[{"data":1,"prerenderedAt":117},["ShallowReactive",2],{"seo-verification":3,"blog-bsl-sspl-licences-self-hosting-en":6},{"google":4,"bing":5},"EycwPY2XMyTkVzas3n1ygeNJFGAH513qrMjfDljzsMQ","",{"id":7,"slug":8,"title":9,"excerpt":10,"readTime":11,"views":12,"isPinned":13,"publishedAt":14,"category":15,"categories":20,"featuredImage":22,"bgImage":23,"posterImage":24,"relatedSolution":22,"intro":25,"sections":26,"ctaTitle":69,"ctaBody":70,"ctaButton":71,"ctaUrl":72,"relatedPosts":73},219,"bsl-sspl-licences-self-hosting","BSL and SSPL: the traps of source-available licenses","BSL, SSPL, AGPLv3: understand what each license allows or forbids before adding a tool to your stack.",7,0,false,"2026-08-04T00:00:00+00:00",{"id":16,"name":17,"slug":18,"color":19,"icon":18},5,"Comparison","comparatif","bg-info\u002F10 text-info",[21],{"id":16,"name":17,"slug":18,"color":19,"icon":18},null,"\u002Fblog\u002Fcovers\u002Fbg.svg","\u002Fblog\u002Fcovers\u002Fbsl-sspl-licences-self-hosting-poster.svg","Open source licenses long seemed like a matter for distant lawyers. Since 2021, several major projects — Redis, Elasticsearch, Terraform — have changed their license overnight, creating new obligations for the teams running them. Understanding these models early saves you from handling a compliance issue under pressure.",[27,31,39,42,63,66],{"type":28,"title":29,"body":30},"h2","Why license changes matter even for self-hosters","A license change applies to new versions of the software, not retroactively to what you have already deployed. But staying on an older version means forgoing security patches. The real risk is not an immediate lawsuit: it is the technical debt that accumulates while you wait for legal clarification. Even purely internal usage can be affected if your organization bills services to third parties or exposes the tool via an external API.",{"type":32,"title":33,"items":34},"ul","The four situations where a license creates a real constraint",[35,36,37,38],"**Reselling a competing cloud service** — the BSL explicitly prohibits offering third parties a commercial service that competes with the original product; hosting Terraform for your own infrastructure remains allowed, offering it as a managed platform to your customers does not.","**Exposing a third-party service under SSPL** — if you build a service consumed by external users that relies on an SSPL component, you are required to publish your entire software stack, including your provisioning and orchestration scripts.","**Integrating into a SaaS product under AGPLv3** — any publisher that embeds an AGPLv3 library into a network-accessible application must distribute the complete source code of that application; for an internal self-hoster the constraint is light, for a SaaS publisher it is structural.","**Upgrading to a version under a new license** — moving from Redis 7.2 (BSD) to Redis 8 (tri-license) or from Terraform 1.5 (MPL-2.0) to 1.6 (BSL) changes your rights; automating updates without checking the license changelog exposes your organization to an unconsented transition.",{"type":28,"title":40,"body":41},"BSL, SSPL and AGPLv3: what each model allows and forbids","The BSL is a time-limited license: the code is source-available today and will become open source — often Apache 2.0 — after a fixed delay, four years at HashiCorp. Internal use is free, direct competition is blocked. The SSPL goes further: exposing the tool as a service to third parties triggers a full-stack publication obligation. AGPLv3, the only one of the three approved by the OSI, is a network copyleft: it protects end-users' freedoms without prohibiting commercial use, but requires opening the source code of any containing application once it serves users over a network.",{"type":43,"title":44,"headers":45,"rows":49},"comparison","BSL vs SSPL vs AGPLv3 vs BSD at a