MongoDB 4.2 is now GA: Ready for your Production Apps

Eliot Horowitz
August 13, 2019 | Updated: August 14, 2019
#Developer#MongoDB 4.2

At MongoDB World in June, I announced the MongoDB Server 4.2 release candidate. Since then, a lot of you have been putting it through its paces. Over 100,000 instances have been spun up – either by getting the binaries from our Download Center or by provisioning a cluster in the MongoDB Atlas cloud service. Now I’m excited to announce that 4.2 is Generally Available (GA) and ready for production deployments.

MongoDB

MongoDB 4.2 is already 100,000 instances strong

Eliot Horowitz, MongoDB CTO and Co-Founder

Key highlights of MongoDB 4.2 include:

  • Distributed Transactions extending MongoDB’s multi-document ACID guarantees from replica sets to sharded clusters, enabling you to serve an ever broader range of use cases. You can see Distributed Transactions in action by watching the demo during my MongoDB World keynote.
  • On-Demand Materialized Views using the new $merge operator. Caching the output of a large aggregation in a collection is a common pattern, and the new $merge operator lets you update those results efficiently instead of completely recalculating them. Take a look at this blog to get started.
  • Wildcard Indexes make it easy and natural to model highly heterogeneous collections like product catalogs, without sacrificing great index support. You simply define a filter that automatically indexes all matching fields, sub-documents, and arrays in a collection. Watch the demo to learn more.
  • MongoDB Query Language enhancements such as more expressive updates, new math operators, and expanded regex support. update and findAndModify commands can now reference existing fields, and incorporate aggregation pipelines for even more expressivity. Check out this blog to see examples of how all of this helps you write more powerful queries with less code.
  • Retryable Reads and Writes, reducing the complexity of writing code that handles transient cluster failures.

Client-side Field Level Encryption (FLE) was also announced as part of MongoDB 4.2 and is now available in beta. With FLE you can selectively protect sensitive fields within documents, each encrypted with its own key and decrypted seamlessly on the client. At this time, driver support for FLE is at beta status - so, while you can evaluate the feature, FLE should not be used in production for now.

MongoDB is the general-purpose database for modern applications, bringing together the power of the document model, intelligent distributed systems, and the ability to run it anywhere, from laptops to mainframes, in public and private clouds. If you want to take MongoDB 4.2 for a spin, the fastest and easiest way is to launch a cluster on MongoDB Atlas, available in over 60 regions on AWS, Azure, and GCP. You can get started with $200 of free credits by using the code MONGODB4DOT2, until the end of 2019.

Alternatively you can download and run 4.2 on your own infrastructure. With the the MongoDB Enterprise Operator for Kubernetes, you can deploy and manage MongoDB through Kubernetes with a consistent experience from on-premises to cloud.

To learn more about MongoDB 4.2, here is a list of additional resources:

Meanwhile, we are already working on the next major MongoDB server release. Thanks to all of you who have evaluated the Release Candidate, and we look forward to working with you in building the best data platform for modern apps.

