Overview
Service, version and loopback listener
The Hazelcast member running under systemd on the cloudimg image, reporting version 5.7.0 with its port 5701 listener bound to the loopback interface only.
Service, version and loopback listener
In-memory map round trip and join-secret auth
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
An In-Memory Data Grid, Ready on First Boot
Hazelcast is a distributed in-memory data grid and compute platform. It keeps data in RAM for memory-speed reads and writes, exposes distributed maps and other data structures, runs ANSI SQL over that in-memory data, and performs distributed compute - so applications get low-latency caching and fast data access without a disk round trip. This image delivers Hazelcast fully installed on OpenJDK 17 with a dedicated service account, a systemd unit, and a hardened member configuration, so you can run your first SQL query against an in-memory map within minutes of launch rather than spending hours on a manual install.
Who This Is For
Platform and application teams who need a self-hosted caching and data-grid layer inside their own VPC to accelerate an application, without operating a clustered install by hand. Developers who need a real, standards-compliant Hazelcast member to build and test distributed maps, SQL, and compute against, instead of mocking one. Data and integration teams who want an in-memory SQL surface over fast-changing data.
What Is Installed
- Hazelcast 5.7.0, the official open source slim distribution (the cleanly Apache-2.0-licensed core: the member, the SQL engine, and the hz and hz-cli command line tools)
- OpenJDK 17 (headless) as the runtime
- A dedicated unprivileged hazelcast service account and a systemd unit that starts the member on boot
- A first-boot service that rotates the cluster join secret and writes the credentials file before the member starts
Secure By Default - No Shared Credentials
Hazelcast community edition has no password or TLS authentication realm - those are Enterprise features. Unlike the upstream default which ships with the shared cluster name "dev" and no access control, this image uses the cluster name as a per-instance join secret and never ships a shared one:
- The member binds to the loopback interface only. Port 5701 is on 127.0.0.1 and is never opened in the security group; only port 22 is
- On every first boot a unique random cluster name is generated and written into the member configuration before the member starts
- A client must present the exact cluster name to connect; a client with any other cluster name, including the upstream default "dev", is rejected at connect time
- The join secret is written to a root-only file at /root/hazelcast-credentials.txt
- Automated checks assert both directions against the published image: the generated name is accepted and the default "dev" name is rejected
Network Model
The member listener on port 5701 is bound to the loopback interface only and is not exposed to the network. This is a deliberate default: an in-memory grid with no built-in authentication should never be reachable from the internet. Reach the member from your workstation with an SSH tunnel, or rebind it to a private interface behind your own security group when you are ready. The included user guide covers both approaches with step-by-step instructions. Because community edition is purely in-memory, persistence is not enabled and a fresh boot always starts an empty grid.
Getting Started
- Launch the image on an m5.large instance or larger, with port 22 open to your management network
- Connect over SSH as the default login user for your variant (listed in the user guide)
- Retrieve the generated cluster join secret with sudo cat /root/hazelcast-credentials.txt
- Open a local SQL session with hz-cli using that cluster name and create an in-memory map
- Insert and select a row to confirm the grid is answering
- Open an SSH tunnel to reach the member from a Hazelcast client on your workstation
- Point your application's Hazelcast client at the tunnel, using the cluster name as the join secret
24/7 cloudimg Support
Every deployment is backed by cloudimg engineers available around the clock by email and live chat. Support covers deployment and sizing guidance, member and JVM heap tuning, cluster-name and join configuration, rebinding the member to a private interface, SSH tunnel and client connectivity, SQL and distributed-map usage, and Hazelcast upgrades and troubleshooting. Critical issues receive a one-hour average response time.
Evaluation
This image uses standard AWS pay-as-you-go infrastructure billing. Launch an instance to evaluate Hazelcast against your own data and application, and terminate at any time.
Hazelcast is a trademark of Hazelcast, Inc. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.
