I'm still here in Somaliland and I'm having the best time of my life. Please Charlie walk in the streets of Somaliland. Smooth, smooth, smooth, no banana. Like I said, it's time to make Africa home again. I was in Ghana and Ghanians that lived abroad are coming back to make Ghana home again. I was in Nigeria and I saw the same thing and I never knew the same thing is happening here in Somaliland. That makes me so excited because I'm saying that Africa was being raped some time ago and we didn't have the strength to prevent Africa from being raped but it's time for Africans to resist from Africa being raped once again. It's a favorite village boy and I'm here in Somaliland but today I'm going to have an awesome conversation with a man who lived in the state and he's back in his home country to make a change and you know what, how we do it? We always have to go and find out who this man is but don't forget to like, share and subscribe. Mr Farhan, this is the third time I'm seeing you. Absolutely. Initially we met where? I think in Safari Hotel, right? Safari Gym. Safari Gym. When I was playing table tennis. It's like this guy is from Ghana because Ghanians are shot back. They have the same height. So definitely he's also from Ghana. I want to know why did you leave Somaliland in the first place? Actually my first left was not Somaliland, it was Somalia because the reason I left was the part where I live in which is Somaliland right now has been oppressed by the previous dictator, Siad Barre and I actually either have to be... I was one of the kids who actually started uprising so my parents thought that either I might be killed or I have to get out of the country. So I had the opportunity for them to fund me and send me to Qatar because my brother, peace upon him, he passed away, Rashid, he took me to Qatar for two and a half years just for me to get some money then I went to go to the States to get education and as I told you, I became a Qadari army particularly the commandos unit and I excelled actually because I was a young man, very active, very energetic probably was one of the youngest members in the army I became a commandos unit, Barre Truba in fact the current ruler of Qatar's father he gave me a cup because I came in the second second place for the Karate, for the whole army in Qatar so I had a good time there and we got trained for the Barre Truba in Jordan and I had a chance also to be given the wink when you finish the briefest ruler, the King Hussain himself has actually handed me the other one too as well because I was one of the best by the way for the army so they called it Jundil Mifale which was the leading soldier when there is a training, I was the one who does show the people how it's done oh ok, so from how long did you stay in Qatar? two years, probably two years and a half and why did you leave? my actual intention was to leave anyway because I was trying to get some money and go back to the States for education my other brother Abdullah who was older than Rashid he was in the States, I sent me an academic visa then I went to the States March 1985 how long did you live in the States? 15 years 15 years, what were you doing in the States? I went to school, in fact I went to various different schools and various different subjects mainly by community colleges and being there I saw there were opportunities that I could excel I was working at the gas station and going to school at the same time then I became very much enticed about the business itself I used to manage the station while I was going to school then I thought about why don't I start my own place my own business I believe it or not, I didn't have any money then one day one of my countrymen, Somali lander they took me from Oakland to Portland I never had experience about credit cards and stuff we were driving by car going through States, Idaho and all that eventually we went to Oregon I want to know what you were doing in the States one of the reasons I went there was I was going to school but at the same time I became fascinated to work there so I was working part-time at the gas station I was going to school at the same time which was community colleges then I realized the business I was in I was even better than the person who owned the business then I became enticed to own my own self one you wanted to start your own business that's the gas station to be honest with you, I was zero I didn't have any money too but you were in school and I was in school then one day one of my friends from Oregon came and visited me in Oakland, California and this guy, by the way, the guy is here right now but he doesn't know me, he doesn't know the way I did things that guy was using what they call a credit card and I have never had a never have seen the credit card it was 88 and I went to the States, 85 then I saw what it's this, man how come you're not paying cash, you say oh, this credit card, it works this and that wow I said, okay we went to Oregon I've been actually fascinated by that system then when we came back I have applied credit cards I get Master and FISA card from my bank Bank of America, by the way and with a limit of 300 dollars each then I said, man, how can I actually utilize this to benefit from this I have learned how to ask increase went to ask increase all of a sudden I accumulate other credit cards because I have a good credit record almost like 70, 75,000 credit lines of credit cards and I could only cash it out from about 35 another friend of mine then I still live in Oakland, California another friend of mine who came in for a wedding in Oakland which we grew up together who used to live in Portland they had a gas station a business Portland they visited me and I've told them I managed this business but I'm interested to do to buy business Oakland is in California California lifestyle is very expensive but Oregon was very cheap and when you come there and see if you can get an opportunity to buy one definitely cheaper than in Oakland then I went there I looked almost at about six, seven cities including Portland I didn't like any one of them except theirs I flew the next week I bought that place 110,000 dollars with credit cards no, 110,000 dollars but they only have equity of 35,000 and I built it up two and a half years I used to work almost like 18 hours a day you're not going to spend anymore no, I posted this school and I used to work 24 hours the gas station was open 24 hours I expanded the gas station to fast food as well with the recipe of mine I created a recipe which is a Somali recipe cayenne pepper, paprika, this and that wow, the gas station I actually increased the sales almost like 5, 6, 7,000 percent I used to work 18, 19 hours almost, I only had four hours five hours sleep my house didn't even have a TV or anything it was just one bed used to sleep, came back to work because I was a young guy like you strong, energetic two and a half years that place I bought 110,000 I sold it about 475,000 dollars young man, healthy I worked out with over half a million dollars since I was a sub-agent for the gas station business I have decided why don't I eliminate this middleman and be agent directly to the one of the big primary petroleum companies such as Shellfront, Shell or Taxical at that time, let me say at that time there was no internet and all the stuff so every big city in the States they used to bring Sunday papers from all over the States you can get it then you can see the ads for properties for sale I used to, I stopped working I used to just filter those so I came back I went 6 and a half months driving, looking for a property so because I have a cash I have the choice so finally I found another gas station for sale in some part of Seattle, Washington city called Bathel, it was belong to Taxical that's what I was looking for to cut the middleman out the Taxical, they interviewed me immediately they approved me too because I have done all these things that they require a person to do they don't consider just only the money for the expert and somebody who can actually enhance or improve the property I bought that place 225 in two years because I improved it I sold a million dollars I became a millionaire my first time I became a millionaire was 97 1997 I don't know you were about 10 years old I want to know what will happen to you after all this why do you have to leave all of that and move back to Africa I've never seen somebody asking me that question as I told you I've realized every idea everything you want to do it's already been done in the States so you become a franchisee rather than a franchisee so I have to move there that's one thing the second thing Africa is a virgin Africa is an abandoned of resources and also abandoned of consumers we are 50 countries 50 plus countries about 2 or almost 2 some billion people it's actually a virgin not only money to become a pioneer because when I read and I see things I see the wealth of Africa it's been siphoned by the Western then they sell back to Africa with a million times percent with the raw material, cheap raw material they took it back to them it's like what's happening right now at DRC almost every iPhone it has a litre yes, they buy in the peanuts they sell back to thousands of dollars so that's one thing the second thing where do I have to start this? I have to come back to my roots because we believe in Somali brief when you do your thing you can help the others so first start with your own self then you can help others just like what you do you did your thing you went to China you're looking good so you have to help the brothers like me you know what I say what am I? I'm not here to help you I want to be a millionaire too but you came back when you were