Asia Pacific Open Source Services Market

India’s Computer Emergency Response Team (CERT-In) issued version 2.0 of its technical guidelines on software, AI and hardware bills of materials on 9 July 2025, asking government, public sector and essential services organisations to demand a software bill of materials (SBOM) in every procurement, and its own sample tables list PostgreSQL, Postfix and Apache Tomcat as open source components to be tracked, according to the CERT-In guidelines. Thirteen months later Alibaba said revenue from its AI Cloud and Compute Services rose 45% to RMB 48.4 billion in the June 2026 quarter while its capital spending rose 75%, its results of 20 August 2026 show. The region now has to document every open source component it runs while it builds AI stacks on Linux, Kubernetes, PostgreSQL and Kafka faster than anywhere else. The Asia Pacific open source services market covers what organisations in Japan, China, India, Australia and New Zealand, South Korea, Southeast Asia and the rest of the region pay for support and maintenance subscriptions, managed operation, integration and deployment, consulting, and training and certification built around open source software. Douglas Insights sizes it at USD 9.96 billion in 2025, from about 118,600 paying accounts at an average annual spend of USD 84,000, and at USD 46.3 billion in 2035, a revenue CAGR (compound annual growth rate) of 16.6%. The study is the Asia Pacific row of our worldwide Open Source Services Market report, sits in our enterprise software coverage, and every figure follows the Douglas Insights research methodology.

Which open source services line earns the most: support subscriptions, managed operation or integration?

Support and maintenance subscriptions earn the most, 33.0% of 2025 value, USD 3.29 billion, because renewals compound. Managed services grow fastest, 19.6% a year, from USD 2.49 billion to USD 14.9 billion, and overtake support by 2035.

Support subscriptions lead at USD 3.29 billion, but their 33.0% share sits well below the 37.4% in our worldwide model and the 38.0% in our U.S. Open Source Services Market report. Japanese banks, insurers and manufacturers buy Red Hat Enterprise Linux and supported databases through system integrators, so part of what would be a subscription elsewhere is booked as integration. Chinese buyers increasingly license commercial distributions built on openEuler rather than a Western subscription. Support grows 14.5% a year to USD 12.7 billion as each renewal adds cores, clusters and nodes.

Managed services, USD 2.49 billion, are open source engines run for the customer: MongoDB Atlas, Elastic Cloud, hosted Kafka and managed Kubernetes. They grow fastest, 19.6% a year, and reach 32.2% of 2035 value against 27.5% for support, because a regional bank or e-commerce group in Jakarta, Mumbai or Seoul finds an operated cluster cheaper than hiring scarce site reliability engineers. MongoDB’s Atlas revenue rose 29% to USD 1.81 billion in the year to January 2026, 73% of its USD 2.46 billion total, its results of 2 March 2026 show, and the same shift is under way in the region.

Integration and deployment, USD 2.24 billion or 22.5%, is a larger slice than in the United States because Japan’s and India’s integrators, from NTT Data and Fujitsu to Infosys, TCS and Wipro, carry most open source projects into production; it grows 16.4% a year to USD 10.2 billion. Consulting, USD 1.34 billion, grows 14.6%. Training and certification, USD 598 million, grows 16.0% to USD 2.64 billion as Indian and Southeast Asian employers certify Linux, Kubernetes and Ansible skills at scale. Service-type values for 2035 sum to USD 45.8 billion, 1.08% below the headline, a Douglas Insights estimate.

What drives open source services spending per account up 4.48% a year?

Spend per paying account rises 4.48% a year, from USD 84,000 in 2025 to about USD 130,200 in 2035, because managed operation, AI data stacks, bill-of-materials duties and sovereign Linux add 5.90 points before restraints take 1.42.

Paying accounts grow faster still, 11.6% a year, from about 118,600 in 2025 to 355,400 in 2035, as mid-sized firms in India, Indonesia, Vietnam and the Philippines start paying for hosted engines rather than running community builds. That account leg is two points above the 9.8% in our worldwide model, and it is why the region grows at 16.6% against 14.52% worldwide. Four drivers make up the gross spend leg; each is sized by Douglas Insights from company and regulator disclosures.

