Good morning and Happy Mother's Day. I Googled it and there are 80 countries celebrating Mother's Day on May 14th And you know what my definition is of a mother is a mother is Somebody who takes care of something. I'm mother my plans. No, I really I don't I'm not good with plants But you know, you don't have to give birth to be a mother So that's what I have to say So I want to wish anyone watching a happy Mother's Day Today, I'm going to do a get ready with me and it's minimal makeup For someone my age. I'm 69 years old and I have found throughout the years That the less makeup I use every year the better my look is the fresher. I look I don't want to look younger I don't care about looking younger. I just want to look the best I can at my age and I always want to be neat. That is what my goal is every time I leave the house I will tell you I'm kind of off today. I don't know if anybody else ever gets those off days It was interesting for me to do this get ready with me because I hadn't done one in a while And this will start out with me and my pajamas. Well, I've been up about an hour So I have not even brushed my hair, but I'm gonna get it out of my face and Just start a quick and easy look and what I'm gonna do is Tomorrow, I'm gonna use the same things and see how long it really takes me to do this I've completed my skincare and I added just a little bit of a dermatology Tint and moisturizer. It has an SPF of I think 44 and it soaked in for about an hour and what I'm gonna use today is from ColourPop I ordered it. I think about five months ago from Ulta and I've used it a few times It has hyaluronic acid. My skin likes hyaluronic acid and it is a tinted moisturizer But the dermatology does not tint my skin enough and especially since I have these marks early in the morning from my CPAP and I'm not even gonna mess with those because they'll go away and It'll be fine, but I'm gonna take one pump of this. This doesn't have SPF And there's one pump and I'm gonna dot it on my face and I'm gonna use my favorite brush and I think through today BK Beauty does have a sale on 20 to 30 percent So anyway, I just kind of spread that all over my face And I'm just gonna go ahead and use the small one I have both of them and go ahead and I'll just bounce it in and it's of course, it's very very light coverage But for me and the older I get the lighter the coverage. I think I need and If I think I need more I can always add it and Then next I'm gonna use the corrector by from Pixie. This is the second one I've owned the first one I bought really early When I was to started my YouTube channel and I'm just gonna get a little on this and this is that brush I think is very special It's Angie hot and flashy and it's the a 506 But what I love it for is right here and I'm going to get a smaller mirror and look because I'm gonna go right here and right there and just Go underneath the eyes and just kind of bounce it in then just take my finger And if it and it looks and from here it looks really good right now But we'll see about later. The next thing I think I'm gonna do is put on some lipstick and when I get dressed I may change. I don't know but I I've been really liking the Tartt, Miracuzza and You pump it up one time and it just mmm It just feels so good. I'll write down the color of this. I'm not really sure I'm thinking this might be too much But I like to get a little color in my lips so then I can build on that I Always use an eye primer when I'm using eyeshadow and this will be too much You cannot get it. You can't get a small enough amount out, but a tube lasts a very long time and Why I use this is because you know, I have creases in my eyes And if I don't put something on and I've tried concealer, I've tried everything But just a good eyelid primer and I happen to like Milani I used to use Tartt all the time and they quit making what I liked so and normally what I do next I always put on my mascara But I think I know what I'm gonna wear and I want to use some really neutral colors And I want to get on a base. I'm gonna use this palette from BK Beauty And I will put one color all over my lid I can also use like if you have powder just regular powder It works too, but I'm just gonna start out with this one color and then I'll put on my mascara But I just want to get this And I think this is a 206 brush. I think it's the only brush I'm gonna use but I want to get it all the way to the Almost to the eyebrow and I really just pat my eye shadow in because the older we are You know, I just don't want to move around my eyelids anymore So I put this all over my lids and that's called beam So now that I have that all over my eyelids. I'm gonna put on my mascara My favorite still is a superhero mascara from it cosmetics I'm not tempted to try the waterproof Because this never bedges on me it it has been my perfect mascara for probably well since it came out and Every season I throw one away and get another one out And I just got the habit of putting a rubber band around the new one as soon as I Opened it because one time I forgot which one I needed to throw away Because I know it's still good, but I'm not willing to take any chances on Mascara is moist and it's dark and and that's where bacteria likes to grow So I always throw it away the beat first day of every season and I don't curl my eyelashes Because I don't want to lose what I have so let me wait. I'm gonna do my mascara. I Have had a busy busy busy month Jim's had several doctors appointments. He's doing good One of my grandsons graduated from high school and see that I think that looks good just with one coat Because though if my eyelashes are much bigger than this to me they I Just feel like eyelash eyelash eyelash And then of my hit mice that's my son's youngest. He's graduating from high school and then his oldest graduated from college So it between graduations graduation party I Went to my grandson the graduate of her my school He signed to play basketball at a college and I got to go to that and I loved it It was it was fun and I always just have a clean mascara brush in case I Need to comb them and I don't think I need to and I usually don't put anything on my lower eyelashes And after I do my mascara, I use the Milani eyeliner I like a navy eyeliner pencil in my upper waterline and this one works It's a stay put eyeliner in navy by Milani So I'll just go right underneath there and again if I have to pull and tug at my eyes I don't do that so That worked out and one my mascara I want to make sure it's good and dry before I do the second color of eyeshadow I'm gonna go ahead and do my blush and this is called fairy dust from Tarte And I don't know if they make it anymore, but it doesn't look like it's a lot But for me, I love it and I'm gonna go ahead and use my Laura Geller retractable brush I just grabbed it it goes in and it's easy to travel with but I had it right next to this Hello I'm filming a video. What are you doing? So I can put a generous amount of this on because there's not much to it. I just And I just kind of go around my whole face is what I do and I'm gonna use the NYX brow glue I'm liking it better. It's not it's still not as good as my ABH, but I'll show you how I do my brows I just put quite a I mean I go in right there and then right there I never go back in then I just start making short little strokes I might need my hand mirror on this and then once I'm done. I just go over it with the clean Dry and see look that that got I got too much and all I did was barely touch it One of the reasons I like this palette from BK beauty. It is not Super pigmented and the older I get the less pigment I want because I'd rather build something up Than to try to take it away, but I'm gonna just barely touch this color right here And I'm gonna go using the same brush. I'm just gonna go up and bring it up right here Just touch that. I don't have to Tap it.  That's all I have to do is I wash it I use that callista tool that I've had forever. It's a like a I'll put a picture in up here I'll put a video of me demonstrating it I let I do that and then like five that don't have to do anything to it five days later I'll do it again. So I don't use like any product. I don't use hairspray. I don't have to use any Scyling products dry shampoo. I mean, I'm just really thrilled with my hair cut. It's It's my type. It's easy But when I looked in the mirror, I thought my lips could be a little darker and I needed a little color on my face So I started to touch it up in the in the dressing room and I thought I'll just bring it out here so I found a lip pencil I have from Laura Geller and I'm just gonna see if that will add anything and I think it did add a little bit more color with the Maracusia the the lip v's that I've been using they don't bleed at all But I kind of needed a little bit more color and I thought my face needed a little bit more definition So I brought my good faithful as a quad palette in and I'm gonna do something I don't do very often if I'm just gonna take the Laura Geller brush and put it in to the contour Put just a little here this is a Kind of use it as a bronzer up in here a little bit and put just a dab of highlighter on And I'll look and see if that brought it up a notch And I think I don't look as washed out when I wear like if I wear something colorful I don't feel like I need much color on my face, but this is something it was kind of like a Vage and a white and for me the less makeup I use the fresher I feel the longer it'll stay on I do have something to share with you If you like if this look is too glowy for you, I've been using Mali Porta Fender I think for like nine years eight or nine years It'll be nine years the 19th of this month that I have been doing YouTube videos And I found this from one of my viewers her name is Darlene and she said it was the very best Product she used to take the shine away from her face without using powder and it's a clear product and I have tried the dupes and nobody has duped it well and all you have to do is It comes with the sponge. This is a I think this is the second or third This is the third one I've owned so one of them usually last about two or three years And I just take a sponge and go around it and We'll see if we make this shine disappear It did so you can wear this in place of makeup You can wear this to keep your makeup in place You can use it to take away the shine, but I don't know what the name of it is now But I always called it. Well, it says it's Mali every clear poreless face defender, and it's a good one On my last video. I announced the five winners That from timeless skincare timeless provided five winners five items that I use They everybody within 24 hours everyone responded and I'm thinking they may have their Items by now. Well, I have another giveaway and this also comes from the company and I'm not paying for it I'm saving my money for my next giveaway. So this giveaway and the timeless giveaway I didn't spend a cent on the products that are going to be given away in this video is From dermatology. This is the physical tinted moisturizer SPF 44 One of these and then skin diva is going to provide three people a 25% are girling with Hyaluronic acid and matrixal 3000 three people are going to win both of these somebody asked me recently Why I continued to use the Hyaluronic acid and matrixal pre thousand in addition to this I just use one drop of this and I use this on my big wrinkles the big the big lines and I guess I could use more of this and not use the other But for me, it's more cost-effective because one of these last between 18 months and two years and I just I'm just in that habit. I'm kind of like that person that gets in a habit. So anyway Since this is a giveaway, I cannot reply to comments under this video If you have any question or comment or anything you want to say go to all videos prior to this and Just ask a question make the comment and I can get back to you But I load all these comments into random comment picker when you hit start It'll pop up a name. That's how I get my winners and all I want you to do is in a sentence I want you to use the word happy HAP PY and Anything that makes you happy is wonderful And the only thing you have to be is 18 years old or older to be in my giveaway Don't have to be subscribed. You don't have to like anything Just I appreciate it if you do but it's not necessary and you know what it is all good It is it really makes me speechless when I get to the end of my video I think what can I say other than I don't mean I don't you know, I don't script anything But I just appreciate you. I appreciate you so much. I appreciate the information you share with me and And I will see you in my next video. So take care So they're selling met so little so I'm gonna go ahead and it's probably I think I'm not sure it's Had it right next to this mask that that's where Mac the So they're gonna provide


Conway's healthy image and active lifestyle project HIP encourages young people to participate in non-traditional sports and physical activities. HIP also encourages more females and inactive individuals to participate in physical activity and have a more positive and enjoyable experience to encourage them to remain active. Young people attending the sessions have taken part in residential, multi-sport festivals, outdoor educational sessions, national competitions and have had access to sports leadership coaching. HIP now has 40 young volunteers who have each completed at least one training accreditation. The judges liked HIP's innovative use of non-traditional sport to engage young people. Cerebid netball project. Cerebid netball project in Camarventia is a unique project providing sports activities for young people with disabilities. The project works in partnership with special schools and provision for adults with learning and physical disabilities to develop teamwork, fitness, communication, self-esteem and independent living skills in a fun and friendly environment. The project gives these young people access to sporting opportunities that are otherwise limited and has assisted some of them with their transition from one school to another by breaking down barriers and encouraging friendships. The judges like that this project offers young people with disabilities the opportunity to take part in competitive sports. Aggies Friday Night Football in RCT is a diversionary project delivered across the Rhondda Valleys with the aim of counteracting antisocial behaviour on a Friday night and promoting a healthy lifestyle. For many young people, the project gives them a purpose and a destination on a Friday night and has reduced the number of antisocial call-outs. The project also generates income for the local sports centres, provides an invaluable link between schools, communities and youth provisions and provides opportunities for often hard to reach young people. The judges liked that the project reduced antisocial behaviour and promotes a healthier lifestyle.


