Base
Hardened build
minimal ports, security patches applied at build time
GoBGP on Ubuntu 24.04
Azure
Networking
GoBGP, a fast open source BGP implementation that runs as a programmable route server and route injector, driven by a config file and a gRPC API.
Overview
GoBGP is an open source implementation of BGP, the routing protocol that ties networks together across the internet and inside large data centres. It runs as a single daemon, gobgpd, that you drive either from a plain text configuration file or programmatically over a gRPC API, with a companion command line tool, gobgp, for everyday operation. It speaks BGP to your routers as a peer, learns and advertises routes, and can act as a route server, a route reflector, an edge speaker or a route injector that pushes prefixes into your network from software. Because every part of it is reachable over gRPC, it is widely used to automate routing from scripts and controllers, to build software defined networking on top of ordinary BGP, and to blackhole or redirect traffic on demand. It keeps its routing tables in memory, supports IPv4 and IPv6, and gives you route policy for filtering and rewriting what it accepts and announces.
Why the cloudimg image
A bare BGP daemon has nothing to show on its own, so the cloudimg image ships a complete working reference deployment: the daemon pinned to the official upstream release binary and verified by checksum, a second BGP speaker it peers with, and a real authenticated session that reaches established with routes propagating and an import policy filtering, all visible from the command line the moment the machine boots. It is secure by default: the gRPC API is bound to the loopback interface rather than the world facing default, and the BGP listener is kept off the public interface until you add a peer of your own. Nothing usable is baked into the image: GoBGP has no login of its own, and the one secret on the appliance, the key that authenticates the demo session, is generated uniquely on every first boot and written to a file only root can read, so no two instances share a secret. Every deployment ships fully patched with unattended security updates enabled, a paired deploy guide that walks through pointing it at your own routers, and 24/7 cloudimg support.
Common uses
- Run a programmable BGP route server or route reflector driven from a config file or gRPC
- Inject or withdraw routes from software to steer or blackhole traffic on demand
- Automate routing and build software defined networking on top of standard BGP
More in Networking
3S
3proxy - Secure HTTP, HTTPS and SOCKS Proxy
Networking
The image builds the official 3proxy binary (pinned at build from the upstream release) and runs it under systemd as the...
Ap
accel-ppp - Remote Access VPN Server
Networking
The image builds accel-ppp 1.14.0 from the upstream source tag (commit 048d31cb, dated 25 January 2026), verified agains...
AdGuard Home - Network-wide Ad Blocking DNS
Networking
This image runs AdGuard Home, the open source network-wide DNS server that blocks ads, trackers and malicious domains fo...
Aw
Anubis Web AI Firewall - Block AI Scraper Bots
Networking
The image installs the latest stable Anubis release, resolved at build time from the official GitHub release package and...
Apache Guacamole
Networking
This image runs Apache Guacamole, the open source clientless remote desktop gateway.
Apache ShenYu
Networking
This image runs Apache ShenYu, the high performance, reactive open source API gateway built on Java and Spring WebFlux.