AntiMalware•October 2, 2026•🇷🇺Translated from Russian

Yandex B2B Tech Integrates Hybrid Full-Text and Vector Search in Single YDB Query

Yandex B2B Tech has introduced hybrid search capabilities to its YDB database platform, combining full-text and vector search methods within a single query.

The new feature enables organizations to solve two tasks simultaneously: locating an exact document identifier such as a policy number and interpreting the semantic meaning of surrounding text, even when alternative phrasing is used. Full-text search manages precise matches for words, names, and codes, while vector search identifies conceptual similarity across documents.

According to the YDB development team, the two approaches complement each other effectively. In insurance-related queries, for example, the system can return an exact policy number alongside descriptions of incidents that match in meaning despite different wording. Results are combined and ranked inside one SQL query, simplifying application logic.

A key practical advantage is that all data remains in a single database. Companies no longer need to operate a separate search engine and vector database or monitor consistency between the two systems. Indexes are updated together with the underlying data as part of the same transaction, reducing synchronization overhead and potential data drift.

The technology is designed for chatbots, recommendation services, and AI assistants that require more than simple keyword matching. It is especially relevant when processing technical information where both precise part codes and natural-language problem descriptions must be handled accurately.

Hybrid search is available in the corporate edition of YDB 26.3 for on-premises deployment as well as in the cloud Managed Service for YDB.

Related articles

Habr•Other

What Server Logs Reveal About Attackers: Analyzing Suspicious Requests on Linux

Server logs provide critical insights into potential intrusions by recording events from the operating system, SSH authentication, and web applications. The guide explains how to examine Linux system journals with journalctl, review authentication logs on Debian and RHEL systems, and inspect Nginx access logs for unusual HTTP requests. Analysts learn to identify patterns such as rapid failed login attempts using multiple usernames from a single IP address, which may indicate brute-force or automated scanning activity. The article also covers counting the most active IP addresses with awk and sort commands while stressing the need to compare findings against normal traffic baselines. Additional recommendations include logging structured security events in JSON format with fields for timestamp, user ID, resource, and outcome, following OWASP guidelines. The text warns against storing sensitive data like passwords in logs and highlights limitations such as possible log tampering or unsynchronized server clocks. A practical seven-step investigation plan helps responders preserve evidence and verify hypotheses before taking action.

Habr•Other

UserGate Details FPGA Acceleration to Turbocharge Next-Generation Firewalls

UserGate product manager Pavel Molodan explains why adding security features like IDS/IPS, SSL/TLS inspection, and application control turns a high-performance NGFW into a bottleneck. The company outlines four groups of acceleration methods, with a focus on FPGA-based hardware offloading for packet parsing, firewall rules, NAT, and encryption tasks. Research from 254 respondents shows strong demand for these functions in data center B2E segments at 50-200 Gbit/s. Experimental platforms including Katun-2 PCIe cards and the FG system demonstrate concrete gains, such as scaling IDPS from 5 to 90 Gbit/s and achieving 85 Gbit/s firewall throughput on EMIX profiles. FPGA delivers microsecond latency and better energy efficiency compared with CPU-only designs while preserving full NGFW functionality for elephant flows.

Habr•Other

Curator Reveals Detailed Architecture of Its Network Filtering System After October 2026 Outage

Curator published a technical post-mortem analyzing the 38-minute outage that affected its entire traffic filtering network on October 8, 2026. The company operates nine filtering sites across Russia, each containing multiple nodes connected via high-performance switches to upstream providers. Traffic is isolated using two VRF contexts—external for inbound dirty traffic and internal for cleaned traffic—ensuring sequential processing through the protection system. Each node runs a custom Linux kernel firewall and a watchdog service that monitors BGP sessions to detect failures and remove unhealthy nodes from rotation. Centralized configuration management via CControl allows rapid rollout of rules but also introduces systemic risk when faulty changes propagate across all nodes. The post-mortem emphasizes the need for isolation, staged deployments, and independent recovery mechanisms in large-scale filtering infrastructures.

Habr•Other

Testing Sinonix Controlled Data Exchange System with VEGMAN R220 G3 Servers and TATLIN.BACKUP.M Storage

YADRO and IT Bastion conducted extensive performance testing of the Sinonix information exchange control system using high-capacity VEGMAN R220 G3 servers and TATLIN.BACKUP.M storage arrays. The tests simulated one-way data transfer scenarios for disaster recovery and air-gapped backup environments required by Russian presidential decree No. 604 on critical infrastructure protection. Multiple fio workloads were run for up to five hours under both light and heavy queue-depth profiles with MTU sizes of 1500 and 9000. Results showed that Sinonix introduced minimal overhead in moderate workloads and up to 27 percent reduction under heavy parallel loads when using jumbo frames. The setup replicated multi-tier protective perimeters including synchronous replication, one-way safe zones, and remote immutable storage. The testing confirmed stable long-term operation without degradation or failures across all configurations.