XDP filter optimization and traffic-leak reduction
Moving filters to native driver mode, removing expensive loops and adding payload inspection for more reliable attack filtering.
Read in fullParis, France
I build and operate Internet infrastructure.
My work sits between Linux systems, networks and security: Proxmox platforms, routing, BPF/XDP packet filtering, DDoS mitigation, automation and backend tools for operating them.
$ whoami
Curean Niculai
Systems administrator, network engineer and programmer
$ focus --current
- Linux and Proxmox infrastructure
- Routing and network operations
- BPF/XDP and DDoS mitigation
- Automation and internal tooling
$ status
Available for relevant technical conversations
Selected work
Projects described from the operational details outward.
Flask API for BPF map inspection
An authenticated internal API for querying state stored across several BPF maps.
Read in fullReal-browser bot defense with a WAF
Behavioral and request-level controls for automated browsers that imitate normal visitors and evade basic bot signatures.
Read in fullDDoS mitigation with BPF and XDP
A multi-stage packet-filtering approach designed to reject malicious traffic before it consumes the normal Linux networking path.
Read in fullWhat I work on
Systems that have to keep working under real traffic.
I am most useful where infrastructure, networking and application behavior meet. That includes virtualization hosts, packet paths, routing between networks, abuse controls, backup systems and the small internal services that make operations easier to verify.
I prefer measurable changes, explicit rollback paths and documentation that says what was actually built. The case studies here include the constraints, implementation and limits of the work rather than turning each project into a slogan.
Technology watch
BGP hijacking and route security
How false route announcements can redirect Internet traffic, and how IRR data and RPKI help network operators reduce the risk.
Read the articleFrom the archive
Website update, ILShield and Romania plans
A new update for the website, notes on the ILShield filtering appliance and early thoughts about opening a datacenter in Romania.
Read the post