Skip to content
SPECIFICTION
Get listed

Apache Storm

storm.apache.org

Free plan WebWindowsmacOSLinuxAPISelf-hosted

What it is

Apache Storm is a distributed system for computing over unbounded data streams in real time. It uses spouts, bolts, and topologies to assemble multi-stage computations, supporting realtime analytics, online machine learning, continuous computation, distributed RPC, and ETL. The project describes Storm as scalable and fault-tolerant, with guaranteed data processing, and reports a benchmark above one million tuples per second per node. Integrations include Apache Kafka, HDFS, JDBC databases, JMS, and Redis. Developers can work in local mode in-process or submit topologies to a remote cluster. Storm supports stateful processing and lists JavaScript, Python, Ruby, and C# among supported languages. It is free under Apache License, Version 2.0; source and binary distributions are available, along with Maven Central and an official Docker image. The current release is 3.1.0. Security options include Kerberos/SASL authentication, SimpleACLAuthorizer authorization, and TLS for Thrift RPC and worker messaging; authentication and authorization options are disabled by default.

Spec sheet

Purpose
Apache Storm is a distributed realtime computation system for reliably processing unbounded data streams.Read 1 Oct 2026 · storm.apache.org
Deployment
Storm provides local mode for in-process development and remote mode for submitting topologies to a cluster.Read 1 Oct 2026 · storm.apache.org
Integrations
Out-of-the-box integrations include Apache Kafka, HDFS, JDBC databases, JMS, and Redis.Read 1 Oct 2026 · storm.apache.org
Security
Storm supports pluggable Kerberos/SASL authentication and SimpleACLAuthorizer authorization, both disabled by default.Read 1 Oct 2026 · storm.apache.org
Support
Users can get help through the user mailing list at [email protected].Read 1 Oct 2026 · storm.apache.org
License
Apache Storm is licensed under the Apache License, Version 2.0.Read 1 Oct 2026 · storm.apache.org
Current release
The current Apache Storm release is 3.1.0, with source and binary distributions available.Read 1 Oct 2026 · storm.apache.org
Distribution
Apache Storm is available through Maven Central and as an official Docker image on Docker Hub.Read 1 Oct 2026 · storm.apache.org
Encryption
Storm supports TLS for Thrift RPC and Netty worker-to-worker messaging through mutual TLS.Read 1 Oct 2026 · storm.apache.org
Performance
The project says a benchmark processed over one million tuples per second per node.Read 1 Oct 2026 · storm.apache.org
Programming model
Storm uses spouts, bolts, and topologies to build arbitrarily complex multi-stage stream computations.Read 1 Oct 2026 · storm.apache.org
Release integrity
Storm publishes OpenPGP signatures and SHA-512 checksums for every release file.Read 1 Oct 2026 · storm.apache.org
Reliability
Storm is designed to be scalable, fault-tolerant, and to guarantee data processing.Read 1 Oct 2026 · storm.apache.org
Use cases
Storm supports realtime analytics, online machine learning, continuous computation, distributed RPC, and ETL.Read 1 Oct 2026 · storm.apache.org

Plans and prices

Apache Storm Free Free and open source · Apache License 2.0 Read 1 Oct 2026 · storm.apache.org

Every Apache Storm plan and price →

Strong points and limits

Strong points

  • Free under Apache License 2.0
  • Supports stateful stream processing
  • Offers local development and remote cluster modes
  • Integrates with Kafka, HDFS, JDBC, JMS, and Redis

Limits

  • Authentication and authorization are disabled by default
  • Deployment model is self-hosted

Who it suits

Apache Storm suits developers and operators building distributed stream computations, including analytics, ETL, and online machine-learning workloads. Teams deploying it should account for the fact that its authentication and authorization options are disabled by default.

Verdict

Storm provides a distributed programming model for continuous stream computation, with local development and cluster deployment options. Its security settings need deliberate attention because authentication and authorization start disabled.

Where Specifiction places it

Alternatives to Apache StormAll alternatives →