RABI SHRESTHA| Kathmandu, Nepal|NETWORK + SYSTEMS + SOFTWARE
HELLO, I'M RABI SHRESTHA

Bridging ISP Network Infrastructure, Linux Systems & Modern Software Engineering.

I am a Network & Systems Engineer with a strong software development background. I architect and operate carrier routing fabrics (BGP, OSPF, MPLS, Segment Routing, VPLS across Juniper, Cisco, MikroTik & Huawei), manage high-density Linux, Proxmox & ZFS systems, build full-stack observability with Prometheus, Grafana & NetBox, and develop custom network tooling and web applications in Go, Python, TypeScript & Next.js.

Interactive Architecture LabNetCLI WorkstationAbout My Background
Carrier Routing Scale
100G / 25G
BGP • MPLS • Segment Routing • VPLS
BNG Subscriber Capacity
120k+
Active PPPoE/IPoE Sessions
Systems & Observability
500+ Nodes
Prometheus • Grafana • Zabbix • NetBox
Software & Automation
Go • Python • TS
gearctl • Next.js • Django • Docker
Background & Philosophy

Engineering with Purpose & Real Code

Bridging multi-vendor carrier routing (BGP, MPLS, VPLS, BNG) with Linux systems, telemetry stacks, and software development in Go, Python, and TypeScript.

The Engineering Intersection

I am a Network and Systems Engineer with a strong software development and automation background. Over 8+ years in the industry, I have worked across the entire infrastructure lifecycle — from physical fiber and multi-vendor carrier routing to Linux virtualization, automated monitoring, and full-stack web applications.

I strongly believe that the most resilient infrastructure is built when networking and software engineering inform each other: understanding packet headers, BGP state machines, and optical budgets makes me a better backend programmer, while writing clean Go, Python, and TypeScript allows me to automate complex operational workflows that traditional network admins handle manually.

Whether it's troubleshooting an asymmetric BGP routing loop, tuning a 3-node Proxmox/ZFS storage cluster, pushing automated config changes to 500+ routers, or building a modern Next.js management UI, I focus on building systems that are reliable, observable, and maintainable.

Homelab & Daily Hardware Testbed

I test configurations, protocols, and code on bare metal before deploying to production. My personal rack testbed includes:

MikroTik CCR2004 & CRS305: 10G/25G SFP+ BGP, MPLS & QinQ testbed
3-Node Proxmox VE Cluster: Ceph NVMe storage & virtualized Junos/vEOS
Telemetry Stack: Prometheus, Grafana, Zabbix & NetBox SSoT instances
GPON OLT Workbench: Optical splitters for TR-069 ACS firmware testing
LOCATION: KATHMANDU (NPT / GMT+5:45)● OPEN TO OPPORTUNITIES

Core Areas of Practical Expertise

ISP & Carrier Network Infrastructure

Extensive hands-on experience designing and operating multi-vendor ISP backbones. From multi-homed BGP peering and traffic engineering to MPLS, Segment Routing, VPLS Layer 2 transport, and 120k+ session BNG subscriber management across Juniper, Cisco, MikroTik, and Huawei hardware.

Linux Systems, Virtualization & Storage

Managing high-availability Linux infrastructure on Debian/Ubuntu and RHEL. Proficient with 3-node Proxmox VE clusters, ZFS NVMe pool tuning, Ceph distributed storage, DNS/DNSSEC (BIND9/PowerDNS), FreeRADIUS, and TCP/IP kernel optimization (BBR, sysctl buffers).

Observability, Telemetry & SSoT

Building unified observability stacks using Prometheus (SNMP exporter), Grafana, Zabbix, and NetBox as the dynamic Single Source of Truth. Automating host discovery, threshold alerts, and NetFlow/IPFIX analysis to proactively detect anomalies before customer impact.

Software Development & Automation

Writing production software across the stack. Built `gearctl` in Go for high-concurrency network driver automation, developed OpenACS for TR-069 ONT management, and crafted full-stack internal operations portals using Next.js / TypeScript, Django / FastAPI, and Docker.

