How Magento Open Source uses OpenSearch for catalog search
OpenSearch is the required catalog search engine for Magento Open Source, so a self-hosted store cannot run catalog search without it. The work is to run OpenSearch as a separate host that the storefront and admin reach over a secured connection, with TLS and authentication enabled before the first reindex. OpenSearch is released under the Apache License, Version 2.0, and it is a fork of open source Elasticsearch 7.10, so the software itself carries no license fee, but the hosting, patching and monitoring cost sits with your team or your partner. Adobe's system requirements for 2.4.8-p5 and 2.4.9 both list OpenSearch 3, so the search version you choose must match the Magento release you run. DeployOpen plans and builds this inside your own cloud accounts, data centers or air-gapped network.
Magento's indexers write catalog data to the search engine, and storefront search and layered navigation read from that index. If the index is stale, shoppers see outdated products, prices or filters even when the database is correct, so the search host is part of the catalog pipeline and not an optional add-on. Decide early how many OpenSearch clusters you need. Most teams keep separate clusters for production and staging so that test reindexes and bulk imports do not degrade the live storefront. Confirm with Adobe's system requirements page which exact OpenSearch 3 release is listed for your Magento line, because Adobe supports only the listed combinations and a version outside that list leaves you without vendor support for search problems.
The OpenSearch Security plugin provides TLS for node and client traffic, role-based access control, and authentication backends including SAML, OpenID Connect, Active Directory and LDAP, Kerberos and JSON Web Token. For Magento, create a dedicated service user with a role limited to the indices the store needs, rather than reusing an administrative account. Confirm with Adobe's Magento documentation which TLS and credential settings the search configuration accepts, because the certificate trust chain and the username and password in the Magento configuration must match what the OpenSearch server enforces. Also decide who owns certificate issuance and rotation, since an expired certificate will stop catalog search without a code change to the store.
What you need in place before the OpenSearch build starts
The search host is the part of this build most likely to need lead time, because it depends on network, certificate and access decisions owned by other teams. The cards below cover the Magento and OpenSearch versions and the decisions to settle before anyone installs a package or container. Confirm each version against Adobe's system requirements page for your target 2.4.x release.
Magento release line
Choose the 2.4.x release line first, since it sets every other version in the stack. Adobe's lifecycle policy gives each release three years of standard support, with end of regular support dates of May 31, 2027 for 2.4.7, May 31, 2028 for 2.4.8 and May 31, 2029 for 2.4.9. Check which line your store will run in production and what your patch cadence will be.
Platform component versions
For Magento 2.4.9, Adobe's system requirements list PHP 8.5, MySQL 8.4 or MariaDB 12.3 (recommended) or 11.8, Redis or Valkey 9, RabbitMQ 4.3, Composer 2.10 and nginx 1.30 on Linux x86-64. Adobe supports only the listed combinations, so a component version outside that list falls outside support. Confirm the exact versions for your target 2.4.x release before you order hosts or images.
OpenSearch 3 and install method
OpenSearch is Apache 2.0 licensed, and Adobe lists OpenSearch 3 for the 2.4.9 requirements. Choose one install method your team already operates, such as Docker, Helm, the OpenSearch Kubernetes Operator, tarball, RPM, Debian, Ansible or Windows, and write it into the build plan. Confirm the exact 3.x minor version with Adobe, since OpenSearch ships a new minor version about every eight weeks.
Network path to the search host
Magento reaches OpenSearch over the network, so the separate search host needs a defined path from the web and worker tier, with the OpenSearch listener open only to those sources. Plan DNS names, firewall rules and whether the cluster sits in the same network zone as the store, and document each rule for your change board. Test connectivity from every Magento node, including cron and queue consumer hosts, before the build starts.
