DevOps engineer · Information security at MTUCI, Moscow
LinkedIn · Discord ._sync
- Network monitoring for the research lab: collectors on a Raspberry Pi behind a one-way VPN, PostgreSQL, five alert rules in production Grafana. Fixed the alert confirmation logic: on a replayed day of real data, 39 false alerts before, 0 after.
- Archive of the lab's messenger for the internal LLM: 42k messages, 3.9k threads, 7.4k attachments, PostgreSQL full-text and trigram search, an MCP server with 8 tools behind traefik. The product team started using it the day it shipped.
- Moved traefik out of the Grafana stack into its own on the shared host with about a minute of downtime, then migrated a live service onto it with CI deploys.
Kubernetes, GitOps on GitLab CI, Cloudflare and Imperva in front, 350–400 RPS baseline.
- Layered L7 DDoS protection: geo filter, path allowlist, header rules, challenge on HTML only, separate rate limits for pages and login, edge caching. Held up against attacks of up to 620 million requests a day. Found two bugs in the reference rule set before it went to production: one rule never matched, the other blocked every POST from a browser.
- Cloudflare Worker that checks captcha tokens and JWT signatures at the edge, so unauthenticated requests never reach the cluster. About $200 a month at full attack volume.
- Edge security review: passwords leaking into ingress logs (proven with a canary password),
client IP spoofable through
X-Forwarded-For, load balancers reachable around the CDN, secrets in the repository. - Domain cleanup driven by ingress metrics, not by the list: two domains marked for deletion
still served 241k and 69k API writes and were kept. Caught a stalled certificate renewal
that reported
Readyon a domain with 35 million requests, 25 days before TLS would fail.
| Kubernetes | ingress-nginx · cert-manager · Kyverno · GitOps · frp reverse tunnels · PROXY protocol |
| Edge | Cloudflare WAF, Rate Limiting, Workers, R2, Turnstile · Imperva · CrowdSec · nginx |
| Delivery | GitLab CI · Docker Compose · traefik · wrangler · S3-compatible storage |
| Observability | Grafana alerting · Prometheus metrics · OpenTelemetry · PostgreSQL |
| Cryptography | AEAD · X25519 · Ed25519 · XChaCha20-Poly1305 · GOST · onion routing |
| Code | Go · Python · C++ · TypeScript · Bash |
EasyMythic privateMythic+ route planner for World of Warcraft. Pulls top runs from WarcraftLogs, maps noisy combat-log enemies to dungeon positions with the Hungarian algorithm, exports routes to MDT. Go · Gin · PostgreSQL · Redis · React · Leaflet |
jimichiMessenger with metadata protection: three relays, nested encryption, fixed 512-byte cells, cover traffic, keys in locked memory outside the Go heap. Includes a traffic-correlation attack to measure it. jimichi.org · jimichi-org Go · X25519 · XChaCha20-Poly1305 · Kubernetes |
anaba privateAggregator for Japanese underground and archive fashion: one live feed across Mercari, Yahoo! Auctions, Rakuma and Wunderwelt, 80+ brands, sold-price history, fake-risk flags. Go · PostgreSQL · SSE · React |
MyLovelyVNReading assistant for Japanese visual novels: captures text from the game process, splits it into morphemes, streams a translation, two-level cache. Go · Wails · React · SQLite |
Oracle DBA agent privateLLM agent that administers Oracle Database: writes and runs SQL, fixes ORA- errors, solves CTF tasks. 1,000 traces collected, model fine-tuned on the successful ones with QLoRA. Python · Ollama · Oracle 26ai · QLoRA |
polycopy privateCopy-trading bot for Polymarket: fractional Kelly bet sizing, volatility, slippage and daily loss limits, terminal UI. Go · PostgreSQL · Redis · Bubble Tea |
MZakonLegal reference for GTA5 RP government factions: 1,400+ articles, step-by-step procedures, Windows overlay and iPhone app. Python · Flutter |
AnachanUNIX log analysis with local and remote LLMs. Go · Vite · TypeScript |
PPshkin hackathonBot and mini app in the MAX messenger for small cafes and bakeries: food diary from photos, a dish nearby that fits the calories left for the day, end-of-day items at a discount instead of write-offs, bookings by code and QR. TypeScript · Fastify · PostgreSQL · React · MAX UI |
Also: Telegram and MAX bots for order tracking, a Mercari watcher, an FL.ru job feed, ip-echo, booking-go, online-sub.
