Hey, my name is Thomas Maurer and I'm here with Karim Hanif from the Azure Stack HCI team. Karim is a PM in this team and he will talk about how Azure Stack HCI is delivered as a hybrid Azure service. Hi Thomas, thank you so much for having me. My name is again like Karim Hanif. I'm a Senior Program Manager here in Microsoft and an Azure Stack HCI product team. I'm also on Twitter if you guys want to send me anything at Karim Hanif. What we're going to talk about today is a presentation that we recently created with my colleague Cosmos Darwin fairly recently. I think we showed this in a community event a couple of months ago, just a month ago maybe, and it's a very new content. Hopefully, it will help you understand the Azure Stack HCI Hybrid connectivity, how it works and we wanted to go into details, so it's going to be quite a lot of detail and internals are going to be covered. Yeah, that is really exciting. I'm sure like our audience is going to love that we can actually go out and go through and see what is actually, how is it built, how is it connected, how does different things work together. So I'm really looking forward to that. But before we start, I quickly want to ask you if you can explain a little bit maybe about Azure Stack, especially Azure Stack HCI and what it is, because we just recently announced it and it was recently when GA. So not everyone is probably familiar with it, so I would be happy if you could share a little bit for it. Yeah, sure. So this is actually covered in one of the basics of what Azure Stack HCI, it's really great to watch this Microsoft-inspired video that Cosmos has created. So this is in YouTube, you can see the link in here. But in a nutshell, it's basically, if you think about it, it's a new operating system for Microsoft, and it's Azure Stack HCI. It was built on top of Windows Server 2019 core. So it doesn't have a UI, it's very similar to there, but we added a bunch of things. We removed a lot of things so that it's optimized for your scenario. It's basically optimized for being the best host for your scenario, for your virtualization environment. Yeah, I heard this is, I think, our customer ask a lot, right? They needed the past, they used Hyper-V and Windows Server and storage spaces direct and all of that. This is basically, if I understand this correctly, this is just an operating system optimized just for the hyper-converged scenario where you team basically stripped out all of the features which are not needed in that case, and added some cool Azure stuff there and some additional functionality. So I'm really happy to see what you have there. Yeah, exactly. So imagine that it's a server that has the failover clustering, software-defined storage, and software-defined networking all together. It has, like you said, we removed a bunch of the roles, so you cannot make it an active active server, or IAS, you can't use it as a web server. It's just to reduce the attack surface as well, so it's secure. And we just wanted to make it the best host for your VMs in your environment. Okay, that is awesome. And just to add to that, maybe, one other thing is that it's actually, if you think about it, it's basically runs on your server, on your premises with your servers that you bought from your industry standards, sorry, the OEM partners. We have a lot of OEM partners, and we have a marketplace where you can shop for these servers. There's a bunch of them that was pre-built, so you can go to that marketplace, get those, and we'll have links to get to those areas at the end of the presentation. But you buy your servers, you put it on your premises, and then you connect it to the Azure, and it's a subscription service, that's the beauty of it. So it's a subscription service, you pay per core on the server, so depending on the hardware that you buy, so that's how you do it. And today, we're going to explain how this basically works in the backend. Okay, yeah, that sounds really interesting, because again, as you just said, it's deployed as an Azure service. It's not necessarily like we're in the past, I really need to pay for Windows Server, I licensed that once, and then kind of like depending on what license I needed, I installed it, and now I actually download the OS, but the whole billing and some additional features are done through Azure. And so I'm really interested in how that works and what data gets sent and all of that, so really interesting. So can you explain a little bit more about like how it's actually delivered as a hybrid service and what that means? Sure, so let me just jump to the next slide and so go through that. So first of all, there are no software licenses. So the good thing about this is that since it's an Azure service, it comes with the Azure, you don't have anything to sign, for example, you don't have any standalone legal agreement to sign or anything like this, all covered under Azure services terms. And the other good thing is that you don't have to go to your upper management and get this approved because if you have Azure licenses, this is just another service on top of Azure and it will be all built to your Azure subscription. That's the good thing. And same thing with support. So you don't have to worry about their support contracts, you don't have to worry about like getting a different, so if you have support in Azure, you can actually get support for Azure Stack HCI. And the other good thing is we will, just like any other service, we will be offering feature updates, but they will be coming automatically for a measure to you and all you need to do is just go over the update process and update it. And we will be continually updating this service and adding new features. Okay, so it's really like, it's like an Azure service. It's like I have to contract the subscription in place, I don't need to care of the versioning in that can. And I get the fantastic Azure support, which I heard I think is if I'm right and you correct me is it is a dedicated team just for Azure Stack HCI. Exactly, we spend a lot of time with our, we have a dedicated PM that is working with the support team and just for training and making sure that, and we have very close connections with them. So in case if they don't have the information they need, they connect to us very easily and we worked together as a team. Okay, so like with that obviously, there are changes a lot in terms. So how is that integrated into like the operating system itself? I'm sure there must be some magic in the background. You mean the support? No, in general, like the whole, like the whole hybrid. Oh, I see, yeah, yeah, yeah, exactly. So let me go through that. So for example, we have this like a native OS level integration with Azure. And everything that you need for this service, we already built it into Azure Stack HCI operating system. So the, and the main component that makes this possible is called HCI SVC component. So this is a service that runs on and it's an integrated service that runs on the box. And what it does, it securely stores Azure registration and connection state within the OS. It manages the projection into the Azure portal. So your Azure Stack HCI can actually show up in Azure portal. It manages the connection heartbeat, licensing, billing, certificates, diagnostics and a lot more, right? So basically this is the secret sauce that makes the hybrid connection make easy. But just to be clear, this is not an agent. So this is different than an agent, right? So in agents, usually, you need to figure it out. You need to like enable it, you need to start it, you need to troubleshoot it. This is like, you don't need to do anything for this. This is, it goes together with the OS. So if the OS is updated, this is updated. And it's a protected process. So, it's a protected process within the OS. It's also cluster aware. So if you add a node, for example, to your cluster, it automatically propagates to that node. If you remove one, it automatically cleans itself up. So it's hassle-free. Okay. Yeah, that's pretty cool that it's not a agent like you have to again deal with. We didn't want to do that. Yeah. I've seen that many, many times that hosts have like a ton of different agents on it. And especially if you would have another, adding another agent for this. Yeah, exactly. And also like, as you know, in a lot of customers, for everything that they put on their own premises service, they need to get approval. And they need to make their case so that this agent is very useful because they have their own golden image. And in order to change that, it's really hard, right? So this is not something like that. Yeah, well, awesome. Can you show us a little bit how that actually looks? Yeah, sure. So let me actually do a quick demo. And in this demo, I have Azure Stack ACI, as you can see. It's very in Windows Admin Center, by the way.  And let's see, I just go to data application service, for example, right? So in that service, I can actually go ahead and stop it, start it, whatever. But if I search for Azure Stack ACI, I can see that service as well. And as you can see, this is for synchronizing Azure Stack ACI with Azure. But as you can see, you can stop it. You cannot restart it, you cannot pause it. This is something that you cannot do. But this is also, this is in the user's context, right? So what if you go to Windows Admin PowerShell as an administrator? And now I'm actually with the administrator. I'm looking for that service. I get the process and I try to stop it with the process ID. And as you can see, I can't even stop it as an administrator, access is denied. So that's what I mean when I mean that it's a protected service. And I can also, while I'm here, I can do get Azure Stack ACI and see that, I see my cluster and I can see that the registration is not made, it's empty. So, and that's what we're going to cover next. So how to actually register is actually the next step. Okay, so, okay, that is awesome. So you showed a couple of things. I love that. Like this is now really system protected because it's obviously an important part of the whole Azure Stack ACI system. And now you talked about the registration part, right? That was something I want to ask like, so when I set this up by default, like somewhere I need to like register it with my Azure environment, right? And you just perfectly showed that it's currently the state is not registered. So why do we actually need to register it? So good question because I just also wanted to cover it. I put a whole slide about this. Registration is very important and it's not optional. It's totally required because it's a subscription service. So we have to know, you know, if you think about it, it's like an Azure service that you buy, right? And we need to make sure that it's up to date. It's secure, it's a performant. And it's also like, we have to make sure that the billing is handled automatically in the background, the licenses are sent. So it's supported. All of those things require registration. So if you don't register it, then your system is not a valid license, it's not supported. And it will also have a reduced functionality. So you cannot create new VMs. Okay, okay, that is good to know. Perfect, but so now how do I register it? So let's say I set up my environment as you just showed me, how do I register it? So let's see. So how you register is like, there are two easy ways. And one of them is from a Windows Admin Center and the other one is through Azure PowerShell. And it's, they're both very similar because the actually the Windows Admin Center experience is actually built in on top of Azure PowerShell experience. So in both experiences, you need a couple of things. One of them is the Azure subscription ID, your region. And optionally, you can actually create it. You can name this resource or put it in a resource group. You can do that, all of those things, but it's optional, you don't have to have that. And the other very important thing is that you need to authenticate with Azure while doing this. Because if you think about it, it's very important because you're actually creating this, you're adding this subscription to your subscription and when you will get built, your support will go through that. So we need to know, you need to validate who you are in order for us to continue. Yeah, it just makes sense. Like I cannot just like assign my Azure Stack HCI to another customer and he gets built for it. That would