On this page 
CockroachDB distributes a single binary that contains both core and Enterprise features. You can use core features without any license key. However, to use the Enterprise features, you need either a trial or an Enterprise license key.
This page lists Enterprise features. For information on how to obtain and set trial and Enterprise license keys for CockroachDB, see the Licensing FAQs.
| Feature | Description |
|---|---|
| Geo-Partitioning | This feature gives you row-level control of how and where your data is stored to dramatically reduce read and write latencies and assist in meeting regulatory requirements in multi-region deployments. |
| Follower Reads | This feature reduces read latency in multi-region deployments by using the closest replica at the expense of reading slightly historical data. |
BACKUP |
This feature creates backups of your cluster's schema and data that are consistent as of a given timestamp, stored on a service such as AWS S3, Google Cloud Storage, NFS, or HTTP storage. Incremental backups, backups with revision history, locality-aware backups, and encrypted backups require an Enterprise license. Full backups do not require an Enterprise license. |
| Changefeeds into a Configurable Sink | This feature targets an allowlist of tables. For every change, it emits a record to a configurable sink, either Apache Kafka or a cloud-storage sink, for downstream processing such as reporting, caching, or full-text indexing. |
| Node Map | This feature visualizes the geographical configuration of a cluster by plotting node localities on a world map. |
| Locality-Aware Index Selection | Given multiple identical indexes that have different locality constraints using replication zones, the cost-based optimizer will prefer the index that is closest to the gateway node that is planning the query. In multi-region deployments, this can lead to performance improvements due to improved data locality and reduced network traffic. |
| Encryption at Rest | Supplementing CockroachDB's encryption in flight capabilities, this feature provides transparent encryption of a node's data on the local disk. It allows encryption of all files on disk using AES in counter mode, with all key sizes allowed. |
| GSSAPI with Kerberos Authentication | CockroachDB supports the Generic Security Services API (GSSAPI) with Kerberos authentication, which lets you use an external enterprise directory system that supports Kerberos, such as Active Directory. |
| Single Sign-on (SSO) | This feature lets you use an external identity provider for user access to the DB Console in a secure cluster. |
