Catalog / Databases & caches

Apache Cassandra

Distributed wide-column NoSQL database for high availability and linear scale

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

Availability and pricing
CloudVersionSoftware priceLast build
AWS Marketplace
EC2 AMI · all commercial regions
5.0.9$0.05/hr
Recommended instance: t3.medium · 5-day free trial
2026-09-04Listing ↗
Azure Marketplace
VM image · plan payg-gen2 · Gen2
5.0.9$0.028/vCPU/hr
Recommended VM: Standard_D2s_v3
2026-08-19Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts
Base OSUbuntu 24.04 LTS
HardeningCIS Level 1, Ubuntu 24.04 LTS (tailored)
LicenseApache-2.0
UpstreamApache Software Foundation
Machine-readableproduct.json · catalog.json
What is Apache Cassandra

Apache Cassandra is an open-source, distributed NoSQL wide-column database built for high availability and linear scalability with no single point of failure. It runs as a JVM service (Eclipse Temurin 17) and is queried with CQL (Cassandra Query Language) over a native binary protocol on port 9042. Cassandra offers tunable consistency, a masterless peer-to-peer architecture, partitioned wide-column data model with clustering keys, secondary indexes, materialized views, lightweight transactions (Paxos), TTL on data, and time-to-live driven compaction. Data is durably persisted to local disk as SSTables with a commit log, hints, and saved caches. CQL drivers exist for Java, Python, Node.js, Go, C#, and many more. This image ships a single-node deployment, ready to scale into a cluster. Apache-2.0 license - the vendor-neutral upstream distribution, distinct from any commercial Cassandra product.

What the Lynxroute image adds

Security hardening:

  • Default cassandra/cassandra superuser password rotated to a strong random value at first boot
  • PasswordAuthenticator and CassandraAuthorizer enabled - no anonymous access
  • Native TLS (client encryption) required on port 9042; self-signed certificate generated per instance at first boot
  • CQL (9042) and JMX (7199) bind to 127.0.0.1 only - not exposed to the network by default
  • UFW firewall - only SSH (22) open; 9042 blocked externally
  • fail2ban, AppArmor
  • CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

  • CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
  • auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

  • SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
  • CIS Conformance Report at /etc/lynxroute/cis-report.html
  • CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Deploy

Launch in one command

Credentials are generated at first boot and written to /root/cassandra-credentials.txt.

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-4the4gyktu57m/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx
# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer cassandra --plan payg-gen2
az vm create -g my-rg -n cassandra --size Standard_D2s_v3 \
  --image lynxroute:cassandra:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Apache Cassandra v5.0.9

AWS · 2026-09-04Azure · 2026-08-19
  • Re-release of Apache Cassandra 5.0.9. The application version is unchanged; this build refreshes the underlying operating system image
  • Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build