
dstack
dstack is an open-source orchestration layer for running AI workloads across GPU clouds, Kubernetes, virtual machines, and bare-metal clusters.
What dstack is
dstack is an open-source orchestration layer for running AI workloads across GPU clouds, Kubernetes, virtual machines, and bare-metal clusters. It provisions infrastructure and schedules jobs, with support for auto-scaling, port forwarding, and ingress. YAML configurations define fleets, development environments, tasks, services, presets, and volumes. Supported accelerators include NVIDIA, AMD, TPU, and Tenstorrent; documented backends include AWS, Azure, GCP, Kubernetes, GPU cloud providers, remote SSH hosts, and experimental Slurm. Tasks can use frameworks such as accelerate, torchrun, Ray, and Spark. The CLI and HTTP API provide ways to manage resources and connect integrations, and the server can run on a laptop or another environment that can access the clusters. Services can expose inference endpoints through gateways with HTTPS, custom domains, auto-scaling, and rate limits. The self-hosted open-source plan is free. Server data and project secrets are plaintext by default, unless administrators configure AES-256-GCM encryption. TPU support is limited to single-host instances of up to eight cores.
Good
- Free, self-hosted open-source plan.
- Supports NVIDIA, AMD, TPU, and Tenstorrent accelerators.
- Works with Kubernetes and cloud backends.
- Inference gateways offer HTTPS and auto-scaling.
- CLI and HTTP API are available.
Watch out
- Server data is plaintext by default.
- Secrets are plaintext unless server encryption is configured.
- TPUs are limited to single-host instances of up to eight cores.
- GPU Marketplace usage requires prepaid credits.
Who it suits
dstack suits teams orchestrating AI workloads across different accelerator and infrastructure environments. It is also suited to users who want to configure workloads with YAML and manage resources through a CLI or HTTP API.
Verdict
dstack brings workload configuration, infrastructure provisioning, and job scheduling together across varied compute environments. Consider its default plaintext storage and single-host TPU limit when evaluating it.
Plans and prices
From dstack's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| dstack OSS | Free | Open-source orchestration stack; self-hosted |
| dstack Sky GPU Marketplace | Priced on request | On-demand and spot GPU compute; listed GPU-hour price ranges; prepaid credits · GPU usage is pay-as-you-go; prices are per GPU-hour and vary by GPU and provider. |
The facts
Each one read from dstack's own pages, with the date it was checked.
What it does
- Accelerators
- dstack supports NVIDIA, AMD, TPU, and Tenstorrent accelerators out of the box.checked 30 Sep 2026
- API
- dstack offers an HTTP API for functionality not available in the CLI and for integrations that need to call the server directly.checked 30 Sep 2026
- Commercial offering
- dstack Factory extends the open-source product with advanced multi-tenancy, usage metering, billing automation, and optimized inference presets for frontier open models.checked 30 Sep 2026
- Deployment
- The server can run on a laptop or another environment with access to the cloud and on-prem clusters being used.checked 30 Sep 2026
- Deployment limit
- The TPU guide says dstack currently supports single-host TPUs only, with a maximum of eight cores per TPU instance.checked 30 Sep 2026
- Framework compatibility
- The maker describes dstack as compatible with any hardware, open-source tools, and frameworks.checked 30 Sep 2026
- Frameworks
- The tasks guide names accelerate, torchrun, Ray, and Spark as distributed frameworks that work with dstack.checked 30 Sep 2026
- Hosted pricing
- dstack Sky Marketplace pricing is dynamic by provider, shown in the console before provisioning, and billed against prepaid credits.checked 30 Sep 2026
- Inference
- Services can deploy model inference as endpoints, and gateways support HTTPS, auto-scaling, custom domains, and rate limits.checked 30 Sep 2026
- Integrations
- Listed backend types include AWS, Azure, GCP, Kubernetes, Slurm, Runpod, Nebius, Lambda, and other cloud providers.checked 30 Sep 2026
- Interfaces
- Users can manage resources with the dstack CLI or call its HTTP API.checked 30 Sep 2026
- Provisioning
- dstack manages infrastructure provisioning and job scheduling, including auto-scaling, port forwarding, and ingress.checked 30 Sep 2026
- Purpose
- dstack is an open-source orchestration layer for AI workloads on heterogeneous accelerators, including GPU clouds, Kubernetes, VMs, and bare-metal clusters.checked 30 Sep 2026
- Secrets
- Secrets are project-scoped, managed by project admins, and stored in plaintext by default unless server encryption is configured.checked 30 Sep 2026
- Security
