So, let's start. My name is Yijun Melnikov, and today we will talk about Bluemix Live Sync. A little bit about me. I'm an experienced Ruby and Node.js developer at Altairos. I worked a lot with Cloud Foundry, Bluemix, and I have some IT products under my belt. So, before we start, I would like to ask you if you ever faced environment-specific issues. I think it's really annoying type of bug, right? And sometimes it's really hard to understand why it happens, especially on production. I don't know, maybe it's easier to find aliens in space than why it happens. Let's play a small game. At the left image, we have development environment, and at the right image, we have production environment. And let's try to find all the differences. While you're searching, I can say that on Chromium project and in Facebook, I did a small investigation and found that it usually takes about three days after pushing an issue to assigning this to appropriate team. So, in a big company, it takes three days to investigate issue and assign to developer. By the way, I asked it in Twitter, what is your record of duration to investigate issue in production? But unfortunately, nobody answered. Maybe you could answer now. What is your record? My record is just one day. Maybe someone has more. Maybe someone is still investigating. How about at least a week? A week. Actually, on Chromium, I saw one issue that was assigned to developer after one month. You see, so it's really complicated to investigate issues on production. So let's check what you have found. How many did you find? Four? Six? Oh, great. I think you won Flash Drive because you won all of them. Let's check its spots on Elin. Its color of spots. It's Missing Planet. I think it's the most important issue. And color of stars. So, six. To prove that it's really hard, I would like to tell you my story. It happened in 2010. We implemented an application for... It was port application. We implemented this before basketball championship. And so we understand we couldn't just move the deadline. So we had to do it really fast. And it was pretty good. We implemented all the features. We just deployed last CSS fixes. And basketball fans were going to use... This is the application on Saturday. It was Friday. We just deployed small CSS fixes. And QA engineer checked for regression, for some regression issues. And just in five minutes after the deploy, he came to me and said, Eugene, we have a problem. Nobody can sign into our application. So, nightmar, right? I downloaded database from production. Checked locally. It works. So I cleaned all the cache. I checked all dependencies. I checked all changes in GitHub. And nothing helped. It still didn't work on production and worked only locally. So at this moment I started to believe in magic. So I didn't know what to do. And I thought about praying or changing DNS to my local machine. But fortunately, fortunately, I continued investigating dependencies and found that... And came to the idea to check salt that I have in production that I used for creating password send. It was it. So fortunately, this story has ended. Another story happened to me just about a year ago. We created an internet shop. And this shop didn't have a landing page. So a customer asked us to create some smart landing page. We created it. And he scheduled a meeting with the investor. He wanted to show this. So we deployed it. We had a really tight deadline because there was a meeting with the investor. I was woken up by my customer early morning by a phone call. And he said that we don't have any buttons that follow to catalog. So we need to fix it asap. I understand him because the landing page without any links to catalog doesn't make sense. It's useless. So actually, it was easy to fix. But the problem is that meeting with investor will start in five minutes. And deploy process used to get 10 minutes. So I wasn't able to even deploy without any fixes. So we both were sad about this. But today we will learn how to avoid such situations, how to stop canceling meetings with investors, and deploy your applications and investigate issues really fast, especially if you use Node.js application and deploy it on Bluemix. But first of all, let's revise how we usually reproduce issue. First thought we have, probably we forgot to redeploy. Probably automated build failed. We check environment variables. Probably we have different values. Probably we just missed some variables. We check some logs. We try to add more logs. And if it doesn't help, we start to check in foreign code. Maybe you have some dependencies with updated versions. Probably transition dependencies was updated. Then you try to download production database. If it's possible, if it takes a long time, you go to lunch, because usually you spend half a day on investigating by this point. And finally, if it didn't help, you stage to your container and try to reproduce it there. So let's imagine how an ideal world, our ideal investigation process, should look like. So it should be production environment. Not like this. Exactly production. It should have same dependencies. It should have same build pack, same environment variables, no any processes on local host. And very good debugger, interactive debugger. By the way, who prefer to use interactive debugger? And who prefer cancel log? And probably someone combine techniques. I also combine techniques, yeah. Yeah, usually it makes sense to add some cancel logs. Probably it's easier to find an anomaly. And after five cancel logs, it doesn't make sense to proceed. You should go with interactive debugger. So what do we have in Bluemix? In Bluemix we have a tool named Eclipse Orion Web IDE. It allows us to use Google Chrome debugger. It allows us to restart application without redeployment. It allows us to access web and shell logs without cancel. So we can do it even on vacation. So how does it work? Currently it works only with Web IDE. Previously it used to work with your own IDE because Bluemix had special CLI BL for synchronizing source code from your local host to your container. But after moving from just hub to tool chain, it was broken. What they say is that they will fix it. So anyways, currently we should use Web IDE. All changes in Web IDE apply to your container. And you have a special button to open Google Chrome Inspector. So just add to debugger statement and here you are, you can instigate your issue on production. So how to create tool chain? You should go to Bluemix console, go to services, DevOps, press create tool chain. It has a list of templates, but we need just one tool. So just select custom template, enter any name of tool chain, and add tool eclipse Orion Web IDE. It doesn't have any settings, so you can just click to icon and you will get to this Web IDE. But it has tools for integration with Git. It has GitHub tool. So I suggest to add this. If you use GitHub, you will get to your source code in Orion Web IDE immediately. There is also a tool for Bluemix host repository and other interesting tools. So I recommend you to investigate this. This is Orion Web IDE. You see a list of files, you see that you can edit it and some controls on the top. You can share your tool chain with your Bluemix organization or individual Bluemix users. So they can help you to investigate your issues. Azure has interesting features. It supports hot case, it supports dark and drop-for-loading files. It allows you to work with two files simultaneously. It has very good integration with Git, so you can add even your own Git server. It supports code highlighting through ESLint Directives and it also has turnjs config. So you shouldn't worry about turnproject content because it will suggest you to create this config once you start using Web IDE. Also you see here a folder, Launch Configurations. This folder contains configurations for deploying application to Bluemix. This is how it looks like a wizard. It has just three steps. In three steps you can deploy your application. So most of the fields are similar to Manifest YAML, but if you type some values here, they will override values you have in Manifest. On the second step, you can bind all services you need for your application. And on the last step, look at... Be careful with command and build bug fields. If you specify something, it probably won't work because Bluemix Live Sync works only with default. SDK Node.js build pack. And if you customize command, it probably also won't work because Bluemix customizes command as well. Also, if you need to add some additional arguments to your command for starting application, you can do it using a spawn child product process. And also be careful with memory because if you use trial account, you may run out of memory because in the default build pack, there are some utils that use some additional memory. So Bluemix adds some more memory on what you are using now. This is a list of utils. They are installed during the deploy process. So once you should deploy regularly. DevCutSol is a special util that provides access to other utils for Shell and Inspectors. So nobody can inspect your application without your access, unfortunately. And nobody can access Shell without your permission as well. I think it's good. So to specify a list of utils, you should set environment variable, Bluemix application management enable. Just list them separated with plus sign. And I recommend you to use it, to specify it in a manifest YAML because if you have active development process, you might want to be able to restart your application at any time. Also, there are some utils. For example, trace. It's a special util to set lock level. If you use lock for G, for example. HC for integration with Bluemix Health Center. And proxy util is installed by default because it's required by DevConsole. It's for creating SSH tunnel to your container. If you don't need it, if you want to create SSH tunnel manually, you should specify no proxy. So about controls. First, button. Just enable environment variable. Enable shell inspector and redeploy your application. Next button, really useful. So you can restart your application. In my case, it took just one second. So just add debugger statement or whatever you want. Probably you want to just make some UI changes. And restart it immediately, show to your customer. And third button is for opening DevConsole. You will see this page. So you should enter either your credentials of Bluemix or one-time passcode. It can be generated online. It will work just five minutes. So someone not from Bluemix can also access. After sign-in, you see just four buttons. I think open shell, open debugger, pretty obvious. Restart. Also, obviously restart application. Suspend allows you to run your Node.js application and BRK inspect option so you can inspect how it starts. So until you continue process of starting, it won't start. So you can investigate it as well. And the rest of controls. First button, play button is for full redeploy. Because sometimes your application can be out of sync with Bluemix Live Sync. And in this case, you should redeploy it. Next button to stop application. Next button to open application if it has a year olds. Next button for web logs. And last button is just Bluemix dashboard of your application. Here is how web logs look like. You can see drop-down at the top of page. So you can switch between launch configurations. If you have many launch configurations, you can quickly switch between them and check some differences. And here is web shell. So we can do whatever you want, like in your shell, on vacation, without your laptop. Here is debugger. You just add debugger statement and inspect what is happening. I also added three slides with last features of Google Chrome DevTools. I think it might be useful even for those who already use Google Chrome DevTools. Who knew that it's possible to do time traveling in DevTools? Just one. So you can add debugger statement. And if you just realize that you did it too late, you add a new breakpoint, restart, press play button, and you will be able to stop on the previous step. Yeah. Of course it won't work if you have some random. And next nice feature is stepover async. It works really nice and consistently with async functions. Previously it put you to some other functions, but now you go directly to function you click. And you can step into your async function. You can check result by just by clicking variable. Actually it will be available in next version in 60 version. Now currently it's canary. If you don't want to use Google Chrome Inspector, you can use other clients. You see that five products support Node.js debugging protocol. So Node is expected. It's mainly for previous versions before 6.3. Bluemix supports all versions of Node.js. For versions before 6.3 it starts Node Inspect. And for new versions it starts Google Chrome Inspector. Of course Google Chrome DevTools Visual Studio also supports this. So you can run code in Visual Studio and Inspect. JetBrains and JS Library Chrome Remote Interface. So what about other languages and alternatives? So this feature supported only in two buildparks. In SDK for Node.js it supports faster start and debugging. For buildparks, Liberty for Java it supports only remote debugging. But you can create a stage tunnel on Bluemix. All containers can now use Diego. So it's possible to create a stage tunnel to your container and use your favorite tool for remote debugging. For Ruby it could be BioBug. If there is another option, I just... I didn't know about it, but I had to talk with one pivotal guy and he suggested it just today. It's a CF plugin, CF local. So you can run CF local command if you have installed this plugin. And it will create a Docker container. It will run on your machine container, the same as your production container. And you will be able to use all services that are available internally on Bluemix. It supports not just Bluemix, it supports any Cloud Foundry installation. So it's really cool. And conclusion. I found just two disadvantages, but first disadvantage is just partial disadvantage because they are going to fix it. Buildpark limitation is also partial disadvantage because you can create a stage tunnel, you can use CF local, and you have only advantages. So you can deploy fast, you can debug fast, you have production environment. So it's easy to use. You will have fast reaction and you don't have any magic. So that's it. I hope your next debugging session will be fast and productive. So, do you have any questions? Sorry. I can show you after that. Maybe other questions, I have one more flash drive. Yeah. What do you like to do? When? When I cannot use a debugger. Oh. Is it coming? Is the debugger function coming? I didn't get your question. So the first question is what thing that you cannot do with this demo? So you wanted to see live demo? Sorry. Is there a function that you cannot do using this tool so you had to do something else? So actually, it's really useful for server-side but it's not so useful for UI because you know, you ugly-fi and minify all your scripts, all your styles and it takes some time. Of course, now we have Webpack, it's now pretty fast. Probably five years ago it took a lot of time but you know, you will have to run your separate instance in production-like environment without ugly-fi scripts or you should do regular deploy. So it won't work for UI. So that's it.


