Production Deployment Guide

<h2 id="production-deployment-guide" class="position-relative d-flex align-items-center group"> Production Deployment Guide <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="production-deployment-guide" aria-haspopup="dialog" aria-label="Share link: Production Deployment Guide"> Share link </button> </h2><div id="headingShareModal" class="heading-share-modal" role="dialog" aria-modal="true" aria-labelledby="headingShareTitle" hidden> <div class="hsm-dialog" role="document"> <div class="hsm-header"> <h2 id="headingShareTitle" class="h6 mb-0 fw-bold">Share this section</h2> <button type="button" class="hsm-close" aria-label="Close"> </button> </div> <div class="hsm-body"> <label for="headingShareInput" class="form-label small text-muted mb-1 text-uppercase fw-bold" style="font-size: 0.7rem; letter-spacing: 0.5px;">Permalink</label> <div class="input-group mb-4 hsm-url-group"> <input id="headingShareInput" type="text" class="form-control font-monospace" readonly aria-readonly="true" style="font-size: 0.85rem;" /> <button class="btn btn-primary hsm-copy" type="button" aria-label="Copy" title="Copy"> </button> </div> <div class="small fw-bold mb-2 text-muted text-uppercase" style="font-size: 0.7rem; letter-spacing: 0.5px;">Share via</div> <div class="hsm-share-grid"> <a id="share-twitter" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> Twitter </a> <a id="share-linkedin" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> LinkedIn </a> <a id="share-facebook" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> Facebook </a> </div> </div> </div> </div> <style> .heading-share-modal { position: fixed; inset: 0; display: flex; justify-content: center; align-items: center; background: rgba(0, 0, 0, 0.6); z-index: 1050; padding: 1rem; backdrop-filter: blur(4px); -webkit-backdrop-filter: blur(4px); } .heading-share-modal[hidden] { display: none !important; } .hsm-dialog { max-width: 420px; width: 100%; background: var(--bs-body-bg, #fff); color: var(--bs-body-color, #212529); border: 1px solid var(--bs-border-color, rgba(0,0,0,0.1)); border-radius: 1rem; box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.25); overflow: hidden; animation: hsm-fade-in 0.2s ease-out; } @keyframes hsm-fade-in { from { opacity: 0; transform: scale(0.95); } to { opacity: 1; transform: scale(1); } } [data-bs-theme="dark"] .hsm-dialog { background: #1e293b; border-color: rgba(255,255,255,0.1); color: #f8f9fa; } .hsm-header { display: flex; justify-content: space-between; align-items: center; padding: 1rem 1.5rem; border-bottom: 1px solid var(--bs-border-color, rgba(0,0,0,0.1)); background: rgba(0,0,0,0.02); } [data-bs-theme="dark"] .hsm-header { background: rgba(255,255,255,0.02); border-color: rgba(255,255,255,0.1); } .hsm-close { background: transparent; border: none; color: inherit; opacity: 0.5; padding: 0.25rem 0.5rem; border-radius: 0.25rem; font-size: 1.2rem; line-height: 1; transition: opacity 0.2s; } .hsm-close:hover { opacity: 1; } .hsm-body { padding: 1.5rem; } .hsm-url-group { display: flex !important; align-items: stretch; } .hsm-url-group .form-control { flex: 1; min-width: 0; margin: 0; background: var(--bs-secondary-bg, #f8f9fa); border-color: var(--bs-border-color, #dee2e6); border-top-right-radius: 0; border-bottom-right-radius: 0; height: 42px; } .hsm-url-group .btn { flex: 0 0 auto; margin: 0; margin-left: -1px; border-top-left-radius: 0; border-bottom-left-radius: 0; height: 42px; display: flex; align-items: center; justify-content: center; padding: 0 1.25rem; z-index: 2; } [data-bs-theme="dark"] .hsm-url-group .form-control { background: #0f172a; border-color: #334155; color: #e2e8f0; } .hsm-share-grid { display: flex; flex-direction: column; gap: 0.5rem; } .hsm-share-grid .btn { display: flex; align-items: center; justify-content: center; font-size: 0.9rem; padding: 0.6rem; border-color: var(--bs-border-color); width: 100%; } [data-bs-theme="dark"] .hsm-share-grid .btn { color: #e2e8f0; border-color: #475569; } [data-bs-theme="dark"] .hsm-share-grid .btn:hover { background: #334155; border-color: #cbd5e1; } </style> <script> (function(){ const modal = document.getElementById('headingShareModal'); if(!modal) return; const input = modal.querySelector('#headingShareInput'); const copyBtn = modal.querySelector('.hsm-copy'); const twitter = modal.querySelector('#share-twitter'); const linkedin = modal.querySelector('#share-linkedin'); const facebook = modal.querySelector('#share-facebook'); const closeBtn = modal.querySelector('.hsm-close'); let lastFocus=null; let trapBound=false; function buildUrl(id){ return window.location.origin + window.location.pathname + '#' + id; } function isOpen(){ return !modal.hasAttribute('hidden'); } function hydrate(id){ const url=buildUrl(id); input.value=url; const enc=encodeURIComponent(url); const text=encodeURIComponent(document.title); if(twitter) twitter.href=`https://twitter.com/intent/tweet?url=${enc}&text=${text}`; if(linkedin) linkedin.href=`https://www.linkedin.com/sharing/share-offsite/?url=${enc}`; if(facebook) facebook.href=`https://www.facebook.com/sharer/sharer.php?u=${enc}`; } function openModal(id){ lastFocus=document.activeElement; hydrate(id); if(!isOpen()){ modal.removeAttribute('hidden'); } requestAnimationFrame(()=>{ input.focus(); }); trapFocus(); } function closeModal(){ if(!isOpen()) return; modal.setAttribute('hidden',''); if(lastFocus && typeof lastFocus.focus==='function') lastFocus.focus(); } function copyCurrent(){ try{ navigator.clipboard.writeText(input.value).then(()=>feedback(true),()=>fallback()); } catch(e){ fallback(); } } function fallback(){ input.select(); try{ document.execCommand('copy'); feedback(true);}catch(e){ feedback(false);} } function feedback(ok){ if(!copyBtn) return; const icon=copyBtn.querySelector('i'); if(!icon) return; const prev=copyBtn.getAttribute('data-prev')||icon.className; if(!copyBtn.getAttribute('data-prev')) copyBtn.setAttribute('data-prev',prev); icon.className= ok ? 