The --hide-module parameter specifies the name of a module to hide from advertisements to client sessions. If the specified module name is loaded into the server, then this parameter will cause it to be omitted from the following data structures:

  • YANG 1.0 <hello> message

  • /netconf-state/schemas/schema list

  • /modules-state/module list


This parameter will prevent the client from knowing about the hidden module. If an advertised module imports a hidden module then it is very likely a client will not be able to use the advertised module because of the missing imports.


This parameter can be dangerous! It does not prevent loading or enabling of the module. The SIL code is responsible for not returning any data to a client using a hidden module.


Use of this parameter violates conformance to NETCONF, RESTCONF, and the YANG Library. Use hide-module with caution, and only for modules that are not accessible by clients.

There is no default for this parameter, and there is no limit on how many modules could be hidden.


The --hide-module parameter can be set via the command line when booting netconfd-pro:


user@system> netconfd-pro --hide-module=mysecretmod


or configured in netconfd-pro's configuration file, usually /etc/yumapro/netconfd-pro.conf:


#
#### leaf-list hide-module
#
# Specifies the name of a module to hide from
# advertisements to client sessions. If the
# specified module name is loaded into the server,
# then this parameter will cause it to be
# omitted from the following data structures:
#  - YANG 1.0 <hello> message
#  - /netconf-state/schemas/schema list
#  - /modules-state/module list
#
# no default for hide-module
#
hide-module mysecretmod