coming back nobody told you getting crazy for coming back to Africa oh my god not only crazy to be honest with you I have to talk to you I never thought I would come back to Africa I would never visit back to Africa let alone I would leave I never thought because I became I almost became a sports agent in the States me and my partners some black brothers who used to play football to get injured I became like you know I intermingled with them so when I came back one of the other things that I want to come back is my own country because this country it's been actually put back for several reasons one is the previous regime the dictator Ziyad Barre second is a tribal and I have to educate them in a democracy and my people to learn how to live how to live in a what do you call it peaceful way how can't they help each other how can't they fight with the tribe they are one nation not only the man is I consider Africa is one tribe even humans are one tribe they are from Adam so when I moved into I moved from the States I didn't move right away back to here in UAE you know so I cannot just myself little bit I've lived in Sharjah for three years I get married there not this wife but other wife and I've lived there for three years came back both then I've seen there some opportunities available here such as tendering there's a purport it's not being used and Etubias you know it's over 100 million people with landluck exactly so there was a there was a this called Berbera corridor it's been pushed by the EU and and that time another entity used to call urinate which was also from EU they want to open this corridor for Etubias there was some tendering I involved those tenders then I won I stay here which I initially wanted to visit but when I won I stayed six months then I stopped and left in Berbera then I opened this gate you know now DB wall is in Berbera actually I'm the one who opened this gate Berbera to Etubias sport I'm the one who pioneered it yes I became the biggest tobacco one of the biggest tobacco dealer in the country but I don't smoke I get out I've seen it it's not really something that I want to be or promote it's almost like a killing people cancer and stuff you know then I started the media same time I was actually in the tobacco because I always choose to think how I can transform my people from tribal to democracy and stuff that's when I started home cable TV and how long has home cable TV been resistance? almost now what 18 years 2003 2003 then 2008 I went to satellite called Tyco which you can see all over Africa then 2010 I moved to Hartburg which you can see all over the wall the content that we have up here we became actually big part of the transformation of three governments here with the when I first came here there was an egal the founder of this country he passed away then in the second one was reality that's when I started TV reality fall out I was big part of that because I thought it was not the government was not actually working the way it's supposed to we became a almost like a force for the oppositions and I consider we were one of the pillars to brought to the governing that called me a party at that time was led by ex-president Ahmed Sinai one of the nicest person you can meet but you don't want to run for presidency? to be honest with you I never thought about involving politics but I'm contemplating that because in politics in this country there's a big gap in fact in Africa the population at youth almost 70 plus percent are youth people like you and the rulers are all 70 plus there's a big gap there's a misunderstanding there's a what do you call a lack of what do you call openness and nowadays people like you have to govern because it's a digital age and you can actually and I consider you are not very it would be very rare for youth like you to become correct but the older ones they do in the same regime what the others used to do just to siphon the source and the wealth from the public from the people of the country for their own use they never used that money they put it in a bank or some place because he thinks something that you didn't work when you keep grabbing it if you use in my it's finished but when you worked you know how to use it because you know how to do it so one of the biggest problems in Africa is all leaders who are corrupt you surprise some guy who is 70 plus who is stealing from people where he's going to take you to he's going to take you to it just like what happened to what do you call Mabuto he took billions out of his own country and never seen it back with these banks that you are taking it to they know that you have stolen from your country once you die nobody knows because you have hidden exactly and they use it so one of my things that I want to be part of with this transformation of African leaders to become a youth not the old man the old has to retire listen I want to ask you this question if you had the chance to change one thing in Africa what would that be? to be honest with you I have to we have to create a watchdog which is a corrupted corruption watchdog which has been actually created it has to be created and Western has to help with that so we can actually know the corrupt leaders their accounts what are they taking but can you imagine with the mayor there's some guys coming to govern he never worked in his life he doesn't have money first year he becomes a millionaire he's taking the the tax that's been collected from the people he's buying land he's taking over the farms he's taking the you know the public they are not dumps but they don't want to again to become migrants it's like we start right now in Mogadishah I'm very sad about that you know it's going to be internal it's going to be internal war which is not needed and it's all happening by dumb all corrupt leaders who are only thinking by themselves people who are dying people like your age most of these corrupt leaders their kids are overseas they are looking for they are getting good education they are in a peaceful place but the people who are dying it's a poor people up here in order for them to stay in power and steal the wealth of their own country from their own people but I want to be part of that I want to accept that thing I consider Africa it's a one nation we are all brothers and sisters you know we look alike if I go to Ghana now they will consider me Ghanis I go to Itobi they consider me Itobi I go to Kenya they consider me Kenya so since you have love for the youth to take over Africa definitely you have a message for the youth watching us right now because I have a lot of youth watching us at this very moment what would be your message for them? just empower yourselves make a change if you don't change and actually take it to risk and what do you call the guts and endurance you will sustain the way you are we all going to be migrating to Europe and America why we are going there what the corrupt leaders in Africa since you youth are almost the majority of Africa now you need to take over your own country with one of the things that I'm actually proud of all of you it's been educated either online so I didn't stop my education I came back and also continued my education I get educated myself so one of the things that I encouraged them encouraged of you to get educated that's the best wealth it never goes away even if the worst dictator comes he will not siphon that from you he can take your money but he cannot take your knowledge I'm here in Somaliland a lot of things have been taken away from me but they will never get my knowledge I will create and again and again I will replicate the same thing so the youth they need to realize they can lead they can govern they can make the change for their own countries and to some extent to the continent otherwise we're going to be recognized again because in Europe it's finished there's no resources America is finished there's no resources Asia same thing Latin America to some extent the only thing the world has now is Africa abandoned of resources and to be honest with you humans are savage they're going to have an interest to come back and to colonize again and it's going to happen again if we don't stop the corrupt all leaders that's my message you live in a very beautiful environment you did all this by yourself I did this by myself and I'm enjoying it to be honest with you I love living here I love living I love living with my own people I'm an American citizen by the way but I love seeing black people I've seen the different change that's going on there's a change going I'm very much optimistic about the youth to become empowered by their own countries and I'm very optimistic there will be a transformation in Africa Africa is to govern and live by their own countries and their own continent rather than in a in a foreigner that's my what I'm trying to say is that Africa for Africans that's what he's trying to say that's the message we've got a lot of Africans living in the diaspora we have a message for them what would that message be my message is for them to come back to their own roots to their countries before they be kicked out where they are because Africans Africa belongs to Africans and Africans in diaspora lately as it's happens they've been actually experiencing what do you call racial discrimination stuff I actually like to see that most of the time they've been discriminating the Africans so I want them to come back to their own countries and to make the change and to be implemented what they have learned from there I really don't want them to remain there get educated get experience from there and to come back and implement that to your own countries and to your continent definitely with everybody Caucasian Asians Latinos whatever they all coming back to Africa I'll be honest with you all other continents their resources has been siphoned and it's been almost marginalized the only place is Virgin resources what do you call it population everything's in Africa so you all need to come back before you've been recolonized your own countries if you stay in Europe if you stay in America I guarantee you for the coming 20 20, 30 years you will get a visa you will ask visa to come back for your own countries and you'll be giving a visa and all that by Westerners for your own country and continent so you'll need to come back ASAP and help your own people help your own country I would say thank you so much for talking to me I appreciate your time and thank you so much for watching don't forget to like share and I'll see you in the next one thank you very much I know it's not a joke for you to come into here you are man bound to make a change I'm actually encourage you to continue with that I look forward to seeing you again and please brother keep continue to empower, to educate and to encourage young black Africans to become leaders and rulers and people who can make their own country and continent I appreciate you so much thank you


