Warning: Some Redis modules are not FOSS any more – how does this affect Nc?

Redis has recently changed the license of some of its modules from Apache-2.0 to Apache-2.0 together with the so called “Commons Clause”.

This new clause at the very least makes those Redis modules not FOSS any more and may cause issues with downstream distributors and hosts. As an example, in Fedora it seems they will not distribute those modules in the future.

I wonder how much these modules are needed or (expected to be) used when running Nextcloud with Redis?

More info:

The most important Redis-relevant bit:

The Redis core is, and always will remain, an open source BSD[-3-Clause] license. Certain modules, however, are now licensed as “Apache 2.0 modified with Commons Clause.”

Affected modules

On a quick look, the following modules seem to be affected (i.e. all currently actively maintained modules):

  • reJSON – Apache-2.0 with Commons Clause
  • RediSearch – Apache-2.0 with Commons Clause
  • RedisGraph – Apache-2.0 with Commons Clause
  • Redis TimeSeries – Apache-2.0 with Commons Clause
  • RedisML – Apache-2.0 with Commons Clause
  • Rebloom – Apache-2.0 with Commons Clause

The following modules are still under the same license as before, but also have not been updated in a while:

  • RedaBlooms – AGPL-3.0-or-later (deprecated by Rebloom)
  • Redex / RedisEx – AGPL-3.0-or-later
  • Redis Secondary Index Module – AGPL-3.0-or-later
  • PyRedis / RedisModulesSDX – MIT
  • CountMinSketch – AGPL-3.0-or-later
  • TopK – AGPL-3.0-or-later
  • Password – AGPL-3.0-or-later
  • GraphicsMagick (the Redis wrapper for it) – AGPL-3.0-or-later
  • pam_auth – AGPL-3.0-or-later
1 Like

Yes, this seems to potentially effect a lot of companies that offer Nextcloud related services with Redis enabled.

IMHO, a move to AGPL (to enforce giving back code changes) would have been better than this :-/

1 Like

Would have been better, for sure. Now all the modules are basically non-FLOSS. But how many of those modules are needed to run Nextcloud anyway?

1 Like

To answer your question none of those modules are required to run Nextcloud. We only use Redis as a key value store no fancy modules just the basic stuff :slight_smile:

4 Likes

Happy to hear that :smiley: