WE SOLVE THE MOST SOPHISTICATED TASKS

We develop the fastest and reliable mission-critical software. Our team contributes to the most sophisticated open-source projects and has a long and reach research track record.

 

 

C and C++ Software Development

We provide server-side and embedded software development from small proof-of-concept prototypes to entire products from scratch.

The developers of our team have 10+ years of experience in C and C++ development. We develop the fastest code using C/C++ and x86-64 and ARM assemblers, including SIMD extensions. For example, we outperform Nginx and OpenSSL for more than 80%. Besides the core development, we use Python, JavaScript, Perl, and Raku programming languages for infrastructure, web, and testing tasks.

Our solutions work in the Linux bare metal and cloud environments, such as Amazon Web Services and Kubernetes.

You can evaluate the quality of our code and complexity of the problems, which we can solve, by our open source projects.

Learn our open source projects

A Linux kernel application delivery controller (ADC) extensively using lock-free data structures, advanced string algorithms, the modern cryptography, and machine learning for adaptive load balancing. Tempesta FW services up to 1.8M HTTP requests per second on cheapest 4-core x86-64 CPU, which significantly outperforms any other open source Web accelerators including built on top of user-space TCP/IP stacks.

An implementation of SQL system versioning for MariaDB 10.3. It was the major feature in the 1.3 release. Watch our talks about the project at MariaDB User Conference'17 and MariaDB User Conference'18.

Clutch publishes verified reviews conducted by independent analysts.
Read the unbiased reviews about us at our Clutch profile.

High performance

We're one of the best in highly concurrent data structures, multi-core workloads, and text processing. Our HTTPS accelerator Tempesta FW services up to x3 more HTTP requests per second than Nginx. We can make your product to beat any benchmarks of you competitors. The several facts about our work:

Networking

We've been developing high performance network traffic processing solutions since 2008. Our networking solutions are implemented in the Linux kernel, employ kernel bypass techniques (e.g. DPDK and Netmap), or use traditional event-driven sockets in user space. The areas of our expertise are: 5G, SDN, network security (e.g. VPN, WAF, NIPS), DPI, HTTPS servers and load balancers, clustered DNS services, cluster management software, database synchronous replication, and many others.

Tempesta FW is the fastest HTTPS accelerator and is developed by our team. To make it the fastest one and feature full, we constantly keep our eye (e.g. check our talk and slides from the SCALE 18x conference) on the most popular HTTPS servers and proxies, such as Nginx, Apache HTTPD, Apache Traffic Server, HAProxy, Varnish, Envoy, and H20. We know internals of the servers and can make any source code modifications or modules extensions for them.

Our team regularly talks at the Netdev conference, one of the most valued conference about the Linux networking. You can check our talks from the list of our research papers.

Databases

We're contributors to MariaDB and Percona XtraDB Cluster. We contributed to the most sophisticated parts of the databases: InnoDB transaction engine, Galera Cluster synchronous replication, SQL query optimizer. Besides contributing to the MySQL forks, we delivered projects modifying the PostgreSQL, MongoDB, ClickHouse, and Redis database internals. We also develop ad-hoc distributed databases for network traffic aggregation and analyzing. The typical cases for the ad-hoc solutions are real-time network data mining, web content caching or distribution of machine learning models.

To learn more about our several database projects, watch our talks:

Vadim Tkachenko, Co-Founder & CTO of Percona, says about us:

    They have unique skills in high-performance system programming and
    can solve sophisticated technical tasks quickly.
    

Read this and other verified reviews about our work at our Clutch profile.

Linux kernel

Our team has deep knowledge of the Linux kernel internals. We have experience with the Linux TCP/IP stack, high-speed network adapter drivers (Intel, Mellanox/NVIDIA), XDP and eBPF programming, virtual memory management (VMM), disk and network filesystems (BtrFS, XFS, EXT4, NFS), KVM and LXC virtualization, cryptography API, Linux security modules (LSM).

You can observe Tempesta FW as an example of our Linux kernel projects. This is more than 100,000 lines of high-performance code with advanced lock-free data structures, modern cryptography algorithms implemented in x86-64 assembler, fast SIMD strings processing algorithms, light weight machine learning, and deep integration with the Linux networking stack.

Machine learning

We employ ready-to-use deep learning platforms, like PyTorch or TensorFlow, as well as develop ad-hoc high-performance classification and regression algorithms. Our implementations of LOF, HMM, K-means, Gaussian mixtures, and probabilistic algorithms running on CPU SIMD or GPU can classify millions of objects per second (the typical case for DDoS mitigation).

HOW WE WORK

To provide the best quality and maintainability of our code we use mandatory code reviews, strict coding style, continuous integration (CI) and delivery (CD) systems. See as an example our open source CI for Tempesta FW (developed in Python).

Our team is fully distributed, which allows us to hire the best developers around the world and communicate with our clients almost 24 hours a day.

Why us

Only proven developers are assigned to your project. Tempesta's team consists of developers, who have been working together for ages. Any engineer working on your project has a proven record on our internal projects. All our developers contribute to open source projects, so you can always observe the quality of our code.

We're a small team of experts passionate about technologies. Even our CEO writes code. Thus, you pay for the high quality code only, not for selling services to you and not for the senior management.

Everything is transparent for you. From the first days we commit code to your repository, so you can evaluate our performance from the first week of the work. You can chat with our developers directly in instant messengers, e-mail, and/or by phone. Our CEO is always on-line for you and is ready to answer any questions.

CASE STUDIES

Positive Technologies
Our team developed the C and C++ core of the 1st production version of PT Application Firewall, a high performance web application firewall (WAF), in particular:
  • a number of modules protecting against Web application attacks
  • optimized performance of the WAF machine learning logic
  • a high performance in-memory storage for sharing of machine learning trained models
  • a Linux kernel module to make Nginx working in sniffer mode
  • an ICAP module
After release of the initial version of the product, we have been continuing to help our client with the product development for over 5 years. The WAF was mentioned in the Gartner magic quadrant.

MariaDB
We have developed the System-Versioned Tables for MariaDB 10.3. The development was commissioned by MariaDB Corporation. We designed the architecture and were responsible for the whole development process, from early prototype to late bug reports from external users. During the project we significantly modified internals of the SQL layer of the MariaDB database, InnoDB storage engine and the Galera Cluster synchronous replication engine.

Beeline
  • A 10Gbps (it was quite a speed in 2010!) HTTP traffic (MPLS) analyzer and TOP statistics counter were developed by our team. 10Gbps performance was shown on entry-level server thanks to the new technology of data structures construction based on x86-64 virtual memory paging. The core of the project was the heavily modified Linux kernel.
  • We developed a Hilbert R-tree-based spatial database for real-time analyzing of the TOP statistic collected by the traffic analyzer.

S-Terra
S-Terra engaged us to analyze and optimize the performance of a VPN network capturer (Linux kernel module) to handle multi-gigabit traffic on large x86-64 NUMA systems. To improve the performance of the VPN we introduced
  • lock-free data structures
  • NUMA and MSI-X aware scheduling
  • zero-copy network packets handling
We've achieved stable performance measures with almost 200% performance boost in some of the tests and more than 100% improvement in average.

Masterhost
We significantly extended features and performance of the Masterhost's massive shared hosting infrastructure.
  • A FreeBSD kernel module and an Apache HTTPD patch for high performance user switching to execute PHP scripts. The result of the project allowed the web hosting company to switch users much faster than any other existing mechanisms.
  • MySQL accounting and users limiting. MySQL and FreeBSD kernels were patched. The FreeBSD patch for per-thread rusage CPU statistics was merged into the mainstream FreeBSD source code.