Glossary
This glossary defines common terms used in VeloDB Cloud documentation. Terms are grouped alphabetically. For implementation details, follow the links to the related documentation.
A
Amazon Resource Name (ARN)
An Amazon Resource Name (ARN) is the standardized identifier AWS uses to specify a resource, such as a KMS encryption key. See Warehouse Encryption.
API Key
An API key is a credential for authenticating requests to the VeloDB Cloud management API. Its permissions follow the organization role assigned when it is created, and the key is shown only once. See API Keys.
Aggregate Key Model
The Aggregate Key Model pre-aggregates rows that have the same key columns. It is designed for summary and reporting workloads where queries do not require the original detail rows. See Aggregate Key Model.
ASOF Join
An ASOF join matches each row from one table to the closest earlier or later row in another table based on an ordering column, instead of requiring an exact match. It is useful for time-series data, such as aligning each event with the most recent price. See ASOF Join.
Auto-suspend
Auto-suspend is a cluster setting that automatically suspends a cluster after a period of inactivity to reduce compute costs. The cluster resumes when it next receives a request. See Create a SaaS Warehouse.
Availability Zone
An availability zone is an isolated location within a cloud region where a warehouse or cluster can run. Choosing a zone close to your application can reduce network latency. See Create a SaaS Warehouse.
AWS CloudFormation
AWS CloudFormation is an AWS service that provisions cloud resources from declarative templates. VeloDB Cloud uses a CloudFormation template to create the resources for a BYOC warehouse in the New VPC and Existing VPC deployment options. See Deploy in a New VPC.
AWS Key Management Service (KMS)
AWS Key Management Service (KMS) is an AWS service for creating and managing encryption keys used to protect cloud resources and data. VeloDB Cloud can use a customer-managed KMS key to encrypt warehouse data or EBS volumes. See Warehouse Encryption.
Azure Deployment Stacks
Azure Deployment Stacks is an Azure service that deploys and manages a group of related resources from a template. VeloDB Cloud uses it to provision the resources for a BYOC warehouse on Azure. See How to create BYOC Warehouse on Azure.
Azure Resource Manager
Azure Resource Manager is the Azure deployment and management service that provisions Azure resources from templates and deployment parameters. When you create a BYOC warehouse on Azure, you run a VeloDB-provided template through Azure Resource Manager to create the resources the warehouse needs. See How to create BYOC Warehouse on Azure.
B
Backend (BE)
The backend, abbreviated as BE, is an Apache Doris service that stores data and executes query plan fragments. In a distributed query, the frontend sends work to one or more BEs. See Query Profile Analysis.
Backup Plan
A backup plan is a warehouse configuration that defines a periodic or one-time backup operation. Creating or updating a plan replaces the warehouse's previous Import/Export backup plan. See Backups.
Bucket
A bucket distributes the data in a partition into multiple tablets. The bucketing process helps spread data across nodes and enables parallel reads and writes. See Partitioning and Bucketing.
BYOC
BYOC means bring your own cloud. In a BYOC warehouse, VeloDB Cloud installs and operates the warehouse in cloud resources in your own cloud account. See Create a BYOC Warehouse.
C
Cache Warmup
Cache warmup is a process that proactively loads table data into a compute group's cache before queries access it. See Cache Warmup.
CIDR Block
A CIDR block is a notation that represents a range of IP addresses with an address and prefix length, such as 192.0.2.0/24. See Public Link.
Catalog
A catalog is a metadata and connection definition that lets VeloDB Cloud access tables in an external data source. These catalogs are commonly used to query lakehouse systems and object storage without first copying the data into internal tables. See Catalogs and Lakehouse Catalog Overview.
CDC
CDC means change data capture. It records inserts, updates, and deletes in a source system so that changes can be synchronized incrementally to VeloDB Cloud. See PostgreSQL CDC.
Cloud Shell
Cloud Shell is a browser-based command-line environment provided by Google Cloud for running commands against your Google Cloud resources. When you create a BYOC warehouse on Google Cloud, you run a VeloDB-provided command in Cloud Shell to create the resources the warehouse needs. See How to create BYOC Warehouse on GCP.
Cluster
A cluster is a group of compute resources inside a warehouse. A warehouse can contain multiple clusters, and the clusters share the warehouse's stored data. Cluster and Compute Group refer to the same concept in VeloDB. See Create a Cluster.
Compaction
In Apache Doris, compaction is a background process that merges data versions or files to reduce redundancy and improve storage and query efficiency. See Aggregate Key Model.