Bring this out to the CG itself, which has also got views and we've got donors, how can you get is that correct? Or who are all the players? What are the other players? Oh I think there are a number of other players I mean, when we talk about what we're trying to do we're actually trying to look at influencing how livestock development occurs for the benefit of the poor. And so there's a number of other people we're trying to influence I think they're very important and setting our research agenda so that we can show that we have something relevant for them. Is there a conflict between them or do you see a clear pathway? I think there are conflicts in many things. Different people have different demands going right down to what they think researchers, for example. There are many types of different demands on us, which are not always easy to reconcile. The Science Council, for example, I have a little quote here from a group of donors that says, The Science Council priorities for the CG 2005-2015 cannot be considered a successful attempt to identify a research agenda, preventing the CG for contributing effectively to poverty reduction and sustainable development and meeting the medium term goals. How do you react to that? You presumably already reacted to that. Well, there's been a number of reactions to that. That particular comment came from some of the development donors who are a bit frustrated at the links between research and development, and the responsiveness of research to development, and in particular the responsiveness of a CG agenda to research and development. In fact, the Science Council says that the Science Council neglects the fact that the CG is supported from development co-operation funds and not from science funds. That is their view. Now, I think there's been quite a bit of discussion since that paper was launched. And one of, at least from an ill-re perspective, one of my views is, and we'll explore this more tomorrow in the fishbowl debate, is that we can actually meet a lot of the development concerns within the priorities and strategies that are there for the CG system. And I think we invested a lot of time in ill-re and trying to influence those priorities and strategies, and I think at least on the livestock agenda, they're quite relevant to development. But as a research institute, one of the points that I picked up this, it says, we have an inwardly looking bias on excellence. Some people take that very hard because I thought striving for excellence. How do we cope with that? Well, I guess two things. I think striving for excellence is probably a good thing. It depends on what you're striving for and what is the niche of the CG IAR. One of the criticisms in that report was that we were claiming to do frontier science. And I think if you look at the ill-re agenda, it seems to me that we're not competing with the oxfords and the tigers and other people to do frontier science. We're trying to take those tools and adapt them to be relevant for development issues, but keeping to our research agenda, there's lots of other development agencies around. Well, I get the impression that you and Carlos are, like much more, the development body's words than the science council. You're moving the institute. I mean, are you the, given Carlos's Latin American background, are you the Shea Guevara's of the CG system? I think far from it, I think if you look at the different centres and their positioning on the research and development continuum as you might have, we're probably right in the middle somewhere. We're trying to do research and look at larger issues rather than going into communities and saying, OK, what can we make happen with rural enterprise or development activities. So I think we're still trying to focus on research, but our argument and research, but in the broad sense of research, is kind of systematic inquiry of important questions, and that we're trying to apply these to development issues. And that is where we do have a problem. I mean, I think putting that across in the MTP, the science council and others say that the MTP is the critical document on which we're going to be measured. And you've got to give the science council full marks for picking up a few gems in our MTP, and this is one lovely one where we had as an output target the influence and role of livestock-related policy research and other information on policy decisions and change evaluated. So clearly one of your drivers, John, has been to move us into this output to outcomes and trying to think how we're going to do next. Are we going to be ready for the next MTP to have those things delivered? This is an important question. How we're trying to position ourselves for the next MTP is in two ways, and I kind of described them yesterday morning. One is to build up our kind of logic so we don't get those kind of waffly outputs that you just described, that they're really built on what's feasible and achievable, but also it's coherence with an outcome link. And on the other hand, then trying to look at an overall ill re-strategy, how do we position ourselves to provide a context for our different operating project and theme activities? International public goods. Is there a preoccupation with international public goods that is impeding our ability to have impact? I guess there's two issues here as I see them. One is, I mean, we can't change the fact that we're a research institute working in a global environment in which the focus is on global public goods. And this is actually a good thing because the more their public goods and the more they can be applied in different places, the more effective our research outputs will be. So I view that as a good thing. This is a challenging thing to do though because if you think about who's funding us and how we work, we can't work everywhere. And people are often funding us on their development donors and they're funding on a bilateral basis. So it's quite a challenge to fit the pieces together in different parts of the research puzzle. OK. I've talked about outside forces. Now let's talk a little bit about inside. You have a very good working relationship with Carlos, I believe. And in the past we've had different links between Directors General and Directors of Research. We had one in which it was... Well, we had Jack Doyle, for a ill-rad point of view, in which it was all done very well, but in that office we then had Akivan who decided that she couldn't cope. And now we've got the pair of you. One thing that concerns me is that because you do seem to get on very well and you both agree with each other and you both pat each other on the back, are we going to see you going on a crusade rather than being critical internally? Very nice question. I'm not the crusader type. You know me quite well. And Carlos, we're always instructing him to pick his battle. So I think he's losing the crusade perspective if he ever had it. It's important that we work together and it's important that everybody work together in teams. I guess one of my observations over the many years of watching are my predecessors that you've described, is that this teamwork is very important. And that we talk a lot. We don't always agree when we're in meeting, either in private more than in public. But no, it's important that we work together as a team. We've tried to do that. You have a lot of people reporting to you. How many do you have reporting to you? I think about 14 actually. So you have a major responsibility as a manager? Indeed. How do you reconcile that with being a research director too? Well, some of my, I have two really classes of people who report to me in a primary supervisor role. Obviously the theme directors are of primary interest and in our relationship in MC, I mean it's kind of a teamwork in terms of how we work. Then the other group of people are really people who are either trying to implement things on a regional basis so it's still the same kind of structure or research managers, intellectual property managers, grant managers who are really supporting the research agenda. So it's a little more coherent than a broad group of reportees. But I think we're also trying to look at ways of rationalizing that kind of workload as well. And how do you weave in the money raising into that rather heavy workload, John? Well, we're going to have quite an interesting discussion on this tomorrow, but it's an absolutely crucial thing in terms of strengthening our ability to do long term research. I think one of the roles of the research director is that I'm in a position where I can articulate to donors what our research agenda is and how it can meet their needs, which tends to be quite important. In helping for core donations and looking at opportunities and then sharing that information, I see that as my role, but not in writing proposals, etc. But what is your role in the quality of research that is being conducted here? Well, I'm trying to play an important role on a couple of fronts. One is on the focus, I mean that we can't do everything and how things fit together. I think the other thing is just some simple criteria. And I think there's still room for improvement on that, but to make sure that we have it right on research methods, which we heard about yesterday. To make sure that we've covered the bases on gender, intellectual property and some of these other things. To try and raise the general game of what happens in research proposals. Mastri, do you enjoy your job? Most days. Especially today. John, thank you very much indeed.


