self hosted gNMI client and telemetry collector, secured by cloudimg
gNMIc is an open source gNMI client and telemetry collector from OpenConfig. It speaks the gNMI protocol to network devices (Capabilities, Get, Set and Subscribe) and, as a collector, streams operational telemetry from routers and switches into observability backends such as Prometheus, InfluxDB, Kafka and NATS. Targets, subscriptions and outputs are defined in plain YAML.
The cloudimg image ships gNMIc as a single self contained Go binary run as a collector daemon behind an nginx reverse proxy. The REST api-server and Prometheus metrics endpoint bind to loopback and are fronted by nginx: an unauthenticated health endpoint serves load balancer probes while the metrics and API endpoints require a password. A unique password is generated on each instance's first boot into a root only file, the binary refreshes to the newest release on first boot, and a paired deployment guide plus 24/7 cloudimg support are included.
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Overview
gNMIc is a self-hosted, open source gNMI client and telemetry collector from OpenConfig, licensed under the Apache License 2.0. It speaks the gNMI management protocol to your network devices - Capabilities, Get, Set and Subscribe - and, running as a collector, continuously streams operational telemetry from your routers and switches into your observability stack: Prometheus, InfluxDB, Kafka, NATS, files and more. This image delivers gNMIc fully installed and reverse proxied behind nginx, so a production ready telemetry collection appliance is operational within minutes of launch, with no manual package installation, no dependency troubleshooting and no proxy configuration required. On first boot the appliance refreshes itself to the newest gNMIc release, so every launch runs current software, and systemd manages the daemon for automatic restarts and clean logging.
Secure by default
This image never exposes the collector unauthenticated. The daemon binds its REST api-server and Prometheus metrics endpoint to loopback only, and they are served through an nginx reverse proxy that is ready for your TLS certificate. An unauthenticated health endpoint is available for load balancer probes, while the metrics endpoint, the management API and all other paths require a password. There are no shared or default credentials: a unique password is generated on each instance's first boot and written to a file only the root user can read, so the endpoints require your password from the very first request.
Collector capabilities
Streaming gNMI subscriptions with dial-in and dial-out telemetry; a rich set of outputs (Prometheus, InfluxDB, Kafka, NATS, TCP, UDP, files); event processors and format conversion; and the full gNMIc command line for ad hoc Get, Set and Capabilities requests against any gNMI target. Point it at your own devices, define your subscriptions in simple YAML and gNMIc does the rest.
Getting started
Launch the instance from AWS Marketplace, SSH in and read your unique password from the root only credential file, edit the gNMIc YAML configuration to add your device targets and subscription paths, then restart the collector with systemd. Scrape the Prometheus metrics endpoint or query the REST API through nginx using your password. A paired step by step deployment guide is linked from this listing.
Common use cases
Network telemetry collection and streaming at scale. Feeding router and switch operational state into Prometheus or InfluxDB. gNMI dial-in and dial-out subscription pipelines. Ad hoc gNMI Get, Set and Capabilities from the command line. A telemetry gateway in front of an observability stack.
Support
24/7 technical support from cloudimg is included, with expert assistance for gNMI telemetry collection, subscription tuning, Prometheus and InfluxDB integration and observability pipeline design.
All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.