Probably JSON-based API. Requirements: - Secure (IP and port binding in config + source IP whitelist) - Validate all requests and formats before passing thru - Saving all changes to new format config (if the system using old config - do not allow changes)