Size S - Sonatype Nexus Repository - AWS Cloud-Native Reference Architecture
Size S - Sonatype Nexus Repository - AWS Cloud-Native Reference Architecture
This Sonatype Nexus Repository size small reference architecture describes the minimum supported infrastructure specifications for deploying a single Sonatype Nexus Repository instance with an external PostgreSQL database in AWS using cloud-native services. It has been validated to support a baseline request load of 600 requests per second (36,000 requests per minute) with spikes of 900–1,200 requests per second without failing.
This architecture is appropriate for an entry-level production Nexus Repository deployment and is suitable for small to medium teams operating development and CI/CD workloads.
Infrastructure Specifications
This reference architecture defines a single-node Nexus Repository deployment supported by external infrastructure services.
The architecture includes the following layers:
- Compute Layer – Nexus Repository application runtime
- Database Layer – External PostgreSQL database
- Storage Layer – S3 object storage
- Network Layer – Optional load balancing and connectivity
Compute Layer (Nexus Repository)
The compute layer comprises the Nexus Repository application and processes all repository requests, including artifact uploads, downloads, and metadata operations.
This layer meets the following specifications:
Single Nexus Repository node:
- 8 vCPU
- 32 GiB RAM
JVM configuration:
- Xms=16G
- Xmx=16G
- MaxDirectMemorySize=8G
Example AWS instance types:
- m8g.2xlarge
- m7g.2xlarge
Network throughput:
- ≥15 Gbps
The Nexus Repository node connects to an external PostgreSQL database and external blob storage. Local storage is used only for operational data and temporary files.
Recommended local storage configuration:
- Local NVMe SSD
- At least 300 GiB
- Minimum 3000 IOPS
Database Layer (PostgreSQL)
This architecture uses an external PostgreSQL database to store repository metadata and configuration data.
This layer meets the following specifications:
- AWS RDS PostgreSQL instance
- Size db.r8g.large
- 2 vCPU
- 16 GiB RAM
Storage Layer (S3 Object Storage)
Binary artifacts and repository assets are stored in an external Amazon S3 object storage.
This architecture uses a single S3 bucket.
As a best practice, you should also leverage the pre-signed URL feature so that artifact downloads are served directly from S3 rather than passing through the Nexus Repository node.
Network and Security
At this scale, Nexus Repository may be accessed directly through the application node or through a load balancing layer. The provided Terraform for this size does provision a load balancer.
Apply standard network security practices, including the following:
- Restrict inbound access to the repository service ports
- Secure administrative access to the host instance
- Isolate repository infrastructure within a controlled network environment
Limitations
This architecture provides a production-capable deployment but has several limitations due to its single-node design.
- The deployment consists of a single Nexus Repository node and does not provide application-level high availability.
- Node failure or maintenance events may require downtime.
- Automatic failover is not available without introducing additional application nodes.
Deploying this Architecture
You can quickly deploy this reference architecture using Sonatype's Nexus Repository Terraform configuration for an AWS deployments. This automates the creation and configuration of all required AWS resources, including networking, compute, storage, and security components.
For full deployment details, see the README that accompanies the provided Terraform.