Show HN: IronDiff – 网络配置备份与分析
1 分•作者: MattRos•6 个月前
大家好，我是 Matt。我花了 15 年以上的时间运营一家 MSP（B-Comp Services）并管理基础设施。我和我的团队面临的最大、最持久的难题之一，就是追踪网络配置在正常工作和莫名其妙地崩溃之间到底发生了什么变化。
我们评估过的大多数现有解决方案都臃肿不堪、价格昂贵，或者需要将第三方平台“上帝模式”的写入权限授予网络的关键资产。从安全角度来看，这让我很不舒服。
我构建了 IronDiff 来解决这个问题，并严格注重安全性和简洁性。它是一个 SaaS 平台，旨在提供自动化备份和对网络配置的深度分析，而没有典型的开销。
以下是它的与众不同之处：
通过 SSH 的最小访问权限：我专门设计了 IronDiff，因此该平台不需要复杂的 API 或不受限制的代理。它通过标准 SSH 连接，并且严格编程为仅发出提取配置所需的特定命令。它只做需要做的事情，并且不会干预，从而尽可能地减小您的攻击面。
真正的可视化差异：IronDiff 提供了清晰的、并排的可视化比较，可以查看配置随时间的变化，而不是让您在凌晨 2 点的故障期间手动比较记事本中的原始文本文件。您可以一目了然地看到防火墙、路由器或交换机上哪一行代码发生了变化。
自动化备份：不再依赖工程师记住手动导出配置。IronDiff 会按计划自动执行收集过程，因此您始终拥有可靠的、时间点恢复选项。
专为多租户而构建：由于我构建它来解决我管理多个客户的难题，因此它可以轻松地原生处理多租户 MSP 和企业环境。
我今天早上正式发布它。我非常乐意听取您的反馈，了解您今天如何处理这个问题，或回答您对架构的任何问题。
链接：[https://irondiff.com](https://irondiff.com)
查看原文
Hi HN, I'm Matt. I've spent over 15 years running an MSP (B-Comp Services) and managing infrastructure. One of the biggest, most persistent headaches my team and I face is tracking exactly what changed in a network config between the time it worked and the time it mysteriously broke.<p>Most existing solutions we evaluated were heavily bloated, wildly expensive, or required giving a third-party platform "God mode" write access to the crown jewels of the network. That never sat right with me from a security perspective.<p>I built IronDiff to solve this problem with a strict focus on security and simplicity. It is a SaaS platform designed to provide automated backups and deep analysis of your network configurations without the typical overhead.<p>Here is what makes it different:<p>Minimal Access via SSH: I designed IronDiff specifically so the platform doesn't need complex APIs or unrestricted agents. It connects via standard SSH and is strictly programmed to only issue the specific commands required to pull your configurations. It does what it needs to do and stays out of the way, keeping your attack surface as small as possible.<p>True Visual Diffs: Instead of making you manually compare raw text files in Notepad during a 2 AM outage, IronDiff provides a clean, side-by-side visual comparison of configuration changes over time. You can see exactly which line of code changed on a firewall, router, or switch at a glance.<p>Automated Backups: No more relying on engineers remembering to manually export configs. IronDiff automates the collection process on a schedule so you always have a reliable, point-in-time recovery option.<p>Built for Multi-Tenancy: Since I built this to scratch my own itch managing multiple clients, it natively handles multi-tenant MSP and enterprise environments effortlessly.<p>I'm officially launching it this morning. I would absolutely love to hear your feedback, hear how you handle this problem today, or answer any questions you have about the architecture.<p>Link: <a href="https://irondiff.com" rel="nofollow">https://irondiff.com</a>