# SYSTEM MANIFEST: hoangtuvungcao.sys
operator:
handle: hoangtuvungcao (Nguyen Van Trong)
origin: Tay Nguyen, Vietnam [12.6667° N, 108.0500° E]
station: Information Technology · Tay Nguyen University
clearance: Defensive Security · Systems Engineering · DevOps
tactical_matrix:
l7_defense: High-concurrency WAF & reverse proxies in Go (Mango WAF)
kernel_ops: eBPF/XDP zero-copy packet filtering at network ingress
tunneling: Multi-protocol reverse tunnels (HTTP/S, TCP, UDP, WebDAV)
intelligence: YOLOv8 neural diagnostics daemon + FastAPI + Gemini AI
doctrine:
- "Never trust user input. Never trust default configurations."
- "Drop malicious packets at kernel ingress before user-space overhead."
- "Measure before optimizing. Design for rapid failure recovery."
- "Automate repeatable toil. Document for incident response."
Core
Systems and Security
Additional
|
Go-based Web Application Firewall and reverse proxy for protecting web applications from Layer 7 attacks. Request filtering, rate limiting, IP mitigation, Cloudflare-aware traffic handling.
|
Self-hosted tunneling platform in Go for exposing local services to the internet. Supports HTTP/HTTPS, TCP, UDP, and WebDAV without depending on third-party providers.
|
|
AI-assisted agricultural platform for plant-leaf disease identification. YOLO-based image diagnosis, FastAPI backend, Flutter client, and Gemini-powered chatbot.
|
Explore more tools and projects around networking, security, infrastructure automation, and AI-assisted applications. |
| Tactical Vector | Operational Objective |
|---|---|
| Kernel Networking | Zero-copy packet dropping with eBPF/XDP on Linux network drivers |
| L7 WAF Architecture | High-concurrency reverse proxying, token-bucket rate limiters & edge security |
| Hardened Deployment | Minimal attack-surface containers, immutable Linux nodes & reproducible builds |
| Security Benchmarking | Reproducible latency, throughput & error telemetry under adversarial load |
| Automated Defense | CI security auditing, supply-chain verification & anomaly detection |
Build it. Measure it. Break it safely in the lab. Understand the failure mode. Harden the core. Iterate.
System Principles
| Principle | Doctrine |
|---|---|
| Measure before optimizing | Publish the benchmark environment, workload profile, p99 latency, and saturation points |
| Design for recovery | Automated health checks, deterministic rollback paths, safe fallback defaults |
| State limits honestly | Security mitigations reduce attack surface — they do not eliminate logic flaws |
| Automate repeatable toil | Builds, security linters, container packaging, and releases must be deterministic |
| Document for operators | Architecture topology, failure matrices, incident response & post-mortem procedures |
All security research, packet inspection tools, and proof-of-concept components are authored strictly for defensive validation, laboratory testing, and educational research under responsible disclosure. Root access and attack simulations must only occur within isolated testbeds or authorized environments.
| Operational Domain | Tactical Focus | Status |
|---|---|---|
| Backend Engineering | Go, Rust, Distributed Systems, High-Concurrency APIs | ACTIVE // Open to Junior / Internship |
| DevOps & Platform Security | Linux Hardening, Container Isolation, CI/CD Pipeline Security | DEPLOYABLE // Available for projects |
| Defensive Security | WAF Architecture, eBPF/XDP Filtering, Traffic Analysis | ENGAGED // Active research |
| Open Source Tooling | Tunneling Platforms, Network Tooling, Security Hardening | COLLABORATING // Open to PRs & Collab |
Metrics auto-generated via GitHub Actions · Updated every 6 hours