Managed operation replacing in-house teams: 1.90 points

Managed operation adds 1.90 points. Each workload moved from a self-run cluster to Atlas, Elastic Cloud or a hosted Kafka service is billed at several times its old support fee, because the provider now carries the pager. Elastic Cloud revenue rose 22% to USD 837 million in the year to April 2026, against 17% for Elastic’s total of USD 1.74 billion, its results of 28 May 2026 show, and customers outside the United States made up 46% of revenue, up from 44%, its annual report for fiscal 2026 states. Douglas Insights estimates that 31% of new managed-service value in the region comes from India and Southeast Asia, where engineering teams are young and turnover is high.

AI data stacks: 1.70 points

AI adds 1.70 points. Retrieval, vector search, event streaming and model serving run mostly on open source engines, and each new layer needs support, tuning and managed capacity. Alibaba’s AI Cloud and Compute Services revenue reached RMB 48.4 billion, USD 7.14 billion, in the June 2026 quarter, up 45%, with AI-related product revenue of RMB 12.4 billion and a twelfth straight quarter of triple-digit growth; the company also opened the weights of its 2.4-trillion-parameter Qwen3.8-Max model, its 20 August 2026 release states. Every open-weight model downloaded by a bank or telecom operator becomes a stack of open source components to be served, patched and documented.

Bill-of-materials and security duties: 1.40 points

Security adds 1.40 points. CERT-In’s July 2025 guidelines ask public sector and essential services buyers to require an SBOM, and its comprehensive cyber security audit policy guidelines of 25 July 2025 add audit duties, according to CERT-In. A supported distribution with signed packages and a published SBOM costs less than building that evidence in house, so buyers move from free downloads to paid subscriptions, a Douglas Insights estimate.

Sovereign Linux and platform migration: 0.90 points

Sovereign platforms add 0.90 points. The openEuler community expected more than 16 million openEuler-based operating system deployments by the end of 2025, with over 2,100 member organisations and more than 23,000 contributors, its release of 29 November 2025 states. Chinese banks, telecom operators and state firms that leave CentOS and foreign distributions pay domestic vendors for migration, support and certification. The four contributions, 1.90 + 1.70 + 1.40 + 0.90, give 5.90 points.

What holds back open source services: self-support, hyperscaler bundles or thin budgets?

Three restraints remove 1.42 points from spend per account, leaving 4.48% a year: self-support and community builds take 0.62 points, hyperscaler-bundled services 0.50 points and tight IT budgets 0.30 points.

Self-support is the largest brake. Open source code is free to run, and the region has the world’s deepest pool of engineers who can patch it: Indian IT service firms, Chinese internet platforms and Korean conglomerates run large internal platform teams that maintain their own Linux, Kubernetes and PostgreSQL builds. Where an engineer costs a fraction of a U.S. salary, the trade between hiring and subscribing tilts towards hiring, which is why the average account spends USD 84,000, 15.2% below the U.S. figure of USD 99,000. Douglas Insights removes 0.62 points.

Hyperscaler bundles remove 0.50 points. Amazon Web Services, Microsoft Azure, Google Cloud, Alibaba Cloud, Huawei Cloud and Tencent Cloud run PostgreSQL, Redis-compatible caches, Kafka and Kubernetes as their own managed services and include support in the cloud bill, so revenue that a specialist would earn appears as cloud infrastructure instead. AWS opened its Thailand region on 7 January 2025 with a plan to invest more than USD 5 billion there, its announcement says, and each new local region brings bundled engines closer to buyers who once needed a specialist.

Budgets remove 0.30 points. IBM’s Asia Pacific revenue fell 0.4% to USD 12.0 billion in 2025, and Japan rose only 0.3% as reported while falling 1.0% at constant currency, its 2025 annual report shows. A weak yen raises the local cost of dollar-priced subscriptions for Japanese buyers, who answer by consolidating contracts and pushing consulting into fixed-price work. The security tools that compete for the same budget are sized in our U.S. Cloud Application Security and Vulnerability Management Market report.