Compute Group
A Compute Group is a group of one or more backend (BE) nodes that provides physical workload isolation in a storage-compute separation architecture. Compute Group and Cluster refer to the same concept in VeloDB. Compute Groups share warehouse data in shared storage while using separate compute resources and caches. You can grant users access to a Compute Group, set a default group, and route workloads to a specific group. See Compute Group.
Compute-Storage Separation
With compute-storage separation, compute resources and storage resources can scale and be managed independently. In VeloDB Cloud, stored data is shared by the clusters in a warehouse, while cluster compute and cache can be adjusted for workload needs. See Create a Cluster.
Condition Cache
The Condition Cache stores the result of a filter condition over a segment of data and reuses it when the same filter runs again over unchanged data, so repeated queries that use that filter run faster. See Condition Cache.
Credential Configuration
A credential configuration is a reusable set of IAM roles that VeloDB Cloud uses to access a BYOC warehouse's S3 bucket and to deploy compute resources in your AWS account. You select a credential when creating a Custom Infrastructure warehouse, or create one in advance from the Cloud Resources page in the console. See Credential Configuration.
Custom Infrastructure
Custom Infrastructure is an AWS-only BYOC deployment option in which you provide and manage the warehouse infrastructure, including networking, IAM roles, storage, and optional encryption keys. It is the only deployment option that supports customer-managed encryption keys. See Custom Infrastructure.
Custom Tags
Custom tags are user-defined key-value labels attached to the cloud resources VeloDB Cloud creates for a BYOC warehouse, so you can organize, identify, and manage those resources in your own cloud account. See Custom Tags.
Customer-Managed Key (CMK)
A customer-managed key, abbreviated as CMK, is an encryption key that you own and manage in AWS KMS and provide to VeloDB Cloud to encrypt warehouse data or EBS volumes. VeloDB Cloud uses the key but never stores or exports it, so you keep control of its lifecycle. See Warehouse Encryption.
D
DNS Name
A DNS name is a human-readable network name that resolves to the address of a service or endpoint, allowing clients to connect without using a fixed IP address. See Access VeloDB from Your VPC on AWS.
Duplicate Key Model
The Duplicate Key Model retains every inserted row without deduplication or pre-aggregation. It is the default table model and is suitable for append-only data such as logs, user behavior, and transaction details. See Duplicate Key Model.
E
Endpoint Service
An endpoint service is a cloud-provider resource that exposes a service for private connectivity. In AWS, it lets a consumer VPC connect to a service provider through AWS PrivateLink. See Access VeloDB from Your VPC on AWS.
EBS Encryption
EBS encryption protects the EBS volumes used by warehouse nodes, including cache-related block storage. It is enabled by default using a cloud-provider-managed key. For AWS BYOC warehouses created with the Custom Infrastructure option, you can supply your own KMS key at warehouse creation, and this key cannot be rotated afterward. See EBS encryption.
Encryption Key Configuration
An encryption key configuration is a reusable Cloud Resources configuration that registers one of your AWS KMS keys so a Custom Infrastructure warehouse can use it for Transparent Data Encryption (TDE), EBS encryption, or both. See Encryption Keys Configuration.
External ID
An external ID is a value included in an IAM role's trust policy that restricts cross-account role assumption to the intended party. VeloDB Cloud provides the external ID for the cross-account role used in BYOC deployment, and you add it to the role's trust policy. See Credential Configuration.
External Table
An external table is a table definition that references data outside the warehouse, such as data in an object store or a lakehouse table format. External tables are accessed through a catalog and do not require the data to be loaded into internal tables first. See Lakehouse Overview.
F
Frontend (FE)
The frontend, abbreviated as FE, is an Apache Doris service that receives SQL requests, maintains metadata, creates execution plans, and coordinates query execution. The FE sends execution fragments to backend services. See Query Profile Analysis.
G
Generated Column
A generated column is a table column whose value is computed automatically from an expression over other columns instead of being supplied by an insert or load. See Add a Generated Column.
Google Cloud project
A Google Cloud project is the administrative container that groups resources, configuration, permissions, and billing on Google Cloud. When you create a BYOC warehouse on Google Cloud, you run the deployment command in the project where the warehouse resources are created, which for an existing network is the project that contains your VPC and subnet. See How to create BYOC Warehouse on GCP.
Group Commit
Group Commit is a load-commit mechanism that batches compatible concurrent load requests into shared commits to improve ingestion efficiency. See Group Commit.
