<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Leow Kah Man | Systems &amp; Engineering Leadership Tech Blog</title><description>Architectural deep-dives into scalable cloud systems, resilient infrastructure, edge security, and disciplined software craftsmanship by Leow Kah Man.</description><link>https://www.leowkahman.com/</link><language>en-us</language><item><title>Rebooting the Publication: Engineering Transformation, Pragmatism, and Writing in the Age of AI</title><link>https://www.leowkahman.com/rebooting-the-publication/</link><guid isPermaLink="true">https://www.leowkahman.com/rebooting-the-publication/</guid><description>Why I stepped away from technical blogging, how AI-augmented workflows solved the drafting bottleneck, and what to expect as I document modern engineering transformation.</description><pubDate>Sun, 08 Nov 2026 00:00:00 GMT</pubDate><category>Engineering Leadership</category><category>Engineering Leadership</category><category>Transformation</category><category>AI-First</category><category>Software Craftsmanship</category><author>Leow Kah Man</author></item><item><title>Demystifying Linux Network Fastpath: Software &amp; Hardware Flow Offloading on OpenWRT</title><link>https://www.leowkahman.com/speedtest-openwrt-with-flow-offloading/</link><guid isPermaLink="true">https://www.leowkahman.com/speedtest-openwrt-with-flow-offloading/</guid><description>Overcoming kernel netfilter forwarding bottlenecks to achieve line-rate gigabit throughput on resource-constrained embedded router hardware.</description><pubDate>Sat, 01 Feb 2020 00:00:00 GMT</pubDate><category>Networking &amp; Kernel</category><category>Linux Kernel</category><category>Networking</category><category>OpenWRT</category><category>Performance</category><category>Homelab</category><author>Leow Kah Man</author></item><item><title>Taming Bufferbloat: Packet Scheduling, Fair Queuing, and Active Queue Management with SQM</title><link>https://www.leowkahman.com/reduce-internet-lag-on-openwrt/</link><guid isPermaLink="true">https://www.leowkahman.com/reduce-internet-lag-on-openwrt/</guid><description>A deep dive into mitigating queue latency under saturation using modern Smart Queue Management algorithms (CAKE and fq_codel) in embedded Linux.</description><pubDate>Sat, 11 Aug 2018 00:00:00 GMT</pubDate><category>Networking &amp; Kernel</category><category>Networking</category><category>Bufferbloat</category><category>QoS</category><category>Linux</category><category>OpenWRT</category><author>Leow Kah Man</author></item><item><title>Expressive Code Craftsmanship: Writing Maintainable, Readable LINQ in Production</title><link>https://www.leowkahman.com/writing-readable-linq-code-in-csharp/</link><guid isPermaLink="true">https://www.leowkahman.com/writing-readable-linq-code-in-csharp/</guid><description>Software engineering standards for clean code: managing cognitive load, avoiding monolithic lambda chains, and balancing declarative functional programming with long-term codebase maintainability.</description><pubDate>Mon, 23 Apr 2018 00:00:00 GMT</pubDate><category>Software Architecture</category><category>Software Design</category><category>Clean Code</category><category>C#</category><category>.NET</category><category>Functional Programming</category><author>Leow Kah Man</author></item><item><title>Platform Engineering: Architecting Ephemeral, Containerised CI/CD Runners on Constrained Hardware</title><link>https://www.leowkahman.com/byod-ci-cd-build-machine-to-run-pipelines-using-docker/</link><guid isPermaLink="true">https://www.leowkahman.com/byod-ci-cd-build-machine-to-run-pipelines-using-docker/</guid><description>Designing cost-effective, secure, and isolated hybrid build infrastructure using Docker daemon sandboxing, local image layer caching, and dynamic job execution.</description><pubDate>Mon, 02 Oct 2017 00:00:00 GMT</pubDate><category>Platform Engineering</category><category>DevOps</category><category>Docker</category><category>CI/CD</category><category>Platform Engineering</category><category>Infrastructure</category><author>Leow Kah Man</author></item><item><title>Advanced Policy-Based Routing: Multi-Gateway Traffic Steering with iproute2, fwmark, and IPset</title><link>https://www.leowkahman.com/conditional-multiple-openvpn-routing-hostname-ip/</link><guid isPermaLink="true">https://www.leowkahman.com/conditional-multiple-openvpn-routing-hostname-ip/</guid><description>Architecting multi-tunnel WAN split routing using Linux kernel routing tables, connection packet marking, and dynamic DNS-driven IP sets.</description><pubDate>Sun, 19 Jun 2016 00:00:00 GMT</pubDate><category>Infrastructure &amp; Protocols</category><category>Networking</category><category>Routing</category><category>Linux</category><category>Security</category><category>OpenVPN</category><author>Leow Kah Man</author></item><item><title>Zero Trust Ingress: Origin Cloaking with Strict IP Ingress Filtering and Mutual TLS (mTLS)</title><link>https://www.leowkahman.com/zero-trust-ingress-origin-cloaking-mtls/</link><guid isPermaLink="true">https://www.leowkahman.com/zero-trust-ingress-origin-cloaking-mtls/</guid><description>Defence-in-depth architecture before managed tunnels: protecting origin servers against direct-to-IP bypass attacks using netfilter firewall whitelisting and mutual TLS authentication.</description><pubDate>Sun, 14 Feb 2016 00:00:00 GMT</pubDate><category>Security Architecture</category><category>Security</category><category>Zero Trust</category><category>Firewall</category><category>Cloudflare</category><category>TLS</category><category>DevSecOps</category><author>Leow Kah Man</author></item></channel></rss>