ARCHITECTURE·DEPLOYMENT TOPOLOGIES

ONE BINARY.
EVERY TOPOLOGY.

Same ~36 MB binary ships every deployment pattern. What varies by topology is the node count, the replication model, and the RTO/RPO commitment. The engine is identical across all four.

PICK A TOPOLOGY·LIVE DIAGRAM + SLO TABLE
SINGLE-NODE · POC · DEV · CI · EDGE SITES ES 8.13 CLIENTS · :9200 your existing Elasticsearch clients · drop-in · no code changes XERJ · 1 BINARY · ~36 MB WAL → memtable → segment → mmap cache FTS · VECTOR · COLUMNS · AGENT MEMORY lock-free readers · jemalloc · no JVM
NODES
1
RTO
Single point — restore from snapshot
RPO
WAL fsync (sub-second)
AVAILABILITY
Best effort
USE WHEN
POC · dev · CI · edge site · air-gapped lab · single-tenant small corpus
HA CLUSTER · STANDARD ENTERPRISE PRODUCTION · ONE REGION clients · load balancer · :9200 PRIMARY leader · writes · quorum sync replication sync replication REPLICA · 1 read · failover candidate REPLICA · 2 read · failover candidate gossip-based health · automatic replica promotion · bounded-latency failover
NODES
3 · one region
RTO
< 30 s · automatic replica promotion
RPO
0 (synchronous replication)
AVAILABILITY
99.95 %
USE WHEN
Standard production · typical enterprise footprint · 1–5 B docs
MULTI-REGION · ACTIVE-ACTIVE · GLOBAL · RESILIENT · ROADMAP Q3 REGION A · 3-NODE HA XERJ primary replica 1 replica 2 regional clients REGION B · 3-NODE HA XERJ primary replica 1 replica 2 regional clients async replication DNS FAILOVER health-checked regional VIPs · both regions serve traffic · eventual consistency
NODES
3 + 3 · two regions
RTO
< 2 min · DNS failover
RPO
Sub-second (async)
AVAILABILITY
99.99 %
USE WHEN
Global enterprise · > 10 B docs · region-of-choice compliance · disaster recovery scope
SEALED ENCLAVE · NO INTERNET · TARGET: GOV · DEFENSE · FIN XERJ NODE · STANDARD BINARY · LEXICAL BASELINE loopback listener · authenticated API optional local model staged by operator archive + adjacent .sha256 integrity check no runtime telemetry · update · license calls OPERATOR-STAGED RELEASE archive + adjacent .sha256 verify before transfer optional local model files inbound only
NODES
1 · loopback by default
RTO / RPO
Operator-defined
EGRESS
No runtime telemetry · update · license calls; Console may attempt external Google Fonts
UPDATES
Operator-staged archive · adjacent .sha256 integrity only
USE WHEN
Classified enclaves · SCIFs · regulated on-prem with no internet · sovereign cloud
BYOC KUBERNETES · CLOUD-NATIVE · CUSTOMER-MANAGED · EKS · GKE · AKS · OPENSHIFT HELM CHART + CRDs Kubernetes Operator (roadmap Q2) · Terraform module (roadmap Q2) XERJ STATEFULSET · PER DATA-PLANE ROLE pod-level audit · liveness + readiness probes · rolling restart HPA on CPU + ingest-queue depth · sharded ingest (roadmap Q3) STORAGE PVC · fast-SSD StorageClass for segments WAL local PV when available · low-latency fsync
DEPLOY
Helm chart · Terraform module · K8s operator (roadmap Q2)
STORAGE
StatefulSet · fast-SSD PVC · local PV for WAL where available
SCALING
HPA on CPU + ingest-queue depth · sharded ingest (roadmap Q3)
TARGETS
EKS · GKE · AKS · OpenShift · self-managed k8s
USE WHEN
Existing k8s platform · GitOps discipline · need HPA + pod-level audit
DATA FLOW·ONE BINARY · ONE WAL · ONE SEGMENT CACHE

INGEST TO
QUERY.

INGEST PIPELINE · ONE BINARY · ONE WAL · ONE SEGMENT CACHE INGEST ES _bulk · OTLP · JSON · syslog (roadmap) WAL · APPEND-ONLY LZ4 · CRC32C · lock-free frame builder · fsync before ACK MEMTABLE time-partitioned · columnar · delta-ts · in-memory index flush SEGMENT · MMAP-CACHED FTS + VECTOR + COLUMNS + STORED + TOMBSTONES + POINTS QUERY parser → planner → executor → RRF merge → hits + explain-plan

lock-free readers · ArcSwap segment view · DashMap version map · flush never blocks reads · reads never block writes

CROSS-CUTTING·INHERITED BY EVERY TOPOLOGY

SAME CONTROLS.
EVERY TOPOLOGY.

BACKUP
Incremental · encrypted · restorable per segment. xerj snapshot create|list|restore. Targets: S3 / GCS / Azure Blob / local.
HEALTH
/healthz liveness · /readyz holds until WAL replay completes. Rolling restart fleet-safe by default.
METRICS
Prometheus on /metrics. 13 counters/histograms/gauges across ingest · query · flush · cache. Per-instance registry.
CONFIG
Single TOML · XERJ_CONFIG env · hot-reload via SIGHUP on non-structural changes. Schema validated on load.
UPGRADES
Rolling restart · segment + WAL formats forward-compatible across minor versions. One-minor rollback window.
SEE THE SECURITY POSTURE →