installation is as follows: ``` configure # Configure clixon to platform make # Compile sudo make install # Install libs, binaries, and config-files sudo make install-include # Install include files (for compiling) ``` One [example application](example/README.md) is provided, a IETF IP YANG datamodel with generated CLI and configuration interface. Licenses ======== Clixon is open-source and dual licensed. Either Apache License, Version 2.0 or GNU General Public License Version 2; you choose. See [LICENSE.md](LICENSE.md) for the license. Dependencies ============ Clixon depends on the following software packages, which need to exist on the target machine. - [CLIgen](http://www.cligen.se) is required for building Clixon. If you need to build and install CLIgen: ``` git clone https://github.com/olofhagsand/cligen.git cd cligen; configure; make; make install ``` - Yacc/bison - Lex/Flex - Fcgi (if restconf is enabled) There is no yum/apt/ostree package for Clixon (please help?) Support ======= Clixon interaction is best done posting issues, pull requests, or joining the [slack channel](https://join.slack.com/t/clixondev/shared_invite/enQtMzI3OTM4MzA3Nzk3LTA3NWM4OWYwYWMxZDhiYTNhNjRkNjQ1NWI1Zjk5M2JjMDk4MTUzMTljYTZiYmNhODkwMDI2ZTkyNWU3ZWMyN2U). Extending ========= Clixon provides a core system and can be used as-is using available Yang specifications. However, an application very quickly needs to specialize functions. Clixon is extended by writing plugins for cli and backend. Extensions for netconf and restconf are also available. Plugins are written in C and easiest is to look at [example](example/README.md) or consulting the [FAQ](doc/FAQ.md). Yang ==== YANG and XML is at the heart of Clixon. Yang modules are used as a specification for handling XML configuration data. The YANG spec is used to generate an interactive CLI, netconf and restconf clients. It also manages an XML datastore. Clixon mainly follows [YANG 1.0 RFC 6020](https://www.rfc-editor.org/rfc/rfc6020.txt) with some exceptions: - conformance: feature, if-feature, deviation - identity, base, identityref - list features: min/max-elements, unique The aim is also to cover new featires in YANG 1.1 [YANG RFC 7950](https://www.rfc-editor.org/rfc/rfc7950.txt) Clixon has its own XML library designed for performance. Netconf ======= Clixon implements the following NETCONF proposals or standards: - [NETCONF Configuration Protocol](http://www.rfc-base.org/txt/rfc-4741.txt) - [Using the NETCONF Configuration Protocol over Secure SHell (SSH)](http://www.rfc-base.org/txt/rfc-4742.txt) - [NETCONF Event Notifications](http://www.rfc-base.org/txt/rfc-5277.txt) Some updates are being made to RFC 6241 and RFC 6242. Clixon does not support the following features: - :url capability - copy-config source config - edit-config testopts - edit-config erropts - edit-config config-text Restconf ======== Clixon restconf is a daemon based on FASTCGI. Instructions are available to run with NGINX. The implementatation is based on [RFC 8040: RESTCONF Protocol](https://tools.ietf.org/html/rfc8040). The following features are supported: - OPTIONS, HEAD, GET, POST, PUT, DELETE The following are not implemented - PATCH - query parameters (section 4.9) - notifications (sec 6) - schema resource See [more detailed instructions](apps/restconf/README.md). Datastore ========= The Clixon datastore is a stand-alone XML based datastore. The idea is to be able to use different datastores backends with the same API. Update: There used to be a key-value plugin based on qdbm but isnow obsoleted. Only a text datastore is implemented. The datastore is primarily designed to be used by Clixon but can be used separately. See [more detailed instructions](datastore/README.md). Auth ==== Authentication is managed outside Clixon using SSH, SSL, Oauth2, etc. For CLI, login is typically made via SSH. For netconf, SSH netconf subsystem can be used. Restconf however needs credentials. This is done by writing a credentials callback in a restconf plugin. See: * [FAQ](doc/FAQ.md#how-do-i-write-an-authentication-callback). * [Example](example/README.md) has an example how to do this with HTTP basic auth. * It would be possible for do this for more advanced mechanisms such as Oauth2 or (https://github.com/CESNET/Netopeer2/tree/master/server/configuration) There is an ongoing effort to implement authorization for Clixon according to [RFC8341(NACM)](https://tools.ietf.org/html/rfc8341), at least a subset of the functionality. Runtime ======= clixon sdk The figure shows the SDK runtime of Clixon.