Technology

RustFS

A high-performance, Rust-based, S3-compatible object storage server positioned as a truly open-source alternative to MinIO.

10 connections5 resources6 posts

Summary

What it is

A high-performance, Rust-based, S3-compatible object storage server positioned as a truly open-source alternative to MinIO.

Where it fits

Following the MinIO community repository archival in 2026, RustFS emerged as one of the leading candidates for self-hosted S3 workloads. It targets the performance tier — organizations needing MinIO-like throughput with a permissive license and no single-vendor governance risk.

Misconceptions / Traps
  • The 2.3× small-object headline is only on small objects. Independent benchmark (GitHub Issue #73, mid-2025) showed MinIO leading on 20 MiB sequential reads — 53 Gbps vs 23 Gbps throughput, 24 ms vs 260 ms TTFB. The RustFS team acknowledged the gap and added "Big File Optimization" to the roadmap. Verdict: small-object champion today, large-file story still in progress.
  • Alpha-stage caveat is binding. v1.0.0-alpha as of early 2026, 23,000+ GitHub stars, 104 contributors — momentum is real, but maintainers explicitly advise against production deployment until 1.0 stable. Use for dev/test/staging today.
  • "Drop-in MinIO replacement" is true at the binary + bucket layout level, but enterprise features (OPA policy, RDMA, GPU Direct Storage) are roadmap items, not shipped — if your MinIO deployment uses any of these you can't swap yet.
  • Decentralized-metadata architecture is a structural advantage but it shifts ops thinking — there is no metadata server to back up or upgrade independently. Consistent hashing handles failover; cluster topology changes need rebalancing.
  • Built on Tokio async runtime; ~2 GB RAM minimum even for a single-node deployment, which surprises operators porting from Ceph or larger stacks.

Performance posture: Cluster scale up to 323 GB/s read and 183 GB/s write in evaluation testing — Rust ownership/ARC eliminates GC pauses that hurt MinIO under sustained millions-of-small-files workloads (the dominant AI dataset access pattern).

Key Connections
  • implements S3 API — S3-compatible object storage
  • solves Vendor Lock-In — open-source alternative to AWS S3 and MinIO
  • solves AGPL Licensing Risk — Apache 2.0 license removes the AGPLv3 exposure that drove migration off MinIO
  • competes_with MinIO — direct replacement target

Definition

What it is

A high-performance, Rust-based, S3-compatible object storage server positioned explicitly as a **drop-in MinIO binary replacement** — same on-disk bucket layout, same admin verbs, swap the executable. Apache 2.0 licensed. Now in a fast-moving 1.0.0-beta series (approaching GA) and gaining heavy ecosystem momentum after the MinIO archival. Project-published benchmarks claim **~2.3× faster** performance for **4 KB small-object** payloads vs MinIO and peak read throughput up to **323 GB/s** on saturated NVMe arrays (vendor-side numbers — independent 2026 benchmarks show MinIO still well ahead on reads; see Recent developments) — Rust's memory-safe, ARC/ownership model eliminates the GC-pause latency tail that plagues Go-based storage engines under millions of small files (the dominant access pattern in AI data preparation pipelines). The community has begun pushing for an **NFS-mount feature request** ([rustfs/rustfs#2481](https://github.com/rustfs/rustfs/issues/2481)) that would parallel AWS S3 Files semantics — a signal that the post-MinIO market expects POSIX-on-object as table stakes, not a hyperscaler luxury.

Why it exists

Following the December 2025 MinIO maintenance-mode pivot and the April 25, 2026 main-repo archival, the self-hosted S3 ecosystem needs truly open-source alternatives. RustFS targets the migration path most aggressively — same binary footprint, same data layout, no re-architecture required.

Primary use cases

Drop-in MinIO replacement, self-hosted S3-compatible storage for data lakes, organizations needing long-term licensing predictability, high-performance object storage for AI/ML pipelines.

Recent developments

Latest signals

  • CVE-2026-27822 — critical (CVSS 9.1) stored XSS in the RustFS Console, disclosed July 2026. Bypassing the console's PDF-preview logic lets an attacker execute JavaScript in the management console and take over an administrative account. Affects versions before 1.0.0-alpha.83 — the current beta line is patched, but any deployment still on an alpha build should upgrade immediately. For a project marketing itself as a drop-in MinIO replacement, the console attack surface is now a due-diligence checklist item. Per CVE-2026-27822 (cve.org).

  • Independent 2026 benchmarks: RustFS wins writes, MinIO wins reads — decisively. Community warp benchmarks (GitHub #2154) show RustFS ahead on small-file inserts (4,472 vs 2,845 rows/s) but MinIO ~3× faster on pure GET (6,819 vs 2,259 obj/s), 53 vs 23 Gbps on large sequential reads, and 24ms vs 260ms TTFB on a 20 MiB object. A Milvus community evaluation (1M×768-dim, HNSW) found the same shape: +57% insert throughput and 57% smaller footprint, but 43% slower index builds and 330% worse search latency (7.96ms vs 1.85ms). The operator verdict: RustFS for write-heavy edge/ingest tiers; keep MinIO (or another read-optimized store) for read-heavy analytics and vector serving. Treat the earlier vendor-side "2.3×" claim as write-path-only. Per rustfs/rustfs#2154 and Milvus — Evaluating RustFS as an S3 backend.

  • GA blocker is distributed clustering. The team's stated posture is "getting it right before getting it fast" — etcd-coordinated cluster metadata is the gating work for a stable 1.0, with clustered performance tuning deferred until after. Per What is RustFS (Sealos).

