<p><strong>TLDR:</strong> Rust 1.94.1 shipped this week with fixes for three regressions from 1.94.0, including a security patch for two CVEs in the tar crate. Canonical joined the Rust Foundation as a Gold Member at $150k/year, formalizing what Ubuntu has already been doing with uutils, sudo-rs, and ntpd-rs. Cloudflare published a detailed post-mortem on why they rewrote their core request handling in Rust on top of Pingora, and Anthropic open-sourced two production Rust crates for zero-copy protobuf and ConnectRPC. Several interesting community projects landed too, from a true O(n) all-matches regex engine to a Rust rewrite of vLLM.</p>
<hr>
<h2>Rust 1.94.1</h2>
<p>A point release fixing three regressions from 1.94.0: a bug in <code>std::thread::spawn</code> on <code>wasm32-wasip1-threads</code>, accidental stabilization of unstable Windows filesystem methods, and a Clippy ICE in <code>match_same_arms</code>. There’s also a Cargo downgrade of curl-sys to fix certificate validation failures on some FreeBSD versions, and a security fix updating the tar crate to 0.4.45 for CVE-2026-33055 and CVE-2026-33056. If you’re on 1.94.0, update.</p>
<h2>Cloudflare Gen 13: why they rewrote request handling in Rust</h2>
<p>Cloudflare’s Gen 13 post is worth reading in full. They switched from AMD EPYC Genoa-X (12MB L3 per core) to Turin 9965 (2MB L3 per core, 192 cores total), and their NGINX/LuaJIT stack fell apart under the cache pressure. Hardware tuning didn’t help. The fix was FL2, a full Rust rewrite on Pingora and Oxy, which cut latency penalties by 70% and scaled linearly with core count. End result: 2x throughput over Gen 12, 50% better perf per watt, 60% higher rack throughput. This is a concrete data point for what “leaner memory access patterns” actually buys you at scale.</p>
<h2>Anthropic open-sources buffa and connect-rust</h2>
<p>Two production Rust crates from Anthropic: buffa is a pure-Rust protobuf implementation with zero-copy message views that borrow directly from the wire buffer, and connect-rust is a Tower-based ConnectRPC implementation covering Connect, gRPC, and gRPC-Web. The zero-copy approach gets 33% more decode throughput with allocator pressure at 3.6% vs 9.6% for tonic+prost. The post also documents four security issues caught in review that passed conformance testing — asymmetric size limits, a decompression bomb in trait defaults, missing TLS handshake timeout, and a <code>u64::MAX</code> duration panic. Worth reading if you’re doing any RPC work in Rust.</p>
<h2>Canonical joins the Rust Foundation</h2>
<p>Canonical paid $150k for a Gold Member seat and a spot on the board. This isn’t a surprise given Ubuntu 25.10 already ships uutils and sudo-rs, and ntpd-rs is slated for Ubuntu 26.10. Their stated priorities are <a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> security and reducing unknown transitive dependencies in async, HTTP, and crypto libraries — a real concern for anyone shipping into regulated environments. Whether board membership translates into actual ecosystem influence is an open question, but the engineering commitment is already there.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>RE# regex engine:</strong> A new Rust regex engine that achieves true O(n) all-matches using a two-pass reverse+forward DFA approach, fixing a documented O(n²) problem that exists in RE2, Go’s regexp, and Rust’s regex crate. No capture groups yet, but benchmarks match or beat the regex crate on most workloads.</li>
<li><strong>rvLLM:</strong> A single-developer Rust rewrite of vLLM with 15 hand-written CUDA kernels, hitting ~3,467 tok/s on A100 FP16, 6-second startup vs 120s for Python vLLM, and a 16MB binary vs ~500MB. Built using Claude Code and ~$1,780 in rented GPU time.</li>
<li><strong>Anthropic’s buffa zero-copy detail:</strong> The crate generates both owned and view types per message; view types are the interesting part for latency-sensitive decode paths.</li>
<li><strong>ayaFlow:</strong> eBPF-based network traffic analyzer in Rust on the Aya framework, running as a sidecarless DaemonSet with ~33MB RSS. The eBPF program compiles to 784 bytes. Requires kernel 5.8+ with BTF.</li>
<li><strong>turbolite:</strong> Experimental SQLite VFS in Rust for serving queries from S3 with sub-250ms cold latency, using B-tree-aware page grouping and seekable zstd multi-frame compression. Point lookups at 77ms cold on S3 Express One Zone.</li>
<li><strong>Fyrox 1.0.0:</strong> Rust game engine hits stable after 7 years, with export CLI for PC, WebAssembly, and Android targets.</li>
<li><strong>bigoish:</strong> Rust crate for asserting empirical computational complexity in tests — measures runtime across input sizes and fits to O(1)/O(n)/O(n²)/O(n log n) models. Uses CPU instruction counting on Linux for accuracy.</li>
<li><strong>Tansu:</strong> Kafka-compatible broker in Rust, stateless and leaderless, ~20MB RAM, ~10ms startup, with pluggable storage (S3, SQLite, Postgres) and direct writes to Iceberg and Delta Lake.</li>
<li><strong>Microsoft Rust training:</strong> Open-sourced a seven-book curriculum covering async Rust, Pin, allocators, lock-free structures, and cross-compilation, with Miri integration throughout.</li>
<li><strong>Ubuntu ntpd-rs:</strong> Canonical is replacing Chrony with ntpd-rs (Rust NTP/NTS implementation), targeting Ubuntu 26.10 with default switch in 27.04.</li>
<li><strong>Firefox 149:</strong> Replaced the C++ JPEG-XL decoder with jxl-rs, a Rust-based alternative, mirroring Chrome’s approach.</li>
<li><strong>Agoda Storefront:</strong> Rust reverse proxy built on Pingora for latency-aware S3 load balancing, using a least-in-flight algorithm with cross-datacenter traffic isolation and credentialless pod authentication.</li>
<li><strong>Coherence post:</strong> Thoughtful writeup on Rust’s orphan rules blocking ecosystem evolution (the serde problem), proposing named impls and incoherent traits as a path forward. Aligns with ongoing dictionary-passing style work in the project.</li>
</ul>


Rust language updates, async patterns, and systems programming.

Rust Digest

Rust 1.94.1 was released with fixes for three regressions from 1.94.0, including security patches for two CVEs in the tar crate and a Cargo downgrade to fix FreeBSD certificate validation failures. Cloudflare detailed how switching to a Rust-based stack (Pingora/Oxy) on Gen 13 hardware delivered 2x throughput, 70% latency improvement, and 50% better perf-per-watt. Anthropic open-sourced two production Rust crates: buffa (zero-copy protobuf with 33% better decode throughput) and connect-rust (Tower-based ConnectRPC). Canonical joined the Rust Foundation as a Gold Member at $150k/year, with stated priorities around crates.io security and reducing unknown transitive dependencies. Notable community projects include a true O(n) regex engine, a Rust rewrite of vLLM with 6-second startup, an eBPF network analyzer, a Kafka-compatible broker in Rust, and Fyrox 1.0.0 game engine going stable after 7 years.

Rust 1.94.1 patches three regressions, Canonical buys a seat at the Rust Foundation