Product updates
Get the latest updates on features, fixes and improvements.
848 results
Dec 12, 2025
- Improved
- Aiven for Apache Kafka®
Aiven for Apache Kafka® upgraded to 4.1
Aiven for Apache Kafka® has been upgraded to version 4.1.1. This update includes various improvements and bug fixes, enhancing the overall performance, security, and reliability of your clusters.
For details, see Apache Kafka® 4.1.0 and 4.1.1 release notes:
- Kafka 4.1.0 release notes
- Kafka 4.1.1 release notesDec 12, 2025
- Security
- Aiven for Apache Kafka®
Enforce allowed URLs for SASL OAUTHBEARER authentication
Aiven for Apache Kafka now enforces an allowed list of URLs for SASL OAUTHBEARER authentication to address CVE-2025-27817.
By default, the value from
sasl_oauthbearer_jwks_endpoint_urlis added automatically to the allowed list. You can explicitly allow additional URLs by settingsasl_oauthbearer_allowed_urls.URLs that are not included in either
sasl_oauthbearer_allowed_urlsorsasl_oauthbearer_jwks_endpoint_urlare now blocked for SASL OAUTHBEARER authentication.Although Apache Kafka Connect and Apache Kafka MirrorMaker 2 do not officially support SASL OAUTHBEARER, this change prevents unsupported configurations from bypassing security controls.
For more information, see:sasl_oauthbearer_allowed_urlsconfiguration reference: Advanced parameters for Aiven for Apache Kafka®- CVE-2025-27817: NVD - CVE-2025-27817
Dec 11, 2025
- New
- Aiven Terraform provider
Aiven Provider for Terraform version 4.48.0 now available
This version of the Aiven Terraform Provider adds write-only password support to service user resources, including
aiven_kafka_user,aiven_mysql_user,aiven_opensearch_user,aiven_pg_user, andaiven_valkey_user. You can now manage passwords for these service users securely without storing them in your state file by using the newpassword_woandpassword_wo_versionfields.Additionally, a new
aiven_organization_user_group_member_listdata source has been added. It lists all members of a specific user group, making group and permission management easier.This release also includes regular updates to service configurations, integrations, and endpoints. For more details on fixes and updates, view the complete Aiven Provider for Terraform changelog.
Dec 10, 2025
Aiven for Apache Kafka Free Tier now available
Aiven for Apache Kafka Free Tier now available
A free tier is now available for Aiven for Apache Kafka. No credit card is required.
Use it for learning, prototyping, small-scale development, and workloads that fit within the free tier limits.Key features
- Managed Kafka cluster with Karapace Schema Registry and REST Proxy
- Throughput limits of up to 125 KiB/s for produce traffic and 125 KiB/s for consume traffic
- Up to 5 topics, each with two partitions
- Sample data generation and basic monitoring
- One free Kafka service per organization
Limitations
- Free tier services are automatically powered off during extended periods of inactivity and can be reactivated at any time.
- Kafka Connect, MirrorMaker 2, service integrations, and tiered storage are not available.
- Data retention is fixed, and no SLA coverage is included.
You can upgrade to a paid plan at any time to remove limits and enable additional features. To learn more, see the Kafka free tier documentation.
Dec 5, 2025
- New
- Aiven for Valkey™
Aiven for Valkey™ clustering: out now in limited availability
We are excited to announce the launch of Aiven for Valkey™ clustering in limited availability. This managed solution provides scalable, distributed in-memory data storage with built-in high availability.
Aiven for Valkey clustering automatically partitions your data across multiple nodes (shards), enabling you to handle larger datasets and higher traffic loads than a single-node deployment.
Key benefits:
- High availability: Automatic failover, minimal downtime, and replica promotion to maintain service continuity during unexpected failures or maintenance.
- Scalability & performance: Distribute read and write operations across multiple shards for significantly higher throughput, lower latency, and better load distribution.
- Compatibility: Fully compatible with existing Valkey cluster-aware client libraries for seamless integration with current applications.
- Flexible sizing: Supports various instance sizes, including smaller 4 GB RAM instances, allowing for better cost optimization.
Learn more in the Aiven for Valkey™ clustering documentation.
Dec 5, 2025
Aiven for PostgreSQL® reads failover to primary
Aiven for PostgreSQL® now supports automatic failover for read-only workloads. When all standby nodes are unavailable, read traffic routed to the HA replica DNS endpoint is automatically redirected to the healthy primary node, ensuring uninterrupted access and minimizing downtime.
Key highlights:
- Seamless failover for read-only queries when standbys are unavailable
- No application-side routing changes required
- Single, stable connection endpoint for read traffic
- Easy enable/disable via Console, CLI, API, Terraform, or Kubernetes
This is a limited availability feature. To learn more, see the feature documentation.
Dec 4, 2025
- Improved
- Aiven for Apache Kafka®
Support public CA for SASL authentication in Aiven for Apache Kafka
You can now configure Aiven for Apache Kafka to use a public certificate authority (Let’s Encrypt) for SASL authentication instead of a project-specific CA. This eliminates the need for clients to install and manage certificates when authenticating with username and password.
When you enable this option, the connection details display the appropriate SASL port for your access route. Public CA support is available for all connection types, including PrivateLink.
To enable Public CA, use the Aiven Console, Aiven CLI, API, or Terraform. For more information, see Enable public CA for SASL authentication.
Nov 19, 2025
Aiven for PostgreSQL® upgraded to 18.1, 17.7, 16.11, 15.15, and 14.20
Aiven for PostgreSQL® has been upgraded to latest minor versions 18.1, 17.7, 16.11, 15.15, and 14.20, which contain a variety of fixes to previous versions. Removing bugs and security vulnerabilities increases database performance, improves service availability, and helps ensure business continuity.
See PostgreSQL release notes for more details about the PostgreSQL® minor releases.
Nov 19, 2025
- Improved
- Aiven for Apache Kafka®
Karapace version 5.0.3
Karapace has been updated to version 5.0.3 with fixes that improve protobuf handling and message consumption.
Improved
- Protobuf schemas now use absolute runtime paths when compiled, ensuring that generated
*_pb2.pymodules load correctly across different runtime environments.
Fixed
- Fixed protobuf decoding failures that caused messages to appear empty or not load in the Kafka Topic Catalog and REST API.
- Fixed an error where protobuf keys that could not be decoded resulted in an Unprocessable Entity response. Karapace now falls back to binary decoding for the key.
- Fixed errors that caused protobuf-formatted messages to fail when fetched through the API or the Aiven Console.
For more information, see the Karapace 5.0.3 release notes.