Base
Hardened build
minimal ports, security patches applied at build time
BGPalerter on Ubuntu 24.04
Azure
Networking
BGPalerter, a self hosted BGP and RPKI monitoring daemon that watches your prefixes and autonomous systems and alerts in real time on visibility loss, hijacks and RPKI invalid announcements.
Overview
BGPalerter is a self hosted, open source BGP and RPKI monitoring and alerting daemon from NTT. It connects to real time BGP data and continuously watches your prefixes and autonomous systems for visibility loss, prefix hijacks, unexpected more specific announcements, RPKI invalid routes and ROA misconfiguration, so a routing incident affecting your network surfaces in minutes rather than hours. It exposes a built in REST status API and delivers alerts through simple reports to a rotating log file, email, Slack, syslog, HTTP webhooks, Kafka and more, all driven by plain YAML configuration with no database and no web console.
It suits network operators, ISPs and any organisation that announces its own address space and wants early warning of routing problems and hijacks from infrastructure they run and own.
Why the cloudimg image
BGPalerter's status API ships upstream with no authentication of its own, so cloudimg puts the access control in place before the port is ever reachable. The daemon binds its REST status API to loopback and it is served through an nginx reverse proxy that is ready for your TLS certificate: an unauthenticated health endpoint is available for load balancer probes, while the status API requires a password. There is no baked credential and no shared login: a unique status API password is generated on each instance's first boot and written to a root only file, so no two instances share a credential. The appliance refreshes itself to the newest release on first boot, systemd manages the daemon for automatic restarts and clean logging, and the base is fully patched with unattended security upgrades enabled. Every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Common uses
- Real time detection of prefix hijacks and visibility loss for your network
- RPKI validation and ROA misconfiguration monitoring for your address space
- A self hosted routing monitor you run inside your own cloud account
More in Networking
AdGuard Home - Network-wide Ad Blocking DNS
Networking
This image runs AdGuard Home, the open source network-wide DNS server that blocks ads, trackers and malicious domains fo...
Apache Guacamole
Networking
This image runs Apache Guacamole, the open source clientless remote desktop gateway.
frp
Networking
This image runs frp (Fast Reverse Proxy), the open source high performance reverse proxy that exposes a local service si...
Ip
iPerf3 on Alma Linux 9 with Support
Networking
Explore our catalog: Discover more products via our easy-to-navigate catalog: https://cloudimg.co.uk/applications.
Ip
iPerf3 on Rocky Linux 9 (ARM) with Support
Networking
Explore our catalog: Discover more products via our easy-to-navigate catalog: https://cloudimg.co.uk/applications.
Pi-hole
Networking
Pi-hole is an open-source, network-wide DNS sinkhole that blocks ads, trackers and malware domains for every device on y...