Γεια σας και γεια σας! Σε αυτό το βίντεο θα πάρουμε ένα κλωσό μπλουκ για όλα τα πρόταξη που βρήσαμε από τα τελευταία μου για το μόνο του May και έχω ένα άλλο βίντεο που μπορείς να βρεις το βίντεο στο τελευταίο αυτή που εξηγήσω όλα αυτά τα πρόταξη, αλλά να δημιουργήσω 8 πρόταξη. Ας ξεκινήσουμε με το πρώτο τάμψετο. Αυτό είναι το Σαφαρία Παρτι και φτιάχνει πολλές ανάγκες such as ένα ελλεφάντο, ένα κοκοδάλι, ένα μπαίρ, ένα τελευταίο και έρχεται με έναν καλύτερο σημερινό such as bring on the balloons, you are a party animal, this is a great stamp set for birthdays as well as friendship cards. Εδώ είναι ένα άλλο σημερινό με φτιάχνεις. Αυτό είναι called Oceanimals and you can see it features a koala, a kangaroo, as well as many more. Υπάρχει also a tree to create your little scenes and lots of sentiments. Again, this is a lovely stamp set to use for birthdays as well as friendship cards and as always with all the stamps by my favorite things there are matching ties that you can get if you want to pop up those images on your cards. Now this is a really fun stamp set it's called Let's Flamingo. It comes with those four flamingos in different positions and they even have a margarita glass as well as an umbrella, little ice cubes and flowers or a lemon. You can mix and match all the images along with the fun sentiments to create really fun cards and again if you want to see how i made these example cards that i'm showing you you can find the link at the end of this video. So let's move on to the next stamp set this is the martini time and it comes with four different glasses that have letters on top as well as one that is totally solid and there is also a shaker. I love this set i think it's really trendy and it comes with lovely sentiments and really fun. You can see a card that i made using this and you can grab the matching ties to pop up the images just like i did in this card. Now with Father's Day coming up this is a lovely stamp set that you can use again and again every year. This is called All About Dad and it comes with those big dad words. There are also ties that you can use to mix and match if you want to and the sentiment the stamp set is actually packed with sentiments and i think this is one of those essentials that you will be going back to again and again every year and i don't know if you remember from the previous release the stamp set was called All About Mom. This is pretty much the same so these are both great stamps to have in your stash. Now the little girl from the Pure Innocence Collection is back.  This is a small stamp set so it's quite inexpensive but i love it because it is very versatile just because she is holding flowers you can pretty much use it for any occasion and of course there is a matching die available. Another favorite of mine from the MFT Stamps are the Bertie Brown stamp sets and this is no exception this is called Little Buddies you can see it comes with this little guy the one is holding a puppy and the other one is holding a little kitty and you get the animal separately as well and you also get fun sentiments perfect for birthdays and friendship cards and here's a really cute stamp set this is called Hello Little One it's a stamp set perfect for moms to be or for newborns you can make really adorable and cute cards with all those images in the stamp set and there are also lovely sentiments to go along with the designs and here is a sneak peek on one of the cards that i made using this stamp set and here is one more stamp set that is really cute this is called Sweet Some Bunny it comes with three different bunnies in different positions along with hearts and trees to create little scenes and i love that it comes with shopping bags and extra bows to dress up all those bunnies and for every one of those tiny little images there is a matching die and there are also fun sentiments such as a friend is the best accessory shop till you drop and many more now here is a stamp set which is called Spirited Sentiments and it comes only with sentiments i am going to show you new dies and fun products that have came up with this month but you can pair these sentiments along with those to create really fun cards and here are two die sets each one of them comes with two dies in the pack and you can create a martini glass as well as a margarita glass now you can add anything you like inside those glasses but the fun part is that they came up with plastic pouches that they fit perfectly inside those holes which means that you get an easy way of creating your shaker cards and i absolutely love the fact that my favorite things comes up with new ideas for shaker cards every month and here is another fun product that you can use inside those glasses these are plastic cubes but they look exactly like lice ice cubes when you place them inside those pouches and here is a sneak peek on a card i made using these fun products now this is a stitched flower frame and all the petals have little dots on them there is also a pouch that fits inside this flower die and it has quite a big profile hopefully you can see it here which means that you can add way more thicker elements inside than just a sequence so you can even add tiny little chocolates and candies inside and here are a few more dies that have been released this one that says happy birthday in a lovely font love the size so versatile and another one that says party in a beautiful hand script font as well now this is the scalloped cross stitch tag you can actually remove the inside if you like and use it separately or you can mix and match those dies together i have a sneak peek on a card here and here is a really fun die set this is the alphabet balloon each and every one of those balloons is a letter of the alphabet and you get two more balloons that cut out a solid image and there are also little dies that cut out strings for your balloons these are really fun to use to create your own custom messages these are the mini rolled roses in two sizes a bigger and a smaller one and you can roll them up really easy and create a really dimensional flower here is an example of a card i made using felt and finally here is a stencil one of the really essential ones with lots of circles here is an example and the itzy beachy polka dots background which is going to add lots of polka dots on your backgrounds and these were the stamps and dies released by my favorite things for the month of may and here is the link to the other video that i have posted today where i am showcasing these products by creating eight cards remember you will find links to all the products down below thank you for joining me and have a lovely day


Hi, everybody. Happy Monday. I'm Joe for jaspeaskacebrakes.com coming at you with 2022 tops sterling baseball two box break pick your team number five These are loose boxes High risk high reward right here as well We can do we've got two more loose boxes. So that will be pick your team six That's already up on jaspeaskacebrakes.com if you want to run this back tonight. They're the two boxes of 2022 Big thanks everybody here for getting their team straight up. I appreciate it No guardians on the checklist Andrea with that triple last spot mojo and only one number block we had to do Padres see what's going on? How are you just the Padres and We we uploaded that in a different video. So if you're looking for that check that there. All right I like how they theme these here as well. Hi, Brittany Got retired numbers 90s MLB all-stars Let's go to the 90s. It's a big letter It's a one of one Dennis Eckersley The e in ec not sure which e it's gonna be that's one of them That's El Guapo who picked up the a's straight up Good-looking card here out of fives and under get the train whistle All aboard the big hit express Nice start now Retired numbers Yeah, we'll just say it's the first e next box retired numbers a triple relic an Autograph that's Adrian Beltre nice four out of ten. He's got a great autograph to some nice penmanship Rangers that'll be for Gregory But the Rangers Did they retire? They did retire his number, right? in Texas All right, but wait, there's more second box. Hi, Matt Good afternoon All right, we got two thousands MLB all-stars and World Series champions Take a look at the all-star and it's Tom Glavin piece of his lumber you can hit the ball a little bit and Jersey 12 out of 25 Tom Glavin dual relic and on-card auto Michael with the Braves nice All right, and last but not least a world series champion in here Whoo, this is a thicker card here by comparison and it is Pedro Martinez one of one nice You got five pieces of his jersey right there His autograph the one of one Boston Red Sox That's gonna be Rob with the Red Sox nice Really sad the Dodgers let him go There's Pedro for Rob Rob All aboard the Big Hit Express And there you go ladies and gentlemen a nice two boxes of Sterling and these slider boxes will eventually be Recycled back some of your shipping team reuses those we got another two boxes another two loose boxes in the store right now Jasper's case breaks calm pick your teams and I'll see you next time for the next one. Bye. Bye


