Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
This fully managed ClickHouse solution delivers a production-ready, columnar analytical database on AWS, built on Ubuntu 24.04 LTS. Every instance is pre-configured with security best practices, performance optimizations, and automated operations.
Key Features
Automated Setup and Configuration
On first login, an interactive setup script configures ClickHouse with secure access, optimized storage settings, and firewall rules - all within minutes.
Built-in Backup and Recovery
Pre-configured daily backups with 7-day retention. One-command restore for fast recovery. Export to S3 for additional resilience.
Security Hardened
User authentication enabled, UFW firewall pre-configured to allow only SSH (22) and ClickHouse (8123/9000) from trusted sources, and latest security patches applied.
Performance Optimized
MergeTree storage engine, compression settings, and memory limits tuned for the selected instance type. Sub-second queries on large datasets out of the box.
Use Cases
Real-time analytics dashboards and business intelligence
Log analysis and observability data storage
Ad-tech click stream analysis and attribution
IoT telemetry data aggregation and reporting
Financial data analysis and risk modeling
Product analytics and user behavior tracking
Getting Started
Launch the AMI from AWS Marketplace on your preferred instance type
SSH into your instance and follow the interactive setup wizard
Your ClickHouse server is production-ready with backups and tuning configured automatically
Support
Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
High-Performance Columnar Database: ClickHouse delivers sub-second query performance on billions of rows with full root access to configure MergeTree engines and materialized views.
Automated Daily Backups with 7-Day Retention: Pre-configured backups with auto-purge and one-command restore. Export to S3 for additional resilience.
24/7 Expert Support by Perimattic: 13+ years of cloud infrastructure expertise with free setup assistance, query optimization guidance, and dedicated support at aws-support@perimattic.com.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
You pay by the hour based on the AWS instance size you run. The eight options fall into three instance families. The t2 family gives you medium, large, and xlarge sizes. The t3 family gives you the same three sizes. The m5 family gives you large and xlarge sizes. Within each family, larger sizes carry more compute and memory, so the hourly rate rises with capacity. You are billed only for the hours each instance runs. Every option is fully managed, covering provisioning, monitoring, backups, updates, and security patches.
Top-of-mind questions for buyers
What resources do the t2, t3, and m5 instance sizes give me for ClickHouse?
Each option maps to an AWS EC2 instance type running your ClickHouse database. The t2 and t3 families offer burstable compute for variable workloads. The m5 family offers steady general-purpose compute for consistent workloads. Larger sizes within a family add more CPU and memory.
Am I charged when my ClickHouse instance is stopped or idle?
You pay the software rate per hour only while the instance runs. Fully stopped instances do not accrue hourly software charges. Underlying AWS storage fees may still apply while an instance is stopped, but the metered software rate counts running time only.
What does the hourly rate include beyond the raw compute instance?
The rate covers a fully managed ClickHouse database. This includes provisioning, pre-configured monitoring dashboards, daily automated backups, one-click updates, and automatic security patches. Firewall rules, TLS encryption, and role-based access control come with each deployment. You do not manage the servers yourself.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Automated ClickHouse Deployment:
Fully preconfigured ClickHouse environment using Docker Compose, featuring ClickHouse Server and Tabix Web Client for seamless analytical query management and data exploration.
Guided First-Boot Setup:
Interactive initialization script automates domain mapping, admin email setup, password generation, and DNS validation with real-time user prompts and error handling.
Automated SSL/TLS Provisioning:
Integrated with Let's Encrypt and Certbot for automatic SSL certificate issuance, ensuring secure HTTPS access to ClickHouse and Tabix via Apache reverse proxy.
Secure Configuration Management:
Environment variables stored in a centralized .env file manage domain details, admin credentials, and passwords, enabling consistent and secure deployments.
Optimized Container Architecture:
Docker Compose-based configuration orchestrates ClickHouse and Tabix containers for improved performance, data persistence, and simplified updates.
