Mapping every physical server, virtual machine, container, and network link across a sprawling homelab into a live interactive canvas, Circuit Breaker gives infrastructure operators real-time topology visualization, IP address management, and rack elevation modeling on a single screen. Operators can switch between hierarchical, concentric, cortex ring, radial, and force-directed graph layouts where animated edges reflect link speeds and color-coded status rings display live hardware health. Automated discovery scans local subnets using nmap, SNMP, and ARP while querying Proxmox VE clusters, TrueNAS storage pools, and UniFi controllers, staging newly detected nodes in a review queue before adding them to the map. For multi-site labs or isolated VLANs, lightweight remote agents connect outbound over Noise-encrypted links after fingerprint approval to report host telemetry and run scoped network scans without opening inbound firewall ports. Rack diagrams let administrators drag servers into U slots with cabling overlays using a built-in catalog covering Dell, HPE, Supermicro, Ubiquiti, MikroTik, Synology, and APC gear alongside live iDRAC, iLO, and UPS metrics. Role-based access control, OIDC single sign-on, TOTP multi-factor authentication, encrypted full-state snapshots, and a SHA-256 hash-chained audit log keep multi-user operations accountable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

HomeLabInfo gives your homelab one dashboard where the network itself and everything running on it finally appear together, instead of scattered across router pages and terminal sessions. It watches for new devices the instant they ask the network for an address, identifies who made them, and can fire a webhook so you hear about a stranger joining your LAN before you notice it yourself. Scans keep track of which devices are online and which have gone quiet, and the interactive topology view lets you arrange the map of switches, access points, NAS boxes, and servers the way your rack actually looks. Lightweight agents installed on each machine report their containers back to the hub, so running and stopped containers, uptime, health, and host CPU, memory, and disk all show in one place without opening a separate tool per server. When an agent falls behind, its card tells you a newer version exists instead of leaving you guessing. You can add a username and password login before putting the dashboard anywhere beyond your desk, and arrange container layouts that stay put between visits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Every server, switch port, virtual machine, and network VLAN in a homelab or small IT environment can be cataloged, visualized, and exported through RackPeek's unified web interface and command-line toolkit. Operators record rack-mounted servers, managed switches, routers, firewalls, wireless access points, and uninterruptible power supplies alongside their CPU, memory, and storage specifications in a clean browser dashboard. Beyond physical gear, the inventory tracks operating systems, containerized or bare-metal services, IP subnets, and port-to-port cable connections while organizing assets with searchable tags and key-value labels. From that structured inventory, the interactive visualization engine renders live physical wiring diagrams and logical subnet-grouped service maps that export directly as high-resolution PNG graphics or Mermaid flowcharts. Because all state lives in a single human-readable configuration file backed by built-in Git repository synchronization, teams can version-control infrastructure changes or push automated updates through the authenticated REST API with dry-run diff previews. Day-to-day administration becomes faster with built-in generators that turn your cataloged hosts into ready-to-use Ansible inventory files, SSH client configurations, and tag-filtered hosts tables. Line-and-column validation feedback in the web editor catches schema mistakes immediately before changes are committed. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

From the first rack to the last circuit, Nautobot is the open-source network source of truth that records what your network should look like and runs automation against it. Built-in models cover locations, racks, devices, interfaces, cables, VLANs, VRFs, IP prefixes, circuits, and contacts, so one searchable record replaces the spreadsheet and the wiki. Teams encode their own standards with custom fields, user-defined relationships, computed fields, and validation rules. Config contexts attach JSON or YAML data, such as syslog servers, to devices by location, role, platform, or tag. Jobs run your own automation code from the web UI, REST API, or command line, on a schedule, or through hooks when an object changes, with approvals and logs built in. Query the data