Interactive Architecture Lab

Dynamic Carrier Core & Telemetry Topology

Explore multi-vendor carrier routing, automated SSoT telemetry pipelines, and last-mile TR-069 access fabrics. Inspect live link telemetry and test simulated failover.

Tier-1 Upstream Transit & IXP198.51.100.0/24 (AS65001)Core-01 (Juniper MX480)10.200.1.1/24Core-02 (Cisco ASR / Huawei ME60)10.200.1.2/24Metro Edge (MikroTik CCR2216)10.10.10.1/24GPON OLT Access Fabric10.10.30.1/24
NODE TELEMETRY: SELECT A NODE

Click on any topology node to inspect live link telemetry.

LIVE NOC & TELEMETRY STREAM● STREAMING
[12:00:01]BGP Core: Multi-homed upstream transit sessions converged (AS65001)
[12:00:03]Prometheus & Zabbix: NetBox dynamic inventory synced across 500+ nodes
[12:00:05]gearctl: Parallel health check across multi-vendor routers passed in 780ms
NetCLI Terminal

Interactive Workstation CLI

A keyboard-driven engineering terminal. Query BGP routing tables, inspect MPLS/VPLS state, test `gearctl` parallel dispatch, or check Prometheus & NetBox telemetry.

rabi@netcore: ~ (zsh)
BGP AS65001 // SYSTEMS UP
QUICK:

   ____        _     _     ____  _                   _   _           
  |  _ \      | |   (_)   / ___|| |__  _ __ ___  ___| |_| |__   __ _ 
  | |_) |__ _ | |__  _    \___ \| '_ \| '__/ _ \/ __| __| '_ \ / _` |
  |  _ < _` || '_ \| |    ___) | | | | | |  __/\__ \ |_| | | | (_| |
  |_| \_\__,_||_.__/|_|   |____/|_| |_|_|  \___||___/\__|_| |_|\__,_|
  -------------------------------------------------------------------
  [ ISP / Network Infrastructure + Linux Systems + Software Dev ]
Type 'help' to view available commands, or explore: 'bgp summary', 'mpls status', 'bng summary', 'gearctl scan', 'monitoring status', 'skills', 'projects'.
rabi@netcore:~$
Technical Arsenal

Skills & Domain Mastery

Spanning ISP network infrastructure (BGP, MPLS, Segment Routing, VPLS, BNG), Linux systems & storage (Proxmox, ZFS), observability (Prometheus, Grafana, NetBox), and software development.

ISP & Network Infrastructure

6 core competencies
BGP, OSPF & IS-IS Routing8+ yrs

Dual-stack IPv4/IPv6, transit & IXP peering, traffic engineering, route reflection & communities

MPLS, Segment Routing & VPLS6+ yrs

LDP/RSVP-TE, SR-MPLS, L2VPN/VPLS, L3VPN VRFs, and carrier Ethernet transport

Multi-Vendor Hardware Mastery8+ yrs

Juniper (Junos), Cisco (IOS-XE/XR), MikroTik (RouterOS v6/v7), and Huawei (VRP)

Subscriber & Edge Management7+ yrs

PPPoE, IPoE, RADIUS (CoA/Accounting), QinQ (802.1ad) VLAN stacking, and DHCP Option 82

CGNAT & IPv6 Transition6+ yrs

Deterministic CGNAT, Port-Block Allocation (PBA) logging, SLAAC, and DHCPv6-PD

DNS, DNSSEC & Core Services7+ yrs

Authoritative & recursive DNS (BIND9, PowerDNS, Unbound), DNSSEC validation, Anycast routing

Linux Systems, Virtualization & Storage

4 core competencies
Linux Administration & Kernel Tuning8+ yrs

Debian/Ubuntu, RHEL, TCP/IP stack tuning (BBR, sysctl), systemd, iptables/nftables, PAM

Proxmox VE & KVM Virtualization5+ yrs

Multi-node HA clusters, virtualized network appliances, live migration, and SDN integration

ZFS & Ceph Storage5+ yrs

ZFS pool design, snapshot replication, scrub scheduling, and Ceph distributed block/object storage