Hi friends I am Purva and today we will discuss the following question. Choose the correct answer in the following and the question is the area of the circle x square plus y square is equal to 16. Exterior to the parabola y square is equal to 6x is a 4 upon 3 into 4 pi minus root 3 b 4 upon 3 into 4 pi plus root 3 c 4 upon 3 into 8 pi minus root 3 d 4 upon 3 into 8 pi plus root 3. Let us begin with the solution now. Now first we will find the points of intersection of the circle x square plus y square is equal to 16 and the parabola y square is equal to 6x. Now let us mark this as equation 1 and we mark this as equation 2. Now from equation 1 and 2 we get. Now we substitute the value of y square is equal to 6x from equation 2 into equation 1. So we get x square plus 6x is equal to 16 and this implies x square plus 6x minus 16 is equal to 0 and this further implies x square plus 8x minus 2x minus 16 is equal to 0 and this implies now taking out x common from first two terms we get x into x plus 8 and taking out minus 2 common from the next two terms we get minus 2 into x plus 8 and this is equal to 0 and this implies x plus 8 into x minus 2 is equal to 0 and this implies either x is equal to minus 8 or x is equal to 2. Now if x is equal to minus 8 then putting the value of x in equation 2 we get y square is equal to 6 into minus 8 and this is equal to minus 48 which is not possible and if x is equal to 2 then putting this value in equation 2 we get y square is equal to 6 into 2 and this is equal to 12. So we get y is equal to plus minus 2 root 3. Therefore the points of intersection of the two curves are 2 comma 2 root 3 and 2 comma minus 2 root 3. Now we also know that x square plus y square is equal to 16 is a circle with center 0 0 and radius 4 so with this information we will draw a sketch to determine the region whose area is to be found out. So this is the parabola y square is equal to 6x and this is the circle x square plus y square is equal to 16 with radius 4 and these two points C and E are the points of intersection of the parabola and the circle and this shaded region is the region whose area is to be found out. Now this shaded region is symmetric about x axis therefore we have required area is equal to twice into area of A B D C M O A minus area of C M O C therefore we have required area is equal to 2 into area of A B D C M O A minus area of C O M C. Now area of A B D C M O A is bounded by the circle x square plus y square is equal to 16 and we have limit is from minus 4 to 2 therefore we get this is equal to 2 into now area of A B D C M O A is given by integral limit from minus 4 to 2 and equation of circle is x square plus y square is equal to 16 so we get y is equal to under root of 16 minus x square dx minus now area of C M O C is bounded by this parabola y square is equal to 6x and this line and limit is from 0 to 2 so we have minus integral limit is from 0 to 2 and equation of parabola is given by y square is equal to 6x so we have y is equal to under root 6x dx this is equal to 2 into now integral of under root 16 minus x square is given by x upon 2 into under root of 16 minus x square plus 16 upon 2 into sin inverse x upon 4 and we have limit is from minus 4 to 2 now we know that integral under root of a square minus x square dx is equal to x upon 2 into under root of a square minus x square plus a square upon 2 into sin inverse x upon 8 so here taking a is equal to 4 and x is equal to x we get integral of under root of 16 minus x square is equal to this minus now integral of root 6x is root 6 into x raise to the power 3 upon 2 divided by 3 upon 2 and here we have limit is from 0 to 2 and this is equal to 2 into now putting the limits we get first we put up a limit 2 in place of x and we get 2 upon 2 into under root of 16 minus 4 plus 8 into sin inverse 2 upon 4 minus now putting lower limit minus 4 in place of x we get minus 4 upon 2 into 0 plus 8 sin inverse minus 4 upon 4 minus now here putting up a limit 2 in place of x we get root 16 into 2 upon 3 into 2 raise to the power 3 upon 2 minus putting lower limit 0 in place of x we get 0 and this is equal to 2 into now canceling out 2 in numerator and denominator here we get under root of 12 plus 8 into now canceling out 2 here in numerator and denominator we get sin inverse 1 upon 2 and sin inverse 1 upon 2 is equal to pi by 6 so we get 8 into pi by 6 minus now this thing will become 0 so we get 8 into now canceling out 4 in numerator and denominator here we get sin inverse minus 1 and sin inverse minus 1 is equal to minus pi by 2 so we get minus 8 into minus pi by 2 minus now solving this bracket we get root 2 into root 3 into 4 upon 3 into 2 raise to the power 1 upon 2 this is equal to 2 into now we can write root 12 as 2 root 3 plus now canceling out common factor 2 from numerator and denominator we get 4 in numerator and 3 in denominator so we get 4 pi by 3 plus again canceling out 2 in numerator and denominator we get 4 in numerator so we get plus 4 pi because here minus into minus will become plus minus now solving this whole thing we will get 8 root 3 upon 3 and this is equal to 2 into 16 pi by 3 minus 2 root 3 upon 3 and this is further equal to 2 into 2 upon 3 into 8 pi minus root 3 we take out 2 upon 3 common from this bracket and we get 2 into 2 upon 3 into 8 pi minus root 3 and this is further equal to 4 upon 3 into 8 pi minus root 3 therefore we get the required area is equal to 4 upon 3 into 8 pi minus root 3 and this is same as option C hence we get the correct answer is C hope you have understood the solution by antique care


Hey everyone Welcome to another live video. I'm out here in Yorkshire Coast staying here for a couple of weeks and As promised We are going to do Another live hot tub video as we discuss this topic So here we go gonna head to the The hot tub now. It's that time again. It's another knock survivor Live hot tub video. I wish I just put my towel over here. Oh wait. No, it's gonna damp. Here's Nala the cat You are live on YouTube Nala What do you have to say to everyone? Here we are in Yorkshire Coast live from the hot tub Try not to drop my phone Okay, why don't narcissists leave you alone? Let's see what people are saying in the comments SGN 2011 I'm dealing with one right now Who was stalking me on social media and Sending me his flying monkeys to spy on me. I Had to delete everything because I was getting scary Right Callum says they don't leave you alone Because they want to hurt you When you discard them they make it their mission to destroy you at all costs So true Callum the way I see it is Imagine you threw out a watch By accident you just dropped it in the bin. You didn't realize it at the time And it wasn't a very expensive watch If you wanted to you could easily go out and replace it So If you throw that watch in the bin You're probably not going to go chasing after it, but now imagine If you threw a very expensive Watching the bin Maybe it was a Rolex or Maybe it had a lot of sentimental value if you throw that watch in the bin You're probably going to be chasing down the road after the rubbish truck You're not just going to let it go out of your sight and in fact the odds of you even losing that watch in the first place Probably going to be far lower Than if you've got a watch that's just easily replaceable and it's the same thing with these narcissists You see they know your value They know how great you are And that's why they can't just leave you alone Thanks for the donation David Narciss targeted you because you had value You had significance They knew what they were doing when they targeted you and the way they're looking at it is If they just let you go and move on with your life.  