{
 "slug": "cassandra",
 "name": "Apache Cassandra",
 "tagline": "Distributed wide-column NoSQL database for high availability and linear scale",
 "category": "database",
 "use_cases": [
  "nosql",
  "wide-column",
  "high-availability"
 ],
 "aliases": [
  "apache cassandra"
 ],
 "status": "live",
 "upstream": {
  "vendor": "Apache Software Foundation",
  "url": "https://cassandra.apache.org",
  "license": "Apache-2.0",
  "license_url": "https://github.com/apache/cassandra/blob/trunk/LICENSE.txt"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   9042
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "5.0.9",
   "last_build": "2026-09-04",
   "entity_id": "prod-4the4gyktu57m",
   "ami_alias": "/aws/service/marketplace/prod-4the4gyktu57m/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-j2s5rm7lz7dha",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "5.0.9",
   "last_build": "2026-08-19",
   "offer_id": "cassandra",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:cassandra:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.cassandra?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/cassandra/",
  "json": "https://lynxroute.com/products/cassandra/product.json"
 },
 "release_notes": [
  {
   "version": "5.0.9",
   "title": "Apache Cassandra v5.0.9",
   "notes": "* Re-release of Apache Cassandra 5.0.9. The application version is unchanged; this build refreshes the underlying operating system image\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "5.0.9",
   "title": "Apache Cassandra 5.0.9",
   "notes": "* Apache Cassandra 5.0.9 on Ubuntu 24.04 LTS (Eclipse Temurin 17) - bugfix update from 5.0.8\n* Fixes coordinator load-shedding returning OverloadedException without a streamId (CASSANDRA-21508); segment-aware SAI checksum validation (CASSANDRA-21516); cqlsh support for Python 3.12/3.13 (CASSANDRA-20997)\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Default cassandra superuser password rotated to a strong random value at first boot\n* PasswordAuthenticator + CassandraAuthorizer enabled\n* Native TLS (client encryption) required on 9042; self-signed certificate per instance\n* CQL (9042) and JMX (7199) bound to localhost only\n* UFW firewall pre-configured (SSH 22 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "5.0.8",
   "title": "Apache Cassandra 5.0.8",
   "notes": "* Apache Cassandra 5.0.8 on Ubuntu 24.04 LTS (Eclipse Temurin 17)\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Default cassandra superuser password rotated to a strong random value at first boot\n* PasswordAuthenticator + CassandraAuthorizer enabled\n* Native TLS (client encryption) required on 9042; self-signed certificate per instance\n* CQL (9042) and JMX (7199) bound to localhost only\n* UFW firewall pre-configured (SSH 22 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-api",
   "live": {
    "aws": "2026-06-22",
    "azure": "2026-07-27"
   }
  }
 ],
 "release_history": [
  {
   "version": "5.0.9",
   "aws": "2026-09-04",
   "azure": "2026-08-19"
  },
  {
   "version": "5.0.8",
   "aws": "2026-06-22",
   "azure": "2026-07-27"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-4the4gyktu57m/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer cassandra --plan payg-gen2\naz vm create -g my-rg -n cassandra --size Standard_D2s_v3 \\\n  --image lynxroute:cassandra:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Apache Cassandra is an open-source, distributed NoSQL wide-column database built for high availability and linear scalability with no single point of failure. It runs as a JVM service (Eclipse Temurin 17) and is queried with CQL (Cassandra Query Language) over a native binary protocol on port 9042. Cassandra offers tunable consistency, a masterless peer-to-peer architecture, partitioned wide-column data model with clustering keys, secondary indexes, materialized views, lightweight transactions (Paxos), TTL on data, and time-to-live driven compaction. Data is durably persisted to local disk as SSTables with a commit log, hints, and saved caches. CQL drivers exist for Java, Python, Node.js, Go, C#, and many more. This image ships a single-node deployment, ready to scale into a cluster. Apache-2.0 license - the vendor-neutral upstream distribution, distinct from any commercial Cassandra product.",
  "image_adds": "Security hardening:\n* Default cassandra/cassandra superuser password rotated to a strong random value at first boot\n* PasswordAuthenticator and CassandraAuthorizer enabled - no anonymous access\n* Native TLS (client encryption) required on port 9042; self-signed certificate generated per instance at first boot\n* CQL (9042) and JMX (7199) bind to 127.0.0.1 only - not exposed to the network by default\n* UFW firewall - only SSH (22) open; 9042 blocked externally\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}