Certificate authority choice
The OpenSearch Security plugin provides TLS for node and client traffic, so every Magento host must trust the certificate chain the search host presents. Decide whether certificates come from an internal CA your organization already runs, a managed CA, or a private chain distributed to your hosts, and who issues, renews and revokes them. Agree on how trust stores are updated on web, cron and consumer hosts, and set a renewal reminder before the first certificate expires.
Service account and role plan
Magento should connect with a dedicated OpenSearch user limited to the index permissions it needs. OpenSearch Security offers role-based access control, document-level and field-level security and audit logs, so map roles, index patterns and audit requirements before the build. Choose an authentication backend such as LDAP, SAML or OpenID Connect for the people who administer the cluster, and record who owns credential rotation.
How to configure OpenSearch for Magento in sequence
This sequence takes a Magento Open Source store from a compatibility check to a fully indexed catalog served by a dedicated, TLS-protected OpenSearch cluster. Each step closes with a check you can record in your change log. Confirm admin paths and CLI commands against Adobe's current configuration documentation before you run them.
Confirm the Magento release and OpenSearch version
Start by recording the exact Magento Open Source release and patch level you run or plan to run. Adobe's system requirements for 2.4.9 and for 2.4.8-p5 both list OpenSearch 3, but confirm the listed version for your exact release on the requirements page before you order or install anything. Adobe supports only the listed combinations, so record the full stack next to the search engine. Done when a signed compatibility note in your change record names the Magento release, the OpenSearch major version and the page you checked.
Install OpenSearch on a dedicated host
Your infrastructure team installs OpenSearch on a host reserved for search, separate from the Magento web, database and cache tiers. OpenSearch documents installation through tarball, RPM, Debian packages, Docker, Helm, the Kubernetes operator and an Ansible playbook, so choose the method your operations team already patches and monitors. Set the node name, data path and memory settings according to the install guide, and run the service under its own account. Done when a health request to the cluster returns a status you can explain. Expect yellow on a single node when replica shards have no second node to occupy.
Enable TLS for node and client traffic
Enable TLS for transport between OpenSearch nodes and for client connections from Magento, using certificates issued by your internal certificate authority. The OpenSearch Security plugin provides TLS for both traffic types, so configure both before you open the port to the Magento tier. Keep private keys readable only by the service account, and record certificate expiry dates in your renewal calendar. Done when an HTTPS request validates against your CA certificate and a plain HTTP request to the same port is refused.
Set up authentication and a least-privilege Magento user
Choose an authentication backend that matches your identity estate. The OpenSearch Security plugin supports SAML, OpenID Connect, Active Directory and LDAP, Kerberos and JSON Web Token, so pick the one your identity team can operate and audit. Remove any default administrative credentials from use, then create a role that grants only the index permissions Magento needs under its prefix, with no cluster administration rights. Map a dedicated Magento service identity to that role. Done when that identity can read and write its own indices and receives a permission denial when it calls cluster settings or security APIs.
Set the search engine connection and index prefix
In the Magento admin, open the catalog search configuration and select OpenSearch as the search engine. Enter the host, port, scheme, timeout and the credentials for the Magento service identity, then set an index prefix that identifies this installation. If several stores share one cluster, give each installation a distinct prefix so their indices stay separate. Confirm the admin path against Adobe's configuration guide before you change it. Done when the connection test in the admin reports success. Check the prefix again in step 6, when the indices are created.
Run a full reindex and read the logs
Run a full reindex from the command line on the Magento host, then clear caches as Adobe's guide directs. Check the indexer status to confirm each search-related indexer reports a ready state. Read the reindex output and the Magento system log for errors, then run a test search on the storefront for a product you know exists. Confirm the commands for your release against Adobe's documentation before the run, and schedule it for a maintenance window. Done when every indexer reports ready, the logs show no search engine errors and the test search returns the expected product.
