Bounded same-host runtime state for Rust process fleets
Orbitive is a Rust facade for bounded, same-host runtime state shared by a fleet of sibling processes.
It provides two storage shapes:
- rings for recent, append-only history;
- fixed-capacity tables for current keyed state.
Both shapes can run in process memory or over POSIX shared memory. They are intended for ephemeral runtime coordination where a database or network broker would be unnecessary. They do not provide durability or network replication.
The facade is published as orbitive. Its runtime model and public type names
use the established Orbit vocabulary, such as Fleet, OrbitTyped, and
OrbitEpoch.
Add the facade
[]
= { = "0.3.4", = ["events", "lock"] }
Core types used by most integrations are available at the crate root. The full
low-level surface remains under orbitive::core.
use Arc;
use FleetEventBus;
use Fleet;
let fleet = new;
let bus = new;
bus.publish?;
# Ok::
Feature modules
| Feature | Module | Purpose |
|---|---|---|
| always | orbitive::fleet |
fleet membership and node identity |
| always | orbitive::ring |
typed rings, cursors, and readiness primitives |
| Unix | orbitive::shm |
POSIX shared-memory regions and naming |
| always | orbitive::core |
the complete low-level core surface |
cache |
orbitive::cache |
process-local L1 caches with fleet-wide mutation propagation |
counter |
orbitive::counter |
keyed signed counters shared across the fleet |
events |
orbitive::events |
raw topic and byte-payload event streams |
invoke |
orbitive::invoke |
bounded invocation requests with operation routing |
lock |
orbitive::lock |
keyed leases with ownership checks and fencing tokens |
metrics |
orbitive::metrics |
current metrics snapshots across workers |
rustls / rustls_0_24 |
orbitive::rustls |
fleet-shared rustls 0.23/0.24 server-session storage |
The implementation crates are also published separately as
orbit-core, orbit-cache,
orbit-counter, orbit-events,
orbit-invoke, orbit-lock,
orbit-metrics, and
orbit-rustls. Direct dependencies are supported when an
integration needs a single narrow layer; applications can otherwise use the
facade and enable only the modules they need.
Compile-time geometry
The default shared-memory geometry can be selected once for an entire
downstream Cargo build graph. Put the desired values in the application's
.cargo/config.toml; ordinary cargo build, cargo test, and cargo run
commands then compile every Orbit dependency with the same values:
[]
= { = "1024", = true }
= { = "512", = true }
= { = "1024", = true }
= { = "240", = true }
= { = "256", = true }
= { = "8192", = true }
= { = "1024", = true }
= { = "1024", = true }
= { = "1024", = true }
= { = "4096", = true }
= { = "1024", = true }
= { = "1024", = true }
= { = "256", = true }
= { = "960", = true }
= { = "1024", = true }
= { = "4096", = true }
= { = "256", = true }
= { = "8", = true }
= { = "64", = true }
= { = "64", = true }
= { = "16384", = true }
Every key is optional and retains the documented default when absent. Values
are decimal byte or entry counts and may contain _ separators. Invalid
values fail compilation. These settings are part of the fleet wire contract:
all peers that open the same fleet must be built with the same geometry, and
existing SHM objects must be cleared before a geometry change takes effect.
Command-line inspection
The separately published orbitive-cli package installs the orbit command.
It can inspect Orbit POSIX shared-memory objects without joining the fleet:
It can also remove one object or every object belonging to a stopped fleet:
Do not clear a running fleet. Existing POSIX mappings survive unlink while a later process can create a different object under the same name.
Runtime contract
Every process joining the same shared fleet must agree on the immutable fleet capacity, node ownership, stable kind numbers, and ring or table layouts. Capacity reserves physical node lanes; it does not assert current membership or liveness. Storage is bounded: old ring frames may be overwritten, caches may miss, and session entries may be evicted. Callers must treat those outcomes according to the semantic module they use.
Shared-memory operation currently targets Unix. Native readiness is available
on Linux, FreeBSD, and macOS 14.4 or later. On older macOS, readiness creation
returns io::ErrorKind::Unsupported; callers can use polling where the
semantic module permits it.
Repository: https://github.com/iadev09/orbitive