On this page
CockroachDB distributes a single binary that contains both core and Enterprise features. You can use core features without any license key. However, to use the Enterprise features, you need either a trial or an Enterprise license key.
This page lists Enterprise features. For information on how to obtain and set trial and Enterprise license keys for CockroachDB, see the Licensing FAQs.
|Multi-Region Capabilities||This feature gives you row-level control of how and where your data is stored to dramatically reduce read and write latencies and assist in meeting regulatory requirements in multi-region deployments.|
|Follower Reads||This feature reduces read latency in multi-region deployments by using the closest replica at the expense of reading slightly historical data.|
||This feature creates backups of your cluster's schema and data that are consistent as of a given timestamp, stored on a service such as AWS S3, Google Cloud Storage, NFS, or HTTP storage.
Incremental backups, backups with revision history, locality-aware backups, and encrypted backups require an Enterprise license. Full backups do not require an Enterprise license.
|Changefeeds into a Configurable Sink||This feature targets an allowlist of tables. For every change, it emits a record to a configurable sink, either Apache Kafka or a cloud-storage sink, for downstream processing such as reporting, caching, or full-text indexing.|
|Change Data Capture Queries||This feature allows you to define the change data emitted to your sink when you create a changefeed. You can use
|Node Map||This feature visualizes the geographical configuration of a cluster by plotting node localities on a world map.|
|Encryption at Rest||Supplementing CockroachDB's encryption in flight capabilities, this feature provides transparent encryption of a node's data on the local disk. It allows encryption of all files on disk using AES in counter mode, with all key sizes allowed.|
|GSSAPI with Kerberos Authentication||CockroachDB supports the Generic Security Services API (GSSAPI) with Kerberos authentication, which lets you use an external enterprise directory system that supports Kerberos, such as Active Directory.|
|Single Sign-on (SSO) for DB Console||This feature allows you to grant access to DB Console to identities managed in an external identity provider (IdP).|
|Cluster Single Sign-on (SSO)||This feature allows you to grant SQL access to CockroachDB Self-Hosted clusters to identities managed in an external IdP.|