Which Magento and OpenSearch settings must match
This table maps each Magento Open Source search setting to the OpenSearch object it depends on, shows how the value differs across development, staging and production, and names the owner. Read each row as a pair: if the Magento value drifts from the OpenSearch object, connections fail or results come from the wrong index. Confirm the OpenSearch version against Adobe's system requirements for your Magento 2.4.x line before you begin.
| Setting | What it must match | How it differs by environment | Who owns it |
|---|---|---|---|
| OpenSearch version | OpenSearch 3 is listed for 2.4.9 and 2.4.8-p5 in Adobe's system requirements; Adobe supports only listed combinations | Staging should run the same major version as production; confirm any minor build differences | Platform engineering |
| Host and port | The Magento search host must resolve to the OpenSearch endpoint, and the port must be reachable from every web node | Each environment has its own endpoint; a production host copied into staging sends test traffic to live search | Network or platform team |
| Scheme and TLS certificate hostname | HTTP or HTTPS must match the cluster setting, and the certificate name must match the host Magento connects to | Production uses verified HTTPS; development may use a lab certificate that web nodes trust explicitly | Security engineering |
| Username and password | Credentials must belong to an OpenSearch internal user mapped to the role Magento needs | Separate credentials per environment; never reuse production secrets in staging or development | Search administrator and secrets owner |
| OpenSearch role | The role must grant the cluster and index permissions Magento uses for indexing and search queries | Role names can match across environments, but permissions should cover only that environment's indices | OpenSearch security administrator |
| Index prefix | The prefix in Magento's search settings forms every index name, so it must match what the role allows | Use a distinct prefix per environment so staging cannot write into production indices | Magento administrator with search administrator |
| Index pattern in the role | The pattern must cover the full prefix Magento writes, or indexing fails with permission errors | Set per environment, following the prefix chosen for that environment | Search administrator |
| Store view scope | Search settings can be overridden per store view, which can point one store at a different engine or prefix | Check every store view in each environment, especially after a new store view is added | Store owner and Magento administrator |
| Reindex after changes | After changing host, prefix or scope, a full reindex must run so storefront results come from the new index | Each environment is reindexed separately; copied staging data does not replace a reindex | Magento operations team |
How index prefixes and reindexing keep several stores apart
Give every Magento store view group and every environment its own index prefix before the first reindex runs. When production, staging and a regional store share one OpenSearch cluster, identical index names mean a reindex started in staging can overwrite the catalog that production serves. Keep a written register that maps each Magento installation to its prefix, its OpenSearch host and its owner, and check it during every environment change. Confirm in the Catalog Search configuration of your Magento version which prefix field applies, and confirm the index names it produces, because a mismatch between the setting and the index names is a common cause of empty search results after a cutover.
A shared cluster also needs access boundaries. The OpenSearch Security plugin provides role-based access control and index-level permissions, so you can create one role per Magento environment that allows index operations only on that environment's prefix pattern, and one user for that role. Grant only the cluster and index actions the Magento connection needs, and confirm that list against Adobe's documentation for your 2.4.x line instead of copying a role from another project. Then test the boundary: the staging user should fail when it targets a production index. Enable audit logging so that a denied or unexpected request leaves a record your security team can review.
A full reindex is needed when the index itself changes. In practice that covers a new search engine or OpenSearch host, a new prefix (the new indices start empty), changes to analyzer-related settings that alter how terms are tokenized, and broad catalog structure changes such as restructured attribute sets or category trees that affect what gets indexed. Partial indexing is usually enough for routine product edits, stock or price changes, and single category updates, which the indexers process incrementally under the update mode you configured. Run the full rebuild with bin/magento indexer:reindex for the catalog search indexer, and plan the cutover so the old indices keep serving traffic until the new ones are complete and counted.
Reindex triggers depend on the Magento version, so confirm the exact list with Adobe's indexer documentation for the 2.4.x release you run before you write a runbook. Check how each indexer behaves in Update on Save and Update by Schedule modes, because the same catalog change can be partial in one mode and require a rebuild in another. Ask your implementation partner to deliver a reindex runbook that covers the trigger list, the prefix register, the role tests and the cutover checks, including document counts per store view. Test that runbook on a copy of production before the first live change, and record how long the full rebuild took so the next change window is planned from evidence.