H
HNSW
HNSW means hierarchical navigable small world. It is a graph-based approximate nearest neighbor index used for high-performance vector retrieval. See HNSW.
I
IAM Role
An IAM role is an AWS identity with a set of permissions that a service or user can assume to access AWS resources. A BYOC warehouse uses IAM roles so that VeloDB Cloud can access your S3 bucket and deploy compute in your account. See Credential Configuration.
Iceberg Manifest
An Iceberg Manifest is an Apache Iceberg metadata file that records the data files associated with a table snapshot. See Iceberg Catalog.
Internet Gateway
An internet gateway connects a VPC to the public internet so that resources with the appropriate routing can send and receive internet traffic. For a BYOC warehouse in an existing VPC, the subnets need internet access through an internet gateway or a NAT gateway to reach AWS services. See Deploy in an Existing VPC.
Inverted Index
An inverted index maps terms or values to the rows that contain them. It accelerates text search and filtering without scanning every row. See Index Overview.
IP Allowlist
An IP allowlist is a network access policy that permits connections only from specified source IP addresses or CIDR blocks. See Public Link.
IVF
IVF means inverted file. It is an approximate nearest neighbor vector index that groups vectors into clusters so that a search scans only the most relevant clusters, using less memory than HNSW for large-scale vector search. See IVF.
J
JSONB
JSONB is the binary storage format that VeloDB Cloud uses for the JSON data type. It keeps JSON objects and values in a parsed form so that path access and extraction are faster than parsing raw text. See JSON.
L
Lakehouse
A lakehouse combines the open storage and table formats of a data lake with the query and analysis capabilities of a data warehouse. VeloDB Cloud can use catalogs to query data in systems such as Hive, Iceberg, Hudi, and Paimon. See Lakehouse Overview.
Log Explorer
Log Explorer is a VeloDB Cloud console tool for searching and inspecting warehouse logs. It supports keyword, phrase, and SQL searches. See Log Explorer.
LZ4
LZ4 is a lossless compression algorithm optimized for very fast compression and decompression at a moderate compression ratio. VeloDB Cloud can use it for column storage and for Parquet and ORC files written through lakehouse catalogs. See Column Compression.
M
MATCH_ANY
MATCH_ANY is a search operator that matches records containing one or more supplied keywords across the searched fields. See Log Explorer.
MATCH_PHRASE
MATCH_PHRASE is a search operator that matches a sequence of words as a phrase, typically entered within double quotation marks. See Log Explorer.
Materialized View
A materialized view stores the result of a query so that repeated queries can read precomputed data. VeloDB Cloud can use materialized views to accelerate queries and reduce repeated computation. See Materialized Views.
MCP Server
An MCP Server exposes VeloDB Cloud data and query capabilities to AI agents through the Model Context Protocol. The VeloDB Cloud MCP Server supports metadata discovery, SQL queries, and semantic-layer queries. See Get Started with the VeloDB MCP Service.
MERGE INTO
MERGE INTO is a SQL statement that inserts, updates, and deletes rows in a target table in a single operation, based on whether each row matches a source. See MERGE INTO.
MPP
MPP means massively parallel processing. In an MPP architecture, a query is divided into tasks that run in parallel across multiple compute nodes. See Pipeline Execution Engine.
Multi-AZ
A Multi-AZ deployment places a warehouse and its clusters across multiple availability zones so the service keeps running through the loss of a single availability zone within a region. It provides high availability and is distinct from cross-region disaster recovery. See High Availability.
N
NAT Gateway
A NAT gateway lets resources in a private subnet make outbound connections to external services while blocking unsolicited inbound connections. The New VPC deployment option creates a NAT gateway so warehouse resources can reach the AWS services they need. See Deploy in a New VPC.
Network Configuration
A network configuration is a reusable definition of the subnets, security group, and optional VPC endpoint where a BYOC warehouse runs. A network configuration is either Single-AZ or Multi-AZ, and you select one when creating a Custom Infrastructure warehouse. See Network Configuration.
O
Observability
Observability is the practice of monitoring a system through metrics, alerts, audit records, usage information, and other operational data to understand its health and behavior. See Monitoring.
Organization
An organization is the VeloDB Cloud administrative scope that contains members, organization roles, billing settings, warehouses, and clusters. These organization roles control console access and are separate from warehouse SQL roles. See Members.
P
Partition
A partition divides a table into smaller, mutually exclusive subsets based on column values such as time or region. Partition pruning can reduce the data scanned by a query and simplify data lifecycle management. See Partitioning and Bucketing.
