Managing Databases

Stateless applications are easy to manage; stateful applications are where enterprise infrastructure becomes complicated.

Traditionally, companies are forced to choose between the high monthly costs of fully managed databases (like AWS RDS) or the immense operational overhead of managing bare-metal databases themselves.

RasnuOS brings the simplicity of managed RDS directly to your own servers.

Universal Database Support ("Any Stack")

Because RasnuOS operates at the foundational OS layer, it is not restricted to a hardcoded list of supported databases.

Whether you need a standard relational database, an in-memory cache, or a specialized vector database for AI workloads, the Agent can orchestrate it natively or via Docker Compose.

Examples of databases our users manage seamlessly today:

• Relational: PostgreSQL, MySQL, MariaDB, Oracle, SQL Server.
• NoSQL & Document: MongoDB, CouchDB, Cassandra.
• In-Memory & Queues: Redis, Memcached, RabbitMQ.
• Vector & AI: Milvus, Pinecone (Local), Qdrant.
• Time-Series: InfluxDB, TimescaleDB.

If it can run on Linux, Windows, or macOS, RasnuOS can orchestrate and secure it.

Native Orchestration

When you create a new Database through the RasnuOS dashboard, the Control Plane instructs the Agent to handle the entire lifecycle:

1. It safely installs the native database packages (or pulls the optimized Docker image).
2. It generates highly secure, randomized root passwords and immediately encrypts them in the RasnuOS Vault Transit Engine.
3. It writes the my.cnf or postgresql.conf files, optimizing the memory allocation based on the server's available RAM (e.g., automatically tuning innodb_buffer_pool_size).
4. It natively creates your databases and users without you ever needing to write a single line of SQL.

Security & Firewall Enforcement

Because the agent also controls the host OS firewall (UFW / iptables), RasnuOS enforces strict security by default:

• Port 3306 / 5432 is blocked by default. Your database is entirely isolated from the public internet.
• If an external application needs access, you can explicitly whitelist specific IP addresses through the RasnuOS UI. The Agent will dynamically update the kernel firewall rules to allow that incoming connection.