How to lock down the OpenSearch link from Magento
The connection between Magento and OpenSearch carries catalog data and indexing traffic, so it needs encryption, identity checks and network limits. The six areas below cover what your team decides and what it should verify before the search host serves a storefront.
Encrypt node and client traffic
The OpenSearch Security plugin provides TLS for node and client traffic, so both the transport between cluster nodes and the HTTP connection from Magento can be encrypted. Confirm which certificates your team issues, who holds the private keys and how renewal is scheduled before the first Magento connection is configured. Check that every node uses the same approach so no hop falls back to plaintext.
Verify certificates in Magento
Encryption only protects the link if Magento checks the identity of the server it connects to. Confirm that the Magento search configuration trusts the internal certificate authority that signed the OpenSearch certificate, and that the host name in the certificate matches the name Magento uses. Test the connection from a web node with the production settings, because a test from an administrator workstation can pass while the web tier fails.
Choose the authentication backend
The Security plugin supports SAML, OpenID Connect, Active Directory and LDAP, Kerberos and JSON Web Token authentication backends. Pick the one that matches how your organization already manages identities, and confirm that the service account Magento uses can authenticate through it without interactive steps. Record who may change the backend, since a change affects every client, including the indexing jobs that run from cron.
Scope the Magento service account
Role-based access control lets you grant the Magento service account only the cluster and index permissions that indexing and search need. Create a dedicated role for Magento and avoid reusing an administrator account, then test the role against the index prefix used by each store. Document-level and field-level security exist, but for a public catalog they usually add little, so the decision depends on whether the index holds anything beyond product data.
Keep the search host private
Network rules should allow only the Magento web nodes to reach the OpenSearch port, and the search host should sit on a private network with no public address. Confirm that administration hosts, cron runners and queue consumers have a documented path, because they also reach the index. Review firewall rules after every change to the web tier, since new or replaced nodes can add sources that nobody reviewed.
Enable and review audit logs
The Security plugin provides audit logs that record activity on the cluster, including activity by the Magento service account. Decide what to log, where the logs are stored, who can read them and how long they are kept before go-live. Ask your team to trigger a test event, such as a failed login from a web node, and confirm that it reaches the people who watch the logs.
How to test catalog search before go-live
Test catalog search as a set of separate checks, because a store can pass one and still fail another. Start with connectivity and TLS. From every Magento web node, confirm that the application reaches the OpenSearch host on the configured port, that the certificate chain validates, and that the configured credentials are accepted. Run the same checks from the node that runs cron and message queue consumers, since indexing often happens there. Record the OpenSearch version the host reports and confirm it matches the OpenSearch version listed for your Magento 2.4.x line in Adobe's system requirements. If any node fails here, fix it before going further, because later results will not mean much.
Next, run a full reindex on a copy of the production catalog with production-scale product counts, attributes, categories and store views. Run bin/magento indexer:reindex and check bin/magento indexer:status before and after the run. Look for indexers left in an invalid state and compare the reindex duration with your maintenance window. If several stores share one OpenSearch host, confirm that each store's index is built under its own index prefix and that no store reads another store's index. Keep the console output, the indexer status and the timings as evidence. Repeat the reindex after a cache flush to confirm the result is stable.
Storefront search needs a written list of representative queries for each store view. Include common product names, misspellings shoppers are likely to type, SKU lookups, category terms and queries that should return no results. Agree the expected product sets with the merchandising team before testing, then compare actual results against them. Check that autocomplete and faceted filters draw from the same index as the results page. In the Magento admin, test the product grid keyword search and the global search, since these use the search path differently from the storefront. Edit a product in admin and confirm the change appears in storefront search after the indexing mode you chose has run.
