Hello, my name is Pavel Shimelda, I'm working currently for Red Hat. I was actually working for like one year on the Network Manager project. So I would like to tell you that I'm no longer officially on this project inside Red Hat, but here in the open source world, so I'm still an upstream contributor, I'm still quite active, it's just not my everyday work, and I cannot really speak for all the developers of Network Manager, because I have some vision, they have some personal visions as well, so we often try to put our visions together and do something useful. I participated on a major redesign of the whole thing, which has been done during past like three quarters of a year, so it's quite a new thing, it's not something you can see in the released versions of Network Manager, so you can learn what's going on and what's up if you don't follow my English closely sometimes even the mailing list and stuff like that don't show you everything. My personal focus was Network Manager, Linux kernel interoperability and the whole part of the code that deal with the Linux kernel configuration, so it's pretty much a good topic for this conference. As well, I'm very much focused in address and routing configuration stuff, which is pretty much related to what the kernel does, and there are some other things I've been doing, like the key file configuration, which is the native Network Manager configuration format, we have a couple of other formats supported such as Red Hat's IFCFG files, and I've also done something about testing and stuff like that. Very, very briefly about Network Manager, there's a couple of points what I would expect for Network Configuration service to achieve, so it's reading configuration from files, but not only that, it's simple scripts and distributions like Fedora and Debian and so on, always could treat configuration files and do something with that, but what we expect with a modern Network Configuration service is to allow other tools, other services to talk to the service and change the configuration of the fly, which is a bit important for stuff like virtualization and so on. Also, the other tools need to learn about the changes, so we need to be able to notify them, and there has to be done some actual configuration, so we need to turn the internal state into kernel configuration and configuration of other tools like the ACB clients and TeamDemon for machines that use teaming and so on. So this is quite a lot of stuff, but it's very self-contained because you know usually exactly what you want to work, the complexity lies in how to achieve that and how to interoperate it. I think really the most of the work with Network Manager is about interoperability and nothing else. We have a stable branch where you don't see much from what I will be talking about here. There are some important fixes. I mean, during the development of the branch, there are some important fixes, otherwise it has its new features as well. There are recent changes, recent releases for OS5 support, but that's something I'm not really interested so much in, so I'll skip that quickly. And there's what we call 0910, which has not been released, and this is the topic of the talk. So first of all, it would be good to know why there had to be a larger-scale redesign or what was the purpose of it. And traditionally, Network Manager was used for desktops and laptops. I think most of you knew about this already, who's using Network Manager on some laptop or desktop environment, most of you would say, and who's using Network Manager on a server? Okay, yeah, that's exactly why the redesign was started, because nobody wants to use Network Manager on server, but there are some difficulties with that because if you use different tools for servers, different tools for laptops and so on, what should I do if I want to install virtualization on my laptop and experiment and at the same time connect it to the Wi-Fi and so on? So is it a server or is it a laptop still? That's a big problem. There are also some use cases for a dynamic service, even for servers. For example, DHCP is sometimes useful even for servers. Some people use it. Is there anyone who uses DHCP configuration on a server here? Do you know about someone? I think maybe. It depends. A possible use case is if you have a small server, which is more like a network of the storage or something like that, and you bring it from one network to another, it's a typical server because it serves the storage, the files, but it's often easily integrated into the network by just connecting it. Some of you said you're disabling network manager for servers. Do you have any specific reasons? Yeah, yeah. So this is actually my third point here. Network manager in its current release versions often does something that breaks the configuration that is prepared by your other tools. So that is a big problem and it's maybe the main reason why the redesign was started. There are some minor issues that we want to have support for in interim FS and that we want to be able to restart or all of the processes a network manager has when there's a security update with the least possible disturbance of the network configuration. So very simply you install an update of either a network manager or some tool that is used by network manager, then you want to restart network manager, but you want to still continue with your network connections, for example, DCB connections. There's one point that makes this a little bit harder and that the network manager team or network manager project still tries to stay compatible with its previous versions. There has not been made any decision to break compatibility again and such a decision is never, never popular. So let's say we need to look at the inner workings a little bit because all the features are related to the core workings of network manager. At the beginning we need to read the on-disk files, on-disk configuration and we need to also start tracking devices that we find in the system. We need to initialize the network interfaces. This is really, really easy, but we also need to initialize devices that appear during the runtime so that it gets a little bit complicated. We need to, for each device, check the existing kernel configuration to see how the device is configured. We actually, with the new code, generate a connection profile or a connection object which is the same type of object that we read from the files on the disks. So we can then compare the configuration. You can imagine that we read a connection configuration from disk as well as from the kernel and other tools possibly. On the disk there may be multiple configurations for the same device or there may be a configuration that can be applied to any device. So that's quite a lot of options, quite a lot of stuff that needs to be solved. And then when we can compare the existing configuration with, let's say, the list of configurations available for the device in network manager, we need to do some decision. This is a critical point because there we decide whether network manager will touch the device at all. This is so important because when you have already some configuration from other tools that you need to be kept from breaking by network manager, this is the point where you want network manager to decide not to work with it, not to do anything with it. There's also a possibility to configure these explicitly so you can blacklist devices in network manager and not manage them at all. But this is not so useful for virtualization because with virtualization you create all the devices dynamically and you need network manager to just detect that it's not meant for it to manage. Then there are some device-specific initialization actions. For example, if you have Ethernet, network manager sets the Ethernet up. It's necessary, at least from the stop point of view. It's a little bit trickier from the Sarah point of view. Normally you don't apply any connections to a device that's not connected by a cable to some other device, let's say switch. So the only way to detect carrier is to already allow the device to communicate over the wire. It's level one or level two communication, but you still need it. If we left the device down, we would not get the carrier detection information. This may be a problem in some cases because sometimes you just don't want that. So again, step back to decide about device management and you have to make network manager ignore your device if this is not what you want. Then there's a purely desktop feature to generate a default profile when there's no configuration detected from the kernel and as well there's no configuration found on the disk. Typically Ethernet devices on laptops and desktops are just connected using DHCP. So here that's not new. The new thing is that you can explicitly disable it. It's a couple of options already that you would probably like to use on servers. The network manager project now ships a configuration file that's called server.conf and that carries a couple of usual server settings for you. So you can just take this file and drop it in a special directory for that and you're done with basic server configuration. Because by default we still want to keep the same behavior so the default behavior is more suitable for laptops. Then if we did not detect any configuration but found some suitable configuration on the disk or the default one was generated, we need to activate it. There's also a similar procedure. If we actually found a configuration on the disk that matches the actual configuration of the device imagine you're booting up a system. In your NFS there's some network configuration. You start network manager in the real system. This is a newly started service that reads the kernel configuration and sees that the kernel configuration matches what it would configure otherwise or matches one of the possibilities it could configure otherwise. So then we just need to pick up the connection as it is and there are some of the steps from profile activation is used as well. Some of the steps are skipped because they are not needed. That's how it works. I will not go very carefully through this list. Just that some of the supported devices in network manager are pretty new. It's the teaming which is a replacement for bonding. It's devices like TAN, TAP, tunnels using GRE, McVeeLan, McVeeTap. These are just new additions. And there's something that's a little bit more interesting than the individual device types and that's generic device support. That's a possibility to use network manager to manage a device whose low level configuration is handled by some other tool. It does not sound so amazing like that but actually there was a longstanding problem of network manager not actually detecting the real network configuration. For example, if you had default routes set by another tool and it went through a device not managed by network manager, network manager would report that we are not connected. For example, we are not connected to the internet in these terms. This will now be different because we can manage just any device and we can follow the state of devices that are not managed. Even if network manager doesn't touch the configuration of devices it needs to follow the information that the kernel provides. For example, if there's a default route through let's say a bridge that is set up by virtualization tools, network manager does not manage the bridge but it can see that there's a default route and it will