Okay everybody, we're going to get started with the next one, if I could get your attention here. So next up we have James Woodward and he's going to be doing, James Woodward is going to be doing the role of institutions and rationality. Can I get everyone's attention? Quiet please. Okay, so we're going to have up next is James Woodward. His presentation is the role of institutions and rationality in the emergence of an obesity epidemic. And James Woodward is a doctoral student in the Martin School of Public Policy and Administration at the University of Kentucky. And his research interests include policy analysis, behavioral economics, and nutrition policy. Thanks. Hi everybody, I'd first like to thank the organizers for putting this event together and allowing me to present. My name is James Woodward and I'm a PhD candidate in public policy, as she said. I hope that by the end of this talk I can convince you all that aspects of economic theory, including rationality and institutions, can add to our explanations for the origins of the obesity epidemic in the United States. Although my analysis is mainly informed by the American context, we being pioneers in this regard, I believe it could also be applied to other nations as well. So this slide gives some indication of just how complex the world of dieting may appear to consumers. I pulled these words and terms from last year's AHS program and added some prevalent terms from more conventional points of view. It is by no means an exhaustive list. It does make one wonder how anyone is able to make eating decisions at all. Before going any further, I should point out that I have little to no training in nutrition, medicine, or public health. I did, however, lose a great deal of weight by following a high-fat, low-carb, paleo-inspired diet while liberally applying the 80-20 principle. But I do not intend to advocate for that or any other dietary strategy to alleviate obesity. I'm inclined to agree with Joan Rivers, who once said diets like clothes should be tailored to you. The question I wish to address is, how do we understand an obesity epidemic as a market outcome resulting from the behavior and choices of rational agents, that is, consumers? This may sound like a naive or obtuse question, but I hope to show why this is a reasonable starting point for my analysis. So this graph shows what we're dealing with and how quickly we got here in case anyone was unaware. And here's a state-by-state breakdown. My home state and the state I'm living in now are not doing quite as well as California, as you can see. But as you can see, obesity is associated with a number of far more serious health conditions and is a significant driver of health care costs. These are the reasons policymakers and the public at large ultimately care about obesity. They also provide some preliminary evidence that there may be a further role for public policy to play. So many of the talks at AHS have been concerned with the sometimes controversial relationships between diet and health and individuals, including obesity. While such work is obviously important and needed to explain an epidemic, we need more. Social phenomena require explanations at the population level and as a result, fairly strong assumptions about individual behavior. Given the extent of this controversy, a good explanation for an obesity epidemic should be general enough to incorporate risk and uncertainty about these relationships. We should prefer a general framework for understanding and explaining market behavior until some of these questions are settled. One that is robust to our potential changes in our understanding of the relationships between diet and health, including obesity. So my goals for this talk are the following. Briefly summarize the dominant perspectives from public health and economics, which are widely accepted and applied in the literature. Point out the insights and limitations associated with each. Provide some additional economic terms and concepts, as well as the relevance to this market. Explain and walk through my own model and its implications and wrap up with some concluding remarks and hopefully some questions from you guys. So in public health, the focus is on the toxic food environment and how it impacts our purchasing decisions. The primary insight here is that healthy choices are not automatic and are made difficult by an environment filled with unhealthy choices and producers who are not necessarily economically motivated to optimize their customers' health. And they may use misleading advertising, labeling, and mis-marketing practices. As someone with a background in economics, I'm inclined to ask a couple of questions. Where did this environment, that is the market for food, come from? We as humans have a great deal of control over our environment and are generally considered pretty intelligent. Why make it a toxic one? Further, how does the individual actually deal with this environment? Before I get into the economic approach, I'm going to throw a bit of economic jargon at you. So try to stay awake. First off, a model is a necessary simplification of reality. It focuses our attention on the most salient aspects of a problem and importantly allows for statistical analysis and hypothesis testing. As I said earlier, public health models tend to focus on the environment. Economists tend to treat individuals as rational, meaning they are goal-oriented and capable of ranking their choices based on their preferences and the total prices of goods, including the health costs. Methodological individualism is an approach in economics which says that any explanations for social phenomena should be intelligible from the perspective of a rational agent. A utility function is simply a mathematical translation of your preferences. More utility is better, all else equal. Finally, an opportunity cost is the cost to you of doing what you're doing versus what else you could do with your time or money. So with that out of the way, based on my reading of the literature, economists tend to argue that our environment is actually a reflection of the individual preferences of rational agents who are maximizing their total utility given their alternatives and dietary knowledge. In short, obese consumers either don't know how to avoid obesity and or they don't care enough to do anything about it. The insight here is that not everyone wants to be skinny or even healthy. Individual preferences and total utility matter. A great deal as do opportunity costs. We cannot assume people already know what a healthy diet is. Learning about and adhering to a diet are both costly endeavors and additionally, people are not required to be as physically active as they were in the past. But is this sufficient to explain a drastic uptick in obesity over such a short period? Are Americans really that apathetic and shortsighted? Before I answer that question, I would like to point out the broader areas of agreement between these two models. Both emphasize calories, exercise, fat, fruits and vegetables, and perhaps a couple other factors. Both models indicate that the problem ultimately lies in individuals' inability to adhere to a rate reducing diet in their current environment. And future policy interventions are likely to emphasize these same characteristics. Which brings us back to this slide. In my view, market complexity is not well incorporated into the previous two models. There is a multitude of diet related issues that consumers could worry about and affect their dietary choices with regard to health. Yet the majority of the populace has been successful in managing this complexity and avoiding obesity. But a large and growing minority have seemingly lost the stability in recent decades. How can we reconcile complexity, large incentives to avoid obesity and a not completely dysfunctional market outcome? That is, obesity rates are not yet 100%. A change of perspective might help. That is, an obese rational agent has a large incentive to learn more about diet and health. Are the short-term benefits to eating poorly that high? Shouldn't individuals make a trade-off at some point? Why has zero or negative market learning occurred in spite of decades-long efforts to educate consumers and a wide array of diets being offered in the market? There are a couple potential explanations. Perhaps the environment really is that bad and or preferences are highly stable and persistent. But what if we include a preference for no obesity? Can we create a model that incorporates environmental constraints and complexity? I think so, but we'll need a few more terms. First of all, rather than treat each food item as an economic good in itself, we can treat it as a bundle of characteristics. So consumers actually purchase and trade-off for the bundle of characteristics which they most prefer. Credence, a credence good is one that requires a third party in order to fully evaluate its costs and benefits due to market complexity or a lack of knowledge. So I think a good example is auto repair. Many of us don't really know what's going on under the hood and we need a mechanic to tell us. So another term I think that's relevant is satisfying. The social scientist Herbert Simon argued that consumers are unlikely to become fully informed in a market with many potential sources of information. It would actually be irrational to try to find out all the information you might need to know about your dietary decisions. It would take a great deal of time and effort. Institutions are social structures that can help to alleviate complexity and guide our decisions