What's installed on your ClickHouse server?
- ClickHouse server and clickhouse-client from the official repository's stable channel
- A password on the default user, stored in the config only as a SHA-256 hash
- SQL-driven user and permission management turned on (access_management)
- Listening on all addresses: HTTP interface on 8123, native protocol on 9000
- Our additions in /etc/clickhouse-server/config.d/seturack.xml and users.d/seturack.xml
- Firewall with ports 8123, 9000 and 22 for SSH open
What size do you need for ClickHouse?
ClickHouse's official docs recommend 32 GB of RAM or more and warn that below 16 GB the default settings can cause memory exceptions. It can run on as little as 2 GB, but that needs extra tuning and only ingests at a low rate. Below 16 GB, this install turns on the low memory settings the docs recommend. As a rule of thumb, keep 2 GB for trials, use 4 GB for small datasets and start at 16 GB for production. As your data grows, raise RAM from your panel.
| Use | Size | Price | Choose |
|---|---|---|---|
| Starter | 4 GB RAM · 2 vCore · 60 GB NVMe | $6.89/mo | |
| Medium | 16 GB RAM · 8 vCore · 200 GB NVMe | $25.15/mo | |
| Powerful | 32 GB RAM · 12 vCore · 360 GB NVMe | $46.22/mo |
Who is it for?
- Teams querying event, log and product analytics data with SQL
- Anyone moving reporting queries away from their application database
- Developers who want to try ClickHouse with their own data
- People connecting tools such as Grafana to a data source of their own
- Anyone who wants analytics data on their own server in Istanbul
What happens after you order?
- Set the size and complete your payment.
- Your server starts and ClickHouse installs itself. On the Overview tab, wait for the App row to say ClickHouse is ready.
- Copy the values from the Connection address, Login and Password rows.
- Try it over HTTP: curl -u default:PASSWORD 'http://IP:8123/?query=SELECT%201'
- Connect with the native client: clickhouse-client --host IP --password PASSWORD
- Limit access: run ufw delete allow 8123/tcp and ufw delete allow 9000/tcp, then allow your own IP address.
With every server
- Daily backups included in the price
- Unlimited traffic
- Full root access
- Scale RAM and CPU up or down later, and grow the disk
- Location: Istanbul · IST-1.
Good to know
- Connections run without TLS, so your password and data travel as plain text. Limit access by IP or turn on TLS before connecting over a network you don't trust.
- Ports 8123 and 9000 are open to the internet. If only your own servers connect, run ufw allow from YOUR_IP to any port 8123, and the same for 9000.
- TLS needs a certificate and an openSSL section in the config. The official guide uses ports 8443 and 9440, which you open in the firewall yourself.
- Below 16 GB, installation turns on the settings the official docs recommend: one query thread, small caches, system logs off. After resizing, delete the seturack-dusuk-bellek.xml files under config.d and users.d and restart the service.
- Updates are your responsibility. The server follows the stable channel and upgrades through apt, so read the release notes first.
- The default user has full rights. Create a limited user for your app with CREATE USER.
ClickHouse questions and answers
How do I connect to my ClickHouse server?
For HTTP, use port 8123: curl -u default:PASSWORD 'http://IP:8123/?query=SELECT%201'. The native client uses port 9000: clickhouse-client --host IP --password PASSWORD. Your panel shows the address and password.
How much RAM does ClickHouse need?
The official recommendation is 32 GB or more. Below 16 GB, default settings can cause memory errors, and it can go as low as 2 GB with extra tuning. This install turns that tuning on by itself below 16 GB. As a rule of thumb, start with 2 to 4 GB for trials and 16 GB for production.
Is ClickHouse open to the internet?
Yes, ports 8123 and 9000 are open, and every connection needs the password. Since connections aren't encrypted, it's wise to limit them to your own IP: run ufw delete allow 8123/tcp, then ufw allow from YOUR_IP to any port 8123.
How do I turn on TLS in ClickHouse?
Add https_port and tcp_port_secure to a settings file under config.d, with your certificate and key paths in the openSSL section. The official guide uses ports 8443 and 9440. Remember to open them with ufw.
How do I create a separate ClickHouse user for my app?
Connect as default and run CREATE USER analiz IDENTIFIED BY 'new-password', then give it access with GRANT SELECT ON mydb.events TO analiz. SQL user management is already on in this install.
Do backups cover my ClickHouse data?
Your server is backed up every night, the last 7 days are kept, and this is included in the price. ClickHouse data is on the server's disk, so it's in the backup. You can recover a single file or restore the whole server from your panel.