5 ms·

Show HN: Terraform Provider for Inexpensive Switches

90 points by brennoo 2y ago

Hi HN, I’ve been building this provider for (web managed) network switches manufactured by HRUI. These switches often used in SMBs, home labs, and by budget-conscious enthusiasts. Many HRUI switches are also rebranded and sold under various OEM/ODM names (eg. Horaco, XikeStor, keepLiNK, Sodola, etc) making them accessible/popular but often overlooked in the world of infrastructure automation. The provider is in pre-release, and I’m looking for owners of these switches to test it and share feedback. My goal is to make it easier to automate its config using Terraform/OpenTofu :) You can use this provider to configure VLANs, port settings, trunk/link aggregation etc. I built this provider to address the lack of automation tools for budget-friendly hardware. It leverage goquery and has an internal SDK sitting between the Terraform resources and the switch Web UI. If you have one of these switches, I’d love for you to give it a try and let me know how it works for you! Terraform Registry: https://registry.terraform.io/providers/brennoo/hrui OpenTofu Provider: https://search.opentofu.org/provider/brennoo/hrui I’m happy to answer any questions about the provider or the hardware it supports. Feedback, bug reports, and ideas for improvement are more than welcome!

stargrazer 2y ago
Does any one know of switches similar to this but might be loadable with Linux? Maybe able to run with switchdev or similar?
- westurner 2y ago
  OpenWRT > Table of Hardware > Switches: https://openwrt.org/toh/views/switches https://openwrt.org/toh/views/switches ansible-openwrt: https://github.com/gekmihesg/ansible-openwrt https://github.com/gekmihesg/ansible-openwrt /? terraform OpenWRT: https://www.google.com/search?q=terraform+openwrt https://www.google.com/search?q=terraform+openwrt /? terraform Open vSwitch: https://www.google.com/search?q=open+vswitch+terraform https://www.google.com/search?q=open+vswitch+terraform Open vSwitch supports OpenFlow: https://en.wikipedia.org/wiki/Open_vSwitch https://en.wikipedia.org/wiki/Open_vSwitch Open vSwitch > "Porting Open vSwitch to New Software or Hardware" https://docs.openvswitch.org/en/latest/topics/porting/ https://docs.openvswitch.org/en/latest/topics/porting/
- blutack 2y ago
  https://blog.benjojo.co.uk/post/sn2010-linux-hacking-switchdev https://blog.benjojo.co.uk/post/sn2010-linux-hacking-switchd... if you hadn't seen it already and the associated HN comments: https://news.ycombinator.com/item?id=40141967 https://news.ycombinator.com/item?id=40141967
- evanjrowley 2y ago
  Maybe consider MikroTik switches running RouterOS (ROS) / SwitchOS (SwOS)? The learning curve is steeper than other switches, but the functionality is quite powerful. At first I was not a fan of WinBox, but it grew on me after I learned they had a beta version for Linux/macOS and that it could connect to a router by using just a L2 MAC address. It can also be virtualized / dockerized, so you can experiment with it before buying hardware. The newer hardware is even better, but I have the compact desktop version of this 24-port MikroTik switch: https://www.servethehome.com/mikrotik-css326-24g-2srm-review-the-one-to-get/ https://www.servethehome.com/mikrotik-css326-24g-2srm-review... As well as this Wifi 6 AP: https://www.youtube.com/watch?v=ICrDw8_PZ3o https://www.youtube.com/watch?v=ICrDw8_PZ3o They recently released a small 10G ethernet switch that looks seriously good: https://www.servethehome.com/mikrotik-crs304-4xg-in-review-this-is-a-must-have-10gbase-t-marvell-switch/ https://www.servethehome.com/mikrotik-crs304-4xg-in-review-t... If I had to do my network all over again, I'd probably get either the MikroTik L009UiGS-2HaxD or RB5009UG+S+IN: https://www.youtube.com/watch?v=rIxkkNxsEhs https://www.youtube.com/watch?v=rIxkkNxsEhs Side Notes - The Terraform provider for RouterOS is actively developed: https://github.com/terraform-routeros/terraform-provider-routeros https://github.com/terraform-routeros/terraform-provider-rou... - If you want Linux without actually needing to poke at the underlying OS, then you might also be interested in Palo Alto NGFW products running PAN-OS. Terraform is also an option: https://github.com/PaloAltoNetworks/terraform-provider-panos https://github.com/PaloAltoNetworks/terraform-provider-panos - The one area I found RouterOS majorly lacking was IPv6 support, which is provided as a separate plugin/package. My ISP doesn't support IPv6, so this did not make any difference for me. - The best IPv6 support in a network product advertizing a unix-like OS is OPNsense / PFSense, but those are routers and not switch hardware. Terraform providers are also available for these.
  - brirec 2y ago
    > The newer hardware is even better, but I have the compact desktop version of this 24-port MikroTik switch: https://www.servethehome.com/mikrotik-css326-24g-2srm-review https://www.servethehome.com/mikrotik-css326-24g-2srm-review... The one you linked unfortunately only runs SwOS, which is really not very good. However, current versions of RouterOS (i.e., any 7.x version) do IPv6 natively without an additional package.
- mugsie 2y ago
  Any of the SoNIC supported switches - they all run a linux NOS, with an interface to the switch chip. Can even run containers using kubelet :D https://github.com/sonic-net/SONiC/blob/sonic_image_md_update/supported_devices_platforms.md https://github.com/sonic-net/SONiC/blob/sonic_image_md_updat...
  - klaas- 2y ago
    any of those switches in the right price range for home? I've been looking for a cheap SONiC switch for a long time but those on the supported hardware list are all rack/datacenter sized I would say -- and none do PoE which I really need for home usage (cameras, wifi APs)
- zokier 2y ago
  As far as I can tell, these switches tend to run Linux. You can probably get root shell with some effort.
stargrazer 2y ago
lanaotek.com has something similar but use a command line ability.
jfuwjasddf 2y ago
My feedback: 1) the internal sdk client does not respect golang's context so will not terminate gracefully, most tf providers fail to respect golang context, so this is not out of the ordinary. 2) thank you for not saving environment credentials to state, 99% of tf providers fuck this up.
- brennoo 2y ago
  thank you for taking the time to actually check and write a feedback - appreciate.

