Live telemetry
Poll interface state, ARP, BGP and CPU/memory over RESTCONF and pin every observation to a local SQLite store for weeks of history.
RESTCONF · SQLite
LIVE ON GITHUB · APACHE 2.0 · PFA PROJECT
Command your
Catalyst 8000v
from the browser.
CAT8k·SYNC is a network-automation platform for a single Cisco Catalyst 8000v edge router — live telemetry, one-click branch provisioning, compliance auditing and deep analytics, all in one dark control room. RESTCONF primary, NETCONF & SSH in reserve.
127.0.0.1:17771/#home
0views
0audit policies
0sec provisioning
0transports
0stored creds
0control room
01 / CAPABILITIES
One edge router.
One edge router.
Full command suite.
Built for a single Catalyst 8000v, end to end — collect, detect, provision, audit, analyse.
One-click provisioning
Jinja2-templated RESTCONF operations spin up branch networks, sub-departments and static hosts in roughly five seconds per cycle.
Jinja2 · RESTCONFCompliance & audit
A 16-policy posture scan flags drift, banner and SSH issues — with one-click fixes, revert, factory reset, and an immutable event ledger.
16 policies · ledgerDeep analytics
Windowed 1D / 1W / 1M charts for resource load, availability, ARP scale, throughput, error bursts and top talkers — each windowed graph in sync.
1D · 1W · 1M · ALLEncrypted vault
Credentials never touch disk in plain text. They live in an encrypted SQLite vault, are masked everywhere, and are used only at call time.
at-rest encryptionQA-gated shipping
A Playwright suite exercises every view, console logs are watched, and every release ships only after the full gate runs clean.
playwright · 40+ checks
02 / INTERFACE
Nine views. One dark control room.
A loopback server on 127.0.0.1:17771 drives the same UI in a pywebview native window or your default browser. Click any view to inspect it.
— click a frame to zoom —
03 / ANALYTICS
History you can actually read.
Every time-bound chart carries a synchronized window selector — flip the whole page from the last day to the last month in one click.
/#analytics · 1W
- 01Compliance score history on a segmented speedometer — red at zero, green at your score.
- 02Resource load, fabric availability and ARP scale over sliding windows.
- 03Throughput RX/TX, error & flap bursts, and top talkers ranked by traffic.
- 04A 24-hour event heat profile plus packet-size distribution.
- 05Every number comes from the local store — the device is never re-polled for a chart.
04 / ARCHITECTURE
One engine, two faces.
A single orchestrator drives both the web UI and the CLI over the same transports, so the browser and the terminal always agree.
▲
RESTCONF primary
Datastore reads and edits over HTTPS 443 — the default path for telemetry and provisioning.
◆
NETCONF & SSH reserve
Secondary transports absorb sandbox flaps with honest retries — never a silent success.
▣
Shared engine
The same orchestrator behind the web window and main.py — identical behaviour, one codebase.
◫
Local-first data
SQLite history, encrypted vault, tamper-evident audit ledger. Loopback-only binding, no network exposure.
05 / STACK
Small footprint. Serious kit.
Python under the hood, a web UI on top, and the device protocol stack in between.
CORE
- Python 3.10+
- pywebview / Edge (Chromium)
- RESTCONF (requests)
- NETCONF · SSH / paramiko
- SQLite (local store + vault)
- Jinja2 templates
FRONTEND
- Vanilla HTML / CSS / JS
- Hand-drawn SVG charts
- Icon sprite
- Playwright QA suite
- No build step, no framework
TARGET
- Cisco Catalyst 8000v
- IOS-XE native datastore
- DevNet Sandbox ready
- Any reachable IOS-XE node
- Public or AnyConnect reservation
Take the controls.
Fork it, run it against the always-on DevNet Sandbox, and turn one router into a managed fabric.