From 54905bc1f1f285dc1c687dcde708efb1f57c4e30 Mon Sep 17 00:00:00 2001 From: Brad Kollmyer Date: Tue, 14 Jul 2026 13:50:41 -0700 Subject: vyos-api: T9092: add bulk configuration guidance Batch sizing, geoip/remote-group commit cost, the 1 MB request-body-size-limit, and commit-confirm as a remote safety net. Co-Authored-By: Claude Fable 5 (cherry picked from commit af04731c74b0383bc36c66addd6cc22ba41c55e0) --- docs/automation/vyos-api.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/docs/automation/vyos-api.md b/docs/automation/vyos-api.md index 3c3d16f3..1342a124 100644 --- a/docs/automation/vyos-api.md +++ b/docs/automation/vyos-api.md @@ -610,6 +610,24 @@ response: ``` +## Bulk configuration + +Large applies over the API (initial provisioning, firewall migrations with +hundreds of operations) benefit from a few precautions: + +- Prefer several requests of moderate size over one very large list of + operations, and retry per operation on failure. A very large single + commit can run longer than the HTTP gateway allows and return a timeout + even though the commit itself eventually succeeds. +- Commits that reference `geoip` country codes or `remote-group` URLs are + significantly more expensive than plain set operations, because they + trigger database or remote-list processing. Apply those one per request. +- The request body size is limited by + `service https request-body-size-limit` (1 MB by default); a very large + operation list or `config-file` string can exceed it. +- Consider commit-confirm (below) as a safety net when reconfiguring a + remote system. + ## Commit-confirm For the previous two endpoints, a `commit` command is executed automatically -- cgit v1.2.3