ZeroRadius 🌐

ZeroRadius is a modern, full-stack, state-driven management interface for the FreeRADIUS AAA Server. Built to abstract the severe complexities, flat-file hell, and UX pitfalls of traditional legacy managers (like daloRADIUS), it offers a React-driven frontend and an asynchronous Python/FastAPI backend designed for enterprise networks and ISPs.

🚀 Why ZeroRadius over daloRADIUS?

Historically, operating daloRADIUS meant fighting with raw SQL schemas, clunky 2000s PHP interfaces, and manual dictionary editing to provision modern devices. ZeroRadius changes the paradigm:

• Visual Macro Builders: Drag and drop RADIUS attributes instead of manually typing radgroupreply statements. Syntax constraints are strictly validated by pyrad.
• Zero-Trust Identity Mapping: Granular, NAS-based privilege scopes (ISO 27001 compliant) instead of granting global network access for every administrator.
• RESTful Asynchronous Backend: Built entirely on modern FastAPI + SQLAlchemy 2.0 Async, enabling massive high-concurrency without breaking a sweat.

🏗 Architecture & Stack

ZeroRadius is fully containerized and consists of four main pillars:

1. Frontend (React + Vite + TailwindCSS):

   • Consumer-grade UI/UX for network administrators.
   • Manages Users, Accounts, NAS Devices, Active Sessions, Audit Logs, and NAS Categories.
   • Real-time RADIUS Log Viewer accessible from the header for live Access-Request monitoring.
   • Privilege Map with category-based targeting for ISO 27001 compliance.
   • Communicates with the Backend via REST APIs and WebSockets.

2. Backend (FastAPI):

   • High-throughput REST API written in Python.
   • Manages business logic and direct connection to the AAA MariaDB.
   • WebSocket log streaming endpoint for real-time FreeRADIUS log monitoring via Docker SDK.
   • Executes custom localized Audit Trails (app_audit_log).

3. RADIUS AAA Server (FreeRADIUS v3.2.3):

   • Standard FreeRADIUS configured for 100% SQL-driven operation. No local users or text-based configurations. All network policies reside dynamically inside MariaDB.

4. Database (MariaDB):

   • Stores the standard FreeRADIUS schemas extended with ZeroRadius custom identity management tables.

📚 Official Documentation & User Manuals

The project relies on localized, flowchart-driven Markdown manuals to ensure network administrators can confidently provision networks.

• 01. NAS Provisioning & Huntgroups - How to onboard hardware, segment network devices, and categorize NAS devices by type/location using NAS Categories.
• 02. ISO 27001 Privilege Map & RBAC - Deep dive into ZeroRadius's Identity Access Management (IAM), explaining how general authentication tokens are converted into restricted, hardware-specific group roles dynamically during login. Now supports category-based targeting.
• 03. JIT "Break-Glass" Workflow - Understanding Just-In-Time role elevation logic. How operators request timed root-access and how the Expiration attribute is injected into the AAA workflow.
• 04. Live RADIUS Log Viewer - Real-time monitoring of Access-Request events (Accept/Reject) via WebSocket streaming from the FreeRADIUS container.
• 05. NAS Categories Management - Managing NAS device categories for streamlined provisioning and bulk operations.

🛠 Deployment & Setup

Deploying the stack is native and self-contained via Docker.

# Clone the repository
git clone https://github.com/alexandervazquez98/ZeroRadius.git
cd ZeroRadius

# Initialize the stack
docker-compose up -d --build

• Frontend Application: http://localhost:3000
• Backend Swagger Docs: http://localhost:8000/docs