Highlights
- Deploy in minutes, not hours: Hazelcast 5.7 arrives fully installed from the official open source slim distribution on OpenJDK 17, with a dedicated service account and a systemd unit that starts the member on boot. Skip the manual cluster installation and run your first SQL query against an in-memory map with hz-cli within minutes of launch - compared to the hours typically required to install, configure, and harden a Hazelcast member by hand.
- Automatically secured where upstream ships open: Community edition has no password or TLS realm, and the upstream default ships with the shared cluster name "dev" and no access control. This image eliminates that risk - a unique random cluster name is generated on every first boot, the member binds to loopback only (port 5701 never exposed), and only port 22 is opened.
- 24/7 Hazelcast-experienced engineers, not generic cloud support: cloudimg engineers with hands-on Hazelcast operational experience are available around the clock by email and live chat, with a one-hour average response for critical issues. Support scope covers deployment sizing, JVM heap tuning, cluster-name and join configuration, rebinding to a private interface, SSH tunnel and client connectivity, SQL and distributed-map usage, and Hazelcast upgrades.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Description | Cost/hour |
|---|---|---|
m5.large Recommended | m5.large | $0.08 |
t2.micro | t2.micro instance type | $0.04 |
t3.micro | t3.micro instance type | $0.04 |
t3.large | t3.large instance type | $0.08 |
r5ad.12xlarge | r5ad.12xlarge instance type | $0.24 |
r8ib.8xlarge | r8ib.8xlarge instance type | $0.24 |
r6id.large | r6id.large instance type | $0.08 |
r8ib.large | r8ib.large instance type | $0.08 |
m8ib.32xlarge | m8ib.32xlarge instance type | $0.24 |
r5b.8xlarge | r5b.8xlarge instance type | $0.24 |
Vendor refund policy
Refunds available on request.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release of Hazelcast 5.7.0, the open source in-memory data grid and distributed compute platform.
Additional details
Usage instructions
Connect over SSH on port 22 as the default login user for your operating system variant (the user guide lists it per variant; on Ubuntu it is 'ubuntu'). Retrieve the generated cluster join secret with: sudo cat /root/hazelcast-credentials.txt. The member listener is 127.0.0.1:5701, bound to loopback only and NOT reachable from the network (only port 22 is opened). On the instance, open a SQL session with the cluster name from the credentials file: /opt/hazelcast/bin/hz-cli sql -t '<cluster-name>@127.0.0.1:5701'. Then create an in-memory map and query it: CREATE MAPPING demo TYPE IMap OPTIONS ('keyFormat'='int','valueFormat'='varchar'); SINK INTO demo VALUES (1, 'hello'); SELECT this FROM demo WHERE __key = 1;. To reach the member from a Hazelcast client on your workstation, open an SSH tunnel: ssh -L 5701:127.0.0.1:5701 <login-user>@<instance-public-ip>, then point the client at 127.0.0.1:5701 using the cluster name as the join secret. The service is managed with systemctl (hazelcast). Do not expose port 5701 to the internet - community edition has no built-in authentication or TLS.
Resources
Vendor resources
Support
Vendor support
cloudimg provides 24/7 technical support for this product by email and live chat.
Support Channels:
- Email: support@cloudimg.co.uk
- Live chat: available around the clock
Response Times:
- Critical issues: one-hour average response time
Scope of Support: Our engineers assist with deployment and sizing guidance, member and JVM heap tuning, cluster-name and join-secret configuration, rebinding the member to a private interface, SSH tunnel and Hazelcast client connectivity, SQL and distributed-map usage, and Hazelcast upgrades, JVM tuning and general troubleshooting.
Billing and Refunds: Subscription billing and refunds are handled through AWS Marketplace. For any product issue, contact support@cloudimg.co.uk and our engineers will work with you on a resolution.
All support interactions are handled directly by cloudimg engineers with hands-on Hazelcast operational experience.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.