FortiSwitch Routing. Working on data center networking features: VXLAN QoS and BGP Extended Nexthop (RFC5549) support.

Ubuntu Linux, FRRouting, Broadcom SDK on StrataXGS chipsets.

2019 - Present: Tech lead and owner of NSX bringup/restore and life cycle management for VMC SDDC. Migrating to container based microservice architecture. Python scripting and C++ programming.

2017 - 2019: NSX datapath working on distributed virtual switching and routing, over both Overlay Networks (VXLAN-backed) and Underlay Networks. Network plumbing for VMC on AWS.

C programming in VMkernel, C++ programming in user space, & Python scripting.

Design and development for SRX series stateful Firewall systems, on both chassis-based carrier-class SRX5000 platform and virtualized platforms. Primarily working on flow-based software data path in multicore multithreading environment, from MIPS-based SMP to x86-based NUMA system. Work covered Layer-3 flow, Layer-2 (transparent mode) flow, GTP/SCTP flow, Virtual Firewall (a.k.a. Logical Systems) over VPLS, fragmentation flow, multicast flow, HA, TCP Proxy, IPSec etc. Architected and delivered Secure Wire (a.k.a. bump-in-the-wire Firewall), which later is handily leveraged by virtualized platforms like virtual SRX and container SRX.

Handled many customer issues. Enjoyed the process of hard work followed by the thrill of closing on root causes. Collaborated with support and account teams across the globe.

January 2012 – April 2013

Design and development on Nexus 3548 platform, Cisco’s top-of-rack data center switch. Working on ACL-based features such as Policy Based Routing (PBR) and Control Plane Policing (CoPP). Also working on investigation & design of Cisco’s leaf/spine fabric based new data center architecture, on ARP ACL, vPC, FabricPath and BGP & IS-IS etc. Exposed to SDN, OpenFlow & Network Virtualization.

July 2005 – December 2011

Worked in the multicast team of Catalyst 6500 modular switch. Expert on L2 IPv4/IPv6 multicast and Metro Ethernet. Worked on both control path and data path for features including IGMPv2/v3 snooping, MLDv1/v2 snooping, PIM snooping, Q-in-Q, VPLS multicast, MVR, Private VLAN, and related HA support, ISSU support, inter-card communication infra etc. Went through the entire lifecycle of the latest Cat6k Sup2T platform, from feature design, development, debugging, performance & scalability tuning to maintenance and support.

Developed device driver and networking software for a 26-port multiservice SMB switch router. Programmed in both Linux kernel and user space, for Ethernet driver, I2C driver, Marvell switch chip driver, bridging, 802.1d STP, as well as SNMP agent daemon, IEEE 802.1X authenticator daemon and radius client daemon.

H/W: Motorola PowerQUICC MPC8248, Marvell 88E6093 Ethernet switch chips.

S/W: MontaVista Linux 2.4 kernel and GNU toolchain, WindRiver visionCLICK and Power ICE debugger.