in a variety of settings. Examples include money, culture, and family. In this domain, science, nutrition, medicine, and public policy are quite salient, although others clearly matter as well. Institutions tell us which characteristics of the world we should pay attention to. They affect our menu of choices, in other words. Bounded rationality refers to the fact that in the real world, there are many areas where full rationality is unlikely to occur. But institutions can help overcome this problem. In this context, a commitment device is simply a fancy term for a diet. I think it's safe to say that in this market, that this market is not working efficiently, indicating there may be some role for policy. Which brings me to my model. Rather than read through each of these boxes, I will walk through it using a few illustrative examples based on my own experience and two hypothetical situations. I reference my own experience only because it is the one with which I am most familiar, and I don't think it is particularly unique in most respects. When I use the term iterative, this refers to the fact that the act of repeating a process with the aim of approaching a desired goal, target, or result. Sounds like dieting to me. First, let's go through an idealized outcome. So we start at the top here, and we have a consumer with preferences that lead him to eat a standard American diet that's more or less unhealthy. Until he decides he's too fat, and that's a personal judgment, he's likely to continue that pattern of diet. Until he decides he is too fat, in which case he will search for information. In all likelihood, he's likely to follow these institutions and the commitment devices they lead to, update his preferences, including using some psychological variables, and finally make a choice. There are two options. In the ideal case, his weight goes down, his utility goes up, he continues doing what he's doing, or he continues to optimize and basically stop the process. My own experience was that I became obese. I answered yes to this question. I searched for information. I adhered to this advice, made choices, and found myself more miserable than ever, and not losing weight. So I decided to weight into literature, convince into these alternative sources of information. I deemed I decided that paleo probably wasn't going to kill me, and decided to make that change. I continued to adjust and optimize according to my preferences, constraints, and any new information. So the trickier case is, what if someone goes through this process and finds his utility lower, but doesn't go to these alternative sources of information? There are a couple of options. He could revert to his old behavior, or he could retry this. Here are how many times it would be rational to retry this process if you're not seeing results. The takeaway here is that giving people advice is only at the beginning, and may not lead to predictable outcomes for a variety of reasons. Seeking out information, changing preferences, and behavior can be costly and difficult, especially when there is a significant risk and uncertainty involved. I see producers as playing a somewhat passive, though ambiguous role in this whole process, they are also responding to policy and these societal institutions as well, as well as consumer demand, of course. I think that my model shows that consumers require credible institutions to define what a healthy diet means so that they can make good eating decisions. For better or worse, probably worse, the conventional wisdom is endorsed by most in the fields of nutrition and medicine, and is tacitly accepted as fact by other disciplines, for example public health and economics. So the conventional wisdom is a large market advantage in defining a healthy diet aided by public policy in the form of labeling, information provision, regulation, and licensing. Current models do not fully address the costs of changing preferences nor the incentives to do so, and data quality means conclusions depend on model assumptions. It's very difficult to tell what's actually going on in the real world with regards to all of this. So this map illustrates the extent of the change in the provision of dietary advice. Even in green-colored states, they may be treated preferentially by insurance companies. In general, such professional regulations tend to prevent a level playing field in the competition over ideas, though they have clearly been deemed credible by both government and the public. So it's perfectly rational in the sense to go to RD for advice. So I believe there are several interesting implications of my model. For one, the epidemic is emergent. It's not preferred by anyone involved in this process, but the result of a costly choice problem that is difficult to solve due to a variety of constraints that may vary significantly from person to person. In order to distinguish the precise nature of this problem, we would need very detailed information about why and precisely how much of each food characteristic each individual consumes. Risk and uncertainty at all levels about the nature of diet and health relationships should be acknowledged and incorporated into models to arrive at a plausible and robust explanation for an obesity epidemic. So to summarize, these new, non-ancestral institutions compete with the old ones and they have a distinct market advantage. It is not clear whether they do so. They enhance decision making in a way that enhances the efficiency of consumers' choices, especially with regard to obesity. This may explain why some dietary approaches are not able to out-compete ineffective ones, leading to inefficient choices and inefficient, undesirable outcomes. My model is actually adaptable to other diet-related outcomes. Diet-related health outcomes if you just replace the obesity slide with some other health problem. We may need to acknowledge the heterogeneity both with regard to physiology and decision-making processes and place our emphasis on different characteristics or sets of characteristics. An important caveat is that my model does not incorporate the physiological or psychological effect of food itself on demand. Only information, experience and preferences, but these factors could also be incorporated into it. So if wheat or sugar are addictive, for example, and the obese consumer is unaware of this, her problem becomes that much more difficult. So these are my references. Thank you for listening. We can do about one or two questions. Anybody right here? Okay. Hi, thanks for the talk. I'm just wondering if you will consider the fact that not everyone has the same choice capacity and therefore it's not only a matter of choosing an alternative, but a lot of people don't have a choice. They cannot access to a different they cannot access to knowledge that in my presentation, people are constrained by this power structure whereby people in Ecuador, for example, believe whatever comes from the official institutions and therefore they don't have that choice. Other people don't have the economic capacity, so I'm wondering what your thoughts are on that. Well, like I said, in America we do have a choice of what we can eat. I mean, everyone in this room seems to have made some healthier decisions. I would just point that out. And what was the second part of your question? I'm sorry. The choice, because some people are privileged to have the economic means and the access. There are such things as food deserts and people are stuck there and so they don't have a choice. The food desert might be an outcome of all this, I would say. And second, I would say that the relative costs of making this choice to change your diet far outweigh the the relative benefits that is, far outweigh the relative costs of whatever effort it takes to do this at least in theory from a rational perspective. So I certainly accept that it's very difficult for some people and especially for the impoverished and so on. One more question here. What happens to your model when you discover that humans are not rational? I mean what happens to any economic model once you question rationality as an assumption? Right, well like I said that was sort of my starting point and I think I pointed out some reasons why we can't assume full rationality in this context and there are a lot of contexts where full rationality is not likely to obtain. I do agree that economists tend to ignore that fact in a lot of cases. It sort of renders problematic most of your conclusions in my view. Well I would say that the obese have a very large incentive to pursue the goal of leaving their own obesity. I mean that was my experience. So I think that if you don't think people are rational and you're trying to explain this obesity epidemic, you're essentially saying that 30% of the population has all of a sudden, I don't know is less rational than the other 60% I'm not sure. No, I think you're looking for other social forces that might include irrationality, rationality, but a whole bunch of other issues. I guess I should point out that rationality also assumes full information and knowledge of what you're choosing and that's clearly not what's going on in this market. So you're right, full rationality is not going on here, but I do think that consumers are goal oriented and able to rank their choices. That's about as far as I'll go. Thank you.


