How Ansible® Automation Powers the Uber Corporate Network at a Global Scale

This post details Uber's use of Ansible for configuration management of its global corporate network (Corpnet). It explains the choice of Ansible over other IaC tools due to its agentless nature and ease of use for network devices. The post describes the 'Daily Nightly Enforcement' process, which involves backing up existing configurations, generating 'golden configurations' using Jinja templates and inventory variables, and pushing these to approximately 5,000 network devices across global offices. It highlights how this process standardizes configurations for various network components (switches, gateways, firewalls) from multiple vendors, manages VLANs, and automates tasks like password rotation, ensuring a stable and versioned network state by overwriting manual changes not reflected in the Ansible inventory.