● api-cloud.cc  /  us-west1-b.gcp  /  root@usus
nginx active fail2ban active TLS 1.3
➜ ~/api-cloud.cc git:(main)

Zhang Hao

Network & Security Architect  ·  Cloud Infrastructure Engineer

Specialized in building high-performance, multi-layer network defense systems on global cloud infrastructure. From kernel-tuned DNS racing to zero-trust firewall orchestration — I architect systems that are fast, invisible, and resilient.

✉ contact@api-cloud.cc ⬡ LinkedIn $ curl /v1/resume 🔑 GPG: 0x58A6FF
// system_stats
4+ GCP Nodes Managed
99% Attack Block Rate
<1ms DNS Resolution Latency
365d Fail2Ban Ban Duration
// tech_stack
☁ Infrastructure
GCP AWS Cloudflare Linux
⚡ Network
Hysteria 2 BBR Sing-box Anycast
🛡 Security
nftables CrowdSec Fail2Ban ECH
🔍 DNS
MosDNS Unbound DoH DoT/DoQ
⚙ Protocol
TLS 1.3 QUIC WebSocket gRPC
🖥 Server
Nginx systemd ZRAM Ubuntu
// featured_projects
Iron Bucket Defense Framework · 铁桶阵
GCP Multi-Region · 2025–2026 · Production
Engineered a 5-layer autonomous defense architecture across 4 GCP nodes. Orchestrates nftables packet filtering, Fail2Ban behavioral analysis (3-strike / 365-day ban), and CrowdSec crowdsourced threat intelligence into a unified security mesh. Reduced unauthorized access attempts to near-zero.
nftables Fail2Ban CrowdSec GCP Ubuntu 24.04
Dual-Stack Encrypted DNS Cluster
Taiwan · Singapore · US · 2025–2026 · Production
Deployed a multi-region private DNS infrastructure with parallel IPv4/IPv6 racing. Implemented DoH, DoT, and DoQ endpoints with TLS SPKI certificate pinning and ECH to prevent SNI sniffing. Achieves sub-millisecond resolution via MosDNS concurrent upstreams.
MosDNS v5.3 Unbound DoH/DoT/DoQ ECH TLS 1.3
High-Performance Proxy Network · Hysteria 2
3-Node Global Mesh · 2025–2026 · Production
Architected a global dual-stack proxy mesh using Hysteria 2 over QUIC, achieving superior throughput under packet-loss conditions compared to TCP-based solutions. All traffic encrypted end-to-end with domain-locked ECC certificates.
Hysteria 2 QUIC ECC Cert Dual-Stack
// recruiter_api
terminal — bash
$ curl -s -A "Recruiter" https://api-cloud.cc/v1/resume | jq
{
  "name": "Zhang Hao",
  "role": "Network & Security Architect",
  "location": "Remote / Global",
  "experience_years": 5,
  "core_skills": [
    "Cloud Infrastructure (GCP/AWS)",
    "Network Security Architecture",
    "Encrypted Protocol Design",
    "Linux Kernel Optimization"
  ],
  "availability": "Open to opportunities",
  "contact": "contact@api-cloud.cc"
}
# Try it yourself ↑