Lucas Fontes Email & Phone Number

Arlington, Va, Us

making server-side webassembly happen

San Francisco, Ca, Us

Working on Instacart's Foundational Infrastructure Layer, including Compute, Network, IAM and Edge.My focus has been on the Edge ( CDN, DNS, WAF, Functions, VPNS ), taking care of any packet in or out our public infrastructure.

Bellevue, Wa, Us

Leading Auth0 Architecture Group ( Product x Infra x Data ) through our MultiCloud journey.

Bellevue, Wa, Us

Leading the Company's effort to replatform on Kubernetes and CNCF toolkit.Improving Infrastructure Security Posture through network segregation, fine grained network policies and mTLS.Platform cost reduction via services bin-packing & elastic infrastructure scaling.

San Francisco, California, Us

Principal @ Heroku Runtime, focused on single & multi-tenant environments including:- HTTP Routing Layer: Implemented HTTP/1.1 pipelining & HTTP/2 binary support to Heroku's Private Router- Logging ( Logplex ): Migrated Heroku's Logging pipeline from Erlang to Go- Kubernetes: Designed Heroku's internal kubernetes platform in conjunction with AWS Team, having EKS clusters scaling past 40k pods / cluster

San Jose, California, Us

Building Netapp Kubernetes Service, a multi-cloud Managed Kubernetes offering.A short lived project https://www.storagereview.com/news/netapp-kubernetes-service-nks-come-to-an-end

New York, Ny, Us

DigitalOcean is a cloud provider with a distributed engineering team.Moved DigitalOceans' Public API rate limiter from the API codebase to our Load Balancers, allowingany microservice in our internal infra to also count towards users' global rate limiting.Participated in converting DigitalOceans' core scheduling system from Ruby to Go, breaking up a monolithic Rubyapplication into Go services.DigitalOcean is always linked to simplicity, and kubernetes is anything but simple :)As Tech Lead for the Kubernetes Team, a good chunk of my role was internal education, demystifying kubernetes myths with involved teams, and designing the internal & public communication paths required to offer kubernetes as a service.Our team responsibility included:- DigitalOceans' Kubernetes Backend & APIs- External kubernetes storage (CSI) and load balancers (cloud-provider plugin) drivers- Internal tooling and billing integrationsI served my team in the entire product design & development lifecycle and the result speaks for itself @ https://www.digitalocean.com/products/kubernetes/Languages:- Go- Bash- RubyTechnologies:- Load Balancers- Databases: mysql- MQ: rabbit, 0mq, kafka- gRPC- Kubernetes- Docker- Chef- Vault- Prometheus- qemu- Virtio VSOCK

Ottawa, On, Ca

Asset Delivery OptimizationOptimized time-to-first-byte with a Multi-CDN setup, having traffic routed to a different CDN parter depending on users'location.Optimized pipelining by selectively activating HTTP2 on supported connections, which incidentally resulted in reducednetwork traffic.Continuous IntegrationDesigned Pipa: A kubernetes centric build pipeline. This powers Shopify's CI pipeline, building a variety ofdifferent applications with different build methodologies while still guaranteeing immutable images, repeatability and debuggability.Languages:- Go- Bash- Python- Ruby / Rails 3 4 5Technologies:- Chef- Load Balancers- Docker- kafka- Kubernetes- Buildpacks- HTTP/TLS

Toronto, Ontario, Ca

Uken Studios is a Canadian Game Studio located in Toronto with games such as Jeopardy! in their portfolio.As Operation Lead, my #1 priority was to increase games' stability. As it turns out, a great deal of performance issueswere DB (mysql) related. So we had to become very good at deploying, operating and tuning mysql instances.Gaming web traffic is bursty and we kept many stand-by frontends ready to react to such traffic. It became clear thiswas not the most cost effective way to operate, so I've planned and implemented a full datacenter migration of over 300servers to the cloud. This migration occurred over the course of 2 weeks and many haproxy tunnels, with less than 1 hour downtime.In a cloud environment we were able to fine tune our stack to extract the most amount of power for our money spent, sowe turned our eyes to immutable deployments and autoscaling which then annihilated our bursty traffic issues.I've had the change to work client-side ( iOS & Android ) and wrote a cross platform (iOS & Android) app framework optimized for htlm5 games and gpu acceleration.A year later I've ported this app framework to Unity3D, increasing the supported platforms to any platform supported by Unity3d.During my time at Uken Studios I've also engaged in many meetup and conference talks in Toronto area. You can find theslides in my slideshare.I've also wrote and contributed to many open source projects such as fluentd.Languages- Go- Ruby / Rails 3 & 4- Bash- Python- Swift- C / Obj-C / C#Technologies:- Chef / Ansible- High Performance Load Balancers- PubSub- Container Runtimes: LXC / Docker- iOS development- Android development- Databases: mysql (percona), postgresql, vertica, redshift, influxdb- graphite- sensu- Caches: couchbase, redis, memcached- MQ: NSQ, rabbitMQ

