BGPalerter - Real-time BGP and RPKI Monitoring

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

BGPalerter is a self-hosted, open source BGP and RPKI monitoring and alerting daemon from NTT. It connects to real-time BGP data and continuously watches your prefixes and autonomous systems for visibility loss, prefix hijacks, unexpected more-specific announcements, RPKI-invalid routes and ROA misconfiguration, so you learn about a routing incident affecting your network in minutes rather than hours. This image delivers it fully installed and reverse proxied behind nginx and managed by systemd, so a production ready monitoring appliance is operational within minutes of launch, with no manual package installation, no dependency troubleshooting and no proxy configuration required.

Unlike a bare deployment, this image never exposes the monitoring API unauthenticated. The daemon binds its REST status API to loopback and it is served through an nginx reverse proxy that is ready for your TLS certificate: an unauthenticated health endpoint is available for load balancer probes, while the status API and all other paths require a password. There are no shared or default credentials: a unique status API password is generated on each instance's first boot and written to a root only file, so the API requires your password from the very first request. On first boot the appliance also refreshes itself to the newest BGPalerter release, so every launch runs current software, and systemd manages the daemon for automatic restarts and clean logging. The operating system ships fully patched with unattended security updates enabled.

Monitoring capabilities include real-time hijack detection, prefix visibility and withdrawal monitoring, RPKI validation and ROA change tracking, path and neighbour analysis, and flexible alerting to a rotating log file, email, Slack, syslog, HTTP webhooks, Kafka and more, all configured through simple YAML files. Point it at your own prefixes and autonomous systems and BGPalerter does the rest. The security group opens only SSH and the nginx health and status port. The current release available is BGPalerter 2.0.1.

This is a repackaged open source software product with additional charges for cloudimg support services. BGPalerter is distributed under the BSD 3-Clause permissive license. cloudimg is not affiliated with or endorsed by NTT or the BGPalerter project. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.