Sold by: Lynxroute
Deployed on AWS
Free Trial
This product has charges associated with it for hardening, security configuration, and support.
VictoriaMetrics is a fast, cost-effective open-source time-series database and Prometheus-compatible monitoring solution. This is the single-node community edition (Apache-2.0). Single-node VictoriaMetrics has no built-in authentication on its HTTP API, so unlike bare VictoriaMetrics AMIs that leave port 8428 wide open, this Lynxroute build is locked down out of the box: the database is bound to localhost only, fronted by an Nginx TLS reverse proxy on port 443 with HTTP Basic Auth, with a unique credential generated at first launch. It ships with a UFW firewall, certbot for one-command HTTPS, and a CIS Level 1 hardened Ubuntu 24.04 LTS base.
VictoriaMetrics community edition is Apache-2.0 - fully auditable, no vendor lock-in, never an enterprise build.
Overview
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS VICTORIAMETRICS
VictoriaMetrics is a Go-based, single-binary time-series database and monitoring solution designed for high performance and low resource usage. It speaks the Prometheus ecosystem natively: ingest metrics via Prometheus remote_write, the InfluxDB line protocol, Graphite, OpenTSDB, CSV, or its JSON import API, and query them back with PromQL or the more expressive MetricsQL through a Prometheus-compatible HTTP API. A built-in web UI (vmui) lets you explore and graph metrics straight from the browser. This is the single-node edition: one self-contained process that stores samples in its own on-disk TSDB, so there is nothing else to operate. Data is kept with a 12-month retention window by default on a dedicated data path. The community edition is Apache-2.0, so the whole stack is auditable with no vendor lock-in, and running it in your own AWS account keeps all metrics inside your boundary.
WHAT THIS AMI ADDS
Security hardening:
- VictoriaMetrics (port 8428) bound to localhost only - never exposed directly
- Nginx reverse proxy with TLS on port 443 in front of the HTTP API and vmui
- HTTP Basic Auth perimeter with a unique credential generated at first launch (single-node VictoriaMetrics has no built-in auth)
- Community single-node build only - the enterprise build is never downloaded or shipped (verified by a build-time assertion)
- certbot and the Nginx plugin pre-installed for one-command CA-signed HTTPS
- UFW firewall - ports 22, 80, 443 only
- fail2ban, AppArmor
- CVE scan - every image is scanned for vulnerabilities before release
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
- Security baked in: the time-series database is bound to localhost only and fronted by an Nginx TLS reverse proxy on 443 with HTTP Basic Auth and a unique credential generated at first launch - unlike bare VictoriaMetrics AMIs that expose port 8428 with no authentication at all.
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
- Fast, cost-effective, Prometheus-compatible: ingest via remote_write and query with PromQL/MetricsQL through a built-in web UI. Apache-2.0 community single-node - fully auditable, never an enterprise build, no vendor lock-in.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.02 |
t3.large | $0.03 |
t3.small | $0.02 |
m6i.xlarge | $0.05 |
m6i.large | $0.03 |
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges are billed separately by AWS and are not refundable by us.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
VictoriaMetrics 1.144.0 - Initial release (June 2026)
- VictoriaMetrics 1.144.0 single-node community edition (Apache-2.0) on Ubuntu 24.04 LTS
- Community single-node binary from the official GitHub release - enterprise build never downloaded or shipped (build-time assertion)
- Database bound to localhost (port 8428); Nginx HTTPS reverse proxy on 443
- HTTP Basic Auth perimeter with a unique credential generated at first launch
- certbot and the Nginx plugin pre-installed for one-command CA-signed HTTPS
- 12-month retention on a dedicated data path
- CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)
- CVE-scanned before every release
- UFW firewall pre-configured (ports 22, 80, 443 only)
- fail2ban, auditd, AppArmor pre-configured
- SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json
- CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html
- IMDSv2 enforced
Additional details
Usage instructions
- Launch instance (t3.medium recommended)
- Open Security Group - allow TCP 443 and TCP 80 from your IP
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Read credentials: sudo cat /root/victoriametrics-credentials.txt
- Open https://<PUBLIC_IP>/vmui/ in your browser - accept the self-signed certificate warning
- Authenticate with the admin user and the generated Basic Auth password from the credentials file
- Send metrics with Prometheus remote_write to https://<PUBLIC_IP>/api/v1/write, then query them at https://<PUBLIC_IP>/api/v1/query?query=up
VictoriaMetrics single-node has no built-in authentication; the Nginx HTTP Basic Auth credential (user admin) protects the entire HTTP API and vmui. The database listens on localhost only (127.0.0.1:8428) and is reached through Nginx on port 443. Credentials are saved to /root/victoriametrics-credentials.txt at first boot. Metrics are stored with a 12-month retention window on a dedicated data path; adjust -retentionPeriod in /etc/systemd/system/victoriametrics.service and run: sudo systemctl daemon-reload && sudo systemctl restart victoriametrics Replace the self-signed TLS certificate with a CA-signed certificate for production: sudo certbot --nginx -d yourdomain.com
Resources
Vendor resources
Support
Vendor support
Visit us online: https://lynxroute.com
For VictoriaMetrics documentation: https://docs.victoriametrics.com/ For VictoriaMetrics upstream issues:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Enterprise support services for VictoriaMetrics observability products on AWS
Managed observability platform to deploy and run VictoriaMetrics and VictoriaLogs. Enterprise-ready monitoring and alerting solutions for infrastructure and application IT workloads. VictoriaMetrics Cloud provides cost-efficient time series and logging databases built on scalable open-source monitoring solutions, with added enterprise features (downsampling, retention filters). Guided integrations with Kubernetes, Grafana, Perses, Prometheus, OpenTelemetry, AWS CloudWatch, Fluentbit and more. Support from VictoriaMetrics engineers.
This product has charges associated with it for seller support. VictoriaMetrics is a high performance, cost effective, and scalable time series database designed for monitoring, observability, and metrics storage.
This product has charges associated with it for deployment, configuration, and ongoing support. Self-hosted, Docker-based time-series database optimized for Prometheus metrics on EC2.
This product has charges associated with it for seller support. VictoriaMetrics is a fast, scalable, and cost-efficient open-source time-series database and monitoring solution designed for collecting, storing, and querying metrics at high performance. It is fully compatible with Prometheus, supports long-term metrics retention, and provides efficient storage compression, making it ideal for cloud infrastructure monitoring, observability, DevOps, and large-scale telemetry workloads.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.