Val Kafedzhy

AI Infrastructure & Enterprise Platform Architect

Washington, D.C. · 20+ years on the infrastructure layer under large systems — lately, the networking, platform, and security underneath AI at scale. I write it up here: reference architectures with working configs, honest trade-offs, and the failure modes that actually bite in production. Not vendor slideware.

Certified: CKA · CKAD · CKS · AWS Solutions Architect – Professional · Google Professional Cloud Architect · Cisco CCNP · RHCE

Start here

The flagship pieces — each ships with a working reference config or policy, not just prose.

BGP for the AI Era

Multi-region routing for inference: anycast + BGP that fails over on real inference SLOs, not process liveness. Ships with a working FRR config and health agent.

Read →

eBPF in Production

Kernel-level observability and security without sidecars — with runnable Tetragon and Cilium samples on GitHub.

Read →

Zero Trust, Beyond the Buzzword

A vendor-neutral reference architecture: PDP/PEP, SPIFFE identity, and a real Cilium policy for production.

Read →

See all writing →

Focus areas

Networking & Routing

BGP, enterprise routing, IPv6, high-performance networking, multi-region connectivity.

Read more →

Cloud & Platform Networking

Cloud networking, service meshes, and eBPF-native data planes.

Read more →

Zero Trust & Platform Security

Zero Trust networking and enterprise platform security architecture.

Read more →

AI Infrastructure Networking

The networking layer under AI training and inference at scale.

Read more →

Systems & Ops Notes

Field notes from 20+ years across Linux, DevOps, SRE, and encryption.

Read more →