Can you tell us a bit about the project?
Apache Geode is an in-memory data grid that provides real-time, consistent access to data-intensive applications at massive scale. It enables developers to build high-performance, low-latency systems with strong consistency guarantees.
Originally developed at VMware, Apache Geode became a top-level project at the Apache Software Foundation in 2015. The project continues to evolve through contributions from a vibrant open source community focused on reliability, scalability, and performance.
What’s new with Apache Geode?
Big changes are coming to the Apache Geode project. Following the recent 1.15.2 release—the first new version in nearly three years—the community has embarked on one of its most ambitious modernization efforts to date: a migration to Jakarta EE 10.
This transition represents the most significant architectural change in Geode’s history, ensuring the project remains modern, secure, and sustainable well into the future.
What does the Jakarta EE 10 migration involve?
When Oracle transferred Java EE to the Eclipse Foundation, the javax.* namespace was replaced with jakarta.*. This shift broke binary compatibility across the Java ecosystem, requiring projects like Geode to update their entire codebase to stay compatible with modern servers, frameworks, and libraries.
For Geode, this meant more than a dependency bump—it was a top-to-bottom transformation.
Key framework upgrades include:
- Java EE 8 → Jakarta EE 10
- Spring Framework 5.3 → 6.1
- Spring Boot 2.6 → 3.3
- Spring Security 5.6 → 6.3
Jetty 9.4 → 12.0 - Apache HttpComponents 4.5 → 5.3
In total:
- 725+ files changed
- 18,000+ lines added, 10,000+ removed
- 173+ Java files and 118+ command classes refactored
- Over 10,300 tests passing cleanly
What are some of the most impactful technical updates?
Security & Framework Modernization
Spring 6 introduced a new, lambda-based security model. Geode’s configuration was rewritten using the new SecurityFilterChain approach—making it more maintainable and aligned with current best practices.
Command-Line Enhancements
Geode’s gfsh tool was rebuilt using Spring Shell 3.x, improving usability, command completion, and validation for developers.
Web and HTTP Layer Upgrades
By adopting Jetty 12 and Apache HttpComponents 5.x, Geode improved SSL/TLS handling, request performance, and compliance with modern web standards.
Tomcat 10+ Compatibility
Because Tomcat now depends on jakarta.servlet, Geode introduced a new module supporting Tomcat 10 and above, providing a clear migration path for users.
What did the community learn from this process?
Large-scale migrations demand both technical precision and community collaboration.
Some of the key takeaways include:
- Upgrade dependencies in sequence, respecting the dependency graph
- Modernize the test infrastructure early to prevent regressions
- Tackle migration module by module to stay focused
- Communicate and document everything transparently
This migration also provided opportunities to pay down technical debt, improve null safety, refactor outdated code, and enhance overall security—especially around CSRF protection and path traversal vulnerabilities.
What’s next for Apache Geode?
With the Jakarta EE 10 migration complete, Geode is now positioned for Apache Geode 2.0—a modern, future-ready platform with:
- Better performance and scalability
- Ongoing security updates
- Cleaner, more maintainable code
- Stronger alignment with the Java ecosystem
- Easier onboarding for new contributors
The project is no longer bound by aging dependencies and is ready to support the next generation of distributed systems.
How can others contribute?
The Geode community welcomes contributions of all kinds—not just code. Anyone interested in improving documentation, testing, design, or community engagement can get involved.
Start here:
- Website: geode.apache.org
- GitHub: github.com/apache/geode
- Mailing Lists: geode.apache.org/community
- Events: communityovercode.org
Special thanks to Sai Boorlagadda, Leon Finker, and Arnout Engelen for their technical leadership and review contributions. This modernization was a true community effort that reflects the best of The Apache Way—collaboration, transparency, and commitment to quality.
About the expert: Jinwoo Hwang is a member of the Apache Geode project management committee and Principal Software Developer in the Research and Development group at SAS Institute Inc.
The ASF is home to nearly 9,000 committers contributing to more than 320 active projects including Apache Airflow, Apache Camel, Apache Flink, Apache HTTP Server, Apache Kafka, and Apache Superset. With the support of volunteers, developers, stewards, and more than 75 sponsors, ASF projects create open source software that is used ubiquitously around the world. This work helps us realize our mission of providing software for the public good.
In the midst of hosting community events, engaging in collaboration, producing code and so much more, we often forget to take a moment to recognize and adequately showcase the important work being done across the ASF ecosystem. This blog series aims to do just that: shine a spotlight on the projects that help make the ASF community vibrant, diverse, and long lasting. We want to share stories, use cases and resources among the ASF community and beyond so that the hard work of ASF communities and their contributors is not overlooked.
If you are part of an ASF project and would like to be showcased, please reach out to markpub@aparche.org.
Connect with ASF
- Follow us on social: X, LinkedIn, YouTube and Bluesky
- Host a Project
- Become an ASF Sponsor
- Community Resources
- Attend Community Over Code