It's like they look at it like you're walking out With all of the potential Maybe all of the resources You're walking away with everything valuable Which may rightfully be yours But narcissists are entitled if you're valuable and you're trying to get out of there you're trying to move on They're not just going to let you go because they see you as Being the one who provides the value To the relationship and they know that they need you if they really didn't need you They would just let you go They would just leave you alone You are very important to the narcissist And that's why they can't just leave you alone So that is really the main reason why they won't leave you alone It's because they know your value And the last thing they want to see is you moving on with that value Without them Because they already know they don't have any value of their own Anything valuable that they get it comes from you and they're very jealous They see it as though you're taking it away from them They feel like they're rightfully on you and towards the end they've got to see you as a problem And if you're just moving on and you're doing better without them that's gonna make them regret the decision So then they can't just leave you alone. They've got to chase after you They've got to try and sabotage what you've got So what's everyone else's thoughts on this? Why do you think these narcissists won't leave people alone? She says they don't want to see you happy definitely Because if you're moving on and you're happy and you're doing well That makes them regret things Makes them think maybe they won't made the wrong decision and a narcissist is not going to I did then they're not going to entertain that idea They're just gonna do whatever it takes to sabotage you So they don't have to Have that thought in their minds Neo says they feel like they own you and Want to ride the coattails? It's very true They do see us as their property St. Luga says they are negative people But I also consider something else may be affecting them there are tests in life, it seems Definitely they are negative Think about You know what does negative mean? like in mathematics It's when you're taking something away They can't just leave you alone because they want to take something away from you Which means that you've got what they want Jeanette says they are jealous and also create jealousy division and strife very true, it's because they see us as their property and When we try and get away That makes them feel jealous then As crazy as it sounds They feel like We are taking ourselves away from them It's like we're stealing our own body mind and soul away from the narcissist Donna says they need new gossip to keep friends entertained Oh, yeah, they love gossip They love drama They thrive in chaotic environments Sophia says they are not finished with you mentally or emotionally You are still doing well. They don't like that Keona says they are jealous people fruitful lane Is asking why does the narcissist feel jealousy? There is room at the table for all Oh, if only narcissists had that mentality If they did they probably wouldn't be narcissists at all because the whole nature of a narcissist Is that they have a scarcity mindset? They think there's not enough to go around so They have to cheat lying steel to get ahead They have to throw you under the bus Thanks for the donation Nico Nico says they get their kick from controlling something They know is more valuable than themselves That's so true They really do, you know They want to control the thing that they are envious of That's just how it is, you know, you should take it as a compliment when these narcissists try to control you No one wants to control a bag of crap When it comes to something valuable Like if you have an expensive item a nice car You're gonna want to be in control of that You don't want to see that going anywhere Because you know just how valuable it is So when they try and control you in some ways you can take it as a compliment It should just remind you of your value Sylvia says they want to keep us thinking about them, so we can't move on Definitely I agree with that It's like they can't attach to us But they want us to attach to them Give them supply So many good comments here. I feel like everyone's on the same page here Just enjoying a non-alcoholic beer The weather isn't the best here right now. It is raining a little bit But I really want to make the most of this hot tub while I'm here So how is everyone doing anyway? What stage are you at? How are things going on with the narcissistic relationship Or have you managed to go no contact Sunshine state is emotionally tired Steven says good to see you NS I Commented on your earlier video They are ungrateful for things you do for them because they resent the fact that they are incapable of returning the favor That's so true They want to keep you looking at yourself and thinking you're not doing enough Because otherwise you'd look at them and realize that they're not breaking anything to the table And then you'd wonder what you're even doing around them Human cyborg says my cousins have become the flying monkeys They're against me, but I can't go no contact with my cousins. What should I do? You've just got to go limited contact if you can't go no contact just limit the contact that you are given to them and Remove any emotional attachment Observe their actions, but try not to absorb it Respond rather than reacting and just keep your emotions under control Don't invest too much of yourself emotionally Because they will only Manipulate your emotions and use them to take advantage of you Niko says left my narcissistic business partner one and a half years ago Second best decision of my life life is great now That's great to hear Niko Sandra No contact with mine in 18 months Congratulations Sandra. That's a great achievement. I'm sure it's something that will inspire many people here Tea Prada Divorce five years Every now and then I still feel grief. I'm determined to keep moving forward SGN 2011 I have not gone no contact. He texted me yesterday and this morning He said he was looking for my desk at work to write me a love letter, but my office is locked Texted me this morning a photo Yeah, they will hoover you. It's because they know you've got something they want a Narcissist isn't gonna go around anyone If they can't get something out of them Anyway, it is getting late here Probably not gonna spend too much more time On the hot tub, but there will be more premieres coming very soon Another two tomorrow. I've been working on some really powerful videos lately Which will be coming up over the next few days so look up for them and If you haven't yet do check out my Instagram Narc survivor YouTube There will be pictures of my travels throughout the Yorkshire coast As well as Other cities and towns in the area so Yeah, if you haven't yet Check out my Instagram. It's Narc survivor YouTube Follow me leave a comment and Also, we've got the support forum on the website as well Just head to www.narc-survivor.uk Click on the forum button And you can sign up there and You can get support from other survivors and I will also be answering your questions on there myself as well So, yeah, definitely check out the Instagram and the website Thank you all for joining me Out here In the Yorkshire coast in the hot tub


OK, welcome everybody. My name is Hugo Tripares from Chibok Phyllis, outsourcing company in the Netherlands and also one of the project management committee members of the Apache CloudTech project. I got involved with CloudTech a couple of years ago, about two years ago, when we were building our own cloud solution and we had some problems with our networking. And we came across this company called NYSIREN, which was able to solve our networking problems. Now we'll go into detail a bit more later on. There's a lot of networking problems, but there was no real cooperation between, at that time, Citrix, who was doing a lot of work on the CloudTech distributions and the NYSIREN people. So in short, I needed somebody to develop the integration. My colleagues who were building the cloud found me willing to do it. So I spent a lot of time doing integration work with CloudTech on SDN networking, particularly on the NYSIREN branch. But I've ever since been involved with a lot of the SDN stuff inside CloudTech. So I'm mainly a user of the SDN stuff. I'm not really into the whole technical details, though. I, by now, am familiar with some of the stuff. But this is more a talk from a user perspective about how does CloudTech interact with software-defined networking. So I will be telling a little bit about networking in general in CloudTech, a little bit about how I, as a user, see software-defined networking, and then a little bit about the details about which providers are there in CloudTech, and how are they used from a networking perspective, and what actually is the user perspective on software-defined networking. So if I take five minutes to discuss CloudTech networking, I don't know. Are the people here already familiar with CloudTech? Yeah? Sort of, sort of. So OK. The quick rundown is CloudTech can basically work function in two different ways when you purely look at the networking perspective. There's the basic networking. Isolation is done using security groups. This model is the typical model from the Amazon-style clouds.  