Building even faster interpreters in Rust

This post details performance optimizations made to the Wirefilter engine, which powers Cloudflare's Firewall Rules and other security products. Key contributions include: development of a performance measurement framework using hardware counters and the perf_event_open API; techniques to speed up benchmarking by deduplication, sampling, and partitioning of filters; and optimization of the `contains` operator by leveraging specialized string searching algorithms and exploring the use of Rust's regex library for fixed-string patterns. The post also discusses the trade-offs involved in these optimizations and the importance of measuring performance in a distributed environment.