'fa-duotone fa-clipboard-check':'fa-duotone fa-circle-exclamation'; setTimeout(()=>{ icon.className=prev; },1800); } function handleShareClick(e){ e.preventDefault(); const btn=e.currentTarget; const id=btn.getAttribute('data-share-target'); if(id) openModal(id); } function bindShareButtons(){ document.querySelectorAll('.h-share').forEach(btn=>{ if(!btn.dataset.hShareBound){ btn.addEventListener('click', handleShareClick); btn.dataset.hShareBound='1'; } }); } bindShareButtons(); if(document.readyState==='loading'){ document.addEventListener('DOMContentLoaded', bindShareButtons); } else { requestAnimationFrame(bindShareButtons); } document.addEventListener('click', function(e){ const shareBtn=e.target.closest && e.target.closest('.h-share'); if(shareBtn && !shareBtn.dataset.hShareBound){ handleShareClick.call(shareBtn, e); } }, true); document.addEventListener('click', e=>{ if(e.target===modal) closeModal(); if(e.target.closest && e.target.closest('.hsm-close')){ e.preventDefault(); closeModal(); } if(copyBtn && (e.target===copyBtn || (e.target.closest && e.target.closest('.hsm-copy')))) { e.preventDefault(); copyCurrent(); } }); document.addEventListener('keydown', e=>{ if(e.key==='Escape' && isOpen()) closeModal(); }); function trapFocus(){ if(trapBound) return; trapBound=true; modal.addEventListener('keydown', f=>{ if(f.key==='Tab' && isOpen()){ const focusable=[...modal.querySelectorAll('a[href],button,input,textarea,select,[tabindex]:not([tabindex="-1"])')].filter(el=>!el.hasAttribute('disabled')); if(!focusable.length) return; const first=focusable[0]; const last=focusable[focusable.length-1]; if(f.shiftKey && document.activeElement===first){ f.preventDefault(); last.focus(); } else if(!f.shiftKey && document.activeElement===last){ f.preventDefault(); first.focus(); } } }); } if(closeBtn) closeBtn.addEventListener('click', e=>{ e.preventDefault(); closeModal(); }); })(); </script>This guide covers everything you need to deploy Geode in production: hardware requirements, OS tuning, security hardening, TLS configuration, and container orchestration. <h3 id="hardware-requirements" class="position-relative d-flex align-items-center group"> Hardware Requirements <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="hardware-requirements" aria-haspopup="dialog" aria-label="Share link: Hardware Requirements"> Share link </button> </h3> <h4 id="minimum-requirements" class="position-relative d-flex align-items-center group"> Minimum Requirements <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="minimum-requirements" aria-haspopup="dialog" aria-label="Share link: Minimum Requirements"> Share link </button> </h4><table> <thead> <tr> <th>Component</th> <th>Specification</th> </tr> </thead> <tbody> <tr> <td>CPU</td> <td>4 cores (x86_64 or ARM64)</td> </tr> <tr> <td>Memory</td> <td>8 GB RAM</td> </tr> <tr> <td>Storage</td> <td>50 GB SSD</td> </tr> <tr> <td>Network</td> <td>1 Gbps</td> </tr> </tbody> </table> <h4 id="recommended-requirements" class="position-relative d-flex align-items-center group"> Recommended Requirements <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="recommended-requirements" aria-haspopup="dialog" aria-label="Share link: Recommended Requirements"> Share link </button> </h4><table> <thead> <tr> <th>Component</th> <th>Specification</th> </tr> </thead> <tbody> <tr> <td>CPU</td> <td>16+ cores</td> </tr> <tr> <td>Memory</td> <td>64+ GB RAM</td> </tr> <tr> <td>Storage</td> <td>500+ GB NVMe SSD</td> </tr> <tr> <td>Network</td> <td>10 Gbps</td> </tr> </tbody> </table> <h4 id="storage-considerations" class="position-relative d-flex align-items-center group"> Storage Considerations <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="storage-considerations" aria-haspopup="dialog" aria-label="Share link: Storage Considerations"> Share link </button> </h4>SSD is Required: Geode relies on fast random I/O for graph traversals. HDDs are not recommended. Storage Sizing Formula: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback">Required Storage = (Nodes * 256 bytes) + (Relationships * 128 bytes) + (Properties * avg_size) + 20% overhead </code></pre></div>Example Calculation: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback">10 million nodes: 10M * 256 = 2.56 GB 50 million relationships: 50M * 128 = 6.4 GB 100 million properties (avg 64 bytes): 100M * 64 = 6.4 GB Total: ~18 GB + 20% = ~22 GB </code></pre></div> <h4 id="memory-sizing" class="position-relative d-flex align-items-center group"> Memory Sizing <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="memory-sizing" aria-haspopup="dialog" aria-label="Share link: Memory Sizing"> Share link </button> </h4>Rule of Thumb: Allocate 1 GB RAM per 10 million graph elements (nodes + relationships). Memory Distribution: <ul> <li>60%: Page cache for data files</li> <li>25%: Query execution buffers</li> <li>10%: Connection handling</li> <li>5%: System overhead</li> </ul> <h3 id="os-tuning-linux" class="position-relative d-flex align-items-center group"> OS Tuning (Linux) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="os-tuning-linux" aria-haspopup="dialog" aria-label="Share link: OS Tuning (Linux)"> Share link </button> </h3> <h4 id="system-limits" class="position-relative d-flex align-items-center group"> System Limits <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="system-limits" aria-haspopup="dialog" aria-label="Share link: System Limits"> Share link </button> </h4>Edit <code>/etc/security/limits.conf</code>: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"># Geode user limits geode soft nofile 65535 geode hard nofile 65535 geode soft nproc 65535 geode hard nproc 65535 geode soft memlock unlimited geode hard memlock unlimited </code></pre></div> <h4 id="kernel-parameters" class="position-relative d-flex align-items-center group"> Kernel Parameters <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="kernel-parameters" aria-haspopup="dialog" aria-label="Share link: Kernel Parameters"> Share link </button> </h4>Edit <code>/etc/sysctl.conf</code>: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"># Network tuning for QUIC net.core.rmem_max = 134217728 net.core.wmem_max = 134217728 net.core.rmem_default = 16777216 net.core.wmem_default = 16777216 net.core.optmem_max = 40960 net.core.netdev_max_backlog = 50000 net.ipv4.udp_mem = 65536 131072 262144 net.ipv4.udp_rmem_min = 16384 net.ipv4.udp_wmem_min = 16384 # Connection handling net.core.somaxconn = 65535 net.ipv4.tcp_max_syn_backlog = 65535 # File system fs.file-max = 2097152 fs.inotify.max_user_watches = 524288 # Virtual memory vm.swappiness = 10 vm.dirty_ratio = 40 vm.dirty_background_ratio = 10 vm.max_map_count = 262144 </code></pre></div>Apply changes: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">sudo sysctl -p </code></pre></div> <h4 id="io-scheduler" class="position-relative d-flex align-items-center group"> I/O Scheduler <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="io-scheduler" aria-haspopup="dialog" aria-label="Share link: I/O Scheduler"> Share link </button> </h4>For NVMe drives: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">echo "none" | sudo tee /sys/block/nvme0n1/queue/scheduler </code></pre></div>For SSD drives: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">echo "mq-deadline" | sudo tee /sys/block/sda/queue/scheduler </code></pre></div> <h4 id="transparent-huge-pages" class="position-relative d-flex align-items-center group"> Transparent Huge Pages <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="transparent-huge-pages" aria-haspopup="dialog" aria-label="Share link: Transparent Huge Pages"> Share link </button> </h4>Disable for better memory performance: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">echo "never" | sudo tee /sys/kernel/mm/transparent_hugepage/enabled echo "never" | sudo tee /sys/kernel/mm/transparent_hugepage/defrag </code></pre></div>Make persistent via <code>/etc/rc.local</code> or systemd service. <h3 id="security-hardening" class="position-relative d-flex align-items-center group"> Security Hardening <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="security-hardening" aria-haspopup="dialog" aria-label="Share link: Security Hardening"> Share link </button> </h3> <h4 id="dedicated-user" class="position-relative d-flex align-items-center group"> Dedicated User <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="dedicated-user" aria-haspopup="dialog" aria-label="Share link: Dedicated User"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Create geode user sudo useradd -r -s /bin/false -d /var/lib/geode geode # Create directories sudo mkdir -p /var/lib/geode /var/log/geode /etc/geode sudo chown -R geode:geode /var/lib/geode /var/log/geode /etc/geode sudo chmod 750 /var/lib/geode /var/log/geode sudo chmod 700 /etc/geode </code></pre></div> <h4 id="file-permissions" class="position-relative d-flex align-items-center group"> File Permissions <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="file-permissions" aria-haspopup="dialog" aria-label="Share link: File Permissions"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Data directory chmod 700 /var/lib/geode # Configuration (may contain secrets) chmod 600 /etc/geode/geode.yaml # TLS certificates chmod 600 /etc/geode/server.key chmod 644 /etc/geode/server.crt # Log directory chmod 750 /var/log/geode </code></pre></div> <h4 id="firewall-configuration" class="position-relative d-flex align-items-center group"> Firewall Configuration <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="firewall-configuration" aria-haspopup="dialog" aria-label="Share link: Firewall Configuration"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Allow Geode port (default 3141) sudo ufw allow 3141/udp comment "Geode QUIC" # Alternative port 8443 sudo ufw allow 8443/udp comment "Geode QUIC Alt" # Deny direct access to data directory port if using reverse proxy sudo ufw deny 3142/udp </code></pre></div> <h4 id="selinux-rhelcentos" class="position-relative d-flex align-items-center group"> SELinux (RHEL/CentOS) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="selinux-rhelcentos" aria-haspopup="dialog" aria-label="Share link: SELinux (RHEL/CentOS)"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Create policy for Geode cat > geode.te << EOF module geode 1.0; require { type geode_t; type geode_port_t; type geode_data_t; } allow geode_t geode_port_t:udp_socket { bind listen }; allow geode_t geode_data_t:dir { read write add_name remove_name }; allow geode_t geode_data_t:file { read write create unlink }; EOF # Compile and install checkmodule -M -m -o geode.mod geode.te semodule_package -o geode.pp -m geode.mod semodule -i geode.pp </code></pre></div> <h4 id="apparmor-ubuntudebian" class="position-relative d-flex align-items-center group"> AppArmor (Ubuntu/Debian) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="apparmor-ubuntudebian" aria-haspopup="dialog" aria-label="Share link: AppArmor (Ubuntu/Debian)"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">cat > /etc/apparmor.d/usr.bin.geode << EOF #include <tunables/global> /usr/bin/geode { #include <abstractions/base> #include <abstractions/nameservice> # Binary /usr/bin/geode mr, # Configuration /etc/geode/ r, /etc/geode/** r, # Data directory /var/lib/geode/ rw, /var/lib/geode/** rwk, # Logs /var/log/geode/ rw, /var/log/geode/** rw, # TLS /etc/geode/*.crt r, /etc/geode/*.key r, # Network network inet dgram, network inet6 dgram, } EOF sudo apparmor_parser -r /etc/apparmor.d/usr.bin.geode </code></pre></div> <h3 id="tls-configuration" class="position-relative d-flex align-items-center group"> TLS Configuration <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="tls-configuration" aria-haspopup="dialog" aria-label="Share link: TLS Configuration"> Share link </button> </h3> <h4 id="generate-certificates" class="position-relative d-flex align-items-center group"> Generate Certificates <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="generate-certificates" aria-haspopup="dialog" aria-label="Share link: Generate Certificates"> Share link </button> </h4>Self-Signed (Development/Testing): <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Generate CA openssl genrsa -out ca.key 4096 openssl req -new -x509 -days 3650 -key ca.key -out ca.crt \ -subj "/CN=Geode CA/O=MyOrg" # Generate server