Networking

Network packets flowing through an eBPF/XDP datapath diagram.

Building an eBPF-Powered Packet Classifier in C: A CV-Worthy Systems Project

Build a production-shaped eBPF/XDP packet classifier from scratch in C. Real code, real architecture, and a clear roadmap to extend it into a senior-level systems project.

Network packets traveling along a glowing path representing a TLS 1.3 0-RTT handshake.

Inside TLS 1.3 Zero Round-Trip Resumption: Architecture, Trade-Offs, and Production Deployment

How TLS 1.3 0-RTT cuts handshake latency to a single round trip — and the replay, forward-secrecy, and operational trade-offs you need to understand before turning it on.

Abstract representation of encrypted network traffic and connection resumption between client and server.

Implementing TLS 1.3 Zero Round-Trip Resumption: Mechanisms, Pitfalls, and Production Deployment

How TLS 1.3 0-RTT resumption actually works on the wire, why replay attacks make it risky for non-idempotent requests, and the patterns real teams use to deploy it safely behind NGINX, Envoy, and HAProxy.

Diagram of a TCP flow with bottleneck link and BBR pacing.

Optimizing TCP BBR Congestion Control: A Deep Dive into Production Deployment

How BBR actually estimates bottleneck bandwidth and RTT, why v2/v3 fix v1’s loss-insensitivity, and what to tune at the kernel, application, and NIC layers before you ship it.

Abstract diagram showing multiple parallel streams flowing across a single QUIC connection.

Inside QUIC Multiplexing: A Deep Dive into Stream Concurrency and Head-of-Line Blocking

A working engineer’s guide to QUIC stream multiplexing: how independent byte streams coexist over a single connection, why per-stream flow control fixes TCP’s head-of-line blocking, and where it still bites.