- The service configuration supports authorization, which is enabled by default for services.checked 30 Sep 2026
- Service endpoints
- Services can be published with HTTPS, custom domains, auto-scaling, and rate limits through gateways.checked 30 Sep 2026
- Support
- The documentation directs users to report issues on GitHub and ask questions in the dstack Discord server.checked 30 Sep 2026
- What it does
- dstack is an open-source orchestration layer for AI workloads across GPU clouds, Kubernetes, VMs, and bare-metal clusters.checked 30 Sep 2026
- Workloads
- It supports fleets, dev environments, tasks, services, experimental presets, and volumes through YAML configurations.checked 30 Sep 2026
- Workload types
- It supports fleets, development environments, tasks, services, presets, and volumes configured with YAML files.checked 30 Sep 2026
The company
- Company
- The terms identify dstack Inc. as a Delaware corporation with offices in Dover, Delaware, United States.checked 30 Sep 2026
Money
- Cost model
- dstack Sky does not currently charge for BYOC mode; GPU Marketplace usage is prepaid and resource prices are shown in the console before provisioning.checked 30 Sep 2026
Where it runs
- Platforms
- The CLI runs on Linux, macOS, and Windows; the server can be installed on those systems, with Windows using WSL 2.checked 30 Sep 2026
The full review of dstack
Overview
dstack is an open-source orchestration layer for AI workloads, aimed at teams that need to provision and schedule jobs across cloud and on-premises compute. Its YAML-based workload model and broad accelerator support make it a strong fit for heterogeneous AI infrastructure, though its default plaintext storage and limited TPU configuration warrant attention.
The server can run on a laptop or another environment with access to the cloud and on-premises clusters in use. Workloads include fleets, development environments, tasks, services, presets and volumes. Users manage resources through the CLI or HTTP API, and Kubernetes is supported. dstack also supports GPU utilization metrics, but not quota controls, which may matter to teams that need enforced resource limits.
Listed platforms are API, Linux, macOS, self-hosted, web and Windows. This is infrastructure software, not a general-purpose desktop or mobile app.
Key features
Provisioning and workload scheduling
dstack combines infrastructure provisioning with job scheduling across GPU clouds, Kubernetes, virtual machines and bare-metal clusters. Auto-scaling, port forwarding and ingress help cover both scheduled work and services. YAML configuration gives teams a consistent way to define varied workloads, but teams that depend on quota enforcement will need another way to manage resource limits.
Accelerators and frameworks
NVIDIA, AMD, TPU and Tenstorrent accelerators are supported out of the box. The task guidance names Accelerate, torchrun, Ray and Spark for distributed workloads, and the maker describes compatibility with hardware, open-source tools and frameworks generally. TPU support has a concrete boundary: only single-host TPUs are supported, up to eight cores per instance.
Services, gateways and interfaces
Services can publish inference endpoints through gateways with HTTPS, custom domains, auto-scaling and rate limits. Users can manage resources through the CLI; the HTTP API also covers functionality beyond the CLI and integrations that need to call the server directly. Documented backends include AWS, Azure, GCP, Kubernetes, multiple GPU cloud providers and remote SSH hosts, with Slurm marked experimental.
Security and support
Server data, including project-scoped secrets managed by project admins, is stored in plaintext by default. Administrators can configure AES-256-GCM encryption for stored data; teams handling sensitive credentials should make that configuration part of deployment rather than assume encryption is on by default. Support channels are GitHub issues and the dstack Discord server.
Pricing
dstack OSS
free. The open-source orchestration stack is self-hosted. It suits teams prepared to operate the server and their infrastructure themselves; there is no paid tier to unlock the core open-source stack in this plan.
dstack Sky GPU Marketplace
Custom pricing. GPU usage is pay-as-you-go, charged per GPU-hour at rates that vary by provider and GPU. Prices are shown in the console before provisioning, and usage is billed against prepaid credits. The plan offers on-demand and spot GPU compute, so costs depend on the resources chosen rather than a fixed subscription price.
dstack Sky does not currently charge for BYOC mode. dstack Factory is the commercial offering, extending the open-source product with advanced multi-tenancy, usage metering, billing automation and optimized inference presets for frontier open models.