certificate openssl genrsa -out server.key 4096 openssl req -new -key server.key -out server.csr \ -subj "/CN=geode.example.com/O=MyOrg" # Create SAN config cat > server.ext << EOF authorityKeyIdentifier=keyid,issuer basicConstraints=CA:FALSE keyUsage = digitalSignature, nonRepudiation, keyEncipherment extendedKeyUsage = serverAuth subjectAltName = @alt_names [alt_names] DNS.1 = geode.example.com DNS.2 = *.geode.example.com DNS.3 = localhost IP.1 = 127.0.0.1 EOF # Sign certificate openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \ -CAcreateserial -out server.crt -days 365 -extfile server.ext </code></pre></div>Let’s Encrypt (Production): <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Install certbot sudo apt install certbot # Obtain certificate sudo certbot certonly --standalone -d geode.example.com # Certificates stored at: # /etc/letsencrypt/live/geode.example.com/fullchain.pem # /etc/letsencrypt/live/geode.example.com/privkey.pem # Auto-renewal sudo systemctl enable certbot.timer </code></pre></div> <h4 id="tls-configuration-file" class="position-relative d-flex align-items-center group"> TLS Configuration File <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="tls-configuration-file" aria-haspopup="dialog" aria-label="Share link: TLS Configuration File"> Share link </button> </h4>Create <code>/etc/geode/geode.yaml</code>: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">server: listen: "0.0.0.0:3141" tls: enabled: true cert_file: "/etc/geode/server.crt" key_file: "/etc/geode/server.key" ca_file: "/etc/geode/ca.crt" # Optional: for client auth min_version: "1.3" client_auth: "optional" # none, optional, required security: # Require TLS for all connections require_tls: true # Reject plaintext connections allow_plaintext: false </code></pre></div> <h4 id="cipher-suites" class="position-relative d-flex align-items-center group"> Cipher Suites <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="cipher-suites" aria-haspopup="dialog" aria-label="Share link: Cipher Suites"> Share link </button> </h4>Geode uses TLS 1.3 which provides strong defaults. For compliance requirements: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">tls: cipher_suites: - "TLS_AES_256_GCM_SHA384" - "TLS_CHACHA20_POLY1305_SHA256" - "TLS_AES_128_GCM_SHA256" </code></pre></div> <h3 id="authentication-setup" class="position-relative d-flex align-items-center group"> Authentication Setup <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="authentication-setup" aria-haspopup="dialog" aria-label="Share link: Authentication Setup"> Share link </button> </h3> <h4 id="built-in-authentication" class="position-relative d-flex align-items-center group"> Built-in Authentication <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="built-in-authentication" aria-haspopup="dialog" aria-label="Share link: Built-in Authentication"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">auth: enabled: true type: "builtin" # Admin user (created on first start) admin: username: "admin" password_hash: "$argon2id$v=19$m=65536,t=3,p=4$..." # Use geode hash-password # Allow anonymous read-only access anonymous: enabled: false role: "reader" </code></pre></div> <h4 id="generate-password-hash" class="position-relative d-flex align-items-center group"> Generate Password Hash <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="generate-password-hash" aria-haspopup="dialog" aria-label="Share link: Generate Password Hash"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">geode hash-password Enter password: ******** Confirm password: ******** Hash: $argon2id$v=19$m=65536,t=3,p=4$randomsalt$hashedpassword </code></pre></div> <h4 id="ldap-authentication" class="position-relative d-flex align-items-center group"> LDAP Authentication <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="ldap-authentication" aria-haspopup="dialog" aria-label="Share link: LDAP Authentication"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">auth: enabled: true type: "ldap" ldap: url: "ldaps://ldap.example.com:636" base_dn: "dc=example,dc=com" bind_dn: "cn=geode,ou=services,dc=example,dc=com" bind_password_file: "/etc/geode/ldap-password" user_search: "(uid={username})" group_search: "(member={dn})" # Map LDAP groups to Geode roles group_mappings: - ldap_group: "cn=admins,ou=groups,dc=example,dc=com" geode_role: "admin" - ldap_group: "cn=developers,ou=groups,dc=example,dc=com" geode_role: "readwrite" - ldap_group: "cn=viewers,ou=groups,dc=example,dc=com" geode_role: "readonly" </code></pre></div> <h4 id="oauth2oidc-authentication" class="position-relative d-flex align-items-center group"> OAuth2/OIDC Authentication <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="oauth2oidc-authentication" aria-haspopup="dialog" aria-label="Share link: OAuth2/OIDC Authentication"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">auth: enabled: true type: "oidc" oidc: issuer: "https://auth.example.com" client_id: "geode-server" client_secret_file: "/etc/geode/oidc-secret" # Claims mapping username_claim: "preferred_username" roles_claim: "groups" # Role mappings role_mappings: - claim_value: "geode-admins" geode_role: "admin" - claim_value: "geode-users" geode_role: "readwrite" </code></pre></div> <h4 id="role-based-access-control" class="position-relative d-flex align-items-center group"> Role-Based Access Control <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="role-based-access-control" aria-haspopup="dialog" aria-label="Share link: Role-Based Access Control"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">roles: admin: permissions: - "*" # All permissions readwrite: permissions: - "read:*" - "write:*" - "schema:read" readonly: permissions: - "read:*" - "schema:read" restricted: permissions: - "read:public/*" deny: - "read:private/*" </code></pre></div> <h3 id="network-configuration" class="position-relative d-flex align-items-center group"> Network Configuration <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="network-configuration" aria-haspopup="dialog" aria-label="Share link: Network Configuration"> Share link </button> </h3> <h4 