Awesome Infoblox

A curated list of awesome Infoblox, libraries, software and resources.

Inspired by a lot of awesome list out there. Credit to Sif Baksh for the original inception, John Neerdael has expanded on the list and added more useful resources.

---

BloxOne Platform

• B1 Platform Automation Demo - This script is designed to provide a standard, simple way to demonstrate the power of automation with the Bloxone DDI and TD platform and create a set of demo data for demonstration of the GUI as well as to quickly provision a BloxOne Threat Defense customer with policies configured acoording to Infoblox Best Practices (Author: Chris Marrison)

BloxOne Threat Defense

• Feed to CSP - About BloxOne Threat Defense integration with Fortinet and Palo Alto domain names and IPs brings an even wider IOC coverage by threat intelligence unification. Fortinet IOCs are enforced at DNS level globally on all DNS even for roaming users who have not established their VPN (Author: Nicolas Jeanselme)
• Map endpoints to endpoint_groups based on naming policy - map endpoints to endpoint_groups based on naming policy (Author: Nicolas Jeanselme)
• B1TD TIDE Data Feed - Tool to easily create Threat feeds for third party solutions through Infoblox API's (Author: Chris Marrison)
• Infoblox Threat Intelligence - Splunk Add-on for Infoblox Intelligence allows to get threat intelligence from Infoblox Threat Intelligence Data Exchange / TIDE (hosts/IPs/URLs - depending on your BloxOne Threat Defense license) and network intelligence from networks in NIOS IPAM. It optionally allows to feed Splunk Entreprise Security (Splunk ES).(Author: Nicolas Jeanselme)
• Infoblox BloxOne Threat Defense - Splunk Add-on (Author: Nicolas Jeanselme) that:
  • acquire BloxOne Threat Defense Cloud logs using REST API
  • filter it efficiently with full drill down support based on the time, threat property, threat class, source IP, domain name, query type
  • summarize hits by IOCs
  • get IOCs context from Infoblox Dossier threat intelligence
  • prioritize hits based on context
  • search and pivot Threat Intelligence based on the IOCs matched in DNS traffic
  • report on BloxOne endpoints deployment
• DNS Query Source - Simple shell tool that uses a Google DNS application to determine the location of your DNS server (tests with your local configured DNS server and Google DNS), can be used to validate local internet breakout functionality of BloxOne Threat Defence if your local DNS server is BloxOne DDI and running a DNS Forwarding Proxy (ex. ./dns.sh <B1DDI+DFP IP>)

BloxOne DDI

Scripts, modules and other resources

• python-bloxone - The Infoblox BloxOne suite of applications provides a RESTful API that is published using Swagger on CSP along with other Infoblox APIs. (Author: Chris Marrison)
• BloxOne OPH Management - Mange and rename OPH for BloxOne (Author: Franck Hecker)
• BloxOne Ansible - Infoblox Ansible Collection for BloxOne (infoblox.b1ddi_modules) allows you to interact with the BloxOne DDI through APIs. (Author: Infoblox Engineering)
• B1DDI Automation Demo - This script is designed to provide a standard, simple way to demonstrate the power of automation with the Bloxone DDI platform and create a set of demo data for demonstration of the GUI. (Author: Chris Marrison)
• [DHCP Option Encoding] (https://github.com/ccmarris/dhcp_option_encoding) - Demonstration script for Hex Encoding/Decoding of DHCP Options using the dhcputils from the bloxone module to make sure DHCP options are correctly encoded for use in KEA.

NIOS to B1DDI

• NIOS CSV to B1DDI - Migrate data from NIOS CSV Export to Bloxone DDI - Best option (Author: Sif Baksh)
• NIOS CSV to B1DDI - Migrate data from NIOS CSV Export to Bloxone - Secondary option (Author: John Neerdael)

NIOS

Scripts, modules and other resources

• CSV to RPZ - This will create an RPZ CSV file from a list of Domains in a file so you can import into NIOS (Author: Sif Baksh)
• NIOS CSV Import - This is script will help you import a CSV into NIOS and check in real time while it uploads. (Author: Franck Hecker)
• Infoblox Ansible Modules - Infoblox Ansible Collection for vNIOS allows managing your NIOS objects through APIs. It, thus, enables the DNS and IPAM automation of VM workloads that are deployed across multiple platforms. The nios_modules collection provides modules and plugins for managing the networks, IP addresses, and DNS records in NIOS. (Author: Infoblox Engineering)
• Swagger Documentation - Swagger documentation for Infoblox grid REST APIs (Author: Infoblox Engineering)
• NIOS Zero-Touch Provisioning with Ansible - Deploying Infoblox Grid( Grid Master and a Member) and doing initial configurations through Ansible on OpenStack. (Author: Infoblox Engineering)
• NIOS Zero-Touch Provisioning with VMware - Zero touch deployment of Infoblox Grid on Vmware vsphere using Ansible (Author: Infoblox Engineering)
• VMware Autoscale - Script to automatically scale up or down the Infoblox grid, hosted on a VMWare environmen,t based on DNS queries per second (Author: Infoblox Engineering)
• Openstack/Ansible Autoscale - Autoscaling vNIOS on Openstack solution using ansible, is a combination of shell script and ansible playbook. (Author: Infoblox Engineering)
• Terraform Provider NIOS - Infoblox Provider for Terraform (Author: Infoblox Engineering)

Network Insight

Scripts, blogs and other resources

• infoblox-utilities - Enable discovery for networks and change networks from unmanaged to managed. (Author: Infoblox Engineering)
• Infoblox Community - Infoblox Public Community site
• Getting Started with 5 CCS scripts - This is will get you started with Scripting language - Files can be found here
• Python Script getting started blog - How to use Python in NetMRI - Video can be found here