Listing Thumbnail

    Netdata - Hardened Real-Time Infrastructure Monitoring

     Info
    Sold by: Lynxroute 
    Deployed on AWS
    Free Trial
    This product has charges associated with it for hardening, security configuration, and support. Netdata is real-time, per-second infrastructure monitoring: it auto-discovers thousands of system and application metrics, runs ML-based anomaly detection and health alerting, and serves a live dashboard out of the box. Unlike bare Netdata AMIs that expose the dashboard wide open on 0.0.0.0:19999 with no authentication and anonymous telemetry phoning home, this build is ready and locked down: a unique Basic Auth password generated at first launch, an Nginx TLS reverse proxy on 443, the dashboard bound to localhost only, telemetry disabled, shipped cloud-disconnected, UFW firewall pre-configured, and a CIS Level 1 hardened Ubuntu 24.04 LTS base. The Netdata Agent is licensed GPL-3.0; the bundled web dashboard UI is provided under the Netdata Cloud UI License v1 (NCUL1), free to use and shipped unmodified.

    Overview

    This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.

    WHAT IS NETDATA

    Netdata is a real-time, high-resolution infrastructure monitoring system. The agent auto-discovers and collects thousands of system and application metrics at per-second granularity (CPU, memory, disks, network, processes, containers, web servers, databases and more), stores them in its embedded time-series database, runs unsupervised machine-learning anomaly detection, evaluates health alerts, and serves an interactive live dashboard. It needs no external time-series database or separate query layer to monitor a single host out of the box. This image runs Netdata single-node and standalone: it is shipped cloud-disconnected (it is not claimed to Netdata Cloud) and anonymous telemetry is disabled, so all metrics stay inside your AWS account. The Netdata Agent is GPL-3.0; running it yourself means no vendor lock-in.

    WHAT THIS AMI ADDS

    Security hardening:

    • A unique Basic Auth password generated at first launch for the Nginx perimeter (the Netdata dashboard has no authentication of its own)
    • Nginx reverse proxy with TLS - the dashboard proxied on port 443
    • The Netdata dashboard and API (19999) bound to localhost only - Nginx is the only exposed door
    • Anonymous telemetry disabled and the local registry turned off (no phone-home)
    • Shipped cloud-disconnected - the agent is not claimed to Netdata Cloud
    • Netdata runs as a non-root service with a restricted systemd unit
    • UFW firewall - ports 22, 80, 443 only
    • fail2ban, AppArmor
    • CVE scan - every image is scanned for vulnerabilities before release

    OS hardening (CIS Level 1):

    • CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
    • auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

    Compliance artifacts:

    • SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
    • CIS Conformance Report at /etc/lynxroute/cis-report.html
    • CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

    LICENSING

    The Netdata Agent (metric collection, storage, ML, alerting and APIs) is licensed GPL-3.0. The bundled web dashboard user interface is provided under the Netdata Cloud UI License v1 (NCUL1), which permits free use and redistribution bundled with the agent; it is shipped unmodified.

    Highlights

    • Netdata security baked in: a unique Basic Auth password generated at first launch, an Nginx TLS reverse proxy on 443, the dashboard and API bound to localhost only, anonymous telemetry disabled
    • CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
    • Real-time per-second monitoring: thousands of auto-discovered metrics, ML anomaly detection and health alerting, and a live dashboard out of the box. Netdata Agent GPL-3.0; the bundled dashboard UI is under NCUL1, free to use.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    Ubuntu 24.04

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    Netdata - Hardened Real-Time Infrastructure Monitoring

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (3)

     Info
    Dimension
    Cost/hour
    t3.medium
    Recommended
    $0.02
    t3.large
    $0.03
    t3.small
    $0.02

    Vendor refund policy

    We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Version release notes

    Netdata 2.10.3 - Initial release (June 2026)

    • Netdata Agent 2.10.3 on Ubuntu 24.04 LTS
    • Netdata Agent (GPL-3.0) installed from the official Netdata stable package repository; bundled web dashboard UI under NCUL1, shipped unmodified
    • Dashboard and API (19999) bound to localhost only - Nginx is the only exposed door
    • Unique Basic Auth password generated at first launch for the Nginx TLS perimeter on 443
    • Shipped cloud-disconnected (not claimed to Netdata Cloud); anonymous telemetry disabled; local registry turned off
    • Netdata runs as a non-root service with a restricted systemd unit
    • CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)
    • CVE-scanned before every release
    • UFW firewall pre-configured (ports 22, 80, 443 only)
    • fail2ban, auditd, AppArmor pre-configured
    • SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json
    • CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html
    • IMDSv2 enforced

    Additional details

    Usage instructions

    1. Launch instance (t3.medium recommended)
    2. Open Security Group - allow TCP 443 and TCP 80 from your IP
    3. SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
    4. Read credentials: sudo cat /root/netdata-credentials.txt
    5. Open https://<PUBLIC_IP> in your browser - accept the self-signed certificate warning, then sign in with the Basic Auth user admin and the generated password; the live dashboard loads with real-time, per-second metrics for this host
    6. Replace the self-signed TLS certificate with a CA-signed certificate (sudo certbot --nginx) for production use

    The Basic Auth password is generated uniquely at first launch and saved to /root/netdata-credentials.txt. The Netdata dashboard and API (port 19999) are bound to localhost - Nginx on port 443 is the only exposed door. This image ships cloud-disconnected (not claimed to Netdata Cloud) with anonymous telemetry disabled, so all metrics stay inside your AWS account. To connect to Netdata Cloud, edit /var/lib/netdata/cloud.d/cloud.conf (set enabled = yes) and run sudo netdata-claim.sh with your token. Restrict Security Group port 443 to your IP before exposing the instance publicly.

    Resources

    Vendor resources

    Support

    Vendor support

    Visit us online: https://lynxroute.com/#contact 

    For Netdata documentation:

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    0 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    0%
    0%
    0%
    0%
    0 reviews
    No customer reviews yet
    Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.