not make configuration changes that would break that. This is a theory so far. It's not yet committed into Git. There are some branches with some development so be a little bit careful when testing it even if you work with the Gitmaster. Not everything is there yet. There's a natural conclusion of what I was talking about and that's that the state of network manager devices or network manager managed or even unmanaged devices needs to be kept and does not necessarily reflect the on-disk configuration. This is a big change because so far network managers internal configuration or untimed configuration was always the same as the configuration written on the disk. This is no longer the case. You have runtime connection profiles. Those can receive information not only from the disk files but also from the kernel for example. So if you use tools like IP route or IF config to add IP addresses then network manager is capable of accepting those addresses and adding them to its internal configuration. If you then use a tool, command line tool for a network manager called nmcli you could eventually save the resulting configuration to again have the same state on the disk as you have in runtime instance. There is some notion about active connections because they have some attributes that do not belong to configuration stored on the disk. For example, a list of dynamic addresses doesn't really belong to the on-disk configuration but is still kept at runtime network manager. The same is the list of DNS servers taken from DHCP and so on. So many examples of data that is important that sometimes needs to be queried by other tools and that do not belong to the on-disk configuration. There are a number of questions about the behavior of disconnected devices as well as the behavior of devices that are for some reason unmanaged or not managed by network manager. Be it auto detection that the device was created or configured by a different tool or be it explicit configuration doesn't matter so much. So if you have runtime connections, you also have on-disk connections there is a relation between them. Typically on-disk connections when network manager stars are turned into runtime connections you can have connections at runtime that don't have there on-disk counterparts or are different. Typically network manager or the previous versions of network manager always reloaded the configuration when you modify the files. It was using kernel's I-notify mechanism which is not really very good for this purpose because various tools perform the editing in various ways so sometimes you end up with network manager reading something that was not really meant as a final configuration. Sometimes you want to add some configuration that depends on another configuration. You don't want to track all the dependencies and put things in the configuration in the right order. You want simply to make the changes then ask for an explicit reload. This is already possible with Gitmaster as far as I know and it is possible already to disable the autoreal feature. It's still being discussed because the last thing was that LibVid has problems with that. Everybody expected or at least everybody I know expected that turning off automatic reloading is a great thing but LibVirt now just did not know what to do to make network manager reload connections again. So we realized network manager only exposes support for reloading all connections at once but it's not what they wanted and so on and so on. Those are implementation details but I'm talking about them just to show you that there are still minor glitches that you see each time you make any modifications. There's nothing like the way A is wrong, the way B is right, change the behavior from A to B and you're done with it. It's not like that. Any changes that are reflected in the API are really, really difficult to sell to the other projects. So as I said network manager can accept external events. Those are not only new addresses like I talked about but those are also edit or removed interfaces because in Linux you have lots of software interfaces that you can create and destroy bridges, bonds and so on. So this is also something that needs to be acted upon. There needs to be some logging support that's already quite good and that's for now. At the beginning I was briefly talking about the use case where you want to take over some existing configurations. So I already told you about the reasons to do that. There are just some let's say challenges maybe in doing that because if you want a configuration to be taken over then that means you have to be able to leave the configuration still working when quitting network manager. My opinion is that network manager or any other system demon when it stopped that it should stop all processes that it used including stuff like WPA's application for Wi-Fi including stuff like DACP client and so on and so on. That's because if you want to start a service again you always want to have all of those services in their fresh state or you want new versions of them that you just installed to be already used for security reasons. So there is a question which connections can be left working for taking over. So far it's quite easy with Ethernet unless of course you are using 801.1.x which is via VPA's applicant. So whenever you are using WPA as applicant you cannot leave the connections working. That means secure Ethernet that means Wi-Fi. For Wi-Fi it's not a big problem because Wi-Fi is also often disconnected for other reasons so that's not a big deal. But also you need to look at the upper layers like DHCP, router advertisement and so on. For DHCP on IPv4 it's pretty easy because the implementation of the DHCP network manager was simply a call to DH client and an action script or rather action executable which is given to DH clients to use instead of its usual actions. So when DH client asks for the configuration information the action executable is used to convey the information to network manager. Otherwise normally if you run DH client by hand it's directly configuring the kernel which is wrong because in the context of network manager it is wrong because you might want to run VPN software on top of the Ethernet and so on. So you never know whether the configuration is final unless it goes to network manager. With router advertisement there was a big problem because first of all router discovery in the kernel the client side of router discovery is implemented in the kernel it's really buggy, it does do many many things wrong so we considered the option to fix it somewhere. When we wanted to fix it we realized that even if we fix all of the individual problems we still have the largest problem and that is that the router discovery support in kernel writes the configuration directly to the routing tables and to the list of addresses and so on. So this is totally unsuitable for the same reasons and we had to switch to user space implementation. It was just an example of what needs to be done for proper connection takeover. Now we can work easily with DACP for IPv4 as well as router discovery as well as DACP for IPv6 all of those are supported. We can possibly take over software devices. It's not a big problem. We just need to compare them with the configuration we have and either accept them or usually when a software device does not match any known configuration in network manager that means it's created by another tool so we don't want to manage it. Even things as simple as the address list have some improvements now we found quite a lot of interesting things in there because typically if you want to add an IP address to your device you need to specify the device, you need to specify the address family and you need to give it the address data and the length of the prefix so that an automatic route can be created to contact other machines on the local network. So this is pretty easy but formerly network manager also used gateway in its internal representation of the address which does not match the kernel and does not match how things work so this will be eventually removed but it did not include the lifetime of the address which is quite funny because the lifetime is normally not very useful for you because either the address is working or it's already expired but for network manager the lifetime can be also used to see whether the address is dynamic or not in dynamic I mean even DACP for IPv4 as that one did not use the lifetime even in the kernel which we changed that, we asked a colleague that knows a bit more about the kernel to add support to address lifetimes to Linux's IPv4 stack so that now if network manager is looking at the interface and looking at a list of addresses it can distinguish which addresses are dynamic and which are static Dynamic addresses from the kernel, from the kernel auto-discovery are easy to see because they have lifetimes Dynamic addresses from network manager's DH client instance is easy to see as well it's the same, there's still a problem that by default if you run DH client directly it does not use the lifetime at all so in that case you will not detect that properly and network manager will think the addresses are static that's not such a big problem because usually you expect to take over configuration in network manager from previous instance of network manager there's one small thing we may be adding also it's the support for address labels which is usually just plain old Linux alias device support it's only because the IF configuration is built on top of that so for full compatibility we can't live without that but this is up to the regular developers from Red Hat who need to get this supported it's very similar if you look at the routes the lifetime is not currently implemented as it's not as important as with addresses but eventually it will be there as well we currently only support single hop routes that means you are sending the packets to just one router around you're supporting just one gateway on the network I'm a little bit oversimplifying it but that's not something I would like to talk about here for a long time still the default gateway information which originally was bound to addresses will not be moved to the internal list of routes because it needs more special treatment than ordinary routes often if you have a configuration that does not make it to be the default one for default routing imagine a computer with two Ethernet devices both connected to some networks typically you can have only one default route so one of them has to be chosen the same is for DNS which also needs only one of the configuration to be chosen there's the special handling normally if those two networks are distinct all other routes can be edited from both configurations there's one new thing that I did not even yet talk about with the other developers but we've talked about it with people from the community it's policy routing which is typically not supported by default or not configured by default in Linux but that's a pretty neat thing because if you have two links to the internet it's useful in very simple use cases where one of the links is the main one and the second one is only for maintenance purposes if you disable one of them for example if you disable the main connectivity because there's some problem security attack or something like that then because the default route goes through that one you typically cannot connect to the computer anymore so this feature is about the ability to connect