Waterloo, Ontario, Ca

Fongo is a Canadian mobile carrier providing free phone & texting services for thousands of users in Canada and around the world.Solo backend engineer designing and operating a modern VOIP infrastructure optimized for poor cellular/wifi conditions.During this time I've published my first go library [go-eventsocket](https://github.com/lxfontes/go-eventsocket), whichimplementing the freeswitch eventsocket protocol.I designed and operated Fongo's messaging platform, which is capable of exchanging multimedia messages betweenusers and also also deliver messages from the users to regular SMS and vice versa.Languages:- Go- node.js ( proof of concepts )- C- Ruby/RailsTechnologies:- freeswitch- SIP- Audio codecs ( h264, silk )- Databases ( postgresql / mariadb / mongo / redis )- Rails 4- Bootstrap 3 (beta)

Waterloo, On, Ca

Sandvine produces high performance network bridges with filtering capabilities.Most of my tenure at Sandvine was in the Professional Services team, responsible for pre and post sales engagement aswell as designing & developing any custom integration needed for the contract.In this position, I've travelled around the globe for sales, training, requirements gathering, and deliveryof many Sandvine customized solutions.In my last year at Sandvine I've joined the Office of the CTO to quickly evaluate new ideas and integrations feasibility.Languages:- C / C++- Java- TCL / iTCL- Ruby / Rails / Merb- Python- Tons of bash- Sandscript ( Sandvine's custom language )Technologies:- Deep Packet Inspection- FreeBSD networking stack- Deep Layer2 thru Layer7 protocol understanding- Diameter / 3GPP and LTE online charging- RADIUS / AAA- AMQP- Lots of powerpoint.. like.... lots..

Waterloo, Ontario, Ca

Content categorization and filteringDistributed categorization system using Lucene and libevent3rd party network appliances integration: Cisco, Squid Cache, ISA ServerDeep packet inspection kernel modules for Linux and SolarisURL based traffic shapping using linux TC and layer7 filters

Large scale email solutions using QMail, LDAP and memcache.Deployed at the biggest national ISP (iG Portal with +17 million accounts), having its spam detection system handlingover 3+ million emails a day on 2 x86 servers.Designed and implemented a multi-site comment system, used across all iG's web properties.Developed C/C++ webservices for high performance email administration using GSoap.Implemented an XMPP component (messaging) to bridge messages between ejabberd and jive messenger, thus enablingmulti-site chat and federation across the 2 user bases.Wrote a VOIP plugin for the instant messenger app Pidgin using C and the iax2 protocol.

Us

Migration of entire email base (2 million accounts) from HSphere to QMail + LDAP.REGISTRAR integration for .com.br domains.VOIP-to-PSTN gateway implementation, using asterisk.Datacenter migration between cities 600km apart, rebuilding 200 servers in just one night (and no sleep!)

Captive Portal authentication integrating with Nortel Shasta and Cisco LNS; using java, oracle and ldapDynamic Firewall System with one time passwords (OPIE) for authentication. Inline protocol inspection for plain-text protocols such as FTP for auditingRADIUS design and implementation. Handling millions of logins daily for dial-up, ADSL and satellite connectionsWARdialer: Profiling connection speed for each POP. Dialer simulates a subscriber browsing, checking emails while counting packet-loss, busy dial tone, DNS failures and anything else that might affect subscriber experienceKHTTPd kernel module to prevent caching of swf files, very early days of SWF. Luckily they are gone :)

Internet access using your Tv as monitor !! Unfortunatelly company lasted only 8 months :(Content management system using LAMP stack, with good looking templates

ISP setup & operations.DNS, Email, webservers, radius & tacacs.Game server management ( CS 1.6, Quake )

Ar

ISP administration.Tacacs, dial-up configuration, FTP&web.