Why I Built an SSH Config and Tunnel Manager for macOS
Every internal service I use sits behind a bastion. So I wrote a native macOS app that edits ~/.ssh/config losslessly and opens SSH tunnels in-process.
Dusan Malusev
Senior Staff Engineer at ScyllaDB. Backend, distributed systems, databases, dev tooling. Writing about Go, Rust, TypeScript, and shipping production software.
Latest posts
Why I’m Rewriting a PHP Extension in C23, Not C++
I rewrote a PHP extension from C++ to C23. Benchmarks and real code showing why zvals, RAII, and PHP's allocator fight each other, with numbers.
ScyllaDB PHP Driver 1.4.0: the extension is pure C23 now
v1.4.0 ports the ScyllaDB PHP driver from C++ to pure C23, deletes ZendCPP, makes persistent sessions allocation-free, adds a Rust backend, and drops PHP 8.2.
Streaming journald logs to the browser with SSE
The admin panel on this site tails the live server logs in my browser. journald already captures stdout and journalctl already follows it, so the whole thing is a spawn and an EventSource.
JWT is a scam and your app doesn't need it
JWT promises stateless authentication and delivers neither. It's a cargo cult that makes your app slower, less secure, and harder to maintain — and almost every developer shipping it has no idea why.
Self-registering class descriptors: deleting MINIT boilerplate in a PHP extension
A C23 pattern using __attribute__((constructor)) and a topo-sorted registry to replace the hand-maintained MINIT class list in the ScyllaDB PHP driver — plus the build-time generator that emits the de
dlopen, dlsym, and how PHP loads extensions
How shared libraries load at runtime — the dlopen/dlsym mechanics behind PHP extensions, with a minimal C23 example and a safe Rust wrapper using libloading.
laravel-crypto: libsodium, no compromises, and per-user encryption
Why I replaced Laravel's default AES-256-CBC with libsodium-backed AEGIS and XChaCha20, then built per-user encryption so not even APP_KEY can decrypt your users' data.
ScyllaDB PHP Driver: the story so far
How a broken compile on PHP 8 became a two-year open-source project, a C-to-C++ migration I regret, and a codebase I still want to ship properly.