{
 "slug": "milvus",
 "name": "Milvus",
 "tagline": "Vector database for similarity search over embeddings at scale",
 "category": "vector-database",
 "use_cases": [
  "vector-search",
  "rag",
  "recommendations"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Milvus (LF AI & Data Foundation)",
  "url": "https://milvus.io",
  "license": "Apache-2.0",
  "license_url": "https://github.com/milvus-io/milvus/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   22,
   80,
   443,
   19530
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "3.0.3",
   "last_build": "2026-10-24",
   "entity_id": "prod-oc4kenkospxq6",
   "ami_alias": "/aws/service/marketplace/prod-oc4kenkospxq6/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-xndcbpen6ss3u",
   "recommended_instance_type": "m6i.xlarge",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "3.0.2",
   "last_build": "2026-09-21",
   "offer_id": "milvus",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:milvus:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.milvus?tab=Overview",
   "recommended_vm_size": "Standard_D4s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/milvus/",
  "json": "https://lynxroute.com/products/milvus/product.json"
 },
 "release_notes": [
  {
   "version": "3.0.3",
   "title": "Milvus 3.0.3",
   "notes": "* Milvus updated 3.0.2 -> 3.0.3, a patch release. Apache-2.0 unchanged\n* Breaking for API clients: the legacy non-underscore /api/v1 REST routes are removed from the management port (use REST v2, gRPC, or /healthz for probes), and binlog imports need the new ImportBinlog privilege. The bundled WebUI console is unaffected\n* Security: management-endpoint credentials are redacted from config dumps and logs, malformed sparse vectors are rejected, and collection metadata now requires access rights\n* New: Function Chain for Hybrid Search, element-level partial updates for Array, Struct and JSON fields, and IS NULL filtering on nullable vector fields\n* Fixes import rollbacks removing visible data, wrong reranker scores, stale load completion and intermittent search failures during concurrent inserts\n* Object store moves to the maintained pgsty/minio community build (AGPL-3.0), as upstream MinIO no longer publishes images\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-24"
   }
  },
  {
   "version": "3.0.2",
   "title": "Milvus 3.0.2",
   "notes": "* Milvus updated 3.0.1 -> 3.0.2, a patch release. Apache-2.0 unchanged\n* Keeps encryption keys and object-storage credentials out of compaction logs, and stops C++ component logs writing into /tmp\n* Fixes data-consistency issues across Storage V2 and V3 binlog import, compaction result handling, struct-array field offsets and concurrent snapshot restores of the same collection\n* REST read requests are rejected earlier when the queue is full, sealed-segment snapshots are pinned once per request, and Tantivy index builds write less data\n* Adds membership_match filter syntax, configurable sentence-split characters for the Lindera tokenizer, and custom S3 endpoints for external collections\n* Updates bundled dependencies, including a compression library fix for GO-2026-5841 and librdkafka 2.6.1 for SASL/SCRAM against Kafka 4.x\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-20",
    "azure": "2026-09-21"
   }
  },
  {
   "version": "3.0.1",
   "title": "Milvus 3.0.1",
   "notes": "* Milvus updated 3.0.0 -> 3.0.1, a patch release. Apache-2.0 unchanged\n* Closes unauthenticated access through streaming gRPC calls on the client port, and keeps credentials, API keys and role password hashes out of logs and error messages\n* Revoked privileges now take effect as soon as they are removed from a privilege group, and stored passwords use a stronger hashing cost\n* Adds REST v2 snapshot management with asynchronous restore, weighted RRF reranking, and TEXT field support in the Go client and the REST API\n* Fixes data-consistency issues across Storage V3 segment loading, compaction, snapshot restore and streaming deletes; collections created on 3.0.0 load without reindexing\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-11",
    "azure": "2026-09-13"
   }
  },
  {
   "version": "3.0.0",
   "title": "Milvus v3.0.0",
   "notes": "* Re-release of Milvus 3.0.0. The application version is unchanged; this build refreshes the underlying operating system image\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-08-14"