So last week on the program, we talked about how Texas is investigating parents with trans children and treating them as if they are child abusers if they seek out gender affirming care for their trans children. And there's an update to that story with regard to Texas, but I want to talk about Idaho who decided to copy that law, but somehow found a way to make it even more draconian. Idaho's house just passed HB 675. It passed by a vote of 55-13. It would make providing gender affirming care to trans teens a felony with a life sentence. Worse, it makes leaving the state with your trans teen to move elsewhere and provide them with care a felony as well. In other words, if you are a doctor who provides gender affirming care to trans teens, which is medically necessary and life-saving, well, you may be charged with a felony if this bill becomes law in Idaho. And if you are a parent who sees these laws and the attempt to criminalize trans existence in this state and you choose to flee the state, well, you might be charged with a felony too. It is absolutely ridiculous and it's just tyrannical.  These state legislatures are trying to legislate trans people out of existence.  And she's right about that. That's going to be the result.  If you are not allowing trans youth to get gender affirming care, which is medically necessary and appropriate for specific ages, HRT is appropriate for teens according to the experts, the American Academy of Pediatrics, the American Medical Association. If you reject that and you refuse to let them get that care, it increases the likelihood that they may attempt or actually commit suicide. So it's gross. And these Republicans know that this is going to be the case. But back to Texas, the state that kind of kicked off this effort to criminalize the existence of trans youth. So an update to the story that we talked about last week. Thankfully, there was a temporary block of the first investigation that we talked about for that family. But I mean, investigations are still taking place. The broader outcome, or I guess I don't want to call it a law because it's just a new order from the Texas Attorney General, but it's still in effect and families are still very much being investigated if they have trans children. And one particular family under investigation, it just shows how craven the GOP is in particular, Ken Paxton, the Attorney General of Texas. As Dia Gill of the Daily Beast explains, a family now under investigation in the wake of Texas Attorney General Ken Paxton's February opinion, equating gender-affirming medical treatment with child abuse, once crossed more intimate paths with the top legal officer. In 2016, when Texas saw protests against attempts to regulate bathroom usage for transgender students, Amber Briggle invited Paxton to her home to have dinner with her eight-year-old transgender son. Briggle recalled to the 19th how Paxton and her son washed up for dinner together. He turns around and looks and says, this is nice. It's been a while since I had kids this age, Briggle said. But now the Briggle family is under investigation for child abuse due to gender-affirming medical care they've provided for their child. So far, having been interviewed by a Child Protective Services caseworker and undergone a home inspection, raising a transgender child in Texas has been one long political emergency, they said in a statement. It always seemed like this day would come, now it has arrived. So just let that sink in for a moment. This family knew that Ken Paxton was a homophobe and what did they do? They did what they thought would make a difference. They see that he's ignorant, perhaps he's not inherently hateful, so they invited him over to dinner and there was a moment where he bonded with their transgender son. And now this family is under investigation for child abuse. When he knows this is a loving and caring family, this is not an abusive family, but what he is doing is hurting families like this for political purposes. It's truly just monstrous. It is monstrous. Now, because of this order and opinion from Ken Paxton, one children's hospital in Texas has announced that they will no longer be offering life-saving gender-affirming care to trans youth. And Ken Paxton took to Twitter to gloat about this, saying, glad to hear that today Texas Children's Hospital halted their child abuse procedures. So he's calling this child abuse. When he had dinner with a family who had a trans kid, he bonded with their trans son. He broke bread with them and now he's saying this is child abuse.  Just awful. Now moving on to Florida, the state senate just passed its don't say gay bill, despite backlash in school walkouts. And now it heads to Governor Ron DeSantis' desk. And the question is, will he sign it or will he do the right thing and veto it? I, for one, don't have very high hopes because when he was asked about the don't say gay bill at a press conference, he snapped at the reporter who dared to ask a question. Does it say that in the bill? Does it say that in the bill? I'm asking you to tell me what's in the bill because you are pushing false narratives. It doesn't matter what critics say. It says advanced classroom instruction on sexual identity and gender orientation. For who? For grades pre-K through three. So five-year-olds, six-year-olds, seven-year-olds. And the idea that you wouldn't be honest about that and tell people what it actually says, it's why people don't trust people like you because you peddle false narratives. And so we disabuse you of those narratives. And we're going to make sure that parents are able to send their kid to kindergarten without having some of this stuff injected into their school curriculum. Yes, because we all know that once your child starts kindergarten, they begin teaching about the fundamentals of homosexuality in week two.  And the subtext here is that we have to keep gayness out of schools because this will teach children to be gay when it doesn't work that way. They are the ones politicizing this issue.  But the point here is to marginalize gay students or students with gay parents. And David Dole made a really great point about this in a recent video. Take a look.  Putting aside the other aspects for a second. Grades K to three, what's the big deal? You know, these are adult conversations.  Well, put the shoe on the other foot. So you're okay with kids not being able to discuss their mom and dad? Of course not. That'd be dumb. So why can't kids discuss their mom and mom or dad and dad? Why is it weird to have those conversations? You have to be able to reanalyze how you view the world, what is considered normal to you, and what is normal to other people. So, yes, banning this conversation in grades K to three is not a good idea. It is a horrible idea. What you end up doing is you end up ostracizing those students, those younger kids, and then they feel bad about having two moms or two dads and not being able to have these conversations and be open about their life. So it is so incredibly discouraging to see that in the year 20 frickin 22 that bills like this are getting through. Yeah, he is exactly right. Now, I'm going to link you to his full video in the description box. If you want to watch it, I would highly encourage you to do that because his video actually injected a little bit of hope into this conversation about how kids in schools in Florida are rising up and speaking out against the don't say gay bill. But the question is why now? I mean, it's not like the GOP in this country, you know, and these state legislatures ever took a break from waging an all out assault on trans and LGBTQ plus youth more broadly speaking. But why are they all doing this right now seemingly in unison? Well, Chase Strangio of the ACLU had a take. And I think that what he says here makes a lot of sense. It's because this is an election year and this is how they throw red meat to the base. What we're seeing nationally is an effort to leverage and weaponize misinformation, particularly about trans people to mobilize a political base in the lead up to 2022 and 2024. And this is happening in state houses across the country that are deeply gerrymandered that have shifted incredibly far to the right as a result in large part of the Supreme Court's decision in 2013 to gut the Voting Rights Act with the Shelby County versus Holder decision. So we can't understand this national context without understanding the voter suppression that is happening, without understanding the efforts to restrict access to reproductive health care. There is a dynamic process that is mobilizing state control over people's bodies through voter suppression structures in order to make it harder for people to survive in the lead up to major national elections in 2022, the midterms and then in 2024 with the presidential election. And that's what we're seeing from GOP leadership, you know, not just in in Florida, but also in places like South Dakota and Texas as well. So Republicans are doing this because they believe that this will yield some sort of political payoff. They're using LGBTQ plus youth as a political football, waging an all out assault on the lives of children because they want to win elections. It's just to say it's monstrous. It feels like it doesn't do what they're doing justice. This is evil. It's morally reprehensible. It's it's gross, right? Now, mark my words about this. So we've talked about this before because we've heard inklings of this in the past. But if they successfully get Roe v Wade repealed at the Supreme Court or overturned, I should say at the Supreme Court, their next target is going to be Obergefell. They're going to go after marriage equality. So that way, if you live in one of the states controlled by the far right, well, and you've been married for almost what eight years now. Too bad. We're going to try to overturn that too because the goal here ultimately isn't just to, you know, wage this assault on LGBTQ plus youth to win an election. The goal, the ultimate goal for them is to criminalize the existence of LGBTQ plus identities. And since LGBTQ plus adults legally have a lot more rights now, since we've made a lot of progress, well, they have to go after children and attack children under the guise of protecting children or fighting child abuse. But make no mistake about it. They absolutely want to go after marriage equality next. And they will do what they can to further marginalize and criminalize LGBTQ plus identities and existence. And they do this because they believe that this is ultimately what the base wants. So I hope that the base proves them wrong. And I hope that if you are conservative, but you have a family member who's gay or trans, you stop supporting this party. If you don't like Democrats, fine, just don't vote. But to vote for this party to affirmatively support this.  So this is absolutely morally reprehensible. And we have to fight this at every step of the way, because we can't allow them to undo the progress that we've made with regard to LGBTQ plus rights. I mean, we're never going to stop fighting because this will always be a fight. Unfortunately, that we need to have because homophobia will never go away. But to see them just go all in on this particular issue with everything else going on in the country. It shows you how craven and gross these Republican Party ghouls are.


