Leon K. Email & Phone Number

Santa Clara, California, Us

Boston, Massachusetts, Us

SSE Data PlaneIncorporate two third-party Deep Packet Inspection (DPI) engines, namely Qosmos and Ipouqe, into the fastpath framework for comparative analysis. This initiative aims to augment Firewall as a Service (Fwaas) functionality leveraging DPI capabilities.Implement TLS/DTLS server functionality within the fastpath framework to support SWG and ZTNAtunneling. Enable compatibility with the Lookout proprietary protocol and optimize throughput through fine-tuning with the Lookout client application. Additionally, maintain a Linux TLS client to facilitate testing and comparison.Supported multi-tenancy in SSE data plane based on DPDK engine (provided by 6wind) in AWS EC2. Implemented tenant discovery, tenant lifecycle management, part of IPAM support, conntrack support and user management support.Designed/Implemented ZTNA connector (IPsec client) tunnel establishment management based on strongSwan with vici-library and tunnel table saved in shared memory.

Sunnyvale, Ca, Us

Management Plane: FortiExtender / FortiCloud / FortiGate Responsible for the design/implementation for the ForitCloud/FortiGate management for FortiExtender.

ARRIS AP Team------------------------WAP3-SAE / WPA3-OWE / Dynamic PSKRefactored hostapd program (a major program that handles authentication of mobile stations) in AP so that it can be upgradable and can offload independent tasks. Local cache by Redis for offloading control plane functionality in AP Brocade Data Plane Team-----------------------------------Implemented high-performance DHCP services with the aid of Intel DPDK engine and multicoreprogramming, which can be run in VMWare, KVM, GCE and/or direct IO mode. Designed and implemented appliance product for Ruckus virtualized services, which meets specific customers’ requirement. LWA/GTP-U forwarding support for data pane based on 3GPP release 13. Work with Huawei eNodeB and provide PoC to ER-Telecom.Installed open vSwitch and all necessary packages (i.e., KVM, QEMU, DPDK, etc) in CentOS 7 for Ruckus virtual services to maintain high-speed communication among VMs.Escalation issues for carrier and enterprise customers.

Sunnyvale, Ca, Us

Ruckus Wireless Data Plane Team-----------------------Virtualized Intel-based data plane to be run in KVM/QEMU and VMware ESXi, which primarily focused on pull-mode driver modification, system bring up scripts, networking interface setup and shared memory (i.e. huge table) initialization based on CentOS 6.8.Unified all data plane platforms to become one code base, which is easily maintained, by porting among different systems. This alleviated the cost to maintain different code bases for similar purpose.Implemented/Maintained flow-based pipeline-based forwarding data plane with Intel DPDK network engine, and maintain old forwarding engine with Cavium network engine.Google/Ruckus MAXWELL projectDesigned and implemented APIs that can be used among application and tunnel kernelmodule and Implemented tunnel kernel module (named as maxwell) that can encapsulate Google tunnel header and perform tunnel reachability test.Intel DPDKA new data plane platform development by using Intel DPDK

Sunnyvale, Ca, Us

Ruckus Wireless Platform Team-----------------------------------------AP/DP development for new control/data plane system by the aid of Cavium Network EngineDesigned/Implemented GTP manager program that can manage up to 100,000 UEs and co-worked withIntelliNet team in Florida/IndiaDeveloping simulation tools for verifying scalability on tunnel performanceDesigned/Implemented tunnelmgr for Ruckus proprietary GRE tunnel establishment among APs and DP that can manage up to 10,000-tunneled APs per DPNew Wireless AP ControllerImplemented tunnel establishment among APs and new wireless controller by using LWAAP protocol, which was a centralized controller with thin AP model.AP SmartCastImplemented Ruckus AP proprietary QoS module (i.e., SmartCast), including data packet classification, data packet marking (i.e., IP TOS marking, IEEE 802.1p marking), data packet ACL filtering, IGMP/MLD Query protocol and directed multicast/broadcast.

Ms & Ph.D., Computer Science And Information Engineering

Bs, Computer Science