Synadia and TigerBeetle Pledge $512k to the Zig Software Foundation

148 pointsposted 6 hours ago
by cratermoon

61 Comments

ruuda

2 hours ago

> We did have three bugs that would have been prevented by the borrow checker, but these were caught by our fuzzers and online verification. We run a fuzzing fleet of 1,000 dedicated CPU cores 24/7.

Remember people, 10,000 CPU hours of fuzzing can save you 5ms of borrow checking!

(I’m joking, I’m joking, Zig and Rust are both great languages, fuzzing does more than just borrow checking, and I do think TigerBeetle’s choices make sense, I just couldn’t help noticing the irony of those two sentences.)

matklad

an hour ago

It's not that ironic though --- the number of bugs that were squashed fuzzers&asserts but would have dodged the borrow checker is much, much larger.

This is what makes TigerBeetle context somewhat special --- in many scenarios, security provided by memory safety is good enough, and any residual correctness bugs/panics are not a big deal. For us, we need to go extra N miles to catch the rest of the bugs as well, and DST is a much finer net for those fishes (given static allocation & single threaded design).

cfiggers

an hour ago

If Zig does eventually save the world one day, it'll be just as much thanks to TigerBeetle as to the Zig Foundation itself.

Having a serious, dedicated, and smart partner, in industry, working hard to operationalize and turn a profit on the language is a massive boon to the whole project (and it would be even if they didn't choose to give back monetarily, but all the more since they are!).

AndyKelley

4 minutes ago

I completely agree. Huge respect and appreciation to Joran & team.

bikeshaving

4 hours ago

I’m guessing they chose $512,000 because “512” is a power of 2 and systems programmers love that sort of shit, but 2^19 is 524,288. I mean $12,288 is not insignificant but it would have been cooler.

Taek

4 hours ago

I'm not sure how many people would recognize 524,288 as a power of 2, but probably many fewer than the number of people who would recognize 512 as a power of 2

inopinatus

3 hours ago

I recommend having instant recognition of all the powers up to 2^24, this has proven very useful over the years e.g. when skimming quickly through a log searching for anomalies, flag patterns etc. If you recite them in sequence twice a day for a couple of weeks, then they’ll stick in your mind for decades. I can say from experience this method also works for the NATO phonetic alphabet, Hamlet’s soliloquies, ASCII, and mum’s lemon drizzle cake recipe. It fails however for the periodic table, ruined forever by Tom Lehrer.

kachapopopow

2 hours ago

can confirm it is very useful, same for common constants in crypto algorithms

quesera

4 hours ago

Ever the quandary: satisfy some people completely, or a larger number but incompletely.

I concur with the suggestion of 2^19, because even though fewer people would recognize it immediately, many of them would question the significance, and their eventual realization would be more satisfying.

ghurtado

2 hours ago

> and it the eventual realization would be more satisfying.

I think you might be overestimating the curiosity of the average person.

I'm regularly baffled / saddened by how many people care so little about learning anything new, no matter how small.

Is it a woe of modern times? Or has it always been this way?

quesera

2 hours ago

> I think you might be overestimating the curiosity of the average person.

Oh absolutely. But I like to optimize for the others. :)

Also, the audience for consideration here is pretty ... rarified. 0.0% of people in the world, to a first approximation, have heard of Zig. Those that have, are probably pretty aware of powers-of-two math, and maybe curious enough to wonder about a value that seems odd but is obviously deliberately chosen.

> Is it a woe of modern times? Or has it always been this way?

I suspect it's always been this way. People are busy, math is hard, and little games with numbers are way less engaging than games with physical athleticism or bright lights.

cedws

3 hours ago

Maybe they count like storage manufacturers. 512 kilobytes instead of kibibytes :)

CamouflagedKiwi

an hour ago

It's $256k each from two companies, in monthly instalments, which ends up not being particularly close to a power of 2 each month.

ghurtado

2 hours ago

Maybe their donation was in $1000 bills

davemp

4 hours ago

Very good news. Happy to see Zig getting more investment. I already use the build system for production systems and am looking forward to writing some more Zig when projects allow.

