doorpost
Cybersecurity engineer and network routing specialist. I think in systems and secure the core - the routers, the protocols, and the trust between networks that the rest of the internet quietly depends on.
Owner and operator of AS133555, a globally routed autonomous system. I run the BGP sessions, manage the RIPE objects and resource records, and peer across the public internet - including address space coordinated through ARDC. Routing policy, RPKI, and clean origin validation are the day job.
Securing the layers most people never see: the routing plane, the control plane, and the open-source systems that hold them together. I design for least privilege and verifiable trust, then test the assumptions until they hold under pressure.
Active across the registries and the open-source world that keep the internet interoperable - working with APNIC and RIPE on number resources, and following Linux Foundation and ELC Europe work on the systems software underneath it all.
Stockholm
Hong Kong
Zhuhai
Guilin
Qingyuan
The autonomous system itself: BGP routers, RPKI-validated origins, anycast services, and the monitoring that keeps the sessions honest. Built to be small, auditable, and resilient.
Ongoing work on routing-plane security and infrastructure trust - route origin validation, control-plane hardening, and the failure modes that show up when networks disagree about who owns what.
Patches and review across the networking and systems stack, tracking work in the Linux Foundation and ELC Europe community. Small, sharp changes to the tools the infrastructure runs on.