to any of the public addresses they don't need to be fully public but to connect over any of the channels and to choose the channel from outside by choosing the IP address of the machine the only thing, the only technical thing you want from the machine is to answer you over the same channel, answer you over the same network that's all if that is done there's another thing that can be used and it's called multi-path TCP it's a protocol that allows you to switch between multiple TCP channels so if you disconnect from one of the networks you can just continue the connection over the other one if you connect back and then disconnect the second one you can continue the connection of the first one technically you have connections open over all of the interfaces but usually you're only using one for sending the data and the other ones are backup if you want to know more about this either you can look for it on the internet or you can send me an email at the end of the presentation there will be again a slide with contacts so you should be able to reach me easily when I was talking about the dynamic configuration I did not talk much into the details but there's just a couple of things because when it's done, when it's finished it's very easy to look at it because we just decided to perform all of the network configuration protocols in user space which was a good thing and then simply the core network manager decides what to do with the data so there's quite a lot of flexibility recently there were some minor improvements with the dynamic configuration it was about the ACP for IPv6 DUID support it's also very simple because we are just reusing ETC machine ID from SystemD to construct a unique identifier that's I don't know if you heard about how it works with the ACP v6 and that you can't really use MAC addresses for identifying client computers as you did with IPv4 and so on again if you want to go into details we can talk about it somewhere you can often find me at the Fedora booth so we can talk about it outside of the talk there's one thing that I recently looked at and that's network manager IP connectivity methods I would like to show you if I'm connected, yes I started a page on the Fedora wiki and I'm trying to summarize the way IP configuration methods are used currently in network manager and also to propose some better solutions because currently I don't know if it's big enough, probably yes but let's try a little bit currently if you read through the table my advice is to read separately the blue lines and the green lines because it's the two separate protocol versions you can see that IPv4 supports disabled a special link local method, manual, automatic, and shared shared is for a connection sharing where the computer acts as a network at its translation router for the network it's like the classic one from who used to use Windows I used to use it in the time of Windows XP so for me that's the source if you look at IPv6 it's a little bit different there's a special ignore method that comes from the times when network manager did not support IPv6 properly it did you the favor of not touching the IPv6 configuration in the kernel at all it's becoming less and less useful so we may eventually phase it out but there's nothing that would be called disabled in IPv6 and as well if you look at the column of link local you can see that there's a difference between IPv4 and IPv6 IPv4 does not use link local addresses at all except when you use the link local method so link local IPv4 addresses are used usually for fallback situations where you don't have any DACP router you have directly connected computers or a couple of computers connected via a switch and all of them can fall back to link local method which is not a feature in network manager this is how it's typically used so it's not even supported in that way it's supported by Windows and Apple I think mostly but with IPv6 the link local address is always there because it's used for all of the other protocols so my idea is actually to break down all of those methods and use actually the features individually there are some possibilities you can get with that if you just say link local, manual, automatic and G is gateway for other hosts or shared you can construct a table of all possibilities some of the configurations don't make sense those are the gray ones some of the configurations actually have some method in network manager so this is how it already works but you can see many many combinations of possibilities that are not supported for some reason and one of them is what's called disabled in IPv4 IPv4 means that you don't have any link local address means that you don't have any manual address not any automatic, not any ACP address and connection sharing is turned off this is something we currently don't support with IPv6 and when we wanted to add this we realized there's a kernel problem because we can't turn off link local addresses in kernel which are indeed generated by the kernel so we don't have the choice in network manager either to add them or not as well we can work around this by disabling IPv6 entirely but there's some implementation issues in the kernel so there will be things to be researched in the kernel I will not go through all of them because it's just for those who are really really interested in the deep details and those of you can find this page and look at that there are some typical examples of things that are not supported for example it's a situation where you have IPv6 or is it? no sorry IPv4 you have IPv4 you want to have a link local address to be able to communicate over it anytime as is usual with IPv6 and that's all and that's currently not supported you can't use those two features together the same combination but for IPv6 is normally supported because in IPv6 the link local address is usually perceived as a must but if you just swap the first value whether you want the link local address or not you're getting to another line and it's when you want only only manual IPv6 address for IPv4 it's supported but if you want to have one manual IPv6 address it's possible it's even used by tools like OpenVZ which is a virtualization or container virtualization tool which sometimes just adds single IPv6 global addresses to your virtuals with a network manager you can't currently set this up because you can't simply disable the link local address and only use the global one that you set up like it was used with IPv4 this is not possible again this is not possible in the kernel so I hope I did not bore you to death with this table there are a couple of things that will need a bit more research and then we could end up with instead of having IPv4 method IPv6 method we could actually end up this is really just a proposal in a couple of configuration values that would allow you a lot of more flexible configurations including it's not the end of all tables but almost for example I heard about a new draft or maybe it was an older draft resurrected to only do the ACP on IPv6 I don't know how far it got but I heard it as an argument against my previous proposal so this modification counts with that possibility as well so you want to have a link local IPv6 address actually you need it in order to perform the ACP but you would want to explicitly skip the discovery with the current state of the art this is not possible according to the standards because the ACP version 6 cannot convey routing information but if there are some drafts to add stuff like that it could be possible so the final proposal is very very flexible and it would also allow you to do stuff like use link local addresses as fallback to AC a little bit I will need to fix this table a little bit if you ignore the header of the table it just should mean that you want to fallback to link local address after the ACP is tried without success so this is something we don't support currently but with a set of options like this it could be very easily supported because you would just choose to link local address and fallback so why am I showing you features we don't have? why am I showing you stuff that has not yet been even very much consulted because I just posted links to this page to various places where it's due for example to all related bugzilla reports those are listed at the bottom of the page you have the chance to look at stuff like this not only this particular thing you have the chance to look at the bugzilla and actually either by coding or by just answering or presenting your use cases you can change or you can affect how the future development of network mesh will be done so this is mostly the reason why am I showing you details like this one because you may have found something that constitutes a feature you would like or you would need and unless we can really justify it by real use cases it won't be there I will not much go into the details of connection sharing you can think yourself about challenges of connection sharing with IPv6 where network address translation is maybe not an option because applications may not be ready for it technically you can translate addresses you can do the same as you do with IPv4 but you may come into problems because applications just expect full global routeability of IPv6 addresses so this is something for thinking about there are some possibilities like DACP can provide you with addresses even for your other networks not only for your connection to the local network it's called prefix delegation you can read more about it it's all in theory there's one bug report for that on network manager upstream bugzilla so that people can put their ideas we are getting close to the end currently the DNS backends can do various things for you the core DNS support just writes ETC resolve conf which is a very basic or even stupid way to configure DNS we have support for DNS mask which can act as local resolver or local recursive name setter and with DNS mask it's also possible to direct some queries to some domains to their respective name servers for example if you're connecting to your company VPN you sometimes may have to use your company DNS servers for your company host names but you still may want to use the ordinary DNS servers for everything else so that's not possible with resolve conf that's possible with DNS mask which is supported unbound is not yet supported but that would allow you to do the same with some improvements as unbound does not need to be restarted for reconfiguration and it would also add you the support for DNS sec which is the main point of integrating unbound and network manager there have been already done some work using dispatcher D scripts my colleague Tomas Hossa was working on this and most of this feature is now done using the script it's not perfect but it's pretty good I think after rewrite to a module for network manager it will work much better I don't think I want to go into details about DNS sec here but there's again the same problem if you turn on DNS sec and require DNS sec validation for global DNS route then you can have a problem with your company host names and company name servers which you still need to resolve the company host names for you and as well you may need to not use the requirement for DNS sec validation for them because they probably don't support it and you need to have configuration that will turn the support for DNS sec pair your connection for example VPN it could even be a wired connection if you are in the company inside it doesn't