This is Sandy Baird and this is commentary. At the eleventh hour on the eleventh day and the eleventh month of 1918, the guns of World War I fell silent. Behind the armistice lay the horror of the First World War, trench warfare, battles like the Somme and Verdun, where that trench warfare resulted in a brutal stalemate in which thousands died for a few inches of territory, gained one moment, lost in the next, and then reclaimed. Men had died for the fallen empires of Germany, Austria, Hungary, Russia, and the Ottoman empires. They died for the more developed nation states of England, France, and the United States, making its first foray into the morass of European politics and wars which our founding fathers had carefully warned us to avoid. Men had died hideous deaths in gunfire, machine guns, and the new biological and chemical weapons of mass destruction, mustard, nerve, and poison gas. They died infected with the diseases of their trenches and in the wasted fields of Flanders. At the war to end all wars to secure the world for democracy, as asserted by the United States President, Woodrow Wilson, Johnny came marching home. Ahead was the uncertain world of the 20th century. What would that new order be? Would there be any order? Germany, sullen and defeated, smoldered. In the unconditional surrender imposed by the Allies, Britain, France, and the United States, Germany was stripped of her industrial might and her colonial possessions in order to pay to the victors huge reparations. Worse, Germany had to accept total guilt for the war. On the German street, talk of being stabbed in the back and for revenge fueled a virulent nationalism and eventually an anti-Jewish hatred which gave birth to the Nazis and its odious leader, Adolf Hitler. To the east, the Soviet Union, which replaced Tsarist Russia in the Bolshevik Revolution of 1917, was building a utopian communist society, pledged to reverse centuries of ignorance, poverty and exploitation of workers and peasants. The Communist Party of Vladimir Lenin spoke of the world and permanent revolution and the destruction of capitalism, the economic system of the Western democracies. Civil war broke out in the Soviet Union with the Western democracies supporting the opponents of communism. The world wondered, what place would the new superpower of the Soviet Union vehemently angry at the industrial west have the now unbalanced balance of power between the superpowers? How would the new strongman and anti-communist new kid on the block the United States deal with the new regime? The Versailles peace treaty signed in Paris in 1919 at the Hall of Mirrors and imposed on the losers of the war, the Germans, the Austro-Hungarians and the Ottoman empires contains the seeds of the destruction of any lasting peace. Rather than the war to end all wars, the treaty was the peace to end all peace, as noted by the historian David Frumpkin. New borders were drawn, new real estate transfers which were accomplished with the world to benefit the winners with no thought given to the consequences for the losers. In the Balkans, Yugoslavia was established with often hostile peoples thrown together. Cheek to Jowl in a new kingdom. Germany lost territory to France. Russia and its unilateral peace with Germany in the Brest-Litov's treaty surrendered a huge swath of land to the Germans, which the Soviets hunkered to get back. In the emerging chaos of the Middle East in secret agreements, the British and the French carved up the former Ottoman Empire of the Turks, giving to themselves mandates over oil-rich territory. At the same time, the Balfour Agreement of the English promised to the Jewish people a Jewish homeland in the same territory as were claimed by the Arabs or Palestine. The result of this duplicity and secrecy to both people, to the Jewish people and to the Arab people is a vexation problem of two peoples competing over the same land from which the world still suffers. As the 1920s gave way to the great depression of the 30s with the concurrent rise of expansionist regimes, totalitarian regimes in Europe, the fascists in Italy, the Nazis in Germany, and the Communists in Russia, the futility of the First World War and its flawed peace became clear. The world had been safe made only for the elites who had stayed out of harm's way. As women and men on both sides of the divide of World War I watched in horror, the world prepared for a second match, much like the first. The lines were drawn with the Germans and their allies once again at war with their old enemies, the English, the French, the Russians, and the late comers, the Yanks. As the 30s morphed into depression, the broken promises, the harsh truths, the boiling nationalisms all led once again to a new arms race, bristling alliances, localized aggressions, nuclear arms, and the age-old philosophy of getting even and revenge. As the United States now continues to war across the globe in the Middle East, in Latin America, and the Caribbean, remember World War I. Remember the pointless battles, the Somme, the Verdun, Gallipoli, and Flanders. Think too about the second round of World War II and the millions lost in Stalingrad, Hamburg, Dresden, Iwo Jima, in the concentration camps of the Nazi Holocaust and the Polish deaths caused by the incomprehensible competition for empire between Hitler and Stalin in the new horrific weapon against, for the first time, the future population and the earth, the atomic bomb, dropped by the United States in Hiroshima and Nagasaki. Remember the wars of the Cold War, Iran, Cuba, Vietnam, Afghanistan. Think finally of the wars of our time, Iraq, Somalia, Afghanistan, Colombia, Palestine, the drug wars in Mexico and the streets of our cities of the United States. Honor the dead, the forgotten heroes of forgotten wars, but ask, do these wars any more than the first World War benefit humans and the living organisms of the planet? Do future wars make less likely any of these conflicts, or do they benefit only the few who get comfortably rich and stay home as young men and women, civilians and the planets, die? This is Sandy Baird and this is commentary.


Hello, everyone. Good morning. My name is Vanikay Daptari, and I work as a product manager in the Contrail Cloud Networking Group. I have with me my co-presenter, Stefan Kapell and Mikhail Glace, the nice guys from Nice in France. They work for IBM, by the way. And the topic here is going to be how do we use OpenStack Heat and extend OpenStack Heat to implement or to deploy security policies and network function service chains? I'm hoping that you have heard about security policies and network function service chains. But in case you haven't, I'll try and give a little bit of an idea of what these network function service chains are. We'll keep the agenda simple and easy. Give a quick background of the products that we are talking about. I'll focus on OpenContrail and my colleagues from IBM will talk about the IBM Cloud Orchestrator. We'll give a brief background of what's the relevance of OpenStack Heat here in what we are talking about, network function service chaining. And then we'll see some use cases. And then my colleagues from IBM will also help us see these things in action. And they'll show a demonstration of OpenContrail integrated with OpenStack Heat integrated with IBM Cloud Orchestrator. And if we have time, we'll also do some Q&A. We'll try to keep time for the Q&A. So a quick background. I leave the IBM Cloud Orchestrator. I leave the IBM guys to talk about the Cloud Orchestrator. They are best equipped to talk about the Cloud Orchestrator. And this is essentially in two slides what the Cloud Orchestrator enables. But my colleagues from my friends from IBM will be better equipped to talk about the Cloud Orchestrator. Now, I'll quickly talk about Contrail. And this is a typical solution architecture that you will see when Contrail is deployed alongside OpenStack. So what's the role of OpenStack? Or for that matter, IBM Cloud Orchestrator. It plays the role of a framework for expressing app intent. So the app developer uses IBM Cloud Orchestrator or OpenStack as an interface to express what they need from the infrastructure in a simple, high-level, abstract fashion. And this abstract definition of the app intent is handed to something like an SDN controller, what you see in the slide underneath the Orchestrator piece. The network component of the infrastructure requirements that the app developer has specified, those get handed to the controller. And the controller then plays the role of a network compiler. So what do we mean by a network compiler? The app developer has expressed the intent in terms of an high-level, abstract fashion, what they want from the infrastructure, and particularly from the network. How could they specify this in an abstract fashion that they are deploying multiple tiers of an application and they want a network for every tier? So this is how they express the app intent in an abstract fashion. That gets handed to the controller. The controller then plays the role of a network compiler and translates this high-level, abstract definition of the infrastructure requirements into more low-level constructs. Low-level constructs like routes, firewall filters, or ACLs, or routing instances, or VRFs. These are the low-level constructs that an app developer either may not be familiar with or may not want to be familiar with. So the role of the compiler and the orchestrator is to together abstract that away, the implementation of the networking constructs away from the app developer or the app deployer, and the controller compiles that, spits out the low-level constructs, and then the controller takes those low-level constructs and programs those into distributed forwarding elements. Distributed forwarding elements, we are all familiar with the Linux bridge or the OpenV switch. But in the control solution, we have our own take on the distributed forwarding element. We call it the vRouter that sits in the kernel as a kernel module in every x86 node in your cloud data center. So that is going to be where the distributed forwarding is implemented, as well as all the security policies that are specified by the app developer. In the abstract fashion, of course, they get applied and enforced in a fully distributed manner.  So that's where the security policies are also implemented. Now, we are going to talk about network function service chains, and the controller and the vRouter are jointly responsible for making those service chains happen as well. And we'll see a little more about what that means. So that's really the responsibility of the controller and the vRouter. The good part about the solution that Contra will implement is that we are stitching overlay networks. We are creating overlay networks using IP VPNs, and we are using BGP as the control plane. So that allows this solution to be completely agnostic to what's running in your physical underlay. And you can make changes in the overlay without having to store any tenant state, whether it is tenant VLANs or tenant ACLs or tenant firewall policies, you don't have to store any of those in the physical underlay. So that's the good part of the solution. Now, the other good part of the solution is that it applies seamlessly across the vehicles that you use to deploy your compute workloads. So the transition to a modern cloud data center is not, it does not happen overnight. And so you have applications deployed in bare metal servers, as you can see on that part of the slide, on your left. And then on the right, you see some virtualized application workloads. And then you also see some containerized application workloads. So modern infrastructure tends to have compute workloads in all these three different compute vehicles. So the good part about Contra is because we are using IP VPNs, we can extend the same sort of network primitives across these different compute workloads. And then on the top box, you see different orchestrators. So because the networking primitives are exposed via REST APIs, the integration with any orchestrator, whether it be Kubernetes for controllers, for containers, or it be OpenStack, or it be