Ross ROSS = Recommend OSS · open-source software intelligence for agents

batfish/batfish

Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches. observed · 2026-08-28

github.com/batfish/batfish · homepage · Java · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

67/100

  • Activity 99
  • Release rhythm 8
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 4291
  • days_rel: 422
  • days_push: 7
  • n_releases_24m: 1

Full methodology

Adoption not part of the score

1460 stars · 285 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Batfish is an open-source network configuration analysis tool that builds complete models of network behavior from device configurations to find bugs and guarantee correctness of planned or current networks. It requires no direct device access and validates security, reliability, and compliance properties before deployment.

Use cases

  • validate network configuration changes before deployment
  • find bugs and policy violations in router and firewall configs
  • verify end-to-end reachability and failure impact across the network
  • check ACL and firewall rule changes cause no collateral damage
  • compare configurations from different vendors for functional equivalence
  • audit configuration compliance for SSH, AAA, NTP, and MTU settings

When to choose

  • you need pre-deployment validation of network changes in CI/CD workflows
  • you want correctness guarantees for reachability, security, and compliance without touching live devices
  • you manage multi-vendor networks and need configuration analysis

When to avoid

  • you need real-time traffic monitoring or packet capture rather than configuration analysis
  • your network devices' configurations are not available or are heavily generated outside standard vendor syntax

Facets

service · maturity active

security testing parser configuration-management developer-tools networking security jvm python self-hosted network-verification network-configuration-analysis intent-based-networking pre-deployment-validation network-automation automation devops docker

2 sources

Member repositories

RepositoryRoleHealth v2
batfish/batfishmain67

For agents

markdown · JSON · MCP: product_card(name="batfish/batfish")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem