HanuDB, tuned while I slept · part 5 of 6
adopted14 September 2026cost: local CPU; a free-tier VM for the real runs
Product: what an application needs from it
Followers, leases, idempotency, TLS, counts
The question
Of 22 attempts in this theme, which ones survived two benchmark runs, the correctness suite and the gates?
adopted
22 of 22 changes kept.
Attempts22
Kept22
Discarded or crashed0
Best kept score40,093.5
Every run in this theme
| # | score | writes/s | reads/s | verdict | what changed |
|---|---|---|---|---|---|
| 0031 | 26,579.4 | 24,622 | 28,693 | keep | FEATURE: bearer-token auth on /v1 (HANUDB_TOKEN, constant-time compare; /health open; warning when unset). Score unchanged (-0.7%, noise, calibration 673) |
| 0032 | 27,050.8 | 27,523 | 26,587 | keep | FEATURE: find accepts min_txn/wait_ms and waits until the index has committed that txn (read-your-writes for search; 504 on timeout); indexed_txn in status. Score… |
| 0039 | 32,480 | 28,077 | 37,574 | keep | FEATURE: --bucket-b twin: segments and snapshots PUT to both buckets in parallel, bucket-durable only when both have them; recovery lists the union, reads A with B… |
| 0041 | 32,744.3 | 28,636 | 37,443 | keep | FEATURE: physical snapshots (TWS2: hard-linked index+kv, tar+zstd streamed to a file, multipart upload, streaming extract): rebuild of 493k docs 10.1 s -> 2.5 s when a… |
| 0043 | 35,315.9 | 26,884 | 46,392 | keep | FEATURE: bucket retention (--retain-snapshots 3): after each snapshot, older snapshots and segments at or below the oldest kept snapshot are deleted from both buckets.… |
| 0044 | — | — | — | keep | FEATURE: hanudb verify (hash chain, twin equality, snapshot headers; exit 1 on problems) + HANUDB_GCS_TOKEN for laptops. Real buckets: 21 segments + 1 snapshot OK. Not… |
| 0045 | — | — | — | keep | FEATURE: hanudb resync mirrors every one-sided object to the other bucket (both directions; never overwrites a differing pair). Not benchmarked (no server-path change) |
| 0049 | — | — | — | keep | FEATURE: clients/ts/hanudb.ts (fetch, no deps, typechecks strict) and clients/swift/HanuDB.swift (Foundation, typechecks); both auto-pass the last write txn as min_txn… |
| 0056 | — | — | — | keep | FEATURE: hanudb dump (rebuild into a scratch dir, print every doc as NDJSON with _col; DuckDB read_json_auto), logs to stderr (were on stdout), snapshot fetch re-mirrors… |
| 0057 | 29,123.5 | 30,301 | 27,992 | keep | FEATURE: POST /v1/_admin/compact force-merges the index to one segment and major-compacts fjall (6 -> 1 segments in 103 ms on 600 docs). Off the hot path; the regression… |
| 0059 | 36,847.8 | 29,235 | 46,443 | keep | FEATURE: aggs on _find (tantivy aggregation request format: terms, avg/min/max/sum/stats, histogram, nested; field names rewritten to k.{col}.*); fixed a panic on limit… |
| 0060 | 36,551.6 | 28,417 | 47,015 | keep | FEATURE: Idempotency-Key header on insert/replace: a retry replays the original txn and ids (stored as a doc in the reserved _idem collection inside the same… |
| 0061 | 33,114 | 29,047 | 37,751 | keep | FEATURE: idempotency keys expire (--idem-ttl-secs 48h, sweep every 10 min as replicated deletes). Off the hot path |
| 0078 | 15,499.3 | 12,094 | 19,864 | keep | FEATURE: restore --at <RFC3339>: newest snapshot at or before the time + segments up to it, into a fresh dir, bucket never written (uploads refused); clear error when… |
| 0079 | 34,256.1 | 28,564 | 41,083 | keep | FEATURE: serve --follower: boots from the bucket and tails wal/{seq+1} (create-if-absent objects make the tail a plain poll); writes answer 421; clients route reads with… |
| 0080 | 34,256.1 | 28,564 | 41,083 | keep | FEATURE: --lease leader election (lease/leader.json, CAS renew every ttl/3, local fallback verify-delete-create), standby promotes in place, lost lease = fence +… |
| 0094 | 34,174 | 34,044 | 34,304 | keep | PRODUCT: --kv-compress cold|all|none (HANUDB_KV_COMPRESS; default cold = the previous behaviour). 'all' is set on the free-tier VM, whose pd-standard disk has a few… |
| 0095 | 40,093.5 | 35,053 | 45,860 | keep | PRODUCT: built-in HTTPS: serve --tls-cert/--tls-key (PEM; HANUDB_TLS_CERT/KEY) via axum-server + rustls (ring provider installed explicitly: reqwest's ring and… |
| 0097 | 35,269.5 | 34,695 | 35,854 | keep | PRODUCT: POST /v1/_admin/export?col= writes every live document as zstd JSON lines (+_col) to export/{col}/{utc stamp}-{txn}.jsonl.zst in both buckets, on a nice-10… |
| 0098 | 35,551.4 | 34,821 | 36,297 | keep | PRODUCT: --retain-exports N (default 7): after each export the older objects under export/{col}/ are deleted in both buckets. Smoke: 54 checks. Bench in band |
| 0100 | 35,235.3 | 34,691 | 35,788 | keep | PRODUCT: --cors-origins ("*" or a list; preflights + allow-headers for Authorization/Content-Type/Idempotency-Key via tower-http; off by default) and --max-body-mb… |
| 0108 | 35,138.8 | 34,732 | 35,550 | keep | PRODUCT: GET /v1/{col}/_count answers from the committed index (O(segments): the same cost on 14M documents as on 14; lags writes by one commit), ?exact=true keeps the… |