We're here with a DXO, DXO-1, and hello, so who are you? I'm Jean-Marc Alexia, I'm a VP Product Strategy at DXO, and I'm one of the father of the DXO-1. So what are we looking at here, this is an iPhone? This is an iPhone, and actually that's the best screen that you may have in your pocket. There's been billions on dollars to get this screen mass manufactured. Exactly. So it's the best LCD right now? It's the best LCD in your pocket. Exactly, so it's a touchscreen obviously with all the features that you know, and when we decided to create this camera, we were counting on the fact that you already have the best screen in your pocket. So it's like it can turn like this? Yeah, you have a swivel close to minus 60 degrees that will help you shoot from the belly side, like with a non-royal flex, or you can even go up above the crowd quite easily. And how's the quality, if you point it over there? So the quality is based on outstanding components. It's built in with one inch format sensor. It's very bright lens. One inch is one inch format sensor, 20 million pixels. We have an aperture of 1.8, and we shoot in RAW. So the JPEGs go to the iPhone, but the RAW files remains in the camera in the micro SD card here. So the camera is optional. It can be used with the iPhone as a control panel or review panel, but it can be also used as a standalone camera, disconnected, or you can remotely, through Wi-Fi, control your camera up to 45 meters away. Can we try this disconnected?  This menu is in French, sorry. Okay, and then you can set up this camera. The other thing, just take pictures. Wi-Fi, we are creating here, as you can see on the side, it's creating a hotspot, and it says, go to your settings and check that you are connected to the camera. You will see all this Wi-Fi, and the camera is here. So now I'm connecting to this camera. So, okay, in a second. Then I go back to my app. It's gonna complete the settings. With the retomular here, it says you can go. So obviously, as we are in the exhibition show, there is a very Wi-Fi mess, but you have the full capabilities, all this functionality with a remote control, and you can trigger the capture, review the photos, and it's the full capabilities which is available even through Wi-Fi. How does it look like the connector? So that's the lightning with the three patterns from DXO.  If you want to break it like this, there is a mechanical fuse that you can rearm like that. So there is no damages caused to the iPhone nor the camera passing through this patented feature. That was nice, right? And then obviously, because the connector is magical, you can plug it the other way around and then do very nice selfie thanks to those 20 million pixels like here. How is the software of the camera? Software is an important thing. Yes. And how is the software of this camera? Is it just using the iPhone camera software? No, no, no, we have, this is our own app. So if I go back here, you can see this little icon there. This is the DXO one icon. So we have our own app, and we have some updates somewhere up to 100. So we have the double-side application. That's a huge work, you know? Yeah, that's a huge work. But your company is famous for photography kind of stuff. Everybody talks about DXO more. Obviously, we are renowned for DXO more. You make benchmarks on camera quality for the whole world. Yeah, and we help also other companies to improve their ranking by providing technologies in image-making. So you know how to do this kind of software? Exactly. And we know how to deal with the camera modules. Basically, the technologies from DXO are present in more than 400 million devices to date. If your smartphone is taking better image a year after yours, it's somewhere because of us. Thanks to us. Some people say that the iPhone is taking good pictures because of the software that they have. You know, photography is like cooking. Software is the recipe, but you need to have good ingredients. You need to have organic ingredients, freshly cut ingredients, and that's what we put in our camera modules. You take the best, this is the best right now. One inch is the same as the one that's in the Sony RX100, right? The Mark III, exactly the same as the Mark III. Is it the latest one? No, the latest one is the Mark V, but it's not available for other companies. So we took the latest one available on the market for the company. It's better than the RX0 that announced today, right? Much better. The aperture on the RX0 is F4. So it's not at all the same situation. And on the other product that you just mentioned, it's only a limited resolution. In that case, we have 20 megapixels. This aperture number right here is low. That means it has a good light coming in. Very, very, very bright light, very bright lens, but also it means that you will have a real natural bokeh effect. Not a simulated one. Yeah, obviously. Let's do some bokeh. We are really improving by the after-machining. Can you give me the pole over there? OK. And USB Type-C will be coming up soon. Soon. Soon. So before the end of the year. This is a little like a... So as you can see, we have all the moves in the go, including aperture priority also now. So then, or against this, I can die on a set of my aperture, hence the depth of field. But yes. Soon, I will be able to play with my colleague here. Well, I didn't show you the accessories, but you would have that in the press case, in the brochure if you want one. This is basically, like, this. It's just an accessory case. So I can do a bokeh effect like this. You open it. Can you do even more bokeh? The bokeh all the way down. Oh, there it is. OK. And you can also add something like a filter or... Yes, you can add pretty much all accessories as you find in the marketplace. This is what you do. There you go. So to review the photo. So does this after I do all the autofocus and stuff? Not the focusing. We are controlling the whole camera. And we did the software. Yeah, obviously, it's not an action cam. We do have an autofocus. We have a, yeah, it's a six blade iris. So you can set up the aperture like I showed you and get this kind of... Look at this reflection here. And you know what? This photo has been taken at 3,000 high zones. This is the quantity you're going to get at 3,000 high zones with the DxO1. That's the way it is. So all these people that, I don't know how to say it, but how I can sell their own babies by taking smartphone pictures of them that should get the DxO1 and respect the little babies with higher quality pictures of their smartphone. Exactly. That's like a family camera too. So if your baby is at last sleeping, then you can get, even in the darkness, very nice pictures of your baby thanks to the DxO1. And you won't be able to do that with the iPhone that will try to put a flash on, an LED flash on, but we'll never get the same kind of result. And so are you going to launch this? You already have a previous version. What's happening? Are you going to do Android version? Maybe, very soon, maybe. It's coming, maybe. But actually, we are not announcing today those innovations, but next month we have big announcements related to the DxO1. Nice.


Lakeland Currents, your public affairs program for North Central Minnesota, produced by Lakeland PBS with host Ray Gildow. Production funding for Lakeland Currents is made possible by Bemidji Regional Airport, serving the region with daily flights to Minneapolis-Saint Paul International Airport. For information available at BemidjiAirport.org. Closed captioning for Lakeland Currents is sponsored by Niswa Tax Service, tax preparation for businesses and individuals online at NiswaTax.com. Hello again everyone and welcome to the 12th season of Lakeland Currents. We're very happy that you're with us and if you've watched Lakeland Currents on a regular basis you know that we not only shoot the program here in the in the Brainerd studio, we also shoot it in the Bemidji Show studio rather. But this is our 12th season and happy to be back and looking forward to a season of interesting programming and I don't think it's going to be more interesting than the one today where we have an internationally known photographer, outdoor writer Bill Marshall who is from the Brainerd area and it's a great honor to have Bill back. He was on our show a number of years ago and since he's been here lots lots has changed in the wildlife world and a lot has changed in the the world of publications and printing and so we're gonna we're gonna talk a little bit about that. Bill, welcome to the program. Thanks Ray. It's great to have you back again. Thank you. Let's tell the viewers a little bit about who you are, where you came from and how you got started because you are for the most part self-taught at what you do aren't you? Yeah yeah you know I grew up in North Brainerd close to the Mississippi River and only a block and a half and as kids we you know would go down there and mess around slingshots, bows and arrows and fishing and got to really appreciate nature that way and for some reason it was just always a fascination for me so I you know I would I would try to learn about everything try to understand bird books and everything when I was just a kid and that just kind of progressed through my life but it wasn't until 1981 that I bought my first real camera and you know at the time of course it was film the back then and you know I remember signing the loan my hand was shaking because it was like worth four times what my vehicle was worth you know so yeah it was so you had a good camera to start with right right and then you know having been an outdoor person all my life I had an idea of what a good photo was like even though I was green at it you know I thought I you know I know what a good image is because I've looked at them all my life I've never had never taken them all the very day I got the camera in the mail was in the wintertime I went out and and have got some halfway decent deer pictures that very first day and things just progressed from there you know I had worked or had a normal job regular job eight hours a day and gradually I started reducing that down to half time and then pretty soon I realized that I was making more money working at home and enjoying it of course and so I made the switch to full-time freelance and you know whatever 25 30 years ago and I've been there ever since and you were saying before we went on air that back in that period of time there were really only about 12 people that were doing what you were doing for a living nationally