The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / uwsgi / uwsgi-rss-vs-vsz ▌

Operations Guides

uWSGI RSS vs VSZ: reading worker memory without being fooled by shared pages

You look at your uWSGI stats and see 8 workers each reporting 500 MB of RSS. The host has 4 GB of RAM. By the math, you should be deep into swap, but vmstat shows zero swap activity and response times are fine.

The gap is copy-on-write (COW) sharing. uWSGI’s default model loads the application once in the master process, then forks workers that inherit the master’s memory. Linux marks those inherited pages as shared and read-only. As long as workers do not write to them, the pages stay shared across all workers. But Linux RSS counts every shared page fully for every process that maps it. Sum worker RSS across 8 workers and you may overstate real memory consumption by 2-5x.

What RSS and VSZ actually measure

RSS (Resident Set Size) is the number of physical pages a process has mapped into RAM. It includes private anonymous pages (heap, stack), private file-backed pages (executable text written via COW), and shared pages (shared libraries, COW pages inherited from fork). On Linux, uWSGI reads this from /proc/<pid>/stat and reports it in the stats server as workers[].rss (integer, bytes).

VSZ (Virtual Set Size) is the total virtual address space the process has allocated. It includes everything in RSS plus mapped-but-not-touched memory, mmap’d files, pre-allocated arenas, and reserved-but-unused address ranges. uWSGI reports it as workers[].vsz (integer, bytes).

Both fields appear in the stats server JSON. Both require --memory-report to be enabled; without it, they report zero. Verified in the uWSGI source: the rss/vsz values are only populated when --memory-report (or force_get_memusage) is enabled, so the fields stay at 0 otherwise.

You can also access these values outside the stats server:

# Per-worker RSS and VSZ from uWSGI stats server
uwsgi --connect-and-read 127.0.0.1:9191 | \
  jq '.workers[] | select(.pid > 0) | {id: .id, rss_mb: (.rss / 1048576), vsz_mb: (.vsz / 1048576)}'

# Cross-check against the kernel for the same PID
grep -E '^(VmRSS|VmSize):' /proc/<pid>/status

# Log format variables available since uWSGI 1.4.6: %(rss), %(vsz), %(rssM), %(vszM)

The copy-on-write sharing problem

In uWSGI’s default pre-fork model, the master loads and initializes the application, then calls fork() to create each worker. The kernel does not copy the master’s memory pages into each child. It maps the same physical pages into both parent and child with copy-on-write protection. When a worker writes to a page, the kernel duplicates it. Pages that are only read (most application code, loaded libraries, initialized data structures) stay shared indefinitely.

The problem is how Linux accounts for these shared pages in RSS:

flowchart TD
    A["Master loads app
into memory"] -->|"fork + COW"| B["Worker 1"] A -->|"fork + COW"| C["Worker 2"] A -->|"fork + COW"| D["Worker 3"] B --> E["RSS counts shared
pages fully per worker"] C --> E D --> E E --> F["sum(RSS) overstates
real memory by 2-5x"] E --> G["PSS divides shared pages
by number of sharers"]

Each worker’s RSS includes the full size of every shared page. If the master loaded 200 MB of application code and libraries, and each worker added 50 MB of private state, each worker reports approximately 250 MB of RSS. With 8 workers, sum(RSS) = 2000 MB. Actual physical memory consumed: 200 MB (shared, counted once) plus 8 x 50 MB (private per worker) = 600 MB. The RSS sum overstates real usage by more than 3x.

This is not a uWSGI bug. It is how the Linux kernel reports RSS for any forked process. Every tool that reads RSS (ps, top, /proc/<pid>/status) has the same limitation.

Known discrepancy: stats server RSS vs kernel RSS

There is a documented divergence (uWSGI issue #1989: “htop/top/ps memory not equal to uwsgitop stats”) where the stats server RSS differed sharply from ps / /proc/<pid>/status for the same PID; the root cause was never definitively resolved, and the stats server only samples RSS at request completion (and only with --memory-report). If you see large divergences between the stats server value and the kernel value, trust /proc/<pid>/status (VmRSS) over the stats server number.

