I build the parts of the networking stack that most engineers don't touch — kernel packet filtering, eBPF-based DDoS mitigation, and QUIC edge infrastructure.

Build or fix eBPF programs — XDP packet filters, traffic classifiers, DDoS mitigation hooks. SYN flood defense, UDP flood drops, IP blocklists, IPv4 fragment tracking. If the verifier rejected it, I know why.

Design and build production networking stacks — NAT gateways, WireGuard tunnels, nftables rulesets, firewall pipelines. Isolation environments, multi-node testbeds, Hetzner/OVH deployments.

Build or integrate an HTTP/3 edge in front of your existing HTTP/2 backend. Rate limiting, circuit breakers, load shedding, health checks, overload protection.