BE Networks Blog

Why Network Engineers Should Use Terraform to Define and Operate Modern Networks

By a CCIE-Certified Network Engineer

As a network engineer who came up through the ranks configuring devices by hand and living in the CLI, I’ve seen firsthand how traditional methods of managing networks can become a bottleneck. Manual configuration is slow, error-prone, and difficult to scale. In today’s environment of distributed infrastructure, hybrid clouds, and rapid deployment cycles, we need better tools. One of the most powerful tools available is Terraform, an Infrastructure as Code (IaC) platform that is just as useful for networking as it is for servers and storage.

Terraform allows you to define your infrastructure in simple, declarative code. This includes switches, routers, firewalls, cloud networking components, and more. That code is stored in version control systems like Git, shared across teams, and used to build and manage infrastructure consistently and reliably.

The benefits of using Terraform in network operations are significant and go far beyond just automation, so we decided to make the Verity Native Terraform Provider do a lot of cool things that engineers have always wanted.

Repeatability and Consistency

When network configurations are written as code, you gain a reliable and repeatable deployment method. Whether you are deploying a new data center or expanding a branch network, you can reuse the same code and be confident the result will be consistent. This eliminates drift between environments and reduces the need for manual documentation. 

Version Control and Auditability

With Terraform, every network change is captured in a Git commit. You can see exactly what was added, changed, or removed. This means you have a complete history of your infrastructure and can easily roll back changes if something goes wrong. From a compliance and audit standpoint, this level of visibility is invaluable. 

Validation Before Deployment

The terraform plan command gives you a preview of what changes will be made before anything is applied. You can see which VLANs will be created, which routes will be added, or which ACLs will be updated. This pre-deployment visibility greatly reduces the chances of misconfiguration and allows for peer review of changes before they hit production. 

Multi-Vendor Support

Terraform is not tied to one vendor. It supports major networking platforms through providers. Whether you are working with Cisco, Arista, Juniper, Palo Alto, VMware NSX, or even open-source solutions like SONiC, Terraform can help manage those configurations in a consistent way. This is critical in multi-vendor environments where tooling fragmentation is a real challenge. 

Integration with CI/CD Pipelines

By defining your network infrastructure as code, you can integrate it into CI/CD pipelines. This brings modern DevOps practices into the network space. You can run tests, perform compliance checks, and automatically deploy changes in a controlled and auditable way. It becomes much easier to scale your operations without sacrificing quality or control. 

Improved Collaboration

When your configurations live in code, network engineers, system engineers, and application developers can collaborate more effectively. Everyone works from the same source of truth. This breaks down the silos that often exist between teams and fosters a culture of shared responsibility and transparency.

Brownfield Support

Unique to the Verity provider is a tool that allows you to convert your existing network into the necessary .tf files to enable your IaC workflows.  When you run this single command, terraform resource files are generated on the local machine for all of the resources that exist in the Verity-managed network.  This is essentially the equivalent of turning your entire network into code so you can easily modify the text files and run terraform plan & terraform apply to change the network state.  Details on this functionality are located in the State Importer section of the docs. 

Conclusion

For decades, network engineers have been masters of the CLI. But as infrastructure becomes more complex and dynamic, we need tools that can scale with the demands of modern IT. The Verity Terraform Provider enables the discipline, flexibility, and efficiency of software engineering into the world of networking. It is not just an automation tool; it is a strategic enabler for more agile and reliable network operations. If you are not using it yet, now is the time to start! 

Picture of Josh Saul

Josh Saul

VP Product Marketing

Josh Saul has pioneered open source network solutions for more than 25 years. As an architect, he built core networks for GE, Pfizer and NBC Universal. As an engineer at Cisco, Josh advised customers in the Fortune 100 financial sector and evangelized new technologies to customers. More recently, Josh led marketing and product teams at VMware (acquired by Broadcom), Cumulus Networks (acquired by Nvidia), and Apstra (acquired by Juniper).

en_US
Contact Us
We really like talking about networks!