This product has charges associated with it for hardening, security configuration, and support.
Nagios Core is a host, service and network monitoring server built as compiled C daemons with an Apache CGI web interface, holding all check state in flat files rather than a database. This Lynxroute build is hardened and ready out of the box: the web password is generated at first boot and stored as a bcrypt hash, the web interface is bound to loopback behind an nginx TLS perimeter, vendor update checks are switched off so the instance never phones home, UFW firewall pre-configured, and a CIS Level 1 hardened Ubuntu 24.04 LTS base.
GPL-2.0 license - fully auditable, no vendor lock-in.
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS NAGIOS CORE
Nagios Core is one of the longest-established open source monitoring servers for hosts, services and network devices. It is a set of compiled C daemons with an Apache CGI and PHP web interface, and it deliberately keeps no SQL database: current state, retention and the event log live in flat files, which is what makes it light enough to watch hundreds of hosts from a small instance. Monitoring is done by check plugins, small executables that return a status and a line of output, so anything you can write a script for can be monitored. This image ships Nagios Core 4.5.14 with Nagios Plugins 2.5, covering ping, disk, load, users, processes, SSH, HTTP, SMTP, SNMP, DNS, NTP and many more. Scheduling, state flapping detection, dependencies, escalations, notification commands and an external command pipe are all part of the core. GPL-2.0 license, no vendor lock-in.
WHAT THIS AMI ADDS
Security hardening:
Web password generated at first boot, unique per instance, stored only as a bcrypt hash - the AMI itself ships a locked account with no usable credential
Web interface served by Apache bound to 127.0.0.1 only, with nginx terminating TLS on 443 in front of it
Self-signed certificate out of the box and Certbot pre-installed, so a CA-signed certificate is one command away
Vendor update checks disabled - the instance does not report its version to any third party
The monitoring daemon runs unprivileged with a restricted umask, and the compiler toolchain is removed from the shipped image
UFW firewall pre-configured - SSH 22 and HTTPS 443; port 80 only redirects to HTTPS and carries the certificate-issuance challenge
fail2ban, AppArmor
CVE scan - every image is scanned for vulnerabilities before release
OS hardening (CIS Level 1):
CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
Nagios security baked in: web password generated at first boot and stored as a bcrypt hash, no usable credential in the image itself, web interface bound to loopback behind an nginx TLS perimeter, vendor update checks disabled so the instance never phones home, UFW firewall pre-configured.
CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
Agentless-first monitoring with no database to run: check plugins for ping, disk, load, processes, SSH, HTTP, SNMP, DNS and more, plus scheduling, dependencies, escalations and notification commands. GPL-2.0 license - fully auditable, no vendor lock-in.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
You pay by the hour based on the EC2 instance size you launch. The five options map to different compute capacities. The t3.small, t3.medium, and t3.large run on burstable instances, scaling up in size and hourly rate. The m6i.large and m6i.xlarge run on general-purpose instances for steadier workloads. You pick the instance that fits your monitoring load; the hourly software rate rises with the size you choose. Billing runs through AWS by the hour, with no upfront commitment. Every instance ships with the same hardened, pre-configured Ubuntu base regardless of size.
Top-of-mind questions for buyers
What do the t3 instance sizes offer versus the m6i sizes for monitoring workloads?
The t3.small, t3.medium, and t3.large run on burstable instances. They handle variable loads that spike then settle. The m6i.large and m6i.xlarge run on general-purpose instances built for steady, continuous monitoring. Pick t3 for intermittent demand and m6i for sustained workloads.
Am I charged the hourly software rate when the instance is stopped?
The software rate meters running instance-hours. A fully stopped instance stops accruing the hourly software charge. You may still pay underlying AWS storage fees for stored volumes while stopped. Only running time counts toward the software rate you selected.
What software and security setup comes bundled with each instance regardless of size?
Every instance ships on a CIS Level 1 hardened Ubuntu 24.04 base. It includes a CVE scan, a bundled software bill of materials, a conformance report, firewall, and unique credentials generated at first boot. These artifacts stay inside your own deployed instance.
lynxroute.com
Helpful?
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Open https://<PUBLIC_IP>/ in your browser - accept the self-signed certificate warning, then sign in as nagiosadmin with the password from step 4. The browser asks for it with a standard HTTP authentication prompt.
The local host is already monitored (load, disk, users, processes, SSH and the web server). Add your own hosts and services by creating a file under /usr/local/nagios/etc/objects/ and referencing it from /usr/local/nagios/etc/nagios.cfg with a cfg_file= line.
Check the configuration, then reload:
sudo /usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
sudo systemctl reload nagios
The web password is generated on your instance at first launch and is stored only as a bcrypt hash. Credentials are saved to /root/nagios-credentials.txt.
Check plugins are installed in /usr/local/nagios/libexec - run any of them with --help to see its options.
Check state is held in flat files under /usr/local/nagios/var and survives a reboot; there is no database to administer.
No mail transport is installed - install one (for example msmtp-mta) and point it at your relay before enabling email notifications.
Replace the self-signed TLS certificate with a CA-signed certificate for production use. Certbot validates over HTTP, so TCP 80 must be reachable from the internet while the command runs: sudo certbot --nginx -d yourdomain.com
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Ready to use CentOS 8 AMI. Login using 'centos' user and ssh public key authentication. Root partition and filesystem automatically expands at boot for volumes larger than 8 GiB, for seamless scalability. Preconfigured with Cloud-init and ENA support for enhanced network performance. This product has charges associated with it for seller support. CentOS 8 is a Linux distribution that provides an enterprise-class, community-supported computing platform. Security updates included. Ultra servers - mission-critical enterprise workloads like large-scale data analytics, AI and machine learning, and running large databases
This product has charges associated with it for seller support. Nagios Core 4.5.9 on CentOS 10 is a powerful monitoring solution designed for IT infrastructure management. It provides comprehensive monitoring of applications, services, servers, and network devices in real-time, allowing users to quickly identify and resolve issues before they impact business operations. With an intuitive web interface, users can easily configure checks, view performance metrics, and set alerts for various system conditions. The AMI is optimized for deployment in the AWS EC2 cloud, offering scalability and flexibility to meet growing monitoring demands. Use Nagios to enhance system reliability, improve uptime, and drive operational efficiencies across your organization, making it an essential tool for DevOps teams, system administrators, and IT managers alike.
This product has charges associated with it for seller support. Nagios Core 4.5.13 on Ubuntu 26.04 LTS is a powerful monitoring solution that provides comprehensive insights into your IT infrastructure. With its robust features, including real-time monitoring, alerting, and reporting capabilities, it enables organizations to maintain system performance and uptime. Ideal for enterprises and IT teams, Nagios Core allows users to monitor network services, host resources, and server performance effectively. The integration with custom plugins offers enhanced flexibility, making it suitable for diverse environments. Leverage Nagios Core to proactively detect and resolve issues before they impact operations, ensuring business continuity and improved productivity. Deploy this AMI on EC2 to scale with your needs while benefiting from Ubuntu's secure and stable foundation.
This product has charges associated with it, which includes support & maintenance. Pre-configured Nagios® Core™ on Ubuntu 24.04 for network and server monitoring. Monitor thousands of hosts, services, and cloud resources from a single dashboard.
This product has charges associated with it, which includes support & maintenance. Pre-configured Nagios® Core™ on Ubuntu 22.04 for network and server monitoring. Monitor thousands of hosts, services, and cloud resources from a single dashboard.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.