Where in Asia Pacific are open source services bought: Japan, China or India?

Japan buys the most open source services in Asia Pacific, USD 2.73 billion or 27.4% of 2025 value, Douglas Insights estimates. India grows fastest, 20.8% a year to USD 9.36 billion by 2035, with Southeast Asia close behind at 19.8%.

Japan leads at USD 2.73 billion because its banks, insurers, carmakers and local governments run large Red Hat Enterprise Linux estates through integrators and pay for long support terms; it grows 13.2% a year, the slowest rate, because the base is already paid for and the yen is weak. China, USD 2.45 billion, grows 17.4% to USD 12.2 billion and becomes the largest country by 2035, as state firms, banks and telecom operators move to openEuler-based distributions and pay domestic vendors for migration and support. China adds 26.7% of the region’s new value between 2025 and 2035.

India, USD 1.41 billion, grows fastest, 20.8% a year, because CERT-In’s bill-of-materials guidance, digital public infrastructure built on open source and millions of new cloud workloads arrive together, and because Indian integrators sell the same skills at home that they export. Southeast Asia, USD 906 million, grows 19.8% on new cloud regions in Thailand, Malaysia and Indonesia and on digital banks in Singapore and the Philippines. Australia and New Zealand, USD 1.27 billion, grow 14.4% under the Cyber Security Act; South Korea, USD 867 million, grows 15.6% on conglomerates and its game and platform companies; the rest of the region, USD 319 million, covering Taiwan, Hong Kong, Pakistan and Bangladesh, grows 15.4%. Country values for 2035 sum to USD 46.4 billion, 0.33% above the headline; in the data table the row labelled Global holds the Asia Pacific total.

Who supplies open source services after IBM’s HashiCorp and Confluent deals, and how concentrated is the field?

IBM is the largest supplier with about 9.8% of 2025 value, USD 976 million, through Red Hat, HashiCorp and Confluent, Douglas Insights estimates. With MongoDB and Elastic the top three hold only about 13.7%.

All shares are Douglas Insights estimates because no supplier reports regional open source services revenue on its own. IBM’s software revenue rose 11% to USD 30.0 billion in 2025 and Red Hat grew 10% in the fourth quarter, its results of 28 January 2026 show. IBM completed its purchase of HashiCorp on 27 February 2025 and of Confluent on 17 March 2026, according to its first-quarter 2026 filing, which turns it into the default vendor for supported infrastructure code in Japanese and Australian enterprises. GitLab’s revenue rose 26% to USD 955 million in the year to January 2026, with 1,456 customers paying more than USD 100,000 a year, its results of 3 March 2026 state.

The rest of the field is local. In Japan, NTT Data, Fujitsu, NEC and Hitachi bundle open source support into long outsourcing contracts; in China, Kylinsoft, UnionTech and Huawei’s partners sell support for openEuler-based and domestic distributions to state buyers; in India, Infosys, TCS and Wipro earn the integration and consulting lines and resell Red Hat and SUSE. Scale matters most in support, where a vendor that ships patches for thousands of packages within hours can sign multi-year bank and government contracts; it matters least in training, where the Linux Foundation’s certifications and vendor courses compete on price. The databases this support sits on are sized in our U.S. Relational Databases Software Market report.

What does open source support cost, from a USD 878.90 RHEL subscription to six-figure contracts?

A paying account spent an average USD 84,000 on open source services in 2025, Douglas Insights estimates, from USD 878.90 a year for one standard RHEL virtual server subscription to multi-million-dollar contracts at the largest banks.

List prices come from Red Hat’s store; the other bands are Douglas Insights estimates from company disclosures. Premium RHEL support costs 62.6% more than Standard, the price of faster response, and that gap is the market’s logic in miniature: buyers pay for time saved when something breaks. The regional average of USD 84,000 sits 10.9% below the USD 94,300 in our worldwide model because Indian and Southeast Asian accounts are smaller and Chinese domestic distributions are priced below Western subscriptions; Japanese accounts, Douglas Insights estimates, average more than USD 150,000 because integrators add support and operation to each contract.

