VRF-independent prefix children #8059

Closed
opened 2025-12-29 20:31:50 +01:00 by adam · 2 comments
Owner

Originally created by @marcartz on GitHub (May 15, 2023).

NetBox version

v3.5.1

Feature type

Change to existing functionality

Proposed functionality

New prefix view: Please provide a flag to configure a prefix display view in a way that child prefixes are included purely based on their address, ignoring their VRF membership.

Use case

When using VRFs to enforce security zones, as common in many Cisco designs, children prefixes of a given supernet may belong to different VRFs. A central routing instance interconnects all VRFs in a single shared routing table (Fusion Router).
While Prefixes are technically unique to a given VRF in this scenario some coordination (uniqueness) of networks across VRFs is still required.

Database changes

No response

External dependencies

No response

Originally created by @marcartz on GitHub (May 15, 2023). ### NetBox version v3.5.1 ### Feature type Change to existing functionality ### Proposed functionality New prefix view: Please provide a flag to configure a prefix display view in a way that child prefixes are included purely based on their address, ignoring their VRF membership. ### Use case When using VRFs to enforce security zones, as common in many Cisco designs, children prefixes of a given supernet may belong to different VRFs. A central routing instance interconnects all VRFs in a single shared routing table ([Fusion Router](https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/dna-center/213525-sda-steps-to-configure-fusion-router.html)). While Prefixes are technically unique to a given VRF in this scenario some coordination (uniqueness) of networks across VRFs is still required. ### Database changes _No response_ ### External dependencies _No response_
adam added the type: feature label 2025-12-29 20:31:50 +01:00
adam closed this issue 2025-12-29 20:31:50 +01:00
Author
Owner

@jeremystretch commented on GitHub (May 15, 2023):

When using VRFs to enforce security zones

This is not the purpose of VRFs. Each VRF represents a discrete routing table. I'd suggest using tags, custom fields, or a plugin to effect the association of prefixes to security zones, as doing so is wholly independent from VRF assignment.

@jeremystretch commented on GitHub (May 15, 2023): > When using VRFs to enforce security zones This is not the purpose of VRFs. Each VRF represents a discrete routing table. I'd suggest using tags, custom fields, or a plugin to effect the association of prefixes to security zones, as doing so is wholly independent from VRF assignment.
Author
Owner

@marcartz commented on GitHub (May 15, 2023):

I'm trying to propose a feature that would make Netbox even more helpful to us any many others as I'm confident (as I've tried to explain this design is very common with various large network vendors).
This feature would only affect the display of prefixes and would not require any changes to the data model.
What criteria would this feature request have to fulfil to make you consider it?

@marcartz commented on GitHub (May 15, 2023): I'm trying to propose a feature that would make Netbox even more helpful to us any many others as I'm confident (as I've tried to explain this design is very common with various large network vendors). This feature would only affect the display of prefixes and would not require any changes to the data model. What criteria would this feature request have to fulfil to make you consider it?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#8059