{
 "slug": "memcached",
 "name": "Memcached",
 "tagline": "In-memory key-value cache with SASL authentication",
 "category": "database",
 "use_cases": [
  "caching",
  "session-store",
  "key-value"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Memcached",
  "url": "https://memcached.org",
  "license": "BSD-3-Clause",
  "license_url": "https://github.com/memcached/memcached/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   11211
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "1.6.45",
   "last_build": "2026-08-31",
   "entity_id": "prod-dszvdqizsxdqe",
   "ami_alias": "/aws/service/marketplace/prod-dszvdqizsxdqe/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-typn3rzzzuzsy",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "1.6.45",
   "last_build": "2026-09-01",
   "offer_id": "memcached",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:memcached:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.memcached?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/memcached/",
  "json": "https://lynxroute.com/products/memcached/product.json"
 },
 "release_notes": [
  {
   "version": "1.6.45",
   "title": "Memcached v1.6.45",
   "notes": "* Same upstream version (AWS rejects a duplicate VersionTitle, hence the \"v\"). Log rotation no longer silently stops Memcached logging: the unit writes via StandardOutput=append:, so systemd owns the fd and the previous `create` rotation left the service writing into the old renamed file while the live log stayed empty. Now uses copytruncate.\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base.\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-08-31",
    "azure": "2026-09-01"
   }
  },
  {
   "version": "1.6.42",
   "title": "Memcached 1.6.42 - Initial release (June 2026)",
   "notes": "* Memcached 1.6.42 on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* SASL authentication required - unique credential generated at first boot\n* Bound to the private interface and loopback only - never 0.0.0.0\n* UDP disabled (-U 0) - closes the DDoS amplification vector\n* Memory cap sized to the instance automatically\n* UFW firewall pre-configured (SSH on 22; 11211 governed by your Security Group)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-14",
    "azure": "2026-06-26"
   }
  }
 ],
 "release_history": [
  {
   "version": "1.6.45",
   "aws": "2026-08-31",
   "azure": "2026-09-01"
  },
  {
   "version": "1.6.42",
   "aws": "2026-06-14",
   "azure": "2026-06-26"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-dszvdqizsxdqe/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer memcached --plan payg-gen2\naz vm create -g my-rg -n memcached --size Standard_D2s_v3 \\\n  --image lynxroute:memcached:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Memcached is a high-performance, distributed in-memory object caching system, implemented as a single multithreaded C daemon built on libevent. It stores arbitrary key-value pairs in RAM to take load off databases and APIs, with a slab allocator, LRU eviction, per-key TTL expiry, atomic increment/decrement and compare-and-swap, and text, binary and meta protocols. Applications shard transparently across nodes using consistent hashing in the client, with mature client libraries for PHP, Python, Java, Node.js, Go, Ruby and most other languages. It is the battle-tested caching layer behind many of the largest web platforms. Memcached is in-memory only with no persistence by design - the cache is rebuilt by the application after a restart. BSD-3-Clause license, no vendor lock-in.",
  "image_adds": "Security hardening:\n* SASL authentication required at first boot - a unique random credential is generated, not a default or empty password\n* Bound to the private interface and loopback only - never 0.0.0.0, never exposed to the internet\n* UDP disabled (-U 0) - closes the well-known Memcached DDoS amplification vector\n* Memory cap sized to the instance automatically at first boot\n* UFW firewall - SSH on 22 only; port 11211 governed by your Security Group\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}