ISP Infrastructure Engineer

We build what runs behind your network.

Captive portals, router firmware, GCash-automated billing, and subscriber dashboards — built specifically for Philippine internet service providers.

See our work Get in touch
apexnet-core — running
50+
Active deployments
32 MB
RAM-Disk RootFS
< 3s
Auto-restore on payment
OTA
Firmware over-the-air
What we build

End-to-end ISP & Hotspot infrastructure.

01

Custom Captive Portals

Branded, mobile-first captive portals. Voucher support, time & data packages, load auto-renewal, and microsecond latency. Deployed directly to the gateway with zero third-party hosting.

HotspotVouchersMobile-First
02

RAM-Disk Embedded OS

Custom 32MB Linux firmware running 100% in RAM (tmpfs). Zero SD card write wear, baked-in Realtek & ASIX Gigabit USB drivers, and automated OTA recovery.

SquashFStmpfsZero-WearGigabit
03

Payment & Billing Automation

Subscribers pay via GCash → internet activates in under 3 seconds. Direct merchant webhook integration, idempotent ledger, and automated reconciliation.

GCash APIWebhooks< 3s Restore
04

Centralized ISP Dashboard

Manage subscribers, hardware HWIDs, and multi-node fleets in real-time. Active sessions, rate controls, device licensing, and live financial analytics on one screen.

Live TelemetryFleet ControlVLAN Slicing
05

RADIUS & Network Core

MikroTik RouterOS v7 integration, FreeRADIUS, dynamic address-list filtering, eBPF/nftables packet gating, and stateless fail-safe routing.

MikroTikRADIUSnftablesFail-Safe
06

Cloudflare Edge Telemetry

Sub-millisecond license verification and high-frequency telemetry write-batching across 300+ global edge locations, shielding the core backend.

Edge CachingWrite-BatchingDDoS Guard
07

Threat Mitigation

Tap to eradicate software bugs.

Featured Work

Engineered systems in production.

Embedded Linux & Gateway Core

ApexNet Core Gateway

High-performance Rust micro-engine running on a custom 32MB RAM-Disk Linux kernel (SquashFS + tmpfs). Features microsecond 802.1Q sub-interface VLAN routing, real-time GPIO pulse accumulators, dynamic nftables session gating, and stateless fail-safe routing.

LIVE Rust / Axum SquashFS RAM nftables 802.1Q VLAN SQLite
Android OS & Kiosk Security

PisoTab Kiosk Launcher

Hardened Android tablet kiosk system with Device Admin API lockdown, system-level floating session HUD, UDP gateway auto-discovery, and AST-level RC4/JavaScript control-flow obfuscation preventing app-kill or binary reverse engineering.

LIVE Android Kiosk Device Admin React / Capacitor RC4 Guard
Cloud & Edge Infrastructure

Cloudflare Edge Telemetry Proxy

Distributed Edge micro-caching proxy deployed across 300+ global data centers. Provides sub-millisecond license cryptographic validation and high-frequency device heartbeat write-batching, shielding the core database.

PROD Cloudflare Workers Edge Cache Batch Upsert DDoS Guard
FinTech & Telco Automation

Zero-Touch GCash Auto-Restore

Direct merchant webhook listener validating HMAC-SHA256 signatures with atomic ledger transactions. Automatically restores restricted subscriber sessions to full-speed bandwidth profiles in under 3 seconds without manual admin intervention.

PROD GCash API HMAC-SHA256 Idempotent Ledger < 3s Restore
Why Cyphra

Not a generalist. A specialist.

Philippine-Specific

GCash, GlobeOne, Smart, PLDT, Converge — built for the Philippine telco ecosystem from the start, not adapted from foreign tools.

Working Prototype in 7 Days

Production deployment within 2 weeks. No scoping calls that go nowhere, no 3-month timelines for a portal.

Hardware + Software

Firmware, GPIO wiring, portal frontend, backend API, and cloud dashboard — one contractor, full stack, no handoff gaps.

Zero-Touch Fleet Management

Push updates to every device silently, remotely, over-the-air. Your operators never need to physically touch a router again.

Production Hardened

Encrypted firmware, tamper detection, self-healing watchdogs, hardware license binding — not an afterthought, baked in from day one.

Direct Access

You talk to the engineer who writes the code. No project managers, no account reps, no ticket queues. One message and we move.

Tech stack
Rust Rust / Axum Android Android (Device Admin Kiosk) React React / TypeScript OpenWrt OpenWrt / Linux (RAM tmpfs) Linux nftables / iptables 802.1Q VLAN Slicing GCash & PayMongo Webhooks GlobeOne API Cloudflare Cloudflare Workers Supabase Supabase / Postgres Turso Turso / libSQL SQLite SQLite / WAL Realtek & ASIX Drivers AES-256 & RC4 Obfuscation UDP Gateway Discovery Nginx Caddy / Nginx PM2 PM2 / systemd GPIO Pulse Counter Telegram Telegram Bot API
Let's work

Ready to automate your ISP?

Whether you need a custom captive portal, router firmware, GCash payment automation, or a full subscriber management system — let's talk specifics.

[email protected]
Message on Facebook