Apache CloudStack
cloudstack.apache.org
What it is
Apache CloudStack is free, open-source software for deploying and managing networks of virtual machines as a highly available, scalable IaaS cloud platform. Organizations can use it to build public, private, or hybrid clouds. Its features include compute orchestration, network services, account management, resource accounting, a web interface, and an open API. Operators can manage clouds through a web UI, command-line tools, or REST API, with optional AWS EC2- and S3-compatible APIs. Supported hypervisors include XenServer or XCP, KVM, Hyper-V, and VMware ESXi with vSphere. Storage options include iSCSI, NFS, Ceph RBD with KVM, volume encryption, snapshots, and storage tiering. Authentication options include OAuth2 single sign-on, two-factor authentication, TOTP, SAML, and LDAP. The project says CloudStack can manage tens of thousands of physical servers across geographically distributed data centers. Long Term Support releases receive bug and security fixes for 18 months after the main release. Operators remain responsible for protections such as monitoring, host security, and defenses against DoS and brute-force attacks.
Spec sheet
- What it does
- Apache CloudStack deploys and manages large virtual-machine networks as a highly available, scalable IaaS platform.Read 15 Oct 2026 · cloudstack.apache.org
- Purpose
- Apache CloudStack deploys and manages large networks of virtual machines as a highly available, scalable IaaS cloud platform.Read 29 Sep 2026 · cloudstack.apache.org
- Intended users
- The project identifies cloud solution providers, managed service providers, telcos, and enterprises as audiences for CloudStack.Read 29 Sep 2026 · cloudstack.apache.org
- Deployment
- Organizations use CloudStack to build public, private, and hybrid clouds.Read 29 Sep 2026 · cloudstack.apache.org
- API
- CloudStack exposes a documented, extensible REST-like API and supports Amazon EC2 and S3-compatible APIs.Read 15 Oct 2026 · cloudstack.apache.org
- Integrations
- The integrations page lists Terraform, Ansible, Kubernetes, Prometheus, VMware NSX, Ceph, MinIO, and billing portal integrations.Read 29 Sep 2026 · cloudstack.apache.org
- Support
- Users can seek community help through the project mailing list, and the project says some companies offer commercial support.Read 29 Sep 2026 · docs.cloudstack.apache.org
- License
- The project website states that Apache CloudStack is licensed under the Apache License, Version 2.0.Read 29 Sep 2026 · cloudstack.apache.org
- Founded
- 2008Read 23 Sep 2026 · cloudstack.apache.org
- Access
- Clouds can be managed through a web UI, command-line tools, or a RESTful API, with optional AWS EC2 and S3 compatible APIs.Read 29 Sep 2026 · cloudstack.apache.org
- API documentation
- API references are published for every major feature version from 4.0 through 4.23.Read 15 Oct 2026 · cloudstack.apache.org
- Authentication
- Security features include OAuth2, TOTP, two-factor authentication, SAML, LDAP and role-based accounts.Read 15 Oct 2026 · cloudstack.apache.org
- Automation integrations
- The integrations catalog lists Puppet, Terraform, Ansible and Chef automation integrations.Read 15 Oct 2026 · cloudstack.apache.org
- Backup integrations
- The project describes API-based backup and disaster-recovery integrations and lists Acronis, Dell, Backroll and CloudStack options.Read 15 Oct 2026 · cloudstack.apache.org
- CLI
- CloudMonkey is the project’s command-line and shell environment for interacting with CloudStack clouds.Read 15 Oct 2026 · cloudstack.apache.org
- Company founding
- The Apache Software Foundation was established in 1999 and is funded by individual donations and corporate sponsors.Read 15 Oct 2026 · crunchbase.com
- Company legal entity
- Crunchbase identifies the legal name as The Apache Software Foundation, an active nonprofit.Read 15 Oct 2026 · crunchbase.com
- Container integrations
- CloudStack provides a Container Service and lists Kubernetes and Cluster API Provider CloudStack integrations.Read 15 Oct 2026 · cloudstack.apache.org
- Core features
- The platform includes compute orchestration, network services, account management, resource accounting, a web interface, and an open API.Read 29 Sep 2026 · cloudstack.apache.org
- Core stack
- CloudStack includes compute orchestration, Network-as-a-Service, account management, resource accounting, a native API and a web interface.Read 15 Oct 2026 · cloudstack.apache.org
- Current release
- The downloads page identifies 4.23.0.0 as the latest regular release and 4.22.1.1 as the current LTS release.Read 15 Oct 2026 · cloudstack.apache.org
- Deployment models
- The project supports public, private, on-premises and hybrid cloud deployments.Read 15 Oct 2026 · cloudstack.apache.org
- Documentation depth
- Official documentation covers concepts, topology, quick installation, full installation, administration and complex configurations.Read 15 Oct 2026 · docs.cloudstack.apache.org
- Extensibility
- A pluggable adapter framework supports custom hypervisor, storage, network and authentication integrations.Read 15 Oct 2026 · cloudstack.apache.org
