Swadhin Sekhar Behera

Cloud Agent Security Enhancement

• Resolved certificate validation failures in the cloud agent deployed across thousands of devices.
• Fixed critical certificate validation issue in C-based cloud agent using OpenSSL 3.3.1
• Enhanced ssl_cert_verify_callback to properly handle 3-tier AWS certificate chain (root/intermediate/leaf CA)
• Implemented comprehensive certificate chain verification, strict hostname validation against CN, and graceful handling of not-yet-valid certificates
• Impact: Resolved intermediate CA validation failures while strengthening security checks
• Skills: C, OpenSSL, PKI, Certificate Validation, Security Hardening

Device Classification

• Developed a Golang-based solution to classify endpoint devices by analyzing network attributes including MAC addresses, DHCP fingerprints, TCP/IP stack, TLS (JA3/JA3S), HTTP headers, DNS OS Update lits, and mDNS/SSDP data.
• Created structured JSON profiles for each device (keyed by MAC address) by aggregating multiple fingerprinting techniques.
• Integrated with cloud REST API to enrich device profiles with manufacturer/model information.
• Implemented using eBPF for efficient and scalable network data collection and processing.
• Impact: Enhanced network visibility and device identification accuracy for security monitoring.
• Skills: Golang, eBPF, Network Fingerprinting, REST APIs, JSON Data Modeling.

Microservices for Mobile App Backend

• Developed microservice applications to manage REST API calls from the Subscriber Mobile App.
• Designed REST API endpoints and JSON schemas for requests and responses.
• Utilized AWS DynamoDB for storing user data, including notifications and speed test history.
• Implemented user authentication from AAA Server using gRPC.
• Implemented go test cases for REST API endpoints, adhering to Test Driven Development practices.
• Skills: Golang, AWS, gRPC, RestAPI

End to end Product Design & Development of Home Router

• Designed json schema between Network Cloud Server and Wi-Fi Router for all the features required in the product.
• Collaborate cross-functionally with multiple teams, actively contributing to the end-to-end development of key features and driving their successful implementation.
• Guides the Quality Assurance team in prioritizing critical issues and steering them towards successful delivery of core functionalities.
• Implemented a speed test agent feature in Wi-Fi routers, enhancing network performance evaluation for users.
• Successfully integrated a robust Parental Control feature into the device, enabling enhanced control and security for families.
• Skills: C, Golang, Shell, Python, docker, Jira, Confluence, AWS EC2, S3 Bucket etc

Observability Engine Development

• Built comprehensive observability platform using modern stack for network infrastructure monitoring.
• Developed Observability Engine with Elastic stack and Grafana for CPE, Wi-Fi APs, and router visualization
• Integrated syslog-ng within Network Access Points for streamlined log export
• Developed Golang stats-collector agent for AP data collection and Grafana transmission
• Successfully containerized ELK Stack, Grafana, and syslog-ng server for enhanced scalability
• Skills: ELK Stack, Grafana, Golang, syslof-ng, docker

Fault Visibility & Threshold Crossing Alerts

• Integrated fault event generation across SD-WAN components (Dataplane, Control Plane, DPI Engine, Security Engine)
• Implemented comprehensive fault visibility and TCA (Threshold Crossing Alerts)
• Integrated LMDB (mmaped) for efficient tracking of event status (RAISE/CLEAR)
• Skills: C, Golang & Python.

System Resource Manager

• Built comprehensive system health monitoring solution for critical infrastructure components.
• Developed Golang-based watchdog application monitoring CPU, Memory, Disk, Open FD, and system temperatures
• Monitored essential applications (Dataplane, DPI Engine, Control Plane processes)
• Implemented automated alerting and recovery mechanisms

Inline DNS Proxy Implementation

• DNS proxy solution enabling SDWAN sites to receive site-specific, personalized domain responses, enhancing network segmentation and policy-driven DNS resolution.
• Implemented DNS proxy directly in datapath for improved performance
• Used hashmap for storing DNS Answer headers optimization
• Handled JSON configuration pull from Cloud via Control Plane (Python)
• Skills: C, hashmap, cJSON.

Contributed to Active-Active High Availability

• Designed and executed comprehensive unit and integration tests for Active-Active High Availability, ensuring robust failover and reliability.
• Identified and resolved critical issues uncovered during development and testing, significantly improving system stability.
• Collaborated with the QA team to facilitate understanding of HA functionality and ensuring thorough validation.

SD-WAN software stack ported into ARM platforms, enabling deployment on cost-effective, resource-constrained devices.

• Cross-compiled and ported all SD-WAN CPE components to ARM devices
• Developed Multi Pattern Matching Library for DPI Engine on ARM architecture
• Integrated Switch Software (RTL8367) into the product
• Conducted onsite verification for board manufacturing
• Skills: C, BSP Development, pcre, regex

DHCP Server and DHCP Options Integration

• Integrated DHCP Server into the control plane with full support for options 150, 66, and 67.
• Designed and implemented robust configuration management within the control plane.

Custom Modem Manager for 4G/5G Modems & Dongles

• Implemented a Modem Manager to seamlessly handle a wide range of 4G/5G USB modems and dongles, ensuring reliable WAN connectivity for SD-WAN deployments.
• Seemless integration of WAN link within the SD-WAN platform, enabling automatic detection, configuration, and failover for cellular connections.
• Enhace modem manager for devices with status monitoring and automated recovery.
• Optimized custom modem drivers for mini-PCIe devices, ensuring compatibility and high performance across multiple hardware platforms.
• Skills: C, Linux kernel (usbcore, usbnet, cdc-ether), embedded systems, device driver development

Video Conference using GStreamer

• Developed Video Conference Bridge using GStreamer framework
• Ported to TI DM8168 & TI 6636K2H boards with video codec integration
• Skills: C, GStreamer, SIP

Advanced VoIP Solutions

• Strengthened SIP authentication and security in VoIP Server.
• Integrated advanced IVR capabilities.
• Developed custom SIP client with embedded drivers and firmware.
• Skills: C, SIP

OpenWRT-based Wi-Fi Authentication Platform

• Enabled seamless user authentication on TP-Link routers using nodogsplash captive portal
• Engineered a scalable cloud server for centralized router management
• Implemented MQTT protocol for efficient router-cloud communication
• Integrated Google Analytics for real-time platform insights
• Skills: OpenWRT, nodogsplash, MQTT, cloud server development, analytics integration

IoT based Smart Landline Solution

• Built IoT solution bridging landline calls to WiFi/mobile.
• Developed firmware for DAA CPC5622 & ESP8266 chips.
• Implemented I2S audio driver for WM8510 codec.
• Integrated I2C, GPIO; performed hardware verification via oscilloscope.
• Analyzed schematics for signal validation.
• Skills: Embedded C, ESP8266, DAA CPC5622, I2S, I2C, GPIO, hardware debugging, firmware development