Blog

Profile

Dongdong Yang

YANG DONGDONG

Software Engineering Manager / High-performance System Architect

Name: Yang Dongdong
Date of birth: Nov, 1983
Address: Yayuncun, Beijing
Phone: 18601121116
Website:http://donge.org
19 years of high-performance network system and product software development experience, focusing on Ethernet switching, routing, and security solutions. Proficient in C and Golang programming and debugging. Professional expertise in IP/MPLS, Ethernet protocols, and data center networking. Rich experience in high-performance software design and architecture.
Familiar with network and application security solutions, and led a team from 0 to 1 to design and develop an API security platform, achieving product commercialization and certain scale.
Also a full-stack software engineer, focusing on building scalable and efficient systems. Passionate about solving complex technical challenges and driving network technology innovation.
Understanding of machine learning and big data technologies, with deep understanding of LLM principles and applications, experience in designing and developing RAG, LLM Agent and other AI applications.
Here is my blog http://donge.org and Github: https://github.com/donge (both with 1500+ commits in recent years)

Resume

Employment

2018.4 - present

Servicewall.ai

Founding Engineer / Architect

Design and build products from 0 to 1. The product is software-based, focusing on service and API-level security, leveraging data and AI analysis to assess risks in customer services.
The software primarily uses Golang technology stack and Docker deployment. It can be scaled with multiple instances, including infrastructure components.
Leverage multiple open-source projects to shorten development cycles, including OpenResty, Clickhouse, Spark, Redis, Kafka, Cube.js, etc.

I led a 12-person R&D team, and we won over 100 customers with revenue exceeding 15 million.

Built the R&D team, organized recruitment and training, defined R&D processes including code standards, CI/CD processes, testing processes, etc.
Key Projects:
• API Security Platform - Cloud-native distributed HTTP proxy and security gateway, using machine learning for real-time analysis of HTTP headers and content
• AI Business Firewall - Large model firewall product, protecting LLM applications from emerging threats
• Mobile Threat Detection - Client-side security SDK, device fingerprinting, solving secure access for mobile applications
• Data Security Control - Personal information classification and grading, deep traffic analysis, real-time alerts and blocking
2013.4 - 2018.4

Juniper Networks

Software Engineering Manager

As manager of the SRX platform team, responsible for CPU/BSP, drivers, kernel, network stack, and forwarding engine development on SRX firewall.
The platform team collaborates with teams from different regions to support feature design, bug fixes, and customer support.
Our team received positive feedback from India and headquarters, and I was promoted from MTS4 to Staff to Manager from 2013 to 2016.
The product supports both hardware and virtualization solutions, using unified software architecture to provide high-performance, low-cost products. Our features include IP/MPLS routing and forwarding, traffic policy and shaping, kernel, driver, and BSP maintenance.

Key Projects:
• Daybreak - New SRX software architecture for cloud services, control plane OS runs in nested VMs, security services use DPDK
• Forge SRX1500 - X86-based security platform, using VT-x, KVM/QEMU, leveraging DPDK, SRIOV, VirtIO tools
• Branch SRX Firewall - Enterprise SRX platform, MIPS architecture, integrating JUNOS and ScreenOS, providing complete security features
2006.7 - 2013.3

Huawei

Senior Software Engineer

Worked at Huawei Beijing R&D Center for nearly 7 years, focusing on network system platforms, particularly Ethernet switching and routing technologies. As team technical leader for 4 years and project leader for 1 year, responsible for module design, coding, and patents.
As chief designer and developer of the TRILL project, a highlight feature for data center switches, and received the Beijing R&D Design Award in 2012.
As technical leader, published 5 patents as author or co-author in network and system areas.
Optimized and tuned routing convergence performance, achieving first place multiple times in comparison tests with competitors.
As project leader and developer, completed nearly 10 projects with high quality in the team, see details on LinkedIn.
Served as mentor and trainer for knowledge enhancement.

Key Projects:
• TRILL - Key feature for data center switches, TRILL protocol requirements analysis, architecture and module design
• IP FRR - Fast reroute technology, responsible for project technical research, design, development and implementation
• Non-stop Routing - VRP NSR prototype project, organized technical discussions, development plans and solution decisions
• Patent Achievements - Published 10 patents as author or co-author in network, system and API security areas

Education

2002 - 2006

Shenyang University of Technology

Computer Science & Technology

Received 3 scholarships, all A grades in computer experiment courses.
Co-founded computer association with roommates.
Participated in multiple online programming competitions, such as ACM/ICPC, Topcoder, Baidu Star (Top 300 nationally).