Very easy, open, transparent, and there's actually some hacks involved to making it really secure. You have to filter out requests, et cetera, et cetera. But it's a flat networking area most often directly connected to the internet. CloudTech also offers a different model, which is the advanced networking. And advanced networking is where you really get your own network. So you get your own private broadcast domain, you get your own IP space, and you're routed to the internet through a central router. It can be a virtual router that's provided with CloudTech, or it can be any of the devices that we currently support, like the Netscalers, et cetera. So as the end, in the beginning, for CloudTech we're really designed to solve a problem in the advanced networking. So we didn't focus on the basic networking. We really only focused on the advanced networking bit. And we will get into detail about that later. And ever since it really took off, we started with just an Azure integration, and by now we have about eight different implementations of software-defined networking ready to go in CloudTech in various stages of supporting all the advanced features. So what's the problem? This is the problem. We have this very nice cloud orchestration system. And we're using CloudTech here in the stock, as an example. But it basically goes for any type of cloud orchestration management. It can do a lot. It can talk to your hypervices. It can automatically provision stuff. It can do a lot, a lot of different things. But it's also one problem. There's this guy. This guy is sitting there in the data center. And he has this nice laptop with a USB to serial converter. And he plugged it into some network device. Or if he's lucky, he actually has a telnet session into the network device or an SSH session. And he's creating VLANs. Well, I don't know about you, but I find creating VLANs and configuring ports to be in a particular VLAN a very boring job. So we need to think of something new. And this is where network virtualization comes into play. Actually, being able from a software-controlled layer to control your network seems like a lot better idea. And in fact, if you expand on that idea a bit, you actually get to a point where you can not only control the network, you actually can create virtual devices. And that's what network virtualization is about. It's about creating virtual networks that, from the outside, look like any regular network you would just have created using your own VLANs or using whatever. But actually, they're just virtual constructs. You're basically decoupling the entire logic of the higher-level functions about broadcast domain from the actual important parts of how traffic goes from A to B. So same question, who's managing the network? Looks a lot better, doesn't it? So one of the questions I get asked very often is, what do we do with the network administrators? Is SDN oscillating the need for network administrators? No way. And we're using SDN a lot. And we haven't fired a single network operator yet. So the trick here is that we think it's important that people focus on the thing they do best. I mean, this is also the LinusGun. Do Linus operators really want to make sure that the LS command is working to that smoke perfection or that they want to work on a really interesting core stuff? They want to work on a really interesting core stuff. Same goes for network administrators. Do they want to configure ports the entire day? Do they want to keep on configuring VLANs on a system? No, they don't. What do they want? They want to focus on the stuff that really makes their life interesting, about how to fully optimize that fiber connection over 200 kilometers. How to get the last bit of forwarding power or forwarding speed out of the new switch they've got. That's the interesting problems. And it's my personal opinion that with software defined networking and network virtualization, we can move a lot of the non-interesting stuff, like configuring ports to automation tools, like cloud management systems, and leave the network administrators to do the really interesting work. So this is sort of what it means, say, like defining a common lingo. Decompose the control plane. What data is going where from the data plane? How does the data get there? And that's, again, the point about what do you want your network administrators to do. It makes network management easier, because you have to focus on different levels. No longer does the network administrator need to have a complete overview from all the way down to the ports, all the way up to what the application is doing with the network. But you can easily segregate and say, OK, I'm going to leave this bit to the automated tooling. And this bit is what I'm going to focus on. And it provides an API. And this is where we as system administrators are happy anything with an API. We can do stuff with it. I usually do stuff with it that nobody ever intended that we could do with it. And that's where it starts to get really interesting. So for the fine networking, a few years ago, when I started with it, when I got in touch with people from NYSERA, we were talking about network virtualization as a way to making a broadcast and main virtualized. And it was really simple. I could create a logical switch. And on a logical switch, I could create a logical port. Done. Deal. I got my switch. And it's virtual. Nice. Nowadays, stuff is changing. We've got APIs. We've got software-defined stuff that does our networking for us. So what's stopping us from creating distributed firewalls? Firewalls does no longer a single point in your network where all the traffic flows through, which is in most typical networks, a huge bottleneck for the actual speed you can get from the network, but really actually a virtualized device that does distribute the firewalling. Why a speed? 10 gigs, 100 gigs. I don't care. Load balancer, same thing. Do we need a static device somewhere in the network? Again, bottleneck in that network? No. We can have it distributed. So this is what currently a lot of the software-defined networking vendors and the people working in that area are currently working on. More advanced services. I think VM were coined the term software-defined data center a while back. I mean, if we have an API and if we can control it from software, there's no limit to the amount of stuff we can do. Now, there's a nice track about Open Daylight here at the conference. So everybody, you should look into it if you're interested in this kind of things. So onto CloudStack. There was a couple of people here who already use CloudStack. Maybe they can point me out where software-defined networking is integrated in this beast. It's a trick question. It's not. The thing we wanted to do with software-defined networking in CloudStack is that we wanted to hide it from the user. I mean, the whole point is that you need to know about software-defined networking to be able to use it. We built it into the core of CloudStack, really into the core networking functionality. And to a user, it's not interesting that there's a software-defined networking being used. You shouldn't even have to worry about it. I mean, no user ever worries about VLAN, except having to tell their network administrator to go and create one. But there should be no special setup, no special source, no magic to perform to actually use software-defined networking. So in CloudStack, we really made an effort to hide it as much as possible and make it a generic thing that everybody would be able to use without having to think about it too much. So when did it all start? Actually, before I joined the project, pre-ACS, for people who don't know, is a term we use in CloudStack to indicate that this was before the software was donated to the Apache Foundation. At the moment, it's a top-level Apache project, CloudStack. For that, it was lots of different companies from VMOps, cloud.com, but by Citrix. And actually, we had some kind of software-defined networking in there already. I mean, we were using OpenVswitch already, and there was the option of using the GI returnals on Xenserver. So you could create your own traffic flows, and the software would hide it. It was implemented in a way that really made it work, but nothing really with the ideas and current concepts we have to software-defined networking. So this is actually changing. There's a lot of people working on this. But this was really the first thing we had in CloudStack, and it focused on the GI returnals from the OpenSwitch to create it. And the different part was it was entirely controlled by CloudStack. You did not have to do anything as an administrator to use it. So it was really easy. It didn't need any kind of external components. Any Xenserver would do. There's some trouble with GI. Most notably, the fact that most network cards aren't able to do a lot of offloading for GRE. So in modern networks like 10 gigs and up, it's really difficult to get really good performance with the GRE standards. And if you create a full mesh of tunnels, it doesn't scale. So currently, there's been some changes. One of the students working for Google Summer of Code on the Apache CloudStack has made a lot of improvements. He ported the project to KVM. He made some improvements to the tunnel generation logic. So we're actually in far better shape. And the next thing that's up on the list is making sure that we integrate with Open Daylight. Basically, we want to have an open source, free to use type of SDN in CloudStack so everybody can use it without having to resort to the current commercial vendors. But they're not bad. That's nice. Where did my screen go? There you go. Scared of commercial stuff, I think. So this is Nesera MVP. When we released version 4.0, that was shortly after I got involved with the project, we were able to release the first version of the Nesera plug-in. At that point, the Nesera plug-in wasn't able to do much more than just create logical networks and logical switches. Looks really simple. It's actually quite an involved process if you look at what the open feed switch is doing. They push new flows. There's a central controller in a network with an API. You talk to the controller. The controller distributes the flows to the entire network. He distributes to the hypervisors and distributes to some other devices in the network, like the service nodes, which you need for the Nesera. The rule upside for us, why we really went for the Nesera next to the API in the ease of integrating it with CloudStack in the beginning, was also that they used an STT protocol.  I mean, we all know that TCP is very fast because it's offloaded by a lot of the network interface cards at the moment. STT is just stateless TCP. Basically, we stop doing the whole Cinex stuff. We stop doing the acknowledgments. We stop doing a lot of stuff. We just send packets, and they happen to have a TCP header. The big upside is that it's offloaded by the network card. The big downside is, if you try to render this to a firewall, see what it does with your connection table.  