be... Exactly. Awesome. So maybe we can just dive into a little bit more like how do you basically get this information, right? So in case you're probably a lot of you, a lot of your viewers are probably familiar with this, but just to reiterate, so in order to find the subscription ID, you need to go to patchportal.azure.com and you navigate to your subscription. It's, you can even search, there's a search bar at the top. You can search for that, your subscriptions and you basically get a list of your subscriptions and you can get a lot or you can get one. If you have one, you may have one, but in our case we have a lot because it's our test system that I took the screenshot from and you go there and you copy paste your subscription ID, it's that simple. Okay. And the next thing that you do is you get your region, right? So, and as you know, Azure is in, there are many, many data centers. There are many regions and some regions have multiple data centers in them. And we are as of general availability, we are in three regions right now. East US, which is the default by the way. So if you don't provide the region in, let's say in command or in a command line, we actually take that by default. Southeast Asia and West Europe. And we are also in 2021, want to expand to multiple regions and some of them are listed in here. But we also just to let you know, of course in Azure Stack, it's a service and we want it to be available to every region in that Azure is available. So that's the goal, but it's going to take a little bit while to get there, but that's definitely our goal. Okay. But it's not like, let's just say, I mean, it's only a registration where some metadata and billing information gets sent. So no data, like no VM gets automatically replicated to one thing. No, no, no. Yeah, we're going to cover all of that in coming slides, but no. And also like it's good to clarify that you can be anywhere in the world, right? So you don't have to be in these regions to run Azure Stack ACA. You can be anywhere in the world. It's just that the region that you select for registration should be out of this three. Just pick the closest one to you. Okay, that's basically what it is. But you can run Azure Stack ACA anywhere in the world. So you don't have to be in one of those regions. Yeah, yeah. No, that makes sense. That's good. So can you show me how to register it? Yeah, for sure. Let's go through the demo. So in order to register, first thing that you need to do is get the PowerShell module. I am actually going to show you the registration through PowerShell. You remember I mentioned two things and from Windows Admin Center or PowerShell, but I wanted to show PowerShell because I wanted to, since this is a deep dive, I wanted to show what happens at the back end. So there is a module in the PS, the PowerShell gallery. And I think it's the most popular one. It's called Azure AZ module, Azure module. And there are like multiple sub-models under that, right? So one of them is az.az.acai, and the other one is az.storage, az.appservice, blah, blah. You can have multiple, you have all these services. Ours is az.az.az.acai, but you don't have to install this. You can actually install the whole Azure module and you will get az.stack.acai anyway. Okay, awesome.  And of course, one of the reasons, one of the things you may ask is, hey, you said everything that I need is built in. How come this is not part of the OS? And the reason is that this whole az module is updated every three weeks. So we don't update ours every three weeks, but the whole az Azure module updates every three weeks. And we didn't want to put something that is updated. Already it's gonna be guaranteed to be updated into the OS and built into the OS.  So that's why we didn't want to include it. It's easy enough to get it to the cluster. So that's why we didn't include this one in. And let me go through the demo. So what I will do is, the first thing that I'll do is I just do a get cluster and I'll see my cluster name. I'll get cluster node. I get the node names and then the az.stack.acai. I see that I'm not registered, right? So I just go to register.stack.acai and then, you know, the subscription ID. I provide the subscription ID. And then I go to dash, region, resource name. As you can see, these are optional, but I'm just gonna select region and select West Europe in this case. So, and it's basically starts the process. But now I need to authenticate. And in order to authenticate, we're gonna use device login. And I have a code here. So I copied that code, went to the Microsoft.com device login and I enter that code that I just copied. And when you do that, you just want you to then authenticate with your credentials once, and when you actually successfully authenticate, then you come back and yes, you can see everything continues running. So it will take around a minute or two, one minute or two. And once you do that, then you get a result code. And in this case, I got success. And then you can actually go and check that you do another get Azure, like I said, again, you see that I'm registered. And you can see some things like resource name, resource URI, some information as well. But the good thing is when you go to Azure, portal.azure.com, the fun thing is actually, now you can see that demo cluster is there. It says preview in here, but of course we actually took this before we released. It's not something I'm gonna say preview in your case. And you can see we renamed the resource group to your cluster's name automatically because you didn't provide it and the location.  And this view is going to get richer and richer as we go along. But this is basically the first iteration of it. Okay, that is pretty cool. So I can now see already my Azure Stack HCI cluster. I can see, I saw, I could see the nodes and it actually shows up and I can start, like start doing a little bit of management. I could manage more cluster using Windows Admin Center, but I can also even do it in the portal now. That is awesome. Yeah, we're gonna add more and more features so that you can do a lot more from the portal. We have some experiences already, but it's gonna get better going forward. And I just wanted to show you a quick reference of what we covered, right? So as you remember, we installed the Azure module with this commandlet. And then we used the register AZ Stack HCI commandlet to register. And again, Admin Center actually uses this. If you're doing it from Admin Center, you don't have to provide all of these, but it actually uses this in the backend. And this part is mandatory. You have to provide your subscription ID. This part, resource name and resource group name is optional, but you can provide it if you want. And all the commandlets have actually the dash computer name and dash credential so that you can remotely use them if you wanted to. So for example, you can run register Azure Stack HCI from another machine if that is more convenient to you. For example, in our test environment, we have our nodes and everything, but we never hardly ever connect to them, right? We have our Windows 10 machine that we actually use as a management node and then have the Admin Center installed and we use that, right? So all of these dash computer name and dash credential in all the other commandlets, just like unregister allows you to do that and you can actually do get Azure Stack HCI from a remote machine. Okay, that is pretty cool. So this is exactly how you register the machine. So this is what me as a customer would do if I get a new Azure Stack HCI installed the nodes after cluster, I will then register it to the Azure environment. Now, since this is a deep dive session, we obviously want to know a little bit more about what is happening in the backend. Like what is actually happening while I'm doing this? Sure, so there are four main things. And let's go through them one by one. The first one is when we register, we create what we call the Azure AD App Identity. This is something that, this is an object that represents the cluster within your Azure Active Directory. It is quite important because, imagine that your on-premises cluster will do some things in your Azure tenant. For example, like upload billing information, that's the easiest example. And it has to have a permission to do that. So we need to have an identity in the context of your tenants Azure AD. So this identity is by the way, completely constrained by the normal role-based access control of Azure. And there are two permissions that we need. And as you can see in the screenshot at the bottom of the screen, they are called Azure Stack ACI billing.sync and Azure Stack ACI census.sync.  It will just go through, just like I showed you in the demo. But if not, then you need to have these permissions granted to the app identity that represents Azure Stack ACI in your tenants. So you can either have your AD admin to grant this. You can basically tell him, I need you to grant this to these two permissions.  But either way, we basically need this so to allow the on-premises cluster to send anything to Azure on your behalf. So that's one important part. And the second is these certificates. So with the app identity, you established like the representation of your on-premises cluster within your Azure AD, right? But now what you need to do is you have to let the on-premises notes to trust and authenticate with Azure AD. So that's what you're basically doing with these certificates. And the public key is treated as the credentials. By the app. And the private key is securely stored in the ACI ACC service that we mentioned at the beginning on-prem. And there are two experiences that you use. One of them is to allow everything to be managed by the cluster. And by the way, this is the default experience. This is what we use internally. And this is completely secure. And we definitely recommend, this is the recommended experience. And by far it's the easiest one. And what it is is that there is one search per cluster node. It's an industry standard X509 certificate self-signed with a very long RSA key. It's generated on each node. And it expires after one year. But the good thing is the HVISVC service handles the renewal for you. So it's automatically renewed. So you don't ever have to think about the certificates generated at the time of registration. It is renewed on the fly for you. Okay, yeah, that I like. That is awesome, right?  So, and this is like, we totally can tell you that this is, we don't see any security issues with this approach. Okay, now this is awesome because I've dealt with a lot of certificates you need to manage and renew and take care of. And downtime, right? It causes downtime. It causes like a lot of issues.  So you don't want that. And also the other thing is, but we know that some customers, they have a mandate, right? They have to use their own certificates. They cannot use self-signed certificate. So that's why we provide the second experience. And for that one, you just need to go to each node under certificates local machine and add the certificate from your CA. The certificate authority. And then when you register, then you can basically specify dash certificate thumbprint and provide that thumbprint in the command. There's that additional flag to do that. But of course, this is the certificate you brought in, right? So you need to maintain it. You need to make sure that, to remember to renew it when it expires. So that's the disadvantage of it. Yeah, downside of it. Yeah, yeah. No, that makes absolutely sense. Yeah, I would definitely prefer the default one, but I completely understand that some customers- Exactly, you have to do it, right? Have to do it, yeah. I mean, there's no other way. So, and then what we do is the third thing that we do is probably the most visible one is that we create an Azure resource that is provisioned by the Azure Stack ACI resource provider. And we provisioned that into the resource group in your tenant. And then you can provide that as you know. This resource has a type of Microsoft that Azure Stack ACI slash cluster. The good thing is, this is a first-class ARM object. So what that means is that you can search for it. You can participate, it participates in graph. You can organize it with tags and all of those good things, right? And the other important thing is that this is the foundation for hybrid management. So if you think about like, we have like so many scenarios coming in like freed-scale monitoring, VM cell service and much, much more. And all of these need this first-class object that can actually represent Azure Stack ACI that can participate in Azure Stack, Azure's resource manager model. And actually it is the keystone for all of this. Yeah. Now, I think what you said here, and I think a lot of people like, I mean, we went through and said basically, just very quickly, it's now a ARM object, right? But that means a lot. It's like, it basically is like Azure Arc. Like it has kind of like Azure Arc built-in to actually connect it to that full experience of as you said, like I can use tags, I can use resource groups. So if I'm aware of that, I can leverage it. It's not just like, just populate the name and just give it the string of like.  