Plan
A plan is an organization-level tier that sets the pricing and the set of capabilities available to every warehouse in the organization. VeloDB Cloud offers the Standard and Premium plans, and switching plans applies to the whole organization. See Choose Plans.
PrivateLink
PrivateLink is a private network path for connecting a client or application in your cloud environment to a SaaS warehouse without exposing the connection through the public internet. See Choose a Connection Path.
Public Link
A public link is a public network connection endpoint for a SaaS warehouse. It lets authorized clients connect through the internet using the warehouse connection information. See SaaS Public Link.
Q
Query Audit
Query Audit is a VeloDB Cloud tool for reviewing historical queries, including their details and available filtering dimensions. See Query Audit.
Query Cache
The Query Cache stores the intermediate aggregation result of a query and reuses it when the same aggregation runs again over unchanged data, so repeated aggregate queries run faster. See Query Cache.
Query ID
A Query ID identifies a query so that you can locate and inspect its execution and audit details. Failed and non-query statements do not have a Query ID. See Query Audit.
Query Profile
A query profile records query execution details, including operator metrics, elapsed time, row counts, and memory usage. It helps identify slow operators and other query performance bottlenecks. See Query Profile Analysis.
R
RAG
RAG means retrieval-augmented generation. A RAG application retrieves relevant information from a knowledge base and provides it as context to a generative AI model. VeloDB Cloud supports RAG workflows with vector search, text search, and SQL analytics. See RAG.
Recursive Common Table Expression (Recursive CTE)
A recursive common table expression is a common table expression that refers to its own result, which lets a query process hierarchical or graph-shaped data through the WITH RECURSIVE syntax. See Common Table Expression.
Region
A region is a cloud-provider geographic location where resources such as networks, subnets, and warehouses are deployed. For a BYOC warehouse, the region you select in VeloDB Cloud must match the region of the cloud resources it uses, especially the network, or the deployment cannot complete. See Create a BYOC Warehouse.
Resource Group
A resource group is an Azure container that organizes related cloud resources that share a lifecycle and access control. When you create a BYOC warehouse on Azure, you deploy the resource stack into a resource group whose region must match the warehouse region. See How to create BYOC Warehouse on Azure.
Routine Load
With routine load, a continuously running import job consumes streaming data, such as records from Kafka, and loads it into a VeloDB Cloud table. See Routine Load.
S
S3 Bucket
An S3 bucket is an Amazon S3 storage container. A BYOC warehouse stores its data in an S3 bucket in your AWS account, and we recommend a dedicated bucket for each warehouse. See Credential Configuration.
S3 Gateway Endpoint
An S3 gateway endpoint is an AWS VPC gateway endpoint that gives instances in a VPC private connectivity to Amazon S3, avoiding the public internet and reducing NAT-gateway charges when S3 traffic would otherwise use a NAT gateway. See Network Configuration.
SaaS
SaaS means software as a service. In a SaaS warehouse, VeloDB Cloud provides and manages the underlying cloud resources and services, so you can use the warehouse without managing its infrastructure. See Create a SaaS Warehouse.
SAML Single Sign-On (SSO)
SAML single sign-on lets organization members sign in to the VeloDB Cloud console through your identity provider using the SAML standard. It is a Premium capability and can be disabled at any time. See SAML Single Sign-On.
Security Group
A security group is a virtual firewall that controls inbound and outbound network traffic for resources in a cloud network. A BYOC warehouse uses security groups to control traffic to warehouse resources and VPC interface endpoints. See Cloud Resource Preparation.
Semantic Model
A semantic model describes the business meaning of tables, entities, dimensions, and measures in a structured format. The VeloDB Cloud MCP Server uses a committed semantic model to answer metric queries with consistent business definitions. See Semantic Model Concepts.
Session Management
Session Management is a VeloDB Cloud facility for viewing and managing active warehouse sessions, including their queries, execution time, users, and resource usage. See Session Management.
SQL Editor
SQL Editor is a VeloDB Cloud console tool for writing and executing SQL statements against a selected warehouse. See SQL Editor.
Stream Load
The stream load method is an HTTP-based data import method for loading local files or request bodies directly into a VeloDB Cloud table. It is suitable for small batches and real-time or near-real-time ingestion. See Stream Load.
Streaming Job
A Streaming Job is a continuously running job that synchronizes data from a source system into VeloDB Cloud, including snapshot and incremental CDC processing. See Continuous Load Overview.
