Ownership & Mutable Borrow Examples • Rc Logics • Hoare Logic • Separation Logic Background ERC Project "RustBelt" 2015-2021 Unlike C/C++, Rust is a safe language But, like C/C++, Rust is also

○ kubectl exec -c istio-proxy curl localhost:15000/config_dump #IstioCon Istio identity – check configuration result ● Result: cert generated automatically with Istio identity 1) Apply peer-authentication AuthorizationPolicy metadata: name: require-jwt namespace: istio-system spec: action: ALLOW rules: - from: - source: requestPrincipals: ["testing@secure.istio.io/testing@sec ure.istio "productpage-viewer" namespace: default spec: selector: matchLabels: app: productpage rules: - to: - operation: methods: ["GET"] apiVersion: "security.istio.io/v1beta1" kind:

• Cons • O(N^2) in control plane / O(N) in data plane • Poor in scheduling algorithm • Iptables rules are difficult to debug IPVS mode • Services are organized in hash table • IPVS DNAT • conntrack/iptables Size limitation of BPF program is one million after Linux 5.2 Lessons from eBPF • Too strict check in eBPF verifier • Example: s64 bpf_csum_diff(__be32 * from, u32 from_size, __be32 * to, u32 to_size);

configuration: settings: compression/case/method: zstd ● Zoned deployment, Affinity rules ● AntiAffinity rules ● Service templates Operator Administration: ClickHouse defaults Можно собрать желаемую

Logical Plan Logical Plan Optimized Logical Plan Physical Plan Program API Analysis rules Optimization rules: MATCH -> pushdown Planning Strategies Graph Execution Code Gen JIT Cost model Storage

CallingConv.h • Don’t throw exceptions across the boundary. Explicitly state/document memory ownership rules. • Consider accepting memory alloc/dealloc callbacks – recall previous recommendation. • Limit implicit

order of dynamic initializations  ❌  Static variables with constant initializers  ✔  Complex rules  Non-trivial for a reader to know whether it’s constant initialization or dynamic initialization

2018 Percona. 36 Anyone dumping a lot of data ? © 2018 Percona. 37 Want Processed Logs ? Check out Percona Monitoring and Management © 2018 Percona. 38 Need Help ? Percona - MySQL, MariaDB

Global Cleanup Implementation • Must collect all retired objects (including in private caches) • Must check all hazard pointers against collected objects • Must complete reclamation of all unprotected objects

std::optional  New members for std::optional to chain operations on an optional without having to check for them being empty  transform(F)  returns optional containing result of invoking F on *this