Enforcing Per-Tenant WMS Request Quotas with Nginx
This guide configures a per-tenant request budget for WMS traffic at the Nginx edge, so that one agency's mapping application cannot consume the…
Read the guide
Open-Source Geospatial Portal
Deployment & Scaling
Deploy, scale, secure, and maintain open-source geospatial platforms.
Running an open-source geospatial portal in production is a systems problem, not a single install. This is a practical, operations-first reference for the teams who keep GeoNode, MapProxy, TileServer GL and the wider OGC stack online — GIS administrators, open-source maintainers, platform engineers, and government technology teams.
Every guide is written for the realities of scale: zero-trust security boundaries, per-tenant rate limits and quotas, secrets that can actually be rotated, backup and disaster recovery that has been rehearsed, capacity planning for tile and feature workloads, and metadata pipelines whose quality is measured rather than assumed. The material is organised into three areas, each drilling from architectural overview down to copy-ready configuration.
Start with a section below, jump to something recently published, or go straight to a deep-dive. Code blocks are validated and copy-ready, every page carries hand-drawn diagrams that follow the light or dark theme you choose, and the whole site works offline once installed.
Start here
Flagship deep-dives — copy-ready configuration for the problems teams hit first in production.
Issuing Scoped API Keys for OGC Clients
This guide sets up scoped, revocable API keys for the machine consumers of a portal — harvesters, embedded maps, partner integrations — so that rate…
Read the guideAutoscaling Tile Renderers with Custom Metrics
This guide configures a renderer fleet to scale on signals that move when readers are affected — in-flight requests and cache-miss ratio — rather than…
Read the guideForecasting Tile Storage Growth
This guide turns tile-archive growth from a surprise on a bill into arithmetic anyone can do before a cartography decision is made. It belongs to…
Read the guideAutomating OAI-PMH Harvesting
A step-by-step procedure for building a fault-tolerant, incremental OAI-PMH harvester that synchronizes metadata from distributed government agency…
Read the guideMapping ISO 19115 to Dublin Core for CSW
A crosswalk and transform for exposing rich ISO 19115/19139 source records as the flat Dublin Core csw:Record that a CSW GetRecords response must return.
Read the guideRecently published
The newest topics and guides across the three areas.
API Gateway, Rate Limiting & Quota Enforcement for OGC Services
A geospatial portal has no natural upper bound on what a single caller can ask it to do. One client can request a hundred tiles per second across a…
Read the guideSecrets Management for Geospatial Platforms
A geospatial portal holds an unusual number of credentials for its size. The catalogue reaches a spatial database; the rendering engine reaches the…
Read the guideAutoscaling & Capacity Planning for Geospatial Workloads
Capacity for a geospatial portal is not one number, and autoscaling it on one signal produces a platform that adds renderers while the database is the…
Read the guideBackup & Disaster Recovery for Spatial Platforms
Backing up a geospatial portal is not the same problem as backing up a database, and treating it as one produces a recovery that restores the data and…
Read the guideMetadata Quality Assurance & Record Scoring
A catalogue's value is bounded by the quality of the records in it, and quality in this context is not an abstraction: a record without an extent…
Read the guideEnforcing Per-Tenant WMS Request Quotas with Nginx
This guide configures a per-tenant request budget for WMS traffic at the Nginx edge, so that one agency's mapping application cannot consume the…
Read the guideIssuing Scoped API Keys for OGC Clients
This guide sets up scoped, revocable API keys for the machine consumers of a portal — harvesters, embedded maps, partner integrations — so that rate…
Read the guideShielding GeoServer from Oversized BBOX Requests
This guide bounds OGC requests by their shape rather than their rate: an extent too large for the requested zoom, an image size far beyond any display,…
Read the guideExplore the content
Core Portal Architecture & Security Boundaries
Deploying and scaling an open-source geospatial portal demands rigorous infrastructure design, strict service isolation, and continuous security…
- API Gateway, Rate Limiting & Quota Enforcement for OGC Services
- Fallback Routing Strategies for Tile Servers
- Operational Architecture Comparison
- Implementing RBAC for Multi-Tenant GIS Portals
- Keycloak vs Dex for OIDC Federation in Geospatial Portals
- Secrets Management for Geospatial Platforms
- Security Boundary Mapping for OGC Services
Infrastructure Orchestration & Config Management
Deploying and scaling an open-source geospatial portal demands a declarative, infrastructure-as-code discipline that governs every tier from the public…
- Autoscaling & Capacity Planning for Geospatial Workloads
- Backup & Disaster Recovery for Spatial Platforms
- Containerizing TileServer GL for High Availability
- Environment Parity in Geospatial CI Pipelines
- Helm vs Kustomize for GeoNode Deployments
- Kubernetes StatefulSets for PostGIS Databases
- MapProxy vs TileServer GL for Tile Delivery
- Monitoring and Observability for Geospatial Portals
- Reverse Proxy Configuration for WMS/WFS
Metadata Catalog Automation & Ingestion Workflows
Within the wider open-source geospatial portal operations program, metadata catalog automation is the discoverability control plane: the subsystem that…
- Automated Metadata Ingestion via OAI-PMH
- CSW Catalog Schema Mapping & Validation
- Incremental Metadata Harvesting and Change Detection
- Metadata Quality Assurance & Record Scoring
- Scaling Celery Pipelines for Bulk Metadata Ingestion
- Search Indexing Optimization with Elasticsearch
- Spatial Data Versioning and Rollback Workflows
- Version Tagging & Sync for Spatial Datasets