Posts

Diagram of a WebRTC media pipeline with Janus SFU, signaling, TURN, and recording workers.

Architecting a Real-Time Video Pipeline with WebRTC and Janus

A working engineer’s guide to building a real-time video pipeline with WebRTC and Meetecho’s Janus Gateway, covering signaling, SFU topology, recording, and the failure modes you’ll hit in production.

Stylized illustration of a public key handshake between a browser and a relying party server.

Inside WebAuthn: How Passkeys Really Work Under the Hood

WebAuthn replaces shared secrets with public key cryptography bound to a device. This post walks through the registration and authentication ceremonies, the role of authenticators and the client, and why passkeys are phishing-resistant by construction.

Abstract representation of compiler IR flowing into a register grid.

Inside the QBE JIT compiler: register allocation and inline caching in practice

How QBE compiles SSA IR to machine code, with a close look at its linear-scan register allocator and the inline caching techniques production JITs use to recover lost megamorphic performance.

Network packets flowing through an eBPF/XDP datapath diagram.

Building an eBPF-Powered Packet Classifier in C: A CV-Worthy Systems Project

Build a production-shaped eBPF/XDP packet classifier from scratch in C. Real code, real architecture, and a clear roadmap to extend it into a senior-level systems project.

Network diagram showing multiple Kubernetes clusters connected through an Istio ambient mesh with ztunnel and waypoint components.

Architecting Multi-Cluster Service Mesh with Istio Ambient Mode and eBPF

A practical architecture guide to running Istio Ambient Mode across multiple Kubernetes clusters, with eBPF-powered data planes handling L4 and waypoint proxies owning L7.