id="bind-address" class="position-relative d-flex align-items-center group"> Bind Address <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="bind-address" aria-haspopup="dialog" aria-label="Share link: Bind Address"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">server: # Listen on all interfaces listen: "0.0.0.0:3141" # Or specific interface listen: "192.168.1.10:3141" # IPv6 listen: "[::]:3141" # Multiple listeners listeners: - address: "0.0.0.0:3141" tls: true - address: "127.0.0.1:3142" tls: false # Local only, no TLS </code></pre></div> <h4 id="connection-limits" class="position-relative d-flex align-items-center group"> Connection Limits <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="connection-limits" aria-haspopup="dialog" aria-label="Share link: Connection Limits"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">server: max_connections: 10000 connection_timeout: 30s idle_timeout: 300s # Per-client limits per_client: max_connections: 100 rate_limit: 1000 # Requests per second </code></pre></div> <h4 id="quic-settings" class="position-relative d-flex align-items-center group"> QUIC Settings <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="quic-settings" aria-haspopup="dialog" aria-label="Share link: QUIC Settings"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">quic: # Maximum concurrent streams per connection max_streams: 100 # Initial congestion window initial_window: 14720 # Maximum receive buffer max_recv_buffer: 16777216 # Keep-alive interval keep_alive: 15s # ACK delay max_ack_delay: 25ms </code></pre></div> <h3 id="docker-production-deployment" class="position-relative d-flex align-items-center group"> Docker Production Deployment <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="docker-production-deployment" aria-haspopup="dialog" aria-label="Share link: Docker Production Deployment"> Share link </button> </h3> <h4 id="production-dockerfile" class="position-relative d-flex align-items-center group"> Production Dockerfile <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="production-dockerfile" aria-haspopup="dialog" aria-label="Share link: Production Dockerfile"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-dockerfile" data-lang="dockerfile">FROM alpine:3.19 AS base # Install dependencies RUN apk add --no-cache \ ca-certificates \ tzdata # Create non-root user RUN addgroup -g 1000 geode && \ adduser -u 1000 -G geode -s /bin/sh -D geode FROM base AS runtime # Copy binary COPY --chown=geode:geode geode /usr/local/bin/geode # Create directories RUN mkdir -p /var/lib/geode /var/log/geode /etc/geode && \ chown -R geode:geode /var/lib/geode /var/log/geode /etc/geode # Set permissions RUN chmod 700 /var/lib/geode /etc/geode && \ chmod 750 /var/log/geode USER geode EXPOSE 3141/udp VOLUME ["/var/lib/geode", "/etc/geode"] HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \ CMD geode ping localhost:3141 || exit 1 ENTRYPOINT ["/usr/local/bin/geode"] CMD ["serve", "--config", "/etc/geode/geode.yaml"] </code></pre></div> <h4 id="docker-compose-production" class="position-relative d-flex align-items-center group"> Docker Compose (Production) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="docker-compose-production" aria-haspopup="dialog" aria-label="Share link: Docker Compose (Production)"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">version: '3.8' services: geode: image: geodedb/geode:0.2.18 container_name: geode-prod restart: unless-stopped user: "1000:1000" ports: - "3141:3141/udp" volumes: - geode-data:/var/lib/geode - geode-logs:/var/log/geode - ./config/geode.yaml:/etc/geode/geode.yaml:ro - ./certs:/etc/geode/certs:ro environment: - GEODE_LOG_LEVEL=info - GEODE_LOG_FORMAT=json - TZ=UTC deploy: resources: limits: cpus: '8' memory: 32G reservations: cpus: '4' memory: 16G healthcheck: test: ["CMD", "geode", "ping", "localhost:3141"] interval: 30s timeout: 5s retries: 3 start_period: 10s logging: driver: "json-file" options: max-size: "100m" max-file: "10" security_opt: - no-new-privileges:true read_only: true tmpfs: - /tmp:size=100M,mode=1777 volumes: geode-data: driver: local geode-logs: driver: local </code></pre></div> <h4 id="docker-swarm-deployment" class="position-relative d-flex align-items-center group"> Docker Swarm Deployment <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="docker-swarm-deployment" aria-haspopup="dialog" aria-label="Share link: Docker Swarm Deployment"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">version: '3.8' services: geode: image: geodedb/geode:0.2.18 deploy: replicas: 3 placement: constraints: - node.role == worker - node.labels.storage == ssd preferences: - spread: node.availability.zone resources: limits: cpus: '8' memory: 32G reservations: cpus: '4' memory: 16G update_config: parallelism: 1 delay: 60s failure_action: rollback monitor: 30s rollback_config: parallelism: 1 delay: 30s restart_policy: condition: on-failure delay: 10s max_attempts: 3 window: 120s networks: - geode-internal - geode-external configs: - source: geode-config target: /etc/geode/geode.yaml secrets: - source: geode-tls-cert target: /etc/geode/server.crt - source: geode-tls-key target: /etc/geode/server.key mode: 0400 configs: geode-config: file: ./config/geode.yaml secrets: geode-tls-cert: file: ./certs/server.crt geode-tls-key: file: ./certs/server.key networks: geode-internal: driver: overlay internal: true geode-external: driver: overlay </code></pre></div> <h3 id="kubernetes-deployment" class="position-relative d-flex align-items-center group"> Kubernetes Deployment <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="kubernetes-deployment" aria-haspopup="dialog" aria-label="Share link: Kubernetes Deployment"> Share link </button> </h3> <h4 id="namespace-and-rbac" class="position-relative d-flex align-items-center group"> Namespace and RBAC <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="namespace-and-rbac" aria-haspopup="dialog" aria-label="Share link: Namespace and RBAC"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">apiVersion: v1 kind: Namespace metadata: name: geode labels: