I build low-level systems software — kernel networking, eBPF datapaths, and network access control. I care about performance, correctness, and understanding how things actually work at the hardware and kernel level.
Currently focused on eBPF-based network enforcement and captive portal systems.
HawkGate — eBPF TC captive portal
Replaces iptables-based captive portal solutions with BPF hash maps. O(1) per-client enforcement, MAC-based session identity, EDT bandwidth shaping, walled garden, and CAPPORT API. Tested on real hardware with Android 16, iOS 18, and Windows 11.
eBPF / XDP kernel networking TC hooks
EDT rate shaping BPF maps Linux internals
C / C++20 systems programming network access control