Hello friends, I am Ajit Gundale, Assistant Professor, Electronics Department, Vachin Institute, Solapur. In this video lecture, we are going to just focus on the field effect on this term. Friends, these are learning outcomes. At the end of this video, you should be able to describe the types of JFET, then describe how we construct the JFET and you are also able to describe the working of the JFET. Friends, the field effect transistor shorty called as a FET. It is a type of transistor which uses the field, electrical field to control the flow of current. Friends, I think you are quite familiar now with the BJT which is called as a bipolar junction transistor. In that transistor, we are going to use the base current to control the current in the collector which is called as an output current. So, in that case, we use a current quantity to control the output current. Whereas, in the case of FET, we use the electrical field which is created on the input terminal by the voltage we apply on the input terminal. So friends, that's why the name is coming as the field effect transistor. Friend FET has three terminals in all. One is called the source, other is a drain and last is the gate. Friend in this FET, the current is carried only because of or by a single type of current carrier. It is either whole or the current and that's why this FET is normally called as a unipolar transistor. Friend before I go for this actual construction, let us try to classify this FET. So FET are going to be classified into groups basically when it is called the junction FET shorty called JFET and the second is the MOSFET is called metal oxide semiconductor FETs. Now, below this JFET, we get two more classes when it is called N-channel, other called the P-channel. Below this MOSFET, we get two more subtypes, one is called depletion type, other called as an enhancement type of the MOSFETs. Now again friend, below these all categories, we can get two subtypes, one is called N-channel other called the P-channel. Now these subtypes are because of the type of material we use to construct this FET and the type of current carriers we have in the given device. And the JFETs are having two different types. So one is called the N-channel JFET, friend normally JFET is also simply called as a FET. So I will use a term called FET, which means it is nothing but the JFET. The first type is N-channel and second is called the P-channel. Let us see friend how we construct this transistor. Let us focus on this N-channel JFET. So friend we are going to manufacture this JFET. Since I talk about this N-channel, so for this case I will take a piece of semiconductor, which is normally called as a substrate and on this N-channel, sorry on this substrate we are going to dope some impurity of this N-type, so that this entire surface become N-type substrate here. And in this doping, we use a light doping of this N-type material. So friend when I use a word as a light doping here, it means that there are less number of charge carriers. So presently we talk about this N-type semiconductor substrate here. So here I talk about there are less number of electrons are available to carry current here. But I can say in other words this entire surface is providing me some sort of resistance to flow of current here. Then I am depositing two P-type material on these two other sides of the substrate here. So normally the doping we use here for this P-type is somewhat heavier as compared with this N-type doping here. Friend internally I am just going to join these two terminals together by a wire and this combined part here is not brought on the device on the surface as a gate terminal. So friend joining these two different areas or by this two P-type regions by wire is normally called a metallization process here. And I also bring one terminal from the top of this substrate here which is called as the drain and one is at the bottom which is called the source. So friend as I said earlier this feed is having three terminals and it is nothing but its manufacturing process here. Now just going deep now, so when we create this PN junction we are always going to find some depletion layer around the PN junction here. So friend in this diagram you are seeing that there is an appearance of depletion layer and you also see there is a narrow portion which is not leaving or lived here in this substrate and this is normally called as N-channel. So friend this N-channel word is because of this entire substrate is doped with this N-type material. Friend these are the symbols for this two different type of feeds here what is called N-channel or they are called as a P-channel here. So this arrow is indicating that the flow of current from gate to source junction when that is forward biased here okay. So we know in the case of N-channel JFET here the gate is made of P-type material and we use N-channel to construct this FET here so that is why the arrow is now entering in the device that is entering in the channel there. Friend as I said earlier here as I use a light doping in the channel manufacturing so that surface is offering me some resistance here and as I said earlier we are having three different terminals are available on the devices namely drain source and the gate. Friend again I say that during manufacturing as doping is light in this N-type material so I am going to have some resistance from the given surface here okay and normally we apply some voltage for this JFET during working so I am going to make this drain more positive as compared with the source and the voltage from gate to source is now given so that that given junction is made as the reverse biased junction there okay. So friend here I use a formula here that is R equal to rule by and this formula says that resistance offered by this entire substrate that depends upon this area of conduction there. Now friend if I use this light to show what is the effect of this which is on the flow of current here so I can see here so here diagram shows that gate is made reverse as compared with the source here. So this already a depletion layer is appearing across PN junction there and this negative voltage at the gate is again going to increase the width of depletion layer. Friend I can show this change here by this simple diagram here you are seeing that as we increase the voltage on a gate the effective channel width is now get decreased here. I can show this simply by this simple diagram here. So friend I will represent this entire substrate by the resistance here and through which now apply this voltage from drain to source and this battery forces some current to flow in the given resistance that is across a channel I can see here. Now we know friend here if I take a voltage at the top of resistance here you see that this voltage will be higher as compared with the lower part in resistance here. So as example I am showing that the voltage is having 5 volts at the top then 4 volts then 3 volts and so on here. So friend this voltage will provide me some reverse bias between P and N junction between gate and the source here. So friend I am just trying to show that thing here so that the current which is flowing in this channel is going to provide me the various variable reverse bias between the P type gate and the N type substrate here. So friend you see that the width of depletion layer is somewhat larger at the top here and as I go on the bottom side the width is coming narrow over here. So again when I suppose friend if I apply some reverse bias voltage from gate to source here which is a conventional battery we use the width of this depletion layer again goes larger or I can say deeper deep in the channel here and so that the resistance offered from a device will become more here. So friend as we know here if I increase the reverse voltage from gate to source here we found that the width of channel which is available for the conduction is gate decreased here and so that as we decrease the area of conduction for the current here and we know that the device is offering me some high resistance and so that the current from this drain to source gate decreased here. So I can represent this current ID which is now inversely proportional to the voltage between gate and the source. So friend if we increase the voltage from gate to source we see that the current ID is gate decreased here and this is a basic principle of working of the JFET friends here. Friend these are my references I hope that this video is helping you to understand the basic working of the JFET. Thank you for listening this video.


