IRRd on Ubuntu 24.04 LTS

IRRd is the open source Internet Routing Registry daemon — the reference server behind the Internet Routing Registry (IRR), the distributed system network operators use to publish and look up routing policy: which prefixes an autonomous system originates, which networks a maintainer controls, and the maintainer objects that authorise changes. It is the same software NTT runs for its own IRR and for the public RADb mirror service. This cloudimg image runs IRRd 4.5.3 installed via the official pip package into a dedicated Python virtual environment, exactly per upstream's own deployment instructions, on Ubuntu 24.04 LTS as a hardened systemd service.

IRRd answers the classic whois protocol on port 43 that every IRR client, prefix-filter generator and route-server config tool already speaks, and adds a modern HTTP JSON submission API and a GraphQL query API on port 8000, so routing data can be pulled into automation as structured JSON rather than parsed whois text. An instance can run as an authoritative registry for your own autonomous system's objects, as a mirror of one or more upstream IRR sources, or both at once. PostgreSQL (with the pgcrypto extension IRRd requires) and Redis (IRRd's internal event stream and cache) are co-installed on the same instance.

The image is functional out of the box. On first boot it loads one demo RPSL object set into an authoritative source: a person, a mntner, an aut-num (a 16-bit private ASN reserved for documentation) and a route (RFC 5737 TEST-NET-1, reserved and never routable), so you can query a real object immediately over whois, HTTP and GraphQL, and it doubles as a working template for loading your own routing objects. Nothing ships with a known credential: the PostgreSQL role password, the Redis password and IRRd's own override password (the administrator credential needed to bootstrap the first maintainer in a fresh registry) are each generated uniquely on first boot and written only to a root-only file.

IRRd is distributed under the BSD-2-Clause License (© NTT Ltd. and Reliably Coded B.V.). This image bundles IRRd unmodified from the official PyPI package; cloudimg is not affiliated with, endorsed by, or sponsored by NTT Ltd., Reliably Coded B.V., or the IRRd project. cloudimg provides packaging, the secure-by-default per-VM credential rotation, the working demo dataset, security patching, and 24/7 support with a guaranteed 24 hour response SLA.