Enterprise Features

CockroachDB distributes a single binary that contains both core and enterprise features. You can use core features without any license key. However, to use the enterprise features, you need either a trial or an enterprise license key.

This page lists enterprise features. For information on how to obtain and set trial and enterprise license keys for CockroachDB, see the Licensing FAQs.

Enterprise features

Feature Description
Multi-Region Capabilities This feature gives you row-level control of how and where your data is stored to dramatically reduce read and write latencies and assist in meeting regulatory requirements in multi-region deployments.
Follower Reads This feature reduces read latency in multi-region deployments by using the closest replica at the expense of reading slightly historical data.
BACKUP This feature creates backups of your cluster's schema and data that are consistent as of a given timestamp, stored on a service such as AWS S3, Google Cloud Storage, NFS, or HTTP storage.

Incremental backups, backups with revision history, locality-aware backups, and encrypted backups require an enterprise license. Full backups do not require an enterprise license.
Changefeeds into a Configurable Sink This feature targets an allowlist of tables. For every change, it emits a record to a configurable sink, either Apache Kafka or a cloud-storage sink, for downstream processing such as reporting, caching, or full-text indexing.
Node Map This feature visualizes the geographical configuration of a cluster by plotting node localities on a world map.
Encryption at Rest Supplementing CockroachDB's encryption in flight capabilities, this feature provides transparent encryption of a node's data on the local disk. It allows encryption of all files on disk using AES in counter mode, with all key sizes allowed.
GSSAPI with Kerberos Authentication CockroachDB supports the Generic Security Services API (GSSAPI) with Kerberos authentication, which lets you use an external enterprise directory system that supports Kerberos, such as Active Directory.
Single Sign-on (SSO) This feature lets you use an external identity provider for user access to the DB Console in a secure cluster.

See also

YesYes NoNo