GeoServer 3 Crowdfunding

GeoServer is at a critical turning point and it needs your help to continue its journey as the leading free and open-source platform for geospatial data. With GeoServer 3 we are transforming the way you interact with geospatial data—making it faster, more intuitive, and more secure.

GeoServer 3 Crowdfunding

This major upgrade, led by Camptocamp, GeoSolutions, and GeoCat, will deliver:

  • Future-Proof Performance: A modernized core for compatibility with the latest data management and deployment technologies.

  • Enhanced Image Processing: Faster, smoother handling of spatial imagery and larger datasets.

  • Improved Security and Compliance: Meet regulatory standards and protect your data with the latest security enhancements.

  • Streamlined User Experience: Easier navigation, integrating new services, and empowering users at all levels.

The scope of this work is beyond routine updates or maintenance since the transition to GeoServer 3 requires extensive redevelopment of core systems as well as implementing modern security practices and also thorough testing and validation across all GeoServer extensions.

The consortium members - Camptocamp, GeoSolutions, and GeoCat- have a long-standing history of supporting and contributing to GeoServer and are fully committed to the success of this migration. However, this is a major effort that cannot be completed without community support.

By supporting this crowdfunding campaign, you are investing in the future of GeoServer and helping to sustain the innovative, open-source geospatial community.

GeoServer 3 is supported by the following organisation:

Individual donations: Abhijit Gujar, Hennessy Becerra, Ivana Ivanova, John Bryant, Jason Horning, Peter Smythe, Sajjadul Islam, Sebastiano Meier, Stefan Overkamp.

Why GeoServer 3

As the digital landscape evolves, staying up-to-date with the latest technology is no longer optional — it’s essential. GeoServer 3 is being developed to address crucial challenges and ensure that GeoServer remains a reliable and secure platform for the future. Several key factors make this upgrade critical right now:

  • Regulatory Compliance: New regulations, including the CISA known exploited vulnerabilities list, demand that systems be fully patched to ensure operational readiness. Without the latest updates, GeoServer risks falling short of these standards, which is why migrating to Spring 6 is essential.

  • End of Support for Spring 5: By January 2025, Spring 5 will no longer receive security updates, leaving systems vulnerable. As GeoServer operates as middleware between web services and essential data layers, this upgrade to Spring 6 is crucial to maintaining secure connections and protecting data from potential breaches.

  • Security Enhancements: Upgrading to Spring 6 enables OAuth2 protocols for secure authentication, especially critical for large-scale or enterprise-level use. These advancements will help organizations meet evolving security requirements and protect sensitive geospatial data.

  • Switching to JDK 17: This upgrade also marks GeoServer’s transition to JDK 17, which brings improvements in performance, security, and long-term support. Keeping GeoServer aligned with the latest Java versions ensures compatibility with modern deployment technologies Tomcat 10 and Jakarta and future-proofs the platform.

  • Improved Image Processing: GeoServer 3 will replace the outdated Java Advanced Imaging (JAI) library with the more modern and flexible ImageN toolkit. This switch will significantly enhance image processing capabilities, enabling faster handling of large spatial datasets and improving Java compatibility.

  • Future-Proof Technology Stack: With the migration to Spring 6 and the shift to JDK 17, GeoServer 3 ensures long-term viability. Addressing the entire GeoServer stack, including enterprise components GeoFence and Cloud Native GeoServer, allows organizations to seamlessly adopt modern infrastructure and deployment models without compromising performance or security.

With this work, GeoServer is moving into a more secure, high-performing future—ready to tackle the evolving needs of the geospatial community. For more information on the work to be performed and its phases, please visit the project plan document.

Crowdfunding structure

The crowdfunding will be structured in two phases to ensure success:

  1. Commitment Phase: Sponsors and community members will pledge their financial support during this phase, but no funds will be collected. The goal is to reach a predefined target that covers the full scope of work necessary for the migration.

  2. Funding Activation: Once the target is reached, the crowdfunding will be activated, and sponsors will be invoiced for their pledged amounts. This ensures there is enough financial backing to complete the migration without risking underfunding.

This structured approach ensures that GeoServer 3 is fully funded before any work begins, preventing the risk of an incomplete migration. This guarantees that the project will have the necessary resources to be completed in its entirety.

This structure forms a multi-party agreement:

  • Consortium: Three companies are forming a consortium (Camptocamp, GeoSolutions, and GeoCat) providing expertise, a proven track record, and capacity. These companies are also taking on responsibility for project management, estimating, and importantly risk.

  • Supporters: We are seeking organisations to pledge their support via funding during the commitment phase. No funds will be collected until we reach the target established below for the full scope of work necessary.

  • Community: We ask that our community step forward to match the contributions above with both financial contributions and in-kind development and testing.

Crowdfunding target

The financial target is ambitious, 550,000.00 €. CamptoCamp, GeoCat and GeoSolutions have generously stepped up and will provide 50,000.00€ each, which means the current funding goal starts at 400,000.00 €. Here below you will find the live updated situation as far as committed funding is concerned.

The Crowdfunding target is reached and the GeoServer 3 project is now underway.

How to participate

If you are ready to support GeoServer 3, please, fill this online form or contact us at gs3-funding@googlegroups.com to express your interest and pledge your support.

Thank you, together we can secure the future of GeoServer for years to come.

FAQ

This section addresses common questions that have been asked by sponsors and community members.

Q: Why not a kickstarter or go fund me?

In our experience, GeoServer tends to be used by organisations rather than individuals.

Individuals are encouraged to donate via GitHub and as outlined on the GeoServer Sponsorship page.

Q: What work actually needs to be done?

The project steering committee shared 2024 roadmap describing the technical challenges.