IBM Cloud Orchestrator, or it be VMware's vCenter, the integration is via the RESTful APIs. So that's the other nice part about using Contra. Now, let's quickly come to what an application developer is going to interface with the orchestrator. Let's say, let's look at the top half of this slide. The application developer is here trying to deploy a three tier web application. And while deploying this three tier web application, all the application developer knows is that each tier needs to be isolated from the other tier. And there are also certain policies. For example, in my three tier web application, I have a front end that's implemented by the green virtual machines. And I want to keep the green virtual machines to talk to themselves. But in order to talk to any other tier, there should be explicit policy. What should that policy be? Now, there are other tiers. There is a caching tier, that's the blue virtual machines, B1, B2, B3. And then there's a database virtual machines, the yellow Y1, Y2, Y3. Now, the application developer knows that for no reason should the front end have to communicate directly with the database. All communication has to first go to the caching tier. So that's one of the most important policies. So you can see there is no policy connecting the front end network to the back end network. But there is a policy connecting the front end network to the middle tier. And by the way, this is a web application. So the application developer knows that he only expects to see HTTP traffic. So that's the other policy that he's going to specify. Allow only HTTP traffic between the front and the middle tier. Then this is the most interesting part. Between the middle tier and the database tier, they want to make sure that the traffic is cleaned via a virtualized firewall and then sent to the database. So before being sent to the database, I want the traffic to be cleaned by a virtualized firewall. That's all the application developer wants and how that is implemented is completely, he's completely agnostic to it. So here the orchestrator and the NOVA component comes into the picture, where the application virtual machines, the G1, G2, G3, B1, B2, B3, Y1, Y2, Y3, where they are deployed is the decision NOVA takes based on the algorithms that are running within NOVA. And the firewall also happens to be a virtualized firewall. So where the firewall VMs are going to be launched is also a decision that NOVA is going to take. So it's going to run some algorithm and available compute is going to be chosen to launch the firewall VMs as well.  So the problem with these modern cloud data centers is how do you steer traffic to a sequence of services? Often in web applications, you have a number of services back to back. For example, you could have a sequence that says, I want to send traffic through a load balancer and then through a firewall and then through a van acceleration and then onto out to the van. So that's an example sequence of services that I may want to specify. And these may be physical network functions or they may be virtualized network functions and they could be launched anywhere. They could be racked anywhere in your data center. How do you actually make sure traffic is stitched across these different network functions which may be launched anywhere in your data center, which may even be launched in your service providers data center or they may be launched in a different data center. How do you actually make sure traffic is stitched across these multiple network functions in the order that the application developer has specified? That's where something like an open-contrail controller comes into the picture, programs the necessary next hops that if the source is a blue virtual machine, if the traffic is coming from blue and destined towards a yellow VM, the next hop is actually the virtualized firewall. So that programming of the next hops is taken care by the controller and it is programmed into the vRouter, the forwarding element that makes sure that the traffic will follow the path that is specified by the application developer in an abstract fashion, okay? So that is what we call service chaining. And like I mentioned, I'll quickly recap that again. Service chaining is not confined to one service. You could have multiple services. You could have both physical and virtualized network functions in a sequence and they could even, you are not even confined to a particular data center. You are not confined to a particular vendor of that network function. So all these different permutations and combinations are possible and it's the joint responsibility of the controller and the vRouter to make that sequence happen, make the traffic follow that path of services. So let's take an example of some traffic that violates the policy. It gets blocked right at the vRouter in the host. So that's a fully distributed firewall acting at the host level. And then when you take traffic that has to actually traverse the service chain because the next hops have been programmed in the vRouters, the vRouter will make sure the traffic originating from the blue virtual machine B2 destined towards the yellow virtual machine Y3 is first sent to the firewall and then sent to its ultimate destination. So this is service chaining. Now, this, by the way, if you're familiar with OpenStack Neutron, you'll realize that it's not possible with the stock Neutron. So that's the value that OpenContrail has provided. What we have done is we have not only implemented the APIs that the Neutron specifies, but we've also gone ahead and extended the Neutron API specification. So we have a whole set of new APIs that implement functionality like this, network function service chains. And we've provided the implementation for those, for these network function service chains, to implement these network function service chains and ability for you to specify what the service chain should look like and then actually instantiate that. So that's what, Contrail, does it extends the Neutron API spec. But you may ask, what about OpenStack Heat? What's it got to do with OpenStack Heat? Now, let's quickly talk about OpenStack Heat. OpenStack Heat, this is OpenStack Summit, it needs no introduction, everyone here is familiar with OpenStack Heat. But it's basically just another abstraction framework that allows us to express entire application stacks. So in the previous slide, I was trying to deploy a three tier web application with a virtualized firewall. So that was my entire application stack and Heat provides me a mechanism to express that entire application stack and then using these heat templates I described that and when I run that stack, the entire, all the components of the application get deployed. But the important part is that of service chaining with stock OpenStack Heat from the top of the tree, you won't be able to deploy these network function service chains that I described in the earlier slide. So that's where we come in again. Because we extended the Neutron API specification and we wanted our customers to be able to do the same using OpenStack Heat, we also went ahead and extended OpenStack Heat. So essentially all we've done is we've introduced some new heat resources that map to the new constructs that we have introduced. So they are virtual networks, security, I mean service templates that allow you to specify a template of the service you're trying to deploy and then an actual instance of that template called a service instance. So these are the APIs that we have extended on the Neutron side and we created corresponding resources within Heat. So this is what it looks like. You have the Heat Engine and underneath the Heat Engine you have the Heat Templates. But you have the built-in Heat resources that you get from OpenStack. And then you see on the center, you see the Heat plugin that we have written that Juniper Contrail has implemented. And within the Heat resources, you'll see the Heat resources corresponding to the Neutron extensions that Contrail has added. Namely network policy, the ability to attach a policy and then the ability to create a service template and actually deploy a service based on that template. So that's really the value we have added and that's really what we are here to talk about and then also demonstrate that. How this is made possible? It's by virtue of the APIs. So like I mentioned, the integration with any orchestrator happens via northbound APIs. We have APIs on config, operational and analytics. And this is what it looks like. So at the top you see an orchestration application. Heat is an example of an orchestration application. And the way Heat would integrate or the way we would implement the new resources for the Neutron extensions that we have added is by invoking the corresponding VNC APIs that are not part of the standard OpenStack Neutron API set. So that's how the integration is made possible. What about use cases? So we understood the concept of service chaining, but where do you use service chaining? Where do you see it in action? Let's take a simple example. Again, the top half here shows the logical picture. And let's say I'm a distributed enterprise with multiple branch locations sitting across an L3 VPN. And some of my enterprise employees are trying to access the internet. But I, as the administrator of this enterprise, I'm trying to define a policy that says all traffic that's going to the internet definitely needs to be sent via a firewall. And then some deep packet inspection engine. So I happen to be leveraging my service provider, their service provider's data center, and I've launched these network functions in the SP's data center. And so I want traffic originating from my enterprise location that's destined to the internet to be sent via a sequence of those services running in my service provider's data center. So the logical picture that you see on the top is how you express your intent. And the picture on the bottom is how that actually manifests in the physical world. And what you see here is an example of the service chaining. Similarly, if one enterprise location across the L3 VPN is trying to communicate with another enterprise location, and again, you want to send traffic that's crossing the L3 VPN to be sent through a sequence of services. The services may be running in a service provider's data center. You make that happen by specifying the top half in the abstract fashion, and the bottom half is how it manifests. Here's another example. Let's say an enterprise has different branch locations, but they also have their own data center. And let's say they are running some internal web application, some internet application that's running in their data center. And I want to send traffic that's trying to access the web portal through a load balancer and a firewall. So that's, again, how I express the intent and how it manifests. So that's essentially all I wanted to talk about. I'll hand at this point the bet into my friends from IBM. And what they'll try to show you is using IBM's Cloud Orchestrator, how do you deploy these network function service chains that you saw here? So at this point, I'd like to invite Stefan. So hello to you all. And thank you, Aniket, for the great presentation you have made. My name is Stefan Kapelle. I work for the IBM Client Innovation Center in Nice in France. So now it's time for me to present you live demonstration, I hope, because I just lost my Wi-Fi connection regarding the use of e-templates in a complete or flexible IT provisioning orchestration workflow. So please take a few seconds to write down my email or our new Twitter. This is my agenda. First, I will present the IBM Client Innovation Center that is a new IBM GTS initiative to support top technology IT deployments. Then I will briefly explain our vision regarding IT provisioning and orchestration and it will be followed by the presentation of our orchestration tool called IBM Cloud Orchestrator. And then this tool plus the control SDN solution from Juniper. And I will explain how there are integrated together based on the template. And to finish, I will briefly describe the infrastructure used for the live demo and