George Glavan

Background

About George Glavan

I have an affinity for Rust and Linux as technologies, and I engage in embedded development as a hobby. Over the last 6 years, I have been involved in multiple projects with different subjects. An IPS (Intrusion Prevention System) built in C++. This IPS is designed to run on a router, intercept, reassemble, and scan TCP and UDP connections, triggering detections based on the analyzed data. The team I worked with was responsible for intercepting and reassembling the traffic from the router. In this project, I was part of a team of developers and built an IPS binary and library that could run on multiple platforms (Linux, Windows, Mac) and architectures (ARM, MIPS, x86_64). This project, and especially the people involved in it, helped me grow as a developer and is definitely the best project I've been involved with. A Mini IPS built in C. This project is my first solo endeavor and involves a rewrite of the IPS in C with significantly fewer capabilities and resource demands. A Virtual IPS built in C++. This is another solo project that is an extension of the IPS designed to operate in virtual environments and scan traffic from virtual networks. Cloud sensors written in Rust and Go. This marks my first project as a lead developer. Cloud sensors are responsible for downloading events from cloud environments like AWS, MS Office, GCP, Google Workspace, Azure, and some other CSPM platforms. Each platform has a sensor in the form of a shared object. Most of them are written in Rust and leverage asynchronous Rust. Some of them are in Go and use coroutines for additional performance. These sensors are loaded and unloaded by a core binary when configuration files are written to the file system. VPN Architecture. This was a WireGuard VPN architecture built around BoringTun. The intriguing aspect was the utilization of Unikernels (using Nanos) and Kubernetes. We went so far as to attempt building a CRI (Container Runtime Interface) and CNI (Container Network Interface) to instruct Kubernetes to work with unikernel VMs instead of containers. The project remained in the research phase. DNS Proxy. This was a rewrite of an older DNS proxy in Rust. The previous version relied on some CoreDNS plugins and Unbound as a resolver. Due to resource demands and scalability limitations, we decided to rewrite the CoreDNS proxy in Rust. The result was a 5x increase in the number of connections handled with only 20% of the resources.