← Previous

London's MongoDB.local has fun on the agenda too

It was packed in 2018 As well as all the great MongoDB technology coverage scheduled for London's MongoDB.local — see MongoDB is coming to London for more details of that — we can promise you a great time at this year's London event. It's not just about learning what’s new in MongoDB, but also being able to recharge quickly ready for the next slab of prime information. Our latest slabs of brain food include Sessions on IOT best practices for MongoDB: Learn how your data modeling can be the key to a fast, powerful IOT implementation. Using Kubernetes and MongoDB together efficiently: Automate your operations and keep MongoDB at the heart of your ops story. Streaming data with MongoDB: Handling large volumes of data? Thats a job for streaming. A methodology for modeling data in MongoDB: How do you move to a document model without bringing the weaknesses of relational data models with you? Machine learning with MongoDB: A database is a modelers best friend; find out how MongoDB can help your ML plans. Tips and Tricks for indexing your MongoDB: Having the right indexes for the job makes MongoDB fly. And a look at backing up in the public cloud: The best backups are the ones you have. Learn how to face the challenge of cloud backup. The Early Bird deals are long gone but as you're a reader of the blog, we have a special discount code for you - NIGHTINGALE35 . Register for MongoDB.local London with that code and get the super early bird discount. That link will also take you to the complete session and speaker line up if you want to be sure you're going to the most informative and educational MongoDB event in the UK this year. Lessons were learned (about MongoDB) Recharge your brain If the main talks don't tickle your inner nerd, check out the Shard-N track, a delicious deep dive into more challenging territory - Dive into a Stitch Tutorial, go hands-on with Realm Mobile, find out how Field Level Encryption works to protect data or learn about BI Connector's ability to transform SQL queries into MongoDB queries. If you want to play, but want to stay in the MongoDB theme, check out one of the huge hits of MongoDB World, the IoT-enabled slot car racing. Find out how the track was made smart so that the work of keeping score happens in MongoDB. And drive a few laps yourself and try to take the racing top spot. Games to refresh and challenge Recharge your game If slot cars aren't your thing and you just want to power up a bit, we're covering the floors with arcade machines so you can relax with some of your favorite classic games. It's a great way to recharge between the packed talks and burn off some energy. Whatever your gaming choice, we'll have something for you. Everyone is catered for Recharge yourself And for when you are ready for that physical recharge, from breakfast and throughout the day, we'll have eight food trucks and spots around MongoDB.local London, ready to sate your desires from barbecue and pie, to Poke and Thai. You'll be able to check out Eat Chay, Komex Kitchen, MyPie, Prairie Fire BBQ, Grilling Greek, Yaay Yaay, Nazari or Lords of Poke, you'll Feel fuller faster. A shared thought over a drink Go Happy For that imbibe at the end of the day, you'll find yourself welcome at the Drink Reception/MongoDB Happy Hour. Refreshments of all sorts will be available including the softest of sodas. Cold Sweet moments Go Sweet If you just desire the sweet sweet sugar rush to power your way through the day, we've got you covered too. The Nitro Ice Cream Parlour will be ready to sate your icy sweet needs and for the real MongoDB fans, the Instant Logopops will leaf you amazed by their tastiness! Women & Trans Coders Lounge attendees Go Inclusive For the first time, the Women and Trans coders lounge is open at MongoDB.local London. The space is designed to amplify the voices of women, non-binary and trans people within our engineering community, and includes sessions, open to all attendees, on career growth and building community. Kitting up, MongoDB style Get Swagged up And it wouldn't be a MongoDB event without a chance to walk away with a leaf-enhanced wearable and, rest assured, there will be swag, with a very MongoDB theme. So there you have it - MongoDB.local London - an event packed with databases, learning, fun, food and more. Sign up today to make sure you don't miss out. We have a special discount code for blog readers - NIGHTINGALE35 . Register for MongoDB.local London with that code and get the super early bird discount. That link will also take you to the complete session and speaker line up if you want to be sure you're going to the most informative and educational MongoDB event in the UK this year.