  • Latest release: 1.0.0-beta.10 (July 2026); no stable 1.0 GA yet. RustFS moved off the alpha line into a fast-moving 1.0.0-beta series through Q2–Q3 2026 — hardening toward production but explicitly still pre-GA. Per rustfs/rustfs releases.

  • Beta series adds a Table Catalog + governance + multi-protocol surface. The 1.0.0-beta releases introduced an object-backed Table Catalog with a REST API — lakehouse-catalog ambitions that parallel the catalog-as-control-plane shift — plus a KMS action taxonomy and policy contracts for security governance, an enhanced background scanner (versioned checkpoints, adaptive pacing, partial-scan resume), and broadened protocol support: SFTP v3, WebDAV, and AMQP notifications. Erasure encoding moved to dedicated workers for throughput; Kubernetes gained scale-to-zero and topology-spread support. Per rustfs/rustfs releases.

  • Drop-in MinIO migration (from 1.0.0-alpha.89, March 2026). The original drop-in-binary-replacement positioning plus official migration tooling — the on-ramp the post-MinIO market formed around. Per rustfs/rustfs discussions.

  • Two earlier CVEs precede the July 2026 console XSS disclosure already documented in this node. CVE-2025-68926 (CVSS 9.8, hardcoded credentials) was fixed in v1.0.0-alpha.78 (December 30, 2025); CVE-2026-22043 (privilege escalation with session/inline policy bypass) was fixed in v1.0.0-alpha.79 (January 2026). Three critical/high-severity CVEs across roughly seven months is a pattern worth tracking for a project marketing itself as MinIO's drop-in replacement. Per CVE-2025-68926 Analysis (CriminalIP) and CVE-2026-22043 (CVE Details). Sources: rustfs/rustfs releases · GitHub (orgs/rustfs)

Connections10

Outbound7
scoped_to2
S3Object Storage
implements1
S3 API
enables1
Lakehouse Architecture
solves2
Vendor Lock-InAGPL Licensing Risk
competes_with1
MinIO
Inbound3
competes_with2
MinIOAlarik
enables1
Godwit Sync

Resources5

GitHubHigh
github.com/rustfs/rustfs

Source repository for RustFS, the Rust-based S3-compatible server designed as an open-source MinIO alternative. 23k+ stars, 104 contributors, alpha-stage.

GitHub IssueHigh
github.com/rustfs/rustfs/issues/73

The independent large-file benchmark thread — MinIO leads on 20 MiB sequential reads (53 Gbps vs 23 Gbps, 24 ms vs 260 ms TTFB). Required reading before adopting RustFS for video / pre-training-corpus workloads.

GitHub IssueHigh
github.com/rustfs/rustfs/issues/2481

Community NFS-mount feature request — the post-MinIO market expecting POSIX-on-object as table stakes parallels the AWS S3 Files architectural shift.

BlogMedium
www.infoq.com/news/2025/12/minio-s3-api-alternatives/

Analysis of post-MinIO S3 alternatives including RustFS, covering architecture, performance, and licensing comparisons.

BlogMedium
iomete.com/resources/blog/evaluating-s3-compatible-storage-f...

Comprehensive evaluation of S3-compatible storage options for data lakehouses including RustFS, SeaweedFS, and Garage.

Featured in

2026-06-06Storage Grew an Agent InterfaceThe S3 API made storage programmable for applications. In a six-week stretch of 2026, the storage layer grew a second interface — for agents. Weaviate, Pinecone, and RustFS all shipped built-in MCP servers; cheap inference and agentic retrieval made it inevitable; and the Apache Polaris CVE cluster showed the security bill that comes due. This is the discoverability inflection for self-hosted AI data infrastructure.2026-05-16When AI Memory Became an Architecture: KV-Cache Persistence, MCP, and the Night S3 Got Its Memory TierStateful agents needed stateful storage. Tonight 33 new nodes joined the index: Mem0, Zep, LMCache, SGLang, Mooncake, MCP, cuObject, BlueField-4, Animesis CMA. The architectural thesis: AI memory infrastructure crystallized around object storage in 2026, and the persistence layer the industry settled on is S3.2026-05-08When the Index Gained 13 Nodes: A Field Guide to the May 2026 WaveOn May 7 the index added 13 new nodes — five technologies, six pain points, one architecture, one standard. Each answers a specific question engineers building on object storage are asking right now: what is China's S3 stack, why are GPUs starving, what replaced MinIO, what are the three data gravity wells, and a few more. This post walks through them by question rather than by node type, because that's how the questions actually arrive in production.2026-05-07When DeepSeek Made Storage Strategic: The China Direction Reshaping the S3 EcosystemDeepSeek's $5.6M training run didn't just reset model architecture. It made object storage performance-critical, made silicon export controls a storage decision, and pushed Aliyun OSS, Tencent COS, and Huawei OBS from regional curiosities into the global S3 vocabulary. This index added 13 nodes to track what changed.2026-05-01What Survived MinIO: The Post-Archive S3 Server Landscape, May 2026On April 25, 2026, MinIO archived its main GitHub repository. This index has tracked Vendor Lock-In as a first-class pain point since launch. Here is what the post-MinIO Apache-2.0 server set actually looks like — Alarik, RustFS, SeaweedFS, Garage — and what the fragmentation tells us about what we believed open-source meant.2026-03-21The Shift to Local Intelligence: How Local S3 and Edge Inference Are Replacing Cloud LatencyThe economics and architecture behind the migration from cloud inference to local-first AI — covering the Local S3 semantic storage pattern, CXL memory expansion, specialized inference silicon, and why 80% of AI inference is moving to the edge.