And the downside, well, if you call it the downside, you can't use the run-of-the-mill OpenFeed switch. Because it needs to support the STT protocol, you actually need a custom version of the OpenFeed switch. Lucky for us, most of the people working on OpenFeed switch are or used to be Nesera employees. So there was a lot of good integration. So it didn't really deviate from the standard OpenFeed switch. It was just the same old OpenFeed switch we all know and love with some added pieces onto it. So for us, it was a good choice at the time. And actually, it still is. Then things got out of hand. And we started looking about, what can we do next? So the thing we did is we looked at Nesera, and we said, OK, guys, what are your next innovations? And they said, well, we're going to focus on layer 3. Layer 3 means for us firewall, NAT, and the VPC. For people not familiar, CloudStack VPC is a construct in CloudStack virtual private cloud. It's sort of like you can build your own multi-tier infrastructure within the cloud, completely separate, which is our policy engines, et cetera. So multiple networks tiered together with policies between them. And this allowed us to do more interesting stuff. Suddenly, we were not only able to create networks, and we still had to rely on the CloudStack virtual router to do all the routing and all the interesting NAT stuff for us. But we could create advanced networks completely based on software-defined networking. So we had the isolation, which we already had in the four-point overviews. And we certainly were able to add NAT capabilities, like static NAT, support forwarding, source NAT. We were able to add some basic firewalling support. I'm calling basic, because at that time, it was stateless firewalling. Not really useful, but good enough to have some kind of port isolation, especially since we, as a company, run an internal cloud. We're not selling cloud services. We're using it for internal IAAS services. So that was good enough. And we had support for the VPCs, which is something we use a lot to separate applications from each other. And lo and behold, in 4.1, we found BigSwitch. BigSwitch was already there, was already looking at CloudStack. But because I integrated the MVP plugin, there was suddenly a platform, a way of doing it that allowed other vendors to jump on the bandwagon and get their stuff ported to CloudStack as well. So we had the second plugin, which is the BigSwitch plugin. So skipping the 100-serial layer 3 support, BigSwitch. They are using the same setup and as the Nacira plugin in CloudStack. And actually, yeah, it is quite similar. There's a lot of the similar things. They have some different ideas about how stuff should work. And I didn't even investigate in depth, but I really liked the solution. And what I really like about them is that I really focus on keeping everything or at least using open source stuff. They're a very open company. I mean, Nacira has some closed source bits and I believe the BigSwitch is mostly open source stuff. Not free to use, but at least open. And they work actively with a lot of the open standards. So there's a lot of interaction between them and other people in the community. And the basic support was, again, isolated networks and they had some extra features like being able to use the DHCP, et cetera. Then we hit our next milestone release and more people jumped on the bandwagon. We got Mirakura and Midonet. They were a Japanese-based company also doing network virtualization and they're really focusing on cloud-style deployments. So they had a lot of inbuilt features to do cloud-style deployments and we had Stratosphere SSP. But the Mirakura and Midonet, they really have a nice setup that includes everything with layer tree support, static net, routing, et cetera. It's basically the whole advanced networking concept of CloudStack in a virtualized concept. The downside was a bit that it only worked with the KVM hypervisor and they have a complete solution. So you will have to make certain choices. Like with Nacera, we can say, okay, I just want to use the network isolation and I leave the DHCP and the DNS to the user, to the virtual router. In this case, it's a package solution. You either use it with all their features or not. So there wasn't much ability to switch and mix and match different services. There was a bit of the downside, but other than that, it's a really nice thing. And especially if you're using KVM, it's a really nice solution and people seem to be very happy with the bandwidth and the capacity that it can handle. So there's a little good stuff out there about the Mirakura and Midonet solution. The next one, guys, I really tried to get some information on this. It just didn't work. I mean, if anybody can translate that for me, I'd be really happy to know. But my Japanese isn't really good. They seem to have a nice solution. I've been looking through the code and it provides all the functions that you would expect from a software-defined network and provider that provides isolation solutions. But other than that, even with Google Translate, I didn't really get that much information from their website. The feedback I got from a few people in Japan is that everybody's really happy with them and they're still actively supporting this plugin and people are using it. They have a lot of customers I believe in Japan. So it's a good thing and I'm really happy that they put in support in CloudStack. Other than that, I really can't tell you too much about this one. And here we are with the current status of technology. We've added VXLAN. Actually, it was quite a surprise for me as well. We never heard anybody about VXLAN or there were a couple of questions when are we going to support VXLAN? And then suddenly somebody showed up on the previous CloudStack collaboration conference and said, okay, I've got a patch. Here it is. If we integrate this, we have VXLAN support. So that was a really nice surprise. So suddenly we are able to say, hey, we have support for VXLAN. But I haven't been looking into it in that much. But it sounds very promising. It solves one of the real problems with the limited amount of available VLANs. So you can create a lot more and one of the really fun things about VXLAN, it's a proposed standard. And people are jumping on the bandwacking. So there's going to be network cards supporting the VXLAN standards, meaning that we can have faster forwarding, better support for it. And yeah, well, open standards is good. I mean, open standards means interaction. And especially in the cloud era, interaction is key with everybody. So more open standards, yay. Again, it's pretty new. It's still a master. It's expected to be released with a 4.3 release. So yeah, future is looking good. There's not that many. So far the fine networking providers out there more are coming every day. Open Daylight is doing a lot of good stuff. So we're hoping to get integration with that. We already did some work on it, but we need to be doing a lot more work on this, which is why it's great that I'm here at this conference so I get to attend all their talks as well. And of course, the next big thing is getting more features in. If you look at the current state of software defined networking cloud stack, depending on the different types of providers, depending on the different type of networking, they all support pieces of the functionality of cloud stack. Cloud stack is becoming a really, it is a really big project and it has lots and lots of features. And having support for each and every feature in cloud stack is proving to be quite a challenge. And you see that all the software defined networking vendors and all the people working on the plugins actually struggling to get all the features in. So there's features about security, firewalling, security groups, et cetera. One provider will support them because they have some easy out-of-the-box support. The next provider you need to rewrite a whole bunch of stuff because they have some security support but it's on a different level. And we need to follow the technology. I mean, a lot of this stuff is really bleeding edge. So a few of the interesting things that we want to support are listed here. The virtual private cloud is the thing we keep working on. It seems to be a key feature for cloud stack. A lot of people are interested in it and we need to be able to support it completely virtualized. So we can do the isolated networks but currently we're still depending on the internal virtual router to actually do all the routing and all the security. And especially with the VPC setup, it would be really great if we can use the software-defined networking vendors to use their higher-layer APIs, like the Layer 3 APIs, to do routing, firewalling, security, load balancing, et cetera. So the more they progress with their features in the software-defined networking stack, we will keep implementing them in cloud stack to make sure that we, yeah, eventually we can use this. Common configuration and setup. More personal pet peeve. I mean, there was a lot of trial and error in implementing the software-defined networking in cloud stack. It's sort of finalized how we wanted to do it. It's, the basic concept is fixed but now we need to get some kind of streamlined configuration. We need something easy and fast so we can make administrators understand how to add software-defined networking. Security groups. Yeah, it's the Layer 3 type of security with Mac filtering, address