Hi, I'm
Rabin Mishra
IT Engineer | Aspiring MLOps Engineer
Tools & Technologies
My core arsenal for building, deploying, and managing modern infrastructure.
Featured Projects
Real-world implementation of cloud platforms, CI/CD, and scalable architectures.

SynthBook — ML-Powered Book Recommendation System
SynthBook is a full-stack Django book recommendation engine trained on the 6M-rating goodbooks-10k dataset. It uses a hybrid algorithm combining FunkSVD for personalized embeddings, TF-IDF for metadata matching, and the IMDB weighted formula for global and genre rankings. By loading pre-trained models at startup, the backend delivers instant, real-time recommendations across four tiers with zero per-request retraining. The system features django-allauth authentication and is deployed on Render via automated GitHub CI/CD.

CI/CD Pipeline — Jenkins, Azure, GitHub & Email Notifications
• Built an end-to-end CI/CD pipeline for a NestJS application integrating Jenkins, Azure cloud, GitHub webhooks, and automated email alerts on build success/failure. • Configured Jenkins jobs with pipeline-as-code (Jenkinsfile); automated test, build, and deploy stages triggered on every push. •

GrocerEase v2 — Enterprise E-Commerce Platform
GrocerEase v2 is a production-grade enterprise e-commerce platform engineered with Laravel 11 and PHP 8.3. The project is a complete architectural rewrite of a legacy procedural PHP grocery system into a secure, modular, and scalable service-oriented application capable of handling high transaction workloads with optimized performance and transactional reliability. The application implements a clean Service-Repository architecture that separates controllers, business logic, payment orchestration, image processing, and database operations into dedicated layers for maintainability and scalability. Key enterprise-grade features include secure role-based authentication, dynamic product filtering, transactional checkout protection, intelligent cart synchronization, Nepal payment gateway integrations (eSewa & Khalti), cloud storage abstraction using S3-compatible drivers, and a fully featured admin analytics dashboard. The platform also includes advanced image optimization pipelines, AJAX-powered order management, cloud-based asset migration tooling, SEO-friendly URL structures, and responsive UI enhancements designed for real-world production deployment.

CI/CD Pipeline — Jenkins, AWS EC2 & GitHub Webhook (Next.js)
• Automated deployment of a Next.js application to AWS EC2 using Jenkins triggered by GitHub webhooks on every merge to main. • Configured security groups, SSH key-based access, and Nginx reverse proxy on the EC2 instance for production serving.
Latest from the Blog
Insights, tutorials, and practical guides on DevOps and Cloud.

AWS Authentication & Secure Access — IAM, Authentication, Authorization & IAM Roles | Study Notes
Comprehensive AWS study notes covering Authentication vs Authorization, IAM Users, Groups, Roles, Policies, Multi-Factor Authentication (MFA), IAM Best Practices, Temporary Credentials, Root User Security, and IAM Roles for AWS Certified Cloud Practitioner (CLF-C02).

AWS IAM Policy Structure & Elements — JSON Policies, Statements, Conditions & Cross-Account Access | Study Notes
Comprehensive AWS study notes covering IAM Policy JSON structure, statement elements, Effect, Action, Resource, Principal, Conditions, NotResource, dynamic policy variables, cross-account access, and real-world IAM policy analysis for AWS Certified Cloud Practitioner (CLF-C02).

AWS IAM Policies & Permissions Evaluation — Identity-Based vs Resource-Based Policies | Exam Notes
Comprehensive exam notes covering AWS IAM Policies, Identity-Based and Resource-Based Policies, IAM permission evaluation, Explicit Allow vs Explicit Deny, Implicit Deny, Policy Simulator, and authorization best practices for AWS Certified Cloud Practitioner (CLF-C02).

AWS Security Principles — Shared Responsibility, IAM, Least Privilege & Data Protection | Study Notes
Comprehensive study notes covering AWS Security Principles including the Shared Responsibility Model, AWS Well-Architected Security Pillar, IAM Policies, Principle of Least Privilege, and Data Protection for AWS Certified Cloud Practitioner (CLF-C02) preparation.
Featured Publications
Research papers, academic publications, and technical documents I have authored or co-authored.
Chronos-DNS: An Open-Source, Distributed Telemetry Fabric for Auditing Encrypted DNS Performance and Security
Rabin Mishra
The global Internet is currently undergoing a critical security transition from legacy, unencrypted Domain Name System (DNS) query resolution over UDP/TCP port 53 to cryptographically secured transport protocols: DNS-over-HTTPS (DoH, RFC 8484) and DNS-over-TLS (DoT, RFC 7858). While encryption prevents passive eavesdropping and query manipulation, it introduces transport-layer and cryptographic handshake overheads that alter latency profiles, connection state lifespans, and reliability. This paper presents Chronos-DNS, a production-ready, cloud-native distributed measurement fabric designed to continuously collect, store, and visualize metrics from standard and encrypted resolver end-points. We detail the engineering lifecycle of this system, demonstrating how asynchronous network polling, relational telemetry persistence, zero-trust network topology (via Cloudflare Tunnels), and containerized git-driven CI/CD deployment work in unison to provide high-resolution, empirical datasets. Our proof-of-concept deployment on AWS EC2, monitored via Prometheus and Grafana, validates that DoT and DoH protocols present distinct performance trade-offs, making this measurement framework highly relevant to long-term internet engineering research, such as that conducted by the WIDE Project, CAIDA, and RIPE NCC.