August 12, 2019
Next →

Security in Government Solutions: Why Secure By Default is Essential

Data security in government agencies is table stakes at this point. Everyone knows it’s essential, both for compliance and data protection purposes. However, most government agencies are working with solutions that require frequent security patches or built-on tools to protect their data. Today, the federal government is pushing its agencies to move to modernize their solutions and improve their security posture. For example, the DHS and Cybersecurity and Infrastructure Security Agency’s recently issued technical rule for modernization of the Protected Critical Information Infrastructure program – a program that provides legal protections for cyber and physical infrastructure information submitted to DHS. “The PCII Program is essential to CISA’s ability to gather information about risks facing critical infrastructure,” said Dr. David Mussington, Executive Assistant Director for Infrastructure Security. “This technical rule modernizes and clarifies important aspects of the Program, making it easier for our partners to share information with DHS. These revisions further demonstrate our commitment to ensuring that sensitive, proprietary information shared with CISA remains secure and protected.” So how can government agencies modernize their data infrastructure and find solutions that not only protect data but also power innovation? Let’s look into a few different strategies. 1. Why secure by default is key Secure by default means that any piece of software uses default security settings that are configured for the highest possible security out of the box. CISA Director Jen Easterly has addressed how using solutions that are secure by default is critical for any organization. “We have to have [multi-factor authentication] by default. We can't charge extra for security logging and [single sign-on],” Easterly said . “We need to ensure that we're coming together to really protect the technology ecosystem instead of putting the burden on those least able to defend themselves.” “The American people have accepted the fact that they’re constantly going to have to update their software,” she said. “The burden is placed on you as the user and that’s what we have to collectively stop.” Easterly is right. Secure-by-design solutions are vital to the success of data protection. The expectation should alway be that solutions have built-in, not bolt-on security features. One approach that’s gaining traction both in the public and private sectors is zero trust environments. In a zero trust environment, the perimeter is assumed to have been breached. There are no trusted users, and no user or device gains trust simply because of its physical or network location. Every user, device, and connection must be continually verified and audited. As the creator of zero trust, security expert John Kindervag, summed it up: “Never trust, always verify.” For government agencies, that means the underlying database must be secure by default, and it needs to limit users’ opportunities to make it less secure. 2. Security isn't just on-prem anymore; cloud is secure, too Cloud can be a scary word for public sector organizations. Trusting your sensitive data to the cloud might feel risky for those who handle some of the country’s most sensitive data. But, cloud providers are stepping up to meet the security needs of government agencies. There is no need to fear the cloud anymore. Government agencies and other public sector organizations nationwide are navigating cloud modernization through the lens of increased cybersecurity requirements outlined in the 2021 Executive Order on Improving the Nation’s Cybersecurity . “The Federal Government must adopt security best practices; advance toward Zero Trust Architecture; accelerate movement to secure cloud services, including Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS); centralize and streamline access to cybersecurity data to drive analytics for identifying and managing cybersecurity risks; and invest in both technology and personnel to match these modernization goals.” Also, the major cloud providers are well established, purpose-built options for government users. AWS GovCloud, for example, is more than a decade old and was “ the first cloud provider to build cloud infrastructure specifically designed to meet U.S. government security and compliance needs.” This push by the federal government toward cloud modernization and increased cybersecurity will be a catalyst in upcoming years for rapid cloud adoption and greater dependence on cloud solutions designed specifically for government users. 3. Security features purpose-built for goverment needs are essential Government agencies are held to a higher standard than those in the private sector. From data used in sometimes life-or-death missions to data for students building their futures in educational institutions (and everything in between), security has real-world consequences. Today, security is non-negotiable and like we explored above, it’s especially crucial that public sector entities have built-in security measures to keep data protected. So, what built-in features should you look for? Network isolation and access It’s critical that your data and underlying systems are fully isolated from other organizations using the same cloud provider. Database resources should be associated with a user group, which is contained in its own Virtual Private Cloud (VPC), and access should be granted by IP access lists, VPC peering, or private endpoints. Encyption in flight, at rest, and in use Encryption should be the standard. For example, when using MongoDB Atlas, all network traffic is encrypted using Transport Layer Security (TLS). Encryption for data at rest is automated using encrypted storage volumes. Customers can use field-level encryption to encrypt sensitive workloads which enables you to encrypt data in your application before you send it over the network to MongoDB clusters. Users can bring their own encryption keys for an additional level of control. Granular database auditing Granular database auditing allows administrators to answer detailed questions about systems activity by tracking all commands against the database. This ensures you always know who has access to what data and how they’re using it. Multi-factor authentication User credentials should always be stored using industry-standard and audited one-way hashing mechanisms, with multi-factor authentication options including SMS, voice call, a multi-factor app, or a multi-factor device, ensuring only approved users have access to your data. MongoDB Atlas for Government: Purpose-built for public sector As we’ve discussed, solutions that are purpose-built with built-in security are ideal for government agencies, and choosing the right one is the best way to keep sensitive data protected. MongoDB Atlas for Government on AWS GovCloud recently secured its FedRAMP Moderate authorization thanks to these security measures built into the solution. FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. To ensure the utmost levels of security, Atlas for Government is an independent, dedicated environment for the U.S. public sector, as well as ISVs looking to build U.S. public sector offerings. Public Sector organizations carry a heavy burden when it comes to keeping data protected. However, with the right data platform underpinning modern applications – a platform with built-in security features – progress doesn’t mean you have to compromise on security. Want to learn more about data protection best practices for public sector organizations? Attend our upcoming webinar on April 12 for deeper insight .

March 28, 2023