daloRADIUS FreeRADIUS Management Appliance | Support by cloudimg

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

daloRADIUS is a widely adopted open source web management platform for FreeRADIUS, used by ISPs, enterprises, universities and hotspot operators to centralise network access control. This image delivers daloRADIUS and a fully configured FreeRADIUS server as a single self contained appliance, so a complete RADIUS management system is operational within minutes of launch, with all subscriber, accounting and device data staying on your own server.

Manually installing daloRADIUS and FreeRADIUS means wiring PHP to Apache, configuring the SQL schema, aligning FreeRADIUS modules with the database tables and hardening default credentials, a process that typically takes hours. Some pre built images still ship the well known testing123 shared secret or a default operator password, leaving RADIUS infrastructure exposed from the start. This appliance removes those risks:

• Zero default credentials: a first boot service generates a unique operator password, database password and RADIUS shared secret for every instance, written to a root only file. The daloRADIUS default operator and the FreeRADIUS testing123 secret are permanently removed.
• Pre wired SQL integration: daloRADIUS reads and writes the same SQL tables FreeRADIUS authenticates against, so a user or NAS device added in the web console is honoured by the RADIUS server immediately, with no manual schema alignment.
• Dedicated resizable data disk: the MariaDB datadir lives on a separate EBS volume, independently resizable and persistent across instance replacement.
• Systemd managed services: the database, RADIUS server and web server start on boot and restart on failure automatically.

daloRADIUS running on PHP 8.3 with Apache and mod_php on port 80, driving FreeRADIUS 3 answering authentication on UDP 1812 and accounting on UDP 1813, both backed by MariaDB. The architecture is simple and auditable: no containers, no orchestrators, just proven components managed by systemd.

From one web console you can create and manage RADIUS users, groups and attributes; register NAS devices, access points, switches and VPN concentrators; configure hotspots with billing plans and rate limits; and browse authentication and accounting reports.

On the first boot of your instance a one shot service generates the three per instance secrets and writes them to a file only the root user can read. Two instances launched from the same image never share any credential.

The operator console is served on port 80 through Apache. Browse to your instance address and sign in with the generated operator credentials to add users, register your NAS devices and review accounting. For production, front the console with TLS and restrict the operator and RADIUS ports to your own network, as the user guide at https://www.cloudimg.co.uk/guides/daloradius-aws/  explains.

24/7 technical support by email and chat. Help with deployment, adding RADIUS clients and users, FreeRADIUS policy and SQL configuration, TLS and custom domains, MariaDB administration, accounting and reporting, and version upgrades.

daloRADIUS and FreeRADIUS are trademarks of their respective owners. This image is not affiliated with, endorsed by, or sponsored by the daloRADIUS or FreeRADIUS projects.