Hello. Yeah. Hi. So, I actually just realized Somebody said that about vague title lines. So, it's actually evaluating Vault, which is a hashy corp solution So, these are couple of Problems, which I'm sure a lot of us might have faced some time or other Saving any publicly accessible secrets. It does not involve saving database credentials because Most of us do not have our databases exposed outside. So, it's S3 keys or if we are doing encryption then our private keys or Then the second problem is generating leased credentials for AWS Any system administrator here would know that once you give Developer a key. It's it's gone forever. Actually, it's it's not for a time So generating those leased credentials by the time Third is once those keys are given in a single a single Stop to actually revoke all those keys or credentials and fourth is how to actually give an audit of You know key generation process or how to actually keep audit of you know How the keys are generated or when they are being generated for whom they are being generated and how they were exist So this is Sort of an architecture of vault I have made this myself. There's an architecture level level on walls documentation with it's it's very confusing So you can access the vault with a set of HTTP APIs. The APIs are quite friendly So no need to actually go there On the left side, there is a barrier the barrier actually I'll talk about the barrier in the next slide So all the keys Whatever data you wish to keep in vault is actually encrypted with an encryption key This one right here. The encryption key is known only by vault. You actually do not know or care about the encryption key The encryption key itself is encrypted using a master key The master key is is given to the user. I'll talk about that also in the next slide Then there is a there's an audit broker which essentially writes all the audit locks and then there's a steel broker which Essentially controls the ACL on the HTTP API Then there's a storage back-end layer So you can write your secrets or your data your key value pair anywhere I mean, it's in the database or in the file system. So this layer essentially controls that So here I am going to explain you about the master key in the previous slide The master key essentially is divided into n number of parts You can suggest in how many number of parts you want to divide the master key The the it's like an example here when if some of us might have a vault in the in a bank local So there is a key which is given to you by the bank There is a bank officer's key and then there's a you can put your own personal key in the vault. So To actually unlock the vault the banks vault you actually have to supply all three keys At a single point of a time then only you can unlock the vault But to lock the world you just have to push the door and it simply locks, right? But in vault you can actually decide that how many parts of the keys you need to have to actually do the Unlocking so I mean you can ask the wall to give n out of n I mean all the parts have to be there to actually make wall to actually be able to unlock the world Or you can supply that one or two out of n are enough to actually unlock the world It totally depends on your security model So I am going to show you a basic Couple of commands which you can probably run on CLI yourself So is this visible to all of you? I mean should I increase the font size or this is fine Okay, so on one part I have vault running so it looks something like This I mean it tells you that it's running on so and so port and I mean Nothing is here to actually explain. So I'll just move on This is a basic setup where I have actually initialized the vault with this command So you can see that I have said that okay, there should be three parts of the Master key, but only two parts are actually required to unseal a vault So here actually prints all three parts of the key And you need you should be giving all three parts to different people not to one single person to actually Unseal you actually for example here. I'll show you how to actually unseal So I'm so vault is Stateful so I've sealed I've unsealed a vault with one part. So it actually shows that Out of two one key part has been supplied, but it is still sealed So I take another key and I supplied with here So now it says that okay vault is Unsealed now sealed is false and all the I mean parts are there. So it's sealed now. So I can actually write something for example, I can write a hello and What Okay, it's it's still not authenticated so Here I can see that here is the authentication key So I do vault or It's authenticated And now I write It's a written and now I can also Read So I just And I get a value So any key in the vault has to have a Leased least time.  It has to have a time. This is the default time 768 hours for some reason So I can Seal the vault once again Here sealing does not require any key or anything And if I try to read It once again, it shows a a five or three So there are two ways in which you can use vault With your application One is the sealed approach. This is for some reason the Suggested Mechanism by vault. I I haven't been able to get anybody from vault to talk about it. So I don't know why this is the The standard approach wherein I Follow this approach so here they tell us to keep vault always unsealed and only seal it if a threat is realized Which I'm I'm sure you would not agree. I mean threat does not come Uh after telling us and this is a unsealed approach where Uh, you do a deployment From the app and you wait the application Poles the vault constantly and it waits Uh For the vault to unseal itself Then some some release engineer or some Jenkins script or some deployment script would actually go and unseal the vault And then application or the release script itself would seal the vault After it has read whatever See keys or secrets it needs to read to continue its functionality You might have realized that uh in the cli as soon as I generated The keys for vault it actually printed all the keys in the terminal itself, right? Somebody might argue that that's an unsafe way to distribute the keys So because uh whoever whichever sys said when actually instantiates the vault knows all the keys So, uh What you can do is uh, you can encrypt the keys Like this is the initialization process And you can actually supply your pgp keys so that as soon as it spills out the The unsealed keys it actually encrypts them And it prints the encrypted part only so There are three users a b and c I have given an example of keybase.io Right, that's uh inherently integrated with vault So you create your own account on keybase or or you can specify your open pgp name or id here And the a b and c persons will give will get three keys three parts of the keys with the key parts When encrypted with their own uh public key, uh, these are a couple of uh best practices that we have realized uh Since we have been using vault once uh one is that uh, there are a lot of acls, uh, which you can use with vault There there's a github api There's I think a twitter api. There's uh, you can have custom sttp integration. There's ldap. There's oauth But uh, all of those come with their own vulnerabilities So it has its own uh token based authentication system You can create policies and tokens and and it's very easy. It's a all json based So it's better to use that Because all the acls they come with their own vulnerabilities Uh storage backend. So the default storage backend does not govern that Which acl or which person gets to read or write what part of the storage? It's like ac linux here So you actually there is a storage backend called cubbyhole, which actually links acl with the part of the storage So you can say that these five keys can be uh read or write by this person Then uh, your storage backend is itself Not safeguarded by the world just the entry and the exist exit process is safeguarded So it's better to save by your storage engine. I'm I've given a screenshot of Uh, what what is the easiest one of the easiest ways you just use our amazon ebs with the Here is the encrypt this volume tick So it encrypts the volume and it keeps the keys of encryption in amazon kms So you can have your own storage back ends and it's better to Uh safeguard your storage back ends also uh High availability for production evolved supports cluster setup So I haven't written the steps here, but the steps are fairly easy. You can it's just a json configuration uh You should be using uh high availability back end as well For example, uh, writing the bald secrets in a in a disk space is not encouraged because the disk itself the disks are uh Are I mean easily destructible So you write something on console, which is again hashy corp solution So they go really uh well together or or myc Cole hs solution or or or on an nfs or Efs amazon efs elastic file system or something similar, which is uh, which is scalable or which is which is Highly available These are the things So philip actually told me to cover this as well. I mean these are the things which are outside threat model So it doesn't look like that vault is a single system with which you can do. Um, you can secure everything and anything so I mean the algorithms with the the chamois algorithm is actually uh, uh The algorithm with which the keys are separated into multiple parts. So that algorithm the stdp is the Instance and os philip it is those are obviously outside the threat model the storage back end Somebody runs away with your hard drive. Those are obviously outside. Uh walls threat model Uh, thank you. That's all there is to it. Let me know if you have any questions Hello Okay. Yeah. Hi. So, uh, let's say if you're using asymmetric, uh, encryption like rs or something And your private key is let's say split it into multiple parts And let's say the way you have said for the key distribution, you are using keybase.io So use the same pgp and keybase.io and distribute the keys So let's say we don't really need what and we can do in a very traditional way then traditional way being that like because my private keys split into multiple parts Let's say three people are there. So I divide into three parts But the three parts, uh So, how do you split the key into three parts without an algorithm? I mean if you do for example, key length is 256 or 4096 or bit So you divide the three parts And then all then first and third person cannot Uh, you know club and open the vault right the the all everybody has to be there. Absolutely right But in the shamir secret algorithm The any two person if you specify the threshold as two then out of those three any two people can open the vault I I'll just repeat once again. For example, uh, your key is abcd, right? Now you abc you divide the key into three parts ab and c You don't the first and the last person are there in the room. They provide a and c It will still not unlock the wall right because b is not there Right, but in in the in the algorithm, which splits the keys the abc is not divided by ab and c It's a rather divided as ab bc and ac Okay, so two people need any two people can actually Combine come together and Open the vault and the algorithm goes On like that, right? So if you go over the traditional way, you're splitting algorithm has to be really good enough to cater any n by m division Of the key So even that is simple. Uh, so let's say if that is divided by three So let's say with each one of them. I keep give them two parts of the key Not the third part of the key So let's say if he is having two parts any two people can go and match the three combinations, right? But the joining algorithm is something which is known to you exactly here the joining algorithm something which is not known to you Okay, right. So any two parts if even if you have two parts It will only work with vault. It will not work with any other system because the joining algorithm is not really open It's a variant of chamois secret algorithm, but the algorithm itself is not known Okay, I obviously you can go and study the algorithm and But I agree you're right Hey, sure. Yeah, right left left left left. Yeah, hi Hey, what's up? Sorry. So I just wanted to understand why you're using wall to Basically have this authentication mechanism to access your db or only for deployment access my like accessing the db Or for deployment rolling strategies only Uh, why do I want that? Yeah, where are you using it? Basically? Where am I using so I am from patm? No, no I can't really see where I'm using it But uh where I would like to use is it something is I can tell you. Yeah, for example, uh, so you have uh, we have something you have I let's let's let's take an example of adhar or uadi. So I'm sorry Let's take a better example. I guess. Yeah, so you want uh, somebody to send you a data Right in a secure way. So you give your rsa public key to that person, right? And the api accepts the data and uh, decrypts the data and does something with it So the private key is something which you need to keep somewhere, right? If private key is compromised and anything can happen Where do you see that? Save that private key You can't save that private key in database because it's open You can't save that private key on the system itself because Uh, it's docker and those edges where the the instance goes down anytime Where do you see if the private key that is the question you can't save the private key in your source code also, right? So where to save that data is the question Okay, that that is where you were because you also mentioned one of the slides over the storage backend and the world integrated within So I thought that probably for every dp request you make you have to unseal and then fetch the data that uh, so Vault uh, encourage you see you to do that also. You can use encryption as a service also Okay, right? So as soon as you are saving the data inside dv you take it via vault and then you bring it via vault You can do that So basically for all the operations on the dv. I can just set up vault Absolutely, but that that would increase a lot of computation processes That would mean a lot of computation process So what we generally say is so I generally say this is uh, whatever secrets you need to have to encrypt other secrets For example, if you have to encrypt the whole database itself, right? So it's better to encrypt the whole database or the strings and then keep the encryption key with yourself Uh, it's just like pgp, right? You uh, you send arbitrary long data Overnet work.  So this is something which I recommend. Right. Yeah. So uh, that's also the thing like for example when we create the secret file Okay, so we usually just like don't commit it at all and then we just go to production and then use an scp to upload it over there And then keep it of course That's one way to do it But then I think what is what would bring in an acl along with it like for example, everyone who's coming in can have a different secret file I mean The second line was that uh, you scp the file from your system right now the system has the file Right. I mean that is the okay problem. The system has has ever had a file Right. It shouldn't even have had a file anytime in the whole uh history Okay, you generate you keep the file on the server itself you generate it there You save it in the world and you remove it Okay, cool. Thanks. Sure I'm I'm sorry. We have to stop questions because we're really running out of time. Shreya is going to be available It's the coffee break now


