{
 "slug": "valkey",
 "name": "Valkey",
 "tagline": "Redis-compatible in-memory data store under the Linux Foundation",
 "category": "database",
 "use_cases": [
  "caching",
  "key-value",
  "redis-compatible"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Linux Foundation",
  "url": "https://valkey.io",
  "license": "BSD-3-Clause",
  "license_url": "https://github.com/valkey-io/valkey/blob/unstable/COPYING"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   6379
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "9.1.2",
   "last_build": "2026-09-01",
   "entity_id": "prod-bk3sq2xsmcxsc",
   "ami_alias": "/aws/service/marketplace/prod-bk3sq2xsmcxsc/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-6bcflsbrhppze",
   "recommended_instance_type": "t3.small",
   "price_usd_per_hour": 0.03,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "9.1.2",
   "last_build": "2026-09-02",
   "offer_id": "valkey",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:valkey:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.valkey?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "live",
   "version": "9.1.1",
   "last_build": "2026-08-13",
   "entity_id": "sgcmjj00037037",
   "image_id": "m-t4nhvsbqa53o37xeth7a",
   "region": "ap-southeast-1",
   "region_name": "Singapore",
   "listing_url": "https://marketplace.alibabacloud.com/products/56698004/sgcmjj00037037.html",
   "recommended_instance_type": "ecs.e-c1m2.large",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/valkey/",
  "json": "https://lynxroute.com/products/valkey/product.json"
 },
 "release_notes": [
  {
   "version": "9.1.2",
   "title": "Valkey 9.1.2",
   "notes": "* Valkey 9.1.2 on Ubuntu 24.04 LTS - security update from 9.1.1. BSD-3-Clause unchanged\n* Fixes GHSA-fq2f-crmw-q97r: an unauthenticated use-after-free of the Lua interpreter state, caused by a process-global script debugger command table that cached a pointer to a freed interpreter and was never invalidated\n* Fixes GHSA-jcj7-v34w-v9vv: a use-after-free in RDMA connection handling reachable through CLIENT KILL. This build has no RDMA listener and was not exposed to it\n* Closes several ACL gaps: HGETEX now requires write permission on the key, duplicate STORE options can no longer let GEORADIUS write outside permitted key patterns, MOVE and COPY check access to the destination database, and a NUL embedded in a TLS certificate CN can no longer impersonate another user\n* Hardens loading of untrusted data: listpacks are always validated on RDB load and RESTORE, and stream, cluster-bus and slot-import payloads are validated against crafted input\n* Fixes a permanent client deadlock when a blocking command is followed by a partially delivered pipelined command, a frozen monotonic clock on hosts with an unsynchronized TSC that stopped key expiration, a stack overflow when retrying a large TLS write, and AOF loss of newer writes after a short read in a MULTI block\n* Root volume increased from 8 GB to 10 GB for headroom above the hardened base\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-01",
    "azure": "2026-09-02"
   }
  },
  {
   "version": "9.1.0",
   "title": "Valkey 9.1.0 - May 2026",
   "notes": "* Valkey 9.1.0 on Ubuntu 24.04 LTS (minor release)\n* Security release - 3 CVE fixes: CVE-2026-23479 (use-after-free in unblock\n  client flow), CVE-2026-25243 (invalid memory access in RESTORE command),\n  CVE-2026-23631 (use-after-free during full sync with yielding Lua/function)\n* New: cluster bus network traffic usage metric (bytes), reduced latency\n  spikes during rehashing via incremental page release\n* Bug fixes - GEOSEARCH BYPOLYGON leak on invalid COUNT, syncio EOF handling,\n  streamTrim NULL pointer in listpack delta calculation, RDMA benchmark crash\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-05-23",
    "azure": "2026-06-04"
   }
  },
  {
   "version": "9.0.3",
   "title": "Valkey 9.0.3 - Initial release (April 2026)",
   "notes": "* Valkey 9.0.3 on Ubuntu 24.04 LTS\n* CIS Level 1 hardening, password auth, localhost binding, FLUSHALL disabled\n* SBOM, CIS Report, IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-04-20",
    "azure": "2026-05-07"
   }
  }
 ],
 "release_history": [
  {
   "version": "9.1.2",
   "aws": "2026-09-01",
   "azure": "2026-09-02"
  },
  {
   "version": "9.1.1",
   "aws": "2026-07-23",
   "azure": "2026-07-27",
   "alicloud": "2026-08-13"
  },
  {
   "version": "9.1.0",
   "aws": "2026-05-23",
   "azure": "2026-06-04"
  },
  {
   "version": "9.0.3",
   "aws": "2026-04-20",
   "azure": "2026-05-07"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-bk3sq2xsmcxsc/latest \\\n  --instance-type t3.small --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer valkey --plan payg-gen2\naz vm create -g my-rg -n valkey --size Standard_D2s_v3 \\\n  --image lynxroute:valkey:payg-gen2:latest --admin-username azureuser --generate-ssh-keys",
  "alicloud": "# launch from the Marketplace listing in the console:\nMarketplace listing -> Buy Now -> region ap-southeast-1 -> instance type ecs.e-c1m2.large -> create ECS instance\n# image id in ap-southeast-1: m-t4nhvsbqa53o37xeth7a"
 },
 "description": {
  "what_is": "Valkey is the open-source, high-performance Redis-compatible in-memory data store maintained by the Linux Foundation - forked from Redis OSS 7.2 in 2024 when Redis Inc. relicensed to BSL. It supports the full Redis API including strings, hashes, lists, sets, sorted sets, streams, pub/sub messaging, Lua scripting, transactions, geospatial commands, hyperloglog, bitmaps and the modules ecosystem. Operators get RDB snapshots and AOF persistence to local disk, replica replication and cluster sharding for horizontal scale. Drop-in compatible with all existing Redis clients across Java, Python, Node.js, Go, PHP, Ruby and 100+ other languages and frameworks - no application code changes required. BSD-3-Clause license - the safe vendor-neutral path forward for self-hosted Redis users.",
  "image_adds": "Security hardening:\n* Strong random password at first boot - no default or empty password\n* Binds to 127.0.0.1 only - not exposed to the network by default\n* FLUSHALL and FLUSHDB disabled\n* UFW firewall - port 6379 blocked externally, SSH on 22 only\n* fail2ban, AppArmor\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}