uOS 2 the future with AI

PeterUK

So this is a long way off or closer then you think but to take the Zyxel hardware and make the firmware support user custom network solutions like real control of how packets get handled a bit like plug ins by like base44 does by AI

Maverick87

I don't follow you, what do you mean?

Zyxel_Tina

Hi @PeterUK,

Thanks for sharing your idea! Just want to make sure we understand your request correctly before we take it further.

Are you referring to something in the current policy control functionality that feels limited or not flexible enough for what you're trying to achieve? If so, could you help us understand the gap a bit more clearly. For example:

• What specific packet-handling behavior are you trying to achieve that isn't currently possible through the existing policy/rule configuration?
• Could you share a scenario where this kind of custom logic would be needed, in detail?

It would really help us evaluate the request if you could give us a concrete example of what you'd want to accomplish with this kind of custom rule/plug-in — the more specific, the better.

Also, if you've come across other brands that already offer this kind of capability, please feel free to share. It would be a useful reference for us as well. :)

PeterUK

Hi Maverick87 and Tina

I know its not possible to day like this could be years off

Just like base44 you can make a site as in coding the idea is Zyxel have something simply where you have the Zyxel base firmware that you can have AI add code to it for custom network solutions that Zyxel are not wanting to add to there base firmware like to do the following:

Real DMZ

Real DMZ made easy — Zyxel Community

or
Source port for firewall Policy control

Source port for firewall Policy control — Zyxel Community

or
A better Connectivity Check for switches and USG

A better Connectivity Check for switches and USG — Zyxel Community

or
Create Object Address based on MAC Address

[USG Flex H] - Create Object Address based on MAC Address — Zyxel Community

or 

Whitelisting/Blocklisting MACs address to join into network

[USG Flex H] - Whitelisting/Blocklisting MACs address to join into network — Zyxel Community

In short Zyxel makes AI understand the firmware code so that we can ask AI like base44 to make custom network solutions.

Maverick87

It's seems interesting but… we speak about a firmware, is not quite simple, if your modification not work or if the AI wrong something, probably you can brick the entire hardware.
Also, the AI needs to know the entire firmware (that is proprietary and not open source, I suppose).

Another possibility can be develop a "plug-in platform" in which you can develop and write a "script" that is an extension of the basic firmware (also in this case zyxel needs to release a Software Development Kit "Zyxel SDK" as a reference on how to develop the script).

Consider that is another development "layer" and the SDK needs to be based on the basic firmware specification.

In this way, can be considering to convert "all" the actual functionalities as a plug-in: policy control, IPS, content filter, vpns, all can be used as plug-in.
In this way, if I not need to use VPN, I not load the plug-in about VPN, and the firewall not have this functionality.

Repeat, can be very interesting, but I suppose that it's needed A LOT OF (a lot of, a lot of….) effort!

PeterUK

Yes a lot of effort but we likely are moving to that I mean I'm stunned how base44 builds a web site and I made it do a TCP/IP network complex like ARP SNAT DNAT Static Routes so building a firewall firmware from the ground again for uOS 2 with AI in mind would be the way to go. Of cause there will aways be the Zyxel base firmware and to stop brick the entire hardware the base firmware would have a dedicated port for the UI that the firmware fails back on so you have access to the firmware slots.

donaldb291

Interesting idea. The ability for the user to customize packet handling through some kind of plugin would be quite valuable indeed. Looking forward to seeing this in later firmwares!

PeterUK

hi donaldb291

well like I said might be years off

Zyxel_Tina

Hi @PeterUK,

Thanks for the detailed follow-up and the examples you shared.

After carefully reviewing the proposal, our team concluded that this feature isn't feasible to implement given our firmware architecture and maintenance priorities (e.g. stability, security, and support considerations). As a result, we do not have plans to take this forward at present.

Thank you again for your continued support and insight!