If the OpenSearch deployment is clustered, stop one node in a controlled window and confirm that Magento keeps returning results. Then restart the node, confirm the cluster recovers, and check that indexing resumes without manual steps. Also test the case where the whole search host is unreachable: observe storefront behavior, the error entries written to Magento logs, and whether your alerting fires. Rollback needs a written path back to the previous search engine setting in Magento. Record the previous host, port, index prefix and credential reference in the change plan, set a clear decision point for rollback, and keep the previous index available until sign-off. Rehearse the switch back in the copy environment before go-live.
The evidence set for the client's change or compliance file should include the Magento and OpenSearch versions tested, the search configuration with secrets removed, TLS check output from each web node, reindex logs and indexer status, the query test table with dates and testers, failover and rollback results, and named approvals. This record shows what was tested and what was observed. It does not establish any certification or audit outcome on its own. Confirm with your internal or external auditor which artifacts they expect, in what format, and how long they must be retained.
Why Magento cannot reach or query OpenSearch
This table lists the failures that most often stop Magento from reaching or querying OpenSearch, with the likely cause and fix for each. Check the OpenSearch cluster logs and the Magento system logs first, since they usually name the failing layer. Work through the rows in order, because a network or TLS fault hides the problems below it.
| Symptom | Likely cause | Fix |
|---|---|---|
| TLS handshake or hostname verification error | The certificate does not list the host name in the Magento search connection settings, or the issuing CA is missing from the trust chain that PHP uses. | Reissue the node certificate with the exact host name in its subject alternative names, then install the full CA chain on every web and CLI host. |
| 401 or 403 response for the Magento user | The Magento search user is missing, its password changed, or its role lacks index and cluster permissions in the OpenSearch Security configuration. | Confirm the user and role mapping in the Security plugin, then update the credentials Magento stores and clear the configuration cache. |
| Errors after an OpenSearch upgrade or change | The OpenSearch major version is not in the combination Adobe lists for your Magento 2.4.x release, such as OpenSearch 3 for 2.4.8-p5 and 2.4.9. | Check the Adobe system requirements for your exact Magento release and align the OpenSearch version, or plan a Magento patch or upgrade first. |
| Storefront search returns nothing or fails after a store change | The index prefix in Magento no longer matches the indices in the cluster, often after a store or instance was cloned or renamed. | Compare the configured index prefix with the index names in the cluster, correct the setting, then run a full reindex. |
| Search results are empty or stale after a catalog import | Indices were not rebuilt after the import, or the indexers are set to update on schedule and have not run yet. | Check indexer status in the admin, run a full reindex from the command line, then confirm document counts per index in the cluster. |
| Search works in one store view but not another | The store view is not assigned to the expected website and root category, or its index has not been built for that store. | Verify the store view scope for the search engine settings and root category, then reindex the affected indexers and test the store view directly. |
| Connection timeouts from web or cron hosts only | A host firewall, security group, or proxy blocks traffic to the OpenSearch port from some Magento nodes, often consumer or cron hosts. | Test connectivity from every Magento node to the cluster port, then open the rule or proxy bypass for those source addresses only. |
How catalog size, query volume and reindex windows drive sizing
The main sizing question for a Magento Open Source store is how much index the cluster must hold and how fast it must answer, and both depend on the catalog and the traffic profile rather than on the store's product count alone. Start by counting what the indexer will write. Every product, its attributes that are searchable, filterable or sortable, and every store view that receives its own copy of the catalog all add documents and fields to the OpenSearch index. A catalog with many configurable children, many store views and a wide attribute set produces far more indexed data than a single-view store with the same number of parent products. Ask your architect to inventory product count per store view, the number of attributes marked for search or layered navigation, and the number of store views, because these three figures set the index footprint before any load is applied.