- High availability
- Management servers can run in a load-balanced multi-node installation and MySQL can use replication for failover.Read 15 Oct 2026 · docs.cloudstack.apache.org
- Hypervisors
- Supported technologies include BareMetal via IPMI, Hyper-V, KVM, LXC, vSphere, XenServer and Xen Project.Read 15 Oct 2026 · docs.cloudstack.apache.org
- Installation
- Management servers can be installed with RPM or DEB packages, while official mirrors distribute source releases.Read 15 Oct 2026 · docs.cloudstack.apache.org
- Licence
- The project is open source under the Apache License 2.0.Read 15 Oct 2026 · github.com
- Limit: operations
- Reviewers cite unfriendly server logs, a need for command-line intervention and slower graphical-interface performance in large environments.Read 15 Oct 2026 · trustradius.com
- Limit: support and ecosystem
- A reviewer says the lack of an official support channel can require self-diagnosis and that third-party integrations can be harder to find.Read 15 Oct 2026 · trustradius.com
- Limit: upgrades and bugs
- Reviewers report undocumented bugs, regressions in releases and upgrades that are not straightforward.Read 15 Oct 2026 · trustradius.com
- Monitoring
- Usage metering, alerts, audit logs, capacity thresholds and webhooks are built in.Read 15 Oct 2026 · cloudstack.apache.org
- Networking
- Networking features include VLANs, virtual routers, firewalls, load balancers, VPN, IPv6, static routing, BGP and VNF support.Read 15 Oct 2026 · cloudstack.apache.org
- Praise: cost and openness
- TrustRadius reviewers repeatedly praise CloudStack as low-cost, open source and supported by an engaged community.Read 15 Oct 2026 · trustradius.com
- Praise: usability and reliability
- Reviewers describe the orchestration as reliable, robust, simple to use and suitable for private and public clouds.Read 15 Oct 2026 · trustradius.com
- Project history
- CloudStack began at VMOps in 2008, was acquired by Citrix in 2011, entered the Apache Incubator in 2012 and graduated in 2013.Read 15 Oct 2026 · cloudstack.apache.org
- Project profile
- LinkedIn lists Apache CloudStack as a software-development partnership founded in 2013, headquartered in Wakefield, Massachusetts, with a stated company size of 10,001+ employees.Read 15 Oct 2026 · linkedin.com
- Rating on Capterra
- 5.0 out of 5 from 1 reviewRead 15 Oct 2026 · capterra.com
- Rating on G2
- 4.4 out of 5 from 27 reviewsRead 15 Oct 2026 · g2.com
- Rating on TrustRadius
- 9.4 out of 10 from 18 reviewsRead 15 Oct 2026 · trustradius.com
- Release support
- LTS releases receive bug and security fixes for 18 months; regular releases receive only critical fixes for a shorter period.Read 15 Oct 2026 · cloudstack.apache.org
- Scale
- The documentation says CloudStack can manage tens of thousands of physical servers across geographically distributed data centers.Read 15 Oct 2026 · docs.cloudstack.apache.org
- Security reporting
- Vulnerabilities in released versions are reported to the Apache security team at [email protected].Read 15 Oct 2026 · cloudstack.apache.org
- Security responsibility
- Operators remain responsible for DoS protection, monitoring, host and management-server access control, and the safety of custom integrations.Read 15 Oct 2026 · cloudstack.apache.org
- Storage
- Storage capabilities include iSCSI, NFS, Ceph RBD with KVM, block volumes, encryption, snapshots, templates and ISO management.Read 15 Oct 2026 · cloudstack.apache.org
- System requirement
- CloudStack 4.23 requires Java 17 JRE for the management server and KVM agent.Read 15 Oct 2026 · docs.cloudstack.apache.org
- User interface
- The product provides administrator and end-user web interfaces, with customizable branding and browser-based noVNC console access.Read 15 Oct 2026 · cloudstack.apache.org
Plans and prices
Strong points and limits
Strong points
- Supports public, private, and hybrid cloud deployments.
- Management options include web UI, CLI, and REST API.
- Supports several hypervisors and storage options.
- Long Term Support releases receive fixes for 18 months.
Limits
- Operators must handle host security and monitoring.
- Operators are responsible for DoS and brute-force defenses.
- No commercial plan pricing is listed.
Who it suits
CloudStack is aimed at cloud solution providers, managed service providers, telcos, and enterprises building public, private, or hybrid clouds. It is self-hosted software for operators managing virtual-machine infrastructure.
Verdict
Apache CloudStack provides broad infrastructure management for organizations running their own cloud environments. Operators should account for the security responsibilities that remain with them.
Where Specifiction places it
- Virtualization Management Software#1 of 349.0
- Cloud Orchestration Software#2 of 279.0
- Multi-Cloud Management Software#2 of 259.0
- Cloud Infrastructure as a Service (Cloud IaaS) Software#2 of 248.9
- Cloud Management Software#3 of 359.0
- Cloud Computing platform#2 of 228.9
- Data Center Automation#2 of 229.0
- Cloud Automation Software#3 of 329.0
- Infrastructure as a Service (IaaS) Software#2 of 188.9