glance",[46,47,48],"License","Internal self-hosting","SaaS use (resale)",[50,54,57,60],[51,52,53],"BSL","Allowed with no conditions","Prohibited if the service competes with the original vendor",[55,52,56],"SSPL","Allowed if you publish your entire software stack",[58,52,59],"AGPLv3","Allowed if you distribute your application's source code",[61,52,62],"BSD \u002F MIT \u002F Apache 2.0","Allowed with no publication requirement",{"type":64,"body":65},"tip","Redis added AGPLv3 as a licensing option in March 2026, joining Elastic which did the same in September 2024. For a self-hoster, choosing the AGPLv3 variant of Redis 8 is now possible without resorting to the Valkey fork — even though Valkey remains under BSD-3-Clause and is the default package on Ubuntu 24.04 and Debian 13.",{"type":28,"title":67,"body":68},"Habits to build before adding a tool to your stack","Before adding a component to your infrastructure, check its license in the repository and in the changelog of recent major versions. Distinguish your actual usage: internal, exposed to partners, or sold to customers. Subscribe to GitHub releases for critical projects to detect a license change before the next automatic update. If a permissively licensed fork exists and is actively maintained — OpenTofu, Valkey, OpenSearch — evaluate it as a sustainable alternative.","Deploy your open source tools on infrastructure you control","ServOrbit gives you dedicated VPS for your projects, with no restrictions on the software you run on them. You keep full control over your stack and your data.","Discover ServOrbit VPS","\u002Fsolutions\u002Fdeveloppeurs",[74,89,104],{"id":75,"slug":76,"title":77,"excerpt":78,"readTime":11,"views":12,"isPinned":13,"publishedAt":79,"category":80,"categories":86,"featuredImage":22,"bgImage":23,"posterImage":88,"relatedSolution":22},217,"valkey-vs-redis-migration-2026","Valkey vs Redis in 2026: Comparison and Migration Guide","Redis returned to an OSI-compatible license (AGPLv3) in March 2026, but Valkey 9.1 is now the default cache package on Ubuntu, Debian and Fedora, delivering +8% ops\u002Fsec and -22% P99 latency. Here's how to choose and migrate in 4 steps.","2026-08-03T00:00:00+00:00",{"id":81,"name":82,"slug":83,"color":84,"icon":85},6,"Databases","bases-de-donnees","bg-teal-500\u002F10 text-teal-400","database",[87],{"id":81,"name":82,"slug":83,"color":84,"icon":85},"\u002Fblog\u002Fcovers\u002Fvalkey-vs-redis-migration-2026-poster.svg",{"id":90,"slug":91,"title":92,"excerpt":93,"readTime":11,"views":12,"isPinned":13,"publishedAt":94,"category":95,"categories":101,"featuredImage":22,"bgImage":23,"posterImage":103,"relatedSolution":22},202,"securiser-chaine-approvisionnement-npm-ci","Securing Your npm CI Supply Chain After AsyncAPI","Lockfile policy, hash verification, SLSA provenance and automated SCA: how to harden your CI pipeline after the AsyncAPI incident of July 2026.","2026-08-01T00:00:00+00:00",{"id":96,"name":97,"slug":98,"color":99,"icon":100},4,"Development","developpement","bg-warning\u002F10 text-warning","dev",[102],{"id":96,"name":97,"slug":98,"color":99,"icon":100},"\u002Fblog\u002Fcovers\u002Fsecuriser-chaine-approvisionnement-npm-ci-poster.svg",{"id":105,"slug":106,"title":107,"excerpt":108,"readTime":11,"views":12,"isPinned":13,"publishedAt":94,"category":109,"categories":114,"featuredImage":22,"bgImage":23,"posterImage":116,"relatedSolution":22},207,"k3s-kubernetes-leger-vps","K3s: lightweight Kubernetes on your VPS","Run a CNCF-certified Kubernetes cluster on a modest VPS with K3s, the Rancher\u002FSUSE distribution that fits in 60 MB.",{"id":110,"name":111,"slug":112,"color":113,"icon":112},3,"Deployment","deploiement","bg-success\u002F10 text-success",[115],{"id":110,"name":111,"slug":112,"color":113,"icon":112},"\u002Fblog\u002Fcovers\u002Fk3s-kubernetes-leger-vps-poster.svg",1785852561787]