That's why I'm saying that this is the foundation because if we didn't have this, then all of these scenarios that you'll see coming to Azure Stack ACI would not be possible, right? So that's why it is the foundation. And the last thing that we do after this in four out of four is we, sorry, we do a first sync, what we call a first sync and we issue the cloud license. So in Azure Stack ACI, we sync with Azure twice per day. So every 12 hours. So when it successfully syncs and also checks, by the way, during that time, if the subscription is active, meaning that your email address is current and you're paying the bills, et cetera. And then what happens is we automatically refresh these cloud issued licenses and push them to each of the nodes. And these licenses allow Azure Stack ACI to fully function. They indicate to us that this is a completely legitimate instance of an Azure Stack ACI OS, right? And but the thing that to pay attention to is that these cloud issues licenses will expire after 30 days. So, but what happens is every 12 hours, it actually automatically renews them. So it syncs every 12 hours and it renews every 12 hours. So it doesn't have to be, like it doesn't wait for 30 days to renew them, right? And it does this across all nodes. So if one new node joins, new license comes in. And if you remove a node, the license will be removed. And everything is invisible to the user. It's all in the background. But this is important because in the case that the Azure Stack ACI is in policy. But of course, there can be some cases where you network goes down or it goes offline and we didn't want anything to happen during that time. So you have 30 days grace period. So if we cannot reach, like again, like trying twice a day for 30 days, 30 consecutive days, the license will expire. Okay, okay. And you can get this and you can see this in get Azure Stack ACI commandlet. You can also see it in Windows Admin Center. So we're not hiding anything. And your basically connection status will go to a state called out of policy, which means that, like you haven't been synced for the past 30 days. So all you need to do is just fix your connection, get the cluster online again and get the licenses synced, renewed. Okay. And also the good thing is you can sync whenever you want. So let's say you fixed your connection. You don't have to wait 12 hours. There's a, you can go through the Windows Admin Center. There's a sync option through the settings tool, or you can use sync dash Azure Stack ACI commandlet. Okay. So that is pretty cool. So like even like very unlikely, but if I have a huge disaster, like my connection is gone or something like that, for like, I don't know. Let's say it's 20 days already. Everything is like I don't have any internet connectivity. What I could do basically I could set up, for example, a connection over a phone, for example, and it's worth it to sync the license so that there's no issue if I have that problem, right? Yeah. Okay. And also like we are not, that means, you know, like that you can definitely have your Azure Stack ACI in a spotty network connections, locations, you just need to make sure that the first thing happens. That's the important part that then, that's where you get your first license and it's part of the registration anyway. But then, you know, like if Azure Stack ACI loses connection, you can basically sync every 30 days and you'll be fine. Awesome. So that would also allow me, especially with forcing it. Like I'm thinking about this scenario where I take my Azure Stack ACI cluster on the road, where I then, for example, could say, okay, now sync. And then for the next two days, I'm on the road and you would work and then I could force it again. Okay. And it's consecutive 30 days, right? So if you sync anytime in between every 12 hours, the 30 days starts again. Yeah. So it's moving 30 days. Perfect. Perfect. This is awesome. So now, obviously this is a question now about connectivity. We already touched this a little bit when we have connectivity issue. What are the requirements? Yeah. Connectivity. So I actually have, you know, I prepare this as a frequent ask questions kind of a fashion. So these are the most frequent questions that we get. So first of all, the first question that we always get is does Azure Stack ACI require continuous connectivity to the cloud, right? So we just talked about it. No, you know, we can handle periods of limited or even zero connectivity, right? And what happens? So let's say you connect, you lost your connection, what happens if the connection goes down? My VM stopped running or anything? No, everything will continue to run just normally. And even, you know, like your local tools like ACVMM, Windows Admin Center, PowerShell, these are all local, right? You don't need connectivity for these. And they will continue running. So we're not going to give you any problem doing that. Yeah. So there's no dependency I need to the cloud every, like if I want to do something, I could, like as you said, still use the local tools. Exactly. And the time is 30 consecutive days. Like how long will it take? You know, how long does Azure Stack ACI will run without the connection done? It's 30 days. And so this is also very, very popular, right? Can I use Azure Stack ACI and never connect to Azure? So air gap situations where a part of the network is totally separate from the network, from internet connection. And no, you cannot use Azure Stack ACI in these scenarios. And the last one is, are there bandwidth or latency requirements? No, there's nothing like that. We are, we send very, we upload very little information to the cloud every day, kilobytes worth. And that's why we're okay, you know, like therefore it's okay to actually run in very low-banded locations like T1 lines or even cellular lines, or even like high latency lines, like satellite connections, we're totally fine. We are not sensitive to descriptions in the connection, but also we are not sensitive to the bandwidth of the connection. Okay. Okay. And of course it begs the question now, like, okay, so if that's what you need, like what do I need to do on my firewall, right? And everybody has like lots of firewalls. Now you have one on the defender firewall and then you may have your other firewalls, your perimeter firewalls. And just to be clear, you know, having access to Azure is very different than unlimited internet access. We're not talking about unlimited internet access here, right? So we just need to give access to Azure. And what we need is one way, just outbound direction access over secure 443 HTTPS port to very well-known and published and updated weekly Azure IP addresses, okay? So that's all you need. And we are part of that. So and also you can minimize the exfiltration list risk by scoping rules that allow outbound traffic very specifically in these ways. So we can, you know, like as Microsoft, we publish the list of an Azure IP addresses, like I mentioned, weekly. And Azure services all included, Azure Stack ACI is also part of that. So you can quite easily get that list and there are multiple ways of doing this and there are lots of help out there that you can do this. And you can get that list and so that's what's called like network service tags. And then apply that to your configuration, to your firewall. And you can also do like automation with the scripts and everything. And on the right-hand side, you can see the endpoints that we need. There are six of them. So we need the front door resource manager, Azure resource manager, ARC infrastructure because ARC is included in Azure Stack ACI. So you don't have to do anything to have ARC. That's how we project your cluster in Azure portal. Azure Traffic Manager, Azure Active Directory, we talked about that a lot. And optionally, that's why it has an Asterix PowerShell Gallery but it's very convenient, right? Because if you don't have access to PowerShell Gallery then you need to manually transfer the modules that we talked about to do things like registration. Okay. And just to be clear, you have to do these permissions both on the Defender Firewall and through the other firewalls or perimeter firewalls that you may have in your environment. Yeah. And one more thing is that this is coming soon. It's probably gonna be one of the first feature updates is included in 2021 is going to include this is we are actually making this easy for the Defender Firewall. We are going to automatically update it. We are going to automatically check the IP address list that I talked about, weekly IP addresses that I talked about. If anything changes in there, we are going to automatically update your Defender Firewall. So you don't have to do anything in that sense. Oh, this is really great because this is now, I mean, I would just probably today I would just probably open it and let's just let my company firewall do everything. But now with that I get even more secure because it also limits the IP addresses and stuff like that, right? Exactly. And, but of course, like this doesn't change the fact that you have, if you have a perimeter firewall, you need to, you need the automation scripts to update that yourself. So, but at least on the Defender Firewall, you're good. Yeah. So again, so we talked about network connectivity and how I need to set it up and what I actually need. Now, a lot of people now have the question and a lot of customers have the question, okay, so what about data privacy and what does Git send? Does my data, like what kind of like data goes out and do I have control and whatnot? So we've got a lot of questions. Yeah, it's a good question and it's one that is very close to me because I actually am a PM for that. So I worked on it and data privacy is very important, right? And just to let you know, it's, it might be quite surprising to many folks that I just said ACI, actually we are raising the bar for data privacy as compared to Windows Server. Because if you look at this example, for example, in Windows Server 2019, as you know, like it had the Windows elementary build into it, it's enabled by default. You can of course turn it off, but it's enabled by default and it's transmitting fair amount of data by default, right? But I'm sure you guys are very simple or your audience is very familiar with Windows Telemetry. So we took this dramatic step in Azure Stack ACI and turned the Windows Telemetry completely off. So if you look at the Azure Stack ACI, all the nodes, and if you go to the Windows Telemetry, it's set to security. And there are four levels. And I think we're going to change this into like off, required an optional three levels in the future, but right now there is off security enhanced and full, there are four levels and security is equals to off. So you don't send anything, it's the lowest level and we actually did bunch of tests like exhaust tests just to see like if you're emitting in and we turned out we are not sending anything. So it's totally off. But of course, you know, like we need some information because this is a service, this is a subscription service on your mind so that we need to make sure that the billing is sent or your services are up to date, secure and running the way they should. So we introduced the service health monitoring and service health monitoring is the difference between Windows and Azure Stack ACI.  