the step-by-step scenario. So this first slide regarding the IBM Client Innovation Center Networking Services. Two centers has been created in April, one in Dallas in the US and one in Nice in France. Focuses technologies are network function virtualization, so we will speak about NFV and VNF. Software defined networking, so we will speak about SDN. And this will also focus open source platform and open source software such as OpenStack. So this slide is just to show our vision regarding IT provisioning and IT orchestration. As you can see, we can divide this period of time into three different periods. The first one started three years ago and we call it the standardized period of time. It was a time where new open standards has emerged. So obviously OpenStack, but also the notion of fabric in the data center space. And in addition, the tunneling mechanism like VIXLINE or MPLS over GRE. So based on these open standards, we are now able to deploy an end-to-end solution by selecting the best of build technology. Then the second period, it's called the industrialization provisioning period. Basically, if we adopt SDN, we can provision and manage all network devices from a centralized point, that is the SDN controller. But we still need to operate and manage the SDN controller manually. So if we want to gain benefits here and reduce time to market, we need to have an orchestrator on top of these products. That will be an industrializing provisioning tool that will orchestrate, that will provision all the components for us. So that we can avoid any configuration, manual intervention, maybe not all the time, but for a repetitive task we will use an orchestrator to play a sort of kind of music partition somehow. And then the last period of time is the automate period. So we will speak about cloud automation. Or we can automate the IT provisioning or even the change management system. To achieve this, for instance, we can combine our orchestrator and a real-time monitoring system. Basically, a real-time monitoring system monitor an IT infrastructure. And then when an alarm is received or a threshold is raised, there is an alert action. This alert action can be a pop-up window or maybe text messages or an email to inform the administrator or the end user of an outage. The announcement here is that the real-time monitoring system will provide an alert action and this alert action will trigger the orchestrator. And the orchestrator will adapt dynamically the IT infrastructure. So to resume, we cannot optimize everything. But sometimes, because sometimes there are two technical, two complex to be automated. But if we focus on repetitive tasks without any added technical value, this is here a real benefit of the use of an orchestrator. So now, I will go a little more in detail on our IBM Cloud Orchestrator tool. It is really an important piece in the scope here because it is located on top of our partner's networking solution, so on top of SDN controllers and VNF solution. So thanks to an OpenStack native support, ICO, IBM Cloud Orchestrator, supports today multiple SDN controllers such as today's Juniper Control SDN solution from Juniper. ICO is a multi-layer orchestration tool. It means that it not only focus on the networking part, but also the compute and the storage system and even the business application management and provisioning. So then we have a second layer named Workload Orchestration that is more the pattern management. This is where we will define a workflow and then the engine of IBM Cloud Orchestrator will run this workflow to step by step provision the IT environment. The top layer of our constructor is the service orchestration. So it comes with the self-service portal. It's like a webpage just to have access on the tool. It could be directly accessible from the application itself or it could be integrated to an internet. And inside this self-service portal, we will retrieve the self-service catalog. So a collection of offering. We have these providers, the service provider will develop for a specific client. It will allow to add an abstraction layer as Annika said, to avoid any technical parameters to enter and to focus on the service level we want to map to the client. Now two slides regarding the integration between the orchestrator and the Juniper SDN solution called Contrail. We had for the story two different ways to do it. The first was launched two years ago or two years ago and was based only on West API called integration. So basically the ICOBU developed content pack that facilitates with predefined function to call the Juniper Contrail controller. Now we have announced this and we have a more open solution based on each templates. There comes with OpenStack. So it is a common open solution language or set of commands to orchestrate either OpenStack and Contrail. And as ICO is based on OpenStack and as Contrail is based on OpenStack too, it's really easy to integrate them with native commands from OpenStack. So we will see this today. And compared to other solution, we don't have this really transparency based on OpenStack between ICO and other SDN controller from other vendor. Usually we really need to use West API integration to get all the features supported by the controller to be exposed to the orchestrator level. And here with the use of each templates, we have 100% of Contrail features supported via it. This is a really valuable differentiator and when we talk about DevOps or we can facilitate DevOps using open standard solution like OpenStack, here we can really address business application deployment down to infrastructure deployment in the same workflow using the same each language. And this slide, just to understand how it is integrated. So on top we have our orchestrator, ICO, and then Contrail provide what we call the Contrail resource plugin. That is included in the heat engine of OpenStack. When the heat engine receive heat template, it commands, it alignizes all the commands. And as you can see on the right, some are typical OpenStack commands. So like in the yellow circle. And so they are directly managed by the heat engine or is itself. Some are Contrail based commands. So like you have shown on the blue circle. And then the heat engine will redirect these commands to the Contrail resource plugin. And then the Contrail resource plugin will contact the appropriate function in the Contrail SDN solution. So that we only need heat to make it working without any other type of integration between the orchestrator and Contrail. So now I will present you the live demo scenario. So at the left, we have a client premises. It could be also a branch office, a physical legacy environment connected to a pop router. At T0, we will see that no services has been provisioned. So from the client side, we have no access to internet. And also we have no access to a collection of services like voice services, et cetera. What we can do is we will connect to the ICO web service portal. Here we simulate an operator from a service provider. But we can also, if the service provider want to delegate the service to the end user, it can delegate it to the end client administrator, for example. And then it will connect on a dedicated web service portal in which it will retrieve, sorry, in which it will retrieve its self-service catalog and the specific and designed offering developed by the service provider. So you just have to open the portal, then click on some boxes and press the launch button. And when it will press the launch button, the following complete IT architecture will be provisioned. So ICO will contact OpenSync, will contact CoreTrail to provision this entire IT infrastructure and VNF, so represented in the blue square. So first it will request the provisioning of three virtual networks. So private virtual networks, public virtual networks, and then a DMZ virtual network. It is just an example of what we can do, not a limitation, but just an example. And then on the private virtual network will be hosted some services, some VNF, like the Wi-Fi controller, CIP services, so voice services, and also a virtual desktop service. And then it will be connected to the firewall to secure the traffic, which is the VSRX firewall from Juniper. The same for the public network, it will be connected to the internet through public virtual water. And in the blue dashed line, you can see overlays. So overlays are created from the internet pop filter to the public virtual water to enable the client to get access to internet. And on the other side, the private virtual water will be connected to the client pop filter in a dedicated virtual CP, so dedicated for this client. So now I hope I have the internet connection to show you this in real. I have no more. Excuse me, could you come with a credential? No, I am not connecting to Wi-Fi. Okay, because I asked for open one. Yeah, no, maybe you can use the yes, but I asked for more. Also okay, I'm connected again, so it's okay. Okay, so it's okay, nice. So what we can do first is check our client VM to show you that there is no connection at all at the beginning. So I'm connecting to my VMware environment, so nothing related to OpenStack and Contrail to simulate a client laptop or PC. So okay, so this is my client VM. I will open a browser on it. Oh, it will be, I changed the mode. So, okay, so I will open a browser and then test if I can access to internet. So just doing quick.ibn.com and just to show you that the request is running and nothing at all is, I can access to nothing. So this is the same for all services we will provision. So the Wi-Fi services, the Sieb Gateway services, firewall and DDoS. So nothing is working at T0. Then I will show you that I have my OpenStack dashboard here and there is, there are no stack already deployed. Okay, so no items to deploy. And then on the Juniper controller dashboard that no virtual networks are already created and et cetera. And so then we developed a graphical view so of the underlay and the overlay on the same map just to show for the demo that the services and virtual network will be created and will appear here in this zone. So now I will connect to IBM Cloud Orchestrator dashboard and I will find in my service catalog some offers I can select. So we have categories corresponding maybe to each entities of your company. So I will choose this one. So deploy or destroy complete service training and using each templates. The first things I see is doing, it is requesting from control and OpenStack what services, what stacks and what NFV, VNF are already deployed. You can see here resume of the map we have already deployed so nothing is deployed at all. And here a set of checkbox of currently deployed services. Now each checkbox is related to each template. So by checking the boxes, I will ask for ICO to request the provisioning of each components. So we divide on some components. So the first is the creation of basic networks. So the public and virtual network here and the private virtual network, the DMZ virtual network, the firewall services between the private and public network which will perform stateful firewalling and network address translation. The IPS services to protect our public web server from the from internet. And then voice services, wifi controller and remote desktop. So by checking all the boxes, I am now able to deploy the complete IT infrastructure. So by clicking on deploy hall, ICO will request the creation of the provisioning of all components. So we will quickly shift on the monitoring tool, higher somehow. So it will appear in a few seconds because it has a refresh timer of two seconds, some elements. So here ICO is requesting a control to create provision the network. And then it is requesting an open stack also. And this is related because a control is based on open stack. So I think I have to refresh. Oh yeah, so some task has running. Okay, sorry, we miss it. So, but, so here, I mean, here are represented two sites. One, our private cloud environment at the left. So one compute node is geographically based in this in South of France. And we have deployed on this private cloud some security services. Services we don't want to deploy on the