90 points by brennoo 2y ago

stargrazer 2y ago

Does any one know of switches similar to this but might be loadable with Linux? Maybe able to run with switchdev or similar?

westurner 2y ago
OpenWRT > Table of Hardware > Switches: https://openwrt.org/toh/views/switches https://openwrt.org/toh/views/switches ansible-openwrt: https://github.com/gekmihesg/ansible-openwrt https://github.com/gekmihesg/ansible-openwrt /? terraform OpenWRT: https://www.google.com/search?q=terraform+openwrt https://www.google.com/search?q=terraform+openwrt /? terraform Open vSwitch: https://www.google.com/search?q=open+vswitch+terraform https://www.google.com/search?q=open+vswitch+terraform Open vSwitch supports OpenFlow: https://en.wikipedia.org/wiki/Open_vSwitch https://en.wikipedia.org/wiki/Open_vSwitch Open vSwitch > "Porting Open vSwitch to New Software or Hardware" https://docs.openvswitch.org/en/latest/topics/porting/ https://docs.openvswitch.org/en/latest/topics/porting/
blutack 2y ago
https://blog.benjojo.co.uk/post/sn2010-linux-hacking-switchdev https://blog.benjojo.co.uk/post/sn2010-linux-hacking-switchd... if you hadn't seen it already and the associated HN comments: https://news.ycombinator.com/item?id=40141967 https://news.ycombinator.com/item?id=40141967
evanjrowley 2y ago
Maybe consider MikroTik switches running RouterOS (ROS) / SwitchOS (SwOS)? The learning curve is steeper than other switches, but the functionality is quite powerful. At first I was not a fan of WinBox, but it grew on me after I learned they had a beta version for Linux/macOS and that it could connect to a router by using just a L2 MAC address. It can also be virtualized / dockerized, so you can experiment with it before buying hardware. The newer hardware is even better, but I have the compact desktop version of this 24-port MikroTik switch: https://www.servethehome.com/mikrotik-css326-24g-2srm-review-the-one-to-get/ https://www.servethehome.com/mikrotik-css326-24g-2srm-review... As well as this Wifi 6 AP: https://www.youtube.com/watch?v=ICrDw8_PZ3o https://www.youtube.com/watch?v=ICrDw8_PZ3o They recently released a small 10G ethernet switch that looks seriously good: https://www.servethehome.com/mikrotik-crs304-4xg-in-review-this-is-a-must-have-10gbase-t-marvell-switch/ https://www.servethehome.com/mikrotik-crs304-4xg-in-review-t... If I had to do my network all over again, I'd probably get either the MikroTik L009UiGS-2HaxD or RB5009UG+S+IN: https://www.youtube.com/watch?v=rIxkkNxsEhs https://www.youtube.com/watch?v=rIxkkNxsEhs Side Notes - The Terraform provider for RouterOS is actively developed: https://github.com/terraform-routeros/terraform-provider-routeros https://github.com/terraform-routeros/terraform-provider-rou... - If you want Linux without actually needing to poke at the underlying OS, then you might also be interested in Palo Alto NGFW products running PAN-OS. Terraform is also an option: https://github.com/PaloAltoNetworks/terraform-provider-panos https://github.com/PaloAltoNetworks/terraform-provider-panos - The one area I found RouterOS majorly lacking was IPv6 support, which is provided as a separate plugin/package. My ISP doesn't support IPv6, so this did not make any difference for me. - The best IPv6 support in a network product advertizing a unix-like OS is OPNsense / PFSense, but those are routers and not switch hardware. Terraform providers are also available for these.
- brirec 2y ago
  > The newer hardware is even better, but I have the compact desktop version of this 24-port MikroTik switch: https://www.servethehome.com/mikrotik-css326-24g-2srm-review https://www.servethehome.com/mikrotik-css326-24g-2srm-review... The one you linked unfortunately only runs SwOS, which is really not very good. However, current versions of RouterOS (i.e., any 7.x version) do IPv6 natively without an additional package.
mugsie 2y ago
Any of the SoNIC supported switches - they all run a linux NOS, with an interface to the switch chip. Can even run containers using kubelet :D https://github.com/sonic-net/SONiC/blob/sonic_image_md_update/supported_devices_platforms.md https://github.com/sonic-net/SONiC/blob/sonic_image_md_updat...
- klaas- 2y ago
  any of those switches in the right price range for home? I've been looking for a cheap SONiC switch for a long time but those on the supported hardware list are all rack/datacenter sized I would say -- and none do PoE which I really need for home usage (cameras, wifi APs)
zokier 2y ago
As far as I can tell, these switches tend to run Linux. You can probably get root shell with some effort.

stargrazer 2y ago

lanaotek.com has something similar but use a command line ability.

jfuwjasddf 2y ago

My feedback: 1) the internal sdk client does not respect golang's context so will not terminate gracefully, most tf providers fail to respect golang context, so this is not out of the ordinary. 2) thank you for not saving environment credentials to state, 99% of tf providers fuck this up.

brennoo 2y ago
thank you for taking the time to actually check and write a feedback - appreciate.