Right. And let me just go through like what we usually get a lot of questions that again, in a frequently asked questions fashion, okay? So what do we think? We think that as I mentioned, diagnostic data, which we obviously sent the billing data, how many cores you have. And again, you know, like a basic information to be able to show you the cluster in the Azure portal, because if you go to Azure portal, you will see the VMs, you will see some information, just the basic information about the VMs and how many cores you have. So that information needs to be sent so that you can show it in Azure portal. So those are the things that we sent. And you'll see in the coming slides, we are very transparent. You want it to be 100% transparent with this information. And of course, the other question is, does my personal data stored in Azure Stack ACI and get sent to the cloud? No, definitely not. Names, metadata, configuration of contents of your VMs are not sent to the cloud. Unless you basically set up a service like Azure Site Recovery, none of these are sent to the cloud. And PII data, so is it sent to the cloud? No, the closest thing that I can think of that we have is the cluster ID that is unique information. And also the hash of your hardware ID. And again, these are needed because we need to display this information in your portal. Also, we need to track that, you know, like, because in Azure Stack ACI when you install it, you get it 30 days for free. But when you uninstall it, you shouldn't be able to install it again and get another 30 days for free. So that's how we basically track, so we need those information. And how much diagnostic data is sent to the cloud? Few kilobytes, it's not a lot at all. And how is it used? It's mainly used by engineering team to make sure that everything is running securely and properly. And data is kept in the US and we only look at the aggregated data. We never look at individual data. And just to prove my point that we're 100% transparent, these are everything that we're sending. This is it. So it all fits in one slide. And if you look at it closely, you can see that there are things like, you know, like how many crashes you had.  It's just this information we need. So that's why we basically, and we were, I mean, we just took this unprecedented step and show you exactly everything that you're sending. This is awesome. This is like, this will make a lot of customers very happy because then you can just basically go and say, hey, look, this is all the data.  And then you need to show, for example, the security people, like the responsible people for that. You need to tell them, Mike, what is actually getting sent? And then you can just take that slide now you're showing and basically go out. Actually, they can do better than that. Let me show you how you can do better than that. They can actually see their own data themselves. So that's even better, right? Because now you're not actually showing something that is, you know, like pre-created and you know, like in my, well, in my mind, you can actually have, they can see exactly what they're sending. And again, this is for to be 100% transparent on this. And you just need to enable this event log channel, just using this top commandlet command. And then you use the getVinEvent commandlet to configure it and just to watch it, right? And here is a script that, you know, because it's not formatted in a tabular format. So you can actually use this list to see it in a very friendly way in a tabular format as well. So, and then you can send this to your security department or any interested departments, any departments that are interested in this. And you can easily see this, yeah. This is awesome, like this is like, I think this makes a lot of customers very happy. So you can actually go and say, hey, look, I can always look, if you don't trust us, like with, like what we are telling you, what it sends, you can have to look at it yourself and see what we are actually sending. This is awesome, really love that feature. So we were talked a lot about a lot of things, right? We talked about like how hybrid is built in, how to register, what happens when you register, the connectivity requirements, and a bunch of things, right? So what do you think? Like, well, where do you think this is going? This is already pretty awesome. Like a lot of stuff, which we actually helps us to like start the management out of Azure and providing that. But I'm definitely want to see more of what will be coming, what we actually, what your team is enabling us to do with that hybrid connection. As you said before, this is probably just the foundation of what you're going to deliver. Exactly. Nice, nice. And like just like you said, this is just the foundation, right? This is just the foundation, this is just the start. We're just getting started. And we, you know, as you may have already, you know, like figured out, we spent a lot of time and taught about what each component and what hybrid connection, hybrid experience should look like, right? And we did this because we want to deliver these very valuable scenarios and you'll see all of these coming like a fleece scale monitoring in Azure Portals, CERSOs, virtual machines from Azure Portal. All of those things are coming. And these are the things that customers ask us all the time, right? So that's why we had to have this foundation. You know, we wanted to bring this, you know, like we wanted to, you know, like put the thought and care to data privacy, the connectivity requirements, making it robust, making it self-managed and making sort of certificates renew themselves, the licenses take care of themselves, viral configuration can be done automatically. The support is part of Azure. So all of these things so that we have this very strong foundation so that we can deliver all of these scenarios without any problems in the future. And it's very exciting. And I think there are like a lot of exciting, a lot of scenarios that will make a lot of you excited in the future. And yeah. Absolutely. So now as we're looking forward to, there's a couple of things like fleet monitoring. I have a talk to a bunch of customers and what they have is like, they have like either branch offices, factories or like retail stores, where they actually need to have some infrastructure to run their virtual machines on top of it or their Kubernetes clusters or whatnot. And they actually need to have like kind of like, they want to have a central place to manage all of that. They don't necessarily want to build all of these VPN connections to all of these, right? They want to have a very easy way to manage these environments. And I think as you're just showing here, like fleet management monitoring in the Azure portal or self-service creation of virtual machines in the Azure portal. I mean, this is going to be really, really cool for a lot of them. Yeah. And a lot of customers, if you think about it, they all, I mean, in my experience at least, it's hybrid is, you know, they don't have everything in the cloud. Like if they do, like you say, exception, right? And it's every, all the customers, they have both. So that's why hybrid is super important, I think. Yeah. I think this is a great example. Like the whole Azure Stack HCI scenario, it really shows like one of the like best hybrid cases in general, like how you can actually take advantage of the cloud to make your on-premises environment even better, right?  We did that for years using Windows Server, Hyper-V, Storage Space Direct, and you can still do that. But this brings it to the next level where you can, where you don't need to move everything to Azure, where you still can run it locally, but you can connect it to Azure and take advantage of the power of Azure and the capabilities. So this is- And just to, you know, like a lot of people will probably be aware, but if you look at the Azure Stack portfolio, you have three products, right? In one side, you have Azure Stack Hub, which is fully controlled, 100% controlled, and you buy your hardware from OEM and you get your support from there. You cannot control it, but you have your Azure and experience is very similar to Azure portal, but it's on-prem. And on the other end, you have Azure Stack Edge, which is the, you know, like at the end of your network and you have your IoT devices connect to it. So all of those, like to cover all of those scenarios. And Azure Stack ACI is in the middle. So Azure Stack ACI is something that, you know, you can actually use your own hardware and to come up with these, and to bring all these scenarios and all these experiences into play. So it's best of both worlds, I think. It's kind of like flexible. It's like, you get parts of it, like fix like the operating system, but then you obviously get the flexibility to use different hardware and also have access to it and configure it the way. And they're also verified hardware. OEMs, you know, they put it in our, if any hardware is in our catalog, then it means that the OEMs sign up on it and they support it and they purposefully built it to be this on-prem, great virtualization host for your environment.  Oh, that's awesome. And again, I love, completely love our hybrid story. And I think it's very much, very important to highlight that we don't have just one product which does hybrid, right? We really want to give customers the choice from different hybrid solution, depending on their needs, whatever they want to build or need to build. And so I'm sure we have now a lot of customers who actually want to have a deeper look at Azure Stack 8CI and all the things we just talked about. So if I want to know more about it, where do I go? Great. So my call to action is I have a bunch of links in here. I wanted to, I provide you guys. The first one is the product page. And in the product page, all of these links below are actually can be found in the product page. So azure.microsoft.com, products, Azure Stack, azure.stack, slash 8CI. And a couple of the links in there that I really enjoy and I used myself, one of them is evaluation guide. It's awesome. I mean, if you go there and look at it, it's in GitHub actually, it will take you to GitHub. And what it has is it uses like, you can actually, it shows you with scripts and step by step, how you can configure Azure Stack 8CI in your nested VMs. So you don't have to have on-prem resources or clusters or servers to be able to test this. So you can, and it's 30 days for free. So you get 30 days for free, you're not gonna be charged for 30 days. So you can go ahead and use that. And there are scripts you can either do step by step from the UI, or you can actually even have a bunch of PowerShell scripts. And the good thing is you can take those PowerShell scripts and use it in your own environment as well, right? So that's very nice. The learn paths are really, really good. There are like, it talks about the foundations, what you need to learn to get better at Azure Stack 8CI.  And then I just wanted to also call out our documentation. As PMs, we spend a lot of time with our documentation team and to make sure that they have the right information, we work very, very closely with them. And in all of these data collection, firewall configuration, everything is there. And this is the main page for documentation. So all of these will help you a lot. Awesome, this is awesome. And again, we will put all the links into the description below. And so you can just go out and click on these as well. Just feel free to check it out. I highly recommend also the learning path. I also took it myself to actually learn all the little bit of the things. So if you wanna learn more, check out Microsoft Learn. There are some great modules, not just for Azure Stack 8CI, but for a lot of other Azure topics or for even like other Microsoft topics like Dynamics or Microsoft 365. So that is awesome. So with that, I really wanna see, thank you, Kareem, for being here today. I was really a part of- Of course, my pleasure. I learned a lot, especially the data part. I think they're gonna make a lot of customers very, very happy to actually see how these things are working in the backend and what is gets sent to Azure and how do we actually deal with these log data information. So thank you very much again. And for those out there who wanna learn more about the different scenarios, about different hybrid topics you're talking about, check out our event at aka.ms slash itops talks. And you will find more sessions. You will find more about Azure Stack 8CI. For example, AKS on Azure Stack 8CI, you will find topics about Windows Server, Azure and much, much more. So thank you very much for watching and I hope you enjoyed that session. Thank you.


