Posts

Abstract representation of cryptographic noise packets traveling between two peers.

Inside the Noise Protocol Framework: Building Forward-Secure Handshakes from Scratch

A working engineer’s walkthrough of the Noise Protocol Framework, covering patterns, tokens, and a from-scratch implementation of a forward-secure XX handshake in Python.

Diagram of a mini-GPT training loop with mixed precision, gradient accumulation, and optimizer components.

Building a Mini-GPT From Scratch: A Portfolio Project That Signals Real ML Systems Skill

A working engineer’s guide to building a mini-GPT training loop from scratch in PyTorch — featuring AMP, gradient accumulation, cosine warmup, weight tying, and AdamW — designed as a CV-grade portfolio piece.

Diagram of Envoy proxy running a WASM filter intercepting edge requests.

Implementing Envoy's WASM Filter API for Custom Auth at the Edge

A practical guide to shipping a production-grade Envoy WASM filter that validates JWTs and custom tokens at the edge gateway.

Diagram of Envoy routing gRPC unary and streaming calls from clients to backend services

Architecting gRPC Streaming Services with Envoy as an API Gateway

How to design, configure, and operate Envoy as an API gateway for gRPC streaming services — covering protocol translation, observability, and the failure modes that bite in production.

Abstract network mesh with kernel-level filter hooks highlighted.

Inside eBPF and Cilium: How Kernel-Level Filtering Rewrites Container Networking

How eBPF and Cilium move packet filtering from user-space daemons into the Linux kernel itself — and why that rewrites the rules for Kubernetes networking performance, observability, and security.