I mean that wasn't that everybody had the skill or the ability to do what you guys were doing right and you know when I say 12 it's like if you if you looked at Ducks Unlimited and some of the more popular hunting and fishing magazines especially hunting even nature publications like National Wildlife or Autobahn yeah there was a real core of people and Ducks Unlimited for instance would contact myself and you know half a dozen other people and if they couldn't get what they needed from us then they would go look further from somebody else but usually since we are interspersed around the whole country they could find what they wanted with just that core of people and it was really nice because you know just about guaranteed to have images in every magazine and covers included even their advertising work so what were some of the magazines you published with over the years well just about every what I call hook and bullet that would be you know sports field outdoor life sports the field is one that I haven't I don't think because they have a little different look they're kind of a I don't know safari type magazine you know big exotic hunt type magazines and fishing field and stream out their life you know deer and deer hunting national wildlife autobahn those are the ones I'm most proud of you know the the nature really high quality stuff in those magazines right yeah very high quality yeah and you know the first time I really tried autobahn I ended up selling them a cover photo and 12 images inside that magazine and one of the images was a a nominee for an IZ award which at that time was Life magazine's most prestigious photography award yeah it was a nominee it didn't I didn't win but it was a nominee anyway and that was pretty exciting for me so when you first started doing your photography did you focus in on one particular kind of animal or were you looking for everything well you know since I've hunted all my life I concentrated on those species and ducks you know deer those were my two biggest things to start with and because we have those locally and you know then I knew them too and I also knew the publication so I knew the type of images that they would be buying and you know I had the gear everything toward that you know there wasn't a lot of just go out and shoot anything you know it was always had almost always had a purpose you know and that helped me a lot so you would get an assignment and then go try well not so much an assigned my own assignment I'm looking at my markets and say I can't go outside that because it's I won't make any money if I if I go beyond the markets that I'm used to where for instance I don't do much landscape photography even though I'm out there and see all those cool landscapes you know or flowers or plants you know I just don't do much of that because I don't I never established a market in that area so I kind of concentrated on you know pretty much wildlife and you've done billboards you've said yeah bill just about anything you can think of all the way from credit cards to t-shirts really credit cards credit cards yeah I still have some at home I don't know if they're any good or not there or phone cards is what they I have at home yeah you know the slide through phone cards they're like 20 years old or whatever I don't know if they're any good but yeah I can't even you know if you can imagine a picture being on something I probably sold one time or another I know you have a large buck on our license plates do you want to talk a little bit about how that happened yeah that was really fun for me I love wandering through the woods in the fall with rattling antlers and grunt call and during the rut and this particular spot I came to and I thought this is the wind angle and the sun angle everything was good for rattling and and I started to rattle the antlers and I there's kind of a rise and I see this set of antlers coming up you know that's all I could see at first you know and I'm like oh man this is neat and it came over the rise and you know a lot of times they hear the camera clicking you know they can hear that on a calm day a long way away so it's kind of focused on me and then what they always do when they're a little leery is glance downwind you know their eyes and their ears tell them one thing but their nose will tell them what they need to know and sure enough I took a couple shots and then it started to glance down how far away was this 25 yards oh wow really cool it was a beautiful animal if people don't know what we're talking about it's still on the license plates right for people who elect to critical habitat critical habitat and it's the big buck right yeah yeah there's the art buck or art deer that's this is a photograph yeah and so did you get the picture the first time the first shot yeah yeah you had you know that's what's with deer you know it's almost do or die you know once they start glancing downwind it's it's over you know and sure enough it did that and you know it's pretty much had that predicted that it would do that and because they always do and yeah it didn't work out it was and I you know when they announced they were going to do a whitetail deer plate you know I that was one of the images that I submitted and one that made it wow now will that stay there you know as far as I know and no I don't get any no royalties anymore it was a one-time deal so because they have a moose and they have birds and they have a water scene yeah there's quite a few now Moose State Park you know the lady slipper chickadee anglers the anglers in the bold and you know several others but it's a neat deal because that's 30 bucks goes to that's a good you know $30 extra to get the plate yeah yeah I've often wondered how close you were when you took that shot yeah and it's always way closer than people think you know you I think one of the one reason why people think I can zoom in clear across a lake or whatever it's because sports stadiums you know you had a watch in a football game and the camera's on the crowd and then it zooms right into you know the quarterback column and play you know and it's like with the same lens well that's not possible with 35 millimeter stuff you know so how about the writing part of what you do because you write for a number of organizations how did you get started to that and were you comfortable right off the get go no but you know one thing that helped in my writing was again the knowledge that I had I knew what I was talking about not because well because I had research I researched everything always finding out or not even just researching it by reading but researching it by you know witnessing these things and figuring it out and that's how I learned to photograph too you know learned how to operate camera gears you know no schooling or anything just knowing what I needed to do with it and same with writing it's like okay how do I want to illustrate this story both with photos and with my words and it kind of flows I guess kind of wasn't that tough for me and you know I could be a lot more artistic so to speak in writing but I kind of like to present the facts and then you know hopefully it's written well enough where the reader wants to keep reading but more meat and potatoes writing than it is fancy freely sure writing yeah so when you because I know you're right for the Star Tribune and you've written many times for the brain or dispatch do they usually solicit an idea or do you bounce ideas off them yeah it's almost exclusively my ideas yeah once in a while like with the Star Tribunal converse with the editor and see you know I got this idea or that idea and usually it's a goal yeah and that same with the outdoor magazines you know I come up with an idea and present it to them and you know that it kind of goes from there and not very often do I get an assignment to do something what you do takes an incredible amount of patience I don't know if people appreciate how much time you spend and I've talked with Stan Tequila who is also a friend of yours and and we've talked with him about how sometimes you'll spend days in a blind and nothing happens you have your own property where you do some of the photography do you go other places too and then do you set up blinds and are you looking for specific things because you know they're in the area how do you approach that yeah it's again the knowledge of your subject is huge you know and you can eliminate a lot of empty time by knowing the subject when they move when they don't how to call them in how to attract them what kind of habitat they're in and so you know as far as three days in a blind and get nothing that doesn't happen very often because I've already got it scouted out I've got to you know know the location kind of have an idea of when the birds or mammals might be moving and so I can limit my time you know when the light is good morning or evening and you know now sitting in a blind all day hoping something happens is not something I do very often and you know as far as you know photographing on my land that's kind of nice because I can my office window looks right at right out on everything and I got ponds and thousands of trees planted the fruit bearing and not bearing trees and everything to attract wildlife so sometimes I'll see something going on out my office window and then the next day I can take advantage of that and yeah wildlife isn't on a clock but a lot of times if something's happened that like say eight o'clock this morning there's a good chance that something similar might be going at eight o'clock tomorrow morning so I can set up a blind today and then being at eight o'clock tomorrow morning and you know by ten o'clock if nothing's happened I might just leave and it's got to be at times a lonely job oh really because you're alone all the time when you do and even when I'm home you know because you know a home office you know you're alone in the office and then alone in the field all the time that is that's a big thing and it's I'm not just the only one a lot of my colleagues talk about that too yeah it's a lonely job I can imagine it is now you've won many national awards talk a little bit about the Nikon awards because I know you've won a number of those yeah um there's a organization called Nikonians and it's a worldwide organization of Nikon camera owners and they have a monthly online contest which I don't have the numbers in front of me I believe there's 40 000 hits per day on that website yeah and uh I'm not sure positive about that number but an