Police officers John Balsersak and Joseph Gabrich did not receive Officer of the Year. In Episode 9 of the Limited Series, officers John Balsersak and Joseph Gabrich were recognized as Officers of the Year. That would never happen in real life. Both cops were reinstated in 1994 after being suspended following Dahmer's capture. However, they were never named Officer of the Year. Balsersak rose through the ranks to become the head of the Milwaukee Police Union. Dahmer did not wear glasses during his trial. During his trial, the alleged killer did not wear the iconic aviator spectacles for which he became famous. I felt uncomfortable staring anyone in the face. I didn't want to see anyone's face clearly. It helped me detach myself from what was occurring, Dahmer claimed in an interview with Inside Edition.


Let's talk about the health of our oceans. Oceans are the planet's life support as they support the global population's economic, social, and environmental needs. They are the world's largest ecosystem and regulate the global climate system. Sadly, decades of irresponsible exploitation have led to an alarming level of degradation. The problem lies in debris, plastic, CO2, and tourism. Increasing levels of debris in the world's oceans has a major environmental and economic impact. Every year, an estimated 5 to 12 million metric tons of plastic enters the ocean. The ocean absorbs around 23% of annual CO2 emissions and also absorbs more than 90% of the excess heat in the climate system. Consequently, ocean heat is at record levels threatening its rich ecosystems and killing coral reefs around the world. About 80% of all tourism takes place in coastal areas. If not managed carefully, tourism can pose a major threat to marine life. So what can we do? International cooperation is vital for the protection of vulnerable habitats. Establishing government-protected areas to conserve biodiversity and ensuring a sustainable future for the fishing industry is essential. We should eliminate plastic usage as much as possible and get involved with beach and ocean cleanups. In addition, people must be encouraged to make ocean-friendly choices when buying seafood or products derived from oceans. Most importantly, spread the message about how important marine life is and why we need to protect it.


everybody forced to your ripping 2022 Bowman draft baseball jumbo full case number nine picker team style Adam L Brewers Ben M Rangers Brian B Giants Chin H Braves Chris L Guardians Christian J with the Cardinals Donald A Pirates Donald B Marlins Ed B White Sox Greg R twins Jared L Blue Jays Jason B Rays Jonathan R Astros Kazuto Orioles Kyle S Tigers Mark M Reds Mark K Padres Matthew W Yankees Robert V Phillies Ryan B Angels so Ryan B a angels Ryan B you A's Scott S D-backs Sean J Cubs Stephen S Dodgers Sunigawa Mets Takahiro Rockies Trey with the Royals Sunafumi you with the Red Sox Jowee G Nationals and Zachary B Mariners good luck everybody just a sec here let's do it right here we go y'all and no paper base will ship light blue paper going to the twins Brian Acuna at a 499 everything else will ship to your team Lara Vreeling basher fractures Caden Wallace Luis Mesa light blue chrome first Bowman Rockies Gabriel Hughes Mercedes Kobe Mayo purple Jay Allen Reds number 230 of 250 Aqua Lava first Bowman auto Orioles Judd Fabian 159 of 199 very nice hit for the Orioles there that's awesome nice Judd Fabian you can make this one he's got a sweet sig man we'll get that magged Walker Adele Cruz fractures Prilip and Gilbert light blue paper guardians Jason Shoryota 499 fractures of house in Hernandez flip over to ESPN whatever oh yeah magic in charge of seven so I have it said to that but there's probably a bull game on ESPN God Hayden Dunhurst Gavin Cross what don't want what are worn by bull bull jersey how to remember the serve pro first responder bull alright sounds sounds like a big bull game first Bowman base Otto Jacob Mizorowski Brewers from what NT drew or or flawless Lesko Zavala pull a lot of big hits over there Victor J. C. Young Sonny Deshara Ryan Ritter the only really rip high-end right now baseball is all sold out today we do have a bunch for tomorrow though I'll give you a break schedule and we're live at 11 a.m. Eastern tomorrow is a Daniel Vasquez light blue chrome for the Royals in green first woman refractor Connor Prilip and twins 24 of 99 Polino Ben Joyce purple first bowman Justin Boyd Reds the 250 that was a paper Justin Boyd Reggie Crawford will Monday as remember everybody personals are full for tonight only limited space for tomorrow as well they're filling up quick blue wave first woman Otto Drake Baldwin Braves 109 of 150 we go Atlanta Brera J. C. Young magic or favorite tonight oh boy magic favorite against the Lakers those last time this happened maybe never maybe maybe like a couple times in the regular season in those years where Kobe had like nobody and the magic had like Howard and Lewis and Nelson and Torcaloo maybe some times in there Kobe between Shaq and Paul Gasol years strong stack Eric Brown Jr. score wise yeah where they're at they go to the stands you'll be able to tell how cold it is get a Trevor Martin and a Robbie Snelling got Adam Mazur Jordana de la Santos right ready for a super factor I'm not pulling out draft I've ripped a lot of draft though I was two chrome cards got the refractors there that's a Gabriel Hughes it's my bad gold paper will Monday as to 50 Dodgers blue refractor Jackson Job going to the Tigers number two 150 33 150 and base first woman Otto Pirates Jack Branigan ran again based on the location of this ball game it should be like the favorite ball game who I was in Dallas actually Drew Thorpe first moment refractor Carson Williams light blue chrome Carson Williams Alberto Campos Ignacio Alvarez on our refractors there fractors Willie Vasquez Dustin Harris come on now got redemption Kate and Wallace class of 2022 insert autograph for the Royals the base insert autos are number to 250 I believe Royals Kate and Wallace there I guess it could be lower numbered but I would expect it 250 Jay Allen is that on the car is that's part of the design so don't decide chase me draw you see that which means his like the butt and his hands doesn't look like it's part of the photo I want to find another one though light blue paper Andrew Pintard 499 d-backs CJ Allen that's ready to look for refractors Muncie and Volpe I've never seen anything like that on the car though it is something refractors McLean and Prieto yeah oh that it that is just like that okay it must just be like something orange in the background that's getting like like the color of the chrome and refractor kind of makes it look just slightly more bold than the others it's something to do with the coloring of photo huh weird their mind it doesn't weird though yeah it doesn't look a James Wood Nationals on the speckle or sparkle JR Richie Felix Valerio purple refractor first moment auto Astros trade on Browsky the third to 250 semi-munoz and Jud Fabian all right guys everybody just chilling anybody go back to work at anybody awful works still lots of time off taking time off light blue chrome Jacob Marcy Padres yeah we have a lot of people here take extra time off light blue paper Tigers Jackson Job to 499 Justin Boyd and Jack Branigan on the refractors anyone just don't have a job just be chilling unemployed on purpose so you know what I don't want it I don't want it blue refractor Matt McLean Reds it's number to five of 150 and base first moment auto Kevin Perrata Mets nice Kevin Perrata there you go nice hitting Mets there Logan Tanner and Nazir Mule John Kenzie Noelle sparkle for the Guardians the mingas Jared McKenzie refractors of Mikey Romero Hunter Barco fractors Marcella Meyer Parker Messick purple paper Blue Jays Kassavich to 250 blue wave first moment auto raise Chandler Simpson 146 of 150 Chandler Simpson Sean McLean Walter Ford don't forget guys chrome galaxy Star Wars releases tomorrow group breaks at Layton gaming comm that's right man much anticipated Star Wars release one of the arguably the biggest one of the year I mean I guess it depends if you like if you're a master worker galaxy there's random pack style there's random letter style it is gonna be awesome Caleb Caleb's gonna kill it have you watched the Jackson Holiday Invicta Tovar and Watson the tales of the Jedi I've only watched the first one we watched you so for one so far the next two or three or three yeah I'll finish them I mean they're quick they're like 15 minutes or less but it's cool because the next two or three go into like how they show count do transition right yeah I've read some of the I guess they're non-canon now some of the books about that it's pretty awesome yeah light blue chrome jada Fabian purple first bowman Henry Williams 234 of 250 Padres Joe lamp Dylan Ray get some sanitizer though my hands clean dry out my knuckles even more so it got cold here for once guys and obviously really dry and my knuckles are like chapped haven't happened to me since I live in Arizona and I just don't I don't I just forget to put on lotion because I just don't think about it's not part of like my daily routine in Florida a lot of people don't need it because it's always humid oh wait anybody excited for the world baseball class again a couple months vene and triantos what's that exactly it's like a it's like a small baseball tournament maybe I do it every two or four years or something it's just it's the world basically so everyone it's like national teams and stuff so the final will be in Miami in March it's like a two week thing I think first bowman auto Deandre Smith for the Mets you go Mets Mets having a good break Brooks Lee sees our Prieto I'm a little excited for it I'm thinking about trying to go down to Miami for some of the games like obviously the best seems like USA Dominican Republic Puerto Rico is a pretty good team is it all hosted in one location no so the first rounds are different there's someone like Tokyo got first woman gold Caden Wallace the 50 for the Royals on the paper nice Caden Wallace got Coloss Mason Barnett and I think some of the semi-finals but all the or some of the quarter finals but all the semi-finals and the finals are in Miami I try to go to see some of them it's like it's like a lot of teams like Netherlands Japan England has a team Canada has a pretty solid team to it kind of is like Olympic I think they just added baseball to the Olympics but it's kind of is like that it's a little bigger than a little