matter so much what type of connection it is and you can have then configuration of DNS and DNS sec different for each interface and different globally as well the API is being improved that's the main message here the command line tool is now being improved so much that it can be used instead of the API the API is you can choose the bus for the API or you can use a library that sits on top of the bus it's up to you it's quite easy to interface with network manager from C or Python maybe some other languages just any language supporting D bus and so on so there's not much to talk about I think just the CLI you need to try it you need to install the git version or wait for the release and try the nmcli because before now the nmcli was not really usable for anything useful for anything real so try it and see what it can do for you network manager has four regular developers at adhat I'm not one of them anymore but there's a new guy so there are four again it has individual contributors like me it has distribution maintainers contributing to it I don't know if anyone is here at linuxcon from debian, susai, gen 2 and so on multiple people from gen 2 I forgot to mention ubuntu because there's some guy trying to do testing and so on people can help by trying the bugs by going through them explaining some more things to the reporters and so on currently it's mostly just the developers and me who do that using testing bug reports everything is good good for the project so it's not only one company project so it's a real open source project it has been getting better over the past one year so I hope it will get even better in the future as well that's all from me because there's no one going just after me to talk we have enough time for questions anyone can ask me about questions currently fireworld integration is done only by publishing zone information that means you can attach some zone it's really very similar to how windows firewalling works if you attach a public zone or work zone or something fireworld can then reconfigure the firewall for the specific device further network manager needs to add some rules to the kernel for network sharing so I'm mostly focusing those two things the second one is currently done by ip tables commands not fireworld which is a problem on systems where fireworld is used the zone for fireworld is based on the connection profile that is used for the interface so you can actually have multiple zones active if you have multiple interfaces and what you're asking for is to detect the local network to see whether this specific network should be marked as home or work or something else is it true? this would actually be implied by a feature to apply connections according to this criteria so it would not be a specific feature relating to fireworld integration but it's really a wanted feature to have a simple example I connect my computer by cable in the company I want network manager to detect where I am and I want to perform network configuration based on that including the zone this is a desired feature there's no one currently working on it contribution would be welcome of course but it's a rather complicated task not very complicated but still on the basic one more questions next February release is 20 actually I will apologize and avoid this question as this is up to the other developers who are also maintaining network manager in Fedora because if I answer some guesses here it's better to write them it's better to write either to mailing list or to enable them directly they're responsible for this I'm sorry the date? no it's based on the features and actually there are lots of features wanted for that release so we'll see the solution for distributions like Fedora which are a little bit more a beating edge than usual is usually to use snapshots from the Gitmaster yes yes it depends on how you define embedded environments because it was in the previous talk the question was asked but for example if I consider my home router as embedded I would like it to support VPNs as network manager does for example if it wasn't some sort of appliance that I can bring somewhere I also would like to use the VPNs I think the VPNs are currently the main driver because otherwise in OpenWRT there's an activity which is used by OpenWRT which seems to be also quite good for the purposes where you don't have desktop tools sitting on top and so on so yes, yes, I indeed do also for IPv6 configuration and stuff like that it depends on if you have a simpler tool that is good enough for you that might be more suitable than network manager but if you don't have such a tool network manager is not so big it's not so bloated as it's sometimes told by people so it can be used for its features even in embedded you ask a difficult question I gave a stupid answer, I know it but it really depends on the case so if that is all any questions can be asked via email or we can talk about stuff after we finish here thank you for your patience thank you for being here and we are finished


you know what I learned is trading is very lonely look at me I'm just in this room by myself with my iPhone recording this video and it's very tough to be a trader guys it's very tough to be an investor in these times and the truth of the matter is I mean if you want to succeed if you want to take this seriously if you want to give your best chance for success in this market then you must you must you must learn how to trade the right way


Hello, this is LaptopMedia, and today, we will show you how to open the Asus ZenBook 14 UM3402 and what's inside of it. Getting inside this device requires the removal of 7 Torx head screws. After that, take out the back rubber feet and undo the other 2 Philips head screws. Then, you can pry the bottom panel, starting from the front corners. Please remember, it would be of great help to us if you just hit the like button and subscribe to our channel. That would motivate us to make even more and better videos for you. Inside, we find a pretty large 75 Watt hours battery pack. It lasts for more than 14 hours of web browsing, or about 11 hours of video playback. To take it out, unplug the battery connector from the motherboard, and undo all 6 Philips head screws keeping it attached to the chassis. Here, the memory is soldered to the motherboard. There are configurations with 8 and 16 GB of LPDDR4X RAM, and we would advise you to get the larger option. Storage-wise, there is 1 M.2 PCI-EX4 slot, which fits Gen 3 drives. As you can see, the cooling setup comprises a single heat pipe, a side-mounted heat sink, and a fan. Furthermore, you can see that the VRMs have a metal heat spreader placed on top of them. If you'd like to see more disassembly videos of the latest notebooks we would highly appreciate if you hit the like button and subscribe to the channel.


In February 2021, the Apex Bank, that is the central bank of Nigeria's CBN, directed banks to close accounts of persons or entities involved in cryptocurrency transactions with India's systems. In a circular release to Deposit Money Banks, non-bank financial institutions and other financial institutions, the Apex Bank noted that these obedience to the directive would attract severe penalties. So far, 6 banks have been fined 1.31 billion Naira. Also on the show today, the United Nations Food Agency says world food prices jumped nearly 13% in March to a new record high as the war in Ukraine caused turmoil in markets for staple grains and edible oils. Now what's the implication of all of this? Welcome to Business Insight and Plus TV Africa. I am Justin Acadone. Before we get into the discussion proper here, a highlight of what went down in business Nigeria this week. Take a look. The federal government borrowed 2.2 trillion Naira from local investors in the first quarter of the year through federal government bonds, Treasury bills and the federal government savings bonds. This is part of effort to fund a 6.4 trillion Naira deficit spending in 2022 budgets. And this represents an 8.6% decline when compared to 2.4 trillion Naira representing 8.6% year on year decline from 2.43 trillion sold in quarter one 2021. But federal government also paid local investors 827 billion Naira for loans through mature Treasury bills, resulting in net borrowings of 1.93 trillion Naira from local investors in quarter one 2022. 2 million people will start receiving about 20 billion Naira from June this year as basic cash transfers and conditional cash transfers under the National Cash Transfer Program. The federal government would pay the 2 million people 5,000 Naira each. Over time, the number of people receiving cash transfers from the federal government has been increasing. In 2018, a total of 19 states were covered under the National Cash Transfer Program. This increased to 24 states in 2019 and moved up to 36 states and the FCT in 2022, covering 1.6 million people. Under the Cash Transfer Scheme, the federal government supports poor and vulnerable households with cash on a monthly basis. Nigerians have been reminded by the Central Bank of Nigeria CBN to avoid engaging with illegal and unregistered financial operators with who entice and scam members of the public with large profits. This was contained in a circular released on the CBN website. The Apex Bank told the public to check the websites of the CBN, the Securities and Exchange Commission, SEC, and other relevant member agencies of the FSRCC before investing in such companies and schemes. Some telecommunication subscribers were left stranded on Tuesday after telecom companies barred their lines from making calls following a directive from the federal government. On Monday, the federal government had directed telecom companies to enforce compliance with its national identification number subscriber identity model policy by blocking outgoing calls on all unlinked lines after the deadline for the same NIN verification expired on March 31. A former governor of a number of states, Peter Obi, says Nigerians now spend 100% of their salary to feed themselves. He said that Nigeria is in a crisis situation and that the federal government needs to focus on creating wealth. He also revealed his displeasure with the rising rate of insecurity and poverty in Nigeria, citing that the Bawari administration has been too focused on wealth sharing through its various welfare schemes. And those were the stories the mid-headlines said this week. Now, the central bank of Nigeria, CBN, has penalized six banks for 1.314 billion narrow-over alleged non-compliance with a regulation on cryptocurrency accounts. The banks include Stambic-IBTC, First CT Monument Bank, FCNB, AXS Bank, Wemer Bank, United Bank for Africa, and Fidelity Bank. Now, Stambic-IBTC Bank, the domestic unit of Standard Bank Group Ltd, was fined 200 million narrow for failing to comply with the APES Bank's directive according to the Lenders 2021 Consolidated and Separate Financial Statement. Now, CEO of Street Nomics, Economist Gaspul Obelli joins us in this conversation. Good evening to you. Gaspul, thanks for joining us on Business and Science and Plus TV Africa. Hi, Jay. Thank you for having me. Good evening. Yes, it is indeed our pleasure. Gaspul, we're talking about 1.3 billion net. That's a whole lot of money. But the main question right now would be, what could be responsible for these infractions? Is it that it is very difficult for the banks to pin down the transactions or the accounts transacted in cryptocurrency? Yes, so a