Subnet
A subnet is a subdivision of a VPC or VNet that provides a specific network range for deploying cloud resources. For a BYOC warehouse deployed in an existing network, the subnet must be in the same region as the warehouse. See Cloud Resource Preparation.
Symmetric Encryption Key
A symmetric encryption key is a cryptographic key used for both encrypting and decrypting data. When configuring a customer-managed key, create a symmetric key in AWS KMS so VeloDB Cloud can encrypt and decrypt warehouse data. See Warehouse Encryption.
T
Table Name Case Sensitivity
Table Name Case Sensitivity is a warehouse creation setting that determines whether table names are treated as case-sensitive. It cannot be changed after the warehouse is created. See Create a SaaS Warehouse.
Tablet
A tablet is a physical data shard created by bucketing a table partition. These tablets are distributed across backend nodes so that data can be stored and processed in parallel. See Partitioning and Bucketing.
Terraform
Terraform is an infrastructure-as-code tool that uses declarative configuration files to provision and manage cloud resources and services. See Terraform Provider.
TLS
TLS, or Transport Layer Security, is a cryptographic protocol that encrypts network connections and authenticates the connected service. See Access VeloDB from Your VPC on AWS.
Transparent Data Encryption (TDE)
Transparent Data Encryption, abbreviated as TDE, is an optional warehouse-layer encryption that encrypts warehouse service data before it is written to storage and decrypts it when the data is read. It is available for AWS warehouses and can use either a VeloDB-managed key or a customer-managed key. See Transparent Data Encryption.
U
UDAF
UDAF means user-defined aggregate function. It is a user-defined function that combines multiple input rows into a single aggregate result, such as a custom statistical calculation. See Python User-Defined Function.
UDF
UDF means user-defined function. It is a function that you implement to add custom processing logic that can be called from SQL, written in a language such as Python or Java. See Python User-Defined Function.
UDTF
UDTF means user-defined table function. It is a user-defined function that returns a set of rows and columns that a query can read like a table. See Python User-Defined Function.
Unique Key Model
The Unique Key Model keeps one latest row for each set of key columns. Inserting a row with an existing key updates that row, making this model suitable for upserts and frequently changing dimension data. See Unique Key Model.
V
Variant
The Variant type is a semi-structured column type that stores values with varying or nested structure, so objects and arrays can be queried without defining a fixed schema for every field. See VARIANT.
Vector Index
A vector index accelerates similarity search over vector data. VeloDB Cloud supports approximate nearest neighbor indexes such as HNSW and IVF for vector retrieval. See Vector Index Overview.
Virtual Cluster
A virtual cluster pairs two physical clusters as active and standby across availability zones. VeloDB Cloud can automatically fail over to the standby cluster when the active cluster's availability zone fails. See Virtual Cluster.
VNet
A Virtual Network (VNet) is Azure's isolated virtual network. It is the Azure equivalent of a VPC, and the VeloDB Cloud console labels the network option VPC on every platform. See How to create BYOC Warehouse on Azure.
VPC
A virtual private cloud (VPC) is an isolated virtual network in a cloud provider account where a BYOC warehouse and its supporting resources run. On Azure the equivalent resource is a Virtual Network (VNet). See Network Configuration.
VPC Endpoint
A VPC endpoint provides private connectivity from resources in a VPC to a supported service without sending traffic over the public internet. A BYOC warehouse can use a VPC endpoint to reach the VeloDB Cloud service over PrivateLink. See Network Configuration.
W
Warehouse
A warehouse is the primary resource and SQL scope in VeloDB Cloud. It contains clusters, stored data, connection settings, and warehouse-level users and roles. See Warehouse Settings.
Warehouse Users and Roles
Warehouse Users and Roles are the warehouse-level accounts and SQL permissions used by applications, BI tools, and SQL clients. They are separate from organization members and organization roles used to access the VeloDB Cloud console. See Warehouse Users and Roles.
Window Function
A window function calculates a value across a set of related rows while keeping each row in the result. The set of related rows is defined by a window specification. See Window Function.
Workload Policy
A Workload Policy is a workload-management rule that evaluates query or user conditions and backend runtime metrics to apply actions such as canceling a query. See Workload Policy.
Z
Zstandard (zstd)
Zstandard, abbreviated as zstd, is a lossless compression algorithm that provides a high compression ratio with fast decompression. VeloDB Cloud uses it as the default column compression and accepts zstd-compressed payloads for Stream Load. See Column Compression.