over REST or GraphQL, and let the GraphiQL editor autocomplete a device and interface query you can save inside Nautobot. When an object is created, updated, or deleted, webhooks notify outside systems, with Jinja2-templated bodies and HMAC SHA-512 signatures. Git repositories can carry export templates, Jobs, and config contexts too, so YAML data and Jinja2 templates get pull request review before Nautobot syncs them. Open-source Apps add Golden Configuration for config backup, compliance, and remediation, Device Lifecycle for hardware tracking, SSoT for syncing other systems, and ChatOps. Object permissions and change logging keep a shared instance auditable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Every cable, switch port, VLAN, and rack unit in a homelab or small server room gets a documented place in Rackpad, a self-hosted inventory and operations workspace. Rack elevations show mounted gear, including paired half-width appliances. Switch-panel port maps and aggregate ports show what is patched where. Cables carry type, length, and color, editable in bulk. VLANs, subnets, DHCP scopes, reservations, and zones sit in one Networks workspace, with gateway and DNS protection and a mismatch review for IP assignments. Storage topology follows drives, bays, and pools that span several devices. Wi-Fi controllers, access points, hypervisor hosts, and virtual machines have pages of their own, and Proxmox and Hyper-V hosts can be imported after review. Discovery scans a subnet or any CIDR and stages every finding in an inbox. Per-device checks over ICMP, TCP, HTTP, HTTPS, and SNMP raise alerts by email, Discord, or Telegram. Everything feeds a movable topology map. Markdown runbooks attach to devices, and an audit log records every change. Admin, editor, and viewer roles control access, and OpenID Connect login is optional. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

No spreadsheet has to track which service owns which port, because portracker discovers every service and port on your servers and keeps the list current from a self-hosted dashboard. Begin with a single port, shown with its owning service, its source (Docker or the host system), and its address, with internal container ports told apart from ports published to the host. Step back and ports gather into services: expandable cards carrying an icon, a health dot, and a port count, in list, grid, or table layouts, where a Why this status popover names the failing component and the rule that fired. Step back again and each server gets its own panel with hostname, OS, CPU, memory, and uptime, plus TrueNAS apps, VMs, and LXC containers once an API key is added. Step back once more and the whole fleet appears, because other portracker instances can be linked as peers, a VM's instance can be nested under its host, and every server can be searched at once. Along the way, rename services, hide the noisy ones, attach notes, act on a selection in bulk, or press Generate port for an unused number before deploying something new. Optional sign-in with a first-run setup wizard, an autoxpose link that shows public URLs and SSL status, light and dark themes, and keyboard shortcuts finish the picture. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Homelable turns your entire homelab into a live, interactive network canvas where every device, link, and service shows its real-time status at a glance. Run an nmap-powered network scan against your subnets and the tool fingerprints services, queues unknown devices for review, and drops approved hosts onto a drag-and-drop canvas with 15 native node types covering routers, switches, hypervisors, NAS boxes, IoT sensors, and more. Import your full Zigbee2MQTT mesh (controllers, routers, end devices with link quality indicators) and Z-Wave JS device trees in one click, preserving the actual RF topology without manual wiring. Proxmox integration pulls in hosts, VMs, and LXC containers so you can nest virtual machines inside their parent hypervisor node on the canvas. The Rack Canvas mode documents the physical side of your lab: create racks with configurable U-height, mount gear into slots, and patch ports across devices to track your cabling. Health checks run every 60 seconds using ping, HTTP, HTTPS, TCP, SSH, or Prometheus scrape endpoints, with WebSocket push delivering green, red, or pending status pulses directly to the canvas. Split your infrastructure across multiple canvases organized by site, rack, or purpose, and share a read-only Live View URL with anyone on your network. A built-in Model Context Protocol server lets AI assistants like Claude query and modify your topology through natural language. