Emergency Incident Response
Nodes down, reads timing out, a ring that won't converge, or a bootstrap stuck mid-stream. A senior engineer joins a live bridge within 15 minutes with access to diagnose — not a ticket acknowledgement.
Cassandra Support
Last reviewed by Scott Sternloff
AceMQ provides 24/7 Apache Cassandra support under written response times: 15 minutes for a production emergency, 1 hour for critical issues, 4 hours for high-priority ones and the next business day for standard questions. It covers Cassandra 3.11, 4.0, 4.1 and 5.0, DataStax Enterprise and Kubernetes deployments, for teams that have no Cassandra specialist in house. Every ticket reaches a named senior engineer, and the terms are written to be read against DORA.
Planning a build, upgrade or migration instead? See AceMQ Apache Cassandra consulting and services.
Customers




Partners


Incident Triage
These are real symptoms from real Apache Cassandra production environments — and the first thing our engineers check when one comes in.
| Symptom you're seeing | What we check first | Typical resolution |
|---|---|---|
| Read timeouts on a table with heavy deletes or short TTLs | Tombstone counts per read in the system log against tombstone_warn_threshold, and how long since compaction last purged them. Every delete and every expired TTL cell is a tombstone that must be scanned on each read until it ages past gc_grace_seconds and compacts away. | 1–3 hours |
| Nodes marked down and back up repeatedly with no network fault | GC logs for stop-the-world pause duration first. A multi-second pause makes gossip miss heartbeats and the cluster convicts a node that is actually alive. The underlying cause is usually a wide partition or a large read being pulled into heap, not the JVM settings themselves. | 2–4 hours |
| One partition is enormous — nodetool tablehistograms shows gigabytes | The partition key design against real cardinality. A key with too few distinct values concentrates unbounded writes into one partition, which then causes GC pressure, slow repairs, and streaming failures. The fix is a bucketing component in the key and a backfill, not a tuning parameter. | 2–4 hours |
| Deleted rows reappearing in query results | Repair completion history against gc_grace_seconds per table. If a replica misses a delete and the tombstone is purged before repair propagates it, the stale live value wins on the next read. We verify the repair schedule actually completes inside the window rather than merely being scheduled. | 1–3 hours |
| Reads degrading as SSTable count climbs steadily | Compaction strategy against the actual workload, plus pending compaction tasks and the throughput throttle. Size-tiered on a time-series table that should be TWCS, or leveled on a write-heavy table, both produce this — compaction never catches up and each read touches more SSTables. | 2–4 hours |
| UnavailableException while every node shows as up | Consistency level against replication factor per keyspace per datacenter. LOCAL_QUORUM with a datacenter name in NetworkTopologyStrategy that doesn't match the snitch's actual DC name means replicas are placed somewhere the coordinator won't count, so quorum can never be met locally. | Under 1 hour |
| Adding or decommissioning a node fails part way through streaming | Streaming throughput and timeout settings, and nodetool describecluster for schema disagreement. Multiple schema versions across the ring will break bootstrap outright, and a wide partition can exceed the stream timeout before a single file finishes transferring. | Same day |
| Cluster stays slow for hours after a node comes back from an outage | Hint replay volume and read repair activity. The recovered node is being written to by every coordinator at once while also serving reads it can't satisfy from local data — we throttle hinted handoff and check whether hints exceeded max_hint_window and a repair is required instead. | 1–2 hours |
Resolution times reflect typical Apache Cassandra engagements under an active AceMQ support contract. Every P1 closes with a written root-cause analysis.
What's Included
No add-on pricing for incidents. No per-ticket charges. One contract covers the whole surface.
Nodes down, reads timing out, a ring that won't converge, or a bootstrap stuck mid-stream. A senior engineer joins a live bridge within 15 minutes with access to diagnose — not a ticket acknowledgement.
Every P1 closes with a written RCA: what failed, why, the fix applied, and the data model, compaction, or repair change that prevents recurrence. Delivered as standard, not on request.
Partition key and clustering column design against your real access patterns, partition size distribution, and the delete and TTL patterns that quietly manufacture tombstones faster than compaction can remove them.
Compaction strategy matched to workload — TWCS for time series, LCS for read-heavy, STCS where it genuinely fits — plus a repair schedule that completes inside gc_grace_seconds rather than merely existing in cron.
Heap sizing, G1 versus ZGC selection for your pause budget, and off-heap memory accounting. We tune GC after fixing what is filling the heap, because the reverse order just moves the outage later.
Rolling upgrades across 3.11, 4.x, and 5.0, adding or retiring a datacenter without downtime, and migrations to or from DataStax Enterprise, Amazon Keyspaces, and ScyllaDB.