incredible amount of people and go and you know Nikon is one of the top two camera companies in the world so you know if probably you know half of us wildlife photographers are shooting Nikon the other half can and then a few others in between but so yeah it gets a lot of hits and what happens is they have a theme every month and I submit an image as you can submit five per month and follows that theme like they might action or something wildlife and action might be a theme and you submit images like that and then the general public votes on it for the month and then out of that five finalists are taken and then then they voted on out of those five finalists and so and how many times have you won that well you know it's been quite a few times actually I've been fortunate worldwide yeah um I don't know maybe 10 times wow eight or 10 times wow that's right now I'm a finalist um for the September you know it would be the August contest we vote on it during September I'm a little bit behind so I don't think I'll get first place but it looks like a shoe in for second place wow that's pretty impressive let's talk a little bit about your your pictures because you've got some really good images here and some really important information for anybody who wants to take pictures I think you could give us some really important tips today yeah I tried to tried to pick out seven or eight photos that that showed various aspects of wildlife photography action you know beauty low light or whatever um I've got a picture of a wood duck in flight is one of them and and um there's so much to that that that people don't understand and wood duck has a lot of iridescent colors the male wood duck has iridescent colors and those colors are only visible in a couple degrees angle of light you know they're you know iridescence is tiny prisms on each feather and when the light hits it just right like a um when they call those little things in your um that you hang in the window that you know flash little colors that's what it's like the light has to come in and hit those iridescent feathers just light right otherwise they look dark or black and so this wood duck flying sideways to the camera the light in the afternoon is just right and the way that is able to work is that or make that work is that they fly into the wind when they take off and they land into the wind when they come in so if the wind is the right angle they'll be coming across in front of the camera at the right angle where the this iridescence will light up beautiful birds they are absolutely and that's one thing that I like about um you know getting that the image like this is that it shows the beauty one or two different angle degrees difference and the colors are almost gone wow yeah and um and that's true of iridescent birds some of the other ones are like cardinals or whatever they're not iridescent so um the angle can be different with them and you still get a bright red but um you know ducks in particular have iridescent feathers wow that's a great great image and then you know it you gotta be swinging with them you know it's pan panning the camera at the same speed as a bird so that it remains in focus wow like a little bit of wing blur because that shows motion you know it doesn't look like it's a mounted bird up in the air because there's some wing blur and you know you have to know the shutter speeds for to accomplish that and then the depth of field the settings on your camera it is I will say this it's a lot easier now with digital than it was in film you know I shoot in 50 speed film and now I shoot up 400 or 800 ISO and so I gain like four or five stops of light just by shooting digital now so that helps a ton in photograph and action and then I like to photograph white tails deer in the during the rut and I got a picture of a real nice 10-point buck just facing the camera so close up you know I rattled that one until I could see it and then it's you know since rattling you're moving your hands and I was kind of just standing behind a tree with a tripod and you're so I can't do that when they're coming in because they'll see me so then I switched to a grunt call and uh it just kept coming it just kept coming and coming and coming and coming and then I'm like hold stop stop it got so close that all I could get was a head and neck how close was that oh um 10 12 yards wow and you know I had a zoom lens so I was able to zoom back a little bit as it was coming but um you know it just wouldn't stop I wanted to hear you then when you took the picture yeah and you can see in the so you got one picture and that's it staring right at you know you might get a couple off before it bolts you know but uh yeah and then the same thing it wants to go work its way downwind you know and so when it ran it not only ran away but it you know it angled downwind and then got my son and then it's sure that that's a you know not a good deal it's going to get vacate the area was that on your property no no yeah that's a beautiful animal um and the next shot that I have is another buck but it's taken in a whole different situation in velvet this one is one in velvet and they're obviously that time of the year this is the last day in august I believe and it's a giant eight well it's a nine point but it has huge huge antlers one of the nicest bucks I've ever seen in my life and uh and this I had to build a blind in a in an oak savannah that had a burroke savannah and the acorns were dropping so um it would not respond to antler rattling at that time of the year or grunting or anything you just have to hope that they come into a feeding area and that's what makes this image pretty unique for me is that you know it's like it is a crapshoot to be out there at that time and you know it was 80 degrees that day oh wow yeah and um and I watched I was sitting in the blind looking and I thought boy if that if a deer comes it'd be nice if it stood between those two trees and that's exactly exactly what that's a great shot to and I shot to it's way lower lower light than it appears I actually shot it at one fourth of a second not at one four hundred it's one fourth of a second and I had to lock the mirror up on the camera because in a single reflex camera the mirror flops up and down every time you take a picture well that vibrates the camera and causes blur at slow shutter speed so I locked the mirror up then you can't see you got focus locked the mirror up take a shot and then it would always it would step it came a half a step closer every time I took a picture did it because I couldn't figure out the sound and I was in the blind so it was a home built blind out of brush and sticks and whatever and uh yeah so every time I take a step I have to drop the mirror back down refocus pull the mirror back up and shoot with a cable release too because if you touch the button at that speed everything wobbles and it's blurry yeah and you can see every you know whisker on its face and eyelashes and everything and the velvet you know fuzz on the out there's just you know that's very cool and I love that photo and and it was one that I specifically set out to do too I'd seen that buck at sunset the day before and I thought I got to do this while the doing's good once those burrow gay coins are gone he's gone he's gone yeah yeah and people always like cute photos and I this summer I had three baby raccoons coming in my yard to the bird feeders every day and I don't know I never did see mom I don't know where she was but they were real cute little things and and they uh were you know eating under the bird feeder and then they'd climb up in a big burrow in my yard and they'd go to sleep sometimes laying on top of each other right next to each other so I was able to get that picture you were pretty close to those two are yeah that's you know that they were just right there I could get as closer as far as I wanted to they weren't really afraid of me they would run up the tree when I walked out of the house but otherwise you know once they're in the tree they feel safe yeah yeah that's cool and then you know I weather is always a factor in wildlife photography and sometimes you know you like the good sun bright sun like iridescent feathers show up good but I always like to photograph too in bad weather and I have a picture of a male cardinal and crab apple tree with the snow coming down and the snow on the branches and kind of a gray day with a bright red bird is kind of a neat situation it wasn't that long ago we didn't see many cartons around our country but they're really becoming quite common aren't they and that's pretty beautiful bird yeah absolutely beautiful bird their song is great and you know real wary though they're hard to photograph yeah they're jump jumpy yeah black bear is something that you know I really don't go after because the chances are you won't you know if you've spent time in the woods trying to photograph a black bear good luck but I once in a while do get lucky I'm out for deer or whatever and have one walk up or something like that or one comes into the yard to eat bird seed and and then you know I'll follow it back out in the woods and stay a distance so it doesn't know I'm there and once in a while get photographs that way and then coyotes there's three coyotes that's kind of unusual isn't see three together yeah yeah three together I did call on time five together yeah that was really unusual but three of them came in and it's really funny because they're looking right at me I was blowing on a predator call which is simulates a dying rabbit and they're looking at me like I'm lunch you know and it's just like I love the stare on their eyes they're all looking and of course right after that they bolted now how close were those two they were a little further because they're spread apart they were like 35 40 yards yeah it was close yeah yeah wow it's fun to have them that close they're they're a neat animal yeah they are yeah then I got a picture of a mink here's another kind of cute shot and I got lucky that's one of the reasons I included this is that I was photographing ducks from a blind long edge of a pond and just by pure luck I see this mink coming the grass was too tall when the mink was on the ground well running along the ground or it got close to my blind and was curious and then stood up on its back feet just again you know I got to say it's kind of lucky but the fact that I was there you know definitely helps so that's cute very good shot we're down to our last two minutes okay uh indigo bunting there again that's beauty a beauty shot you know that is a beautiful bird you don't have to be you know it doesn't have to be in any particular surrounding to have that pretty but in this case it was on a newly blossoming crab apple trees and are they they let you get pretty close to them no they're jumpy too you got to be careful blind only a blind can you photograph him yeah that's a beautiful bird well tell us how people can get a hold of you you have your own website yes and you are on www.billmarshall.com I maintain a facebook page just about post an image just about every day and you can get the url to that on my website and my email address and I also am on twitter um but uh yeah and you know again posting an image every day on facebook is a good way for people to get an idea and you know they also can go to my website of course and I like how you have little quizzes to see people oh yeah that's fun for me too yeah that is cool um what's your new project anything new big coming up no except i'm you you know thinking about the whitetail rut you know it's coming soon late october and really november well thanks for appearing on the show we really appreciate it thank you very beautiful beautiful work that you do and if you get a chance folks go to his website and you'll see some unbelievable images uh you've been watching lakeland currents where we're talking about what you're talking about we'll see you next time


