Oxidized

Oxidized is self-hosted software for backing up network-device configurations as an open-source alternative to RANCID. It best suits infrastructure teams that want control over collection and storage; its broad device support and flexible outputs are compelling, but the optional web interface and small maintainer base merit consideration.

Overview

Oxidized supports scheduled backups and configuration comparisons across more than 130 operating system types. The project describes it as light and extensible, but running it on-premises means your team takes responsibility for deployment and ongoing operation. Its Apache License 2.0 allows use without charge subject to the license terms.

SSH and Telnet are documented input methods, and Oxidized adjusts its worker threads to meet the configured retrieval interval. That is useful for teams tuning collection cadence across a device inventory. For event-driven collection, syslog UDP or file examples can catch IOS or JunOS changes and trigger a fetch; the API can also move a node to the front of the queue.

Key features

Inventory, storage, and history

Node inventories can come from CSV, SQLite, MySQL, or HTTP, accommodating simple files, databases, and external sources. Output options include File, Git, Git-Crypt, and HTTP. Git creates a commit when a configuration changes, making change history and comparisons part of the backup workflow rather than a separate recordkeeping task.

API and optional web interface

The REST API can reload nodes, fetch configurations, list nodes, show versions and diffs, and prioritize a node for collection. The web interface is supplied through the optional oxidized-web gem and is disabled by default; its default port is 8888. Teams that want a browser interface must account for that separate component and configuration rather than assuming it is active on installation.

Secrets and integrations

The remove_secret option strips sensitive data from fetched configurations before storage, while Git-Crypt encrypts configuration pushes using git-crypt. These provide distinct controls for sanitizing stored content and encrypting pushes, but teams should choose the appropriate handling for their requirements. Hooks support GitHub repository pushes, AWS SNS, Slack, Cisco Spark, and XMPP notifications.

Pricing

Oxidized is free: the Oxidized plan costs nothing and covers configuration backup, comparison, and scheduled backups. There is no paid tier or trial to weigh, and the software is self-hosted under Apache-2.0. The trade-off is operational ownership rather than a hosted service.

Platforms

Oxidized is listed for API, Linux, self-hosted, and web use, with on-premises deployment. Installation guidance covers Debian or Ubuntu, Rocky Linux or RHEL, and FreeBSD, as well as Docker and Podman. This gives teams several deployment routes, though it remains software they must run themselves.

Who it's for

Oxidized is a strong fit for network teams that need configuration backups across varied operating system types, want Git-based change history, or need to trigger retrieval after a detected change. Its multiple inventory and output backends suit teams integrating backup collection with existing systems. It is less suitable for organizations that require a managed service or want the web interface active without extra setup. The project says it is maintained by very few people and invites more individuals and companies to contribute, a relevant concern for teams that depend on sustained maintenance.

Pros and cons

Pros

• Supports more than 130 operating system types, giving teams with varied network equipment broad stated coverage.
• CSV, SQLite, MySQL, and HTTP sources plus four output backends allow flexible inventory and storage choices.
• Git commits on configuration changes, supporting version history and comparison; Git-Crypt adds encrypted pushes.
• REST API operations and syslog-triggered fetch examples support both manual and event-driven collection.
• Free, self-hosted software with an Apache 2.0 license avoids a software subscription cost.

Cons

• The optional web interface is disabled by default, so teams seeking a ready-to-use browser experience must configure oxidized-web.
• The project reports a very small maintainer base, which may concern organizations relying on consistent ongoing maintenance.
• On-premises deployment places installation and operation on the adopting team.

Alternatives

Consider Network Configuration Management Software to compare options across the category. ManageEngine Network Configuration Manager may suit teams seeking a product with a free edition capped at two devices and a paid Professional Edition priced at $238 a year. Unimus is worth considering for a 10-device free plan with no time limit and all features except Compliance and SAML/OIDC. rConfig offers a no-device-limit free Core plan for teams that prefer MIT-licensed software running on their hardware. Arista NG Firewall is another option with a free plan focused on basic security and connectivity features. Netpicker may fit teams wanting a free-for-life plan with unlimited network devices and a single user. NetKeep is another free, self-hosted Linux option for amd64 or arm64 servers. Gluware offers a one-year renewable Community Edition for up to 20 devices, with its full application suite except Topology. Infoblox Cloud Network Automation uses token-based licensing, with custom pricing.

Verdict

Choose Oxidized if your team can run its own software and wants flexible configuration collection, Git-backed change history, and API or event-triggered fetches without a license fee. Look elsewhere if a small maintainer base is too much operational uncertainty or you need a browser interface ready without enabling and configuring an optional component.