Build1 distinct publisher3 min readUpdated
A p99 of 200 milliseconds from Kafka to the online store beats batch cadence by a wide margin. It also stops before your model reads the feature.
The Engineer · Build desk
Compiled by The EngineerSomething wrong?How this is made
Databricks has published the internals of a streaming path for its Feature Store, in which a definition authored once drives both large-scale offline batch flows and a fresh online pipeline [1]. For teams who built a bespoke low-latency serving tier because scheduled Spark was too slow, the useful detail is not the freshness claim but where the measured latency boundary sits [7].
The problem statement is familiar. Scheduled Spark jobs over Lakehouse data are well understood for historical baseline features, but batch cadence introduces minutes to hours of lag [3]. Databricks argues that lag is an acceptable price for baseline signals and that the infrastructure breaks down when models need fresh ones, asserting that getting down to seconds or milliseconds is not possible in existing feature store platforms [3][4]. That is a vendor claim about competitors and should be read as one. Its description of the workaround is harder to argue with: data scientists writing complex streaming-specific aggregation logic and standing up custom hosted infrastructure [5].
The replacement, according to Databricks, orchestrates Spark Real-Time Mode for continuous stream processing, Lakebase as streaming-optimized online storage, and Model Serving for retrieval at scale [6]. The published number is an end-to-end p99 of 200ms, from an event arriving in Kafka to availability in the online feature store [7]. Note both ends of that measurement. Kafka is still upstream in Databricks' own account of the path, so the queue you run does not go away [7]; and the 200ms covers ingest through write-visibility, not the model's read of the feature or the inference that follows. Against a one-minute batch cadence, the fastest end of the stated minutes-to-hours range, 200ms is about 300 times tighter [8]. Against an hourly job it is about 18,000 times [9].
Mechanically it is the design most teams converge on independently. Each transaction event, carrying amount, location, user id and merchant details, is routed to a stateful pipeline that consults a local RocksDB instance holding the user's running total, with expiry times bounding the window to the last 10 minutes, increments the value locally, then writes it to Lakebase [10]. The 10-minute sum is then fetched alongside the user's 30-day purchasing baseline, and a sum well above that baseline is what the model reads as potential fraud [11][12].
The cost question lives in the window semantics, and Databricks is reasonably candid about it. Feature Store supports three time window types [13]. Tumbling and sliding windows emit fewer updates, are cheaper to maintain, and fit naturally into simpler scheduled pipelines [14]. Rolling windows trade that efficiency for maximum freshness, where every new event immediately affects the value served [15]. One online write per event per key is not a rounding error at fraud-traffic volumes, and the post does not price it.
Worth watching: whether the 200ms holds once Model Serving retrieval and inference are inside the measurement, given that Model Serving is a separate component in the chain [6][7]; and what the state layer costs when rolling windows are the default choice for anything latency-sensitive [15]. Anyone running a Redis tier purely to close the batch-lag gap now has a narrower justification than they did, but the number to compare is total read-path budget at their own key cardinality, not the write-side p99 in the blog post [7].
Follow any of these and your For You feed starts watching them — no settings page required.
Ranked by verification strength, evidence, and original report placement.
Databricks' fraud example combines a user's average transactions for the last 30 days with the total transaction amount from the last 10 minutes; long-range aggregations set a baseline of what is normal while recent data surfaces abnormal behaviour as it happens.
When a query comes to the model to approve a new transaction, the up-to-date 10-minute sum is fetched along with the user's historic purchasing baseline, and a sum well above the historic baseline is a strong indicator to the model of potential fraud.
Databricks states that when models require fresh signals the batch infrastructure breaks down, and that getting down to seconds or milliseconds is not possible in existing feature store platforms.
The framework orchestrates Spark Real-Time Mode (RTM) for continuous stream processing, Lakebase for streaming-optimized online storage, and Model Serving for retrieval at scale.
Databricks reports end-to-end p99 latency of 200ms, from an event arriving in Kafka to availability in the online feature store.
Each incoming event carries transaction details (amount, location, user id, merchant information) and is routed to a stateful pipeline; the pipeline consults a local RocksDB instance holding the user's running transaction total, with expiry times that keep the window to the last 10 minutes, reads and increments the value locally, then writes the updated feature value to Lakebase.
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
Detailed architecture, single vendor source, unaudited numbers
Everything in the cluster comes from one Databricks-authored blog post. The architectural description is unusually specific and internally consistent (RTM stage concurrency, per-row RocksDB updates with 10-minute expiry, Lakebase writes, three window types with a stated cost/freshness tradeoff), which supports the design claims. The quantitative and competitive claims are weaker: the 200ms p99 arrives with no methodology, no throughput or cardinality, and a boundary that stops at the online-store write, and the assertion that rival feature stores cannot reach sub-second freshness names no comparison. There is no independent reporting, third-party benchmark, or customer account.
No adoption signal in supplied sources
The supplied material contains no deployment, usage, customer, release-tier, download, or pricing evidence. The blog does not say whether the streaming feature capability is in preview or generally available, names no user, and the fraud scenario is an illustrative example rather than a reported production deployment. Adoption cannot be scored without inferring facts the source does not provide.
Real mechanism, boundary-shifted headline number
Positive but moderate. The underlying engineering claim is substantive and specifically described, so this is not empty marketing. The overstatement is in framing: 'sub-second freshness' and 'served in milliseconds' are supported only to the point of the write into the online store, while the motivating scenario is a fraud decision that must complete in milliseconds after retrieval and inference — costs the post never quantifies. The competitive assertion that seconds-to-millisecond freshness is impossible in existing feature store platforms goes further than any evidence supplied, and the acknowledged extra cost of rolling windows is never sized.
Vendor publishing on its own paid stack
The sole source is Databricks writing about a Databricks product, and the described path monetises three of its own services: Spark Real-Time Mode compute, Lakebase as the online store, and Model Serving for retrieval. Rolling-window features write per event rather than per schedule, so the recommended high-freshness pattern also increases consumption. The post additionally makes a competitive claim about rival feature stores. No independent voice, customer, or critic appears in the cluster to offset that alignment.
Design claims trustworthy, performance and uptake unverified
Confidence is limited by single-source, vendor-aligned material. The claims about how the system is built can be relied on as an accurate account of Databricks' design intent, and the arithmetic contrast with batch cadence follows from figures the vendor itself published. Confidence in the performance figure as an operational guarantee, in the competitive assertion, and in anything about adoption is low, since none of it is independently observable from the supplied cluster.
invest
Databricks raises $5B at $190B, and the multiple barely moved2 distinct publishers
invest
Airwallex marks itself up 37% in six months, and tells you why it is not listing1 distinct publisher
build
Three services you can delete: queue, cache and search in one Postgres1 distinct publisher
build
Databricks quietly switched on dormant MANAGE grants. Check who just became an admin.1 distinct publisher
Distinct publishers with included, body-backed reporting in this cluster.
1 article · August 17, 2026