app.kubernetes.io/name: geode --- apiVersion: v1 kind: ServiceAccount metadata: name: geode namespace: geode --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: geode namespace: geode rules: - apiGroups: [""] resources: ["configmaps", "secrets"] verbs: ["get", "watch", "list"] - apiGroups: [""] resources: ["pods"] verbs: ["get", "list"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: geode namespace: geode roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: geode subjects: - kind: ServiceAccount name: geode namespace: geode </code></pre></div> <h4 id="configmap-and-secrets" class="position-relative d-flex align-items-center group"> ConfigMap and Secrets <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="configmap-and-secrets" aria-haspopup="dialog" aria-label="Share link: ConfigMap and Secrets"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">apiVersion: v1 kind: ConfigMap metadata: name: geode-config namespace: geode data: geode.yaml: | server: listen: "0.0.0.0:3141" storage: data_dir: "/var/lib/geode" wal_dir: "/var/lib/geode/wal" logging: level: info format: json tls: enabled: true cert_file: "/etc/geode/certs/tls.crt" key_file: "/etc/geode/certs/tls.key" --- apiVersion: v1 kind: Secret metadata: name: geode-tls namespace: geode type: kubernetes.io/tls data: tls.crt: <base64-encoded-cert> tls.key: <base64-encoded-key> </code></pre></div> <h4 id="statefulset" class="position-relative d-flex align-items-center group"> StatefulSet <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="statefulset" aria-haspopup="dialog" aria-label="Share link: StatefulSet"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">apiVersion: apps/v1 kind: StatefulSet metadata: name: geode namespace: geode spec: serviceName: geode replicas: 3 podManagementPolicy: Parallel selector: matchLabels: app: geode template: metadata: labels: app: geode annotations: prometheus.io/scrape: "true" prometheus.io/port: "9090" prometheus.io/path: "/metrics" spec: serviceAccountName: geode terminationGracePeriodSeconds: 60 securityContext: runAsUser: 1000 runAsGroup: 1000 fsGroup: 1000 runAsNonRoot: true affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchLabels: app: geode topologyKey: kubernetes.io/hostname nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: node-type operator: In values: - database containers: - name: geode image: geodedb/geode:0.2.18 imagePullPolicy: IfNotPresent command: - /usr/local/bin/geode - serve - --config=/etc/geode/geode.yaml ports: - name: quic containerPort: 3141 protocol: UDP - name: metrics containerPort: 9090 protocol: TCP resources: requests: cpu: "4" memory: "16Gi" limits: cpu: "8" memory: "32Gi" securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true capabilities: drop: - ALL volumeMounts: - name: data mountPath: /var/lib/geode - name: config mountPath: /etc/geode/geode.yaml subPath: geode.yaml readOnly: true - name: tls mountPath: /etc/geode/certs readOnly: true - name: tmp mountPath: /tmp livenessProbe: exec: command: - geode - ping - localhost:3141 initialDelaySeconds: 30 periodSeconds: 10 timeoutSeconds: 5 failureThreshold: 3 readinessProbe: exec: command: - geode - ping - localhost:3141 initialDelaySeconds: 10 periodSeconds: 5 timeoutSeconds: 3 failureThreshold: 3 startupProbe: exec: command: - geode - ping - localhost:3141 initialDelaySeconds: 10 periodSeconds: 10 timeoutSeconds: 5 failureThreshold: 30 volumes: - name: config configMap: name: geode-config - name: tls secret: secretName: geode-tls - name: tmp emptyDir: sizeLimit: 100Mi volumeClaimTemplates: - metadata: name: data spec: accessModes: ["ReadWriteOnce"] storageClassName: fast-ssd resources: requests: storage: 100Gi </code></pre></div> <h4 id="services" class="position-relative d-flex align-items-center group"> Services <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="services" aria-haspopup="dialog" aria-label="Share link: Services"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">apiVersion: v1 kind: Service metadata: name: geode namespace: geode spec: type: ClusterIP clusterIP: None # Headless for StatefulSet ports: - name: quic port: 3141 protocol: UDP targetPort: 3141 selector: app: geode --- apiVersion: v1 kind: Service metadata: name: geode-lb namespace: geode annotations: service.beta.kubernetes.io/aws-load-balancer-type: nlb spec: type: LoadBalancer ports: - name: quic port: 3141 protocol: UDP targetPort: 3141 selector: app: geode </code></pre></div> <h4 id="horizontal-pod-autoscaler" class="position-relative d-flex align-items-center group"> Horizontal Pod Autoscaler <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="horizontal-pod-autoscaler" aria-haspopup="dialog" aria-label="Share link: Horizontal Pod Autoscaler"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">apiVersion: autoscaling/v2 kind: HorizontalPodAutoscaler metadata: name: geode namespace: geode spec: scaleTargetRef: apiVersion: apps/v1 kind: StatefulSet name: geode minReplicas: 3 maxReplicas: 10 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 70 - type: Resource resource: name: memory target: type: Utilization averageUtilization: 80 behavior: scaleUp: stabilizationWindowSeconds: 300 policies: - type: Pods value: 2 periodSeconds: 60 scaleDown: stabilizationWindowSeconds: 600 policies: - type: Pods value: 1 periodSeconds: 120 </code></pre></div> <h4 id="pod-disruption-budget" class="position-relative d-flex align-items-center group"> Pod Disruption Budget <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="pod-disruption-budget" aria-haspopup="dialog" aria-label="Share link: Pod Disruption Budget"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">apiVersion: policy/v1 kind: PodDisruptionBudget metadata: name: geode namespace: geode spec: minAvailable: 2 selector: matchLabels: app: geode </code></pre></div> <h3 id="health-checks-and-readiness-probes" class="position-relative d-flex align-items-center group"> Health Checks and Readiness Probes <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="health-checks-and-readiness-probes" aria-haspopup="dialog" aria-label="Share link: Health Checks and Readiness