different style of a tournament I think it is every four years in between the Olympic years is what would make sense yeah it's like a World Cup is ever four years but there's also the Euros every four years in between I mean yeah Clark Elliot Mason Milbrant or Carson Milbrant I don't say Mason Carson Milbrant I'm interested I'm interested can be pretty fun a aqua paper to one-on-one Brady House light blue chrome Gabriel Rincona as Philly's Tovar Walter Ford got Joe lamp Khalil Watson nobody else except for it what else got a green speckle first bowman a von Melendez D-backs 11 of 99 first woman base auto reds Kenya Huggins Dean Dylan Ray no man once every four years couldn't couldn't get it done probably talk about Justin Herbert again everybody going good numbers being thrown which Brooks Lee James Triantos all right what does everybody want to talk about that'd be a good conversation starter are there more doors or wheels in the world are we gonna get again a Logan Tanner Nazir mule would you rather have your arm made of cheese or made of chocolate can not be a food so I don't want to get tempted to eat cheese or chocolate Donnie blue paper first woman Dylan Ray to 150 D-backs yeah it doesn't come back though if you eat it well no but like if I do cheese to me guys Jared McKenzie it's just gonna get moldy I don't think that would be a good arm chocolate would get moldy less quick I would think I mean either way I'm probably gonna eat it off so that's a good result either way you're gonna have with no arm eventually yeah pretty much depends on how quick if it's chocolate all you all you do faster I think first moment refractor auto Mets Deandre Smith to 499 one personal goal to accomplish next year Mikey Romero Hunter Barco pirates I want to worry about worm was saying so it will smell or melt I would if it was chocolate let's eliminate like okay no like molding or smelling or melting it's just kind of like I was gonna say it's gonna build like a arm like Mr. Freeze has with yeah let's get all that let's it's a fantasy thing anyway so why don't we just you know make it like okay there's no molding it won't smell it won't bother you won't melt or won't you know whatever Dylan beaver's Marcello Meyer yeah we'll have any LT out outside like factors on basically personal goal to accomplish next year not to think about that one light blue chrome first moment Ignacio Alvarez Braves Aqua Lava Willy Vasquez raised number 103 of 199 is that the short print I'm just crazy their goal Kevin Parada hey Greg what's up man happy holidays alright AC that's a good goal yeah more wheels in the world for sure moving on from that Jack Branigan first moment refractor Brian Acunha light blue paper Victor I'll cost out of 499 reds first moment auto Phillies Gabriel Rincones base Coloss Boyd I think for the personal goal thing I want to by the end of next year I want to have built like a habit to post like some kind of content once a day don't he's posting content you guys don't anyone should stream video games and do that stuff yeah that's that would be the all kind of out the window yeah so competitive a lot a lot of time consumption it's just like you'd be able to put in the time we need you have to work in golf working in golf sucks and like it's just yeah the practicing stuff's actually not terrible you learn like Ryan Saramak Alex McFarlane you kind of learn like how you practice and like ways to actually enjoy it but I do not want to work in golf again green paper first woman Dylan Beavers the 99 Orioles AC is coming for my job light blue chrome chase me dropped red socks part of my personal cards order sliver Henry bolt it's an unpaid internship and you just have to sort and prep all my cards for grading thanks AC by you I'll buy you a flight down here though and you just sleep on my couch but my dog will wake you up very early every day like I got a stiff this person's face right now Jeff William jet Williams Jeff jet Williams two days off I mean you'll have most days off I'll have that many cards like a one day a week redemption Jordan Beck Rockies chrome prospect auto the Rockies oh no I don't know if we need to get at that right now SDS Dalton rushing first woman refractor yeah that's that's Donnie top-loading that's him yeah already already knows who Donnie is Jackson choreo Invicta Colton Couser Jonathan Mejia yep don't let me order your pizza I'll forget something I would like to hold the Jackson holiday super purple first woman refractor Jonathan Cannon white socks numbered 109 of 250 chased a lotter Jonathan Mejia light blue paper red Justin Boyd to 499 Roger Garius Cole young yeah guys remember personals are at least full through tonight at least there's a there's gonna be a good bit left over tomorrow tomorrow's get close to full as well for personals first woman base auto Mets jet Williams there you go Mets they are killing this break fractures Nick Bittison Michael Hernandez yeah I don't know about a personal goal this year I don't want to relate it to work because obviously I want to do certain things with work and go to shows and all that but I don't know to mark Johnson Nate Furman to a to write every ride at Disney while I have my annual pass that's what I want to do that's like what one ride a day or all the rides I hadn't ridden before like I'm not gonna I'm not gonna go right it's a small world I've been on that before does that teacups I'm not gonna write teacups either I like blue chrome Zach Dean Rockies Curtis me Denzer Guzman Tron Coaster comes out soon sounds like it'd be a seizure the Tron the Tron Cycle Coaster thing I have no idea what it is but I know what Tron is but on how Martinez Alex Freeland I've only seen like one video of the actual ride vehicles I just know like a bike I would suspect there's just a lot of bright flashy lights yeah I'm in my head hurt like a bright lights all night first woman light blue paper Logan Tanner to 499 Reds Aqua Lava Marcelo Meyer your Red Sox 133 of 199 Cole Phillips refractor first woman auto braves 22 of 499 Leonard and Huggins that's my personal goal gonna aim low something fun something I have to work too too hard for yeah I guess they're shopping sale AC I don't know what they're trying to do or how much salary they're gonna have to retain truly do not know yeah if we could have all the goals be achievement points Ramos Ignacio Alvarez thousand points we could be kind of a lot Donnie you're gonna have to play a lot of games the thing that's the thing you can't grind the ones that are difficult you know I mean but that's a lot of content that's true reviews some other random stuff that you're gold first woman Mikey Romero nice parallel Red Sox 4 out of 50 first round shortstop at our high school there you go Red Sox first woman auto base trades Gonzalez pirates Jay Allen Dustin Harris my work goal could be learned baseball that's a good one SDS if I could get more involved like I make like donations here and there to certain things especially like locally but if I could get more like physically involved that'd be good I just need more time to do that chase me drop first woman refractor like if I had one less day a week working out I would do I'd be more productive elsewhere I would like read books I would I would for sure go back to the gym that's everyone's but like right I went and I just I've been working so much recently that you know purple paper to 250 Andrew Pintar D-backs my wife goes to the gym so much Polanco Thomas Harrington you just go like running every day have the energy to do that I'd be pretty cool aqua paper to 199 Kenya Huggins Reds I will say my buddy Parker Messick Guardians light blue first woman even his wife did a boxy countertop themselves and it turned out actually really really cool yeah it turned out really good I'd also one day like learn how to like knit or something so I can like honestly just something where I can just only like is I try to imagine you knitting and it's just kind of not even have to be like knitting it could just be like crocheting like working with like wood or something something where you're using your like hands and you have to like devote all your focus to that it's where like you don't have yours you can't look at the TV and like what you know I mean like something like that where you just have to actually have to concentrate and it matters every little thing like I don't know just like a meditative like a meditative thing like that guys what I'm talking about working with your hands yeah pottery be another thing class of 2022 chase the lotter auto Guardians number 20 to 28 of 250 go get some Play-Doh could get some like some Play-Doh spaghetti for everybody at work bon appetit drew Thor first course is gonna bring back easy baked oven easy bake oven oh my god I could start cooking that's that's that's what I love cooking I need to learn like it I always want to cook like all the holiday meals and stuff Gabriel Arias first one refractor Gabriel Hughes first one refractor Rockies the bowman black shimmer on a countertop for table sounds like you'd put that in like a really fancy hotel that would be funny to like get gold vinyl countertops like like a super fractured I'm gonna get gold vinyl body paint one day and come in and break purple refractor first bowman hunter barco pirates number 244 250 it's gonna cost me way too much money and it's gonna be like little to no payoff probably I could be super fractor man though my alter ego what's your super power whole super fractors just ripping like K such a case green first bowman Jack Branigan's and 99 pirates super fractor man pull super fractors he hasn't pulled one yet the 30 cases what a pointless when yos valerio yeah it's like the odds are on the box dude what we have the power to change it like you touch a product that just changes that's your super power but only happens like once an hour I got to process that one purple first bowman auto blue jays Brandon Barrera 162 of 250 what would you change products into diamond donnie luminance probably well here's flawless bam luminance Clark Jada Fabian Orioles I would I know you wouldn't do that I would just mind control everyone to make everyone think luminance is like the next flawless and then I'll be like the next millionaire because of my collection it get more expensive quick you have to buy it all first and then rip it all well yeah singles yeah Trevor Martin Carson Milbrandt while retail partridge in the flawless you could then what are the repercussions of that you just have like duplicates or like