Amir Razmjou

Software
Engineer.

I build networked and distributed systems — from packet-level plumbing to cloud infrastructure — with a soft spot for simplicity and functional programming.

About

I'm a software engineer with a background that runs from network research — SDN, OpenFlow, traffic analysis — to cloud infrastructure and data-heavy backend systems.

I started out building business intelligence into collaboration products, spent grad school deep in computer networks at Florida Tech, and have been shipping production systems ever since. The throughline: making complex systems visible, fast, and simple.

Distributed Systems Networking & SDN Cloud Infrastructure Performance Functional Programming Data Visualization

Selected Writing

Rust · Search

Building a Search Engine in Rust

A Semaphore-bounded Tokio web crawler, an inverted index, and BM25 ranking that beats naive keyword counting — crawl, index, rank in a few hundred lines.

Kubernetes · eBPF

NetChaos: Declarative Network Chaos with eBPF

Describe network faults as Kubernetes CRDs, drive them with an operator reconcile loop, and deliver packet drops at kernel speed with eBPF.

Rust · WebAssembly

Snake on a Cube

3D Snake crawling across all six faces of a cube, compiled to WebAssembly with three-d. The whole game lives in the seams where one face's coordinates meet another's.

Rust · Storage

Reimplementing S3 from Scratch in Rust

An S3-compatible object store: filesystem-backed objects, multipart upload assembly, and versioning with delete markers — where the real difficulty is the metadata, not the bytes.

Linux · Networking

How a Local IP Broke IPv6 Tunnels in the Linux Kernel

A one-line kernel fix: routing one app's traffic by UID into a FOU/SIT tunnel, where encapsulated IPv6 to a local peer silently vanished — an RTN_LOCAL route the transmit path refused.

Go · Distributed Systems

Gerdu: A Raft-Backed Key-Value Store in Go

One small cache interface behind LRU/LFU/weak implementations, four wire protocols at once, and Raft replication where the cache itself is the state machine.

Rust · Networking

PathForge: A BGP-4 Daemon from Scratch in Rust

Implementing the protocol that holds the internet together against RFC 4271 — wire framing, a session state machine, and the best-path decision process as a sort comparator.

Rust · Cloud

Writing a Small S3 Proxy in Rust

Routing requests to the right backend by bucket name, API-key auth with per-user roles and allow-lists, and a sliding-window rate limiter.

Systems · Go

Building Sentry: A Secure Job Runner

Running Linux processes under hard CPU, memory, and I/O limits with cgroups v2, streaming logs over gRPC, and authenticating with mutual TLS.

Security · ML

Data-Mining PCAP Files with Weka & dpkt

Hunting malicious traffic flows in FTP control channels using Weka and Python's dpkt library.

Cloud

OpenStack REST API, Called Directly

A general approach for hitting OpenStack's REST API when wrapper libraries don't cover what you need.

Programming

Why Does Functional Programming Matter?

On modularity, laziness, and why FP's ideas outlive the hype cycles around it.

Machine Learning

Playing with k-Nearest Neighbors

A deliberately simple implementation of k-NN classification, built to understand it rather than to ship it.

Networks

Hello, Complex Networks

First steps into complex-network analysis — graphs, motifs, and the structure hiding in real systems.

Security

What Is Computer Security?

A review of Matt Bishop's classic paper on what we actually mean when we say "secure".

Let's talk.

The fastest way to reach me is email — for everything else, the usual places work too.