Cacti is an open-source network monitoring and graphing platform built on RRDtool.
It provides a scalable framework to collect, store, and visualize time-series data from network devices, servers, and applications.
Core capabilities include:
Cacti maintains two primary branches:
| Branch | Purpose |
|---|---|
1.2.x |
Stable long-lived release series |
develop |
Active development toward Cacti 1.3.x |
For the latest published version, see GitHub Releases.
Minimum supported dependencies by branch:
| Dependency | Cacti 1.2.x |
Cacti develop (1.3.x) |
|---|---|---|
| MariaDB | 10.5+ | 10.11+ |
| MySQL | 8.0+ | 8.4+ |
| PHP | 8.2+ | 8.3+ |
| RRDtool | 1.7+ | 1.8+ |
| Net-SNMP | 5.9+ | 5.9+ |
Notes:
php-snmp is now fully supported. When both php-snmp and the Net-SNMP binaries are available, php-snmp is used by default; to force the Net-SNMP binaries, set $php_snmp_support = false; in include/config.php.Operating system guidance:
1.2.x: RHEL/Rocky/Alma 8+ (or equivalent) is a common baseline.1.3.x: RHEL/Rocky/Alma 9+ or CentOS Stream 9+ is preferred for modern PHP packaging.Clone the repository:
git clone https://github.com/Cacti/cacti.git
cd cacti
Dependency management:
1.2.x and develop, install dependencies with Composer before serving Cacti. Composer-managed packages under include/vendor are generated and intentionally not committed; the remaining legacy libraries in that directory are not Composer-managed and remain in the repository.develop, composer install uses the committed lock file resolved against Cacti's PHP 8.3 floor.composer update only in an intentional dependency-update change, and commit the resulting composer.lock update.include/vendor from the lock with composer install --no-dev and verify the real build host with composer check-platform-reqs --no-dev.release/* build a deterministic archive, SHA-256 checksum, CycloneDX SBOM, and GitHub provenance attestation through the release-artifact workflow.Install dependencies:
composer install
Windows users may need:
composer install --ignore-platform-req=ext-pcntl --ignore-platform-req=ext-posix
For a source checkout, install the locked browser dependencies before configuring the web server. Node.js is required for this build; release archives already contain the generated assets. Run this command as the owner of the Cacti files:
npm ci
Then configure your database and web server, and complete setup using the official docs:
https://github.com/Cacti/documentation
When running from source (especially develop), schema updates may be required after pulling changes.
Upgrade the database schema:
sudo -u cacti php -q cli/upgrade_database.php --forcever=`cat include/cacti_version`
If needed, force a re-upgrade from an earlier version:
php -q cli/upgrade_database.php --forcever=<older_version>
Audit schema consistency:
php cli/audit_database.php --report
Cacti collects data through data sources, which can use:
Polling engines:
| Poller | Description |
|---|---|
| PHP Poller | Built-in polling engine |
| Spine | High-performance C-based poller |
Spine supports SNMPv1/v2 and SNMPv3 with IPv6, with some advanced protocol support depending on how Net-SNMP is compiled on your platform.
Official documentation is maintained in a separate repository:
https://github.com/Cacti/documentation
Install the locked Composer dependencies before running PHP contracts. From the repository root:
composer install
include/vendor/bin/pest --configuration=tests/phpunit.xml --testsuite=Unit,Integration
composer run-script phpstan -- --memory-limit=2G
Coverage reports for the PRs checked on October 14, 2026 measure changed first-party executable statements. Applicable changes exceed 80%; this is not whole-project coverage. Formatting-only PHP changes are checked for equivalent syntax trees. Documentation, workflow definitions, lockfiles and generated vendor bundles are outside this execution metric. The validation snapshot records the measured counts and scope.
Run the disposable browser and SQL/RRD profile with Docker and mise installed:
bash tests/performance/profile.sh
The runner selects Node 22 and Python 3.12 through mise and seeds 500 disabled devices and 50 deterministic RRD graphs. It profiles all shipped themes, AJAX navigation, realtime responses, and graph rendering with Boost enabled and disabled. Containers are removed after the run; the printed results directory retains traces, CPU and memory measurements, SQL counts and Callgrind profiles. See profiling instructions and the measured rendering change. The October 14 profile found 400 redundant option-array loads across 200 graph renders. Removing those loads reduced median warm PHP CPU use by 70.7% without Boost and 46.6% with Boost in the equally instrumented fixture. Browser profiles still show retained DOM growth and expensive Midwinter styling.
Timings include Xdebug overhead and use synthetic data; they do not measure live SNMP, collector throughput or production fleet capacity. The current fixture uses RRDtool 1.7.2 for basic rendering; it does not exercise newer RRDtool features.
Contributions are welcome.
You can also help improve docs in:
https://github.com/Cacti/documentation
Community support is available on the Cacti forums:
https://forums.cacti.net
Thanks go to these wonderful people (emoji key):
Ian Berry 💻🛡️📖🎨 |
Reinhard Scheck 💻🛡️📖 |
Tony Roman 💻🛡️📖🌍⚠️🎨 |
Andy Blyler 💻 |
Larry Adams 💻🛡️📖🚇🌍⚠️🎨🚧👀 |
Mark Brugnoli-Vinten 💻🛡️📖🚇🌍⚠️🎨🚧👀 |
| 日期 | 榜单 | 排名 | 周期新增 | 总 STAR |
|---|