@@ -3,35 +3,49 @@ icon: fas fa-info-circle
33order : 1
44---
55
6- Infix is a free, Linux based, immutable[ ^ 1 ] operating system for
7- networked equipment. Although primarily focused on switches and
8- routers, its core values may be appealing for other use-cases as
9- well:
6+ Infix is a free, Linux-based, immutable[ ^ 1 ] operating system based on
7+ [ Buildroot] [ 2 ] and completely modeled in YANG using [ sysrepo] [ 3 ] . This
8+ allows for full remote control and monitoring using NETCONF or RESTCONF.
9+ Initially focused on switches and routers, Infix has grown to be useful
10+ for many other use-cases as well.
11+
12+ An immutable operating system greatly enhances security. Configuration
13+ and data, e.g, containers, is stored on separate partitions to ensure
14+ complete separation from system files and allow for seamless backup,
15+ restore, and provisioning.
16+
17+ ### Core Values
1018
1119- Runs from a squashfs image on a read-only partition
1220- Single configuration file on a separate partition
13- - Linux switchdev provides open switch APIs
14- - Atomic upgrades to secondary partition
15- - Highly security focused
21+ - Linux switchdev (DSA) provides open switch APIs
22+ - Atomic upgrades using common A/B partitioning
23+ - Highly security focused — LTS kernel + Buildroot
24+
25+ ### YANG vs NETCONF vs RESTCONF
1626
1727The entire system is modeled using [ YANG] [ 1 ] with standard IETF models
1828and dedicated models when needed to fully leverage Linux capabilities.
1929Meaning, not only is the system configuration derived from YANG, but
2030also system state and any operations (RPC/actions), like upgrade.
2131
22- An immutable operating system greatly enhances security. Configuration
23- and data, e.g, containers, is stored on separate partitions to ensure
24- complete separation from system files and allow for seamless backup,
25- restore, and provisioning.
32+ The * wire protocol* to interact with Infix devices is NETCONF (xml over
33+ ssh) and RESTCONF (json over https). The latter is particularly useful
34+ for scripting (and demo) purposes, while the former has more tooling
35+ available, e.g., [ Clixon Controller] [ 4 ] , which is a NETCONF controller.
36+
37+ ### Adaptability with Containers
2638
27- In itself Infix is perfectly suited for dedicated networking tasks and
39+ In itself, Infix is perfectly suited for dedicated networking tasks and
2840native support for Docker containers provides a versatile platform that
2941can easily be adapted to any customer need. Be it legacy applications,
3042network protocols, process monitoring, or edge data analysis, it can run
3143close to end equipment. Either directly connected on dedicated Ethernet
3244ports or indirectly using virtual network cables to exist on the same
3345LAN as other connected equipment.
3446
47+ ### Summary
48+
3549The simple design of Infix provides complete control over both system
3650and data, minimal cognitive burden, and makes it incredibly easy to get
3751started.
@@ -45,3 +59,6 @@ started.
4559 and < https://www.zdnet.com/article/what-is-immutable-linux-heres-why-youd-run-an-immutable-linux-distro/ > .
4660
4761[ 1 ] : https://datatracker.ietf.org/doc/html/rfc7950
62+ [ 2 ] : https://buildroot.org/
63+ [ 3 ] : https://www.sysrepo.org/
64+ [ 4 ] : https://github.com/clicon/clixon-controller
0 commit comments