The price leg reaches about USD 87,700 per account in 2026 and USD 130,200 in 2035. Two forces push it up: managed operation replaces cheaper per-server support, and bill-of-materials evidence becomes a paid feature. One force holds it down: local currency weakness, which in Japan cuts the yen value buyers are willing to commit to dollar-priced contracts.

Which rules shape open source services: CERT-In’s BOM guidelines, the joint SBOM vision or the Cyber Security Act?

Three rule sets shape open source services most: CERT-In’s bill-of-materials guidelines version 2.0 of 9 July 2025, the SBOM vision 15 countries signed on 3 September 2025, and Australia’s Cyber Security Act 2024, with ransomware reporting from 30 May 2025.

CERT-In’s guidelines, issued under the Ministry of Electronics and Information Technology, cover software, quantum, cryptographic, AI and hardware bills of materials and are aimed at software consumers, developers and system integrators, especially in government, the public sector, essential services and software exports, according to the guidelines. They recommend that buyers require SBOMs in procurement and that licence management cover open source software. For suppliers selling to Indian banks and ministries, a supported distribution with machine-readable SBOMs is now the cheapest way to comply.

Japan’s National Cybersecurity Office and the Ministry of Economy, Trade and Industry (METI) signed “A Shared Vision of Software Bill of Materials (SBOM) for Cybersecurity” with the U.S. Cybersecurity and Infrastructure Security Agency on 3 September 2025; cybersecurity authorities of 15 countries, including Japan, Australia, New Zealand, India, Singapore and South Korea, signed it, METI announced. Six of the region’s economies now share one SBOM language, which favours vendors that publish SBOM data for every package they support.

Australia’s Cyber Security Act 2024 received Royal Assent on 29 November 2024; ransomware payment reporting and the Cyber Incident Review Board started on 30 May 2025, according to the Department of Home Affairs, and the smart device security standards registered on 4 March 2025 took effect 12 months later, the Federal Register of Legislation shows. Device makers in Sydney and Auckland that embed Linux must now show how they patch it. China has no equivalent SBOM rule; its push is towards domestic distributions, which builds a separate support market.

What if AI stacks multiply paying accounts: how large are open source services in 2035?

Open source services end 2035 between USD 34.2 billion and USD 60.3 billion across our three cases, around a base of USD 46.3 billion. The pace at which new accounts start paying sets most of the spread.

In the slower case Alibaba Cloud, Huawei Cloud and AWS absorb more managed open source into their own bills, Indian and Korean platform teams self-support more, and CERT-In’s guidance stays advisory for private buyers. In the faster case open-weight models such as Qwen multiply small paying accounts, India turns SBOM guidance into procurement rules, and Japan’s integrators move clients from per-server support to managed operation. One extra point of yearly account growth adds USD 4.32 billion to 2035 value; one point less removes USD 3.98 billion.

Our 16.6% matches the Asia Pacific row of the Douglas Insights global model and sits above the 14.52% worldwide rate and the 13.16% U.S. rate, because the region adds paying accounts 2.0 points a year faster than the world while spending less per account.

Douglas Exclusive: the Sovereign Stack Ledger

The Sovereign Stack Ledger is a Douglas Insights model built from 10 dated company, regulator and community releases of January 2025 to August 2026 and 7 country builds, tracking what turns free code into paid service.

The finding, a Douglas Insights estimate: the four signatory economies of the SBOM vision that we model separately, Japan, India, Australia and New Zealand, and South Korea, hold USD 6.29 billion or 63.1% of 2025 value but only 57.9% of the USD 36.5 billion the region adds by 2035. China, outside that vision, adds 26.7% of new value on its own openEuler-based stack. The region is splitting into two support markets: one where buyers pay to document Western-maintained code, and one where they pay to replace it with domestic distributions.