lot of times you get to wonder is to make the demand side pressure on the financial system, you know, in terms of inflows, moving cash around, transfers, you know, how money moves around a lot of times. Two things I see here is number one. In my own opinion, it will be from a demand side, you know, people making transfers and the description is not quite correct. Or the process of wiring is done in a way that it looks like an intimate transaction in quotes. You know, transactions that are out of the curve, the CBN directs or directs is in the sense. In many other cases as well, there is a lack of proper control mechanism such that you can actually track which transaction is coming from where. Still a business side on Plus TV Africa will take a very quick break and come and talk more with Gaspul in a moment. Alright, welcome back. It's still business and science and Plus TV Africa. We have Gaspul, an economist and we are talking about the crackdown on cryptocurrency. Gaspul, just before the break, you were telling us about internal mechanisms of banks. Alright, great. So I'm saying that some from the central bank flowing down to the commercial banks, there are conversations on how you regulate and how you internally control policies that have probably been held back or policies that the central bank has rolled out in time past. How do you ensure that there's a level of compliance from the angle of commercial banks? That's one. Secondly, within the context of commercial banks now, there are further down internal control gaps because a lot of commercial banks don't even have data or don't know how to use the data they have to track correctly where transaction is coming from. Plus, with the fact that demand side crypto markets has intelligently moved ahead in leaving descriptions or reworking descriptions around transactions. So the transaction may come in and doesn't look like a crypto transaction. Alright, so a lot of times these so-called spots or errors or seemingly going part of the track of directives given by the central bank, by commercial banks is a function of internal controls and poor internal tracking systems to a very large extent. But however, we cannot not also leave out the fact that commercial banks can be very, very naive in the context or probably seeking to also gain the system in themselves. That's my initial thought. Alright, with all of this happening, Six Banks have been fined at 1.3 billion. It goes to tell that the CBN is actually very serious about this issue of cryptocurrency, actually dashing hopes of our future integration. I did a bit of clarity right now, Gospel, because from what we understand, a few months ago the Securities and Exchange Commission opened some sort of a crypto department giving Nigerians some sort of hope that over time there will be some sort of inclusion and the integration of cryptocurrency, the blockchain into our financial services. So what does this really tell? Yes, so one fundamental thing and body language we've seen from the central bank is a lack of a collaborative strategy slash willingness to adopt the global blockchain disruption and how that's going to impact on financial institutions and monetary systems development to a large extent.  We've not been able to see that clearly from the central bank and it's also tilt forward to some sort of misalignment in communication, in real and in efforts by the central bank and the Securities Exchange Commission. So that's to tell you that regulating why we have a very long journey ahead of us in terms of integration and leading in blockchain technology globally as well as some financial systems integration as well. So it speaks heavily around the misalignment in the system and the lack of willingness to embrace change and that's the cause for worry going forward into the future. But Gospel, one would wonder if we're actually maybe walking in circles or just trying to be a bit stagnated because the entire world as it were are embracing, is embracing rather this blockchain technology and it's actually doing most banks globally doing them very well in terms of returns and all of that. Why are we not really looking in that direction? Yes, number one, first of which is important for us to note that the world is moving in that order but clearly almost 85% of countries right now are seeking to understand better how to deploy cryptocurrency. In some context you're thinking of them as assets, in some context you're thinking of them as commodities, in some other context there's perceived medium of exchange. You know, crypto is already seen as a medium of exchange but it hasn't been made legal as a medium of exchange. So yes, the acceptance you see globally has been efforts towards accepting the disruption but yes, define what that disruption is within your context. However, in the Nigerian context we've seen an outright trying to take against crypto by number one policy ban and number two an immature early roll out of e-currency or GD2 currency or e-nirre. We have not just shown a body language or a decentralized to accept crypto but we've also sought to counter crypto and even for that punish or penalize institutions that are seeking to manage the excessiveness of the disruption in the context. So I think Nigeria has a very long way to go and even the way we've been handling the crypto drive and the crypto disruption has largely been on intelligence and showed that we've lacked a show of understanding or proof of concept of what crypto currencies of the blockchain technology as a whole can offer in terms of enabling financial institutions development. And that's going to in the long term bring about the level of perceived lack of financial readiness to embrace innovation. I don't think it's a very good position for the Nigerian economy in the long term and we're also proving to be very, very unintelligent around leading technologies in the frontier of development in the 10th century. Alright, just before we move to world food prices, just on the beat of an advisory note, what would you advise these banks so they can forestall these infractions happening again in the future? Well, in my own opinion, to be very honest, I think in my own opinion, I think that both the central and commercial banks can only try hard to manage the situation but they cannot contain the situation. The reason why you cannot contain the situation is because you don't understand it in the first place. You can only correctly regulate what you understand or you can only correctly regulate what you've been a part of. Alright, so the body language from the central bank really now to the commercial bank has been a rejection, a rejection and a gross disinterest in seeking to understand. Now, because you've done that, because you've done that and you cannot also contain the demand drive for crypto transactions, alright? It's mixed technicality. You cannot truly, in the real sense of things, regulate it to a full extent. What you can only do is to probably manage and probably use some top sanctions and processes to punish offenders in court. So in my own opinion, I think at best you will only be able to manage but in the long term, I see this whole competition spiraling out of control because you cannot contain the global blockchain drive. Whether you're ready or not, it should definitely hamper heavily on your monetary system and taking the counter approach is not intelligent in my opinion in this case. Alright, before we go, Gospel, let's talk about the world food prices. It has jumped nearly 13% in March to a new record high. It's all in the wake of Russian invasion on Ukraine. What do we have in our hands? Let's bring it closer home here to Nigeria. The Nigerian context is quite a very hurting situation. It's painful, it's hurting and it could have been avoided. The conversation of rising surprises is no longer a conversation of just... It has now grown to become much of a demand pool but of largely cost-push. Cost-push because the critical structural dynamics that impact on the cost centers of the Nigerian economy are seriously crippled. And they are further crippling due to the actions and inactions of critical stakeholders on that value chain. How can you in one month have forced capacity as a result of dirty work or polluted work and you also have the national grid failure? Alright, that is a complete recipe for disaster. That's a complete recipe for hike in food prices. And let's not get it twisted because the MBS can come and say inflation has dropped by 1%. No, inflation hasn't dropped. Inflation talks about the rising food prices. Inflation rates talks about the pace at which those prices increase. So even if inflation drops from 13% to 12% or from 15% to 14%, it simply tells us that the rate of increase in food prices has slowed down. It doesn't tell you that the price of tomatoes has dropped. No, it means that the rate at which the price of tomatoes is going up has reduced. That's the English here that a lot of Nigerians don't grasp. And it comes up as a political correctness too from the central bank and the MBS and the fiscal policy guys. The conversation here is that structural issues must be dealt with so that cost pressure centers are relaxed and that with food prices can be contained and slowed down. That's the fact that we cannot even feed our population in a sense. Alright, Gospel, on the final notes. I want us to talk specifically about the global price of wheat. It seems as though the issues in Ukraine is actually doing the world a whole lot of bad. But specifically right now, wheat now in Nigeria, the cost of bread and other confectioners have actually gone up in Nigeria. How can we vet this? What do we begin to do locally? Alright, first of all, it's very important to note that the level at which global shocks will hit your economy. The effect of global shocks on your economy is a function of where you are on the developmental ladder. The lower you are on that ladder, meaning that you don't have a lot of structural impact or strength internally as an economy to take in shocks, the more the effects on your economy. But for Nigeria, we expect more. Because the Russia-Ukraine conversation is out of control. And when you're looking at leadership and trying to make decisions to protect your own, you need to be able to identify what is really a circle of influence and what is really a circle of control. So in this context, both the Russian and Ukraine story is out of a circle of influence and out of a circle of control. At best, Nigeria will only begin to receive the repercussions of these changing narratives. So it means that what we need to begin to do something is different because this is not the first time it happened during the Gulf War. It means that we did simply learn from the past. So we need to do more around fixing our structures and ensuring that we are a strongly self-dependent nation that with or without geopolitics or globalization, we can do more for ourselves as a people as a nation. Other than that, we'll keep being at the mercy of any change or structural issue that happens globally, being a pandemic or being geopolitics. Alright, thank you so much, Gospel or belly for your time. We are completely out of time. We do appreciate all of your inputs that you have shared with us today. Thank you for having me. It is indeed our pleasure. And that's the size of the show for today. My name is Justin Kadunee, Business Insights. We'll return to you again next time. Bye for now.


