## overview
NetSage takes over the network engineer workload: design, config generation, troubleshooting, deployment, and audit. Eight specialized agents collaborate under a three-gate pipeline - every change passes Containerlab simulation, Batfish validation, and human approval with snapshot rollback before it touches a real device.
Pain → Solution → Value
Network operations depend on deep vendor-specific knowledge that few engineers actually hold — and a single misconfig can take down a region. NetSage replaces tribal CCIE work with a coordinated team of 10 specialized AI agents, a three-gate engine, and multi-vendor support out of the box.
Pain
Vendor-locked config
Huawei / Cisco / H3C each speak their own.
Solution
10 agents + multi-vendor
Huawei VRP, Cisco IOS-XE, H3C, Juniper, Arista.
5
Vendors, 1 workflow
Pain
Misconfigs cause outages
One typo can take down a region.
Solution
Three-gate engine
Simulate → validate → approve + rollback.
0
Unintended outages
Pain
Scarce CCIE engineers
Few hold the tribal knowledge.
Solution
Planner + containerlab sim
Topology-driven deploys.
↓" data-i18n-zh="↓">↓
Days → hours
Pain
Tribal troubleshooting slow
Outages sit until a CCIE is online.
Solution
10 named agents on-call
planner, validator, troubleshooter, …
24/7
Always-on network engineer
What changes for the team
A wider view of the same loop. Each card zooms into the corresponding column above.
Pain
Network ops depend on tribal CCIE knowledge
- Deep vendor-specific knowledge — Huawei VRP, Cisco IOS-XE, H3C, Juniper, Arista — held by few engineers.
- A single typo in an ACL or BGP config can take down a region.
- Troubleshooting is slow, tribal, and dependent on who's online.
5
Vendors each with its own dialect
Solution
10 agents + a three-gate engine
- Specialized agents — planner, config_engineer, validator, troubleshooter, observer, security_auditor, … — each own a stage.
- Containerlab simulation + Batfish validation + human approval with snapshot rollback before any device is touched.
- Multi-vendor out of the box: Huawei, Cisco, H3C, Juniper, Arista.
10
Specialized agents
Value
Deploys in hours, outages become rare
- Changes that took days ship in hours — the planner + simulator pipeline replaces tribal pre-checks.
- Misconfig-driven incidents drop sharply: every change is simulated, validated, approved.
- One platform runs the whole multi-vendor network — no tribal knowledge required.
3
Gates before any device is touched
## technical architecture
## product architecture
## capabilities
8 specialized agents
planner · config_engineer · validator · troubleshooter · deploy · observer · security_auditor · compliance.
3-gate pipeline
Containerlab sim -> Batfish validation -> human approval + snapshot rollback.
Multi-vendor
Huawei VRP · Cisco IOS-XE · H3C · Juniper · Arista.
Dual source-of-truth
NetBox + Nautobot adapters, switchable.
## screenshots
## metrics
- 8 specialized agents
- 3-gate pipeline (simulate -> validate -> approve)
- Multi-vendor: 5 OS families
- 30 baseline rules (CIS + vendor)
- RBAC 5 levels