Hi everyone, we're going to take a look at a problem from the 1989 AP Calculus A-B exam. This is the problem as I like to say started it all in terms of asking students to sketch a possible curve of an original function from that of the derivative or even seek information about an original function from the graph of the derivative. So what you see here is exactly how it appeared on the AP exam in 1989. We were given a figure that is the graph of F prime, the derivative of a function F. The domain of F is the set of all real numbers and the graph we're looking at specifically is from negative 10 to positive 10. You'll notice a couple details here. They make it very, very prominent that you are looking at the graph of the derivative, not that of the original, even to this day when problems similar to this show up on the AP exam you will see something similar as the note you see here. The first thing we were asked to do is to determine the values of X for which the graph of the original function F is going to have horizontal tangents. Now as we write up this answer there definitely are certain things that we look for when we grade the AP exam. So that's what we'll be focusing on here. We want to know where the original function F has a horizontal tangent. So let's go back to the graph. Remember once again you are looking at the graph of the derivative. Horizontal tangents on an original function occur where the slope of the tangent line is zero. Now given that you're looking at the graph of the derivative, sync on the original function where is it that the original function would have a slope of zero. It would have to be at the X intercepts of the derivative graph because the X intercepts of the derivative graph is where F prime equals zero which means the slope would be zero on the original function curve F. So you can see from this graph we have four locations at which that occurs. We just simply need to write it up correctly. Therefore we can say that F will have horizontal tangents where F prime equals zero. Therefore that would be at X equals negative seven, negative one, four, and eight. Notice a few details about this. Be very specific about which graph will have the horizontal tangents. Don't simply say it. I like to say it is a two letter word, we don't use it. Specifically say it is the function F that will have the horizontal tangents. And notice how you state why it is you know that or where that occurs on the derivative graph. Essentially what you're doing is creating a link between what the derivative graph is telling you and what you therefore know about the original graph. That is the important piece to create that link, the connection between the two. And please do remember that as we go through and answer these questions we're going to see. The second question that was asked of students that year was to determine the values of X in the interval from negative ten to ten where the original function F is going to have a relative maximum. Think about what we've talked about so far in terms of how it is a relative maximum comes to be. If we have a relative maximum the slope is changing from positive on the left to negative on the right. As we talked about the derivative, the slope aligned tangent to the curve is positive to the left and the derivative is negative to the right. So we want to go back to the graph and see if we can determine where that happens on the derivative graph. Can you locate any X values at which we know the derivative is changing from positive on the left to negative on the right which will therefore create the relative maximum on the original function F. Hopefully you've identified two places at X equals negative one. If you take a look at the graph it's changing from positive the derivatives are positive to the left negative to the right and also at positive eight. So we have two X values on the original function F at which we're going to have a relative maximum. Let's talk about how we will write that up. Again we're going to be very specific in terms of what function is having a relative maximum. So F will have a relative maximum. Remember we talked about the need to create a link between what it is we're seeing on the derivative graph and what that tells us about the original function. F is going to have a relative maximum where F prime changes from positive to negative. Remember we want to create the link. So if F prime is changing from positive to negative that means the original function F is changing from increasing to decreasing and that's what creates the relative maximum. And as we said that occurs at X equals negative one and at eight. Remember to be specific in terms of specifying are you talking about F versus F prime and to make that link between what you're seeing on the derivative graph and what that tells us about the original. The last thing for which students were asked were the values of X for which the graph of the original function F is concave down. One thing you need to recognize about concavity and this is one thing a lot of students forget. Concavity occurs over an interval. You are not going to have specific isolated X values. You are going to have an interval for the answer even though they don't remind you of that. That is one mistake we see a lot of students make on the AP exam is they itemize X values. No, concavity is over an interval. So that would be the appropriate way to answer a question like this. This is where you need to recall what you've discovered in this lesson about how you know from a first derivative graph where the original is going to be concave down. Hopefully what you recall is that an original function F will be concave down where the graph of the derivative is decreasing. That's one of the things that hopefully you've come to know throughout the activities we've done this lesson. Let's go back to the graph and we need to identify the intervals on which the derivative graph is decreasing. There are two of them. Looks like it goes from negative 3 here down to about 2 and then from 6. And remember how they define this function was only negative 10 to 10. So we do need to have an end point for that second interval. Remember also that concavity intervals are always open intervals. It would be incorrect to state a concavity interval as a closed interval. They must be open intervals. So we have 2 in this case. We have the interval from negative 3 to 2 and from 6 to 10. As I mentioned, I did add a fourth question. So we can take a look at how we could come up with a possible graph of the original function F from the graph of its derivative. And this will hopefully give you an opportunity to really tie together everything we've been talking about. Questions like this still show up on the AP exam to this day. To get started on sketching a possible graph of the original, let's start with some key points that we know are going to be on the graph. We know that the x-intercepts of the derivative graph become our max min points on the original. Let's put those in place first and we'll work left to right. Our first x-intercept is negative 7 and notice what's happening. We have the graph there changing from negative to positive. So think about what that means about the original function. If the derivative is going negative to positive, that means the original is going decreasing to increasing. It must be a relative minimum. So what I'm going to do on my graph over here at x equals negative 7, I'm going to put a minimum point. You can put it as high or low as you want. Notice the directions. Sketch a possible graph. So the y-values, you can put them as high or low as you want. And I'm going to make myself a little note here that this is going to be a minimum point. Our next x-intercept is over at negative 1. There we have the derivative changing from positive to negative. Remember, we talked about that tells us on the original function, it's going increasing to decreasing, thereby creating a relative maximum. So over here at x equals negative 1, I'm going to put a point way up here to be my maximum. Our next x-intercept is over at 4. Here we have the derivative graph changing once again from negative to positive. So that's going to be another minimum. Maybe I'll put it here. And our last one over at 8, we have the derivative changing from positive to negative. That is going to be another maximum point. So now I have in place all of my maximum points of the graph. Second thing to put in place are inflection points. The inflection points on the original are going to come from the maximum points of the derivative. Once again, working left to right, we have a maximum here. It looks like negative 3. So I know I'm going to have an inflection point. Now, as far as the placement of your inflection points, remember, we want a nice smooth continuous curve by the time we're done this. So what I want you to do on your graph, take a look at where you put your minimum and maximum at negative 7 and negative 1. We know the x-coordinate for our inflection point is going to be negative 3. The placement of that should be about halfway in between vertically between your minimum and maximum. So if you take a look at mine, mine maybe would go right around here. So you take a look at your own graph because this will depend upon how high or low you put your maximum in points. That's going to dictate where you place your inflection point. You want it about halfway in between the vertical distance between your minimum and maximum in this case. We have another minimum on the derivative graph. Here it looks like 2. So that tells us we're going to have an inflection point at 2 on our original. I had this maximum point at negative 1. We had a minimum point at 4. We're going to have an inflection point at 2. So maybe halfway would be right around there. And we have one last one over at 6. Is going to be another inflection point on our original curve. And that needs to be located between the minimum at x equals 4 and the maximum at x equals 8. What you have now are some guidelines to use as you go to do your graph. Once again, we're going to work left to right. So over on the far left, we know that the graph is underneath the x-axis, meaning that our derivative is negative. That means the original has to be decreasing. But at the same time, because the derivative itself is increasing, that tells us the original has to be concave up. So maybe it looks like that, which is decreasing and concave up. So I hit this minimum, which corresponded to right here on the graph. From that point, f prime is positive. That tells us the original function is now increasing. Because the derivative itself is increasing, it tells us the original function continues to be concave up. So from this minimum, I'm increasing concave up. I hit this inflection point. But it's going to keep being increasing, but now it changes to concave down. The more you draw these, the better you get at them. So that accounted for from this maximum right up here to about where it hit the x-intercept. From my maximum, take a look at what's happening on the derivative graph. It's now underneath the x-axis, meaning that the derivative is negative. So that tells me my original function has to be decreasing. The derivative itself is decreasing, which tells me the original has to be concave down. So after hitting this maximum, I have to be decreasing concave down. I hit this inflection point. From there, it has to keep decreasing, but now be concave up. I think I want to move my minimum to there. I hit my minimum. Take a look at your derivative graph. It's now above the x-axis, meaning that our derivative is positive. So we have to be increasing. At the same time, the derivative graph itself is increasing, which tells us the original is concave up. So after I hit this minimum, I have to be concave up and increasing until I hit this inflection point. I keep increasing, but now I am concave down. As I mentioned, this still shows up very often on the AP exam. What we look for when we're grading them, we look for the shape. We look for correct x values for your max and min points and inflection points. On the original graph, this is why I encourage you to put these points in place first so that they can serve as a guide for you. And then, really, the shape of the rest of it. It doesn't have to be perfect. As you can see, this one's not. But as long as it conveys the right idea, that it conveys the correct characteristics of the original function F, that's the important part.


