aerleon: Generate firewall configs for multiple firewall platforms

by ddos · April 28, 2026

aerleon

Generate firewall configs for multiple firewall platforms from a single platform-agnostic configuration language through a command line tool and Python API.

Aerleon is a fork of Capirca with the following major additions:

YAML policy and network definition files and pol2yaml, a converter from Capirca policy DSL to YAML.
Network definitions with FQDN data.
New firewall platforms can be added through plugins.
Typed Python APIs for ACL generation and aclcheck queries.
A SLSA-compatible verifiable release process.
A detailed regression test suite.
Many bug fixes and performance enhancements.