Kotodian - Overview

Hi there 👋 I'm Kotodian

🚀 Network Security Engineer | VPN Protocol Developer

Building high-performance, secure VPN solutions with cutting-edge technologies.


🔥 Featured Projects

🔧 VPP-OpenVPN Plugin

High-performance OpenVPN data plane acceleration using Vector Packet Processing (VPP)

  • ⚡ 10x faster than traditional OpenVPN
  • 🎯 Zero-copy packet processing
  • 🔄 Multi-core scalability

🔐 StrongSwan-GM

IPsec VPN with Chinese National Cryptography Support

  • 🇨🇳 SM2/SM3/SM4 algorithms
  • 🛡️ IKEv2 with GM cipher suites
  • ✅ Compliant with Chinese standards

🚀 MASQUE Protocol

Next-generation HTTP/3-based proxying protocol implementation

  • 🌐 QUIC-based tunneling
  • 🔒 TLS 1.3 encryption
  • 📡 UDP proxying support

🚀 TORQUE Protocol

High performance port-forward implementation based on ebpf


💻 Tech Stack

C Go Linux VPP IPsec


Pinned Loading

  1. A MASQUE proxy server in Rust implementing CONNECT-UDP (RFC 9298) and CONNECT-IP (RFC 9484) over HTTP/3.

    Rust

  2. Forked from OISF/suricata

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

    C

  3. Forked from google/nftables

    This repository contains a Go module to interact with Linux nftables (the iptables successor).

    Go

  4. eBPF-based high-performance port forwarder for Linux. Performs DNAT and reverse NAT at the earliest point in the networking stack, achieving near-line-rate forwarding with minimal CPU overhead.

    Rust