I love it Ultimate bang the ultimate friend. I yes shred it up Shred up that bang. I want more. I wish she was using a razor blade do this because that's just so on her email Oh, it's all coming together. I Were still 13 years old. I would be doing crying right now because I'm obsessed and I this is everything I ever wanted on my own You look incredible my face angle, please Please


Projection working right? Absolutely cool.  So today we're gonna cover Just real quick who we are. I'm Randy Perriman from Dell. I am the solution architect for the Dell Red Hat OpenStack solution And I'm Nick Barsett director of product management for OpenStack at Red Hat And we're gonna be covering why Dell and Red Hat have an OpenStack partnership Why Dell and Red Hat do an OpenStack solution and what our reference architecture and the solution is a quick demo of instance HA and then take your questions So why Dell Red Hat has a cloud solutions? we Have a unique co-engineered solution because it's comprehensive We use Red Hat of course as our Linux. Sorry Red Hat Linux OpenStack platform It's extended for enhancing multiple OpenStack projects and when we do that work. We do do it all code upstream Finally one of the most important pieces is that we have a tested validated solution that people can deploy with confidence and repeat The two companies together have over 15 years of partner green making enterprises successful practical scale out configurations We have proven platforms hardened secure code and we finally streamline our OpenStack moving parts What does it take to make a the solution? It takes a whole bunch of people to do that We have the Dell OpenStack solution engineering Red Hat system engineering the combined Dell and Red Hat quality assurance teams Dell storage engineering Red Hat cloud practice teams the Red Hat OpenStack and the Red Hat tools team a lot of people go together To make this solution. It's not just two or three people It's a it's a series of teams and it takes both companies working together OpenStack for the enterprise What we are trying to do is come up with a way for a stable reliable and repeatable business We validate the product from end to end. It's a fully supported software. We have it's also scalable It's a solution to allow you to become agile We do have performance tuned configurations extended life cycle support and we have the expertise to compliment your in-house expertise and so One thing that is very important to understand is deploying OpenStack always start by configuring your hardware and I would say that this is generally the most critical part of any OpenStack deployment How well are you going to get your hardware ready before you start deploying and the great thing? We have been doing with Dell in these four version is we've been learning on how to Define an architecture that makes sense and teach our customers how to Implement it a reference architecture is not just a piece of paper that is nice to display on the web, right? Well paper web doesn't work PDF anyway But it's actually a shortcut that we are offering together and it's More than a shortcut in these four version. We've been adding features every time and Really right now in version four of JetStream. We now have a version that it's Larsen hello A very flexible very modular and we've added Lots of choices in the deployment and this work is going on you can see in the next few slides that we are going to be adding to it Right now What we've been adding in version four is three very key things first What we call guests or VM high availability? What do you do when a host goes down? OpenStack services. What's the API going to do if one of the? Controller nodes disappears and The most important thing deployment automation And the patching of the deployment and the wall maintenance of the environment because it's not Import just important to set up the initial thing. It's also important to maintain it over time So as Nick mentioned, we're up to version four. We started out at version three We brought in a 10-note architecture with 10 gig networking. We made it into a turnkey system It's all based off of the Dell PowerEdge R630s R730 XDs with Dell networking gear It was based at that time on the OpenStack platform from Red Hat of number six We also introduced neutron VRP active active high availability of our controllers and Support of multiple concurrent storage back ends In version four we brought in the additional Dell networking components. We revved it up to the s40 48s and 30 48s We added in the s6000 series at the same time and rev the OpenStack platform up to number seven We also brought in instance live migration and we've added some optional servers of the Dell PowerEdge R430s and R730s and Finally as Nick mentioned in the current release We're now adding instant H8 and we are going to be adding in the midi core enterprise metanet This is the taxonomy that we base everything on we build up from the very bottom at the physical infrastructure we start with the Dell PowerEdge R630s and 730 XDs along with Dell networking We build on top of that the Red Hat Enterprise Linux and then we bring in all the OpenStack components One of the pieces that we bring in as part of our solution that which is real interesting is the Ceph storage That gives you the ability to have an object storage or a block storage Across all the different tool sets as an across your virtual machines so Who doesn't know Ceph in this room? Not that many people as far as I can tell but really why are people so attracted by Ceph? Well, the first thing is the cost efficiency you can use standard hardware and Deploy as much storage As you want you can select the type of drives that you're going to deliver and You're going to get the performance the resilience and the scalability that you need based on your growth You don't have to prepay a given size of equipment To get to it in terms of resiliency You can now have Ceph be fully resilient on one side or on multiple sides you are in a fully software defined environment so you can benefit from a very rapid innovation cycle community Driven innovations so that mean that if you really care about a specific feature you can inject it and get it into the softwares later on and Really, there is no scaling limits to the capacities of stuff So when we went to go build 401 hand for oh we use certain target use cases We looked at today's apps developers self-service storage as a service We like I said before we based it on components from Dell PowerEdge servers and Dell networking We also have optional Dell storage of the PS which is the peer storage arrays or the SC Which is the compelling arrays? We have Dell and Red Hat engineering services as part of it Dell Red Hat open stack 7 We've got the features in there is the hope mate host maintenance mode a whole bunch of networking co-engineered Meaning that we work together to make that happen We validate this solution for you before it comes into the customer's hands and then finally instance high Availability is new to us so How does instance high availability work? so before this what we had is the ability to Migrate machines away from a host But if the host dies suddenly Life migration doesn't work, right? You need something is going to discover that your host has disappeared so that your VM can be restarted elsewhere We had this functionality called evacuate which is very bad name Inside of open stack. I would love to for it to have been called resurrect because this is really what what it is that existed that Allowed to Resurrect VMs from a fail host and reschedule them elsewhere It was working so and so but with kilo we were able to enhance that and Do a little bit more than that? We were able to drive This into an automated fashion by adding pacemaker remote Which is a very massively scalable version of pacemaker nothing to do with a traditional grand father? Well, it's not that all but pacemaker we're able to monitor hundreds of instances or actually physical nodes and detect within less than 30 seconds the disappearance of a node and Forced the call to the evacuate function so that all the VMs that were running on this Host that just died would be respawn and as you're going to see this respinning is amazingly fast There is one more thing That is delivered in liberty Which is going to make that a little even a little bit faster Which is the ability to mark a host down into the Nova database so that we are Really sure the rescheduling is not going to reschedule on this host that has died But Nova doesn't know about it right now We have to wait for a full watchdog cycle before we can do the respawning Once we've got this mark host on functionality. It will be instantaneous Already covered all of it a little quicker than the slide. Sorry so Moving on to additional pieces of high availability. We built the hardware around the idea of having it highly available. We've built all the Poweredge servers with ray drives for all the OS's dual network cards with Bonded that are bonded across the cards dual power supplies Networking is built in a leaf and spine architecture so that no single switch will cause loss of a data flow with VLT and VRRP Across the layer two or layer three The network is highly available every node has all the networks required for its functionality We've separated the solution infrastructure networks into various categories such as the solution private the public external internal for management Each category shares nicks Across the nodes with VLANs covering the per networking flow. It's extensible No need to additional add additional nicks. You can just add additional VLANs as needed it every Two bonded nicks for performance, I don't like the way that's worth it. Sorry The implications though is if you're using MTU sizes It is per category that are shared and finally we lock open stack neutron into VLAN mode for this release So I think we we can we can say that what we're delivering is a very stable highly available Hardware platform. Yes on which we are delivering Virtual appliances that are highly available. So highly available on highly available is Good enterprise grade right This is the logical network of the current release As you can see everything is across either bonds using veal's VLANs If you want more information see us we can get you a copy of the reference architecture, which is online so When you look at Rail OS P7 or the real name is read at Enterprise Linux open stack platform 7 It's a mouse for isn't it? It's based on kilo We have done a lot of work on deployment of it making it easier To deploy and this is ongoing work that we've been doing with Dale. We've Already mentioned that compute host high availability is now fully there. We've got neutron and Open vSwitch Security mechanism that have been enhanced. We've have the first version allowing a full IPv6 Experience we support incremental backup We are integrating with as a Linux That's has been there for quite a while, but we are making it even more robust and covering container technologies We have great alignment with open stack API so that the security matching process covers all of them we have read at Enterprise Linux 7 as 7.1 to be more precise and soon 7.2 as the host OS we've got Enhanced H a at the database layer for Mara DB using Galera and H a proxy as the front for it We've been of course as for every release hardening everything so that it is Benefiting from our experience in delivering security and a reliable environment and as all of our Versions for the past three cycles. We are supporting them for three years So the reference architecture combines What each of our companies bring to the table from Dale? We bring the best hardware for open stack our