Several store views or separate storefronts sharing one cluster change the arithmetic in a different way. Each Magento index prefix and store view adds its own indices, so the cluster carries more shards and more mapping metadata even when each individual catalog is modest. Shard count and replica count then decide how that data spreads across nodes and how much work each node performs per query. Shard and replica layout is a design decision you should make on a test copy, not one to inherit from a default. Confirm with your Magento and OpenSearch administrators how the prefix setting is configured for each environment and whether any store views will be retired, merged or added during the first two years, since adding views later can force a reindex and a layout review.
Query volume is the second driver. Storefront search, category listing pages that use the search engine for filtering, autocomplete and any API traffic from mobile apps or partners all add query load, and their peaks often come from campaigns rather than steady browsing. Ask for the peak queries per second your business expects, the share that comes from storefront versus API clients, and the cache hit rate you plan to rely on at the web tier, because these decide how much CPU, heap and disk each data node needs. Heap sizing should follow the OpenSearch guidance on Java heap, which keeps heap well below total node memory so the operating system can cache index files. Disk sizing must include headroom for growth, merges and the temporary space a reindex needs while the new index is built beside the old one.
Reindex duration is the constraint most teams underestimate. A full reindex rebuilds every index for the affected store views, and the time it takes depends on catalog size, the number of indexed attributes, indexer configuration, the Magento worker and cron setup, and the cluster's ability to absorb bulk writes while still serving live search. If the full reindex cannot finish inside your agreed maintenance window at the peak catalog size you expect, you need either a faster reindex path, a smaller reindex scope, or a larger cluster. Measure this on a copy of production data with a realistic product count, and record the duration of each indexer, not only the total. Do not treat any duration from another store as a guide for yours.
DeployOpen does not supply sizing figures for this page, so the numbers for your cluster must come from a sizing exercise on a copy of your catalog and load profile, run by DeployOpen or by your own architect. Ask for the exercise to report index size per store view, shard and replica layout, heap and disk per node, measured reindex duration per indexer, and the query latency under your peak load. Use the OpenSearch cluster-sizing guidance as the starting reference for the method, and state your assumptions in writing so the results can be repeated when the catalog grows.
Questions teams ask before hiring help with OpenSearch for Magento
What drives the cost and effort of an OpenSearch integration for Magento?
Scope drives most of the cost and effort: how many store views and websites share the search index, how large the catalog is, and how many languages and currencies the search must handle. The hosting model matters as well, because a dedicated OpenSearch host in your cloud, data center or air-gapped network needs its own provisioning, patching and monitoring. Security requirements add work for TLS, authentication, role mapping and audit logging. Testing depth, including functional checks, relevance review, load tests and reindex timing, changes the hours. Recurring costs include the infrastructure you run and the patch work that follows each Magento and OpenSearch release. Ask for a quote that lists each item separately, states who pays for infrastructure and who does the configuration, and shows what is one-time and what is ongoing.
Can our own team build the Magento OpenSearch integration without a partner?
Yes, a team with solid Magento and OpenSearch administration skills can build this alone. Adobe's documentation covers the Magento side, and OpenSearch's installation and security documentation covers the search cluster. The work is mostly configuration: a separate search host, TLS and authentication, index setup for each store, and reindexing after catalog or configuration changes. The skills gap is usually in tuning and in testing search relevance under real traffic. Check that your Magento release and OpenSearch version appear together in Adobe's system requirements, because Adobe supports only the listed combinations. Teams without an in-house search engineer often bring in help for the first build and then run the platform themselves. A written scope makes that handover explicit.
What does our team need to provide for an OpenSearch project?
Expect to provide access to the environment where the OpenSearch host will run, including network paths from the Magento web tier and permission to install and firewall the service. You will also need certificates, or a process to issue them, for TLS. A representative test catalog with realistic product counts and attributes is required, along with a staging store that matches production closely enough to test meaningfully. Name one owner for search, who makes decisions about relevance and reindexing, and one owner for security, who approves authentication, roles and audit settings. Access to Magento admin and cron logs helps during troubleshooting. Confirm these items in the written scope before work starts, because access delays often push back the rest of the plan.
