# Projects — xeonerix

## BGPeek

Open-source BGP looking glass for ISP and IX operators.

- Repository: https://github.com/XeoneriX/bgpeek
- License: Apache-2.0
- Stack: FastAPI, Jinja2, HTMX, Tailwind, PostgreSQL (asyncpg), Redis, Netmiko, Docker Compose
- Multi-vendor SSH: Juniper JunOS, Cisco IOS/XE/XR, Arista EOS, Huawei VRP
- BGP route / ping / traceroute with structured parsing, parallel cross-device queries with diff, RPKI validation overlay, UUID permalinks
- Auth: API key, bcrypt local, LDAP, OIDC (Keycloak); RBAC with admin / NOC / public tiers, per-role output filtering (hides /25–/32 from public), device-level restrictions
- Security & ops: Fernet-encrypted SSH credential storage, Redis rate limiting with circuit breaker, HMAC-SHA256 webhook signatures, Prometheus /metrics, PostgreSQL audit log, non-root containers

Built for network operators who need a modern, self-hostable looking-glass
replacement with real authentication and access control.

## BMP telemetry

Go-based BGP Monitoring Protocol tooling using NATS JetStream and ClickHouse.

- Streaming BMP ingestion into ClickHouse for analytics
- Coverage of modern network signals: SRv6, SR Policy, EVPN, FlowSpec
- Multi-vendor routing telemetry (Juniper, Huawei and others)
- Designed for ISP / CDN / security-infrastructure observability contexts

## Private AI for SRE

On-prem LLM and RAG systems for infrastructure and SRE operations, built so
sensitive operational data never leaves the organization.

- Inference: vLLM, llama.cpp, LiteLLM gateway, Open WebUI, Qwen-family models
- Retrieval: Qdrant, bge-m3 embeddings, cross-encoder reranking, Infinity,
  hybrid search, SearXNG-backed controlled web search
- Observability: Langfuse tracing, VictoriaMetrics / VictoriaLogs, Grafana
- Use cases: incident-response assistance, postmortem generation, merge-request
  review, runbook and knowledge retrieval, infrastructure Q&A over private docs

See ai-inference.md for the applied-AI / inference deep dive.