public environment. So we'll be hosting, and it is already done, the gd.appliance and the NAT instance, which is firewall. So we keep our security products, our security zone in our private cloud. And then we deploy other VNF like the web server, CIP gateway, Wi-Fi controller to software Amsterdam. So by using availability zone, we are able to select where we want to deploy VNF. So now, if I come back to my open stack dashboard and just press F5, I will be able to see that all stacks, I have requested, so not here. Ah, so I'm not in the, sorry. So all stacks related to each templates have been created. So you can see this here. And as you can see here on the availability zone, some are provisioned in software Amsterdam and some on the Nova zones, which is our private cloud environment. And they are running from one minute or two minutes. So this is really the provisioning we have just done. And there is the same vision in Contrail, so about virtual networks. So we will retrieve the three virtual networks, private, private, DMZ, public, place management, of course, and two other virtual networks for the GDDoS appliance, transparency mode. So two armed. And now I can go back to my client VM to show you that I will be able to access to internet. So I'm not lucky today. Nice. It seems something happened with the firewall. So it is very flexible because we can add or remove some provisioning items or VNF. So I will remove the firewall services and update the service just to relaunch the firewall again. So as you can see, firewall services are not currently deployed. So I will recheck the box and relaunch the specific VNF deployments. It's so fast. Okay, so I missed the value. Nobody tell me. Okay. But it takes two or three minutes from the VSRX to launch. So we can maybe go on the wifi controller now. So, and maybe log also on the VSRX. So that's a real VNF function, real virtual network function. Also the VSRX is not here yet. Okay, now internet is working. So I will not be, so, oh yes, I am late. So internet is now working. And I am able to log in to the VSRX. So performing stateful firewalling and not at this transition. And also the GDOS instances. So just here. And if I move to the right, I access now to my public web server. So if I press F5 several times to generate some traffic, we will able to see that in the GDOS appliance, we are in real time inspecting the traffic coming from the client VM to the public web server. So yes. So this is my net public address from the VSRX. And this is the IP address of the public web server. So this is a real use case, working with some difficulties, but it's working. And we have provisioned this entire IT infrastructure in one or two minutes. So we have to, okay, we have to close. So thanks to you all. And if you have some questions, please come to me to I will answer as a question after, okay. So thank you.


Oh welcome to condo insider it's Thursday three o'clock and this shows all about association living from the homeowners to condos to co-ops although the laws are different in each of those areas and we've all heard recently a lot about sustainability you know we want to be fossil fuel free and I want to say it's 2050 but I forget the exact date the governor said they wanted to be fossil free free a great great great goal but when it comes to condos we're getting all these issues about with the widespread now being electric vehicles and what a condo has to do or not do as far as helping the owner who wants an electric vehicle provide a charging station and so I ask my good friend who's been on the show many times now on her knee welcome to the show thank you Richard always a great pleasure to be here hello hi everyone my name is no line I'm with the law firm team in key Leon Cup truck has heard I practice condominium law you make me feel so good when you say it's a pleasure to be here you know so I know that this is a great show for educational purposes we appreciate your your time for doing this so let's just talk about electric bills first of all I want to tell everybody out there I own an electric vehicle I've owned an electric vehicle for five years and I would tell you that the perks are great with regard to the three-metered parking and airport parking using the HOV lane the perks are great but more importantly I used to pay about 300 bucks a month for gasoline with my full overtake system on my house I now do my entire house and charge my car for $15 a month it is awesome and my car I happen to be lucky I own a Tesla and not gonna give them a commercial but this is actually my second Tesla I like the first one so much but the reality of it is if you look at all the newspapers General Motors Mercedes Porsche Audi they're all saying they're gonna be eliminating a lot of their gas combustion engine cars and I'm gonna try to offer more and more electric vehicles so it's it's kind of the wave of the future definitely I've talked to my friends who work in the you know auto industry they are being all seeing you know that's EV and also including driverless you know those kind of new technology that's where the future is it's very exciting I think also you know Hawaii has been you know the I think the number two state if you look at nationwide we have we you know as a small state but we are number two on the chart as far as EV and also our state has adopted a goal to be a hundred percent renewable by the year 2045 originally everybody thinks that's a very ambitious goal but you know with the years gone by if you calculate how much will accomplish we made I think we're right on track which is exciting yeah I think you have to put the caveat on that when they say a hundred percent sustainable I'm not sure by 2045 we'll have solar powered air planes doing commercial flights so that it may be there may be pockets of industry that were much less dependent on fossil fuel but it may be around for quite some time to come I don't want to crack a joke unless we build a train I guess between San Francisco and Hawaii which is a joke that somebody was talking about recently we won't go there with that let's talk about condos for a second sure okay I buy a condo and I own my car it's electric vehicle and I want and I have a stall I own my stall yes I want electric charging an EV charger where my rights so there's a statue basically says the associations cannot prohibit any private owner from installing an electric vehicle charging system in his or her own stall so in your situation you definitely have the right to go but the big problem comes to you know where if it's a very old building you know there's the electric infrastructure is very old or your building does not have enough capacity and then you know of course you can you know place your own charging station but you need to you know you need the wiring you need the the hookup you know to there is updated electric infrastructure support that system who is going to be paying for that because your charger that's going to be you know you know basically your exclusive for your exclusive use that's going to become part of your unit as value to your own property do you think the other owners would have problem you know substating you by paying for those upgrade of the electric system in order for you to play that private system so it has been the situation is like of course you can go ahead do it but the associations have also have the right to put a reasonable restrictions on how you can put it in so you will need to maybe be responsible for the cost of you know making sure the system is going to be compatible with the building capacity and if it's not safe you need to upgrade the electric infrastructure to make it safe and how about the electricity you use do that get submitter and separately build or I can't imagine the owners who don't have an electric vehicle to have to pay for the electricity of the owner that does have an electric vehicle the statue make it clear that you you would need to reimburse the electricity used you know for the charger so you need to pay for the electricity so let's just hypothetically say that you have a hundred unit building right and nobody has electric charge and now one person wants electric charger he says I will pay for it I will put it in here's my company's gonna wirelessly bill my electricity you know the association ends up with now they've got a bill the owner for the cost or at least the count for it on the owner's ledger there could be some administrative cost for this hypothetically say ten dollars a month for making sure that they got your electricity usage is all that passed on to the owner as well you know I would definitely highly recommend you consult attorney first it really depends on you know I think in light of the statue that's probably kind of ify I would highly recommend my client to be cautious and you know you need to interpret that with that statue also with your project documents and look at the circumstances involved I can see if there is a common charger for example you know that's a common amenity the association has to for example has to invest on a software to see who's in the queue you know if you get your chargers ready can get a text message for the other waiter to come back for this kind of administrative charges I think it's reasonable for the association to assess you know you know everybody who's using it as a limited common elements expense but for a situation where a prior owner is doing that if there is a submitter just by looking at the submitter bill I don't know if you can really charge that that could be interpreted as a charge that's prohibited by the statue provision we just mentioned let's take a little step further so you have a hundred stalls in the building and someone looks at the electrical capacity and says we know what we can handle ten chargers and so the first ten people sign up over time and they reach their capacity and now the eleventh person comes to the board and says well I want to put in my own charger too and but there's only the board said we don't have any more capacity and then the owner says yes you do all you have to do is spend 250,000 to upgrade your electrical room and then I can have the same benefit the other ten owners have what do you say to that well and lucky for the eleventh person because right now the system as the statue provides it is a race game whoever gets you know within the capacity spend less and whoever is on the break point you probably will be held responsible for you know the you know the expenses but I've known you know there are programs out there providing rebate for private parties or you know entities who want to invest on this electric charging system they will provide some rebate some help so maybe that's something you can consider and so I understand your answer so the eleventh person would have to pay the 250,000 to put the the meter in or does the board have to pay it meaning the association if it's for a private charger for that person's own use I would think that's for the eleventh owner to take responsibility if it's going to be a common enmity you know association is going to offer it for every owner to use of course that can be a common expense now you're in this industry do you see associations putting in meters and looking at this or is it because of the cost everybody just pushing the can down the road it really depends on what type of project we're talking about you know for relatively newer buildings I'm know actually on you know a lot of projects are looking into this because with the popularity of electric vehicles and you know the technology becoming better you know I think people would view this as you know a good amenity to having their project it tends to you know enhance values you know attract more you know tenants for investment properties or definitely you know brings value to the project people you know we're looking to whether it would be worthwhile for the association to invest on it but for a lot of older projects where you would have to spend a heck of money upgrade your electric infrastructure I think it's a huge challenge it's always been it was a study group formed back in 2015 trying to look at the issue of you