Apache Kvrocks Redis-Compatible NoSQL Store

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Apache Kvrocks - Redis-Compatible, Disk-Backed NoSQL Database

Deploy a fully configured, security-hardened Apache Kvrocks node that accepts Redis-protocol connections within minutes of instance launch. Kvrocks is an Apache-2.0 licensed, distributed key-value store built on RocksDB: it keeps its data on disk rather than in RAM, so it serves working sets far larger than memory at a fraction of the cost of an in-memory store, while remaining a drop-in target for existing Redis clients and tooling.

## Why This Image Over Alternatives

Unlike images that ship a database with a shared default password or no authentication at all, this image enforces password authentication from the moment the service starts. A unique, strong password is generated per instance on first boot and written to a root-only credentials file - eliminating the credential-sharing risk that leads to unauthorized access. The Apache-2.0 licence means no vendor lock-in and no licence ambiguity for commercial or SaaS deployments.

## About cloudimg

cloudimg specializes in publishing production-ready, security-hardened open source AMIs on AWS Marketplace. Every image we ship follows a consistent hardening methodology: no default credentials, loopback-only service binding, and automated credential generation at first boot. Our support engineers are available 24/7 and focus exclusively on helping teams deploy and operate the open source infrastructure we package.

## What Is Included

• Kvrocks server built from the official Apache source release and installed under /usr/local/bin
• redis-cli from the redis-tools package for a Redis-compatible command line
• Auto-starting service listening on the Kvrocks default port, bound to loopback so it is never exposed to the internet by default
• RocksDB persistence on a dedicated, independently resizable data volume, so the keyspace survives restarts and reboots

## Secure First Boot Process

1. Launch your instance with this image

2. A one-shot systemd service generates a cryptographically strong password

3. The password is written into the Kvrocks configuration and the service is restarted to enforce it

4. Credentials are written to a file readable only by root

5. Anonymous and wrong-password connections are refused - authentication is enforced immediately

No shared or default database credential ever ships in the image.

## Redis-Protocol Compatibility

Kvrocks implements a large subset of Redis commands - strings, hashes, lists, sets, sorted sets, bitmaps and more - so existing Redis clients (Node.js ioredis, Python redis-py, Java Jedis and Lettuce, Go go-redis) connect without code changes. It is a natural fit when a Redis-shaped workload has outgrown the cost of keeping everything in memory.

## AWS Integration Points

This image runs on Amazon EC2 instances of any supported type. Pair it with:

• Amazon VPC for network isolation and security group rules controlling SSH access
• Amazon EBS for durable, resizable storage backing the RocksDB keyspace
• Amazon CloudWatch for instance-level monitoring of CPU, memory and disk metrics
• AWS Systems Manager for patch management and remote session access without opening extra ports

Because the service binds to loopback by default, remote access is via an SSH tunnel or a private interface - the credentials file and user guide document both.

## Deployment Prerequisites

• Security groups: Allow inbound TCP on port 22 (SSH administration and tunnelling). The database port is not exposed publicly by default.
• Instance sizing: A general-purpose m5 instance is recommended; RocksDB benefits from RAM for its block cache but runs comfortably for demos and moderate workloads on smaller types.
• Storage: A dedicated General Purpose SSD (gp3) data volume backs the keyspace; size it to your dataset plus RocksDB overhead.

## Use Cases

• Cost-efficient Redis alternative: Teams running large Redis caches or session stores deploy this image as a disk-backed, Redis-compatible store - hot data stays fast through the RocksDB block cache while the full keyspace lives on EBS, cutting cost without rewriting a single client.
• Large key-value datasets that no longer fit economically in memory
• Persistent queues, counters and leaderboards
• Session and metadata stores for web applications
• A durable Redis-protocol backend for analytics and caching tiers

## cloudimg Support

24/7 technical support by email and live chat with a one-hour average first response for critical issues.