Research & Publications

Technical papers, architecture benchmarks, and experimental studies on Zero-Trust network topologies and eBPF traffic engineering.

IEEE / ACM Cloud Systems & Kernel Networking Research Report2024

eBPF-Driven Cloud Traffic Engineering: Kernel-Bypass Ingress Routing, Dynamic Load Balancing, and Line-Rate DDoS Mitigation in Multi-Tenant Kubernetes

By Yahya Khan

An exhaustive empirical investigation into transitioning containerized cloud ingress and east-west service routing from conventional Linux Netfilter/iptables architectures to programmable Extended Berkeley Packet Filters (eBPF) and eXpress Data Path (XDP). The paper evaluates kernel bypass mechanisms, Maglev consistent hashing algorithms, stateful connection tracking BPF maps, and in-kernel line-rate DDoS filtering across 25GbE network fabrics.

eBPFLinux KernelKubernetesTraffic EngineeringNetworkingSREDistributed Systems

Read Paper→PDF Document

IEEE / ACM Cloud Systems & Infrastructure Security Whitepaper Series2024

Cryptographic Zero-Trust Network Topologies in Hybrid Multi-Cloud Architectures: Microsegmentation, SPIFFE/SPIRE Identity Federation, and eBPF Data Planes

By Yahya Khan

A rigorous mathematical and architectural investigation into minimizing cross-cloud latency while enforcing zero-trust cryptographic microsegmentation across distributed on-premises and multi-cloud environments. The paper evaluates hardware TPM 2.0 node attestation, SPIFFE/SPIRE dynamic identity issuance, and socket-level eBPF packet redirection against legacy IPsec overlays and userspace sidecar proxies across 10Gbps dedicated hybrid interconnects.

Zero TrustNetwork InfrastructureHybrid CloudCryptographySPIFFE/SPIREeBPFSREKubernetes

Read Paper→PDF Document