what happens then I want to meet more of our customers for real though so hopefully more people come into the national this year there were a lot that came last year but hopefully this year even more show up Chicago that's a goal that's a goal every year it's for me to be more LSE customers best there is Jacob Mizorowski Troy Melton it's the best part about the national and it ain't close light blue chrome Dustin Harris Rangers Zoback Wreckley you know a few minutes here a few minutes there you just kind of take your time and like I like when when like when Kenzie would break I would kind of get up here in there and just hopefully people walk up you know white blue paper to 49 Jackson holiday Orioles nice numbered holiday Cappy Trey Lipscomb yes seriously SDS I don't know why they I mean there's got to be a way to use less paper base right I don't know the exact reason why it's still done so much green refractor Jonathan Mejia Cardinals stuff so 99 and base first woman auto if I'm Melendez for the D-backs Jordan sprinkle Owen Murphy a image variation of Jayce young for the Tigers we go Tigers bias show who do you guys think it's gonna win MVP this year in baseball and L and Al Donnie's going with whatever I say essentially yeah for speaks for me but Nate had Jordan Beck so I account for two votes yeah how it should always be around here I should pick out all the snacks we get I would do a great job Robert Moore Brenner Cox Al Jordan and El Soto you're gonna be a tough over the AL I'm taking a Tony American League I think that's just too easy yeah and El Soto I like that John I like that a lot and now I'll say and Manuel Rodriguez to 499 light blue paper twins Riley Green pager is the least biased person I know got a blue refractor first woman auto Mariners Walter Ford to 150 Riley Green South Stewart Jonathan Cannon I do like your don too though your I would just have to have a crazy offensive season Harper Harper with another one so yeah I'm gonna go with Tony I think he's crazy that he had probably the best year anyone's ever had and did not win the MVP just farce a two-way player confidant Hernandez National League I'm gonna go with I'm gonna go with Mookie Betts go the LA teams light blue chrome Joe Lamp Guardians Aqua Lava first woman Cubs Kate Horton to 199 you go Cubbies Yankiel Fernandez Christopher Pashola Julio in the American League maybe Trout gets another maybe he gets another I don't know so Vegas says Shohei and Soto as the as the MVP favorites got Carson Palmquist Rockies Zack Nito Angels Donnie's going Shohei and Soto base first woman auto Braves JR Richie the fractures Peyton Pallet Matt McLean I'm going with Tony and Betts I was thinking though I'm thinking about like a Cunha same Lee he went he was sitting in the National League but I went yeah Nasta Padres gunner has an al rookie that's a that's a good one for sure John he probably is gonna be top three favorite right for al rookie of the year Loller coffee you think a pitcher is gonna MVP so like Otani or like it or like just a just a pitcher it'd be cool to see though it's been a little one's the last time just a pitcher one MVP dinged up Dylan Beavers here gonna send a box and wrapper to the Orioles spot fractures of Simon Juan yeah I know Verlander won a couple MVP right Kershaw won a couple I think I when I think of I when I think of who was I think I think it's Verlander Kershaw the one MVP as a only pitcher earlier they went in like 13 I don't know was it the last one green first woman Chandler Simpson for the Rays number 34 of 99 Silas Ardoin to 250 first woman purple auto Orioles Vergola Kevin Perrata baseball MVP is usually just the big hitters usually yeah right yeah so offensive stats are kind of like prime for him for them VP in baseball right Riga as a Kunya scoring runs best way to win games so Kershaw one and 14 one MVP and 14 light blue paper to 499 Simon Juan Mets a Jackson Cox Rockies light blue chrome the issue with Verlander is that he had trout competition those years when he was in like his absolute prime Jackson choreo Austin Hendrick first woman base out of Kumar rocker Rangers you go Rangers nice rocker choreo Jacob Melton Astros yeah trash like I said didn't change anything and it looked fine over on this end I blame OBS though that's what I that's what I'll do trash I'll blame OBS so strange Andrew Pintar or Tega yeah so let's not wake OBS up from yeah it's not make OBS mad stop Lovar Lovar who's gonna win MVP the nationally and American League this year for baseball not allowed to say yourself aqua lava first woman for the Natch tray Lipscomb number 27 to 199 refractors of Nate Savino Drew Baker yeah dude so our thank you just gonna keep getting juice balls in their game so Aaron judge can keep hitting home runs like like can like everybody else just used can we just say baseball so I don't care if they're juiced or dead I just want to say I mean let's make them juice let's everyone have these juice baseballs the 499 Sean McLean Dodgers first woman light blue paper let's give everybody juice baseballs come on now would that make the season more fun or less more fun Steven so back sit down I'm all for it dude juice baseballs please bring them back so much fun give Donnie a reason Donnie wants to see dingers I also want to see the end of the game too yeah well black first woman auto Tyler Locklear 70 of 75 Mariners one of my favorite parallels they are always clean there you go Mariners James Wood tray Lipscomb baseball games like the issue is like they always end after like four hours it feels like they never end trout and then Goldie goes back to back I respect that that's that's that's pretty good pick right there blue refractor Zach v.


Over 242 years, wars have changed. Weapons have changed. Uniforms have changed. But the heart of a Marine remains the same.


I think the best way to start a behind-the-scenes is showing behind-the-scenes. Also, I wanted to start by horrifying people with the unmanaged cable mess that this is behind my studio. This is not finished. This is where it's at because I'm still figuring out where things go. Once I figure out where everything's go, I will take the time to cable manage it. In the short term, there's just going to be a lot of this going on and whatever that is over there. Now, this is part of the studio design because this is the opposite wall of the studio. That down there is just a series of USB ports. That's how all the computers and everything are back here. There are actually no computers in my studio and there are essentially a couple of main components. First, that's the ingest server as I call it. That ingests all the video. It has several HDMIs hanging off the back. Those are all the inputs that bring the video in. Those are HDMI keystones, which we'll have on the other side that we plug the cameras and different feeds into. There's a USB capture card and another one because this one loops through this computer over here, which is my main computer that allows me to actually dual-purpose a camera as a webcam. Maybe I'll do a more in-depth on that, but all I'm doing is looping it through twice through two different capture cards. That way I can use one camera for two different devices. So they daisy-chain to each other the two devices. It allows you to use the camera for a webcam or use it for the videos. Then, of course, my Synology server. The one 10-gig switch, which is kind of, for now, nestled in between here, Unify switch. And then 10-gig TrueNAS server down here for all the videos. And then, you know, I've got to duplicate all the data. There's at least two copies here and one copy off-site. So another TrueNAS server down there. And then I have my Synology, which does the video cameras and some Synology things. And then the Home Assistant that I will do a video on because that's the automation tool I use for all of this. And, of course, you may have noticed the rubber on the walls. We'll talk about that later. It's basically loaded vinyl and helps with all the sound done to me because that's a furnace. That's a workbench because this is the work area because I did most of the building from a raw empty basement to this with just being my friends. And that is going to be where the bathroom is. And there's currently just this foam stopping the hole in the wall that would be into my office. This is going to be a whole bathroom space. So this is the raw behind the scenes. Look, and then we're going to leave the basement area. Well, partially this is my living space. We're building down here. My wife's putting carpet in. That's all the boxes for the square carpets that are peel and stick. So that'll be built unrelated at all to the studio. But what is related is we have these cool doors that we just slide close so no one has to look at what's going on in there. But it'll get cleaned up and I'll do another video after I do the wiring cleanup. Then if you can't tell by the glow coming through the edges of this door. And yes, this is all in my basement. This is another one of the barn doors with a slide on it. And then we're into the studio space. And yeah, this is how we built it all out. It's weird, sad. It's not necessarily complete because it's always going to be a work in progress. But we'll go over here and a lot of people asked where the desk came from. Pretty simple IKEA. It's just an IKEA countertop bolted to the wall over there. I'll be leaving lots of links down below to all the different parts and components we use to build it. When we talk about this in a moment, I'll show you some of the pictures of build along the way. Now we have the microphones and everything and the lights all mounted to these bars up at the top.  