IRRd on Ubuntu 24.04 LTS

Azure Networking

IRRd is the Internet Routing Registry daemon that stores and serves RPSL routing policy data over whois and an HTTP and GraphQL query API, the same software that runs the RADb mirror service.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

IRRd is the reference server behind the Internet Routing Registry, the distributed system network operators use to publish and look up routing policy: which prefixes an autonomous system originates, which networks a maintainer controls, and the maintainer objects that authorise changes. It answers the classic whois protocol on port 43 that every IRR client, prefix filter generator and route server config tool already speaks, and it adds a modern HTTP submission API and a GraphQL query API on top, so routing data can be pulled into automation as structured JSON rather than parsed whois text.

An instance can run as an authoritative registry for your own autonomous system's objects, as a mirror of one or more upstream IRR sources such as RADb, or both at once. It suits network operators, internet exchange points and transit providers who need to publish their own routing objects, run an internal mirror to speed up and control their prefix filter or RPKI workflow, or offer their members a registry to maintain their own route objects.

Why the cloudimg image

cloudimg ships IRRd already wired to the PostgreSQL object store and Redis cache it requires, on a single instance that answers real whois and GraphQL queries within minutes of first boot. A small demonstration registry is loaded automatically on first boot, a maintainer, a routing object and an autonomous system record, so you can query something real immediately and see exactly how object authorisation works before you load your own data. Nothing ships with a known credential: the database password, the cache password and the override password that authorises the first write to a fresh registry are each generated uniquely on first boot and written only to a root only file, so no two deployments ever share a secret. The whois and query ports are public by design, exactly as a routing registry is meant to work, and the guide covers restricting them if you want a private instance. The base is fully patched with unattended security updates enabled, and every image comes with a step by step deploy guide and 24/7 cloudimg support.

Common uses

  • Running an authoritative Internet Routing Registry for your own ASN's routing objects
  • Mirroring upstream IRR sources for internal prefix filter and RPKI workflows
  • Serving whois and GraphQL routing registry queries to operators and automation