Having a modern language that attempts to directly model low level systems is very important.

hoppp

3 hours ago

I really think that zig is the way forward and this is great news.

fithisux

3 hours ago

While I will stay for now on C, on my Windows PC where I have my hobby attempts, I use zig as Win32 compiler for C/RC/...

Still I use jom for building but I may move to Zig build

wrcwill

2 hours ago

can someone explain why zig is often compared to rust?

i understand zig as a better C, but in what world is another memory unsafe language a good idea?

i mean i kinda get if the thing you are writing would require LOTS of unsafe, then zig provides better ergonomics

however most programs can definitely be written without unsafe and in that case i dont get why wed do this to ourselves in 2025

why not take advantage of memory safe, and data race safety?

whatshisface

2 hours ago

Memory safety is a gradient. Zig is "memory safe-er" than C just because its arrays store length. Of course, RCE vulnerability is not a gradient.

dnautics

2 hours ago

because rust is more than just memory safety, it's not obvious that "the rust way" is the only way to go. fil-c is a good? example of a alternative strategy. sel4 is a radically different strategy that is as much of a pain in the ass as it's powerful. (disclaimer, i'm working on compile time memory safety for zig)

CamouflagedKiwi

an hour ago

Because both are languages that could feasibly be used to solve a particular set of problems. TigerBeetle could have been written in either, they explain why they didn't choose Rust but it was a feasible alternative (in a way that Java or Python would not have been).

Conceptually C and C++ are also in that potential solution space, but I'm sure they feel that Zig's properties are superior for what they want.

allknowingfrog

an hour ago

The article actually addresses these questions. It's way more than just a donation announcement. It lays out the various reasons that Zig is the language of choice for TigerBeetle.

morkalork

4 hours ago

Can I hop in here and ask: As someone who hasn't done any systems programming in a decade, what would be more interesting to learn on the side, Zig or Rust? I've been in the Python world and seeing tools like uv and ruff, makes me biased towards Rust but Zig seems to be attracting a lot of hype recently?

Edit: Thank you all for your responses!

flohofwoe

3 hours ago

IMHO you should spend one weekend with tinkering with Rust and another weekend tinkering with Zig (e.g. up to a point where you can write simple but still not completely trivial programs both in Rust and Zig), and then decide for yourself which one better matches your taste.

For some people the huge 'surface area' and strict type system of Rust is a big turn-off, while others want exactly that from a programming language.

vlovich123

3 hours ago

Rust takes more than a week to really get. However it has a much more mature ecosystem both in terms of available libraries as well as documentation.

One main difference is that Rust is guaranteed memory safe with generally no runtime overhead for that safety. It also has protections and abstractions to make multithreaded code safe and generally correct.

hackermailman

an hour ago

Brown PLT group has a lot of Rust resources like a debugger for traits https://cel.cs.brown.edu/blog/an-interactive-debugger-for-ru... a model of ownership types https://blog.brownplt.org/2023/09/17/rust-ownership.html and an experimental rewrite of the Rust book https://rust-book.cs.brown.edu/

Systems programming can be done in ocaml or any language really where there is some documentation on the runtime how not to trigger the GC or flags that can be passed to custom set GC policy

jgilias

an hour ago

Have you done any ML-lineage languages before (ocaml, Haskell)? If yes, did you like it? If yes, the answer to your question is probably Rust. The thing about Rust is that it’s kind of this Frankenstein language with a lot of foundational influence coming from ML lineage languages (algebraic data types, traits, combinator heavy programming, etc) but with curly braces and memory management part unique (lifetimes) part modern C++ (smart pointers).

I see Zig as being a lot more in C tradition and lineage with nicer and safer memory management techniques. Also comptime (Lisp-ish there?)

