Dante Cloud
🐉 Dante Cloud 国内首个支持阻塞式和响应式服务并行的微服务云原生基座。采用领域驱动模型(DDD)设计思想，以「高质量代码、低安全漏洞」为核心，高度模块化和组件化设计，支持IoT等物联网设备认证，满足国家三级等保要求、支持接口国密数字信封加解密等系列安全体系的多租户微服务解决方案。独创的“一套代码实现微服务和单体两种架构灵活切换”的企业级微服务平台。🔝🔝 点个star 持续关注更新！
Last verified:
What is Dante Cloud?
Dante Cloud is an enterprise-grade microservice architecture and service capability development platform based on Domain-Driven Design (DDD) principles. It is China's first microservice platform supporting both blocking and reactive service parallel execution. The platform fully embraces Spring Authorization Server and is built on the OAuth2.1 protocol, providing a mature, comprehensive multi-tenant microservice solution with high-quality code and low security vulnerabilities.
Key features include support for smart TV and IoT device authentication, compliance with China's National Level 3 Security Protection requirements, and interface-level national cryptographic (SM2/SM4) digital envelope encryption/decryption. The platform offers service discovery, configuration management, circuit breaking, rate limiting, degradation, monitoring, multi-level caching, distributed transactions, and workflow capabilities. It uses modern technologies including Spring Boot 3, Spring Cloud, Spring Cloud Alibaba, Nacos, Sentinel, Skywalking, and Vue.
Dante Cloud uniquely supports
Dante Cloud pricing
Pricing model: Freemium
Dante Cloud is an open-source project released under Apache-2.0 license, completely free to use. The platform is available on GitHub (dromara/dante-cloud) and Gitee (dromara/dante-cloud) repositories with no paid tiers. All features including microservice architecture, OAuth2.1 authentication, multi-tenant support, national cryptographic encryption, and IoT device authentication are included in the free open-source version. The project is part of the Dromara open-source organization, which maintains projects as free and open-source without commercial licensing fees.
Dante Cloud pros
- China's first microservice platform supporting blocking and reactive service parallel execution
- One codebase supports both microservice and monolithic architecture flexible switching
- Fully embraces Spring Authorization Server based on OAuth2.1 protocol
- Supports smart TV and IoT device authentication
- Complies with China National Level 3 Security Protection (等保三级) requirements
- Native support for national cryptographic SM2/SM4 digital envelope encryption
- Based on Domain-Driven Design (DDD) principles for clean architecture
- Highly modular and componentized design for easy maintenance
- Supports Spring Cloud Tencent, Spring Cloud Alibaba, and native Spring Cloud
- Dynamic permission configuration without @PreAuthorize annotations needed
- Multi-tenant architecture with Database and Schema modes supported
- Supports GraalVM native image compilation
- Complete microservice features: discovery, config, circuit breaking, rate limiting, monitoring
- OAuth2.1 supports custom password and social credentials authentication modes
- Supports both JWT Token and Opaque Token formats with dynamic switching
- Complete OpenID Connect (OIDC) protocol support with switchable modes
- Frontend uses pnpm monorepo for better code organization and reusability
Dante Cloud cons
- Documentation primarily in Chinese, limited English resources
- Requires familiarity with Spring ecosystem and microservice concepts
- Complex setup for full microservice infrastructure (Nacos, Sentinel, etc.)
- Learning curve for DDD-based architecture design patterns
- National cryptographic features mainly relevant for Chinese market compliance
- Active development with frequent version updates may cause instability
- Limited third-party integration examples compared to mature frameworks
- Community primarily Chinese-based with slower international support response
Frequently asked questions about Dante Cloud
What is Dante Cloud?
Dante Cloud is an enterprise-grade microservice architecture and service capability development platform. It is China's first microservice platform supporting both blocking and reactive service parallel execution, built on Domain-Driven Design (DDD) principles, fully embracing Spring Authorization Server and OAuth2.1 protocol. It provides a multi-tenant microservice solution with support for smart TV and IoT device authentication, compliance with National Level 3 Security Protection requirements, and national cryptographic encryption.
What does 'one codebase, two architectures' mean?
This is Dante Cloud's unique feature where a single codebase can flexibly switch between microservice and monolithic architecture. This helps enterprises quickly build projects with monolithic architecture in early stages without complex microservice infrastructure, enables easier local development for developers, and allows smooth migration to microservices when needed without code changes.
What authentication modes does Dante Cloud support?
Dante Cloud supports multiple authentication modes: Authorization Code PKCE, custom Resource Ownership Password mode for OAuth2 backward compatibility, custom Social Credentials mode for SMS verification codes, WeChat mini-programs, and third-party login via JustAuth, Client Credentials with Scope-based permission verification, and full OpenID Connect (OIDC) protocol support with switchable OIDC/traditional OAuth2 modes.
What microservice infrastructure options are available?
Dante Cloud supports three microservice infrastructure options that can be switched: Spring Cloud Tencent (Tencent's microservice全家桶), Spring Cloud Alibaba (Alibaba's microservice全家桶 including Nacos, Sentinel), and native Spring Cloud microservice全家桶. Teams can choose based on their actual needs without being limited to one ecosystem.
How does multi-tenant support work?
Dante Cloud implements multi-tenant architecture based on Spring Authorization Server and Spring Data JPA, supporting both Database mode (separate database per tenant) and Schema mode (separate schema per tenant in same database). This replaces Spring Authorization Server's original JDBC storage limitations with more practical and flexible multi-tenant design.
What security features does Dante Cloud include?
Dante Cloud includes comprehensive security features: compliance with China National Level 3 Security Protection (等保三级), national cryptographic SM2 (asymmetric) and SM4 (symmetric) digital envelope encryption for interfaces, anti-brushing protection, high-defense against XSS and SQL injection, OAuth2 Client verification, custom Session with dynamic key generation encryption transmission, and 'one person one code' mechanism for dynamic encrypted data transmission.
What token formats does Dante Cloud support?
Dante Cloud supports both JWT Token and Opaque Token formats with dynamic switching capability. Beyond Spring Authorization Server's default JWT Token encryption/validation, it supports custom certificate-based JWT Token encryption/validation that can be dynamically modified through configuration. Opaque Token format reduces JWT Token capture and parsing risks, with configurable default token format through parameters.
What technologies does Dante Cloud use?
Dante Cloud uses Spring Boot 3.0+, Spring Cloud 2022.0+, Spring Authorization Server 1.1+, Spring Security 6.1+, Spring Cloud Tencent 1.11+, Spring Cloud Alibaba 2022+, Nacos 2.2+, Sentinel, Skywalking, Vue for frontend, pnpm monorepo for frontend engineering, and supports GraalVM native image compilation.
How does dynamic permission configuration work?
Dante Cloud provides highly flexible dynamic permission configuration without requiring @PreAuthorize annotations in code. Method-level permission control is achieved entirely through configuration using antMatchers and similar methods. This uses distributed authorization to avoid Gateway unified authorization pressure and duplicate authorization issues, with dynamic permission modification without code changes.
Who should use Dante Cloud?
Dante Cloud is designed for enterprise application development and internet application development teams. It accommodates traditional project microservice-ization while meeting internet application needs for rapid iteration. It's ideal for teams wanting to learn emerging microservice technologies, those needing compliance with Chinese security standards, projects requiring IoT/smart TV authentication, and teams wanting flexible architecture choices between monolithic and microservice.