filtering. More advanced capabilities for the basic networking support. That's really gonna be tricky. And the most interesting thing for me is really the configurable on-ramp, off-ramp, where with the current, yeah, switch vendors jumping on the bandwrecking or software-defined networking, they are starting to provide solutions to do on-ramp, off-ramp. I mean, who doesn't have a big legacy installation in his or her data center at the moment? It's all nice that we can move to software-defined networking, but what do we do with the old stuff? We have really old stuff in our data center as well. And if you want to provide, for example, cloud bursting, you need to link those two networks. You can do it on an IP routing, so you put some service there, some service there, and you set some routing in between. But for some legacy applications, actually a lot better if you really have the same network. But if one piece of the network is virtual and the other piece is real physical VLAN somewhere, how do you deal with it? Well, there's a couple of solutions. NYSERA has a solution, or I should say VMware NSX actually. They have a solution. Arista is working on some solutions where you can really, yeah, on one port you have your virtualized network with all the trunks where you can, yeah, configure a virtual network, and it will link itself to one of the VLANs that exist in the current data center, making it easy to shift machines and services between cloud and on-cloud, which is especially nice for, yeah, either burst capacity or migration scenarios. And of course, we're all waiting for what's next. We don't know. There's a lot of talk about the SEM providers. Like when I started my talk, yeah, there's a lot that can happen in that space. Software-defined data centers. We probably need to do something with that. I mean, we're a cloud and orchestration system, so if there's software-defined data centers, we need to be part of it. So we have to follow the technology and the way of thinking of the software-defined networking vendors and the people really, yeah, thinking about that stuff and make sure that we have to support for it. And I think it's gonna change a lot for CloudStack in the near future. I mean, currently we're still depending on a lot of physical infrastructure and that will change. We're already seeing some kind of, like integration with UCS. One step in the direction of really automatically creating your hypervisors. Now it's hypervisors on which you create virtual machines, but if we just get stacks and stacks of hardware in the data center, we can on-demand create hypervisors when we need them. That's yet another scaling issue we can deal with and it's all automated by API. And that's what software-defined anything is basically about. So if we focus on how it actually works inside CloudStack, so we're gonna dive a bit into the internals of CloudStack and see how we did the initial implementation. So first of all, configuring CloudStack is not the hardest part of setting up a software-defined networking. I mean, software-defined networking requires some understanding about your network. It requires either commercial software or some tooling that you would probably need. You need to know a bit about OVV switch. You need to get some gear from somewhere. So the hardest part is actually making your network ready and getting all the software and all the APIs ready to run. I mean, if you wanna work with Open Daylight, you have to get the Open Daylight project, set up your controller, et cetera, et cetera, before you can even start configuring it in CloudStack. So by no means is CloudStack the really hard part of setting up software-defined networking. But since there are so many vendors out there, nowadays I just focus on what do we do inside CloudStack. So first of all, we have the concept of a physical network in CloudStack. It doesn't even need to be a physical network, but for now it's called a physical network. It's a way for us to identify which types of networks there are, where you can connect to in a physical space. And more importantly, it's about what kind of isolation method you can use. And the isolation method is currently used to identify how you want to separate your guest traffic from one another. I mean, I have two guests, I have two tenants on my cloud, how am I going to separate those networks from each other? The default is currently Stelvlan. So that's the default network and that's actually used for some of the internal networks for CloudStack by default, like the management network or the public internet network. And there's the guest setup. So in this case, I have two physical networks, one for management, which is also used for the public internet connection and one guest. And the guest, I was able to select the STT provider, which in this case allows me to, basically, enable me to select an Azure MVP provider in CloudStack. I could have chosen any of the other options for Big Switch or MitoNet. They're all in there and you can select them. This means that every guest network created will be routed to that particular provider and then you can set up and configure that provider. This is what the configuration would typically look like. You give it an IP address of the controller, you give it the authentication credentials. Some other interesting bits, every SDN provider has its own type of configuration that you need. In this case, for the VMware NSX, you need to create a transfer zone, which is like, it mimics the cloud zone. So you have a zone in your cloud and you have a zone in the NSX solution. And we have the Laotree gateway service. Again, that's a particular device for the VMware NSX solution, which is used for on-ramp, off-ramp traffic and the Laotree routing. So you give those ideas and that basically enables a provider. And the provider is a concept where the CloudStack orchestration engine can ask for services like prepare me a network or release a network or add a port to the network. And the next thing is the offerings. For people not familiar with CloudStack, CloudStack has this as a service model where basically the handover layer between administrators and users is all types of offerings. An administrator can define an offering, whether or not it's a disk offering, specifying how many gigabytes somebody can use, it's a compute offering like how many CPUs you get and how many memory you get. There's also the network offering. And a network offering details that if you create a network based on that particular offering, what kind of services would you get? Would this network have a DHCP service, yes or no? Would this network have some kind of DNS support? Would it have static net? Would it have a firewall, a low balancer, et cetera? So these are the offerings that you can create. The new thing in the offering here is the selector box for virtual networking. And virtual networking is the thing we introduced to be able to select that this particular network needs some kind of software-defined networking. And actually when you select it, you can select the multiple providers there. Again, this is due to the architecture of CloudStack. This is separate from what we selected in the physical networking where we just said, okay, I want to use this isolation type. This is where we really select, okay, this is the provider used when I create a new virtual machine, this is provider used to do all the work. You can set some other stuff here like quality of service, et cetera. And then, yeah, prepare the offering. How did the slide get here? Okay, so now it's to the domain of the magic. We go to the gurus. If we've created a network offering and we want somebody to be able to use it, we give them access to that particular network offering and sooner or later, they're gonna either create a virtual machine or they're gonna just consciously select and say, okay, I want to create a new network using this offering. The first thing that gets hit is the network guru. And a network guru is not a wizard old man typing in commands on VLANs anymore. We're now in the software defined area. So it's actually a piece of software that does stuff. And the network guru is the guru that really creates the network. So this used to be a placeholder thing in the VLAN because nobody ever needed to create a VLAN. That was what the network administration department was for and actually CloudStack didn't have to do anything for it. But in this case, we actually have to do some work. So in this case, we are going to call one of the APIs of the software defined networking vendors and ask them to set up a network and give us back some kind of ID so we know which one it is. So all networks in CloudStack have what we call a broadcast URI and a broadcast URI consists of a type of networking like an L switch or a VLAN and the identifier which specifies it. In the case of VMware NSX, it's a UUID in the case of a VLAN is a simple integer number. So we can always know this network is linked to this particular type of construct somewhere, somewhere. And the guru stores in the database and makes it available to use. The next thing we need to do is the element. And the element is a different beast from the guru where the guru deals with a network as the complete concept. The element is just concerned with creating a simple port or actually with a virtual machine. When a virtual machine starts, you plug it onto a network interface card and the network interface card is plugged into a network. And this is where the element comes in. The moment somebody plugs a network element or a network interface card on a network, the elements will wake up and the elements can deal with all those stuff. For example, elements deal with low