---
title: "Daan van Gorkum"
description: "Senior Site Reliability Engineer specializing in Linux, Infrastructure as Code, Python, and Go."
url: "https://dj.vg/"
markdown_url: "https://dj.vg/index.md"
llms_txt: "https://dj.vg/llms.txt"
---

# Daan van Gorkum

**Senior Site Reliability Engineer · Singapore (AS209792)**

I am a **Senior Site Reliability Engineer** based in Singapore with a focus on **Linux platforms**, **bare-metal automation**, and **global networking** (BGP, DNS, CDNs).

Over the past decade at **Cloudflare**, **Adyen**, and **Thales Cybersecurity**, I have engineered systems spanning the entire stack—from UEFI provisioning and bare-metal lifecycle management to distributed storage with [**CEPH**](https://ceph.io/), traffic engineering, and container orchestration with [**Kubernetes**](https://kubernetes.io/).

Outside of work, I operate my own autonomous system ([**AS209792**](https://bgp.tools/as/209792)), build open-source utilities in [**Python**](https://www.python.org/) and [**Go**](https://go.dev/), and volunteer with [**Repair Kopitiam**](https://repairkopitiam.sg/) diagnosing and fixing consumer electronics.

## Experience

### Senior Site Reliability Engineer · Imperva / Thales Cybersecurity (Jun 2024 – Present)
Developing an upcoming cybersecurity product. Implemented network anomaly detection using [VictoriaMetrics Anomaly](https://docs.victoriametrics.com/anomaly-detection/). Automated Blue/Green deployments for imperva.com using [Argo Rollouts](https://argoproj.github.io/rollouts/), latency monitoring, and infrastructure reliability.

### Traffic Management Lead / Platform Reliability Engineer · Adyen (Apr 2023 – Jul 2024)
Managed external DNS architecture, CDNs, edge load balancing, and Linux automation at scale.

### System Engineer / Edge Systems Reliability Engineer · Cloudflare (Aug 2018 – Mar 2023)
Bare-metal server provisioning, UEFI automation, hardware validation standards, data center tooling in [Django](https://www.djangoproject.com/), and edge network operations.

### Linux Systems Engineer · Highwinds / Omicron Media (Feb 2014 – Sep 2017)
Operated high-volume NNTP storage platforms with petabytes of storage and terabits of network traffic.

### System Analyst · Panq (May 2015 – Mar 2016)
Engineered scalable data platform infrastructure for rapid startup growth.

## Recent Writing

- **2026-10-21**: [CVE-2026-109618 & CVE-2026-109619: Mitigating PHP's Critical CVSS 9.2 RCE Vulnerabilities When You Cannot Immediately Upgrade](https://dj.vg/posts/cve-2026-109618-cve-2026-109619-php-upload-progress-uaf-mitigation/) — Complete technical breakdown and urgent web-server, FastCGI, HAProxy, NGINX, Apache, and PHP configuration mitigations for CVE-2026-109618 (OOM corruption) and CVE-2026-109619 (stale global state & session upload progress UAF).
- **2026-10-17**: [Bridging a Cloud Condo Intercom to Home Assistant with Rust, SIP, and MQTT](https://dj.vg/posts/bridging-condo-intercom-to-home-assistant-rust-sip-mqtt/) — How I replaced a sluggish property-management app with a self-contained Rust daemon that speaks Firebase Cloud Messaging, SIP/TLS, H.264 RTP, and Home Assistant MQTT Auto-Discovery.
- **2026-10-17**: [Fixing Entra ID / Azure AD AADSTS75011 on Ceph Dashboard SAML](https://dj.vg/posts/fixing-ceph-dashboard-saml-aadsts75011/) — How to resolve Microsoft Entra ID error AADSTS75011 when authenticating to the Ceph Dashboard with FIDO2 security keys or MFA by disabling requestedAuthnContext in the Ceph monitor store.

All articles: [https://dj.vg/posts/](https://dj.vg/posts/) ([Markdown index](https://dj.vg/posts/index.md))

## Projects

- **[XYZ.FRL](https://l.dj.vg/xyz.frl)**: Free stateless Dynamic DNS service. No account required, privacy-first, simple API.
- **[IMGDumper.nl](https://l.dj.vg/imgd)**: Free and fast image hosting platform with direct uploads, operating continuously since 2007.
- **[BCRSTracking](https://l.dj.vg/bcrs)**: Cloud-native Go tracking service monitoring reverse vending machine availability, status, and bin capacity across Singapore's Beverage Container Return Scheme.
- **[KovanWellspring.SG](https://l.dj.vg/kw)**: Tracking platform for the Kovan Wellspring BTO development with real-time visual updates and timelapses.
- **[KopiTool](https://gitlab.sin.djvg.net/kopitool/kopitool)**: Repair tracking tool for Repair Kopitiam, a volunteering organization dedicated to reducing e-waste.
- **[netbox-more-metrics](https://github.com/TheDJVG/netbox-more-metrics)**: Netbox Plugin exporting custom Prometheus metrics from NetBox data using Python.
- **[vault-backup](https://github.com/TheDJVG/vault-backup)**: Go CLI to backup HashiCorp Vault raft snapshots directly to AWS S3 or compatible endpoints.
- **[netbox-field-permissions](https://github.com/TheDJVG/netbox-field-permissions)**: Plugin to limit user/group access to change specific object field values in NetBox.

## Skills & Technologies

- **Operating Systems**: Red Hat Enterprise Linux, Debian, Ubuntu, Gentoo, CentOS, Microsoft Windows Server
- **Linux & Infrastructure Software**: Linux utilities & LVS, MySQL, BIND 9, PowerDNS, Exim, NGINX, HAProxy, Apache, Squid Cache, CEPH, Proxmox VE, Xen Project, VMware ESXi, Prometheus, VictoriaMetrics, VictoriaMetrics Anomaly, Grafana, Kubernetes, HashiCorp Vault
- **Automation & CI/CD**: SaltStack, Puppet, Terraform, GitLab CI/CD, Argo CD, Argo Rollouts
- **Hardware & Datacenter**: Supermicro, Quanta (QCT), Tyan, High-density Storage, Brocade, Juniper Networks (Junos OS), Fiber-Optic & Copper Cabling, DWDM, KVM & PDU Automation
- **Protocols & Networking**: TCP / IP, IPv4 / IPv6, SSL / TLS, BGP, ECMP, WireGuard, NNTP, Anycast DNS
- **Languages**: Python, Django, FastAPI, Go, SQL, Bash, PHP, Lua, C (basic)

## Interests & Homelab

- **Homelab & Network**: Operating [AS209792](https://bgp.tools/as/209792), [WireGuard](https://www.wireguard.com/) meshes, BGP peering, and [Home Assistant](https://www.home-assistant.io/).
- **Alternative Architectures**: Experimenting with [ARM64](https://en.wikipedia.org/wiki/AArch64) and [RISC-V](https://riscv.org/) single-board computers.
- **Electronics Repair**: Diagnosing and refurbishing faulty hardware with [Repair Kopitiam](https://repairkopitiam.sg/) to keep electronics out of landfills.

## Links & Contact

- **Website**: https://dj.vg/
- **GitHub**: https://l.dj.vg/github
- **LinkedIn**: https://l.dj.vg/linkedin
- **Email**: me@dj.vg
- **Atom Feed**: https://dj.vg/feed.xml
- **LLMs Discovery**: https://dj.vg/llms.txt