search

fortinet-ansible-dev / ansible-galaxy-fortios-collection

GNU General Public License v3.0
85 stars 49 forks source link

How to speed up configuration changes #343

Open nitzan-tz opened 3 months ago

nitzan-tz commented 3 months ago

I have a large firewall and I have to configure about 20,000 objects (10,000 address , 7000 address groups ...) When I am doing it via Ansible it is very slow (3 hours for the 10,000 address ) as it works in a serial way one by one. I also noticed that for each task ansible opens a new HTTPs connection instead of using the previous one that is already open. I tried with poll:0 async: 5 but it wasn't faster and also in some cases didn't configure the objects

What are the options to speed up Ansible for fortios ?

MaxxLiu22 commented 3 months ago

Hi @nitzan-tz ,

Thank you for bringing this issue to our attention. We acknowledge that Ansible may be slower than deploying configurations directly via API in certain situations. I have reported this to the development team to seek their guidance on potentially supporting parallel task execution or enhancing the deployment process. We apologize for any inconvenience this may have caused. I will let you know once a solution is available.

Thanks, Maxx