At Cambium Networks, I re-architected application flow accounting with eBPF, raising capacity from a 17K-connection ceiling to as many as 4M conntrack entries, depending on the platform. I also unified firewall, NAT, traffic-shaping, WAN, and VPN components on nftables and kernel flowtable acceleration, improving CPU-limited throughput from about 6 Gbps to 12+ Gbps.
I built end-to-end WireGuard support for Remote Access and Overlay WAN, and implemented StrongSwan-based IPsec site-to-site VPN features. I also designed zero-touch LLDP PBA/Auto-VLAN between NSE and Cambium APs and developed eBPF-based per-device traffic analytics.
Earlier, at Everest Networks Inc., I developed WLAN Access Controller and Access Point software, along with a high-volume statistics and event pipeline for centralized AP monitoring. My work spans embedded Linux, networking, and security gateways, and includes three listed patents in WiFi device zoning, multicast-DNS support, and service discovery.