Personal Projects:
• wFilter - High-performance web keyword filtering system, using Aho-Corasick algorithm and DPDK, MEAN full-stack architecture
• Bitcoin Auto-trading Robot - Python/Golang development, deployed on Raspberry Pi, supporting multiple exchange APIs
• Disk Usage Visualization - Using d3.js to visualize disk usage, data obtained through shell scripts

Project

API Security Platform Cloud-native distributed HTTP proxy and security gateway, using machine learning for real-time analysis of HTTP headers and content.
Servicewall.ai
AI Business Firewall Large model firewall product designed to protect Large Language Models (LLMs) from various emerging threats, different from traditional web applications. These products integrate multiple functions to ensure the security, compliance and availability of LLM applications.
Servicewall.ai
Mobile Threat Detection Through client-side security SDK, collect and track device information within non-privacy scope, generate device fingerprints, solve secure access for mobile applications. Can also fundamentally solve web crawler issues.
Servicewall.ai
Data Security Control Classify and grade personal information and business information, and perform deep traffic analysis to detect privacy content in APIs and files, with real-time alerts, blocking, desensitization or approval access.
Servicewall.ai
Daybreak An new SRX software archtecture for cloud service. Control plane OS works in nested VM, security service runs on X86/Linux with DPDK. Provide the same service as box, but all run in the virtual machine.
Juniper
Forge X86 based security platform, with VT-x, KVM/QEMU. To improve the datapath performance, leverage the DPDK, SRIOV, VirtIO tools.

Forge - SRX1500

Juniper
Branch SRX Branch SRX targets the enterprise market, the SRX platforms are from on-desk to 2U chassis, with MIPS architecture. It integrates the JUNOS and ScreenOS. Provide full features of security. Flow, Routing, NAT, Screen, ALG, VPN, UTM, IDP.

Branch SRX - SRX300

Juniper
wFilter wFilter is a mini full-stack personal project for blocking the webpage which contains keyword in data-base with high-performance design, with Aho-Corasick string matching and DPDK. The front-end is "MEAN"(MongoDB, ExpressJS, AngularJS, Node.js)

https://github.com/donge/wfilter

Personal
Bitcoin Autotrade Robot Draft with Python and rewrite with Golang, it deploys on Raspberry PI, and do transaction automatically based on the latest price and strategy. The parameters can be configured anytime and anywhere with a mobile phone. Implement APIs for Top 5 Bitcoin transaction site.

https://github.com/donge/xiaoshaozi

Personal
GGUF Inspector
GGUF file format inspection and analysis tool for parsing and validating the structure and content of GGUF model files.
go-yyjson
High-performance JSON parsing library for Go language, based on yyjson implementation, providing fast and memory-efficient JSON processing capabilities.
llama2.zig
Llama2 model inference engine implemented in Zig language, demonstrating high-performance systems programming in AI model deployment.
TRILL Led TRILL protocol requirements analysis, architecture and module design, as design leader, drive the TRILL overall design and participate in the process of development, it's key feature of Huawei CloudEngine series switches products.

TRILL white paper

Huawei
IP FRR Responsible for the IP FRR design. As project Leader, be responsible for project technical research, design, later stages of development and implementation of the work. Development project manager, responsible for project planning, tracking, and project delivery.
Huawei
Non-stop Routing VRP NSR prototyping project manager, responsible for organizing the prototype project technical discussion, prototype development plans, programs and decision-making work. Be the chief developer in following project development.
Huawei
CN119892515A
API security protection method, device and equipment based on HTTP message stream processing
CN119884893A
End-to-end hybrid expert model training method, device and electronic equipment
CN118153060A
API security-based data analysis method, device, medium and product
CN116074118A
API access control method, system, smart terminal and storage medium
CN116055219A
API access link anti-step method, system, terminal and storage medium
Security Technology Research - donge.org
During Servicewall.ai period, participated in API security technology research and development, related technical solutions and best practices published in industry conferences and technical blogs.
Open Source Project Contributions - GitHub
Maintain multiple open source projects on GitHub, including wFilter, xiaoshaozi, etc., with over 1500 code contributions, related technical articles published on personal blog and technical communities.
Anti-Architecture Design - Zhihu
Exploring anti-patterns in software architecture design, analyzing over-design and technical debt issues, proposing concise and effective architecture design principles.
Big Data Stream Processing State - CSDN
In-depth analysis of state management mechanisms in big data stream processing tools like Spark and Flink, exploring the relationship between state and data flow in stream processing.
Page 1 of

Contacts

Contact info
Address
Phone
Website