know installing more charging systems for electric vehicles in multi unit dwellings basically the conclusion which is you cannot adopt a cookie cutter you know approach because each project has its unique challenges and issues for existing buildings it's really hard to accomplish there anything within the current laws that require of existing building to mandatorily put in chargers in the guest parking stalls if any only for places of public accommodation so if you are a place of public accommodation having more than a hundred stalls that that is offered to the general public then you have to at least have one stall that is you know exclusive for EV to charge I have the facility ready so hypothetically a mixed-use building where there's a restaurant which is open to the public but the higher floors are residential right and that restaurant by its governing documents has 20 stalls available for its customers mm-hmm would they have to put in electric charger since it's 20 stalls and that's all they have access to for public no because they don't have a hundred stalls that's offered to the general public you only have 20 which is you know below that trigger number I had actually interesting situation on the island of koai up in the North Shore right where an owner wanted to buy an electric car and there is no electric charging stations up there and so the board took the position well yeah you can do that and we have extra stalls we will let you put the electric meter there where you have to pay for it you have to pay for putting in the meter and you need to have some of the meters have this built-in wireless ability that when you go in you use it you're putting your credit card in or whatever so you can be paying for your utilities as you use it right and so he objected that and said no I want to put it in my own stall and the board said well you can do that too but you have to pay for all the costs the other the stall we're offering you is much shorter run we less that's expensive for you it'll be a lot easier if you do it here and it'll solve your need and he says no no no I think you have to mandatory put it in for all of us and then he went on the board went on to say you know if you look at koai which is very rural and very much a tourist destination the rental car companies don't even offer electric vehicles for use so wouldn't make economic sense for us to spend all this money to put it in because most of the people who stay in our condo it's a resort district our absentee owners and or tourists who use rental cars in the parking lot and so the rental cars don't offer they had a big argument about it but he eventually gave up you think the association had to put in the meter for him I mean if he wants it to be a private you know a minute for himself I don't see why the association would have the obligation to pay for all the costs especially when that amount is so unreasonable yeah all right well you know this is what the law is today we're gonna take a short one-minute break and we're gonna come back and talk about two bills before the legislature so we'll be right back in one minute aloha and welcome to at the crossroads I'm your host Keisha King I'm live at five every Wednesday where we have entertaining and educational conversations that are real and relevant both here in Hawaii and across the globe I'll see you at the crossroads aloha hey Stan energy man here on Think Tech Hawaii and they won't let me do political commentary so I'm stuck doing energy stuff but I really like energy stuff so I'm gonna keep on doing it so join me every Friday on Stan energy man at lunchtime at noon on my lunch hour we're gonna talk about everything energy especially if it begins with the word hydrogen we're gonna definitely be talking about it we'll talk about how we can make Hawaii cleaner how we can make the world a better place just basically save the planet even Miss America can't even talk about stuff like that anymore we got it nailed down here so we'll see on Friday and noon with Stan energy man aloha welcome back to condo insider with my good friend the attorney now on talking about electric vehicles the wave of the future as one might say and we just reviewed that an existing condominium has to allow an owner at the owners expense to put in an electric vehicle charging station for his use and his stall we've learned that existing laws don't require guest parking to be provided electric vehicle unless you have at least a hundred stalls for public accommodation and so if that one owner and infrastructure to improve the electrical to get a meter require a two or three hundred thousand dollar investment it's all on the owner not on the condominium board of directors so the law is recognizing that a lot of our old buildings just don't have the infrastructure to provide an efficient way to provide electric vehicles so now comes the legislature who has their own ideas and there's a bill we want to talk about I will try to paraphrase this it was a house bill number 559 it basically said that all residential multifamily projects which mean apartment buildings as well as condominiums by January 1 2020 a simple nine months from now the 25 percent of all their stalls have to be EV ready if you have more than 20 stalls in the building yeah you brought the bad news I'll tell you the good news is this bill has been deferred which means it's dead for this session well it says that the intent of the legislature what do you think of the bill in general I mean it's definitely I see there's efforts there trying to really you know I I think promote the the EV industry because I've seen a lot of you know discussions about you know the challenge we just talked about that's exactly what's I guess faced by the industry is the the charging problem because there's not enough like charging stations available for the EV potential buyers and existing users so you know but there's just I think a lot of reality that all the challenges the issues we just discussed about for existing buildings is too hard to accomplish that's why right now there's another bill SB 1000 it talks about for new buildings there's this push for you know as far as by the beginning of 2020 they want if it's a new multi dwelling unit building or it's a commercial building and you if you want to apply for a permit and you you have 10 or more parking stalls in that project then you got to at least have 20 percent of the stalls basically EV charging ready so let me just review right HP 559 which died said that every multifamily building by January 1 2020 had to have 25 percent of all stalls whether or not you own the electric vehicle 25 percent of all stalls had to be EV ready and it died which is the good news so what followed was the identical bill SB Senate bill 1000 except it said only new buildings they got a building permit after January 1 2020 so it'd be for all the existing buildings are carved out and it's any new existing bill is that right yes correct only applies to new projects who wants to apply for permits you know for construction yes and where did that bill stand so that one it's it's it was proposed initially in the senate right so now it has crossed over to the house and it is referred to several committees like waiting for further review it's in its second version already basically the current requirement is if you have 10 stalls or more you need to have at least 20 percent EV charging ready for new multi-dwelling unit buildings or commercial buildings so the amended version yes went from 20 stalls to 10 stalls meaning it actually made broader broader but then they said only 20 percent of the stalls have to be EV ready not 25 is that right 20 percent exactly look that's a new and that's moving that is moving and guess who suggested the amendment who that's Tesla well I understand that anybody who makes electric vehicles would have an interest although you know Tesla has always said that you know they're about the environment in the future and I think there's some proof to that you know because they certainly revolutionized cars you know electric cars you know people always said the big problem with electric cars used to be driving distance you know my car has a range of 320 miles I could drive on the whole island twice it could work an island and I put my car my plug into my wall my garage every night in two hours I'm fully charged because I only do 50 60 miles a day so it's a very if for me it's a very efficient means to get around a lot cheaper than and my other guest guzzling car I had I definitely understand and you know I also want to protect our environment you know when I look at the Tesla money all the supporting Tesla money not only comes from the you know EV players EV charging players but also all the you know environmental protection MPOs and GOs but you know we also have kind of concerns of course you know the developer is going to take into consideration adding to the cost of the building you know when you have all these new great features involved and that means we could have less affordable housing new projects on island especially you know when you won't be able to get a permit under this law yeah that's where the first thing that comes to mind that this isn't a free lunch yes to put in the infrastructure and the electrical capacity it's not cheap it's expensive so do you end up saying okay I have a new building with a hundred stalls I need to make 20 percent that's 20 stalls and so what am I going to do uh I'm going to put in enough infrastructure for those 20 stalls so you can buy an apartment that has an electric stall or doesn't have an electric stall and that's going to cost more money but just the basic infrastructure to provide it whether that buyer wanted an electric vehicle or not adds to the cost so the affordable housing model gets more difficult because you have to pass that cost on somewhere and then what do you do if the law changes and they say okay no longer it's 20 percent in five years now they say it's 50 percent of all existing buildings kind of like house bill 559 comes back to life five years because we're all in this campaign of global warning and save the environment so they build extra capacity I'm a big electric car fan but I'm not sure that that bill has the right approach to that to the issue yeah I mean maybe the technology is going to be advanced fast enough that it will address the issues that we're facing today maybe it will be there will be great charging technology that could be you know sufficiently charge it easy like within you know minutes or that would address the problem you know well it's it's a way with the future and I have to say that because I've been following this I bought my first electric car in 2012 I've been following this kind of somewhat out of curiosity and interest really insistently for since 2012 what's going on in technology and what's going on in the world is fascinating and I think the changing of buyer's habits will will force this to happen anyway because if you're a consumer owns an electric car you're going to be looking for a condo that will allow you to charge your car versus one that won't allow you to charge your car so I think we have to rely kind of on market demands sometimes to create these things but SB 1000 large you know how many committees it has to go through I think at least two more two more committees wow well I want to thank you for being here bringing us up to date on electric vehicles to all of you we hope you learned something about this complex problem what are you about condo world nothing is every easy it would be easy we know all the answers right off the top but it's very difficult to take existing buildings people's homes seniors who live and have to pay the everyday cost and make these global statements in the legislature that we're going to change the world and make everybody responsible for doing that without realizing someone's got to pay for it so maybe the non-lon revocable charitable trust will make these donations whether I doubt it so thank you for being on the show thank you all for watching condo insider we'll see you next thursday three o'clock for more association living information aloha