Docker & Container Architecture6+ yrs

Docker Compose, multi-stage builds, container networking, and lightweight alpine deployments

Monitoring, Telemetry & Automation

5 core competencies
Prometheus & Grafana Observability5+ yrs

SNMP Exporter, Prometheus alerting rules, high-density ISP dashboards, and pushgateway

Zabbix & Network Telemetry7+ yrs

Automated LLD discovery, SNMPv3 polling, active agents, and Telegram/webhook alert routing

NetBox Single Source of Truth (SSoT)5+ yrs

IPAM, DCIM, device configuration templates, custom fields, and REST/GraphQL dynamic inventory

gearctl (Go Multi-Vendor CLI Driver)4+ yrs

High-concurrency Go driver inspired by Netmiko/NAPALM for fast parallel SSH dispatch

Ansible & Python for NetOps6+ yrs

Idempotent playbooks, Jinja2 templating, Nornir/Scrapli automation, and pre-flight validation

Software, Web & Backend Development

6 core competencies
Go (Golang)4+ yrs

Concurrency (goroutines/channels), crypto/ssh, CLI tooling, microservices, and network parsers

TypeScript / JavaScript & React / Next.js5+ yrs

Modern App Router, server-rendered UIs, custom hooks, and interactive network dashboards

Python, Django & FastAPI6+ yrs

REST APIs, backend microservices, async network daemons, and database ORMs

Node.js & Backend Runtimes5+ yrs

Express, Fastify, WebSocket event streams, and background workers

SQL & Databases (PostgreSQL, MySQL, SQLite, Redis)6+ yrs

Relational schema design, query optimization, indexing, and Redis in-memory caching

CI/CD & Git Workflows6+ yrs

GitHub Actions, automated testing, container builds, and infrastructure as code deployment

Featured Engineering

Architecture & Project Showcase

Deep-dive into production systems: `gearctl` Go driver, carrier routing backbones, OpenACS TR-069 platform, Prometheus/NetBox observability, and full-stack operational tools.

Network Automation & GoOpen Source Tool

gearctl

High-performance Go library & CLI inspired by Netmiko & NAPALM

Engineered a high-concurrency network driver library in Go for interacting with multi-vendor network devices via SSH. Features intelligent prompt detection state machine, auto-paging suppression, session locking, and structured output parsing across Cisco, Juniper, MikroTik, and Huawei.

Throughput1,000+ nodes/min
Memory Per Session< 2.5 MB
Multi-Vendor SupportJuniper/Cisco/MTik/Huawei
Go (Golang)SSH (crypto/ssh)Cisco IOS-XE/XRJuniper JunosMikroTik RouterOSHuawei VRPConcurrency
View Architecture Teardown
ISP & Core RoutingCarrier Production

Carrier Backbone & Multi-Vendor BNG Architecture

BGP, MPLS, Segment Routing, VPLS, and 120k+ subscriber gateway optimization

Architected and tuned carrier-grade network infrastructure spanning multi-homed BGP transit, MPLS / Segment Routing backbones, VPLS Layer 2 overlays, and high-density BNG subscriber aggregation across Juniper MX, MikroTik CCR, Huawei ME60, and Cisco ASR.

Concurrent Sessions120,000+
Core Backbone100G / 25G Rings
Convergence Time< 800ms
BGP PeeringMPLS / SR-MPLSVPLS / L2VPNJuniper MXMikroTik CCRHuawei ME60Cisco ASRPPPoE / RADIUSCGNAT
View Architecture Teardown
Telecom Software & AccessProduction Telecom Platform

OpenACS

Zero-touch onboarding, firmware upgrade campaigns & optical telemetry for 50k+ ONTs

Developed a full-stack TR-069 Auto Configuration Server (ACS) to manage, provision, and monitor 50,000+ GPON/EPON ONTs (Huawei, ZTE, Nokia) across the last-mile access network.