VSZ is not memory used

VSZ measures virtual address space, not physical memory consumption. It includes:

  • Mapped shared libraries that may only have a few pages resident
  • Pre-allocated heap arenas (Python’s pymalloc requests large arenas upfront)
  • Memory-mapped files that may never be read into RAM
  • Thread stacks (each thread maps a fixed-size stack region)

A Python uWSGI worker reporting 4 GB VSZ with 200 MB RSS is normal. The 3.8 GB gap is address space that has been mapped or reserved but never touched. It consumes no physical RAM.

VSZ becomes worth watching only when it approaches per-process virtual memory limits (ulimit -v), or when it grows without bound alongside file descriptor count increases (a sign of mmap’d file leaks). In those cases, VSZ growth is a symptom of a resource leak, not a memory pressure indicator.

The uWSGI option --reload-on-as triggers worker recycling based on address space size. This is rarely the right tool for memory management. Use --reload-on-rss instead, which at least measures physical pages, even though it overstates due to COW.

How lazy-apps changes the picture

The lazy-apps directive changes the fork model. Instead of loading the application once in the master and sharing pages via COW, each worker loads the application independently after being forked.

What this means in practice:

  • No COW sharing: Each worker’s memory pages are private from the start.
  • Higher baseline RSS: Workers start with the full memory footprint of loading the application. With 8 workers and a 200 MB application, baseline memory is closer to 8 x 200 MB instead of 200 MB plus shared overhead.
  • RSS is closer to reality: Because pages are not shared, per-worker RSS approximates actual unique memory consumption. sum(RSS) is a more reliable capacity metric under lazy-apps.
  • Slower startup: Each worker goes through application initialization independently. Startup time multiplies by worker count if they initialize sequentially.

The tradeoff is memory cost for safety. Some libraries (database drivers, ML frameworks, C extensions with global state) are not fork-safe and corrupt shared state when multiple processes write to the same COW page simultaneously. lazy-apps avoids this by giving each worker its own clean copy.

If you are running lazy-apps, RSS-based thresholds like --reload-on-rss are more meaningful because each worker’s RSS reflects its actual footprint. If you are running default pre-fork, RSS overstates per-worker cost due to sharing.

Getting accurate per-worker memory with PSS

Proportional Set Size (PSS) is the correct metric for understanding actual memory consumption in a forked process group. PSS divides the size of each shared page by the number of processes that share it. A 4 KB page shared by 4 workers contributes 1 KB to each worker’s PSS. Summing PSS across all workers gives you the actual unique physical memory consumed.

Reading PSS from the kernel

# Read PSS for a single worker PID
# smaps_rollup is available since Linux 4.14 (2017)
grep -E '^(Pss|Rss|Size):' /proc/<pid>/smaps_rollup

# Sum PSS across all workers of a uWSGI master
MASTER_PID=$(cat /tmp/uwsgi.pid)
for pid in $(pgrep -P "$MASTER_PID"); do
  grep '^Pss:' "/proc/$pid/smaps_rollup"
done | awk '{s+=$2} END {printf "Total worker PSS: %.0f MB\n", s/1024}'

Reading smaps_rollup is more expensive than reading /proc/<pid>/stat (the kernel must walk the page tables to compute proportional accounting). Do not poll it every second. A 10-60 second interval is sufficient for capacity monitoring.

PSS in uWSGI itself

uWSGI 2.1-dev adds a pss field to the stats server, providing per-worker PSS without external tools. The --reload-on-pss option triggers worker recycling based on PSS instead of RSS. Verified: both the --reload-on-pss option and the pss/uss stats fields exist only in the 2.1-dev (master) line; stable 2.0.x up to 2.0.31 does not ship them.