Why AceMQ
The same senior engineers stay on your account. They know your keyspace layout, your replication factors, and your compaction choices — so a P1 call opens with a hypothesis rather than a tour of your ring.
You reach a senior Cassandra engineer directly by phone, email, or Slack. No help desk collecting details to relay, and no escalation approval between you and someone who can read a GC log and a tablehistogram.
Most Cassandra production pain traces back to partition key design and delete patterns. We will say when the answer is a model change and a backfill rather than more nodes — even though more nodes would be the easier recommendation to make.
Cross-datacenter replication, LOCAL_QUORUM semantics, snitch and topology configuration, and adding or retiring a DC live. This is where consistency mistakes hide until the day one region becomes unreachable.
Engineers across 26+ countries and every time zone. Your 3am node flap is someone's mid-afternoon — no overnight skeleton crew, no waiting for a region to wake up.
We diagnose across the driver's load balancing and retry policy, the JVM, storage latency, network policy, and Kubernetes. Cassandra symptoms frequently originate in the client or the disk rather than in Cassandra.
Cloud, Kubernetes, bare metal, hybrid, and air-gapped — including environments where you can't give us outbound network access.
Version coverage
The Apache project maintains its newest release lines and lists no end-of-life dates. AceMQ supports the version you run, including 3.11, which the project's download page no longer lists as a maintained line.
| Cassandra version | Latest release | Apache status | What AceMQ does on it |
|---|---|---|---|
| Cassandra 5.0 | 5.0.9, 7 August 2026 | Latest GA, maintained until the 8.0 release | 24/7 support and the target for upgrades from 3.11 and 4.x |
| Cassandra 4.1 | 4.1.12, 7 August 2026 | Previous stable, maintained until the 7.0 release | 24/7 support, including the DORA-aligned terms below |
| Cassandra 4.0 | 4.0.21, 7 August 2026 | Older stable, maintained until the 6.0 release | 24/7 support and a rehearsed rolling upgrade to 4.1 or 5.0 |
| Cassandra 3.11 | Not listed on the download page | No maintained release line shown | 24/7 support, with the upgrade planned and rehearsed before the next incident forces it |
Source: the Apache Cassandra download page, checked 20 October 2026. Rolling upgrades are sequenced node by node, because nodes on different major versions cannot stream to each other.
DORA
The EU Digital Operational Resilience Act (Regulation 2022/2554) has applied since 17 January 2025. Financial entities must hold written contracts with the ICT suppliers behind their systems, and Article 30 sets what those contracts contain. DORA certifies no supplier, so the responsibility stays with you.
Response times by severity are in the contract: 15 minutes for P1, 1 hour for P2, 4 hours for P3 and the next business day for P4, around the clock. That gives you the measurable service levels Article 30 asks for.
A senior engineer joins the incident bridge, and every P1 closes with a written root cause analysis you can attach to your own incident record. There is no per-incident charge for calling us.
The same senior engineers stay on your account, and the contract states which clusters, versions and environments are covered.
A request we see
A systems integrator asked AceMQ for 24/7 support of Apache Cassandra 4.1 for its telecom client in the EU, a client with DORA obligations. The integrator had no in-house Cassandra team.
The integrator answers to its client for availability but, by its own account, does not have the Cassandra skills in its team to back that up.
24/7 support for Cassandra 4.1, for a client with DORA obligations and a need for written response times.
A 24/7 rota of senior Cassandra engineers, response times by severity in writing, and a written RCA after every P1.
The integrator and its client are not named.
Escalation Path
Every tier reaches a senior Apache Cassandra engineer. There is no tier-1 triage layer to get through.
P1 escalation path
A replay of one P1, from the first page to the written root-cause analysis
15-minute P1 response, 24/7.
A response time, not a resolution time.
P1 opened, on-call engineer paged
Phone, email or Slack reaches the on-call senior engineer directly, whether the incident is in RabbitMQ, Kafka, Redis, PostgreSQL or Kubernetes. No web form, no tier-1 queue.
Senior engineer on your bridge
A senior engineer who already knows your environment joins a live bridge, so nobody has to re-explain your topology.
Specialists across the stack join
When an incident crosses components, the engineers who know each one join. For RabbitMQ, the path runs to the core team.
Written root-cause analysis
Root cause, the fix applied and the prevention steps, delivered after every P1.
Pricing
AceMQ Apache Cassandra support contracts typically run $24,000–72,000 a year, depending on SLA level, scope (number of clusters or nodes, and environments) and deployment (self-managed, cloud-managed or Kubernetes).
| What moves the price | How it changes the contract |
|---|---|
| SLA level | Business-hours cover costs less than 24/7 cover with a 15-minute emergency response. |
| Scope | More clusters or nodes, and more environments, make a larger contract. |
| Deployment | Self-managed, cloud-managed and Kubernetes estates need different amounts of hands-on work. |
Covering several technologies under one contract, for example RabbitMQ, Kafka and Redis, earns an aggressive discount.
