> AS-Path Engineering // Enterprise Overlays

Dhayf Allah

NOC VIP Engineer at EarthLink Telecommunications. Architecting resilient multi-homed BGP infrastructures, low-latency VXLAN tunneling, and high-ROI operational automation.

Initiate Dispatch LinkedIn Activity Source Repos
dhayf@core-bng-gw01:~$ show bgp summary
BGP router identifier 10.200.0.1, local AS 205648
Neighbors: Arar-IGW, Nowruz-IGW, Google-GGC, Meta-FNA
Status: 0 Flaps | MTTR Optimized | BBR Active

dhayf@core-bng-gw01:~$ run kaizen_engine.py --status
✔ 96.1% Routine Latency Dropped (257h → 10h/mo)
96.1%
Operational Automation
Engineered the "Kaizen" VLAN automation engine. Reduced monthly switch provisioning overhead from 257 to 10 hours.
Zero-Loss
Diplomatic Migrations
Executed a 10-minute zero-downtime infrastructure migration for the Turkish Embassy via dynamic ARP flushing protocols.
L2 over L3
Multi-Tenant Overlays
Bridged high-priority enterprise compounds using VXLAN & MPLS L3VPN, eliminating core routing table pollution.

Production Deployments & Architecture

BGP & Core Traffic Engineering

Multi-Gateway Load Balancing & CDN Steering

  • Engineered multi-homed BGP path manipulation across International Gateways (Arar, Nowruz, Badra).
  • Applied strict Local-Preference and AS-Path Prepending matrices to optimize gaming and VIP traffic latencies.
  • Eliminated asymmetric routing loops on core BNG concentrators.
BGP-4 Traffic Engineering AS-Path Local-Pref
Overlay Networks

VXLAN Multi-Site L2 Transport Over Layer 3

  • Deployed VXLAN tunnels to extend Layer 2 broadcast domains over routed L3 topologies.
  • Mitigated MTU limitation drops by engineering bidirectional TCP MSS clamping rules down to 1400 bytes.
  • Eliminated Spanning Tree Protocol (STP) dependencies and convergence overhead.
VXLAN MSS Clamping MTU Optimization L2 Over L3
ISP Automation

The Kaizen VLAN Provisioning Engine

  • Developed a Python & MikroTik API automation script handling mass QinQ (802.1ad) interface assignments.
  • Saved ~1.25M IQD/month in technical labor and operational dispatch hours.
  • Eliminated configuration typos across large-scale CCR switch clusters.
Python RouterOS API QinQ Automation
Security Operations

Infrastructure Hardening & PCI-DSS Compliance

  • Conducted automated vulnerability scans using Tenable Nessus across banking client perimeters.
  • Configured strict Active Directory Group Policy Objects (GPOs) and hardened core access nodes.
  • Implemented AES-128 cryptographic protections for sensitive government-level contracts.
Tenable Nessus PCI-DSS Active Directory ACLs

Published Engineering Case Studies

[Click strip to expand]

BGP-Free Core via MPLS L3VPN & MP-iBGP

Architecting multi-tenant isolation with Route Distinguishers (RD) & Route Targets (RT).

Read Technical Paper

Kernel Packet Fragmentation & The 50-Byte VXLAN Overhead

Solving silent UDP payload drops and CPU exhaustion via bidirectional TCP MSS Clamping.

Read Technical Paper

Multi-ISP Ingress/Egress Engineering via BGP Policies

Controlling traffic flow symmetry using Local Preference, AS-Path Prepending, and Next-Hop-Self.

Read Technical Paper

Verified Credentials

Cisco Systems

Cisco Certified Network Associate (CCNA)

ID: 0a41d91a85a9425d8fc147aaac00c328

Enterprise Routing, Switching, IP Services, and Security Fundamentals.

Harvard University

CS50x: Computer Science

C, Python, SQL, Memory Allocation, Data Structures, and Flask Frameworks.

Al-Mustansiriyah University

B.Sc. in Computer Engineering

Focus on Hardware Architectures, Digital Communications, and Network Protocols.

Direct Engineering Dispatch

Available for high-stakes ISP infrastructure auditing, core BGP/MPLS migrations, and enterprise network design advisory.

me@dhayf.dev
+964 783 839 8881
Launch Email Client Connect on LinkedIn