How long does a Magento OpenSearch integration take to complete?
Duration depends on the scope, so no single timeline applies to every store. A single-store catalog on existing infrastructure will take less time than several store views with separate indexes, a large catalog, a new hosting environment and a formal security review. Durations should follow a written scope, so ask for a plan that lists phases such as environment preparation, configuration, reindex testing, load testing and cutover. Each phase should name an owner and state which dependencies, such as your access and approvals, it relies on. Ask which parts of the plan are fixed and which depend on your decisions, such as how many stores will share the search host.
Does OpenSearch licensing add cost to a Magento store?
No, the OpenSearch software itself does not add a licensing fee. All software in the OpenSearch project is released under the Apache License, Version 2.0, and the OpenSearch FAQ does not describe any paid edition. Your costs are the infrastructure that runs the cluster, the staff or partner time to configure and operate it, and any hosting charges from your cloud or data center provider. Magento Open Source is a separate licensing question. Its source files are licensed under OSL-3.0, with AFL 3.0 also included in the distribution. Ask your legal or procurement team to review any third-party extension you add, because its terms are not covered by OpenSearch's license.
Will DeployOpen support our search setup after go-live?
Yes, ongoing support is available as a retainer under a written scope. A retainer can cover monitoring and patching of the search host, reindexing after catalog or configuration changes, version upgrades and troubleshooting. Adobe recommends upgrading every patch cycle to stay secure and PCI compliant, so plan for that recurring work. OpenSearch targets a new minor version about every eight weeks, and each version is maintained for a limited period, so the retainer should state which versions and which types of change it covers. Ask for response expectations in writing and confirm them in the scope before you sign.
Which OpenSearch version should we run with our Magento release?
Use the OpenSearch version that Adobe lists for your Magento release line. Adobe's system requirements for 2.4.9 list OpenSearch 3, and the requirements for 2.4.8-p5 also list OpenSearch 3. Adobe supports only the combinations it lists, so check the exact patch level you run against the current requirements before you choose a version. OpenSearch 3.9.0 was released on September 29, 2026, and newer minor versions follow about every eight weeks. Choose a version that stays in maintenance for the period you plan to run it, and record the choice and its upgrade path in the written plan.
How DeployOpen scopes, builds and supports the OpenSearch integration
DeployOpen plans and builds Magento Open Source and OpenSearch search integrations inside infrastructure you control, including the cloud accounts, data centers or air-gapped networks your team already runs. Engagements are fixed-scope, with deliverables and timelines agreed in writing before work starts, and ongoing support is available as a retainer.
How we scope
- Confirm the Magento Open Source 2.4.x release line and the PHP, MySQL or MariaDB, OpenSearch and related versions it requires.
- Map store views and languages to index prefixes, so each store's catalog data stays separate on one OpenSearch host.
- Record catalog size, product attribute count and reindex frequency to set the sizing inputs the written scope will cover.
How we build
- Deploy OpenSearch on a separate host with TLS for node and client traffic and authentication enforced before Magento connects.
- Configure Magento's search engine settings, index prefixes and credentials, then test search relevance and autocomplete on a staging store.
- Run full reindexing and test incremental reindexing after product, attribute and category changes, recording timings and errors.
How we hand over
- Deliver the written configuration record: host layout, TLS and authentication settings, index prefixes and version pins.
- Document the reindex runbook, including which changes trigger a full rebuild and how to recover from a failed index.
- Walk through the test results and sizing assumptions with your platform and store teams before the engagement closes.
How we support
- Agree in the scope which OpenSearch and Magento patch releases are covered, and who applies them and when.
- Plan search engine checks into each Magento patch cycle, since Adobe recommends upgrading every patch cycle to stay secure.
- Offer a retainer for ongoing patching, monitoring of index health and re-sizing as the catalog grows.

