Overview
Anubis and nginx active, metrics serving
The anubis and nginx services reporting active under systemd, the installed Anubis version, and the Prometheus metrics endpoint returning HTTP 200 on the loopback interface.
Anubis and nginx active, metrics serving
Normal visitor proxied to the upstream
AI scraper blocked at the firewall
No baked secret, per-instance key
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Anubis is a self-hostable Web AI Firewall and reverse proxy that weighs the soul of every incoming HTTP request to stop AI scrapers and abusive crawlers before they reach your application. A single Go binary runs continuously under systemd, reverse-proxying to an upstream you choose while serving a lightweight, browser-transparent proof-of-work challenge, or an outright deny, to flagged AI-crawler user agents. Normal human visitors are allowed straight through by the default policy, so legitimate traffic is unaffected while known scrapers such as Amazonbot, Bytespider, PerplexityBot and Scrapy are blocked or challenged. This image delivers Anubis fully installed and running behind an nginx TLS terminator, protecting a bundled demo upstream out of the box, so a working firewall is answering within minutes of launch with no compilation and no configuration required to get started.
Unlike a bare deployment, this image is configured to be secure by default. There is no signing key or TLS certificate baked into the image: Anubis's ED25519 JWT signing key and the nginx self-signed certificate are both generated uniquely on this instance's first boot and never shipped inside the image. nginx terminates HTTPS on port 443 with the per-instance certificate and reverse-proxies to Anubis on the loopback interface, forwarding the real client address so policy decisions are accurate. Prometheus metrics are exposed on the loopback interface for monitoring, an unauthenticated health probe and an HTTP-to-HTTPS redirect are served on port 80, and the operating system ships fully patched with unattended security updates enabled. systemd manages the service for automatic restarts and clean logging.
To protect your own application, point the upstream target at your service and restart, or tune the built-in bot policy to widen or narrow what is challenged. Use Anubis to shield a website, wiki, forge, API or documentation site from the surge of AI-crawler traffic that drives up bandwidth and compute costs, all without blocking real users. The current release available is Anubis 1.25.0.
This is a repackaged open source software product with additional charges for cloudimg support services. Anubis is distributed under the MIT license. cloudimg is not affiliated with or endorsed by the Anubis project or Techaro. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.
Highlights
- A self-hostable Web AI Firewall and reverse proxy that stops AI scrapers and abusive crawlers with a lightweight proof-of-work challenge, preinstalled and running under systemd behind an nginx TLS terminator within minutes of launch
- Allow-by-default policy lets normal human visitors straight through while known AI crawlers such as Amazonbot, Bytespider, PerplexityBot and Scrapy are blocked or challenged, protecting a bundled demo upstream you can repoint at your own application
- Secure by default with a unique ED25519 signing key and TLS certificate generated on first boot and never baked into the image, loopback-only Prometheus metrics, fully patched OS with unattended updates, and 24/7 cloudimg support
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Description | Cost/hour |
|---|---|---|
m5.large Recommended | m5.large | $0.08 |
t3.micro | t3.micro instance type | $0.04 |
t2.micro | t2.micro instance type | $0.04 |
c8in.2xlarge | c8in.2xlarge instance type | $0.24 |
c5d.24xlarge | c5d.24xlarge instance type | $0.24 |
c8i.8xlarge | c8i.8xlarge instance type | $0.24 |
c5ad.16xlarge | c5ad.16xlarge instance type | $0.24 |
m8ib.metal-96xl | m8ib.metal-96xl instance type | $0.24 |
c6in.4xlarge | c6in.4xlarge instance type | $0.24 |
r8in.metal-48xl | r8in.metal-48xl instance type | $0.24 |
Vendor refund policy
Refunds available on request.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release of Anubis 1.25.0 as a ready-to-use Web AI Firewall and reverse proxy, with the ED25519 signing key and TLS certificate generated on first boot and a bundled demo upstream you can repoint at your own application.
Additional details
Usage instructions
Connect via SSH on port 22 as the default login user for your operating system variant (for the Ubuntu 24.04 variant the user is ubuntu). The Anubis Web AI Firewall starts automatically on first boot behind an nginx TLS terminator; the security group opens ports 22 (SSH), 80 (health probe and HTTP-to-HTTPS redirect) and 443 (HTTPS). Retrieve the per-instance endpoints with: sudo cat /root/anubis-credentials.txt. The image uses a per-instance self-signed certificate, so test with curl -k. A normal visitor is proxied to the protected upstream: curl -k https://<instance-public-ip>/ returns the bundled demo page, while an AI scraper is blocked: curl -k -A 'Amazonbot' https://<instance-public-ip>/ does not reach the upstream. Prometheus metrics are on http://127.0.0.1:9090/metrics (loopback only). To protect your own application, set TARGET in /etc/anubis/default.env to your upstream (for example http://127.0.0.1:3000 ), replace the self-signed certificate in /etc/nginx/certs with a CA certificate for your domain, and run sudo systemctl restart anubis@default nginx. The built-in default policy blocks known AI scrapers and allows normal traffic; tune it via POLICY_FNAME. The service runs under systemd: systemctl status anubis@default.
Resources
Vendor resources
Support
Vendor support
cloudimg provides 24/7 technical support for this product by email and live chat. Our engineers help with deployment, configuration, updates, performance tuning and troubleshooting; critical issues receive a one hour average response. Contact support@cloudimg.co.uk .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.