This product has charges associated with it for hardening, security configuration, and support.
Netdata is real-time, per-second infrastructure monitoring: it auto-discovers thousands of system and application metrics, runs ML-based anomaly detection and health alerting, and serves a live dashboard out of the box. Unlike bare Netdata AMIs that expose the dashboard wide open on 0.0.0.0:19999 with no authentication and anonymous telemetry phoning home, this build is ready and locked down: a unique Basic Auth password generated at first launch, an Nginx TLS reverse proxy on 443, the dashboard bound to localhost only, telemetry disabled, shipped cloud-disconnected, UFW firewall pre-configured, and a CIS Level 1 hardened Ubuntu 24.04 LTS base.
The Netdata Agent is licensed GPL-3.0; the bundled web dashboard UI is provided under the Netdata Cloud UI License v1 (NCUL1), free to use and shipped unmodified.
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS NETDATA
Netdata is a real-time, high-resolution infrastructure monitoring system. The agent auto-discovers and collects thousands of system and application metrics at per-second granularity (CPU, memory, disks, network, processes, containers, web servers, databases and more), stores them in its embedded time-series database, runs unsupervised machine-learning anomaly detection, evaluates health alerts, and serves an interactive live dashboard. It needs no external time-series database or separate query layer to monitor a single host out of the box. This image runs Netdata single-node and standalone: it is shipped cloud-disconnected (it is not claimed to Netdata Cloud) and anonymous telemetry is disabled, so all metrics stay inside your AWS account. The Netdata Agent is GPL-3.0; running it yourself means no vendor lock-in.
WHAT THIS AMI ADDS
Security hardening:
A unique Basic Auth password generated at first launch for the Nginx perimeter (the Netdata dashboard has no authentication of its own)
Nginx reverse proxy with TLS - the dashboard proxied on port 443
The Netdata dashboard and API (19999) bound to localhost only - Nginx is the only exposed door
Anonymous telemetry disabled and the local registry turned off (no phone-home)
Shipped cloud-disconnected - the agent is not claimed to Netdata Cloud
Netdata runs as a non-root service with a restricted systemd unit
UFW firewall - ports 22, 80, 443 only
fail2ban, AppArmor
CVE scan - every image is scanned for vulnerabilities before release
OS hardening (CIS Level 1):
CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
LICENSING
The Netdata Agent (metric collection, storage, ML, alerting and APIs) is licensed GPL-3.0. The bundled web dashboard user interface is provided under the Netdata Cloud UI License v1 (NCUL1), which permits free use and redistribution bundled with the agent; it is shipped unmodified.
Highlights
Netdata security baked in: a unique Basic Auth password generated at first launch, an Nginx TLS reverse proxy on 443, the dashboard and API bound to localhost only, anonymous telemetry disabled
CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
Real-time per-second monitoring: thousands of auto-discovered metrics, ML anomaly detection and health alerting, and a live dashboard out of the box. Netdata Agent GPL-3.0; the bundled dashboard UI is under NCUL1, free to use.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
You pay by the hour based on the EC2 instance size you run. Three options are available: t3.small, t3.medium, and t3.large. These reflect different amounts of compute and memory, so pricing scales with the instance you choose. A larger instance handles more monitoring load and costs more per hour. All three deliver the same hardened Netdata image; only the underlying instance capacity differs. You run the image in your own cloud account, and billing is metered per hour of use with no term commitment.
Top-of-mind questions for buyers
What do the t3.small, t3.medium, and t3.large options mean for what I get?
Each option maps to an AWS EC2 instance size that runs the hardened Netdata image. The sizes differ in compute (vCPUs) and memory. A larger instance handles more monitored systems and metrics. You choose the size that matches your monitoring load, and you pay per hour for that instance.
Am I charged when the instance is stopped or paused?
The hourly software charge meters running time only. When you fully stop the instance, the software charge stops accruing. Stopped instances may still incur underlying AWS storage fees for attached volumes, but those are separate AWS charges, not part of this listing's per-hour metering.
What is bundled inside the deployed image regardless of which instance size I pick?
Every image ships hardened to CIS Level 1 on Ubuntu 24.04 LTS, with a CycloneDX SBOM, a CIS Conformance Report, CVE scanning, firewall, and unique credentials generated at first boot. The image runs entirely in your own cloud account. Only the instance capacity differs across the three options.
lynxroute.com
Helpful?
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Updated to version 2.10.4.
Additional details
Usage instructions
Launch instance (t3.medium recommended)
Open Security Group - allow TCP 443 and TCP 80 from your IP
Open https://<PUBLIC_IP> in your browser - accept the self-signed certificate warning, then sign in with the Basic Auth user admin and the generated password; the live dashboard loads with real-time, per-second metrics for this host
Replace the self-signed TLS certificate with a CA-signed certificate (sudo certbot --nginx) for production use
The Basic Auth password is generated uniquely at first launch and saved to /root/netdata-credentials.txt.
The Netdata dashboard and API (port 19999) are bound to localhost - Nginx on port 443 is the only exposed door.
This image ships cloud-disconnected (not claimed to Netdata Cloud) with anonymous telemetry disabled, so all metrics stay inside your AWS account. To connect to Netdata Cloud, edit /var/lib/netdata/cloud.d/cloud.conf (set enabled = yes) and run sudo netdata-claim.sh with your token.
Restrict Security Group port 443 to your IP before exposing the instance publicly.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Netdata Cloud On-prem enables you to have a private instance of Netdata Cloud hosted and managed within your infrastructure.
Netdata offers a real-time, high-resolution monitoring solution for AWS cloud. Designed for low-latency dashboards and unsupervised anomaly detection, it ensures efficient monitoring of your infrastructure on AWS Cloud with minimal maintenance and extensive scalability. Netdata features over 800 integrations for comprehensive metrics collection.
Netdata offers a real-time, high-resolution monitoring solution for AWS cloud. Designed for low-latency dashboards and unsupervised anomaly detection, it ensures efficient monitoring of your infrastructure on AWS Cloud with minimal maintenance and extensive scalability. Netdata features over 800 integrations for comprehensive metrics collection.
Real-time observability for AWS: per-second metrics, unsupervised ML anomaly detection on every metric, and Netdata AI for troubleshooting, investigations, and reports. Includes network monitoring with live topology, NetFlow and sFlow analysis, and SNMP devices and traps. Deploys in minutes with 850+ auto-discovered integrations.
Netdata offers a real-time, high-resolution monitoring solution for AWS cloud. Designed for low-latency dashboards and unsupervised anomaly detection, it ensures efficient monitoring of your infrastructure on AWS Cloud with minimal maintenance and extensive scalability. Netdata features over 800 integrations for comprehensive metrics collection.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.