codenotary/immudb
Immudb
immudb is a tamperproof database that maintains an immutable record of entries using cryptographic commit logging. It ensures verifiable database integrity by utilizing Merkle trees to generate membership and consistency proofs that detect unauthorized data alterations.
The system employs a multi-model storage engine that unifies key-value, document, and relational data structures within a single immutable backend. It provides compatibility with the PostgreSQL wire protocol, allowing it to integrate with standard SQL clients, ORMs, and database tools.
The project covers broad capabilities including high availability through synchronous node replication, historical temporal queries for data versioning, and cloud storage integration for persisting logs to object stores. It also includes security features such as mutual TLS authentication, granular user access control, and structured JSON audit logging for tamper detection.
The system is distributed as a lightweight container image for standardized deployment and administration.
Features
- Tamperproof Records - Maintains a tamperproof record of entries using cryptographic commit logging to ensure a verifiable history of all changes.
- Merkle-Tree Data Integrity - Employs Merkle trees to generate cryptographic membership and consistency proofs that verify data integrity.
- Append-Only Storage Engines - Uses an append-only storage engine to maintain a verifiable and permanent history of all data changes.
- Historical Data Querying Interfaces - Enables retrieval of previous data versions by querying specific transaction IDs or temporal ranges.
- Document Storage Managers - Provides storage and retrieval of document-based data featuring dynamic field management and collection-level auditing.
- Data Replication - Distributes data across a cluster of nodes in real-time to ensure high availability and consistent state.
- Relational - Implements a relational storage model allowing structured data retrieval using SQL, including complex joins and window functions.
- Database Replication - Ensures high availability and data redundancy through synchronous node replication across a distributed cluster.
- Cryptographic Commit Logs - Maintains an immutable record of data using a cryptographic commit log to ensure a verifiable history.
- Multi-Model Databases - Unifies key-value, document, and relational data structures within a single immutable storage engine.
- PostgreSQL-Compatible Databases - Implements the PostgreSQL wire protocol to allow integration with standard SQL clients, ORMs, and database tools.
- Key-Value - Manages a tamperproof store of key-value pairs with support for atomic batch operations and sorted sets.
- Storage Immutability - Maintains a tamperproof record of entries to ensure a verifiable history of all changes.
- Immutable Logs - Records every system operation in a tamperproof, append-only store to create a verifiable activity trail.
- Backup and Recovery - Enables the creation of offline database state backups and restoration for disaster recovery.
- Database State Differencing - Allows identifying inserted, updated, or deleted rows between two points in time using difference queries.
- PostgreSQL Protocol Compatibility - Implements a PostgreSQL-compatible wire protocol to allow connectivity with standard SQL clients and ORMs.
- Database Access Controls - Manages granular permissions and roles to restrict user access to specific databases or operations.
- Mutual TLS Authentication - Protects client-server communication using mutual TLS certificate exchange and token-based authentication.
- SQL Verification Interfaces - Allows querying the cryptographic proof system via SQL to validate that data has not been tampered with.
- Audit Logs - Provides a verifiable activity trail by recording every operation as a structured JSON event in a tamper-proof store.
- Cryptographic Audit Trails - Employs a dedicated agent and immutable audit trails to detect and notify of data tampering.
- Server Activity Logs - Records server operations as structured JSON events in a tamper-proof store for immutable history tracking.
- Database Engines - Lightweight, high-speed immutable database.
- Database Systems - Listed in the “Database Systems” section of the Awesome Go awesome list.
- Baze de date - Database with built-in cryptographic proof and verification.