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Neko Master watches every connection flowing through your Clash, Mihomo, or Surge gateway and turns the stream into a live map of devices, domains, countries, and proxy nodes, so questions that once needed packet captures get answered at a glance. The dashboard refreshes over WebSocket as traffic moves, charting upload and download trends across thirty minutes, one hour, or a full day. Domain views rank every host your network contacts by traffic and connection count, and IP views add ASN and geographic detail, so an unfamiliar endpoint explains itself instead of raising an alarm. Proxy statistics break traffic down per node and per rule, which makes a saturated exit, a misrouted application, or an underused subscription obvious in seconds. One panel watches several gateways at once: add OpenClash backends directly, or install the one-command agent on OpenWrt, Linux, or macOS machines beside remote gateways and let each agent report home. Because agents open the connection outward, gateways behind NAT still report in, and the panel never reaches into your network uninvited. History persists in SQLite by default, and busy networks can dual-write traffic statistics to ClickHouse for larger histories while configuration stays in SQLite. Token-based access control protects the dashboard, dark mode and an installable PWA keep it comfortable on a phone, and the interface switches between English and Chinese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

TapMap draws a computer's live network connections on an interactive world map, so you can watch which applications are talking to which services, where those services sit, and what normal looks like for that machine. A local pipeline scans active sockets, extracts the remote addresses, and enriches them with geolocation from databases stored on the machine itself. Every connection carries the owning application or process, its network operator, and the operating system's verification status for that app, and places that share a location are highlighted when connections overlap. The same view lists local open ports, both TCP listeners and bound UDP sockets, established services on your LAN, and public services whose location could not be mapped. A rolling 30-day history turns raw connections into awareness: an Insights panel surfaces new applications, providers, countries, and ports, plus the most frequent activity, while a Significant Connections log records first sightings and failed verifications. A Daily Activity Report goes further, sorting applications into seen-once, occasional, recurring, and stable patterns, analyzing provider concentration, and charting country activity with detailed timelines. New significant connections can raise a desktop notification or publish to an MQTT broker you configure. Nothing is sent anywhere by default: processing happens locally, with no telemetry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

VyManager puts every VyOS router you run, across every site, into one web control plane with live dashboards and per-site permissions. Organize instances into logical sites, from the datacenter core to the smallest branch office, and add or remove routers without touching a command line. Live dashboards stream interface counters, system information, network graphs, and WireGuard peer status, so a saturated link announces itself before your users do. Configuration adapts to each router's VyOS version, with 1.4, 1.5, and rolling releases supported side by side during the longest upgrade cycle. Access is granted per site with OWNER, ADMIN, and VIEWER roles, API keys authenticate the machines, and SSH credentials stay encrypted at rest. A setup wizard walks a fresh deployment to its first managed router, and light, dark, and custom themes keep the night shift comfortable. For automation, AI assistants can be connected through the companion MCP integration, and the whole stack arrives as Docker Compose services you can redeploy in minutes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

MikroTik Manager is a web control plane for whole RouterOS fleets, built so that a bad VLAN change reverts itself instead of costing you a drive to the site. Before any risky edit, Change Guard saves a restore point on the device and arms a scheduler; if a fresh connection cannot reach the router afterwards, it rolls itself back. Lockout prediction simulates each change against live device state and refuses one that would cut management access, naming the exact port and VLAN at fault. Config Health audits for settings RouterOS accepts but silently ignores. Day to day, a live dashboard tracks availability, wireless clients, and alerts delivered by email, Slack, Discord, Telegram, or ntfy. Switch faceplates, per-port client views, VLAN copy wizards, bulk SSID deployment, RF health charts, rogue AP detection, and a guest Wi-Fi captive portal wizard cover the wired and wireless side. A