servers our switches our storage We're based like I said before our servers are on the power edge our 630 for the computers controllers Our 730 xd's for your storage We also bring in the Dell equal logic or pure storage arrays and the Dell storage center or the compelling arrays We base it all off of the Dell networking the s40 48s and 30 48s Which are the latest revisions and then red hat brings the best software We have the rail with the high availability and load balancing tools for open stack and then jointly we engineer this together We've architected design integrate optimized it. We have a reference architecture. That's got a balanced architecture. That's For performance to dollars. It's scalable. It's extensible and we have support for it We also use automation the open stack form and installer at this time in the future We're going to be using our deal manager and director all of this brings a great solution for you so Why is this industry a leading? Well, first of all because it's an open solution from end to end There is not a single piece of the solution that is a proprietary in any way Of course, we have to Customize just the deployment of open stack for the given hardware, but these are just configuration Work that we are doing. We are not adding any specific drivers that we are not Contributing back upstream It's also an environment that is very agile agile in the sense that You can grow it and you can scale it back down based on your demand It's allowing you to become agile It's also an infrastructure that is delivering the control that you need Because when you deploy such a solution understanding what is happening with it is a very key Element and it's also very innovative in the sense that you're directly every six months Or even more than that because we are having minor releases that are feature bearing Benefiting from the feature that on which we've been working which allow you to deliver email even more features to your users So these are just various design components that we've taken into consideration In designing an enterprise grade solution for you from red hat certified solutions that are into end It's in a great enterprise grade in that it's scalable secure open one stop We take our experience and our innovation and it allows you to have innovation without risk It also addresses many enterprise use cases and addresses the gaps that you are looking to have taken care of The components once again, we start with the Dell hardware We have a Dell reference architecture which outlines the basics of how this is all put together Using red hat solutions and we also bring in the experience of Dell professional services along with red hat professional Services side-by-side to make your solutions work So what's coming up ahead? Well, as Randy mentioned a little bit earlier Integration with the Triple-O implementation that we use inside of a rail OSP called director Which uses ironic for the discovery and the deployment of the nodes which uses heat for the automated deployment and the orchestration of all the nodes whether they are controllers or storage nodes or The compute nodes And we are adding a lot of validation Validation in pre-flight mode before we start a deployment We want to make sure that the environment is Exactly set up the way we want before we go into a messy process in flight As we are moving forward step by step into the deployment We want to make sure that everything has happened has it should be by the book So we are running tests such as service spec to validate that this is happening and at the end we want to be able to guarantee the customer that the configuration that is being delivered with does integrate completely and Seamlessly and does provide the performance that he is expecting. So we have a full validation suite at the end of course if you want to extend Your cloud or retract it. You'll be able to do that As part of the same tooling. So that's what's coming up ahead In RailOS P8 We are going to Allow automatic And in place migration Meaning people running RailOS P7 will be able to get to Version 8 without having to set up another cloud or do any kind of magic This is going to apply to Minor releases as well, but that's a lot less impressive in general because there is no API version changes We are going to improve this instance of high availability that I did the way I described earlier with this Marcos down Feature that is arriving with liberty There is network quality of service That is going to be delivered That's a key request from many enterprise customer to be able to straddle which customer is using what on their cloud The ability to do non disruptive backups, you know Ability to say Hey, I want to do a backup But let's not interrupt the work that is happening in this VM in order to do so. So this is a key element also For many enterprises that want to guarantee the security of their data Replication API is going to allow for The block replication to happen in a way that is going to enable disaster recovery scenario much simpler and finally new image signing and encryption mechanism ensuring that There isn't less chances that someone is going to come and mess up with the images that you've preferred for your tenants and that's Very similar to what we've been doing for ages with our PM packages, for example That's just a few of the functionality and before we get to the QA. We have this impressive Demonstration that ran you all can see this I up here what we have up here is I have Three four nodes here the large one on the left-hand side is a controller node and then three Nova computes this cluster was built up literally in the last 24 hours It is got the latest patches to run for us to do high availability So the goal here is I'm going to throw a panic onto the once Nova compute that is running for our I'm sorry on the Nova compute that is Has we have one instance right now? So if I do a Nova list as you can see I have a single instance running right now and Yeah, and it is running on Rich nobody want no running on Nova one. So let's go over here to Nova one and Do a echo and we just panicked Nova one By the way, this is back in Austin, Texas that we are connected to so it's gonna be slow here and there Within the next minute pacemaker will notice that Nova one As you can see has gone down to showing Nova one We're gonna see we should see some KVM over either on Nova two or three in a second show up I should say within the minute a second But yeah, we've got to wait for that watchdog to happen so that Nova doesn't reschedule on this on the wrong host Soon we'll be able to get rid of that and moved over to Nova three And so what happened there is pacemaker notice that Nova ones down it Connected all of the instances, which is the one and now as you can see down here in the bottom right-hand side We now have it running on Nova three in the meanwhile pacemaker is now restarting Nova one Let's see I have one on here for it. No. Oh Anyways, we're gonna start here because it will take about five minutes for the Compute node to come back online But what's happening now is pacemaker is restarting Nova one and bringing it back up and it will then bring it back Into the pool and bring it back online in order for it to be used I can do a PCS status and You'll see Down here at the very bottom Nova one is stopped We'll leave it sit in here in a few minutes. We'll check it in the meanwhile. Is there any questions? Yes Okay, so part of the configuration does use shared storage and that's actually one of the requirements in order for this to work Properly is using shared storage because when the host goes offline It has to be able to bring up a virtual machine that same virtual machine that was running and they'll reconnect it Actually, it will work with if you don't have any search storage, but it will restart from no data So it's right less interesting. Yes Yes, it would restart the image Whatever image you used to create that Particular virtual machine it would actually recreate it on one of the other nodes for you But of course you would have lost any data that was there with shared storage. You don't lose the data Or is if you're booting from From cinder as well Yes Yes Yes Yes, you can Yes At the moment. Yes says So for the external user they will lost connectivity potentially for up to about 90 seconds At this time As we Perfect this it will hopefully get shorter They're hoping to get within 30 seconds. That's all right in fact one of the Processes you see keep popping up here is the neutron open v-switch and if that's one of the reasons why it became Very busy is because it picked up the new networking when the node moved over but don't confuse this with live migration The customer using a service will lose connection It's not going to be reestablished automatically will need to Recreate the TCP connection to his last host it's not like in the case of a live migration where we maintain the full TCP flow Right because you've lost a host in this particular case Yeah We are not the only thing that is being Restored is what was safe to disk and TCP connection status is only memory thing. We don't do memory copy yet Well, I don't know if we'll ever do that Any other questions? This is the node rebooting I was wondering what was taken so long So I found it So the reference architecture is built on one set of platform the r630 for all the Computes controllers and what we call a solution admin host, which is what is used to deploy the solution with The seph nodes are power edge our 730 xd's We do allow power edge our 430s and or power edge our 730s as optional compute nodes But not controllers at this time Maximum nodes at this time is three racks worth, which is approximately 60 nodes Which is a lot of VM already And let's see Nova one is now online. So theoretically So again, it's not pacemaker that we're well for this particular function It's not pacemaker that we're using but pacemaker remote It starts with the same name as the same philosophy, but works very differently And it's a much more scalable design for cloud project Go check the differences. They are quite significant and we Well, we are using pacemaker for the high availability of the controllers Which are a small group of server within the scalability of pacemaker all-style for the in order to be able to support 60 node or even further than this we needed to Use another project and pacemaker formal, but which is called pacemaker remote And as you can see now that it's back online pacemaker is noticed it and now everything has it being used again a Hybrid cloud we do not have support of that at this time. Is it possible? Yes so if as Somebody else mentioned earlier. You are adding a tool such as cloud forms To manage your environment, then you have this hybridity enabled with the current solution Because cloud form is a tool that allows to use multiple providers one for open stack one for AWS one for VMware at the same time and relaunched the same operation on Any of the provider Simultaneously sequentially whatever workflow you you wish to be using however, you have to Make sure that you design your deployment of your application in a way that is Reusable across multiple clouds and for this may I think that's one of the reason why we acquired Ansible last week You can change everything you want We just guarantee simplicity So if you stick with the design so the goal of the reference architecture is to allow you to be able to come up quickly And effectively we've been we've spent many hours like I said the this demo was literally put together We had it running last week Somebody hopped on there and erased one of the servers and one of my engineers in the last 24 hours Rebuilt it and the only reason we