Apache Virtual Host Automation:
Automatically generates Apache virtual hosts for both HTTP and HTTPS, dynamically replacing placeholders with user-specified domain information during setup.
Custom Domain & DNS Verification:
Validates DNS mapping before SSL issuance, ensuring that the provided domain correctly resolves to the instance's IP address for reliable and secure configuration.
Built-in Web Client (Tabix):
Includes a fully configured Tabix Web UI for querying and managing ClickHouse directly from a browser with Basic Authentication protection.
Failsafe Setup & Recovery:
Intelligent failsafe script (failsafe.sh) ensures that all initialization steps execute reliably, automatically retrying any failed steps and recovering from interruptions.
Production-Ready Analytical Database:
Tuned for high-performance OLAP workloads and real-time analytics, this AMI enables instant deployment of a secure, web-accessible ClickHouse server within minutes.
Additional details
Usage instructions
Launch an Instance
From AWS Marketplace, click Continue to Subscribe and then Continue to Configuration.
Choose the Recommended Instance Type
Select t2.medium or larger for optimal performance and stability.
Configure Security Group
Allow inbound traffic on the following ports:
22 (SSH) - for secure terminal access
80 (HTTP) - for initial domain verification and SSL setup
443 (HTTPS) - for secure access to ClickHouse and Tabix Web UI
28123 - ClickHouse HTTP port (optional external access)
28124 - Tabix Web UI port (optional direct access)
Connect to the Instance
ssh -i <your-key.pem> ubuntu@<public-ip>
First-Boot Setup
On first launch, the initialization scripts automatically perform the following actions:
Detect your public IP address
Prompt you to enter a custom domain for ClickHouse access
Validate your DNS A record to ensure it resolves to your instance
Prompt for an admin email (used for SSL and notifications)
Automatically generate or accept a ClickHouse root password
Configure Apache virtual hosts and prepare for SSL provisioning
Configure DNS (if using a custom domain)
Add an A record in your DNS provider pointing your domain (e.g., example.com) to the instance's public IP.
The setup automatically checks DNS propagation using multiple resolvers before continuing.
Automatic SSL Setup
Once DNS validation is complete, Certbot issues and installs a Let's Encrypt SSL certificate for your domain.
Apache is automatically configured to serve ClickHouse and Tabix securely over HTTPS.
Start ClickHouse
The ClickHouse and Tabix containers are automatically started using Docker Compose.
To manually verify or restart the containers, run:
cd /opt/app
docker compose ps
docker compose restart
Access ClickHouse and Tabix
Access securely via https://<your-domain>
The Tabix interface allows direct querying and management of your ClickHouse instance.
Login Credentials
Default credentials are stored in the environment file located at:
cat /opt/app/.env
Username: root
Password: (stored securely in .env as SOFTWARE_PASSWORD)
Environment File
All configuration details - domain, admin email, credentials, and SSL status - are stored in:
/opt/app/.env
This file is automatically created and updated during the first boot.
Thank you for subscribing. Your instance is ready to go!
Need Support or Customization?
Whether you're facing setup issues or need custom features, Perimattic's expert team is here to help:
We offer:
Free setup assistance
Custom development & integrations
Infrastructure consulting
Automation & AI solutions
With 13+ years of experience serving global clients, we ensure your deployment runs smoothly and scales with your needs.
What We Help With:
Initial setup and configuration assistance (free)
Troubleshooting connectivity, performance, and backup issues
Custom development and integrations
Infrastructure consulting and architecture review
Migration planning from other solutions
Automation solutions and scaling guidance
Instance Sizing Guidance:
t2.medium or t3.medium: Development environments, small applications
m5.large: Production workloads with moderate traffic
m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues:
If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Production-ready Apache Superset with full root access, security hardening, and automated setup - a modern open-source alternative to Tableau and QuickSight for data visualization on AWS.
Production-ready Apache Superset with full root access, security hardening, and automated setup - a modern open-source alternative to Tableau and QuickSight for data visualization on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.