Oxidized

Oxidized is a free, self-hosted tool for backing up network device configurations and is described as a RANCID replacement. The project says it supports over 130 operating system types, with SSH and Telnet among its documented input methods. Node data can come from CSV, SQLite, MySQL, or HTTP sources. Backup outputs include files, Git, Git-Crypt, and HTTP; Git records a commit when a configuration changes, while Git-Crypt encrypts configuration pushes using git-crypt. Oxidized adjusts its worker threads to meet a configured retrieval interval. Its REST API can list nodes, fetch configurations, show versions and differences, reload nodes, and move a node to the front of the queue. Syslog examples can trigger a fetch after a configuration change. The optional oxidized-web gem provides the web interface and API, disabled by default and configured for port 8888 by default. A remove_secret option strips sensitive data before storage. Oxidized uses Apache License 2.0. The project says it is maintained by very few people and invites additional involvement.

Oxidized provides self-hosted configuration backups with several data sources and storage outputs, plus API functions for retrieving and comparing configurations. The optional web interface is disabled by default, and the project reports a small maintenance team.

Oxidized suits network administrators seeking self-hosted configuration backups, scheduling, and comparison tools for supported devices. Its documented inputs, outputs, and API support varied backup workflows.

Oxidized is self-hosted software for backing up network-device configurations, aimed at infrastructure teams that want to control collection and storage themselves. Its flexible sources, outputs, and change history make it a strong fit for that job, though the web interface is optional and the project has a small maintenance team.

Overview

Oxidized is a free, Apache-2.0-licensed RANCID replacement for scheduled configuration backups and comparisons. It supports more than 130 operating system types and is designed to be light and extensible. That breadth and no-charge license are appealing when a team can host and manage the tool; they are less compelling for organizations that want a managed service or a vendor-backed support commitment.

Documented collection methods include SSH and Telnet. Oxidized adjusts its worker threads to meet the configured retrieval interval, which helps keep collection aligned with the schedule. For event-driven work, a syslog UDP or file example can detect IOS or JunOS changes and trigger a fetch. The REST API can also move a node to the front of the queue, useful when a known event should prompt an immediate collection rather than waiting for the next interval.

Key features

Inventory, storage, and history

Node sources include CSV, SQLite, MySQL, and HTTP, so teams can use a straightforward file, a database, or an external source. Output choices are File, Git, Git-Crypt, and HTTP. Git commits each configuration change, giving operators a revision history that supports comparisons without a separate change-recording step. Git-Crypt encrypts configuration pushes using git-crypt, while the remove_secret option strips sensitive data from fetched configurations before storage. These controls address different risks, so teams should choose the handling that fits their security requirements.

API and optional web interface

The REST API can reload nodes, fetch configurations, list nodes, show versions and diffs, and move a node to the head of the queue. The API and web interface come through the optional oxidized-web gem; it is disabled by default and uses port 8888 by default when configured. That default-off design suits teams that want the collection tool without an exposed interface, but those seeking a ready-to-use web console must add and configure the component.

Integrations and operation

Hooks support GitHub repository pushes, AWS SNS, Slack, Cisco Spark, and XMPP notifications, giving teams ways to connect backup events to existing workflows. Installation documentation covers Debian or Ubuntu, Rocky Linux or RHEL, FreeBSD, Docker, and Podman. Help channels include Gitter, GitHub, and the LibreNMS community forum, but the project says it is maintained by very few people and asks more individuals and companies to contribute. That makes its breadth attractive, while making maintenance capacity a real consideration for teams that need dependable ongoing support. The Apache License 2.0 grants perpetual worldwide no-charge copyright and patent licenses subject to its terms.

Pricing

Oxidized is free: its Oxidized plan costs nothing and covers the self-hosted, Apache-2.0-licensed software. It includes configuration backup, configuration comparison, and scheduled backups, with on-premises deployment. There is no free trial because the software itself is free. The trade-off is operational rather than tier-based: teams supply and maintain their own environment, and no paid plan is presented as an alternative support route.

Platforms

Oxidized supports API, Linux, self-hosted, and web platforms. It is an on-premises deployment, with documented installation paths for Debian or Ubuntu, Rocky Linux or RHEL, and FreeBSD, plus Docker and Podman. The web interface is optional and disabled by default, so the web platform does not imply a console that is active out of the box.

Who it's for

Oxidized is best suited to network teams that can run their own software and want broad device coverage, configurable inventory sources, and versioned backups. Its API, event-triggered collection options, and range of storage outputs also suit teams integrating configuration capture with existing workflows. Teams that need a maintained commercial product, a default-on web interface, or a hosted deployment should look elsewhere.

Pros and cons

• Pros: Supports more than 130 operating system types, making it useful across varied network environments.
• Pros: Git records each configuration change, while Git-Crypt and remove_secret offer distinct ways to address sensitive configuration data.
• Pros: Free, self-hosted deployment includes scheduled backups and comparisons without a device cap stated for the plan.
• Cons: The optional web component is disabled by default, so teams wanting a web interface must configure it themselves.
• Cons: The project reports very few maintainers, a concern for organizations that depend on a large support and maintenance team.
• Cons: Self-hosting shifts deployment and upkeep to the team rather than providing a managed service.

Alternatives

ManageEngine Network Configuration Manager is worth considering for teams that want a freemium product with a free edition capped at two devices and paid plans, plus Android, iOS, Linux, self-hosted, web, and Windows platforms. rConfig is another self-hosted option: its free Core plan has no device limit, while the Starter plan is a $3,900, paid once purchase for up to 300 devices. Unimus may fit smaller deployments seeking a free tier for 10 devices with all features except Compliance and SAML/OIDC, and it also offers paid plans. Netpicker offers a free-for-life Foundation plan with unlimited network devices, a single user, and Professional features for 10 devices. Gluware has a renewable one-year Community Edition for up to 20 devices, with its full application suite except Topology. Mobile Net Switch is a fully functional, non-expiring free option for Windows 11 and Windows 10 on x86, x64, and ARM, rather than a Linux or web-platform choice. NetKeep is a free self-hosted alternative for Linux amd64 or arm64 servers under the AGPL-3.0 license. Arista NG Firewall is another freemium option with a free plan for basic security and connectivity features with limited capabilities.

For a broader comparison, see Network Configuration Management Software.

Verdict

Choose Oxidized if your network team wants free, self-hosted configuration backups with broad device support, flexible data sources, and Git-based history. Its strongest case is the combination of scheduled collection, comparison, and adaptable storage without a license charge. Look elsewhere if you need a ready-made web interface, managed operation, or greater confidence in the size of the maintenance team.