We were really excited to take the trip to Europe, Belgium and the Netherlands this past summer. The team had a great time, I think when you take those trips you want to do, it's a really good opportunity for the team to be together, to create memories, go all sorts of different places together, but also play some really good competition and I think anytime that we can get together on the field and get additional training in, get additional games in, playing some high level teams over there in the first and second division, it's just a great opportunity for us. So I think we got a lot out of that trip, playing wise, we played one outstanding team that really is kind of the goal for how we want to play, so I thought that was a really good experience. But really overall it's just a great opportunity for the team to be together and do some pretty cool things together. Things really started out very well, we're pleased with the fitness level and how they've come back and I think the biggest contributing factor so far is that we have 19 upperclassmen, so we have a senior class with 10 players and they've been here, they know what we're trying to do, they've been doing a great job. Our junior class has I think 9 in it and really the combination of those two, it's a big group of leadership and sprinkled within that is our leadership group but they've been doing a really good job, bringing the freshmen in, I think the team's been really cohesive, their work rate has been absolutely tremendous, we've had some pretty intense heat and humidity this pre-season and we have not had a moment of low energy or lack of focus. The soccer on kind of day 3 can slip day 3-4 when their minds and their bodies get a little bit shot but we're working on the things we want to work on and I think without question we'll be a better team this year than we've been. We're playing the kind of soccer that I think we've wanted to be able to play, I think we have the players to do that now, our return as I've developed and our freshmen are going to be impact players. So we're excited about where we are and it's soccer so whether that translates into results, we hope it does but we'll continue to control the things that we can and we're excited about the season and how things are looking as of now. So it's for the second year in a row, we missed out on playoffs with a tiebreaker, we've looked back at film and said this goal right here could have been the goal that kept us out or it's a tight conference, it's been tight for us so we just know that every single conference game is going to be a dogfight, it really could go either way. I think we need to head in with more of a mentality that we want to take things from other teams and we know it's not going to come easily but again we'll be playing better soccer, hope to put a better product on the field, hope to get those results. Of course we want to be in the playoffs, we want to win the conference, we want to hit the postseason so we'll just work day to day on making sure we try and accomplish those goals.


Good morning, everyone. Welcome to this talk on enhancing OpenStack Firewall as a service for real world applications. My name is Sriram. I'm part of the management and orchestration team at Juniper Networks. We're working on neutron plugins and VMware integration and a few other aspects for the last few years. I have with me two of my colleagues, Sharath and Chandan. Together we're going to cover a bunch of topics today. Some of these are ideas that we believe are good practices from real world firewall deployments that we have seen and how we can bring those good ideas back into OpenStack and share it with the community and provide much richer functionality with respect to firewall in OpenStack. What we're going to do is start off with a quick overview of what is a firewall and how it compares with security group and then quick touch up on the firewall as a service functionality and then we will move on to the three ideas that we have which we think can be useful in various scenarios. To give a background, the difference between a security group and a firewall as a service is really if you take a very simple OpenStack setup with a bunch of compute nodes, controller and a network node, the security group is something that is realized using IP tables and it is on compute nodes and it is basically securing the traffic coming out of the VMs ports. The firewall as a service on the other hand is IP tables again, but this runs inside the network node and to be specific on the router or the namespace that each network is connected to and again it is applying policies on the router port. So it is securing traffic which is going from one network to another network. So how does this firewall as a service work in an OpenStack environment? So as a tenant you create a firewall and then you can also the horizon steps are basically to create rules and policies then you create a firewall instance and then associate those firewalls to one or more routers to all the routers and the moment you associate a firewall to a router the IP table rules are configured on the network node and your traffic is starting to you know the traffic flow is monitored and secured after that. So we have a few ideas that we think will really help the you know the overall firewall as a service functionality and what we're going to talk about today is how do we schedule a firewall policy? It is a very common functionality in real firewalls to apply a firewall rule at a particular time of the day and how we can bring that functionality into OpenStack. The next one we have is leveraging firewall logs. Logging is another very critical component of firewalls and how we can take out the intelligence from syslogs and the logs that are generated from firewalls and make use of it is something that we're going to talk about. The last one is an interesting topic where the ability to choose a particular router slash firewall. Like I said the firewall as a service works on router or the namespace and IP tables. What we want to extend that and make it more capable and how you can do that is something that we want to talk about. Okay so I'm going to hand it over to Sharath and he's going to cover the scheduling aspect and follow it up with a demo. Hello everybody. I'm Sharath Chindra. I'm a tech lead with jennipa networks so I work on OpenStack Notron plugins and my primary focus is on the firewall as a service area. So in the current proposal like in the current idea so what we see is in the field one of the most widely used features by network admins is the ability to schedule firewalls at certain time intervals of the day. So this enables them to restrict access to certain websites and access to their remote servers, SSS servers, FTP servers at certain parts of the day. So this actually frees up their bandwidth and improves productivity and gives them more return on their investment. So we see that IP tables library both on CentOS as well as Ubuntu supports the ability to schedule firewalls and by default it uses UTC as the time zone and to take an example let us say you want to create a rule and you want to schedule a rule from morning nine to five on all the weekdays you'll try out something like this. So the command is like IP tables and you define the chain and the match condition is time. You follow it with like the time start. You'll say I want to start my rule from nine o'clock till the time stop is five o'clock on all the weekdays from Monday to Friday and the action that has to be taken on the rule. So this is basically the format in which you can define a schedule on the IP tables. So these are the various parameters that are available to define a schedule. So one is date start which is a date and value on the date stop and if you want to just specify the time intervals you can say time start and stop and you can mention the day of the week or month of the week using Monday's and weekdays. So to take a few examples let us say you want to have a rule which runs only on the weekends. You can say weekdays is Saturday and Sunday or you want to have a rule which runs between two date time intervals. You can say date start date stop or two time intervals you can say time start time stop. So to get this feature working in OpenStack we had to do an enhancement in a few areas. One is the horizon UI, the other one is a neutron client and firewall service plugin and the firewall agent. So we are visualizing the enhancement in this way. So basically when you navigate to the firewall section on OpenStack you will see one additional tab where you can define your schedule. Basically that is the place where you go and define your schedule saying this is a schedule, this is the name, this is the various parameters for the schedule and then you can actually go to the firewall rule section and when you are creating a rule you will be given an option to actually select the schedule that you want to associate the rule with. You can say this rule can be associated with 9 to 5 schedule or you can choose the schedule that you want to associate