Skip to content
View srujaniyengar's full-sized avatar
😽
ARGON>MALRIC
😽
ARGON>MALRIC
13 followers · 17 following

Achievements

Achievement: Pair ExtraordinaireAchievement: Pull Sharkx2Achievement: Quickdraw

Achievements

Achievement: Pair ExtraordinaireAchievement: Pull Sharkx2Achievement: Quickdraw

Highlights

  • Pro

Block or report srujaniyengar

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
srujaniyengar/readme.md

Srujan Iyengar

Systems, backend and infrastructure engineering. Security Engineering Intern at Appfend.
B.Tech Computer Science and Engineering (IoT), Shiv Nadar University Chennai, Aug 2027 (expected). Based in Bengaluru, India.

Now

Appfend, Security Engineering Intern (May 2026 to present). Multi-tenant microVM sandbox on k3s with Kata Containers, Cloud Hypervisor and Cilium.

  • Fail-closed CEL admission policies that enforce the Kata runtime class and reject token automount.
  • Enabled Kata guest seccomp; ran the Cloud Hypervisor VMM as non-root.
  • Root-caused Kata VM memory escaping cgroup limits and fixed it.
  • Identity-based Cilium policies for tenant isolation.
  • Test harness that enforces threat-to-test coverage both ways, gated in CI by a Go merge gate.

TruckHai, Backend Engineer Intern (Dec 2025 to May 2026). Go microservice with a rate limiter, a worker-pool pipeline and DAG orchestration.

Projects

  • Lab Control Plane: Node.js/Fastify service that places and reaps lab pods across k3s clusters, with idempotency, rollback, capacity-aware placement and Prometheus metrics.
  • Bucellarii: eBPF/XDP packet filter in C with a Go control daemon.
  • Gravity: Simulation of staleness- and topology-aware routing against RR, P2C, consistent hashing and least-connections. (demo)

Also: Deston, GhostLink, ByeByeSeg, NiftyGoGo.

Skills

Languages: Bash, Go, C, JavaScript (Node.js), Python, Rust, C++
Infrastructure: Kubernetes (k3s), Kata Containers, Cloud Hypervisor, Cilium, Prometheus, GitHub Actions
Linux: cgroups v2, systemd, seccomp

Contact

Website · LinkedIn · X · srujanparthasarathyiyengar@gmail.com

Pinned Loading

  1. GhostLink GhostLink Public

    Forked from pushkar-gr/GhostLink

    A serverless P2P chat application built in Rust. No central servers, intermediaries, or port forwarding required.

    Rust

  2. Deston Deston Public

    Forked from pushkar-gr/Deston

    A L7 & L4 load balancer built using rust

    Rust

  3. ByeByeSeg ByeByeSeg Public

    ByeByeSeg– A custom memory allocator with a built-in borrow checker for C/C++, designed to prevent segmentation faults and enforce safe memory usage. 🚀

    C

  4. turbotftp turbotftp Public

    Forked from pushkar-gr/turbotftp

    Implimentation of TFTP in cpp

    C++

  5. GrozaSched GrozaSched Public

    A simple appointment booking API built with Golang, Gin, and MongoDB.

    Go 1

  6. rondo-man rondo-man Public

    🚀 rondo-man rondo-man is a fast and lightweight Linux CLI utility that simplifies everyday tasks. It helps clean old files, generate ASCII art, set reminders, and more—all from the terminal. Design…

    C++