It has been quite a while since I last updated this website, so I wanted to leave a short note about what I am working on now and where things are heading.
The main project at the moment is ILShield, a DoS and DDoS filtering appliance that I am building around fast packet decisions and practical operations. The goal is not just to write filtering code, but to package the work into something that can be deployed, observed and maintained properly.
The current design uses XDP on ingress so unwanted traffic can be handled as early as possible in the Linux receive path. I am also working with eBPF on egress, which gives me another place to enforce policy and keep better control over traffic leaving the system.
Progress is going well. There is still a lot to refine, especially around rule management, telemetry, false positives and operational safety, but the direction is solid enough that I am becoming more confident in the appliance model.
I am also thinking seriously about opening my own datacenter in Romania. It is still an idea that needs planning, capital and careful execution, but it fits the kind of infrastructure work I want to build: network-first, security-aware and operated with direct control over the stack.