Managed ONTs50,000+
ZTP Provision Time20 Seconds
RPC Processing4,500/sec
TR-069 / CWMPSOAP / XMLGoNode.jsPostgreSQLGPON / EPONHuaweiZTENokia
View Architecture Teardown
Observability & SSoTMission Critical

Carrier Observability & Telemetry Stack

Prometheus, Grafana, Zabbix, NetBox SSoT, and real-time NetFlow analytics

Designed and deployed a unified observability stack combining Prometheus (SNMP exporter), Grafana, Zabbix, and NetBox as the Single Source of Truth (SSoT) for complete topology, traffic, and subscriber monitoring.

Monitored Devices500+ Nodes
Telemetry Interfaces2,000+
Data Retention90 Days TSDB
PrometheusGrafanaZabbixNetBox SSoTSNMPv3NetFlow / IPFIXDockerAlertmanager
View Architecture Teardown
Full-Stack Web & BackendInternal Operations

ISP Operations & Network Automation Web Portal

Full-stack portal for IPAM, BNG provisioning, and automated ticket resolution

Built a responsive full-stack internal operations portal using Next.js / TypeScript on the frontend and Django / FastAPI / Go on the backend, allowing NOC engineers to trigger safe network playbooks, inspect IPAM allocations, and run subscriber diagnostics.

Daily Operations3,000+ Actions
NOC Operators40+ Users
FrontendNext.js 15 & TS
Next.jsReactTypeScriptPython (Django/FastAPI)PostgreSQLDockerTailored CSSREST API
View Architecture Teardown
Virtualization & StorageCore Systems Infrastructure

High-Availability Proxmox VE & Storage Cluster

3-Node HA cluster, ZFS storage pools, Ceph distributed block storage & Linux kernel tuning

Engineered a high-availability 3-node Proxmox VE virtualization cluster backed by redundant 10GbE networking, ZFS mirrored NVMe pools, and Ceph distributed storage hosting critical ISP DNS, RADIUS, ACS, and observability workloads.

Cluster Nodes3-Node HA
Network FabricDual 10GbE LACP
Uptime99.999%
Proxmox VEKVMZFSCeph StorageLinux Kernel Tuning10GbE BondingHA Corosync
View Architecture Teardown
Subnetting Suite

Interactive Subnet & CIDR Lab

Calculate RFC 791 / RFC 4632 bitwise subnet boundaries, wildcard masks, usable host ranges, binary octets, and reference prefix tables in real time (100% client-side).

Interactive Subnet & CIDR Calculator
100% Client-Side RFC Math
COMMON ISP & ENTERPRISE PRESETS:
Network Address192.168.1.0/24
Subnet Mask255.255.255.0
Wildcard Mask0.0.0.255
Usable Host Range192.168.1.1 — 192.168.1.254
Total / Usable Hosts254 usable (256 total)
Broadcast Address192.168.1.255
ClassificationClass CRFC 1918 Private
IP Binary:11000000 . 10101000 . 00000001 . 00110010
Mask Binary:11111111 . 11111111 . 11111111 . 00000000
CIDR & Netmask Reference Table
IPv4 Cheat Sheet

Quick reference for network architects calculating point-to-point links, BNG subscriber pools, and CGNAT blocks.

PREFIXNETMASKUSABLETYPICAL USE
/32255.255.255.2551 hostLoopback / Host route
/31255.255.255.2542 hostsRFC 3021 Point-to-Point link
/30255.255.255.2522 hostsClassic P2P link (4 IPs)
/29255.255.255.2486 hostsSmall enterprise / WAN block
/28255.255.255.24014 hostsBranch router interface
/24255.255.255.0254 hostsStandard Access VLAN / LAN
/22255.255.252.01,022 hostsGPON OLT / BNG Subscriber pool
/16255.255.0.065,534 hostsCGNAT / Core Campus Block
Engineering Philosophy

Core Architecture Principles

The fundamental engineering axioms applied to every network design, system architecture, and software codebase.

Strict Idempotency & SSoT

Zero Configuration Drift

Every network change is driven by code with NetBox as the Single Source of Truth. If a playbook is run 100 times, the network state remains mathematically identical.

Zero-Trust Segmentation

Default Deny Security Posture

No implicit trust between VLANs, edge pods, or multi-cloud links. Encrypted WireGuard overlays and stateful Suricata firewalling guard all east-west and north-south traffic.