were able to do that is because we can repeat the installations on this hardware consistently and The goal is to be allow you to get up run and Be able to start working on your applications quickly and effectively in a known good open stack environment When you say someone it was actually someone from red at it not intentionally that decided to Install software that reset the environment Happens just before the demo, you know the special demo effect Fort fortunately someone knows that yesterday Yes, okay So the the very next one we're going to benefit from is the capacity to do rolling upgrades This is something that is joint work from Dell Intel and red at As part of the end run for the enterprise So basically the problem we have is when you do an upgrade right now You need to upgrade all of the nodes and the controller At the same time why because we don't support version mismatch Right and this is not acceptable in real life You don't want to have to bring everything down and everything back up Well, you don't have a choice at this point, but if you could avoid it that would be a lot better if you could do You know a great node one when I'm done. I do know to or do it by little groups What's the work that we are doing upstream is introducing versioned objects in all the Talks that can be happening between the the various component of open stack so that they that will allow us to have version mismatch one version difference between the controller and the nodes and other things like that that's Mostly landed in Liberty. We still need a few more things in Mitaka for it to be fully operational And we still have quite a few idea for the future, but let's only talk to about what is underway already So I do have up on the screen the QRQ for if you're interested in the reference architecture that we have out You can hit that and it'll let you download it quickly and easily Otherwise just search for Dell opens Dell red hat open stack reference architecture in Google and you'll find it on the Dell website No other questions. Thank you very much


Hi y'all she was seven so I'm back. Yes, and I have something to talk about though. Okay, first of all Let's just get this in There first because a lot of people will comment because they don't know my history. I'm married I'm married to a man who has a very good career. I don't have to work I can stay home all day and do whatever I want. Okay, let's just get that out of the way and And I'm not bragging or anything. It's just a lot of people that comment They are automatically I assume I'm an angry bitter single female, but I'm not I'm I'm just I'm trying to help my friends go I'm trying to help these other women get to where they want to get and Look for warning signs and the skip dating the loser men. Okay. That's what I'm trying to do. I helped one of my friends Go from Hanging out with losers to marrying a rich man. Okay. I helped her. I did that. I helped her. Yes, I did I'm gonna take credit for that So I'm trying to help other people do the same thing to get out of their Ways when I first met my friend She was into looks only into looks only into looks pretty boys Those pretty boys wouldn't even buy her a drink They would use her up toss her to side not call her back You know, so She started hanging around me. We met right Even though I was already dating somebody We wasn't super serious at that time. So I showed her how the game was played. We would go out. I Would sit at the bar. I Would I would just sit there. I Would buy my own drink and I Wouldn't look at anybody. I was just Yes, I wouldn't look at anybody I Wouldn't talk to anybody. I would even I would just be drinking my drink and talking to her and Lo and behold a man would come over and you know offer to buy us both another drink and Would sit down have a conversation and you know, I Would show her how to ignore people and have them come to you because if you're steady looking at somebody from across the bar Begging for their attention, you know flirting with them. That shows that you're very desperate Now women don't need to do that because men are automatically gonna come to them if they're ignoring them If they look like they're having a good time already if they don't look like they need a man That's when the man comes. Okay, if they're just like It totally ignored, you know There's like I wonder what she's got going on.  She starts upping her game. She starts going to nice places instead of the not so nice places She starts hanging out with me. She starts getting approached by men with money She starts getting relationships With men with money.  He bought her a business. Okay? And she was not the most beautiful woman in the world and I'm gonna tell you that she was always a little bit kind of jealous of me But it wasn't what was here. It was what was here was her game She got really good at it because I taught her and she saw me in action. Okay. She saw me go from Living at my mom's house to living in a penthouse, okay so To make a long story short I'm trying to help y'all and I know a lot of men get mad because They don't want women to have high standards anymore. They want y'all to accept whatever they got They don't want to have to work hard anymore. They don't want to have to put in any effort They want everything handed to them on a silver platter because a lot of men Weren't raised to be hard workers. They didn't see a lot of men weren't weren't raised to be hard workers anymore They didn't see the man doing all this isn't that you know, there's that they saw their mom doing it So now they're expecting women to do what their mom did for them and that's not how it's supposed to be So if you come across a man like that, you gotta you gotta say, you know what? I'm sorry You know, I don't have room in my life for a child right now Or another child I gotta move it along, you know And if they if they don't understand just just leave them wondering Leave them wondering because if they haven't figured it out by now, they really need to sit down and think about that one So what you want is a man who's very masculine who has Gentleman qualities you want a man who will pull out your seat Who will ask you on a date to a real restaurant? Who will pay for your drinks your food and probably a nightcap or whatever Wherever y'all did who will pay for everything who actually put effort and thought into the date who planned it out Who has money in their bank account to take a woman out? Okay? That's you don't need to be struggling and working with these guys just so they can Say that they had a date with you. No, they shouldn't even be dating if they can't afford to and and that's just point blank They can take that money that they can save up that little money and go buy a hooker because Most men date at a young age for a certain reason if he's not willing to pay for your dinner What makes you think he's willing to accept you as a wife? Okay, so By past those kind of men suggest they go get a hooker and move on to the men who are serious You know who really wants you to? Who really want to get to know you who are still gentlemen, you know equal rights for females does not mean that Men have to stop being gentlemen, you know a lot of these guys the MGTOW guys men who go their own way Believe that since females have equal rights now that they don't have to pay for our dates anymore so They really think that it gives them the right to stop being a gentleman and what female is impressed by a man Who's not a gentleman?  It's it. It's a scientific fact.  I'm gonna have to pay this.   Why am I even the bed with this loser?  Oh my god. What if we get married? Oh my god. What if we buy this big house? Oh my god, I feel so good with this guy. He's so he's so Wonderful he brought me roses. He took me to the Spencer there I think and all this stuff all this positive stuff and it's raising their vibration and they're getting ready to just explode all over the place because This man can do way more for them. This man can Do so much when the other guy has done so little, you know, so Even if the man is not that good a bit There's the lady will still most likely be more turned on by him because of what he can do for her and That's just how women's brains are set up. We're scientifically accustomed and Attracted to comfort. Okay. If y'all mills haven't figured that out by now I'm trying to tell you women like comfort women like to be in a place that feels safe and secure and nice We don't like to just be Accepted, you know, we don't want to accept just whatever you got There was this guy who wanted to marry me a long time ago and he thought he had his stuff together He had he owned a house He had a brand new truck. This is the net. So one day he invited me to his house. I Walk in that house. It's It's not nice. Okay. It's like in a bad part of town.  It looked like a shack or haunted shack and You know, I I stayed for a little while Until it was getting late and I said, okay, well, thank you for inviting me to your house He's like, I just want to be serious with you. I want a wife There's all this can be yours and I'm like No, thanks, I Said no, thank you. I'm not ready to get married and The truth was I wouldn't get ready to get married and live in the ghetto. No, I don't want that I don't want your house Yeah, you might own it, but I don't want to live there. I don't want that environment. No, you got to do better guys sell this house as I Suggested he sell it and put it on a down payment to another house. He was like, well, I Already own this house. I'm like, well, you need to find a different type of wife because I'm not living in this neighborhood y'all So He was basically obsessed with me. He would call my mom's house Every day every day Even after I had moved out He would I mean he was obsessed with me. Uh, I told him I couldn't marry him because of where he lived and I Can't live like that y'all and my mom's like you need to tell that man to stop calling this house I said, well, just tell him I'm married Me he stopped calling it. I wouldn't really marry but I just told her to tell him that so that he would leave me alone so Y'all and I know a lot of guys will say well, you don't look like you're all that well Imagine me 15 years ago. I was very much all that. Okay, and I'm not ashamed to admit it Okay, you got to have self-esteem to make it in this world 15 years ago.  Yep. I can say it cuz I'm that old so Yeah, when I met my husband, which was 2001 He thought he had won the lottery So yes And we've grown we've had we've had a family. We've got kids. We've got dogs We've got houses. We've got cars together and he likes me just the way I am and Nothing, you know could be better, you know, he tells me I don't have to work He doesn't ever want me to go to go to work. He's already told me you're your best Right here where you are. You don't need to go out work for nobody else because he already knows He already knows the best place For especially a woman with young kids is with her kids You know Do you have so many people raising other people's kids and the kid doesn't even really know their parent? I like my mom worked a lot. I don't there's still stuff.  They know my favorite this They know my favorite that they know my favorite show my favorite song They know my favorite food. They know all the stories. I told growing up. I mean, they knew all the stories of me growing up They know everything about me. Okay And they have a father figure who shows an example of a provider Protector man who goes out to work brings home the money takes care of the kids And stuff like that.     Men if you had high standards, our standards would be normal You don't have high standards. You have low standards mediocre standards. You're lazy.


