Managed Databases, Raff Apps, Functions & VPN
Raff is now a complete cloud platform. Managed Databases with five engines, Raff Apps for running applications straight from your code, Raff Functions for on-demand compute, and private networking with VPN and peering.
Kubernetes version upgrades, the Kubernetes API, CLI & Terraform, and multiple IPv4s per VMFull notes
Managed Kubernetes takes its biggest step since launch: upgrade clusters in place, drive everything over the public API, the CLI, and Terraform, and let a smarter autoscaler do the scaling. VMs can now hold up to four public IPv4 addresses, two smaller VM plans join the lineup, and a round of reliability fixes lands across backups, terminals, and billing.
- Kubernetes version upgrades, in place. Upgrade a running cluster from the dashboard or the API: rolling, one node at a time, with the cluster API reachable throughout. Automatic patch upgrades in a maintenance window, or fully manual.
- Kubernetes API, CLI, and Terraform. The full cluster lifecycle over the REST API, the new raff kubernetes CLI commands, and Terraform resources, with a complete documentation section.
- Control-plane health, visible. etcd latency, component restarts, and API-server errors on every cluster.
- Multiple public IPv4s per VM. Up to four addresses per VM; the first stays included, and reinstalling the OS keeps them all.
- Two smaller VM plans. General-purpose 1 vCPU/1 GB and 1 vCPU/2 GB.
- Node removal drains first, always. Pods are moved before a node is removed, PodDisruptionBudgets honored; nothing is force-killed.
- The autoscaler thinks like Kubernetes. Fit-checked scale-up, utilization-based scale-down with reschedule simulation.
- The Nodes tab is organized by role. Gateway, control plane, workers, and storage, with kubelet health per node.
- Complete HA upgrades. Upgrading to HA now doubles the gateway as well as the control plane.
- Backups report what actually happened. Success the moment your restore point exists; no false failures, no duplicate copies.
- Browser terminals connect reliably. A terminal service instance could silently lose its registry; it now reconnects automatically.
- Site-to-site VPN tunnels survive key renewals. IPsec tunnels re-establish automatically after a rekey.
- Renewal invoices are exact. No delayed and no duplicate renewal invoices.
- Cluster deletion never loses track. A failed deletion shows as failed, with a working Retry.
Managed Databases free tier, a rebuilt database console, and app preview environmentsFull notes
Managed Databases now has a free tier. The database console was rebuilt around daily work, Raff Apps gained preview environments, and a set of billing fixes is proven in production.
- Managed Databases free tier. Choose the Free plan and run a real production-grade database at no cost: PostgreSQL, MySQL, or Valkey, one free database per account. No trial period, no expiry date. After seven days without a connection it pauses to save resources; one click starts it again with all your data exactly as you left it. We email you before it pauses, and your data is never deleted automatically.
- Public database access without a VPC. Databases can now be reached over the internet through a protected shared entry point: your allowlist is enforced before any connection is accepted, with rate limits and per-database connection caps. A VPC is now optional when creating a database.
- The database console, rebuilt. Live vitals on the fleet list: load, clients, and storage per database. On each database: query tabs, saved queries stored with the database and shared with your team, EXPLAIN, CSV export, run history, and new Users, Configuration, Performance, Extensions, and Backups tabs.
- Database user management. Create, rotate, and delete scoped read-only or read-write users, and the Connect tab renders every connection string for exactly the user you pick.
- Verifiable TLS. Download your database's CA certificate from the Connect tab; every connection snippet pins it. No more insecure flags.
- Preview environments for Raff Apps. Every open pull request on a connected repository gets its own URL, rebuilt on each push and removed when the PR closes. Free, off by default, on per service.
- The Apps console, rebuilt. Traffic, latency, and error rate on the fleet list, per-instance logs and shell, a service events timeline, real health checks, and service settings you can finally edit after creation.
- A new release notes experience. One live page per version line, the page you are reading, with RSS, Atom, and JSON feeds.
- Database metrics measure only you. Health probes and platform sessions are now excluded from queries per second and client counts, so an idle database reads zero and a paused free database actually pauses.
- Failed provisioning refunds card payments automatically. If provisioning fails after a successful card payment, the full amount is returned to your account balance, every time, for every product.
- Renewals and usage charges settle exactly. Prorated renewals advance your billing period correctly, and monthly usage-based charges invoice reliably. Both verified on the August 1 billing run.
- Database status tells the truth. A new database no longer flashes Degraded while its engine is still starting, a paused database is shown as paused, and backups no longer show running after they finished.
- ClickHouse metrics show the right values. A parsing bug could shift readings onto the wrong fields; every value is now exact.
- Valkey plan changes that grow storage now work. Storage expands online during the change.
Managed Databases, Raff Apps, Functions, VPN & PeeringFull notes
The largest release Raff has ever shipped. Three new products go live: Managed Databases, Raff Apps, and Raff Functions. Your private network now reaches everything you own: your office, your devices, and your other VPCs. And billing was reviewed end to end, so every charge, discount, and refund is exact.
- Managed Databases. PostgreSQL, MySQL, Valkey, ClickHouse, and Kafka. High availability, automatic backups with restore, private networking, and per-database access control.