Ok, greetings everyone. Greetings. This is James P. Madonna of Megalife 21 Progressive Discussions. Consumer Advocate. This is a special video. I am here at the local Lodi Home Depot. And I just spoke to an employee that says these plants, if they are in poor condition, in any way, shape or form, they are not allowed to mark them down as managers special because they are on consignment. Which doesn't make sense, which means they are probably going to return them and the plants will probably die and get put into a dumpster. This is my Consumer Advocate video. As you can see, all the beautiful plants are out. Tis the season. You've got seeds, you've got bulbs, you've got everything. Ok, it is spring of 2019. Here are the lovely bromeliads, pink quills, cyanosia. I highly recommend this. But anyway, it's really a tolansia. But anyway, look at the baby orchids. But look at this. Look at this. One of the most popular plants known. The snake plant. Look at this. It's just sitting here in no soil at all with a cracked busted flimsy pot and they won't mark it down. They refuse to do managers special. Look how this is one of the most durable house plants you can have. They can withstand low light, medium light, whatever. They were voted one of the top air purifiers, natural home air purifiers known. Look at this. I could save this plant very easily if they would mark it down from 398. Incredible. They flat out will refuse to do a managers special. And there are some others like that. It's incredible. They won't do a managers special. Look at the snake plant. It's just sitting here in no soil with a cracked pot. They won't do it. Do you know why? Because this is a private company. A vendor that comes in? Yes. So what happens is that it goes back to them? Yes. They're going to send them back. They're going to get a default. That's why home people cannot come. That's why the store manager cannot say do managers special discount blah blah blah and then put a sticker on. No, they're not doing that. I don't know if you want to see a manager special. I haven't spoke to the lady in charge. She told me what you told me. It's a separate vendor. It's a shame though. It is. Because you got to see what they have on the outside. Because these things can be easily saved. Look how good this looks. It's beautiful. And it's a shame. You got to see what I have at home. It's beautiful. You probably rescued some... Not from here. Not from here. They're not selling the house. I'm a worker over here. By the way, this bromeliad is actually a Talancia. It's in the Airplant family. Pink Whirl Cyanacea. This is one of the best bromeliads to have because you can... Have a chance of the bromeliad to bloom back.  The flower dies. I have a beautiful green. But the flowers... And when I keep water in the cup, it gets rotten. It rots on me. I put a water through inside of the cup. And that's all you do. In other words, you don't really wet the... No, I put a water through here and then it goes down the soil. And it seeps down. And you don't even have to wet the soil. No. Maybe that's what I did. I wet the soil and I put water in there. No, no, no. That needs too much water. Then it gets rotten. Yes. Because of the root. The root always stays moist. That's why they get rotten. Yes. And it's easier to bring a plant back alive. It's a will. And not if it's too much water. Orchids are very sensitive for root rot. You have to use the ice cubes, I heard. No. No. I have a spray bottle. And a high spray. And once every ten days, I put a little bit of water through the root. But otherwise, every other day, I spray the root. Because YouTube is wrong. They have people taking the orchid pot and soaking it in a bucket of water... ...to submerge and leaving it for twenty minutes. You know how many Phelanopsis died? They got rotten. You know? But you're right. I think... That's what I keep in mind. I have a plant now that has got three shootings. It's like the babies. Yeah, look at that. Three branches. And I have the big one. I don't have a big one. And all you do is you spray the roots. Wet the water. And plus I have the spray food that I spray the leaves into the flowers. About once a week, you do the roots? Yes. You do like a heavy spray? Yes. And even... It's like the air plant, I bet. Because the Talanthia sticks to the tree in the rainforest. Yeah. And they just capture whatever moisture and humidity is. Yeah. But that's... it's a different because... Well, the air... there's air circulation. Yes. Yes. So nothing gets rotten. The mist, the mist, the hair. Yeah. It's a... any greenhouse with the hair is different than the... any flower. The heat gets... it's different. Yeah, because when you have air circulation in the wild, nothing has a chance to get rotten because the air is always moving. So when it gets dry, it moves and it gets dry. That's the thing. Like if somebody has a problem with plants, the snake plant is easy. The cactus is easy.  If you put it near the heat in the wintertime? Yes. Forget it.  Yes. Yes. English ivy. It's very... Not twice a month with ivy. Yeah. The other one. Yeah. All the doctor's offices, they all have this. Yeah. Because they don't have time at the pool of water. No. They're always busy with patience. Non-stop. Boom, boom, boom. Yes. In the cactus. Yeah. Of course. This is... Cactus once a day. I have a big clay pot and I have all succulents and different cactus in the pot. Sunny window. Yes. And that's it. All right. Unfortunately, sir, if you want to find a manager, he's probably going to pay you the same... Yeah, I'm not going to make a big deal about it. I'm not like that. You know, it is what it is. That's why the reason is because they're going to send them back and they're going to get the complete fund from the insurance. Right. Because not everything is from Home Depot Corporate Office. Independent vendors. Oh, you want to be outside? It's three different vendors. Oh, really? Yes. Oh, wow. All right. Thank you very much. Okay. James P. Madonna, consumer advocate. Progressive consumer advocate. Progressive discussions. Megalife 21. I got home from shopping at the local all-D market, ALDI. Deli selected roast beef. All right. Caramel coloring. Finally sliced. All right. What? This looks like... like Arby's, like Steakham.  But I also like my roast beef rare to medium rare. But this is Deli selected. Now, what Deli selected this roast beef?  It's like, I don't know if that's a meat byproduct or not. I really don't. Deli selected. Okay. This bothers me with this company, Bob. Bob's Red Mill. Okay. This says premium quality egg replacer. Okay. When I read the ingredients, it says soy flour. It doesn't mention anything about organic or non-GMO soy. Wheat gluten, which is fine. Well, look at this corn syrup solids. Sodium alginate. Now the corn syrup solids really bothers me. I'm very surprised that Bob's Red Mill. Now, I would get this if it was organic and non-GMO. But it's not. So it could be genetically modified corn. Okay. This is definitely a great value. The most nutritious whole grain probably on the planet, amaranth, also known by the Native Americans as kiewicha. It happens to be organic. So I'll definitely get two of them. I don't see any hemp protein though. They're really wiped out. Let me see. Nah, they're really wiped out probably because it's a holiday. It's Sunday before Easter Sunday. Let's see. Alright, so I'm doing pretty good. Now I'm going to get myself, if they have it, the preserved duck eggs, the century eggs. This is James P. Madonna, the founder, not that I ever lost it, the founder and creator of the Facebook group, International Brotherhood of Paula Barnes. I want to welcome my wonderful moderators of the group, Mr. Jeff Zanbello and Ken Thiesig. Very proud to have them. I just got home. I'm making a lovely dinner. A seafood scampi with a base scallops, shrimp and a creamy scampi sauce with linguine and vegetables and I got some, then I went to the Dollar Tree. Oh yeah, I got some organic milk. Went to the Dollar Tree. I got laundry detergent. Now I want you guys, don't laugh at me now. I want you to see something. Notice the ergonomic handles. Notice they're only a dollar each. This is the stain removing one dollar laundry detergent. Notice the nice position of the handle. Now eventually these will become empty. And my idea is this. Now watch. I could fill them up with anything I want. Maybe steel buckshot, maybe play sand, whatever. Watch this. My whole hand fits right through and they are so comfortable because they are ergonomic handles. Look at this. Now what does this remind you of Drobronis? All you pencil-knit geeks out there. What does this remind you of? Eh? Eh?  It reminds you of a pair of very inexpensive kettlebells. Look. My hand fits right through. Ergonomic handles you Drobronis out there. Look. Ah. Look at this. Hey. Hey. Hey. Hey. Hey. Hey. Hey. Hey. Instead of going to a sporting goods department and a department store and purchasing all those fancy kettlebells for people that want to do aerobic kettlebell swinging or kettlebells for women. There you go. The Dollar Tree. Liquid laundry detergent. Ergonomic handles. Look at me. You Drobronis. Look. Oh, by the way. I want to say also hello to Kashi Azad of Sydney, Australia. He's arriving this weekend I believe for the first time ever in United States in Southern Connecticut. That's right. The state of Connecticut. And he is doing probably one of the finest seminars that can ever be done. The man is generously giving out a pair of light but authentic Persian meals and one Shenabord to the people that are attending his seminar. No one else does this but Kashi Azad. He is a head coach of international Polyvon competition. He is a true Polyvon. Okay. He is Persian and he represents a company called Persian Yoga. So with these I don't want to call them cheap with these kettlebells that would actually work. I salute, double salute to Kashi Azad. Now getting back to these liquid laundry detergents with the ergonomic handles. Look at me. Look at me. Now just picture this full of buckshot either lead or steel or sand. Just picture. Look at it. Look. My hand goes right through you gibrones. You pencil neck geeks. Look. Look. Oh, James P. Madonna. I'm telling you. I love being a consumer advocate and the segment of my weekly show which also goes on YouTube. It is done live stream from the International Brotherhood of Polyvons with my co-host Jeff Zambello sometimes Donald Boos. Okay. Look at this. It's called Consumer Advocate Sucker Patrol. Don't get suckered into spending a lot of money for lighter weight aerobic oriented kettle bells because I just showed you how to save lots of money from the Dollar Tree with the new laundry detergent liquid laundry detergent. In this case, stain removing laundry detergent that I use. Stain removing for one dollar. And look at the ergonomic handles you jabronis. Look at that. Look how comfortable. So forget about spending all kinds of money. Look at me. This was completely spontaneous. When I picked these up off the shelf, I really did need laundry detergent. When I picked these off the shelf I put my hand in it. I felt how comfortable it was with the ergonomic handles and right away a light bulb appeared over my head and I started doing this in the Dollar Store.   