ClickHouse deployment and infrastructure

Installing and running self-managed ClickHouse on Kubernetes, containers, Linux packages and restricted networks, and sizing and tuning the servers underneath it.

Deploying ClickHouse with the official Kubernetes operator

Running ClickHouse and Keeper on Kubernetes with the ClickHouse Operator: installing with Helm, kubectl or OLM, ClickHouseCluster and KeeperCluster resources, storage classes, TLS with cert-manager, and the maturity of a 0.0.x release.

Running ClickHouse in Docker for production

Moving from a quick-start container to a production ClickHouse container: persistent volumes for data and logs, config.d and users.d mounts, ulimits, network ports, and upgrading by image tag.

Installing ClickHouse from deb and rpm packages

Installing ClickHouse server and client on Debian, Ubuntu and rpm-based distributions from the official repositories: pinning versions, signing keys, config.d layout, and service management.

Installing ClickHouse in an air-gapped network

Getting ClickHouse into networks with no internet access: mirroring tgz archives or packages, verifying downloads, keeping an internal repository current for monthly releases, and patching without outbound access.

Linux server tuning for ClickHouse

The operating system settings ClickHouse expects: CPU governor, transparent huge pages, memory overcommit, swap, kernel versions, and hypervisor CPU passthrough on OpenStack or libvirt virtual machines.

ClickHouse hardware sizing for self-managed clusters

Estimating CPU, memory, disk and replica counts for a self-hosted ClickHouse cluster from concurrency, throughput, data volume and retention, with the vendor's published ratios and example production configurations.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.