About
I'm the co-founder of FlashProxy, where I own the engineering across the whole stack — kernel to billing. I care about doing more with fewer CPU cycles, about correctness in systems that move money, and about building things that can be measured and verified rather than just asserted.
That ranges from a Go proxy engine with per-user eBPF kernel traffic shaping and zero-downtime deploys, to an append-only, hash-chained revenue ledger, to open-source work like flashaccept — an io_uring accept engine that handles connections for roughly 3× fewer CPU instructions than a goroutine-per-connection server.
GoCeBPFLinux networking io_uringTypeScriptNext.jsPostgreSQL ClickHouseGCP
Selected work
Open source
A fast io_uring TCP accept engine — multishot accept, registered/direct descriptors, reply+FIN fusion. ~3× fewer CPU instructions per connection than goroutine-per-connection, ~2.2× fewer than vanilla io_uring.
An independently reproducible SLA monitor: every measurement is hash-chained and Ed25519-signed, with a public verifier. Multi-region probes, zero-dependency Go. Powers FlashProxy's public status page.
At FlashProxy — designed, built & operated solo
A high-performance Go SOCKS5/HTTP forward-proxy engine: per-user bandwidth shaping in the Linux kernel (eBPF policers + HTB/multiqueue qdiscs over netlink), SO_REUSEPORT accept scaling, splice(2) zero-copy relaying, and zero-downtime deploys.
The single source of truth for orders, balance, and revenue: IFRS-15 revenue recognition on an append-only, SHA-256 hash-chained ledger (money in integer cents), payment-processor integrations, and daily reconciliation.
Centralized secrets for the fleet: Google Secret Manager storage with sub-second hot rotation over Postgres LISTEN/NOTIFY, exposed through TypeScript, Python, and Go SDKs. Services run with no secrets in their environment.
The internal operations dashboard: a thin, fully-auditable façade over the backends with fine-grained RBAC, a tamper-evident hash-chained audit log, and built-in AI assistants with human-in-the-loop guardrails.
An AI support agent that turns a plain-English complaint into a structured root-cause diagnosis by autonomously querying telemetry — read-only, sandboxed, budget-capped, and tenant-isolated.
Get in touch
Building something low-level, fast, or financial? I'm reachable here.