The project plan outlines the following milestones:

  • Milestone 1: Preparation

    This activity is targeted for the bulk of the work, doing everything possible ahead of time before the migration to spring-framework-6. Major updates to Wicket user interface library, replacing the image processing engine, and updating to Java 17 can all be performed ahead of time.

  • Milestone 2: Migration

    The migration to spring-framework-6 is a carefully coordinated activity across nine codebases. This places a “code-freeze” on development while updates are performed.

  • Milestone 3: Delivery

    With the core projects updated and the end of the “code-freeze” integration testing with downstream applications and community modules can be performed.

GeoServer 3 Milestones

Q: My organization procurement cannot respond to a crowdfunding campaign; can we fund a specific activity?

Yes, we have the flexibility to write your invoice against a specific deliverable outlined in the project plan.

The items in Milestone 1 Preparation are independent deliverables suitable to be funded by an individual contract:

  • The Milestone 1 deliverables are required to start the migration to spring-framework 6.
    • Spring Framework Preparation / Java 17 build
    • Wicket 9 Content Security Policy / Wicket 9 Dialog
    • OAuth 2 Security modules
    • ImageN / JAI-Ext
  • Each item accomplishes a specific goal with a clear deliverable that can be pursued immediately.

For organizations operating with an annual budget you may wish to fund a specific GeoServer 3 Milestone 1 or Milestone 2 activity.

  • These deliverables will be accomplished within the context of the entire GeoServer 3 project.
  • We understand that funding a specific activity may be easier for your procurement process

Q: Can my developers work in-kind on GeoServer 3?

Yes of course, the project steering committee shared roadmap challenges with an invitation for in-kind contributions at the start 2024.

We are recommending in-kind contributions help out with Milestone 1 activities:

  • Andreas Watermeyer (ICT Digital Solutions) completed the spring-security 5.8 update for GeoServer 2.26.0, and outlined the replacement OAuth2 OIDC module.

    The OAuth2 rewrite continues, and a new community module will be available for GeoServer 2.28.0. This work will need public testing in different operational environments.

  • Brad Hards started the Wicket 8 update, which progressed into a Wicket 9 update for GeoServer 2.26.0. Thanks to David Blasby (GeoCat) helping write Wicket 9 Dialog replacement. The Wicket CSP Header restrictions were enabled for GeoServer 2.27.0.

    This activity looks ready for Wicket 10 update in Milestone 2.

  • The key ingredient here is the ability to focus for an extended period of time with access to individuals to test and review the results.

    Your team may also look at helping out in Milestone 3, picking up additional community modules not covered in the GeoServer 3 project plan.

If you are in a position to devote in-kind resources to the project, and be scheduled for work alongside the GeoServer 3 team, please contact gs3-funding@googlegroups.com to offer your assistance and be listed as a supporting organization.

Q: What technologies need to be updated?

The following updates are required for spring-framework-6, each update requiring several others to occur at the same time.

GeoServer 3 Updates

Q: Is there a deadline for GeoServer 3?

Initial guidance was that Spring Framework 5.3 would be supported until December 2024. However that timeline was revised and support ended in August 2024.

As a result GeoServer team is running with some risk, and any security vulnerabilities reported for Spring Framework 5.3 will need to be mitigated rather than addressed.

This activity was subject to pledges being acquired in Phase 1, and is now underway. With funding secured in 2025 Q2, our project plan is broken down by GeoServer release cadence:

Milestone 1: Preparation

  • GeoServer 2.26.0: September 2024

    • Wicket 9: Migration
    • Wicket 9: Dialog
    • Spring Security 5.8

  • GeoServer 2.27.0: March 2025

    • Wicket 9: CSP
    • OGC API - Features

  • GeoServer 2.28.0: September 2025

    • Java 17 and Build Support
    • ImageN + JAI-Ext
    • OAuth2 Security Modules - available for testing

Milestone 2: Migration

  • GeoServer 3.0 Nightly Builds: December 2025

    • Spring Framework 6
    • Jakarata EE
    • Jetty 12
    • Wicket 10
    • Spring Security 6.3
    • OGCAPI Dispatcher
    • MapFish Print

Milestone 2: Delivery

  • GeoServer 3.0: March 2026

    • Environment: Tomcat 10
    • User interface: UX Refactor, GeoServer 3 theme
    • Integrations: GeoFence, GeoServer ACL
    • Downstream: MapStore, GeoNode, Cloud GeoServer
    • Community Modules: See project plan for community modules identified as of interest to supporting organizations

Q: Does this kind of expense happen often?

Yes, significant costs can and do occur, however it is unusual for several such activities to happen concurrently.

Prior activities of this nature:

Maintaining project sponsorship is important to enable the GeoServer PSC to proactively identify and address roadmap challenges. We have seen an increase in the cadence of Java releases and increased expectations around the handling of security vulnerabilities affecting the project.

As outlined in the 2024 roadmap the project steering committee is being more transparent with sponsorship and costs.

Q: Will Cloud Native GeoServer be included?

Yes.

MapStore, GeoNode and Cloud Native GeoServer have been prioritized by initial sponsors and included in Milestone 3.

Q: OGCAPI Features is mentioned, is this included in the GeoServer 3 crowdfunding activity?

Camptocamp hosted a codesprint in early November 2024 on this topic and OGCAPI Features was ready in time for GeoServer 2.27.0.

The transition from OGC Open Web Services (WMS, WFS, WCS) to OGCAPI services will take place over the next several years. Adjusting the GeoServer user interface with this transition is included as part of the GeoServer 3 project plan.

Q: Will a specific community module be included?

Check the Project Plan for list of community modules included in scope of work.

The project plan lists a number of community modules that are required by downstream projects MapStore, GeoNode and Cloud Native GeoServer.