Dev.to
6/17/2026

Batfish marks Huawei VRP as unsupported — so I built a source-traceable IR for it
Short summary
Author built vrp-ir, a Python parser for Huawei VRP/USG network device configurations that provides source-level provenance—every parsed value traces back to its exact file:line, crucial for compliance audits and security acceptance testing. It solves a real gap: Batfish marks Huawei as unsupported, and existing tools like ciscoconfparse2 don't track provenance to the config line. Includes 13 security checks, is early-stage (v0.6/alpha), open source (Apache-2.0), and designed to complement Batfish, ntc-templates, and napalm.
- •Fills gap in Huawei VRP config parsing with source-level provenance (file:line tracking)
- •Includes 13 security acceptance checks; each finding cites exact config line
- •Early-stage (v0.6), open source (Apache-2.0), complements Batfish/napalm ecosystem
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



