Availability and pricing

Cloud	Version	Software price	Last build
AWS Marketplace EC2 AMI · all commercial regions	2.12.2	$0.05/hr Recommended instance: t3.medium · 5-day free trial	2026-10-25	Listing ↗
Azure Marketplace VM image · plan payg-gen2 · Gen2	2.12.0	$0.028/vCPU/hr Recommended VM: Standard_D2s_v3	2026-10-02	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	GPL-3.0-or-later
Upstream	Netdata Inc.
Machine-readable	product.json · catalog.json

What is Netdata

Netdata is a real-time, high-resolution infrastructure monitoring system. The agent auto-discovers and collects thousands of system and application metrics at per-second granularity (CPU, memory, disks, network, processes, containers, web servers, databases and more), stores them in its embedded time-series database, runs unsupervised machine-learning anomaly detection, evaluates health alerts, and serves an interactive live dashboard. It needs no external time-series database or separate query layer to monitor a single host out of the box. This image runs Netdata single-node and standalone: it is shipped cloud-disconnected (it is not claimed to Netdata Cloud) and anonymous telemetry is disabled, so all metrics stay inside your AWS account. The Netdata Agent is GPL-3.0; running it yourself means no vendor lock-in.

What the Lynxroute image adds

Security hardening:

A unique Basic Auth password generated at first launch for the Nginx perimeter (the Netdata dashboard has no authentication of its own)
Nginx reverse proxy with TLS - the dashboard proxied on port 443
The Netdata dashboard and API (19999) bound to localhost only - Nginx is the only exposed door
Anonymous telemetry disabled and the local registry turned off (no phone-home)
Shipped cloud-disconnected - the agent is not claimed to Netdata Cloud
Netdata runs as a non-root service with a restricted systemd unit
UFW firewall - ports 22, 80, 443 only
fail2ban, AppArmor
CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

LICENSING

The Netdata Agent (metric collection, storage, ML, alerting and APIs) is licensed GPL-3.0. The bundled web dashboard user interface is provided under the Netdata Cloud UI License v1 (NCUL1), which permits free use and redistribution bundled with the agent; it is shipped unmodified.

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/netdata-credentials.txt.

AWS CLIAzure CLI

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-7sb5qc7wekt4y/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer netdata --plan payg-gen2
az vm create -g my-rg -n netdata --size Standard_D2s_v3 \
  --image lynxroute:netdata:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Netdata 2.12.2

AWS · 2026-10-25

Netdata updated 2.12.1 -> 2.12.2, a patch release. GPL-3.0 unchanged
Security: stricter SNMPv3 authentication in the SNMP traps receiver; Function and dynamic configuration requests now require strict JSON
Fixes obsolete charts kept alive by alert evaluation, long-range queries across storage tiers, and Cloud reconnect backoff
Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build