Small yet powerful device intrusion detection mechanism. It has a negligible footprint, it is very portable, and basically can be used anywhere, even in IoT devices.

Dynamic tree implementation which allows for advanced use cases - like state keeping.

printf/scanf format parser

Convert compile_commands.json to Atmel Studio projects

Eclipse IDE integration for the Equid static analyzer.

A project that is tracing the build on Linux, Windows and Mac and prepares configuration for the static analysis.

Numerous issues in MediaTek SoC were fixed.

Find and fix numerous issues in a commercial WiFi Mesh implementation.

Detect existing toolchains and their parameters

Message broker that can be installed to embedded software and used from Python test suite.

Test ANTLR grammars and prepare JUnit result XML from results. Useful in CI.

Recreate signatures of Clang's builtin functions.

A simple console interface for adding peers to Wireguard configuration files.

Inject pages to SLAB caches in Linux. That may help improve performance and stability in memory-critical drivers in constrained environments.

Prepared a complete driver for emulating LAN clients.

Prepared cryptography improvements for router software.

SECCOMP mechanism has been ported to older Linux to facilitate LXC integration.

A custom package manager has been coded for a commercial router software. It was based on opkg, but supported many additional features.

A custom OpenVPN solution for Linux-based router software was architected, developed and made available publicly. Partially supports cryptography offloading and packet traffic acceleration.

A complete solution based on LXC has been written for commercial router. It was created with resource constraints in mind, so it actually could provide working containerization on a disk drive smaller than 30MB.

OverlayFS support has been implemented in Linux-based router software package. While the OverlayFS itself is a kernel's feature, a lot of efforts were put into making it supported on a complete solution level, with booting process altered, security, secure erase and other levels sorted out.

The Docker didn't have MIPS support back at that time, but the customer wanted to see it running. I investigated whether it is possible to port Docker (yes, it was), however, we stumbled upon Docker's design implications that prevented us from finishing the project.

Fixed multiple issues in Atheros and Intel (Metalink) WiFi drivers.

A new initial setup wizard was implemented for router software.

Ported DWC2 driver to a new platform, significantly improving stability and performance.

Host Controller Driver used in one of commercial SoCs has been fatally flawed. Fixing it was a major challenge, which required creation of a custom static analyzer.

An L2TP/L2TP+IPSec solution for Linux-based router software was architected, developed and made available publicly. It also works with partial cryptography and packet traffic acceleration.

I've architected and implemented a complete certificate store module for commercial router, which supported certificate/private key generation, import/export, verification against a private key. Still used without major edits (as of 2022).

I've optimized web interface prefetching and loading got 7x performance boost.

I've created a custom DynDNS client that is deployed to thousands of devices worldwide.