Must have
Hard prerequisites
No universal server-size prerequisite is published. Check the exact release and configuration before you deploy.
Application hosting
Hosting Keycloak
Keycloak provides identity and access management. Production deployments need a supported Java runtime, a production database, TLS, and a configured hostname; hardware sizing depends on load.
- Min vCPU
- Depends on workload
- Min memory
- Depends on workload
- Min storage
- Depends on workload
Recommended
Documented guidance
No further general recommendations are published for this version.
Capacity depends on your workload
Keycloak does not publish one universal host size. Account volume, login rate, sessions, and clustering determine capacity; use load-specific sizing.
We only compare what providers publish. A RAM figure alone can't confirm compatibility or production capacity.
Deploy with
Supported paths
The host must provide
Runtime
- Java
- Supported OpenJDK 17, 21, or 25 in current documentation
- Database
- Production-grade supported database; development file database is unsuitable for production
- Transport
- TLS and configured public hostname for production mode
Storage
Persistent data
Persistent database storage, logs, backups, and optional cluster data need sizing for the actual identity workload. A universal disk minimum is not documented.
Step by step
Keycloak deployment outline
-
Choose supported runtime and database
Check the Keycloak supported-configurations guide for the intended release and database version.
Official instructions -
Configure production transport
Set the public hostname, TLS, a production database, and appropriate reverse-proxy boundaries before starting in production mode.
Official instructions -
Validate readiness and recovery
Use the documented readiness endpoint, restrict administration, and test database backup recovery.
Official instructions
Security
Before you go public
- Use TLS for all identity traffic.
- Restrict administrative endpoints and protect bootstrap credentials.
- Use a production database and test recovery before handling real accounts.
Cost
Beyond the server price
- Budget for database, backups, TLS termination, monitoring, and capacity for peak login traffic.
- High availability adds multiple instances and shared infrastructure.
Matching plans
Plans with published evidence
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Compatibility unclear from published plan data
Meeting documented runtime prerequisites does not prove production capacity. Traffic, workloads, software configuration, and shared host limits are not measured here.
No published runtime facts let us confirm a match.
Want the full monthly bill? Use the hosting cost calculator. It keeps unknown charges visible.