gnacho/netpulse

English | Español

The pulse of your home network. Real time. No cloud.
Watch your routers, draw your topology, score your network's health and get alerted, from a single self-hosted binary. Nothing ever leaves your LAN.

Try the live demo · Full feature tour

You don't need a single router to see NetPulse working:

• demo.netpulse.cloudless.club is the real app with a full sample network loaded, read-only, no sign-up. Click around, change the theme, switch languages, watch the live updates.
• netpulse.cloudless.club/features is the complete feature inventory: every screen and feature, with the technical decisions and the honest scope of each one.

Fleet overview and a health score that means something. One 0-100 score condenses latency, loss, uptime and temperature per router and for the whole network, updated live every 5 seconds over SSE. Live WAN traffic against your contracted plan, alert feed, AdGuard Home stats and WireGuard peers on the same screen (that's the screenshot above).

A topology map that draws itself. Inferred live from the bridge FDB (and LLDP where available, including LLDP-MIB on SNMP-managed switches): wired and wireless clients under the router and port they actually talk through, managed and inferred switches, Proxmox hosts with their VMs nested, and WireGuard tunnels drawn from peer to Internet. Quiet devices keep their place; nothing jumps around on refresh. Drag nodes to arrange it and the layout stays yours.

Every device, classified. Hostnames, IPs, type detection (hostname patterns + OUI), first seen, band and signal for Wi-Fi clients, and the router each one is attached to. Label devices, reserve IPs, and see when something new shows up.

Per-router health at a glance. Model, firmware, CPU, memory, temperature, uptime and live traffic for each router, with port-level history and per-band client splits. SNMP-polled managed switches are first-class citizens too, and any unit can be paused without removing it: no polling, no alerts, history kept.

And the rest of the tour:

• WireGuard: peers with real names, latest handshakes, transfer per peer.
• AdGuard Home: query stats, blocked share, top blocked domains.
• Wi-Fi and roaming: signal matrix per AP, 802.11r status, channel utilization, persistent roaming events.
• Wi-Fi channel analyzer: a real spectrum per radio, every network drawn on the frequency axis with a congestion score for every channel. It reads the air and advises; it never writes to your routers.
• Fleet firmware upgrades: upgrade OpenWrt devices from the UI, vanilla OpenWrt only (device list filtered, with an explanatory note).
• Physical rack (Labs preview): draw your 19" rack, place your hardware and let NetPulse propose the cabling from the detected topology. Off by default.
• Alerts that find you: temperature, new device, firmware available, WAN down, agent issues; bell feed plus notification channels (native Web Push, ntfy, Telegram and outgoing webhook). Notification channels only carry alerts marked as urgent; the feed level (none / urgent / all) is configured separately in Alerts.
• Multi-user: bcrypt passwords, admin and viewer roles, per-user language (ES/EN).
• Installable PWA: phone or desktop, live over SSE, light/dark themes.
• A good OpenWrt citizen: native netpulse-agent packages (.ipk/.apk), a luci-app-netpulse page, UCI config, procd init with self-heal. Or run the whole server on-box.
• Self-updating: the built-in updater checks for releases and applies them with an atomic swap.
• MQTT + Home Assistant (opt-in): publish the fleet state (health, clients, per-router vitals and alerts) to an MQTT broker; Home Assistant discovers the entities on its own. Routers that expose themselves with NetGrip are not duplicated. Off by default and cloud-free: configured from the MQTT card in Settings (or with the NETPULSE_MQTT_* environment variables, or the equivalent mqtt_* UCI options on-box). Topics, entities and limits in the manual.

An MCP server for your AI assistant. NetPulse embeds a read-only MCP server (streamable HTTP at /mcp) so your assistant can query fleet status, per-router health, known devices, WireGuard peers, AdGuard Home stats, the topology graph and active alerts with an API token. Token-only auth (never the session cookie), rate limited, every call logged for audit. Disabled by default: enable it with NETPULSE_MCP_ENABLED=1 and mint a token in Settings → API tokens. Keep the port on your LAN: anyone with the token can read your whole network state.

That is still a selection: every feature is on the website, one by one, and everything above is clickable in the live demo.

You need a Linux box with systemd (x86_64, arm64 or armv7; a small LXC or VM is plenty) and OpenWrt/GL.iNet routers on your LAN.

1. Install the server on the box:

curl -fsSL https://raw.githubusercontent.com/gnacho/netpulse/main/install.sh | sh

The installer is plain, readable shell (inspect it first): it detects distro and arch, downloads the release verified against checksums.txt, sets up a sandboxed netpulse systemd service and prints the initial admin password once. Re-running the same line updates; sh install.sh --uninstall removes.

2. Open the app at http://<server-ip>:3000, log in with the printed password and the gateway is already there: NetPulse finds it on first boot via LAN discovery (a TCP :22 sweep with ubus/GL-UI fingerprinting).

3. Authorize the SSH key. The server generated its own keypair on first boot. Copy the public key from Settings → Network and, on each router you want to monitor, append it:

echo "<public key from Settings>" >> /etc/dropbear/authorized_keys

4. Install the agents from the app. Open Routers and scroll to the agents table: every OpenWrt router gets a row, and routers without an agent offer an Install agent button. One click and the server registers the agent, pushes the right binary for the router's architecture, writes the config and starts the service; it shows up as connected within seconds. Routers the server cannot SSH into use the pairing token instead (Settings → Agent adoption, see the folded section below).

5. Take it with you. Install the PWA from your browser (Add to home screen / Install app) and enable Web Push in Settings: alerts reach your phone even with the tab closed.

Prefer to see it on your own hardware first? DEMO_MODE=1 ./netpulse runs the same app with a 67-device sample network, no routers needed.

# OpenWrt 24.10 (ipk)
opkg install ./netpulse-agent_*.ipk ./luci-app-netpulse_*.ipk

# OpenWrt 25.12 (apk)
apk add --allow-untrusted ./netpulse-agent-*.apk ./luci-app-netpulse-*.apk

uci set netpulse-agent.main.server='http://<netpulse-server-ip>:3000'
uci set netpulse-agent.main.slug='<slug>'
uci set netpulse-agent.main.token='<64-hex token>'
uci commit netpulse-agent
service netpulse-agent enable && service netpulse-agent start

curl -fsSL https://raw.githubusercontent.com/gnacho/netpulse/main/install-collector.sh | sh

Releases are signed, checksummed and pushed to your fleet by the built-in auto-updater; the app shows a short human-readable "what changed" panel before you update. The full version history lives in CHANGELOG.md and on the releases page; the plan ahead is in docs/ROADMAP.md.

• User manual (also in Spanish): every screen explained, menu by menu, with step-by-step procedures.
• Website: the project in five minutes, with a feature tour, FAQ and screenshots.
• Roadmap: what's done, what's next.
• Discussions: questions, ideas and shape-the-future talk.

NetPulse wouldn't exist without OpenWrt. The whole premise of the project, that you can own and control your network hardware instead of depending on a vendor's closed firmware, only works because OpenWrt exists. If NetPulse is useful to you, the real credit goes to the OpenWrt community.

AGPL-3.0