XDP filter optimization and traffic-leak reduction
Moving filters to native driver mode, removing expensive loops and adding payload inspection for more reliable attack filtering.
Read in fullWork
Selected work
A selection of infrastructure, networking, security and backend work I have written down over time.
Flask API for BPF map inspection
An authenticated internal API for querying state stored across several BPF maps.
Read in fullReal-browser bot defense with a WAF
Behavioral and request-level controls for automated browsers that imitate normal visitors and evade basic bot signatures.
Read in fullDDoS mitigation with BPF and XDP
A multi-stage packet-filtering approach designed to reject malicious traffic before it consumes the normal Linux networking path.
Read in fullCustom Linux kernel on a Proxmox node
Installing and validating a latency-oriented kernel on a production virtualization node with a recovery path in place.
Read in fullGRE tunneling and routing between networks
A layer-two GRE connection, static routing and MTU correction for low-latency communication between two autonomous networks.
Read in fullAutomated Linux image deployment on Proxmox
Creating a reusable cloud-init template that an API could clone and configure on any available Proxmox node.
Read in fullOutbound network abuse protection
Detection, rate controls and alerting for common forms of abuse originating from customer-controlled servers.
Read in fullProxmox backup infrastructure
Encrypted, scheduled backups for hundreds of virtual machines across multiple nodes and storage locations.
Read in fullPHP control panel for a GTA V game server
A complete account and operations panel built around an existing game-server database and live server data.
Read in full