rule builder handles firewall and NAT, topology maps come from LLDP, CDP, and MNDP, and a built-in NetFlow collector attributes traffic to clients and applications. Firmware rolls out in canary waves that halt on failure, and every configuration snapshot supports diffs and one-click rollback. OIDC single sign-on, TOTP two-factor, role-based access, and scoped API tokens protect the console, while sites group devices per customer network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Watching a MikroTik RouterOS v7 router in real time is what MikroDash is for: live traffic, connections, Wi-Fi clients, DHCP leases, and WireGuard peers reach the browser the moment anything changes. Cards drag into any layout, and the arrangement follows your account to every browser. Managing a fleet happens on the Devices page, which shows routers as cards, a list, or a world map with 24-hour connectivity, last backup, open alerts, and pending updates. Rolling out a change starts in Config Management: choose one of 20 ready-made templates or capture your own, then deploy to one router or the fleet with a restore point, a canary router, and an automatic revert if a change cuts MikroDash off. Scheduled backups are kept only when something changed, with a diff and a guarded restore. New sites join through a generated script that calls home over a built-in WireGuard tunnel, even from behind NAT. Alerts reach SMTP, Telegram, ntfy, Discord, Slack, Gotify, Pushover, and Apprise. Troubleshooting stays in the browser with ping, traceroute, torch, bandwidth tests, a packet sniffer, and a RouterOS terminal. Read-only API access covers every page and alert, while roles, OpenID Connect sign-in, and an audit trail of every write govern shared use. Off by default, an optional assistant answers from live router data and asks before changing anything. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Monitoring everything from network switches to Kubernetes clusters since 2001 with over 6,200 GitHub stars and deployments exceeding 100,000 devices per installation, Zabbix has established itself as one of the most mature and feature-rich open-source monitoring platforms available, trusted by organizations including Dell, Salesforce, ICANN, and T-Mobile. The platform collects metrics from virtually any source using Zabbix Agent written in C, Zabbix Agent 2 written in Go with native plugin support, SNMP v1/v2c/v3 polling and trapping, IPMI for hardware health, JMX for Java applications, SSH and Telnet checks, HTTP/HTTPS polling, and ODBC database queries. Version 7.0 LTS introduced synthetic browser monitoring that executes user-defined JavaScript via WebDriver to simulate multi-step user interactions on websites, proxy load balancing with automatic host redistribution across proxy groups for high availability, in-memory proxy data buffering delivering up to 100x performance improvement, native multi-factor authentication with TOTP and Duo support, and just-in-time user provisioning from SAML and LDAP. Low-level discovery automatically detects file systems, network interfaces, SNMP OIDs, VMware resources, and Kubernetes pods, creating monitoring items and triggers dynamically. The alerting engine correlates events with configurable escalation chains, sending notifications through Slack, Microsoft Teams, PagerDuty, Jira, email, and SMS with customizable message templates. Over 1,000 official templates provide instant monitoring for Linux, Windows, VMware, AWS, Azure, Docker, PostgreSQL, MySQL, Apache, Nginx, and hundreds more. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Servers, services, and network gear report their health to Icinga 2, the open-source monitoring core that runs checks, evaluates thresholds, and decides who gets woken up. A distributed hierarchy of master, satellite, and agent zones scales from a single box to global estates: satellites execute checks in remote regions and keep working when the master is unreachable, while agents run local checks under TLS-secured, certificate-based trust. The object-based configuration language defines hosts, services, dependencies, and notification rules as code, with apply rules generating checks across whole groups automatically. Performance data streams into Graphite, InfluxDB, or Elasticsearch writers, and Icinga DB carries runtime state and history into Redis and SQL for the web frontends. The REST API drives acknowledgements, downtimes, and check scheduling from scripts and chat tools, with fine-grained permissions down to diagnostic information. The 2.16 line hardens API security, streams richer runtime updates to Icinga DB for the new Icinga Notifications 1.0 incident workflows, and lets operators set exact acknowledgement times through the API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0-or-later licensed.

