ClickHouse at FOSDEM 2026

Tyler HannanApr 8, 2026

Source: Clickhouse
Published: Apr 8, 2026
Added to Yomu: Aug 28, 2026

Summary

The ClickHouse community and development team participated in FOSDEM 2026 in Brussels, hosting a community dinner and delivering technical presentations across multiple developer tracks. Presentations covered a range of engineering topics, including building geospatial analytical applications with Leaflet and ClickHouse, as well as integrating LLVM XRay to dynamically hot-patch production logging without redeployments. Additional ClickHouse sessions addressed the engineering challenges of integrating Rust libraries into large C++ codebases, optimizing low-level memcpy routines, and implementing specialized inverted indexes for large-scale text processing. Contributed community sessions detailed workflows for upstream patches in MariaDB and Postgres, alongside WebShield, an open-source Python daemon that streams web accelerator access logs into ClickHouse for bot analysis.

Context

The ClickHouse engineering team and community members presented multiple talks and organized community gatherings at FOSDEM 2026 in Brussels.

Approach / What changed

Speakers delivered presentations covering dynamic runtime instrumentation using LLVM XRay, inverted indexes for text processing, C++ and Rust code integration, low-level memcpy optimization, open-source database contribution workflows, and log-based bot detection.

Takeaways

ClickHouse integrated LLVM XRay to hot-patch running production binaries via SQL queries, allowing engineers to dynamically inject logging, profiling, and delays with near-zero runtime overhead and a 4–7% binary size increase.
Processing large-scale text data and log search in column-oriented OLAP databases requires the implementation of specialized inverted indexes.
WebShield uses Tempesta FW access logs routed to ClickHouse to analyze traffic patterns and compute fingerprints for identifying and blocking automated bots.

Observability Open Source Performance Rust Search

Read original post

ClickHouse at FOSDEM 2026

Tyler HannanApr 8, 2026

Source: Clickhouse
Published: Apr 8, 2026
Added to Yomu: Aug 28, 2026

Summary

Context

The ClickHouse engineering team and community members presented multiple talks and organized community gatherings at FOSDEM 2026 in Brussels.

Approach / What changed

Takeaways

ClickHouse integrated LLVM XRay to hot-patch running production binaries via SQL queries, allowing engineers to dynamically inject logging, profiling, and delays with near-zero runtime overhead and a 4–7% binary size increase.
Processing large-scale text data and log search in column-oriented OLAP databases requires the implementation of specialized inverted indexes.
WebShield uses Tempesta FW access logs routed to ClickHouse to analyze traffic patterns and compute fingerprints for identifying and blocking automated bots.

Observability Open Source Performance Rust Search

Read original post

Related reading

Clickhouse · May 22, 2026
Integrating the Rust Delta Kernel into ClickHouse
ClickHouse initially built native protocol support to read Delta Lake tables, but maintaining pace with the format's evolving specification created high complexity and fragmented features. To resolve this, engineers integrated the Rust Delta Kernel to offload protocol handling while retaining ClickHouse's optimized Parquet data reading. The Delta Kernel parses JSON transaction logs, resolves snapshots, manages transactional write metadata, and exposes schema evolution mapping alongside Change Data Feed streams. ClickHouse also contributed upstream enhancements to the Rust kernel, adding dynamic runtime logging and asynchronous metadata processing via FFI handles. While ClickHouse can attach to existing Delta tables, the integration cannot yet initialize empty Delta Lake tables.
Melvyn Peignon, Kseniia Sumarokova, Raúl Marín
Cloudflare · Aug 7, 2026
Unveiling good and bad behaviors on the Agentic Internet
Web traffic increasingly shifts between human interaction and automated agents, rendering point-in-time security checks ineffective against sophisticated automation. Cloudflare addresses this shift through continuous behavioral analysis designed to evaluate trust across entire user sessions rather than relying on static point-in-time hurdles. Its CDN-injected client-side system, Precursor, tracks continuous behavioral indicators like cursor movements to catch mid-session automated takeovers. To counter rapid bot adaptation, Cloudflare is introducing self-adjusting machine learning models under Adaptive Intelligence and non-deterministic defenses such as the AI Labyrinth. These tools allow site owners to poison scraper training data, trap crawlers in synthetic webs, or queue legitimate agents while dynamically penalizing abusive traffic.
Jin-Hee Lee
Clickhouse · Apr 14, 2026
Agentic coding with ClickHouse. One person, one data stack, one full-stack application
A Solutions Architect at ClickHouse built ClickShop, a full-stack retail analytics platform, within a few days using Cursor to demonstrate production-level capabilities beyond static slides. The platform pairs ClickHouse for sub-second analytical queries across billions of rows with PostgreSQL for transactional workflows, using ClickPipes for real-time change data capture synchronization. LibreChat orchestrates 18 persona-tailored AI agents, while dual observability layers—ClickStack for OpenTelemetry infrastructure metrics and Langfuse for LLM prompt and cost tracking—store their telemetry directly in ClickHouse. Developing with an AI-assisted IDE was accelerated by open-source documentation and community skills, though it required continuous human review to handle unintended code refactoring and token consumption.
Oussama Chakri
Clickhouse · Apr 16, 2026
April 2026 newsletter
ClickHouse 26.3 LTS introduces experimental materialized common table expressions, WebAssembly user-defined functions, and enables asynchronous inserts by default. Alongside the release, Alasdair Brown launched clickhousectl to manage local installations and cloud deployments with built-in agentic development features and authentication safeguards. User case studies show Goldsky accelerating historical blockchain backfills by twelve times through direct ClickHouse reads using Apache Arrow, replacing their prior Kafka and Avro architecture. Additionally, the engineering team redesigned the full-text search index with front-coding compression, a sparse lookup index, and adaptive posting lists to handle expensive random reads on object storage. ClickHouse also previewed community architecture patterns for lightweight SIEM setups using Clickdetect and Wazuh log collection.
Mark Needham