MÓDULO API INFRA.Art¶
Vendor REST orchestrator — FMC / FortiOS / PAN-OS / Gaia / etc.
Function¶
Per-vendor REST API client fleet. Pushes config + queries state via vendor-native APIs. Sister to CLI.Art (which does SSH/TELNET) — use API INFRA where REST is preferred and CLI where REST is unavailable.
Identity¶
| Element | Value |
|---|---|
| Plane | MGMT-light (cloud-portable) |
| Internal code | DUT API orchestrator + future Cloner ext |
| K8s namespace | web-agents (currently — moves to its own ns post-v5.0) |
| OOBI slot | within MGMT-light block |
Supported vendors¶
| Vendor | API |
|---|---|
| Cisco FTD | FMC + FDM + SCC (3 management planes) |
| Cisco Secure Router | vManage REST |
| Fortinet FortiGate | FortiOS REST |
| Palo Alto PAN-OS | XML API |
| Check Point | Gaia REST |
| Juniper SRX | NETCONF + RESTCONF |
(more per project_dut_catalog_scope) |
Operator controls¶
/admin/dut-api— per-DUT credential vault + API endpoint- Write operations DOM-aware (production → read-only via RELAY)
- Audit log on every API call (request + response)
Key telemetry¶
dut_api_requests_total{vendor, op}— per-vendor call countdut_api_errors_total{vendor, status_code}dut_api_latency_p95_ms{vendor, op}