Probes"> Share link </button> </h3> <h4 id="health-check-endpoints" class="position-relative d-flex align-items-center group"> Health Check Endpoints <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="health-check-endpoints" aria-haspopup="dialog" aria-label="Share link: Health Check Endpoints"> Share link </button> </h4>Geode exposes health check endpoints: <table> <thead> <tr> <th>Endpoint</th> <th>Protocol</th> <th>Purpose</th> </tr> </thead> <tbody> <tr> <td><code>PING</code></td> <td>QUIC</td> <td>Connection health</td> </tr> <tr> <td><code>/health</code></td> <td>HTTP</td> <td>Overall health</td> </tr> <tr> <td><code>/ready</code></td> <td>HTTP</td> <td>Readiness status</td> </tr> <tr> <td><code>/live</code></td> <td>HTTP</td> <td>Liveness status</td> </tr> </tbody> </table> <h4 id="health-check-script" class="position-relative d-flex align-items-center group"> Health Check Script <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="health-check-script" aria-haspopup="dialog" aria-label="Share link: Health Check Script"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">#!/bin/bash # /usr/local/bin/geode-health set -e # Check QUIC connection if ! geode ping localhost:3141 --timeout 5s; then echo "QUIC health check failed" exit 1 fi # Check disk space (>10% free) DATA_DIR="/var/lib/geode" FREE_PERCENT=$(df "$DATA_DIR" | tail -1 | awk '{print 100 - $5}' | tr -d '%') if [ "$FREE_PERCENT" -lt 10 ]; then echo "Disk space low: ${FREE_PERCENT}% free" exit 1 fi # Check memory usage (<90%) MEM_PERCENT=$(free | grep Mem | awk '{print int($3/$2 * 100)}') if [ "$MEM_PERCENT" -gt 90 ]; then echo "Memory usage high: ${MEM_PERCENT}%" exit 1 fi echo "OK" exit 0 </code></pre></div> <h4 id="kubernetes-probes" class="position-relative d-flex align-items-center group"> Kubernetes Probes <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="kubernetes-probes" aria-haspopup="dialog" aria-label="Share link: Kubernetes Probes"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">livenessProbe: exec: command: - /usr/local/bin/geode-health initialDelaySeconds: 30 periodSeconds: 10 timeoutSeconds: 10 failureThreshold: 3 readinessProbe: exec: command: - geode - ping - localhost:3141 initialDelaySeconds: 5 periodSeconds: 5 timeoutSeconds: 5 failureThreshold: 3 startupProbe: exec: command: - geode - ping - localhost:3141 initialDelaySeconds: 10 periodSeconds: 10 timeoutSeconds: 5 failureThreshold: 30 # 5 minutes total startup time </code></pre></div> <h3 id="logging-configuration" class="position-relative d-flex align-items-center group"> Logging Configuration <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="logging-configuration" aria-haspopup="dialog" aria-label="Share link: Logging Configuration"> Share link </button> </h3> <h4 id="log-levels" class="position-relative d-flex align-items-center group"> Log Levels <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="log-levels" aria-haspopup="dialog" aria-label="Share link: Log Levels"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">logging: level: info # debug, info, warn, error # Per-component levels components: server: info storage: warn query: info replication: debug </code></pre></div> <h4 id="log-format" class="position-relative d-flex align-items-center group"> Log Format <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="log-format" aria-haspopup="dialog" aria-label="Share link: Log Format"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">logging: format: json # text, json # JSON format fields json: timestamp_field: "@timestamp" level_field: "level" message_field: "message" # Include additional fields fields: service: "geode" environment: "production" version: "0.2.18" </code></pre></div> <h4 id="log-output" class="position-relative d-flex align-items-center group"> Log Output <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="log-output" aria-haspopup="dialog" aria-label="Share link: Log Output"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">logging: output: # Console output - type: console level: info # File output with rotation - type: file path: /var/log/geode/geode.log level: debug max_size: 100MB max_backups: 10 max_age: 30 # days compress: true # Syslog output - type: syslog address: "localhost:514" facility: local0 level: warn </code></pre></div> <h4 id="log-aggregation" class="position-relative d-flex align-items-center group"> Log Aggregation <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="log-aggregation" aria-haspopup="dialog" aria-label="Share link: Log Aggregation"> Share link </button> </h4>Fluentd Configuration: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"><source> @type tail path /var/log/geode/geode.log pos_file /var/log/fluentd/geode.pos tag geode <parse> @type json time_key @timestamp time_format %Y-%m-%dT%H:%M:%S.%NZ </parse> </source> <filter geode> @type record_transformer <record> hostname "#{Socket.gethostname}" cluster "production" </record> </filter> <match geode> @type elasticsearch host elasticsearch.example.com port 9200 index_name geode-logs type_name _doc </match> </code></pre></div>Filebeat Configuration: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">filebeat.inputs: - type: log enabled: true paths: - /var/log/geode/*.log json: keys_under_root: true add_error_key: true fields: service: geode environment: production output.elasticsearch: hosts: ["elasticsearch.example.com:9200"] index: "geode-logs-%{+yyyy.MM.dd}" </code></pre></div> <h3 id="systemd-service" class="position-relative d-flex align-items-center group"> Systemd Service <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="systemd-service" aria-haspopup="dialog" aria-label="Share link: Systemd Service"> Share link </button> </h3><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-ini" data-lang="ini">[Unit] Description=Geode Graph Database Documentation=https://geodedb.com/docs After=network-online.target Wants=network-online.target [Service] Type=simple User=geode Group=geode ExecStart=/usr/local/bin/geode serve --config /etc/geode/geode.yaml ExecReload=/bin/kill -HUP $MAINPID Restart=on-failure RestartSec=10 