Support In Practice
Cassandra support work from AceMQ. Each card links to the full write-up: the ring, what AceMQ diagnosed or changed, and the result.
Connected Vehicle Telematics Provider
Resolving read timeouts caused by tombstone accumulation on queue-like partitions where deletes outpaced compaction and gc_grace_seconds.
Global Payments Processor
Ongoing support for anti-entropy repair that never completed within gc_grace_seconds, leaving the cluster exposed to deleted data resurrecting.
Public Sector Agency
Assessment covering topology, replication and consistency configuration, JVM and garbage collection behavior, compaction health, and growth headroom.
Digital Identity Services Provider
Redesigning partition keys and clustering order to eliminate unbounded partitions and remove secondary index queries that were hitting every node.
Support options
AceMQ offers Cassandra cover in four options, each handing more of the day-to-day work to AceMQ: 24/7 support and incident management for rings your team runs, proactive monitoring that finds wide partitions, tombstones and missed repairs first, managed Cassandra on your own infrastructure, and fully managed Cassandra on AceMQ infrastructure. Cassandra 3.11 to 5.0 and DataStax Enterprise are covered in all four.
You run it, we back you up
Best for: Teams that run Cassandra themselves and need senior cover when the ring misbehaves at 3am.
You run it, we watch it with you
Best for: Teams that want the wide partition or the missed repair found in a review, not in an outage.
We run it in your cloud or data centre
Best for: Regulated estates that must keep Cassandra inside their own boundary.
We host it and run it, as a service
Best for: Teams that want Cassandra without owning repair schedules and node replacement.
| Who does what | Tier 1 24/7 support | Tier 2 Proactive monitoring | Tier 3 Managed, your infrastructure | Tier 4 Fully managed by AceMQ |
|---|---|---|---|---|
| Who runs Apache Cassandra day to day? | Your team | Your team, with AceMQ reviews | AceMQ | AceMQ |
| Where does it run? | Your infrastructure | Your infrastructure | Your cloud account or data centre | AceMQ infrastructure |
| 24/7 incident response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response |
| Health checks and CVE alerts | On request | Scheduled | Included | Included |
| Patching and upgrades | Your team, AceMQ advises | Planned with AceMQ | Done by AceMQ | Done by AceMQ |
| Monitoring and on-call | Your team | Your team | AceMQ | AceMQ |
| Data, keys and accounts | Yours | Yours | Yours | Your data, hosted by AceMQ |
Every Tier can start as an ad hoc engagement or an annual partnership, and you can move up or down a Tier as your team changes.
One partner for Apache Cassandra
Support is one part of what AceMQ does for Apache Cassandra. The same engineers deliver consulting, health checks, migrations and end-of-life cover, and support the systems that usually run next to it.
Cassandra support covers 24/7 emergency incident response with a 15-minute SLA, root cause analysis on every P1, data model review, compaction and repair strategy, JVM and GC tuning, CVE and patch advisory, quarterly health checks, and upgrade or multi-DC expansion support. Every ticket goes to a named senior engineer assigned to your account. There is no first-line triage layer and no per-incident charge.
That is the tombstone problem, and it is the single most common Cassandra incident we are called for. Cassandra does not remove data on delete; it writes a tombstone marker that has to be scanned on every subsequent read of that partition until it ages past gc_grace_seconds and a compaction removes it. Frequent deletes or short TTLs on a table therefore make reads progressively more expensive, and a query that scans past tombstone_failure_threshold is aborted outright. We fix it in layers: immediate relief through targeted compaction, then a repair schedule that actually completes, then the data model change that stops generating the tombstones — usually a switch to time-bucketed partitions with TWCS instead of in-place deletes.
P1 emergencies — multiple nodes down, reads or writes failing cluster-wide, a ring that won't converge — get a 15-minute first response with a senior engineer joining a live bridge. P2 critical issues are 1 hour, P3 high-priority 4 hours, and P4 standard questions next business day. These are contractual response times covering nights, weekends, and holidays.
Yes. We support Apache Cassandra 3.11 through 5.0, DataStax Enterprise, Azure Managed Instance for Apache Cassandra, and Amazon Keyspaces. The managed and commercial variants remove some operational surface — Keyspaces in particular hides compaction and repair entirely — but they do not remove partition sizing, consistency level design, or the cost model consequences of a wide partition. We are also frequently asked to compare them honestly for a specific workload, including where the managed option genuinely wins.