Platforms
dstack is listed for API, Linux, macOS, self-hosted, web and Windows. Its hybrid deployment model lets the server run in an environment that can reach the cloud and on-premises clusters being used.
Who it's for
dstack is best suited to AI teams that need one orchestration layer for jobs and services spanning different accelerators and compute environments. Its YAML workloads, API and documented cloud, Kubernetes and SSH backends suit teams integrating varied infrastructure. It is less suitable for organizations that require built-in quota controls, or for TPU users whose workloads require multi-host configurations or more than eight cores per instance.
Pros and cons
- Pros: One workload model covers fleets, development environments, tasks, services, presets and volumes across varied compute environments.
- Pros: Out-of-the-box support for four accelerator families and named distributed frameworks gives AI teams room to match workloads to available hardware.
- Pros: Service gateways include HTTPS, custom domains, auto-scaling and rate limits for publishing inference endpoints.
- Pros: The open-source stack is free, and Sky BYOC mode has no current charge.
- Cons: Plaintext is the default for server data and secrets, so administrators must configure AES-256-GCM encryption when stored-data protection is required.
- Cons: There are no quota controls, limiting its fit for teams that need the orchestrator to enforce resource allocations.
- Cons: TPU support stops at single-host instances with a maximum of eight cores.
- Cons: GPU Marketplace prices vary by provider and GPU, and usage requires prepaid credits, so spend depends on the selected compute.
Alternatives
For a broader comparison, see GPU Cluster Management Software.
- HTCondor is another free option for readers comparing cluster-management software across the same listed platforms.
- ClearML is worth considering if a freemium option and a self-hosted version described as 100% open source on GitHub better match your requirements.
- GPUStack offers a free, open-source GPU cluster manager for readers focused on that description.
- Backend.AI may suit home users who want an open-source option for their own hardware, or readers seeking a free try-out plan.
- Koordinator is a free alternative for readers looking for API, Linux and self-hosted platform support.
- NVIDIA ShadowPlay is a free Windows option, rather than a cross-environment orchestration layer.
- Kueue is a free open-source Kubernetes project for readers whose scope is Kubernetes.
- OpenPBS offers a free AGPL 3.0 open-source edition, with community forum support that carries no guarantees.
Verdict
Choose dstack if you need open-source orchestration for AI workloads across cloud and on-premises compute, with support for multiple accelerator families and both jobs and services. Its strongest case is the breadth of infrastructure and workload types in one YAML-driven stack. Look elsewhere if built-in quota controls, encrypted-by-default storage or multi-host TPU support is essential.
Getting started
- Visit the dstack website.
- Choose the free dstack OSS plan for a self-hosted deployment.
- Run the dstack server on a laptop or another environment that can access the target clusters.
- Configure workloads with YAML and manage resources through the CLI or HTTP API.
- For hosted GPU Marketplace usage, use prepaid credits and review prices in the console before provisioning.
Limits worth knowing
The free dstack OSS plan is self-hosted. TPU workloads are limited to single-host instances with up to eight cores per TPU instance; GPU Marketplace use is prepaid and prices vary by provider.
Questions
Is dstack free?
The dstack OSS plan costs nothing. GPU Marketplace usage is billed against prepaid credits, with prices shown in the console before provisioning.
Which platforms and infrastructure does it support?
Listed platforms are API, Linux, macOS, self-hosted, web, and Windows. Documented backends include AWS, Azure, GCP, Kubernetes, GPU cloud providers, remote SSH hosts, and experimental Slurm.
Is dstack open source?
Yes. The dstack OSS plan is described as an open-source orchestration stack and is self-hosted.
Which AI workloads and accelerators does it support?
It supports fleets, development environments, tasks, services, presets, and volumes configured with YAML. Supported accelerators include NVIDIA, AMD, TPU, and Tenstorrent.
Can it deploy inference endpoints?
Yes. Services can publish endpoints through gateways with HTTPS, auto-scaling, custom domains, and rate limits.
How are stored data and secrets protected?
Server data and project secrets are stored in plaintext by default. Administrators can configure AES-256-GCM encryption for stored data.