Network traffic stops being a mystery once ntopng names the hosts, applications, and protocols behind every flow, live in your browser. To find the host saturating an uplink, open the dashboard, which ranks top talkers, countries, autonomous systems, and protocols beside historical charts. To see what a suspicious host is contacting, open its page for traffic, ports, DNS queries, TLS details, and visited sites, plus a map of its conversations. Deep packet inspection recognizes applications such as Facebook, YouTube, and BitTorrent, so charts name the app behind the bytes instead of relying on port numbers alone. The console reads packets from a SPAN port or TAP and NetFlow, sFlow, or IPFIX records from routers and switches through nProbe, so it can cover a single switch or many remote sites. Behavioural checks raise alerts for flows, hosts, and interfaces and send them to email, Discord, Telegram, or webhooks. Active monitoring probes remote hosts over ICMP and HTTP/S, and network discovery lists the devices on your local network. A REST API and Lua scripting pull statistics into your own tools and add custom checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Subnet math, DNS lookups, DHCP options, and certificate checks share one browser tab in Networking Toolbox, a free toolkit for sysadmins and network engineers. Need to carve a /24 into departments? The VLSM planner fits named subnet requirements into a parent block, reports each subnet's efficiency and the leftover space, and exports the plan as CSV or JSON. Merging address lists? CIDR utilities summarize, split, compare, and deaggregate prefixes, with set operations for difference, overlap, and containment. Writing configs? Generators build DHCPv4 and DHCPv6 options, PXE profiles, Kea or ISC snippets, and SPF, DKIM, DMARC, CAA, TLSA, and SRV records, and DNSSEC helpers calculate key tags and DS records. Something broken? Diagnostics query DNS through Cloudflare, Google, Quad9, OpenDNS, or a resolver of your choice, read TLS certificate chains, grade HTTP security headers, trace redirects, check TCP ports, look up BGP routes and RDAP records, and test mail servers. Need a refresher? Reference guides explain private ranges, CGNAT, IPv6 address types, and common ports. A keyboard search palette puts any tool a few keystrokes away, and bookmarked tools stay available offline. Eighteen themes, four languages, custom branding, and accessibility switches make it feel like your own, and a keyless JSON API serves the subnet, CIDR, IP, and DNS utilities to scripts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Trusted by thousands of organizations worldwide with over 14,700 GitHub stars, Snipe-IT has been the gold standard in open-source IT asset management since 2013. Built on Laravel 12 with PHP 8.2+, it provides a comprehensive web-based platform for tracking every physical and digital asset in your organization — from laptops and servers to software licenses, accessories, consumables, and components. The check-in/check-out system assigns assets to users with full audit trails, digital signature acceptance, and automated email notifications for checkouts, approaching deadlines, expiring warranties, and low inventory. License management handles multi-seat software with seat-by-seat tracking, compliance monitoring, and expiration alerts. Custom fields let you capture organization-specific metadata, while the advanced search engine supports logical operators including and/or conditions, exact matching with is:value, fuzzy exclusions with not:value, and null checks. SCIM 2.0 integration synchronizes users, groups, locations, companies, and managers from identity providers like Azure Entra ID and Okta. Enterprise authentication supports LDAP, Active Directory, Google Secure LDAP, and SAML 2.0 single sign-on. The reporting dashboard generates custom asset reports with saved templates, depreciation schedules, and audit logs. QR code labels enable instant mobile asset lookup via barcode scanners. The full-featured JSON REST API powers custom integrations, with community-built SDKs, MCP servers, and third-party mobile apps including SnipeMate and Snipe-Scan. Deploy via Docker Compose with MariaDB 11 in minutes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Ralph tracks thousands of assets across data centers and back offices through a unified CMDB, DCIM, and asset management platform, providing the same capabilities as ServiceNow, Device42, and Sunbird dcTrack without per-asset licensing fees. Used by Allegro in production and backed by over 2,500 GitHub stars, it is built on Python 3 with Django and Django REST Framework. Interactive data center floor plans support drag-and-drop rack placement, front and rear rack views showing U-level asset positioning, power consumption tracking per PDU, and ethernet and fiber connection mapping. The back office module manages laptops, desktops, printers, mobile phones, and accessories with user assignment tracking, warehouse inventory, stock-taking audits, and automated loan workflows. IP address management handles network environments with DHCP and DNS integration alongside network topology visualization. Software license tracking monitors per-user and per-core allocations with usage calculations, compliance reporting, and expiration alerts, while vendor support contracts track SLA agreements and warranty renewal dates. The transitions system automates asset lifecycle processes through configurable workflows that trigger HTTP webhooks, custom Python scripts, email notifications, and Puppet and Ansible configuration management integration. Custom fields extend the data model with text, numbers, dates, choices, and URLs per asset type, accessible via the REST API. Multi-tenant architecture organizes assets by regions, data centers, service environments, and business units. Deploy via Docker with the allegro/ralph image alongside MySQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.