Every table needs a full repair to complete within gc_grace_seconds, which defaults to ten days. If it does not, tombstones can be purged before every replica has seen them and deleted data comes back. Repairs fail or overrun for a handful of recurring reasons: very wide partitions that blow past stream timeouts, insufficient compaction throughput, running full repairs where incremental or subrange would fit the window, and overlapping repair sessions competing for the same ranges. We usually move customers onto a subrange schedule driven by a scheduler such as Reaper, sized so the whole ring completes with margin rather than finishing on the last day.
Yes, and this is a rolling upgrade that has to be sequenced carefully rather than a package update. SSTable format changes mean nodes on different major versions cannot stream to each other, so no bootstrap, decommission, or repair can run until the whole ring is upgraded — which makes the window between the first and last node the risky part. We rehearse on a cloned cluster, verify driver compatibility, upgrade SSTables node by node, and keep a tested rollback point. We also check for deprecated configuration and CQL behaviour changes that surface as application errors rather than server errors.
Apache Cassandra is an open source, distributed NoSQL database from the Apache Software Foundation, designed for fault tolerance and linear scalability with no single point of failure. The Cassandra community maintains current releases and answers questions on the mailing lists and Slack, with no SLA. Commercial support comes from DataStax for DataStax Enterprise and Astra, from managed Apache Cassandra providers for their own services, and from independent providers such as AceMQ for the clusters you run yourself. We cover open source Cassandra on any version, on-premises and in the cloud, with dedicated Cassandra experts for troubleshooting, data model reviews, read and write performance tuning, repair and compaction, and upgrades off unmaintained 3.x releases to 4.x and Cassandra 5.0.
Usually. Most Cassandra performance problems are data model problems discovered at scale: a partition key that lets one partition grow to gigabytes, tombstones from queue-like deletes, secondary indexes on high-cardinality columns, or a compaction strategy chosen for a workload the cluster no longer has. Others are configuration: heap and garbage collection settings that cause pauses, repair schedules that collide with peak load, or a consistency level that makes every read wait on the slowest replica. We diagnose from the metrics, the table histograms and the query patterns, fix what can be fixed online, and tell you plainly when the answer really is more nodes.
Yes. DORA, the EU Digital Operational Resilience Act, has applied since 17 January 2025 and requires financial entities to hold written contracts with their ICT suppliers, with service levels and incident assistance spelled out. AceMQ supports Cassandra under a contract that states response times by severity (15 minutes for P1, 1 hour for P2, 4 hours for P3, next business day for P4), 24/7 cover, a named senior engineer and a written root cause analysis after every P1. DORA does not certify suppliers, so the compliance judgement stays with you or your integrator.
Apache Cassandra is open source and runs wherever you put it: your data centre, any cloud, or Kubernetes. You choose the data model, replication factor and consistency level per query, and you run repair and compaction yourself. Amazon DynamoDB is a proprietary AWS service with no servers to run and a different pricing and lock-in profile. The two share the idea of partitioned, replicated key-based storage. Amazon Keyspaces sits between them, offering Cassandra-compatible access on AWS infrastructure. The choice usually turns on where the data must live and whether you want to operate a ring.
Yes to both. Managed Cassandra means AceMQ operates the ring: on your own cloud account, data centre or Kubernetes clusters, or hosted on AceMQ infrastructure, with repair, upgrades, node replacement and on-call included. Apache Cassandra consulting covers data model review, partition key design, compaction strategy and cluster assessments before or after go-live. Most teams start with support or an assessment and move to managed operations only if they want to stop running the ring.
Yes. AceMQ works on Apache Cassandra in two ways: ad hoc engagements for a defined piece of work, such as a health check, an upgrade or an incident, or an annual partner engagement that covers 24/7 support, proactive reviews and named engineers. Many teams start ad hoc and move to an annual partnership once the first engagement is done.
Every AceMQ proposal is tailored to your requirements: your Apache Cassandra environment, the SLA you need, the hours of cover and the scope of work. Most contracts run $24,000–72,000 a year, depending on the SLA, the scope and how Apache Cassandra is deployed, with aggressive discounts when several technologies share one contract. Request a quote and AceMQ replies within 1 hour.
Let's talk
Reactive cover, proactive reviews, or AceMQ running Apache Cassandra for you on your infrastructure or ours. A senior engineer scopes it with you, and quote requests are answered within 1 hour.
Production incident right now?Email an Apache Cassandra Architect
Send us a message and we'll follow up within 1 hour — or book a free 30-min consultation directly.
305-204-2607info@acemq.comPrefer to talk now? Call us directly or use the consultation tab to find a time that works.