I started doing this and there you go. Consumer Advocate by the way that seafood scampi with linguiney smells really good. I can't wait to eat it. With base gallops added. I will see you well it's Thursday tonight. I'll see you tomorrow night when I go live on the International Brotherhood of Polyvines. Bye bye. You jabronis out there. Oh by the way this is a Marlin. I used to go to the Florida Keys when my aunt and uncle lived there. Okay this is James P. Donner. Consumer Advocate Sucker Patrol for Megalike 21 Progressive Discussions. I'm here at the Aldi Market in Lower Dinook Jersey and I just want to show you exactly how incompetent upper executive management is in corporate America. Here you have a situation where they have a product that was coming in every week actually more than one product. In this case it is the gallon of certified organic milk okay. In gallons every week it's becoming in every week it flies out. Same thing with the frozen shepherd's pie. Same thing with the wild caught Alaskan pink salmon skin on you know certain items that sell very well that come in week in and week out okay. You know it sells. You know it's a hot seller. All of a sudden it stops coming in. It happened right now with the gallons of organic milk it happened with the shepherd's pie it happened with the frozen Alaskan pink salmon fillets.  Alaskan shepherd's pie be out of season if it's made from ground beef and mashed potato okay. Here we have the oh good they do have it oh thankfully they finally have something great for now okay blueberry kefir all right so they do have that but there are many products that sell consistently every week and suddenly it stops coming in for weeks sometimes months on end stuff clams oreganata whatever stuff clams it's the same thing they get a big shipment it totally flies out of here and then it stops coming in for the longest period of time so this is all the this is how corporate things these are the people they hire I'm going to take a wild guess and say they hire imbeciles that do not get paid as much as competent executives nah that's mine excuse me sir oh okay yeah I know I'm doing a video about certain subjects like things that you normally get every week that all of a sudden don't fly out of here consumer advocate information for online shows okay like for instance give you an example okay as you can see I'm leaving all these market now headed for another store you see how rude that store manager was how arrogant he was looking in my black nylon laundry bag that I use as an oily bag because I refuse to pay for their bags but they do allow you to bring your own bag so he's looking in my bag suspiciously I tell the guy excuse me that's my bag and then he goes well I work here you know he started acting authoritative to me and I says well that's my bag I got groceries in there you know I'm not buying their damn bags I'm not falling for that scam this is all these in the lowline New Jersey so you know as you heard on the video because I said maybe I shouldn't have said anything because I mentioned the reason for the video he tells me it's against company policy to take videos of photos in the store and I said well you know what you're doing here in connection also with my video with my consumer advocate sucker patrol video it's typical corporate America it's all typical corporate fucking America okay so now I'm going to enter another store here I just cooked two large 85% lean burgers with Swiss cheese and hot sauce underneath it here I got various potatoes I'm trying for the first time the purple potatoes alright interesting these are not sweet potatoes these are real purple potatoes from what I understand the South American Indians the Incas in the Andes mountains grew hundreds of different varieties of potato where they originally came from as well as the peanut and quinoa so on and so forth alright now this is my problem alright here's my cast iron skillet these burgers are from Aldi alright 85% lean look at all of the liquid that came out of these so called 85% lean burgers 85% lean yeah this only means this is the second type of hamburger that I got from Aldi market alright this one is more expensive the other one 75% lean I think it's loaded with liquid as a filler as a cheap filler this is greed this is greed I wonder exactly who the CEO of all these is in Illinois what family owns the company if any this is corporate American greed look at that every burger that I've been getting that is frozen um and already formed into patties has this okay has this step is to get the ones that are not frozen and test them um the non-frozen hamburger patties and if the unfrozen ground beef does the same thing then I am absolutely convinced that they're cheating the consumer by adding any type of filler that they possibly can all these market I had a problem with them recently for several reasons as you can plainly see by the other consumer advocate videos one of the biggest ripoffs going the parking meter the parking meter is one of the biggest political scams going and here you have parking meters in Englewood New Jersey and it's not good it's old as the hills but it's a scam it's a legal scam okay here's another parking meter what a racket what a scam okay this is very clever commenter Jeff Sanbello put a slow down and use stop signs and prevent accidents they got the flashing red LED lights as you can see alright seems like every pair of stop signs is like that around here which is really good I'd say next to a high speed bump it's one of the best inventions for forcing people to slow down and preventing accidents this has been a mega lab 21 production


The cells in the nose and throat and the innate immune system are very closely connected to the adaptive immune system, which is the part of the immune system that produces antibodies. But when antibodies are called in, we also get a rapid increase of inflammation. This episode is intended only to expand your knowledge and is not a substitute for seeking medical advice. It's important to first communicate with your doctor regarding any of the information you wish to put into practice, especially for serious illnesses. Okay, let's get started. All right, Nazley, it's great to see you again. It's been a number of years and I'm happy to catch up with you. So let's talk about our nasal and throat membranes. Can you explain how they work as a first line of defense against airborne illness? Sure, I'd be happy to, and it's great to see you again too, Dr. Gundry. Nose cells are essentially skin cells that line our nose and throat. But instead of being seven to 10 layers thick, like the skin, they're only one to two layers thick, like the gut lining that I'm sure all of your listeners are very familiar with. Also like the gut lining, they sense what's happening outside and have alarm signals that they use if they sense something dangerous, like a virus or bacteria. They also have their own immune system called the innate immune system. It doesn't produce antibodies like the adaptive immune system, but it is the first line of defense and it can trap infection because before it gets too out of control. Respiratory viruses like cold and flu viruses always begin in our nose and throat, which a lot of people don't realize. So you're saying that even if I say I had developed a chest cold, for instance, that cold actually didn't start in my chest. It had to go through my mouth and nose first. Exactly. That's exactly right. In fact, some very interesting studies on why children don't get infected to the same degree as adults found that it's most likely that their innate immune systems are much stronger than adults and that could be the reason. The cells in the nose and throat and the innate immune system are very closely connected to the adaptive immune system, which is the part of the immune system that produces antibodies. Once the virus or bacteria gets past the first line of defense, which is the innate immune system and the cells lining our nose and throat, then the adaptive immune system and antibodies kick in. But when antibodies are called in, we also get a rapid increase of inflammation because they need to infiltrate from the blood through our respiratory membranes where the bacteria and viruses are. We start to feel much more sick and all the variety of symptoms get much worse. We really don't want that to happen and we really don't need it to happen a lot of times if our first line of defense is strong. It's very important because antibodies do protect us, but I'm just saying that our first line of defense needs to be strong as well. Talk to me about this mucosal defense system in our mouth and nose. Why that initial response or initial defense system is so important for defending our bodies from disease? The epithelial cells in the innate immune system keep viruses from getting into our lungs. Respiratory infections, as we talked about before, almost always start in the nose and throat before they progress to the lungs. That's why it's best to stop them while they're still in the nose and throat and to make sure that like our gut lining, our respiratory lining is nice and strong. I talk a lot about mucous being very important in protecting our gut barrier. Tell me why SNOT is such a good thing and we really want to have great SNOT. SNOT, our mucous, is a very powerful component of the innate immune system. It's actually a very complex viscous fluid and it's one of our body's key weapons. First of all, it's sticky, so many harmful things get trapped in it before they can get into our bodies.  They have to deal with the hydrochloric acid in our stomachs and a pH of 2 or 3, which very few things can survive. That's also why we can eat a lot of things that are not exactly sterile and we live. So SNOT is great. It traps a lot of harmful things, brings it to our stomach where they get broken down before they can invade the delicate respiratory lining, which I said again is one to two cells thick. In addition, SNOT contains many powerful molecules such as lysozyme and lactoferrin, which are also found in breast milk and have key defense mechanisms that help our immune system. And they also by themselves can disable viruses and bacteria. So, SNOT is a very, very important component of our innate immune system. What kind of threats exist when it comes to the health of our oral and nasal microbiomes? Well, for some of us with various lifestyle factors such as aging, poor nutrition or exposure to too many environmental toxins, our oral and nasal defenses are weakened and therefore we're more prone to get sick. Other things that might weaken our initial respiratory defenses are dehydration, allergens, and also most over-the-counter cold and flu medications, particularly those that contain chemical decongestants such as pseudoephedrine and phenyl ephrin. These products dry up the mucus and make us much less able to produce another key molecule, nitrous oxide, which you have spoken about on many of your other episodes. It's a powerful antimicrobial defense as well. Interesting. The microbiome in our nose and throat are thought to help us produce this vital nitrous oxide. I think you've spoken about nitrous oxide being a component of the microbiome before as well. Also, as the mucus in our nose dries up and becomes thicker, cilia in our nose beats slower. Cilia