Eliya
The light build of OpenJDK. Carrier-grade JVM infrastructure with telecom-optimised runtime defaults and enterprise-hardened security, shipped by Asymm Systems.
sdk install java 25.0.2-eliya
Copy
The light build of OpenJDK. Carrier-grade JVM infrastructure with telecom-optimised runtime defaults and enterprise-hardened security, shipped by Asymm Systems.
sdk install java 25.0.2-eliya
Copy
Pre-configured G1GC tuning, 50 ms pause targets, and string deduplication for the request-heavy nature of telecom API gateways and BSS components.
Ships with restricted cipher suites, disabled legacy TLS (SSLv3, TLS 1.0/1.1), and enforced 2048-bit minimum key sizes. Always active — no flags required.
Listed on SDKman alongside Corretto, Zulu, and Temurin. Eliya is Asymm Systems' proof that we operate at the JVM platform-engineering level.
The recommended runtime for Dial, the ODA-native compiler. Optimised for the TMF component workloads Dial generates.
-XX:+UseEliyaDefaults
Eliya replaces complex JVM ergonomics with a unified technical profile. Activating
-XX:+UseEliyaDefaults applies the entire telecom optimisation suite in a single
flag: G1GC with 50 ms pause targets, string deduplication for XML/JSON payloads, compressed
oops, and tiered compilation.
Off by default — TCK compliance preserved. Explicit overrides on the command line always take precedence. See the flags reference for the complete list.
Server-first. Eliya targets the Linux environments where ODA components and telecom workloads actually deploy. Full platform detail on the downloads page.
| Platform | Architecture | Package formats | Status |
|---|---|---|---|
| Linux | x64 | tar.gz, .deb, .rpm, Docker/OCI | Shipping — tar.gz today; .deb, .rpm, Docker landing in 2026 |
| Linux | aarch64 | tar.gz, .deb, .rpm, Docker/OCI | Planned 2026 |
| FreeBSD | x64 | tar.gz | Research Preview 2026 — the only vendor-backed OpenJDK for FreeBSD |
| macOS | aarch64 | tar.gz | Deferred — server-first positioning |
| Windows | x64 | — | Not planned — enterprise demand-gated |
Quarterly security updates aligned with the OpenJDK CPU schedule — third Tuesday of January, April, July, and October. Target: ship within two weeks of upstream.
quarter upstream cpu eliya target release ──────────────────────────────────────────────────────────────── Q2 2026 2026-04-21 ≤ 2026-05-05 25.0.2 ✓ shipped Q3 2026 2026-07-21 ≤ 2026-08-04 25.0.3 · scheduled Q4 2026 2026-10-20 ≤ 2026-11-03 25.0.4 · scheduled Q1 2027 2027-01-19 ≤ 2027-02-02 25.0.5 · scheduled # lts-support-window eliya-25 ├──────●────────────────────────────────────┤ 2026 apr 2030 sep eliya-29 └── planned sep 2027 ─────────────────────>
Full calendar and patch commitment detail on the lifecycle page.
SSLv3, TLS 1.0, TLS 1.1 blocked by default. Minimum 2048-bit RSA/DSA/DH, 224-bit EC. Weak cipher suites (RC4, DES, 3DES, MD5) removed.
Every OpenJDK CPU rebuilt and published within two weeks of upstream. CVE-triggered rebuilds within one week of out-of-cycle patches.
Report security issues to security@asymm.systems. Advisories published on the security page.
Hardening details and advisories on the security page.
Every release ships with SHA256SUMS.txt and a detached GPG signature. Don't trust
a JDK you didn't verify:
sha256sum -c SHA256SUMS.txt && gpg --verify SHA256SUMS.txt.asc
Copy
GPG key fingerprint and full verification walkthrough on the verification guide.
Installation per platform, verification, flags reference, migration, troubleshooting.
Open guidePublic repo on GitHub. GPLv2 with Classpath Exception, same as upstream OpenJDK.
GitHubEliya is expanding beyond the runtime into a curated suite of domain-aware developer tools.
Curated, version-pinned, security-audited bundles of GCViewer, Samurai, async-profiler,
Eclipse MAT, JITWatch, and VisualVM — accessible via the asymm CLI. The
only OpenJDK distribution that ships a real diagnostic suite out of the box.
Thread-dump, GC-log, and heap-dump analysis with Dial-aware annotations of TMF component boundaries. Deployable as SaaS or on-prem.
PHASE 3The only vendor-backed OpenJDK for FreeBSD. A deliberate research build — community- supported, honestly labelled, no CVE SLA. Ships quarterly.
PHASE 1 — LATE 2026GraalVM-based kit optimised for low-latency cold starts in 5G edge and CNF environments.
PHASE 2 — 2027| Feature | Standard OpenJDK | Eliya |
|---|---|---|
| Telecom GC tuning (G1GC, 50 ms pause target) | Manual only | Single flag: -XX:+UseEliyaDefaults |
| Hardened TLS defaults (weak protocols blocked) | Upstream defaults | Always active |
| String deduplication (XML/JSON payloads) | Disabled | Enabled via flag |
asymm --info diagnostic CLI |
— | Included |
| SDKman distribution channel | Varies by vendor | First class |
| Quarterly CPU commitment | Varies by vendor | Within two weeks of upstream |
Eliya is built and maintained by Asymm Systems.