Streaming Telemetry Over Polling

Microsecond Anomaly Visibility

Legacy 5-minute SNMP polling misses transient route flapping and microbursts. Using gNMI streaming telemetry at 50,000 metrics/sec enables sub-second detection and remediation.

Pre-Flight CI/CD Simulation

Batfish & Invariant Verification

No config touches production hardware without passing offline Batfish reachability simulation and ACL linting in automated GitHub Actions pipelines.

Career Trajectory

Experience & Milestones

A track record of designing reliable carrier backbones, managing Linux/Proxmox virtualization, automating infrastructure in Go and Python, and deploying full-stack web tools.

2023 - PRESENTKathmandu, Nepal

Senior Network & Systems Engineer (Automation & Infrastructure)

ISP & Carrier Telecommunications

Architected carrier core and edge routing fabrics utilizing BGP, OSPF, MPLS, Segment Routing, and VPLS across Juniper, Cisco, MikroTik, and Huawei hardware.
Engineered high-density multi-vendor BNG subscriber gateways scaling to 120,000+ concurrent PPPoE/IPoE sessions with dynamic RADIUS CoA and deterministic CGNAT.
Developed gearctl: a high-concurrency Go network driver library enabling parallel configuration dispatch and audits across hundreds of routers in under 2 seconds.
Built OpenACS: a custom TR-069 / CWMP Auto Configuration Server for zero-touch provisioning and optical telemetry across 50,000+ GPON/EPON ONTs.
Deployed full-stack observability infrastructure using Prometheus (SNMP exporter), Grafana, Zabbix, and NetBox as the dynamic Single Source of Truth (SSoT).
BGP / MPLS / SRJuniper JunosCisco IOS-XRMikroTikHuawei VRPGo (gearctl)TR-069 ACSNetBoxPrometheus / GrafanaProxmox / ZFS
2021 - 2023Kathmandu, Nepal

Network & Systems Engineer

Broadband & Enterprise Services

Administered 3-node high-availability Proxmox VE virtualization clusters backed by ZFS NVMe pools and Ceph distributed storage.
Maintained mission-critical ISP services including Authoritative & Recursive DNS (BIND9/PowerDNS with DNSSEC), FreeRADIUS, and DHCPv4/DHCPv6 servers.
Built internal operations portals and automation daemons using Next.js / TypeScript on the frontend and Django / FastAPI / Python on the backend.
Automated router configuration rollouts and compliance auditing using Ansible playbooks, Jinja2 templates, and NetBox dynamic inventories.
Configured QinQ (802.1ad) VLAN stacking and GPON OLT optical distribution frames for high-reliability last-mile delivery.
Linux / DebianProxmox VEZFS / CephDNS / BIND9FreeRADIUSPython / DjangoNext.js / ReactTypeScriptDockerAnsible
2018 - 2021Kathmandu, Nepal

Systems & Network Administrator

Internet & Network Infrastructure

Configured and maintained MikroTik and Cisco enterprise routers, edge switches, and VLAN segmentation across multi-site networks.
Deployed Linux server infrastructure for monitoring (Zabbix, Cacti), logging (Syslog/ELK), and internal web services.
Implemented network security baselines: strict firewall filtering, control plane policing (CoPP), and encrypted WireGuard/IPsec tunnels.
Resolved complex Layer 2/3 outages, packet loss, routing loops, and optical attenuation issues.
MikroTik RouterOSCisco IOSLinux Server AdminZabbixWireGuardVLANsSQL / PostgreSQLBash Scripting
Initiate Connection

Get in Touch

Let's discuss carrier network architecture, Linux systems, Prometheus/NetBox observability, Go tooling, or full-stack software development opportunities.

Connect with Rabi Shrestha

Whether you want to discuss multi-vendor BNG optimization, TR-069 ACS architecture for ONTs, Go network driver development (`gearctl`), or full-stack software roles, feel free to reach out.

Available for Network & Systems Engineering Roles
PGP: 4E9A 1C8F 72B0 902E ...

Send a Direct Message