- Raff Apps. Run applications without managing servers. Deploy from a container image, a template, a Dockerfile, docker-compose, or straight from GitHub. Automatic scaling, custom domains, logs, rollbacks, and one-click connections to your databases and buckets.
- Raff Functions. Run code on demand. Write and edit directly in the browser, import your AWS Lambda functions in one click, and trigger on a schedule or on storage events. Spending caps are on by default, so a surprise bill is impossible.
- VPN Gateway. Secure WireGuard access into your VPC for you and your team. Five devices, set up by scanning a QR code.
- Site-to-Site VPN. Connect your office network or another cloud to your VPC over WireGuard or IPsec. Already carrying production traffic for customers.
- VPC Peering. Route privately between two of your VPCs. No extra hardware, no configuration on your VMs.
- Networking map. Your whole network on one interactive map: VMs, Kubernetes clusters, databases, apps, and functions, with filters and shareable views.
- Volumes moved to distributed storage. Block volumes now live on the same replicated storage cluster as VM disks, with higher capacity and durability.
- Windows has its own plan family. Windows VMs run on dedicated plans built for Windows workloads.
- Billing you can read. Every product shows up in your subscriptions with its real name, invoices name your coupon and balance instead of internal codes, and deleting any product refunds unused time automatically.
- Images moved into Compute. Your images now live in a tab next to Backups, where you actually use them.
- Discounts are exact everywhere. Checkout preview, charge, renewal, and refund now always agree. Coupons apply to the product you redeemed them for, and attached volumes and Windows licenses get their discount at checkout too.
- Windows VMs with a Raff license deploy reliably. A scheduling bug could fail creation after payment. Payments were refunded automatically, and creation is now dependable.
- Team members see everything they should. Invited members could hit errors in Kubernetes, VM tags, and Object Storage. All access now works regardless of role.
- Invitations reach every user. Pending invitations now appear in the dashboard no matter how you signed in.
- Purchases land in the right project. Volumes, reserved IPs, and buckets bought at checkout now follow the project you were working in.
- Function metrics count every request. Short-lived traffic was invisible to the charts. Usage and metrics are now exact.
Managed Kubernetes, Compute & API
Managed Kubernetes ships with a free control plane, the compute and VM experience is rebuilt, backups and snapshots share one free-storage pool, and the Raff API, CLI, and Terraform provider go live.
Reinstall OS, billing, and refund accuracy
Reinstall no longer touches your addresses, and every money path (refunds, deletions, email changes) now settles exactly.
Kubernetes firewall enforcement and backup chains
The cluster firewall now actually enforces, and incremental backup chains stop over-deleting.
Managed Kubernetes, Compute rebuilt, API + CLI + TerraformFull notes
The thing we teased in 1.4 is here: Kubernetes on Raff. We also rebuilt the entire compute experience, changed how storage is billed for the better, and opened the platform up with an API, CLI, and Terraform provider.
VPC Networking, Marketplace, Security & Audit Log
Rebuilt VPC networking with gateways, port forwarding, and security groups. One-click app marketplace, CloudTrail-style audit logs, and major compute UX improvements.
VPC gateways, port forwarding, marketplace, audit log
S3 Object Storage, API Keys & Raff Learn
S3-compatible object storage, expanded API key management with project and VM scoping, and Raff Learn for tutorials and guides.
S3-compatible object storage and scoped API keys
Web Terminal, API Launch & Windows Templates
Enterprise-grade web terminal, the first public API release with API keys, Windows Server Standard templates, and automatic invoices.
Web terminal, first public API, Windows templates
VPC, Reserved IPs & Subscription Billing
A new beginning for Raff. Simple subscription billing replaces top-ups, VPC networking isolates your infrastructure, and Projects & Team Invites let you collaborate.
Subscription billing, VPC, Reserved IPs, Projects
The Foundation
A complete rebuild of the Raff platform. Backend rewritten in Go, frontend and backend migrated from AWS, Render, and Vercel to Raff's own Kubernetes infrastructure. We run on Raff before you do.
Platform rebuild on Raff's own infrastructure
The Turning Point: Foundation & Growth
Service tier system, redesigned payment infrastructure, and the foundational work that positioned Raff as a complete platform.
Service tiers and new payment infrastructure
Dark Mode, VNC Console, Custom Images & Referrals
The line that shipped dark mode, browser-based VNC, custom image upload, referral rewards, and enterprise-grade DDoS protection.
New website, custom images, VM reboot controls
Referral rewards and DDoS protection
Dark mode, VNC console, VM operations
Advanced Billing, Storage Management (Volumes, Backups, Snapshots), Marketplace Templates & Enhanced Security
0.7.0 introduces powerful Volumes for storage management and new data protection features like Backups & Snapshots. Benefit from enhanced billing & payments, secure your account with MFA, manage SSH keys for secure VM access, and experience various UI improvements across the platform.
VM tags, priorities, and the mobile platform launch
Analytics, phone verification, and auth polish
Stripe, Google Pay / Apple Pay, and dual payment modes
Payment integration, new services and UI improvements.
This release brings major updates to servies, payment processing, UI improvements, and overall app stability.
Payment integration, new services, and UI improvements
Our first production release!
This release marks the debut of Raff Technologies’ production-ready platform, featuring a robust support system and enhanced payment processing.