John is currently leading the Security and Observability team at Isovalent where he created Tetragon a runtime security and observability tool. When not working on Tetragon he maintains various bits and pieces of the Linux kernel contributing primarily to the BPF subsystem and networking stacks. In previous work he has contributed to the Cilium CNI, networking domain specific languages, and written a handful of network drivers for various hardware and operating systems.