are small hair-like projections that move mucus. Also something that's found in the gut. We produce one and a half quarts of mucus a day and, as I said before, swallow most of it. We swallow about two times a minute, even when we're sleeping. All of this is cleaning out our respiratory epithelia. As I said before, as viruses and bacteria get trapped in the sticky mucus and are swallowed, they're no longer able to make us sick. So one and a half quarts of mucus every day. Wow, that's a lot of mucus. Yeah, it is. Even though mucus contains a lot of powerful molecules, it's actually 90% water. All right, so kind of on the same subject. It's true that respiratory illnesses such as a cold are more common in colder months. So why is that? Yeah, that's actually true. Grandmom was right and there are two reasons for that. The first reason comes back to the cilia, which I just discussed. They become rigid in cold temperatures and are less able to move mucus. The other reason is that cold viruses actually prefer cold temperatures. They reproduce faster at colder temperatures. In fact, in our lab, when we study rhinoviruses, we bring down the incubator a couple of degrees centigrade so that they can multiply faster and can test them better. And a rhinovirus is one of the common cold viruses. That's correct, yes. Why might it be that some people experience seasonal allergies and others seem totally unaffected? I think your husband is a perfect example you were mentioning. Yes, yes. My husband gets a lot of allergies and he suffers from sinusitis, I think. Well, much like leaky gut and IBS, there are several theories, but no definitive answer just yet. If someone has allergies, it means their immune system is hypersensitive and overreactive, as you spoke about in many of your episodes. Allergy symptoms are the result of inflammation. Inflammation can be beneficial in small doses. It's the body's way of protecting itself, but as you know, it needs to be controlled. So going back to what we were speaking about earlier about the innate and adaptive immune systems, allergies happen usually when antibodies, particularly IgE, enter the nose and throat. But as we spoke about before, antibodies come with a lot of excess inflammation because they need to penetrate through the respiratory epithelia to get there. So you don't necessarily want them when you're just inhaling some pollen. Basically, it's an overreaction and there could be various reasons why some people are more prone than others. Perhaps they're more exposed to other types of allergens in their lifetimes. Perhaps it's due to living in indoor environments or exposure to pollution. There are a lot of theories. Okay. All right. So tell us about BioVanta and why it was designed for cold analogy symptoms. What exactly is it? Sure, of course. I'd be happy to. BioVanta is the first over-the-counter drug in the cold, cough, and sore throat category that's also 100% natural. Obviously, there's a lot of homeopathic products, supplements, but BioVanta is classified as an over-the-counter drug and regulated by the FDA and is also 100% natural. It has a unique mechanism of action. It's the only product that was designed to address upper respiratory inflammation directly, which is the root cause of cold symptoms. Most other products on the market just mask symptoms and inflammation. They don't actually treat it at the source. In addition, most of the products in the over-the-counter, cough, and cold category were approved decades ago using old science. So how does this differ or compare, I guess, is the better word to the other over-the-counter, cold, sore throat products? Well, we actually tested this. We recently published the results in a peer-reviewed scientific publication. You can find a link to it on our website, BioVanta.com. We found that not only was BioVanta more effective than all the other products we tested, but most products actually damaged the respiratory epithelia and created holes in it, much like leaky gut, but in the nose. Now, that doesn't sound like a very good idea. No. So, I mean, this sounds like a total different way of dealing with these cold and cough and sore throat symptoms. Yes, totally, totally different. You need to really take care of the nose and throat as much like the gut. The cells are very similar. So how does BioVanta do that? What are the key ingredients that allows you to actually take care of the nose and throat? BioVanta contains a small dose of plant-based acetyl salicylic acid or aspirin, which is one of the oldest medicines known to men, and truly a wonder drug. It also includes lysozyme, lactoferrin, and aloe. In combination, they work synergistically to stop inflammation. The key to the use of acetyl salicylic acid is the dose. BioVanta contains a very small dose of naturally-derived acetyl salicylic acid, as well as, like I said, lysozyme and lactoferrin. We derive our acetyl salicylic acid or aspirin naturally, so it's not petroleum-based, and ours comes from methyl salicylate, which, as you may know, is in a lot of common foods like broccoli, coffee, and wintergreen oil. Plants use it as their own natural defense system against pathogens, such as viruses. Lysozyme comes from egg white and lactoferrin comes from dairy, but they're also found, like I said, in breast milk and a lot of mammals produce. Mammals and other animals produce these compounds for protection, as we do. Everything we use in our products comes from 100% natural sources. As I mentioned before, these are powerful molecules that we also have in our stock. You do say that aspirin is beneficial in low doses, but not in high doses. Can you explain that further? Aspirin is a key inhibitor of cox enzymes, which play a key role in inflammation. At low doses, aspirin blocks some cox enzymes, but if you completely block them, then we found that another more inflammatory pathway kicks in. This is also described in our paper that you can find on our website. We don't fully understand why, but we do know that there's a delicate balance in inflammation. This is becoming more common in other areas of medicine and research as well. It could be that some low level of cox enzymes are necessary and that the body treats it as an alarm signal if it's too low. This is similar to why some people are told to take a baby aspirin every day instead of full strength. What kind of tests have been done on the effectiveness of BioVanta? We've been studying this area for over 10 years. Also, all the ingredients that we use are very well studied and very well understood. They've been around a long time. They're also all natural and extremely safe. We just found the best and most efficacious combination of these ingredients. Also, we're fortunate enough to be able to test them in our system, the organoid system, which I mentioned before, which has only become available in the last few years. We're able to test different combinations, different doses, and see what worked well for stopping inflammation and keeping the respiratory cells healthy. The FDA doesn't treat drugs lightly. You must have been very convincing to the FDA that this product was not only safe but also effective. Did you have to provide a lot of documentation to the FDA? Yes. We have a very good regulatory team, and they're very well versed in what the FDA looks for. The FDA is very, very concerned about safety, as you know, and efficacy. The answer is yes. Yeah. Well, Dr. Lofetti, it's great for seeing you again and sharing this information with us. So, where can listeners find out more about BioVanta and your research? Thank you so much, Dr. Garni. It's great to speak with you and see you as well. I would encourage your listeners to visit BioVanta.com to learn more about the product and its ingredients, and also to read our paper. You can also visit appliedbioink.com to learn more about our company. If you want to give BioVanta a try, you can use 15 Gundry, 1.5 Gundry, to buy it on BioVanta.com or on Amazon.com. Great. Would we find this in our local drug store right now, or is it just easier to go to your website or Amazon? Oh, yes. I forgot to mention. We are being carried at CVS, Walgreens, Target, which we're very proud of, because these are top retailers, and they have a really high bar for accepting products. So, you can find us at major pharmacies, but the discount code, I think, would only apply on Amazon and BioVanta.com. Yeah, I think you're right. One last question. Is this a product that if you're feeling the symptoms of seasonal allergies or you feel you're coming down with a cold, that's when to start it? Could you ever preemptively use it in allergy season, or do you have any information about that? I think that you could preemptively use it, because we have all natural ingredients. Unless, of course, you have an allergy to one of the ingredients, like egg milk or aspirin, then you shouldn't use it. But, yeah, anyone else can use it preemptively at any time, because it's all natural. And it would also be best to use it at the start when you just start feeling the symptoms coming on the first day or two. You could use it later, but it's going to have the most effect early on, because as you know, inflammation is like a cascade, right? And so, it just keeps amping up. So, you want to kind of try to catch it before it gets too strong. Well, this is the perfect time of year to have you on, because, yeah, allergies are going to start, and the cold season is rampaging right now. And I think it's great, particularly listeners of my podcast want always a more natural approach to dealing with this. And I congratulate you on looking for a natural solution, rather than the crazy stuff we've been bombarding us and our kids with for 40 years. It is really crazy stuff. And thank you. You're an inspiration to all of us, and always promoting natural products, so I thank you as well. Well, great. Promoting natural products, but also natural lifestyle. Very good. All right. Well, keep up the good work. What's in the future before I let you go? Is more interesting stuff coming down the pipeline? Yes, actually. Thank you for asking that. So, we started Applied Bio, by the way, my other co-founder is my husband. We started Applied Bio with the idea of tackling respiratory viruses. So, our first technology was actually in those areas. And then, when we further researched the respiratory system and the respiratory epithelia, we saw that there was a great opportunity here in the OTC category. So, this is our first product, but our technologies, our older technologies, actually, antiviral technology, and that's going to be coming down the pipeline soon, as soon as we do clinical trials. And that's a much more rigorous FDA process, so it's going to take some time. But it's basically antivirals, nasal sprays. All right. Sounds like we really need that as well. So, good luck with getting that FDA clinical trials. I've been in them. It's hard work, but hopefully they'll be with it. I don't take it lightly, but thank you. I hope you enjoyed this episode of the Dr. Gundry podcast. Make sure to check out the next one here. What does our oral health have to do with the health of the rest of our body? Come on, Nadine. Well, as I'm sure we all know, the mouth is a principal portal into the body, and it helps us assimilate our world.