This is a poured cement foundation. And this is just black pipe I picked up at the hardware store. So you just get this black pipe and they will cut it at most hardware stores right to length. The length is a little bit short. So we actually had to put one joiner in and bring it all the way over there. And then you just use these bar clamps. Now this is mostly from my old studio at my office. So it's the same. If you watched that video, it's the same bars. Well, not exactly these had to be a little bit longer than the ones at the studio. But the concept is the same and the same clamps. This keeps everything off the floor. And back to, as I had mentioned, really, there's nothing on the floor but some carpet and, well, rugs and those USBs, which are still a little cable management to do under there. But essentially everything plugs in the USB, just like you see on the other side. That's how all this plugs in. So there's simply no computer in here. Pretty simple. Now we still have the TV stand and this is an egress window. I've got to get a curtain for all of this. That'll actually cover all this up just to make it look nice. But that's, you know, future project there. There's the door that will go to the bathroom that doesn't exist right now. I wanted a bathroom in here for convenience because it's all the way downstairs. And why not have a private bathroom next to your studio? Makes sense. Now this is how I see things. This is my main studio cam, the Canon C100. We've got the teleprompter on there. I don't really script out my videos, but I want to make sure I get things right. And if you can see, it says like, CVE-202-144-142. That's how I'm able to steer dead at the camera and sound smart and read things hopefully accurately, but still sometimes, hey, mistakes are made. Over here, this is a field monitor. It lets me know what things look like in the main camera. This is my Sony camera that gives me a view when I'm looking at this monitor and sharing the screen. And then the sound deadening is provided from this auto mute blanket here, plus these tiles on the wall. The tiles on the wall aren't going to be really big on the sound deadening, but they help. Then this is a drop ceiling, specifically what they refer to as high NRC to kill sound as well. That's why it goes from echoey when I was in a hallway to such a nice quietness when you get inside of here. Now, I do have this big beanbag over here. My wife bought this a while ago and weren't using it, so I tossed it in here. I sometimes sit and read on my emails and stuff with my laptop here because it's kind of comfortable. But it's kind of the cool accessory in here. And throwing these rugs on here helps with some of the silence and sound deadening, as well as these are just from IKEA as well. These are to stop any reflective sound that heads towards these walls. And eventually we'll be covering up some shelves that don't exist yet. I have a few things from the old office here, but I'm going to put some shelves behind there. And instead of putting anything nice or having to look at messy things on the shelf, I'll just be putting these up. And if I need something, I can just walk behind them. There's, you know, a couple of feet of space back there.  And now in front of the camera, and this is ultimately what it does when you have all this stuff, all the wires and everything over there, you get this simple, clean look right here. Or at least I think it's relatively clean. It makes it pretty distraction-free from me creating videos. And this is also the reason I moved it to my basement. And so I had a distraction-free place. And I see distraction-free because I'm easily distracted. Even though my staff would leave me alone properly, I couldn't help but compel myself to go in and see what's going on in the other room. So I still have my business. I still have my, well, somewhat of a studio space there. And that's where some of the bigger projects are going to be filmed. I'm not going to drag servers over here to my basement. So I'll film some stuff there. We have all of our demo rack and lab rack stuff. And then bring that footage back here where I can focus. There's nothing around me to distract me to do something else and get work done. Now a little bit about the build I want to switch to. And I do use the stream deck. And that's one of the reasons for the way the studio is built with the camera feeds and being able to switch between them. So this isn't an edit. This is literally me just hitting a button. And then I just turn my head towards that monitor with that Sony camera right here. And then we can talk a little bit about how I actually built this. Now, I can take what I'm sitting here and I'm on this computer. And we're going to go ahead and move over and I can slide over to that screen. This is something you can't really see, but it's how I'm able to grab and resize things. Just using OBS and move myself around. I use barrier to have one keyboard and mouse, but multiple computers under control. But now let's quickly get to this right here. This is the raw studio space and what it looked like before we started. It's just a standard porch cement basement. There's that egress window that, you know, that's it. We actually use the egress window to throw all the wood in through and get it in there. And these are what these projects start out with. Just a big pile of lumber and me spending a lot of time on YouTube figuring out how to do things. I'm not afraid to try new things and dive into, you know, trying my hand a little bit at construction. And this is how we built this, you know, following some best practice, calling on some friends that had some experience doing it. So as you're doing a lot of labor, they're usually more than happy to come over and point and tell you what to do, such as I did all the electrical, but I did have a master electrician friend come over and point.  It's usually a better way to get people to come over and help you rather than a, can I use your expertise? And I offered to pay him as well. And he used to my neighbor and he said, nah, you don't have to pay me for it. I said, you know, I value people's time. He was willing to trade as long as he didn't have to pull any wire because well, I don't blame him. This is what it looked like actually when it was almost done. I want to point this out. This is that IKEA desk. It is just a butcher block desk along with some strut things holding it up here, bought these over at low. So it's not an expensive desk. It's not, it's custom, but it's not particularly, nothing really special about it. I think it's actually the walnut butcher block. I don't remember exactly which one I bought. I've already lost the receipt. I think it's been put away somewhere and I'm not sure where's I tried to find it before the video. But then we put the sound tiles on the wall. There's the 3d printed case for the rise pray pie. There's the sound tiles that we put on the wall here. That auto mute blanket, just another view of it. And that helps with all the sound deadening, keeping some of the echo to an absolute minimum in here. And that's pretty much it for the studio build. You know, I didn't do a lot of the video when it came to like actually building it because watching me swing a hammer, not my expertise. That's not somewhere where I thought I should make a build video like how to build a studio because I'm more than willing to share all the parts and everything else. But actually watching me do it, I don't think I probably would tell a lot of bad information. I don't think we need the internet having more bad information on it. So I decided to not film myself. And also if you watch me build something, you'll watch me have a tool in my hand and walk in circles and look for the tool that's in my hand. So yeah, I get confused a lot when I'm built stuff. It's really not my forte. I did it because one, I like the pride of just building it all myself. I thought it would be kind of a fun challenge. It certainly turned out to be challenging. Also, if you're not aware right now in the end of 2021 and still continuing on here in February of 2022, there's kind of a work shortage. So everyone seems to be really, really busy and there's not enough workers. So some of the places we called for to ask about building stuff, they're like, hey, no problem. We can start that project in a couple months. And we're like, oh, that's kind of a long ways out. I can get started now. I did contract out the mudding of the drywall and the ceiling, but the rest of it is done myself. This went out and started building it. But nonetheless, I will leave links to everything I talked about down below. I feel free to leave comments. I learned a lot from watching other people on YouTube. So I wanted to throw this out there how I did this studio and some of the things I use for it. I'm always interested in different ideas. YouTube doesn't allow people to post links anymore. So I will have this linked over in my forums. If you want to have a more in-depth discussion about this or say hi to me on Twitter, wherever social media I'm at when you're watching this video. All right, and thanks.


Mustafa Al-Khateeb and in this arba'een we're blessed to open a window from sacred land of Karbala to your homes. So join us live every day from the city of heaven, Karbala, only on Imam Hussein TV.


The 10-year note up 17 ticks, trading $131.09, the 30-year up 22 at $161.05, and $Kingdala. $Kingdala is up 491 ticks, trading out at $94.34, Euro is at $115, the yen is out here at $113.74, and the British pound is at $134.00 to $1.00 at U.S. Dollar. Well, you know, I'm going to take a look at the SPY folks, you're at all-time highs out here. You know, SPY has some juice, you're at all-time highs, but we traded up to $267 or $265. Now, NDX100 is a whole different animal, man. This baby right here, if we take a look at the Qs, you're going to see the Qs up $469.00, you get 30 million shares inside of the Qs out here today, folks, and Videre is up 13.9%. That's at $300.00 stock, up 13%, we're at $303.00, Qualcomm, same deal, Qualcomm had a big day yesterday, it has a big day today, it's up 12%. You get AMD up 5%, and then you have ANSS up another 5%, so you're talking about big numbers out here. Gold. Gold contract caught the bid, bottom line is that you've got your 208,000 contracts inside the gold market. Gold wants higher price. What we did yesterday, you come down hard and fast yesterday, but what you didn't do, you didn't take out a swing point. You had light of volume going into your monster, sign of strength. We're coming into 299,000 contracts, you did 257. Today we're doing 208, gold still wants up this 1836 area. If we go take a look at silver, silver's the same type of setup. Silver out here, 5.58 cents, 23.81, silver wants approximately, looks like 25.95. We'll see how that baby shakes out, and then notes and bonds. They want higher price, lower yield, and there's no doubt that there's plenty of people that are shocked on this. There's no doubt about that. And what you had, these things start moving in an extraordinary way, folks. When the Bank of England, bottom line did not go up in their rates, and check this out. There's the pound. You can see that pound. As soon as that happened, that pound went south in about two seconds. We went from 136 to 134. Stay right there, folks. Come right back.