balancing, elements deal with firewalling, elements deal with setting up the DHCP address and the DNS entries. So we added a new element specifically for software-defined networking or actually we implement one element for every software-defined networking vendor we have at the moment. And the element is responsible for making sure that there's a port connection. So it can be as simple as specifying the virtual LAN number for if you're using traditional VLANs or as complex as really going into an API and telling some software-defined networking provider that you need to connect this particular port giving this UUID to the software-defined networking switch. This is actually where stuff really got interesting in implementing it as well because this is also where you need to deal with your compute. With the old style of networking with VLANs, everything was in the network. So you just had to connect to the network, all done and proper. And here we have some interaction between the compute area where we need to configure the VM specs and provide the networking details for the VM specs and at the same time deal with network configuration. And since we're using virtualized networking, it really integrates with the compute stack. So we need all kinds of settings on the compute stack. There's properties, we need a supply when we create a network interface cards on the virtual machines, et cetera. So this is where we had to do some new stuff for CloudStack in allowing for this integration. There's a lot we can improve there, but for now you can, all the lists that software-defined networking vendors have some kind of code in the compute area so we can set the correct settings and the network element will actually prepare the network to receive those settings. And if you've configured everything correctly and every step works, the moment you boot up the virtual machine, the network will see the new network interface card and connect it physically or virtually to all the right networking providers, giving you the access you need. So to summarize, it's the network interface card which is the linking pin between the virtual machine and the software-defined networking implementations. There's some flags we need to set on the hypervisor to enable it to be found. So the hypervisor does some of the work. It talks, for example, to open V-switch. It sets some properties which identifies that particular port on the software-defined network and on the other end, the networking part of CloudStack will actually prepare the same network, set all the settings so the moment this port gets added to the network, it will recognize and say, hey, I know this port, I know this virtual machine, I have some configuration somewhere in my network for this machine so I know which communication should happen so I can build my flows or I can build my, whatever it is, the particular software-defined networking vendor uses. It's not really a common way of doing things. Some set a UUID on the network interface, some basically just detect the MAC address that's used. So there's some tricks involved in getting everything to work, but it's actually quite difficult to get it to work completely. And then, if you're completely lucky, everything works. So in this case, I have a guest network, actually barely readable, I think. Well, you just have to trust me on this, there is a network created here. And the same network happened, is created as a logical V-switch on the VMware NS6 or this is actually just the MVP manager which will show me. So in the entire virtual world now exists a network and there exists a few ports and they're all created. So the world is a happy place when this happens. And again, the real, the concept and the real goal here is to make sure that users will not have to worry about this stuff. We run this particular system at our office. Even a network guy usually doesn't even log in to the network manager every time he has to go in and he has to look up the password which means that he doesn't do it that often which is a good sign. It basically just works. So we're really happy with it. And that basically all there is to it. I mean, there's a lot that can be said about software defined networking and I think there will be a lot said especially the next few days here with the Open Daylight people and all the other stuff about software defined networking. But from a cloud stack perspective, this is what we have. So if you're interested in learning more, join the Open Daylight talks here. If you're interesting to know more about CloudStack, please join us in Amsterdam for the CloudStack Collaboration Conference. And if you want to know more about this, I'll be around here at the CloudStack booth or you can connect to me one of those things. I'll be on free notes, Twitter or whatever. Questions? David? So I've got a few questions for you. So we talked about, you said one of the future challenges handling security groups in SDN or security groups of that layer three type of routing and actual decision making still relevant when you have things like Open V Switch on every node, on every hypervisor now that, is there some thought to replacing that EV table functionality? Yeah, good question. So the question is, what's the relevancy of the security groups as currently implemented in CloudStack when you have software defined networking and Open V Switch on all the hypervisors? So actually a really good question. It depends on what we want to do with basic networking. As I explained in the beginning, we have to advance to the basic networking and in the basic networking, you need some way of separating your 3Ms from each other. And actually it can be done with the same concept as advanced networking. You can create a logical switch for each and every machine. But then again, there's a lot of people who are used to Amazon style deployments and even want to use it. And actually it's a fairly easy and simple way to provide some security. So do we need security groups as they're currently implemented? Probably not. It's going to go away. We probably no longer need EB tables or any of the magic that we currently do on the hypervisors to be able to support security groups. The new style security groups, as I currently envision them, is going to be more like port access security. You have a machine, you know which kind of traffic is allowed access into that machine. And that's something that's really helpful in a lot of cases. Even with advanced networking, it might still be beneficial to be able to say, okay, this machine has a port-based firewall. As I was saying, we now have distributed firewall capacity within the software defined networking area. It means that we can do advanced type of security. I know, if I know which application I can deploy on a certain machine, I can, together with that application, push a security policy that needs to be on that machine. And that security policy could include stuff like which IP addresses are allowed to connect to me, which ports are allowed to be open, et cetera. That type of security for me is part of the new style security groups where we can really have fine-grained security and say, okay, this particular group is an auto-scaling group of a particular application called MongoDB, I don't care, some application, it auto-scales, and every new machine that gets it gets a typical port security. Not on the host, because that means we have to rely on something that people might have access to, but on a deeper layer, we're going to enforce it in the networking layer because we have this distributed capacity. Did that answer the question? Yeah, I did. My next question is, you've been running MVP in production for a while now. Yes. Would you make the same choice again, especially now that you've seen a lot of the other technologies get implemented in CloudStack? Would you still choose MVP or something else? And any goods or bads that you've really discovered out of MVP or MES? Yeah, good question. Would I still make the same choice for running MVP in our data center as we do now, knowing the current state of affairs? Yes, I would. And there's quite a few different reasons for that choice. First of all, I really like technology and their involvement with the software that find networking area. They're really at the forefront of the revolution. They've been acquired for a huge amount of money by VMware, so it's going to integrate with a lot of their stuff as well, which for me means that there's a really certain future and a bright future for the Azure MVP product. On the other hand, the relationship with MVP is quite well. So I'm regularly in touch with those guys and we get really fed the latest tidbits about what's happening in the SDN space. So that's worth something as well. But for the technology, it's good. But probably if I had chosen a different SDN vendor from the beginning, I would have stuck with that vendor. There's not too much differentiating power at the moment to really say, okay, I'm going to really prefer this vendor for that vendor. And we went with send server, so we run our entire cloud on send server at the moment. So SDN was a logical choice because it's pretty well supported and the MVP is pretty well supported on send server. Had we gone the KVM route, we might have made a different choice because other software defined network institutions are better supported on KVM. So yeah, watch this space, I would say. Currently, it's the best choice and we're sticking with it, but I don't know, but it might change in the future. There's a lot happening. Any more questions? No? Okay, in that case, thanks for your attention. Please draw by the CloudStack booth if you have any questions you think of later on. Thank you.