Visualizer

If you work with Aviatrix Distributed Cloud Firewall, you know CoPilot is the official UI. There are things it doesn’t do, or doesn’t do well enough when you’re deep in a policy audit, trying to figure out why traffic is behaving the way it is, or explaining your segmentation posture to someone who didn’t design it.

So I built something. It’s called DCF Visualizer, it lives at https://dcf-visualizer.vercel.app/, and it’s completely unofficial. No Aviatrix affiliation, no support contract, just a tool I put together to fill the gaps I kept running into.

What it does

The core is a policy matrix: rows are source SmartGroups, columns are destinations. Each cell shows the policies that match that pair. You can click into a cell to view, create, edit, or delete policies without losing that context.

There’s also a graph view. Instead of a flat circular layout, it places SmartGroups into trust zones based on group names and criteria: Internet at the top, DMZ, app tier, data tier. Policies are directed edges. If a connection goes upward (data tier to internet, say), it looks visually wrong. That’s on purpose. The layout surfaces posture issues without you having to hunt for them.

Traffic simulator: type in a source/destination IP and see which policy would match, with optional FQDN, threat group, and geo overrides

  • Live controller import: pulls SmartGroups and policies from your Aviatrix controller via the 8.x API
  • Terraform HCL import and export (module style or raw resources)
  • Policy evaluator with 29 checks: shadowing, missing deny-all, overly permissive rules, L4/L7 interaction issues
  • AI integration: OpenAI, Anthropic, Google, Bedrock, Ollama, LM Studio

One thing worth saying This is not an Aviatrix product. Not affiliated, not supported. It doesn’t replace CoPilot. I built it for myself and figured someone else running DCF might find it useful.

References

https://dcf-visualizer.vercel.app

Leave a Reply