My two cents

lacker

3 hours ago

I feel like Zig is closer to "better C" and Rust is closer to "better C++". So I'd pick based on whether you are more in a C mood or a C++ mood.

matklad

4 hours ago

You need to learn both. Both borrow checker (Rust) and comptime (Zig) are huge ideas worth getting your hands dirty with.

If you don't have time to learn both, then learn Zig, as it requires much smaller time investment (though do try to find time for both).

vlovich123

3 hours ago

For what it’s worth there’s a comptime crate for Rust. Not as elegant as a language level feature but probably accomplishes very much similar things.

https://docs.rs/comptime/latest/comptime/

CathalMullan

3 hours ago

There are plans to experiment with language level comptime support too: https://github.com/rust-lang/rust/pull/148820

smj-edison

an hour ago

Oh my gosh, that would be incredible! In one of my rust projects, I used enum dispatch so simple functions could be inlined, but it used a slightly hacky macro that couldn't do static dispatch. One of those things that comptime matches very well.

grayhatter

4 hours ago

Why not learn both?

For hobby projects, zig will get you *much* closer to the underlying system. So if your goal is systems programming where you're responsible for and get to play with the system itself. Zig will get you there much faster, and the language wont take much time to learn and have fun with.

Surely someone will now attempt to correct me, by asserting it's impossible for anyone to write safe code without rust, and it's improper for me to even suggest Zig. But I'm enjoying the language a lot. It's easy to pick up and understand, and importantly it gets out of your way quickly so you can build exactly the system you want.

For more complex or professional projects however, I would still recommend Zig but more because I can't stand rust. It bothers me that it rejects valid programs because the compiler is unable to prove what I can. So the additional dance rust requires ruins an otherwise fine language.

edit: my default language before zig was also python, so feels reasonable to also mention that I'm pretty sure it'll be significantly easier to transition from python into Zig rather than into rust. There's a number of idioms and expectations from python that fit well in zig, but dont fit in rust.

smj-edison

2 hours ago

I see people say that if you like C you'll like Zig, and if you like C++ you'll like Rust. I kinda disagree, since both languages take a lot from C and C++.

Rust feels like "let's take the best safety features from both", while Zig feels like "let's take the best transparency from both". In a way, Rust's traits are more foreign to C++ than Zig's comptime, as Zig has similar duck typing (though the ergonomics are much cleaner, especially with @compileError).

SatvikBeri

3 hours ago

I'm in a similar position, I want to learn both eventually but chose to start with Rust because it has several really strong-seeming (like the intro book, or Rust Atomics and Locks), while Zig doesn't have many books yet.

whatshisface

2 hours ago

The need for book-length expositions is much greater for Rust.

bbkane

3 hours ago

I totally agree with the "try both", but if part of your motivation to learn one is to use it for a job, Rust is more mature than Zig (Zig is not yet 1.0, and still making exciting breaking changes to the languag), and Rust currently has more adoption than Zig- parts of Firefox, Chrome, Android, Windows, Linux, AWS, Azure (and I'm sure thre are more).

Zig is gaining integration into larger projects (Ghostty, TigerBeetle, Roc, Ubers build system come to mind), but it's not yet achieved Rust's success

Zambyte

2 hours ago

Zig is easier to get up and running with. Rust is easier to land a job with. Rust is more novel (borrow checker), while Zig is likely more familiar (unique blend of existing ideas).

It really depends what you mean by "interesting" :-)

the__alchemist

4 hours ago

Short answer: If you like to use pointers in business logic (E.g. not just for MMIO and addressing physical memory): Zig. Otherwise: Rust.

Note that there are a number of domains where Zig might be a practical option in the future, but aren't now due to library support. With Rust, you will reinvent wheels more than most people have an appetite for. In Zig, you will do this for most things.

AlotOfReading

2 hours ago

The main difference I've noticed is that the core devs in the rust community are, above all, extremely thoughtful and systematic about how language changes address the core language goals. The zig devs I've interacted with seem much more focused on having a clean developer experience instead of trying to find elegant solutions to hard language design problems. That's not necessarily a bad thing, but it's a very different thing. In particular, the borrow checker is enforcing rules 99% of your pointer code should be following anyway.