PSS/USS support was merged into the uWSGI master branch in 2017 but may not be present in all distributed builds. Pip-installed uWSGI has been reported to be missing --reload-on-pss (issue #2237, verified: a source build exposed the flag while the pip-installed binary did not). If you need PSS-based recycling and the option is unavailable in your build, use kernel-level PSS from /proc/<pid>/smaps_rollup combined with external monitoring that triggers uWSGI reloads.

Where this matters in production

Capacity planning: Do not size hosts based on sum(worker_rss). Use PSS-based totals or subtract the estimated shared footprint. Keep total worker RSS (adjusted for shared pages) below 70% of available system memory.

Setting reload-on-rss thresholds: This threshold operates on the RSS value, which includes shared pages. If you set --reload-on-rss 512 and your shared footprint is 200 MB, workers start recycling when their private memory reaches approximately 312 MB. This may trigger earlier than you intend. Understand the baseline before setting the number.

OOM-killer behavior: The Linux OOM-killer selects victims based on a scoring that includes RSS. In a pre-fork uWSGI setup, all workers have inflated RSS due to shared pages. The OOM-killer may target workers somewhat arbitrarily among the high-RSS candidates. After killing one worker, the respawned worker quickly shares the same pages and the cycle repeats. Monitor dmesg for OOM events correlated with worker respawns.

Memory leak detection: Track RSS growth rate per worker over time, not just absolute values. A consistent positive slope across all workers indicates a leak. Python and Ruby memory allocators rarely return freed memory to the OS, so RSS may plateau at a high-water mark even after the leak source is fixed. This fragmentation plateau is operationally indistinguishable from a slow leak. Workers recycled by max-requests show a sawtooth RSS pattern, which is healthy.

Single-worker poisoning: If one worker’s RSS is much larger than the others (more than 2x the youngest, most recently respawned worker), the issue is request-specific, not systemic. A pathological request path (unbounded query results, ReDoS, large payload held in memory) is the likely cause. The outlier RSS pinpoints which worker to investigate.

Signals to watch in production

SignalWhy it mattersWarning sign
Per-worker RSS (stats server or /proc)Tracks memory growth per worker; catches leaks and cache bloatSustained positive slope over hours across all workers
PSS sum across workers (smaps_rollup)Accurate total physical memory consumed by the worker poolApproaching 70% of system RAM
RSS divergence between workersOne worker much larger than others indicates request-specific memory issueAny worker RSS greater than 2x the youngest respawned worker
RSS vs VSZ ratioLarge gap is normal; shrinking gap with growing RSS means real allocation growthVSZ stable but RSS climbing toward VSZ
Respawn rate correlated with RSSDistinguishes memory-triggered recycling from crashesRespawns tracking harakiri count 1:1 means crashes, not memory
Swap usage (host-level)Indicates real memory pressure regardless of RSS accountingAny nonzero si/so in vmstat

How Netdata helps

Netdata’s per-process monitoring and host-level metrics help you reason about uWSGI memory without falling into the RSS sum trap:

  • Per-process RSS from the kernel: Netdata reads RSS directly from /proc, giving you per-worker RSS at per-second resolution. You see the sawtooth pattern of max-requests recycling immediately, without polling the stats server.
  • System-level memory pressure: Netdata tracks available RAM, swap usage, and page fault rates at the host level. These signals tell you whether inflated RSS numbers actually translate into memory pressure, cutting through the COW accounting noise.
  • OOM-killer correlation: When Netdata’s process monitoring shows a worker disappearing and respawning, you can correlate that exact moment with system-level memory events to determine whether the OOM-killer was involved.
  • Anomaly detection on RSS trends: Netdata’s anomaly detection flags unusual RSS growth patterns, helping you distinguish a slow leak from normal allocator fragmentation without static thresholds.
  • Correlation with worker busy ratio and response time: Memory pressure often manifests as GC pauses or swapping before it shows up as an OOM kill. Correlating RSS trends with response time degradation gives earlier warning than RSS alone.