Features

Updated at:
Copy as MD

ApsaraDB for Memcache runs on a distributed cluster architecture with layered security controls and managed operations tooling, letting teams focus on application development rather than cache infrastructure.

High availability

ApsaraDB for Memcache uses a distributed cluster architecture where each node runs on dual-server hot backup. If a physical server fails, the service performs automatic disaster recovery and automatic instance migration without manual intervention.

Multiple instance specifications are available to match different workload sizes. Scale up as demand grows to maintain database performance.

Data persistence and backup and recovery policies are supported, protecting backend databases from the impact of cache invalidation after a node failure.

Security

ApsaraDB for Memcache provides a multi-layer security model covering network-level threats, access control, network isolation, and authentication:

  • DDoS protection: Network traffic is monitored in real time. During high-volume attacks, source IP addresses are scrubbed. If scrubbing fails, the system redirects traffic to a black hole.

  • IP address whitelist: Up to 1,000 server IP addresses can be allowlisted per instance, restricting access at the source.

  • Virtual Private Cloud (VPC): Instances connect to an isolated VPC built on Alibaba Cloud.

  • Simple Authentication and Security Layer (SASL) authentication: SASL authenticates user identity to protect data access.

Operations and maintenance

ApsaraDB for Memcache includes built-in O&M tooling to reduce time spent managing the cache layer:

  • Monitoring and alerting: Track CPU utilization, input/output operations per second (IOPS), connections, and disk space. Alerts fire when any metric crosses its threshold.

  • Data management: A visual data management interface supports data operations with ease.

  • Managed source code and distributed maintenance: Alibaba Cloud kernel engineers maintain the Memcache source code and distributed algorithms, removing the need to patch or tune the underlying software.