The main complaint about the borrow checker is that what seem like trivial changes can have subtle implications that require wildly different ownership patterns to be made correct. Rust tells you something's wrong. If you don't thoroughly understand how you're using pointers (which few people do), it can feel like trivial changes exploding into much larger refactors than you'd need in languages where the rules aren't statically enforced.

whatshisface

2 hours ago

Zig is not done yet. They make breaking changes with each minor version.

Zambyte

2 hours ago

I have been writing small Zig projects for a couple of minor releases now, and this is no joke. They are not afraid to change core features in breaking ways. However, they do a good job with migration guides, and the breaking changes always feel like a very thoughtful step in a good direction. I'm very excited to see where Zig lands when it stabilizes.

schaefer

3 hours ago

only you can decide what you find interesting.

mutkach

4 hours ago

More information is needed to give proper advice:

- Do you like filling out the type annotations in Python (making sure linter check passes)? Do you like TYPES in general?

- Do you like working with memory (crushing memory bugs, solving leaks)?

- Do you prefer imperative or functional approach more?

morkalork

4 hours ago

IMO type checking is the best thing to happen to Python in recent memory and eliminates a whole class of developer errors. Getting linters to pass 100% also scratches a weird itch for me, like collecting items in a video game haha.

I do like working with memory, seeing a custom slab allocator used in production code was one of the more interesting aspects of the little experience I had with c++, but always having to be "on guard" so as to not shoot myself in the foot with pointer manipulation was kind of exhausting.

I like both.

mutkach

3 hours ago

That "itch" is exactly what I meant, lol! And I agree! I'd definitely give Rust a try. Playing around with types and traits until they click is genuinely addictive - it feels like solving a puzzle or something

Vaslo

3 hours ago

My world sounds exactly like yours and I love the astral packages - thanks for asking this

cmrdporcupine

3 hours ago

Increasingly I feel like these two have very different audiences.

Disappointingly as a Rust dev, I don't actually see a lot of Rust being used for "systems" development (OS, driver, DB internals, embedded, etc), but increasingly for network services/web services/web stack work, heavily biased towards tokio async driven applications. It's a lot of engineers living further up the stack, leaning on frameworks, and in applications with very large dependency tree footprints. As a % anyways. There's a lot more Rust code out there than Zig.

I think Zig has a far more minimalistic thing going on and I like that. I find its type system a lot more primitive, and would miss ADTs/enums, and the borrow checker etc. but I like its overall philosophy better.

whatshisface

2 hours ago

Zig has closed enums, so you can recover some of Rust's sum type safety.

letmetweakit

4 hours ago

I’d choose Rust because of the better safety guarantees and nice tooling.

esafak

4 hours ago

Oh, interesting. Is NATS moving to Zig??

dangoor

3 hours ago

Synadia's announcement, https://www.synadia.com/blog/synadia-tigerbeetle-zig-foundat..., says:

> There are no plans to move the NATS server to Zig.

> Zig will become a Tier 1 NATS client, and Synadia will utilize Zig in resource constrained environments to bridge OT/IT for manufacturing, IIOT, connected cars, robotics and embodied AI.

benjiro

2 hours ago

What will NATS gain from moving from Go to Zig? No GC ... For the rest, Zig is still unstable, while Go is mature and not prune to change. Makes little sense.

justincormack

3 hours ago

I think they said last time they are working on a zig project, not doing a rewrite

rvz

2 hours ago

The Zig Foundation is funded by donations from everyone from individuals to businesses such as TigerBeetle. At least you can donate directly to them.

The Rust Foundation on the otherhand…

kennykartman

2 hours ago

> The Rust Foundation gratefully accepts donations from individuals and non-member organizations alike!

I might miss your point, but I don't see the difference.