Overview
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS NETDATA
Netdata is a real-time, high-resolution infrastructure monitoring system. The agent auto-discovers and collects thousands of system and application metrics at per-second granularity (CPU, memory, disks, network, processes, containers, web servers, databases and more), stores them in its embedded time-series database, runs unsupervised machine-learning anomaly detection, evaluates health alerts, and serves an interactive live dashboard. It needs no external time-series database or separate query layer to monitor a single host out of the box. This image runs Netdata single-node and standalone: it is shipped cloud-disconnected (it is not claimed to Netdata Cloud) and anonymous telemetry is disabled, so all metrics stay inside your AWS account. The Netdata Agent is GPL-3.0; running it yourself means no vendor lock-in.
WHAT THIS AMI ADDS
Security hardening:
- A unique Basic Auth password generated at first launch for the Nginx perimeter (the Netdata dashboard has no authentication of its own)
- Nginx reverse proxy with TLS - the dashboard proxied on port 443
- The Netdata dashboard and API (19999) bound to localhost only - Nginx is the only exposed door
- Anonymous telemetry disabled and the local registry turned off (no phone-home)
- Shipped cloud-disconnected - the agent is not claimed to Netdata Cloud
- Netdata runs as a non-root service with a restricted systemd unit
- UFW firewall - ports 22, 80, 443 only
- fail2ban, AppArmor
- CVE scan - every image is scanned for vulnerabilities before release
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
LICENSING
The Netdata Agent (metric collection, storage, ML, alerting and APIs) is licensed GPL-3.0. The bundled web dashboard user interface is provided under the Netdata Cloud UI License v1 (NCUL1), which permits free use and redistribution bundled with the agent; it is shipped unmodified.
Highlights
- Netdata security baked in: a unique Basic Auth password generated at first launch, an Nginx TLS reverse proxy on 443, the dashboard and API bound to localhost only, anonymous telemetry disabled
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
- Real-time per-second monitoring: thousands of auto-discovered metrics, ML anomaly detection and health alerting, and a live dashboard out of the box. Netdata Agent GPL-3.0; the bundled dashboard UI is under NCUL1, free to use.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.02 |
t3.large | $0.03 |
t3.small | $0.02 |
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Netdata 2.10.3 - Initial release (June 2026)
- Netdata Agent 2.10.3 on Ubuntu 24.04 LTS
- Netdata Agent (GPL-3.0) installed from the official Netdata stable package repository; bundled web dashboard UI under NCUL1, shipped unmodified
- Dashboard and API (19999) bound to localhost only - Nginx is the only exposed door
- Unique Basic Auth password generated at first launch for the Nginx TLS perimeter on 443
- Shipped cloud-disconnected (not claimed to Netdata Cloud); anonymous telemetry disabled; local registry turned off
- Netdata runs as a non-root service with a restricted systemd unit
- CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)
- CVE-scanned before every release
- UFW firewall pre-configured (ports 22, 80, 443 only)
- fail2ban, auditd, AppArmor pre-configured
- SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json
- CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html
- IMDSv2 enforced
Additional details
Usage instructions
- Launch instance (t3.medium recommended)
- Open Security Group - allow TCP 443 and TCP 80 from your IP
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Read credentials: sudo cat /root/netdata-credentials.txt
- Open https://<PUBLIC_IP> in your browser - accept the self-signed certificate warning, then sign in with the Basic Auth user admin and the generated password; the live dashboard loads with real-time, per-second metrics for this host
- Replace the self-signed TLS certificate with a CA-signed certificate (sudo certbot --nginx) for production use
The Basic Auth password is generated uniquely at first launch and saved to /root/netdata-credentials.txt. The Netdata dashboard and API (port 19999) are bound to localhost - Nginx on port 443 is the only exposed door. This image ships cloud-disconnected (not claimed to Netdata Cloud) with anonymous telemetry disabled, so all metrics stay inside your AWS account. To connect to Netdata Cloud, edit /var/lib/netdata/cloud.d/cloud.conf (set enabled = yes) and run sudo netdata-claim.sh with your token. Restrict Security Group port 443 to your IP before exposing the instance publicly.
Resources
Vendor resources
Support
Vendor support
Visit us online: https://lynxroute.com/#contact
For Netdata documentation:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.