diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
new file mode 100644
index 00000000..0c737cae
--- /dev/null
+++ b/.github/workflows/docker.yml
@@ -0,0 +1,59 @@
+name: docker
+
+on:
+  push:
+   branches:
+    - main
+  tags:
+    - v*
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+  DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+  IMAGE_NAME: ${{ github.repository_owner}}/mev-rs
+
+jobs:
+  extract-version:
+      runs-on: ubuntu-22.04
+      steps:
+          - name: Extract version (if main)
+            if: github.event.ref == 'refs/heads/main'
+            run: |
+                  echo "VERSION=latest" >> $GITHUB_ENV
+          - name: Extract version (if tagged release)
+            if: startsWith(github.event.ref, 'refs/tags')
+            run: |
+                  echo "VERSION=$(echo ${GITHUB_REF#refs/tags/})" >> $GITHUB_ENV
+      outputs:
+          VERSION: ${{ env.VERSION }}
+  build-docker:
+      name: build-docker-${{ matrix.binary }}
+      runs-on: ubuntu-22.04
+      strategy:
+          matrix:
+              binary: [x86_64]
+              include:
+                - profile: maxperf
+
+      needs: [extract-version]
+      env:
+          VERSION: ${{ needs.extract-version.outputs.VERSION }}
+      steps:
+          - uses: actions/checkout@v4
+          - name: Dockerhub login
+            run: |
+                echo "${DOCKER_PASSWORD}" | docker login --username ${DOCKER_USERNAME} --password-stdin
+          - name: Set up Docker Buildx
+            uses: docker/setup-buildx-action@v3
+          - name: Build and push
+            uses: docker/build-push-action@v5
+            with:
+              file: ./Dockerfile
+              context: .
+              platforms: linux/x86_64
+              push: true
+              tags: ${{ env.IMAGE_NAME }}:${{ env.VERSION }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b353896b..854ee632 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -54,7 +54,7 @@ jobs:
 
       - name: Build mev-rs
         run:  |
-          cargo install --path bin/mev --locked
+          cargo install --profile maxperf --path bin/mev --locked
           mkdir artifacts
           mv ~/.cargo/bin/mev ./artifacts
           cd artifacts
diff --git a/Dockerfile b/Dockerfile
index 019a2470..5347f4e4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,7 +9,7 @@ RUN cargo chef prepare --recipe-path recipe.json
 FROM chef AS builder
 COPY --from=planner /app/recipe.json recipe.json
 
-ARG BUILD_PROFILE=release
+ARG BUILD_PROFILE=maxperf
 ENV BUILD_PROFILE ${BUILD_PROFILE}
 ARG FEATURES=""
 ENV FEATURES ${FEATURES}
diff --git a/bin/mev/Cargo.toml b/bin/mev/Cargo.toml
index 6fd39cff..2a18acb5 100644
--- a/bin/mev/Cargo.toml
+++ b/bin/mev/Cargo.toml
@@ -35,4 +35,4 @@ clap = { workspace = true, features = ["derive", "env"] }
 eyre = { workspace = true }
 
 ethereum-consensus = { workspace = true }
-reth = { workspace = true, optional = true }
+reth = { workspace = true, optional = true, features = ["jemalloc"] }
diff --git a/nix/mev-rs.nix b/nix/mev-rs.nix
index f989de80..67cac2a5 100644
--- a/nix/mev-rs.nix
+++ b/nix/mev-rs.nix
@@ -6,6 +6,7 @@ let
     pname = "mev-rs";
     src = crane.cleanCargoSource (crane.path ../.);
     CARGO_PROFILE = "maxperf";
+    RUSTFLAGS = "-C target-cpu=native";
     cargoExtraArgs = "--locked ${feature-set}";
     buildInputs = lib.optionals pkgs.stdenv.isLinux [
       openssl