The ledger explains two choices in this report. We hold Japan to 13.2% a year because its SBOM duties fall on buyers who already pay for support, and we set China at 17.4% because migration to domestic platforms creates new paid accounts rather than renewals. Vendors that can serve both markets, with SBOM-ready Western distributions and certified support for openEuler, are best placed for the decade.

How does the methodology turn 118,600 paying accounts into USD 9.96 billion?

Our methodology multiplies about 118,600 organisations in the region paying for open source services in 2025 by an average annual spend of USD 84,000 to reach USD 9.96 billion. Accounts come from firm-size bands; spend from five service types.

The model covers 7 countries or sub-regions, 5 service types, 2 deployment modes and 2 organisation sizes, and uses 88 data points, 19 sourced and 69 modelled. Arithmetic: 118,600 x USD 83,984 = USD 9.96 billion; USD 9.96 billion x (1.116 x 1.0448)^10 = USD 46.3 billion. Paying accounts reach about 132,400 in 2026 and 355,400 in 2035; spend per account reaches about USD 87,700 in 2026.

Two cross-checks agree. First, USD 9.96 billion and USD 46.3 billion equal the Asia Pacific row of our worldwide open source services model, and the 2026 value of USD 11.6 billion matches it within 0.01%. Second, the region holds 25.6% of worldwide value with 28.7% of worldwide paying accounts, consistent with a lower spend per account. Subscription-style buying across IT is set in context in our Everything as a Service Market report. AI tools help draft the text and automated checks test the arithmetic and links; the Douglas Insights research desk chooses the sources, builds the model and approves publication, as our editorial standards explain.

Sources

1. CERT-In, Ministry of Electronics and Information Technology Technical Guidelines on SBOM, QBOM & CBOM, AIBOM and HBOM, version 2.0 (2025)
2. CERT-In Comprehensive Cyber Security Audit Policy Guidelines (2025)
3. Ministry of Economy, Trade and Industry A Shared Vision of Software Bill of Materials (SBOM) for Cybersecurity (2025)
4. Australian Department of Home Affairs Cyber Security Act (2025)
5. Federal Register of Legislation Cyber Security (Security Standards for Smart Devices) Rules 2025 (2025)
6. Alibaba Group via SEC Alibaba Group June quarter 2026 results (2026)
7. OpenAtom openEuler community via PR Newswire openEuler Summit 2025 release (2025)
8. IBM via SEC IBM 2025 Annual Report (2026)
9. IBM via SEC IBM fourth-quarter 2025 results (2026)
10. SEC IBM Form 10-Q, Q1 2026 (2026)
11. IBM IBM completes acquisition of HashiCorp (2025)
12. MongoDB via SEC MongoDB fourth quarter fiscal 2026 results (2026)
13. Elastic via SEC Elastic fourth quarter and fiscal 2026 results (2026)
14. Elastic via SEC Elastic Form 10-K, fiscal 2026 (2026)
15. GitLab via SEC GitLab fourth quarter fiscal 2026 results (2026)
16. Amazon Web Services via Business Wire AWS Launches Infrastructure Region in Thailand (2025)
17. Red Hat RHEL Server (virtual) store page (2026)

What counts in the open source services study, and what is excluded?

This open source services study counts what organisations in the region pay for support, managed operation, integration, consulting and training around open source software. Proprietary licences, cloud infrastructure billed separately, unpaid community support and hardware are excluded.

The by-service split covers support and maintenance subscriptions, managed services, integration and deployment, consulting, and training and certification; the by-deployment split covers cloud and on-premises; the by-organisation split covers large enterprises and small and medium enterprises; the by-country split covers Japan, China, India, Australia and New Zealand, South Korea, Southeast Asia and the rest of the region. Spend is counted where the buying organisation is based, not where the supplier is, so an Indian integrator’s work for a U.S. client is excluded, while its work for a Mumbai bank is counted. Commercial operating systems built on openEuler count as support subscriptions when sold with a support term.