Enrollment stages for online courses. Once you have decided which online course is right for you, applying and getting started with the course is very easy. Just click the Apply Now button and fill out your information on the application form. The form is simple and straightforward and only takes less than a minute to fill out. The application is completely free and comes with no obligation. Once you have submitted your payment, you will be sent your login information for your course control panel within minutes and you will be able to begin the course straight away. Online courses can be purchased with a credit card, debit card, international bank transfer, PayPal payment, Western Union or MoneyGram Money transfer. Please visit www.teflcore.net to apply for your course. We look forward to helping you teach English as a foreign language in the destination of your choice.


Everybody forced here ripping Eight or not a ten boxes here for Tom see Tom has six 2019 bowman chrome hobby boxes and for 2023 tops chrome Breakers delight boxes. Let's do the bowman chrome first best of luck Tom I haven't ripped this much bowman chrome at one time, but 2019 ever so hopefully we hit something super nice 19 chrome I mean you got rookie orders like Tatis and Alonzo kind of lurking in there I Forget the big first bowman chase is um, I Think our Elvis Martinez is in this I'm trying to think of the other ones No, it only hit it. I know that These will probably a little clingy to each other so this might take a bit. Yeah Fractor Peralta to 499 David Peralta, I don't know why I didn't throw that Darwin's in the way these Super quick through these so this probably it after this tonight guys They're probably still summer for tomorrow. I don't know. I'm not sure what time Sam finishes tomorrow, but they're probably still some room Gold first bowman Connor Pilkington 30 of 50. Yeah. Oh, Tony was Yeah, Nico Horner insert auto out of 150. It's a decent name right there Sam Roger Roger Feltner Terrang Israel Panetta Chance Adams Dakota Hudson rookie got Rwanzi Contreras Gregory Soto Come on. Come on Corbin Burns rookie in there. I think Nick Madrigal Castellanos Fractor is to 499 is Lazaro Armenteros auto Sam Henchies Base auto All right, these are better. I was in there. There's a Vlad jr. Rookie base Whitlock Red Sox legend. All right Come on bigger autos this time They have a gold first bowman not the biggest name All right guys, what's the what's the final conversation of the night here? There I such a big culprit. Yeah, thank you, Tony Well, now wonder when Bowman chrome 23 comes out Keston here, uh, shouldn't be too far off It's usually like early fall so when's draft I said never drive this gonna be December. I bet said it Mullins rookie base. I'm assuming that's what we'll see Don't don't cruise. Yes, there we go. Skeens probably Refracture to 499 color Muller Matt said I sigh with the white banister home alone Well, first of all, I don't know what that means. I know what that means, but I don't know like How that came up a Francisco Morales first woman refractor out of to 499 Is that Matt the person that doesn't like cheese on his burgers? Is that the Matt you're talking you're referring to Matt he literally just likes And think just burger and bun like patty and bun. I don't know anything else We were fractured 150 Ian Kinzler as a Padre Go to Hudson rookie Yeah, Jared Kellnick. Yeah, Matt definitely roots for the other team that faces the Titans and remember the Titans purple shimmer Mackenzie Gore Annie's rooting for the guards in a Longest yard first woman auto Brian a break you bowman serve latty jr. Base rookie. All right, come on now bowman chrome Let us down What bandits do what they're doing there? They were doing things right and then the Coli Culkin messed everything up Should have done better what bandits was my fantasy team name for a while though And my dynasty league got atomic to 150 Sully Matias Stat tracker a big time-membered rookie or something come on Quantral rookie Corman insert. Oh Zach Brown. He's in a band. Yeah Devours refractor to 499 Jared Kellnick Yeah, yeah, that was a D. I think we gave it a D first woman auto Oh How many bands we didn't hear that night that we self-degraded Trying to think of what we didn't hear that we did it or we did that we didn't Rochio Kirk. Oh, yeah, we were in the Jonas Brothers Isn't there to 250 bright sharper purple purple shimmer coming up is a Christian Robinson Fracture first woman auto is cam rogerner to 499 rogerner regular In a green refractor 99 at Francisco lindore not the best first three boxes see something nice here Yeah, I guess this will be the last one tonight. Let's take us to right about a little after 1150 very little very few Like a minute a minute What if they decided to do the they're like maintenance early surprise Just bust in the door run of the wall to plug the internet Patrick Sandoval first moment nice Sandoval pretty solid there. He's good Yeah, that's exactly what happens. They just The doorbell were like, what is that? Like go check it out, Donny.  He just ripped everything off now.  There's simply about first moment To somebody no the fracture to 499 Esteban Florial Tatis rookie Tess the moto Jake Bowers Bray you Howdy Tala is purple to 250 Victor Robles Mookie is a red sock still Oh happy days Why you guys your husband?   Is that like just the history of Boston red socks or not really not recently but Just terrible like the past few years. Yeah ever since then it's been like that Just not great contracts and bad decisions with personnel and treating players not the best in that regard Doesn't sound like I don't play on the Boston Red Sox Ownership is not has not been the best. They got to turn it around But the same ownership group has also won four world series in the past 20 years, so But they're also the most expensive team to go see play the most expensive ticket price in the majors. Really? Yeah No, I think the red socks are because it's Fenway and all that purple shimmery Nolan Jones And there's like less seats in the stadium like by good bit It's more expensive pretty much Are they like one of those teams that want to like be historic and not get any stadium Kind of yeah, I mean they've renovated the the crap out of fenway The past 20 years ownership group has which is good Alonzo and tatsi's base Purple refractor to 250 is Nolan Gorman Nice Gorman prospect card first moment auto is Carlos Hernandez Say dj steward rookie Jose Devers Come on come on Where's the big hit green refractor to 99 is mitchell white Brandon lau rookie. I think it's my Mitch white now. I think I think He's in the white stripes first moment auto of davie garcia base Zane isaac gilliam your last bowman chrome hobby then four breakers delights Victor victor mesa purple refractor of Hudson potza 250 Hudson pots Pilanzo tatsi's rookies auto of san hengis these Garcia One more 19 bowman chrome auto coming up here at some point green refractor to 99 of six though Sanchez rookie refractor williams estadillo to 499 Patrick Mullins base estadillo And first moment auto is a francisco morales base morales first moment auto Garcia morales Eloi rookie that'll do it for 19 bowman chrome Four breakers delight from 2022 best of luck tom. It's really he's gonna kick in Hopefully the heat kicks up here for you man Whoa, whoa, whoa Maybe we'll see the legend auto Refractors up front. We got hunter brown clanna hand prato mj. Melendez josh smith rookie and a vladi jr Got an aqua out of 199 robbie ray Green youth quake join menez says 39 to 99 magenta sedrick Mullins to 399 rookie on a joey weimer On the base and a rookie refractor out of yiner diaz to 499 youth quake yvonne her era. All right, that was an all right box One big color right refractors garret cull jacob bigrom rookie michael stafanich Got cody clemens cal rally and matthew liberator magenta speckle out of 350 brandon lough Purple refractor charlie blackman out of 250 with a color match Got a gold youth quake rois lewis 20 of 50 Orange is next and it is a rookie auto shea langleers 14 of 25 It's true orange Zach I choose neither What is that? Is that a flavor of something or you just want me to choose? I think it's just Nice langleers gable merano base rookie auto As of good box there tristan casas youth quake I choose to go hungry I guess i'll go Cool sour cream. Yeah, I think I'd go like I'd go that too. I don't like either one. I have them both together You want the hot and cool mixture? Yeah, what does that get you a five gum? What is it something? What's your senses or here is it? Stimulate your senses or whatever. I don't know Rookie refractor volasquez peguero india mccutchen J ram and a zhok petersen blue sonar rookie osfor colas out of 125 aqua lava to 199 kyle schwerber gold balton varshow 13 of 50 purple rookie auto ezekiel tovar 191 of 250 Good color match there. Good player Base rookie auto brice johnson and a youth quake of cj abrams Have you heard sam sonar thing? It's really bad. Yeah, it's not even it's not even. Yeah, exactly It's not anything. It's just just nonsense. It's pretty bad Sam All b-plus are worse f-plus All right refractors brandon crawford blackman yachty molina calrally cody clemens and matthew libertore In orange youth quake of garret michael Nice one there 14 to 25 magenta charlie blackman to 399 In magenta charlie blackman to 399 Hmm. I'm sure 333 and 14 Black by many diamond rookie auto is an oswald paraza Nice one there and rookie base auto louis varland youth quake moneces Okay, that does it for the 10 boxes tom as always appreciate the order We'll see you soon. Thank you. Thank you