eBPF / Kernel Engineer

About Nishant

Nishant is an eBPF/Kernel engineer working on eBPF/XDP, Linux networking and DDoS mitigation, writing in Rust and Go. He builds Impulse, an open-source HTTP/3 edge proxy, and writes about Linux and systems at nishujangra.dev.

What I work on

I work on the parts of the stack most engineers don't touch: Linux kernel networking, eBPF/XDP packet filtering, and DDoS mitigation. At CloudArmour I build eBPF/XDP mitigations for SYN and UDP floods and IPv4 fragment attacks, tooling that manages nftables rules from Go, and NAT/WireGuard test networks. When something is slow, broken or under attack, I want to know exactly why and fix it at the right layer.

My day-to-day languages are Go and Rust, with C for eBPF programs. I also build backend services (REST APIs, authentication, PostgreSQL and Redis) and web apps, including this site and its blog platform.

Projects

  • Impulse

    Built an HTTP/3 (QUIC) → HTTP/2 edge proxy with dual ingress (QUIC + HTTP/1.1/2 Alt-Svc upgrade) and hierarchical routing (O(1) exact match + radix trie fallback).

  • vex

    Experimental HTTP/3 load testing tool built in Rust for benchmarking QUIC-based services.

All projects

Writing

I write about Linux networking, eBPF, Rust and the bugs I run into while building systems. Read the blog or subscribe to the RSS feed.

Find me elsewhere

Available for short fixed-scope work: consulting · contact