StartLimitInterval=60 StartLimitBurst=3 # Security NoNewPrivileges=yes PrivateTmp=yes ProtectSystem=strict ProtectHome=yes ReadWritePaths=/var/lib/geode /var/log/geode CapabilityBoundingSet=CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_BIND_SERVICE # Resource limits LimitNOFILE=65535 LimitNPROC=65535 LimitMEMLOCK=infinity # Logging StandardOutput=journal StandardError=journal SyslogIdentifier=geode [Install] WantedBy=multi-user.target </code></pre></div>Enable and start: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">sudo systemctl daemon-reload sudo systemctl enable geode sudo systemctl start geode sudo systemctl status geode </code></pre></div> <h3 id="pre-production-checklist" class="position-relative d-flex align-items-center group"> Pre-Production Checklist <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="pre-production-checklist" aria-haspopup="dialog" aria-label="Share link: Pre-Production Checklist"> Share link </button> </h3> <h4 id="security" class="position-relative d-flex align-items-center group"> Security <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="security" aria-haspopup="dialog" aria-label="Share link: Security"> Share link </button> </h4><ul> <li><input disabled="" type="checkbox"> TLS enabled with valid certificates</li> <li><input disabled="" type="checkbox"> Authentication configured</li> <li><input disabled="" type="checkbox"> RBAC policies defined</li> <li><input disabled="" type="checkbox"> Firewall rules configured</li> <li><input disabled="" type="checkbox"> Security scanning completed</li> <li><input disabled="" type="checkbox"> Secrets stored securely (Vault, K8s secrets)</li> </ul> <h4 id="performance" class="position-relative d-flex align-items-center group"> Performance <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="performance" aria-haspopup="dialog" aria-label="Share link: Performance"> Share link </button> </h4><ul> <li><input disabled="" type="checkbox"> Hardware meets requirements</li> <li><input disabled="" type="checkbox"> OS tuning applied</li> <li><input disabled="" type="checkbox"> Storage is SSD/NVMe</li> <li><input disabled="" type="checkbox"> Memory limits configured</li> <li><input disabled="" type="checkbox"> Connection limits set</li> </ul> <h4 id="reliability" class="position-relative d-flex align-items-center group"> Reliability <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="reliability" aria-haspopup="dialog" aria-label="Share link: Reliability"> Share link </button> </h4><ul> <li><input disabled="" type="checkbox"> Health checks configured</li> <li><input disabled="" type="checkbox"> Backup strategy implemented</li> <li><input disabled="" type="checkbox"> Disaster recovery plan documented</li> <li><input disabled="" type="checkbox"> Monitoring and alerting set up</li> <li><input disabled="" type="checkbox"> Log aggregation configured</li> </ul> <h4 id="operations" class="position-relative d-flex align-items-center group"> Operations <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="operations" aria-haspopup="dialog" aria-label="Share link: Operations"> Share link </button> </h4><ul> <li><input disabled="" type="checkbox"> Runbooks documented</li> <li><input disabled="" type="checkbox"> On-call rotation established</li> <li><input disabled="" type="checkbox"> Escalation paths defined</li> <li><input disabled="" type="checkbox"> Rollback procedures tested</li> </ul> <h3 id="troubleshooting" class="position-relative d-flex align-items-center group"> Troubleshooting <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="troubleshooting" aria-haspopup="dialog" aria-label="Share link: Troubleshooting"> Share link </button> </h3> <h4 id="connection-issues" class="position-relative d-flex align-items-center group"> Connection Issues <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="connection-issues" aria-haspopup="dialog" aria-label="Share link: Connection Issues"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Check if Geode is listening ss -ulnp | grep 3141 # Test QUIC connectivity geode ping geode.example.com:3141 --verbose # Check TLS certificate openssl s_client -connect geode.example.com:3141 -servername geode.example.com </code></pre></div> <h4 id="performance-issues" class="position-relative d-flex align-items-center group"> Performance Issues <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="performance-issues" aria-haspopup="dialog" aria-label="Share link: Performance Issues"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Check resource usage top -p $(pgrep geode) # Check disk I/O iostat -xz 1 # Check network iftop -i eth0 # Query performance geode shell -c "PROFILE MATCH (n) RETURN count(n)" </code></pre></div> <h4 id="memory-issues" class="position-relative d-flex align-items-center group"> Memory Issues <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="memory-issues" aria-haspopup="dialog" aria-label="Share link: Memory Issues"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Check memory usage free -h # Check Geode memory geode stats memory # Force garbage collection (if supported) kill -USR1 $(pgrep geode) </code></pre></div> <h3 id="next-steps" class="position-relative d-flex align-items-center group"> Next Steps <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="next-steps" aria-haspopup="dialog" aria-label="Share link: Next Steps"> Share link </button> </h3><ul> <li><a href="/guides/high-availability/" >High Availability Guide</a> - Set up HA clusters</li> <li><a href="/guides/monitoring/" >Monitoring Guide</a> - Configure monitoring and alerting</li> <li><a href="/guides/backup-restore/" >Backup and Restore</a> - Protect your data</li> <li><a href="/docs/performance/" >Performance Tuning</a> - Optimize query performance</li> </ul> <hr> Questions? Contact us at <a href="mailto:[email protected]" >[email protected]</a> or visit our <a href="https://forum.geodedb.com" aria-label="community forum – opens in new window" target="_blank" rel="noopener noreferrer" >community forum ↗ </a> .

Related Guides

Deployment and Integration Guide

Audit Logging and Compliance