Base
Hardened build
minimal ports, security patches applied at build time
Batfish
Azure
Networking
1 variation
network configuration analysis and pre deployment validation, from the configs you already have
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| Batfish on Ubuntu 24.04 | Azure | Ubuntu 24.04 | Standard | View · Guide |
Overview
Batfish builds a vendor independent model of a network from real device configuration files, then answers questions about that model before anything is deployed: which BGP sessions will establish, which flows can reach which destinations, what an ACL actually permits, and what a candidate change would alter. It reads the major router, switch and firewall syntaxes, so a mixed estate is modelled as one network. It never touches a live device, which makes validating a change safe. Batfish is a service queried by clients rather than a web application, and the official Python client is included.
Why the cloudimg image
The cloudimg image pins the upstream release by registry digest and ties it to the exact source commit, runs it as a plain service on a distribution JRE that keeps receiving security updates, and bounds the JVM heap automatically to the size of the machine. Batfish has no authentication of its own, so the service is bound to loopback behind an authenticated gate and a unique credential is generated on every first boot, with the published default key provably refused. A worked example network is bundled and analysed on first boot, so the appliance proves itself before anyone logs in. Every shipped dependency is licence audited and the inventory ships on the image, alongside a paired deployment guide and 24/7 support.
Common uses
- Validate a network change before it reaches production
- Prove reachability, BGP and ACL intent across a mixed vendor estate
- Gate network configuration in CI, with no access to live devices
More in Networking
3P
3proxy
Networking
a tiny, feature rich proxy server with per instance authentication built in
3U
3X-UI
Networking
web management panel for the xray proxy, packaged by cloudimg
Ap
accel-ppp
Networking
a high performance PPP and VPN server, terminating SSTP and L2TP sessions with per session authentication the moment it
AdGuard
Networking
AdGuard Home, a network wide DNS ad and tracker blocker, hardened and ready on Ubuntu 24.04.
AdGuard Home + Unbound
Networking
AdGuard Home paired with a private Unbound resolver: network wide ad and tracker blocking with recursive, DNSSEC validat
Akvorado
Networking
akvorado, an open source network flow collector and visualizer that ingests NetFlow, IPFIX and sFlow, enriches it and ma