NetBox Network Source of Truth - Secure

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Why This AMI Over Manual Installation or Other IPAM Tools

NetBox is the leading open-source Network Source of Truth, trusted by thousands of network engineers worldwide. It combines IP address management (IPAM) and data centre infrastructure management (DCIM) into a single authoritative inventory that network automation and provisioning tooling reads from. This AMI eliminates the hours of manual Django, gunicorn, PostgreSQL, Redis, and nginx configuration required by a self-managed deployment - giving you a production-ready NetBox instance in minutes, not hours.

Unlike manual installations or competing AMIs that ship well-known default credentials attackers actively scan for, this image generates unique secrets on every boot. No two deployments ever share a password, API token, or Django secret key.

## Use Case: Multi-Site Network Automation

A managed-service provider maintaining circuits across multiple customer sites can use this AMI as the single source of truth for all IP allocations, VLANs, devices, and cabling. The full REST and GraphQL API feeds Ansible playbooks or Terraform providers directly, ensuring provisioning tooling always reads from an authoritative, up-to-date inventory rather than stale spreadsheets.

## What You Get Out of the Box

• Complete Network Source of Truth - NetBox fully installed with IPAM, DCIM, circuits, virtualisation, custom fields, change logging, and webhook automation
• Production-grade architecture - nginx reverse proxy fronting gunicorn on loopback, PostgreSQL database and Redis task queue as managed system services, background worker for webhooks and long-running jobs
• Independently resizable tiers - The database and application each sit on their own EBS volume, so you can scale storage without downtime
• Daily automated housekeeping - A scheduled task keeps the database tidy without manual intervention
• Full API access - REST and GraphQL endpoints for integration with your automation stack

## Security Posture: Zero Default Credentials

On first boot the instance automatically:

1. Configures the instance address

2. Generates a fresh Django secret key and API token pepper

3. Initialises an empty database

4. Creates a unique administrator account and REST API token

5. Writes credentials to a root-only file accessible via SSH

Login is required for all access - your network data is never anonymously browsable. This eliminates the default-credential exposure that plagues manual installations and competing images.

## How to Evaluate

Launch the AMI on a small instance to explore the full NetBox interface, REST/GraphQL API, and webhook engine with your own test data. When ready for production, resize the instance and EBS volumes to match your inventory scale.

## Getting Started

After launch, SSH into your instance and retrieve the unique superuser credentials from the root-only file. Access the NetBox web UI on port 80. From there you can model your sites, racks, devices, IP prefixes, VLANs, and circuits - or automate everything via the API.

To discuss a guided deployment, TLS termination, LDAP/SSO integration, or scaling for large inventories, reach out to cloudimg support for a free consultation.

## Expert Support Included

cloudimg engineers specialise in NetBox operations and provide 24/7 assistance covering deployment, upgrades, TLS termination, LDAP/SSO integration, API automation, and scaling. Critical issues receive a one-hour average response time.

NetBox is a trademark of its respective owner. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.