geode | PlusOne

Rich Bowen speaks with Jinwoo Hwang about Apache Geode, the distributed in-memory data management platform that delivers low-latency, scalable data access for high-performance applications. In a rare story of open source revival, Jinwoo describes how Geode — originally born as GemFire in 2002 and donated to the ASF in 2015 — declined into inactivity by 2023 and was voted for retirement, only to be brought back to life with a major 2.0 release in December 2025. They discuss the massive modernization effort required (Java 21, Spring Framework 6, Jakarta EE), the personal cost of that work, and what’s next for the project’s security and stability roadmap.

Prefer video? That’s on our YouTube channel

More about Apache Geode at https://geode.apache.org/

Implementing Security in Apache Geode Using Apache Shiro – Jinmei Liao

Apache Geode (incubating) is a distributed in-memory data grid built for high throughput low latency applications. Data stored in a Gode cluster can be accessed by Geode clients (which talk to the server over TCP) and over REST api. One can also manage the Geode cluster over JMX and rest api.

Although you could secure the transport using ssl, role based access control existed only for clients over TCP. In the latest release of Apache Geode, we now have role based access control for all Geode APIs, and we used Apache Shiro for our implementation. In this talk we will provide details on how this was accomplished and present our ÛÏlessons learnedÛ.

More about this session

PlusOne

Telling the ASF's Stories

Apache Geode, with Jinwoo Hwang

ApacheCon Seville 2016 – Implementing Security in Apache Geode Using Apache Shiro – Jinmei Liao