Real-time network visibility & engineering for OSPF, IS-IS, and BGP

Osprey passively discovers your routing infrastructure, builds a protocol-accurate model of every IGP area, and gives your engineering team one place to understand, simulate, and troubleshoot the network. No agents on routers. No route injection. No risk.

Website · Documentation · Download · Licensing

Network engineers run complex multi-protocol topologies with limited visibility. Troubleshooting a convergence event means correlating CLI output across dozens of routers. Planning a maintenance window means guessing which traffic shifts will occur. Understanding "what happened at 3 AM" means hoping someone captured the right data.

Osprey observes IGP topology in real time through passive GRE adjacencies, SNMP polling, and BMP sessions. It reconstructs the full link-state database for every protocol instance, computes shortest paths exactly as your routers do, and presents it through an interactive web interface with simulation, time travel, and incident correlation built in.

• Simulate before you change — fail links, remove devices, adjust metrics, and define SRLG groups against live topology. Server-side SPF computes the resulting traffic shifts, flags newly isolated devices, and surfaces congestion risk — before you touch production.
• Replay any moment — Time Travel reconstructs topology at any point in history with transport-style playback. Combined with automatic incident correlation, trace exactly how an event unfolded and verify a change had the intended effect.
• Multi-protocol, multi-AF paths — OSPFv2, OSPFv3, IS-IS (CLNS addressing and SR-MPLS), BGP via BMP, and L2 via LLDP/CDP, correlated on one canvas. IS-IS multi-AF gives independent SPF per address family. BGP RIB analysis shows every path per prefix across all BMP targets — like show ip bgp, network-wide.
• Zero footprint — GRE collectors form read-only IGP adjacencies (high cost, priority 0) and never influence SPF or forwarding. SNMP polls counters and L2 neighbors. BMP targets push RIB updates. The network does not know Osprey is watching.

Grab the latest .deb from the Releases page, verify it, and install:

# Download the latest release + checksum
curl -LO https://github.com/wijnberg-net/osprey/releases/latest/download/osprey_amd64.deb
curl -LO https://github.com/wijnberg-net/osprey/releases/latest/download/SHA256SUMS

# Verify integrity
sha256sum -c SHA256SUMS

# Install — pulls PostgreSQL, NATS, and nginx as dependencies
sudo apt install ./osprey_amd64.deb

Migrations run automatically, all services start under systemd, and a self-signed TLS certificate is generated on first install. Open https://your-server/ and log in with the admin account created during setup.

Supported platforms: Debian 12+, Ubuntu 24.04+. Runs on bare metal, Proxmox LXC (privileged and unprivileged), and VMs.

All features, up to 32 devices, no time limit, no license key required. Upgrade by uploading a license key through the web UI. For Professional or Enterprise licensing, contact sales@wijnberg.net.

• Interactive canvas with area coloring, vendor icons, and real-time updates
• Area-cloud overview for large multi-area topologies, expandable in place to drill down
• Desktop-style panel manager: compare devices and links side-by-side without losing context
• Multi-protocol link merge: OSPFv2, OSPFv3, and IS-IS on the same wire shown as one edge with per-protocol detail
• L2 overlay: LLDP/CDP switch adjacencies rendered alongside IGP topology
• Export to Visio (.vsdx) reproducing the canvas closely — curved links, edge-label chips, area hulls — plus PNG and SVG, with importable vendor stencil packs
• Multiple visual themes, including dark, high contrast (WCAG AAA), and retro
• Responsive layout for phones and tablets; the desktop layout is unchanged

• SNMP v2c/v3 polling: per-interface utilization, errors, bandwidth, vendor detection
• On-demand 5-second boost polling when inspecting a link
• Traffic graphs with hourly history (24h, 7d, 30d, 1y)
• Congestion and error alerting with sustained-sample filtering

• Shortest-path computation with ECMP and asymmetric-routing detection
• IS-IS address-family selector with per-AF traceroute (CLNS shows System IDs and NETs)
• SR-MPLS label-stack computation (RFC 8667)
• Per-router routing table with step-by-step cost explanation
• BGP prefix search (exact, longest-match, covered) with CSV export
• SPF tree visualization from any device with cost annotations

• Simulate link failures, node removals, metric changes, hypothetical links/routers, SRLG failures
• Traffic-shift impact analysis with congestion-risk classification
• Batch assessment: iterate all links or nodes, surface only failures that cause isolation
• Shareable scenarios with undo/redo, applicable to historical snapshots via time travel

• Time Travel with playback controls and timeline scrubber
• Topology Diff: compare two points in time with an added/removed/changed summary
• Incident-correlation engine: related events grouped with inferred root causes
• LSDB browser with LSA headers, age indicators, and Options-flag decoding
• Diagnostic reports: timer consistency, MTU mismatch, congestion trends, routing stability, single points of failure

• Role-based access control (admin, engineer, operator)
• Browser-based SSH/Telnet terminal with encrypted session recording and full audit trail
• Alert rules with Slack, Teams, email, and webhook notifications
• Maintenance windows for scheduled alert suppression
• SNMP credential profiles with per-network overrides and fallback credentials
• Backup/restore, audit logging, encrypted credential storage, license management
• Update notification: checks for a newer release on startup and prompts when one is available

A single binary runs five services under osprey.target:

graph TD
    R[Routers & Switches]

    CM["Collector Manager\nGRE · SNMP discovery"]
    SP["SNMP Poller\ntraffic counters"]
    BS["BMP Server\nBGP RIB"]
    N["Event bus\nheartbeats · updates"]
    E["Engine\nSPF · diff · correlation"]
    PG[("PostgreSQL\ntopology · events")]
    A["API\nREST · WebSocket"]
    W["Web UI"]

    R -- GRE/SNMP --> CM
    R -- Enrichment --> SP
    R -- BMP sessions --> BS
    CM --> N
    SP --> N
    BS --> N
    N --> E
    E --> PG
    PG --> A
    A -- HTTPS / WSS --> W

Data flows one direction: collectors and BMP ingest protocol data and publish to an internal event bus, the engine persists to PostgreSQL, and the API serves the frontend. No service calls back upstream. PostgreSQL is the only datastore — no JVM, no Elasticsearch, no graph database.

Tested in production with 500+ devices across OSPF and IS-IS; designed for 5,000+ with sub-10 ms search. SNMP counter polling defaults to 5-minute intervals with configurable per-target overrides and a 6-hour interface-discovery cycle.

Full documentation — installation, canvas, reports, simulation, administration, and troubleshooting — lives at www.wijnberg.net/osprey/docs.

Proprietary. Copyright © 2025–2026 Michel Wijnberg. All rights reserved. See LICENSE.

Free evaluation: all features, up to 32 devices, no time limit. Production licensing: sales@wijnberg.net. Full terms: www.wijnberg.net/osprey/terms.

The distributed binary includes third-party open-source components under their respective licenses; see THIRD-PARTY-LICENSES.txt.