   }
  },
  {
   "version": "3.0.0",
   "title": "Milvus 3.0.0 - Initial release (August 2026)",
   "notes": "* Milvus 3.0.0 on Ubuntu 24.04 LTS, standalone configuration (Milvus engine, etcd, MinIO)\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Authentication enabled before the database first starts; the database password, object-storage credential and management-console password are all generated at first boot - nothing baked into the AMI\n* Management console published over TLS behind its own credentials; only the console path is proxied\n* Metrics/management port and MinIO object storage bound to 127.0.0.1 only; etcd publishes no host port\n* HTTPS enabled by default with a self-signed certificate; Certbot and the nginx plugin pre-installed\n* Container log rotation capped so runtime logging cannot fill the root volume\n* UFW firewall pre-configured (ports 22, 80, 443, 19530 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-08-14"
   }
  }
 ],
 "release_history": [
  {
   "version": "3.0.3",
   "aws": "2026-10-24"
  },
  {
   "version": "3.0.2",
   "aws": "2026-09-20",
   "azure": "2026-09-21"
  },
  {
   "version": "3.0.1",
   "aws": "2026-09-11",
   "azure": "2026-09-13"
  },
  {
   "version": "3.0.0",
   "aws": "2026-09-04",
   "azure": "2026-08-14"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-oc4kenkospxq6/latest \\\n  --instance-type m6i.xlarge --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer milvus --plan payg-gen2\naz vm create -g my-rg -n milvus --size Standard_D4s_v3 \\\n  --image lynxroute:milvus:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Milvus is an open-source vector database purpose-built for similarity search over embeddings. It stores high-dimensional vectors alongside scalar metadata and returns nearest-neighbour results across very large collections in milliseconds, which makes it the storage layer for retrieval-augmented generation, semantic search, recommendation, deduplication and image or audio similarity. Written in Go and C++ with a SIMD-accelerated search core, it supports multiple index types and distance metrics (COSINE, L2, inner product), hybrid search combining vector similarity with scalar filtering, sparse and dense vectors, and full-text search. Clients connect over gRPC or a RESTful API, with official SDKs for Python, Java, Go, Node.js and C#. This image runs the standalone configuration - the Milvus engine with etcd for metadata and MinIO for object storage - persisting vectors, indexes and the write-ahead log to the instance's EBS volume. Milvus is a graduated project of the LF AI and Data Foundation. Apache-2.0 license, no vendor lock-in.",
  "image_adds": "Security hardening:\n* Authentication is enabled before the database first starts, and a unique 24-character database password is generated on your own instance at first boot - the documented upstream default password never exists on your instance\n* The object-storage credential and the management-console password are generated at first boot as well, and written to a root-only credentials file. Nothing is baked into the image\n* The management console is published only through an nginx TLS reverse proxy protected by its own credentials, and only the console path is proxied - the rest of the management port is not reachable from outside\n* The metrics and management port is bound to 127.0.0.1 only\n* MinIO object storage is bound to 127.0.0.1 only, and the etcd metadata store publishes no host port at all\n* Container confinement is left at the platform default rather than relaxed\n* Container log rotation capped so a chatty or restarting container cannot fill the root volume\n* UFW firewall pre-configured - only 22, 80, 443 and the database API on 19530 reachable; object storage and metadata ports blocked externally\n* fail2ban, auditd and AppArmor pre-configured\n* HTTPS enabled by default with a self-signed certificate; Certbot and the nginx plugin are pre-installed so a trusted certificate is one command away\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md\n\nMilvus holds its indexes in RAM and requires a CPU with AVX2, so the recommended instance type is m6i.xlarge (4 vCPU, 16 GB) and no burstable tier is offered."
 },
 "generated_at": "2026-10-31T09:36:34Z"
}