live wire
▸PLATFORM · Red Hat Edge Manager 1.3.2 adds standalone deployment alongside RHACM and Ansible pluginsRed Hat Product Errata▸SECURITY · OpenShift 4.18.60 fixes unverified remote inventory script executionRed Hat Product Security▸JAVA · Quarkus tests JDK 28’s Leyden AOT code cache against startup workloads (Nov. 2)Quarkus▸AI · vLLM 0.33.0 drops CUDA 12.9, adds PyTorch 2.14 and a decisions API (Nov. 2)vLLM▸SECURITY · OpenShift 4.16.75 fixes eight OpenSSH, PCRE2 and OpenSSL flaws rated ImportantRed Hat Product Security▸SECURITY · Red Hat ships Critical OpenShift 4.19-4.21 fixes for kernel and brotli flawsRed Hat Product Security▸SECURITY · Red Hat links Moderate Hibernate Validator DoS to OpenShift AI, Dev Spaces and JBoss (updated Nov. 8)Red Hat Product Security▸SECURITY · Red Hat says Important Keycloak client-management flaw enables server code execution (updated Nov. 7)Red Hat Product Security▸FIELD BUILDS · StarGate turns repeated OpenShift lab failures into fleet-level known issuesRHDP StarGate▸SECURITY · Red Hat says OpenShift is affected by Important Linux kernel privilege-escalation flawRed Hat Product Security▸SECURITY · Red Hat adds mitigation for Important OpenShift Pipelines-as-Code privilege escalationRed Hat Product Security▸AI · Red Hat and F5 map an air-gapped security loop for sovereign OpenShift AI clouds (Nov. 6)Red Hat Architecture Center▸SECURITY · Red Hat ships Keycloak 26.4.18 images with authorization, DoS and code-execution fixesRed Hat Product Security▸PLATFORM · OpenShift Service Mesh 3.5 adds multicluster ambient mode and workload identity federation (Oct. 29)IBM Power Open Source Development▸PLATFORM · Red Hat Edge Manager 1.3.2 adds standalone deployment alongside RHACM and Ansible pluginsRed Hat Product Errata▸SECURITY · OpenShift 4.18.60 fixes unverified remote inventory script executionRed Hat Product Security▸JAVA · Quarkus tests JDK 28’s Leyden AOT code cache against startup workloads (Nov. 2)Quarkus▸AI · vLLM 0.33.0 drops CUDA 12.9, adds PyTorch 2.14 and a decisions API (Nov. 2)vLLM▸SECURITY · OpenShift 4.16.75 fixes eight OpenSSH, PCRE2 and OpenSSL flaws rated ImportantRed Hat Product Security▸SECURITY · Red Hat ships Critical OpenShift 4.19-4.21 fixes for kernel and brotli flawsRed Hat Product Security▸SECURITY · Red Hat links Moderate Hibernate Validator DoS to OpenShift AI, Dev Spaces and JBoss (updated Nov. 8)Red Hat Product Security▸SECURITY · Red Hat says Important Keycloak client-management flaw enables server code execution (updated Nov. 7)Red Hat Product Security▸FIELD BUILDS · StarGate turns repeated OpenShift lab failures into fleet-level known issuesRHDP StarGate▸SECURITY · Red Hat says OpenShift is affected by Important Linux kernel privilege-escalation flawRed Hat Product Security▸SECURITY · Red Hat adds mitigation for Important OpenShift Pipelines-as-Code privilege escalationRed Hat Product Security▸AI · Red Hat and F5 map an air-gapped security loop for sovereign OpenShift AI clouds (Nov. 6)Red Hat Architecture Center▸SECURITY · Red Hat ships Keycloak 26.4.18 images with authorization, DoS and code-execution fixesRed Hat Product Security▸PLATFORM · OpenShift Service Mesh 3.5 adds multicluster ambient mode and workload identity federation (Oct. 29)IBM Power Open Source Development
upstreambeat.ai
analysisJAVA

Quarkus puts Project Leyden’s compiled-code cache through a production reality check

JDK 28’s AOT cache can preload optimized HotSpot code, but deployment teams still need representative training runs and hardware-compatible build paths.

By The News Desk· Nov 9, 2026the quick take — two AI hosts go live when you do

Project Leyden is moving Java’s ahead-of-time cache beyond class metadata and profiles. In a Quarkus engineering discussion published Nov. 2, OpenJDK committer Maria Arias de Reyna Dominguez walked through the newly integrated compiled-code layer and the operational constraints that come with it.

What changed

JEP 544 extends HotSpot’s existing AOT cache so a training run can store optimized native code for selected hot methods. A later production run can load that code immediately instead of starting those methods in the interpreter and waiting for tiered JIT compilation to catch up.

This is not an AOT-only Java mode. HotSpot can discard cached assumptions, deoptimize and compile new code when production traffic differs from the training workload. The proposal keeps the existing -XX:AOTCacheOutput and -XX:AOTCache workflow rather than introducing a separate compilation system.

The first implementation targets x64 and AArch64. JEP 544 also rules out cross-compilation: the training and production environments must use the same processor architecture and feature set.

Why Quarkus teams should care

The Quarkus write-up frames startup as two different problems. Framework work determines how quickly an application opens its port, while JVM warmup determines how quickly it begins returning responses at steady speed. Leyden’s cache is aimed chiefly at the second path, although earlier cache layers already move class loading, linking and profiling work into the training run.

That distinction matters for container platforms. A service can be technically ready while still spending CPU and memory on compilation during its first burst of requests. Preloading compiled code can move more of that cost into an image-build or preparation stage without closing the application to later JIT adaptation.

Quarkus also cautions against reading normalized framework charts as a ranking. Each framework is compared with its own uncached baseline, and Quarkus already performs substantial work at build time.

What to try

Teams evaluating JDK 28 early-access builds should treat the cache as a deployable artifact tied to a specific application, JDK and processor target. The training workload should exercise the startup and request paths that matter in production; unrepresentative traffic will still run, but HotSpot may need to deoptimize and compile different paths.

A useful test should separate port-open time, first-response latency and sustained throughput. It should also account for the CPU and memory saved during warmup, not just wall-clock startup. For mixed-architecture fleets, produce and validate separate caches rather than assuming one training artifact will travel across nodes.

Leyden’s design preserves HotSpot’s adaptive behavior. The engineering question is therefore less “native or JVM” than where a platform team wants to pay the compilation cost—and how reliably its build pipeline can reproduce the workload and hardware assumptions behind the cache.

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.