the rule with. So I will be showing that to you shortly in the demo. So this is my OpenStack installation. So this is my OpenStack installation. As you can see in the firewall section a new tab has got added. So this is the place where you define a schedule. So I will give it a name. So I am taking two parameters right now. So one is both are daytime values. So this defines today from 10 o'clock till 11 o'clock I want the schedule to be active. So I define the schedule here. So now when I create a rule, so let us say I define it between 2 networks 20 and 30. So this is the enhancement that has been done to this UI. As you can see this is the place where I can go and select the schedule that I just created previously. So I am associating it to the test schedule. So my rule has got added. So actually in practice what will happen is let us say you have an active firewall and this rule is already associated with this firewall. So in the back end the firewall plugin will receive this command and actually push this schedule onto the IP tables. So for this demo we are taking a shortcut like basically we are capturing this information in the service plugin and dumping it into your log so that we can see what is happening in the back end. So as you can see, okay I will just show you the, let us look at the Jotron client. So a new command has been added and you can see that. So I hope you can see this. So basically what you are seeing is like the firewall schedule rule that has got defined in the UI has got added to the back end database and Jotron client is able to list it. So you can execute all the commands. So these are the commands available create, delete, list and show. So you can say show, test, schedule, build, give details about the test schedule. So what just happened is like when you created the firewall rule, so we are taking a shortcut here. So what it does is it sends this information to the firewall plugin and at that point we are capturing it and logging it in the back end. So as you can see this is the command that has got captured. So you can see that IP tables hyphen a, the source IP is 20 and destination IP is 30 network, protocol is TCP and hyphen m time. The date start is the time you have given and date stop is the time you have given and the action is allow. So basically what we are showing here is that we are able to receive the information from the UI and the next enhancement will be to actually send it to the firewall IP tables agent so that it can push it onto the IP tables. So this will end the demo and I'll hand it over back to Chandan. Hello everyone, I'm Chandan from Juniper Networks and today I'll be speaking about the proposal of adding packet logs in OpenStack firewalls. So if you look at the firewall implementation in OpenStack currently, the way it works is like the tenant starts by creating some rules for restricting or allowing his packets and then what happens is he aggregates this rule into a policy and that policy is associated to a firewall, right? Now, what he has to do is now next step is to iteratively go over the rule and verify that everything is working. So he has no way of understanding how his firewall is actually working behind the scenes. So he has to actually send some packets, verify if things are actually what he wanted. So this is the iterative process. He might have to adjust his rule, come back and redo the rules. So this is what we see as a problem and I think adding firewall logs to the feature set of firewall as a service will help us a lot in resolving these kind of issues. So this is where we are trying to propose the new idea. I have seen some kind of work being done on firewall logging but we are trying to present a much broader picture of what can be done. So the problem that we see currently is there is no way of logging any of the activities that your firewall currently does. So the tenant does not get to know when his packet is getting dropped silently by the firewall or even when the firewall is working perfectly fine. You don't see how effective it is.  Those kind of intelligence are not provided back to the tenant. So these are the features that we can provide by implementing firewall logging. Again in terms of troubleshooting you can have firewall logs which can help the tenant in debugging a new rule that he implements on the firewall. And I mean these are some of the very basic use cases that you can directly benefit by implementing firewall logs. There are some high level use cases which can be implemented with firewall logs but they include some other components also. So one or two that I have mentioned here is monitoring. Monitoring can help with threat analysis. You can have correlation of threats. That means whenever the attacker is actually targeting some part of your infrastructure you can look at the historical data or you can look at the other infrastructures that you have in the same data center and that have faced the same kind of threats and effectively improve your firewall policy by adding new rules. You can have report generations and auditing going on your firewall logs but for all of this to happen the basic necessity is to have the firewall logs collected first. So this is what we think can be brought in with this idea. Find tuning of rules can be done. That means most of the time what happens is people are paranoid. They start with a very, very restrictive kind of rules and as and when the requirement is there they try to open the ports. But sometimes unintentionally you might be blocking some legitimate packets. In the similar way you might have opened your firewall just to make sure something works. So all those things can be caught by the audits of the firewall log. So this I mean till this point we have just looked at what are the benefits. Now let's look at how these things can be implemented on OpenStack with the default implementation of firewall. So here you can look at this slide and see how the OpenStack firewall normally works. You have the tenant who is speaking to the neutron server and the neutron server is actually having the APIs. These APIs are what the tenant will be pushing his configuration to. So once he is pushing his firewall configuration through this API the API will actually pass it on to the neutron agent or the firewall agent which will implement it on the router namespace using IP table configuration. Now what we want to do here is to enhance our neutron API, the firewall API and give the tenant the ability to add logging features so that he can enable logging for a particular rule so that all the logs are generated. So once the APIs are enhanced you will have the agent pushing the IP table configuration to enable the logs. We'll see in the next few slides how to do that with IP tables. Once the logs are collected or generated what we introduce here is a log server which can be a centralized log server and it will actually collect all the logs and then we can probably write an analyzer to generate the alerts and reports. But these are not within the scope. The idea is actually about creating the logs first. So once the logs are analyzed, alerts and reports are generated it will be given back to the tenant and now the tenant has a view on both sides. You have a cause and effect relationship, whatever rules he is pushing and what is the output. He has a view of both the sides. So these slides actually show the default implementation of IP table based firewall logs. So as you know the default implementation of firewall as a service in open stack is based on IP tables. So we did a little bit of looking around and found that IP tables can very easily implement firewall logs. It already has the feature available. Here I show a very simplified command. The format is very well known. You have the IP tables minus a chain and then a match condition and you also have the ability to limit the number of logs that are generated by this logging command. And then you have a log target and again you have a log prefix which can be used to identify your particular log message. And then you have this log level. So these are some of the options. There are various other options that I have not mentioned. But at the end you can see there is an example that has been given and we have collected some logs in the next screen. You can see I am pinging one of the IPs on the top and in the bottom you can see that you have the log format in the log collected. You can see that there is the log prefix actually comes as part of the logging and can be used to identify this particular log. So this is helpful and this can be easily implemented within open stack. Okay. Now that we have seen the IP table part, the configuration part of it, we want to talk a little bit about how we intend to implement this logging feature. We were visualizing this log feature to be implemented as two different parts. One is per rule logging when you want to, this is targeted more towards like debugging of your rule.  So what happens is you can enable logging feature per rule and this will capture every packet that matches that rule and log it. And then there is a catch all rule which is going to be catching all the packets that did not match any of your firewall condition or rule condition and this will be more targeted towards generating logs and creating alerts and things like that. So here is a mock up of UI. So you can see that we have done a little enhancement and given a check box which will actually allow firewall logging to be enabled for a particular rule. And this is the one I was talking in the previous slide about debugging a rule. And here is what we give as a simplified, again a mock up screen, simplified way to give a feedback of what we have collected, what all the firewall rules and firewall logs that we have collected and giving it back to the tenant. So what happens is now the tenant will know what he has done on the firewall and how it is impacting his packet filtering. So I just want to summarize. So here is what we plan to do. First of all, we see there is a possibility of improvement on the firewall as a service with firewall logs which can help in debugging of the situation, threat analysis, and you can fine tune your rules. Firewall logging can be very easily integrated into the open stack because the default implementation that is IP table already supports it. We just have to work on making things available to the end user. We introduced something called a centralized log server and log analyzer but can be a simple sys log server or we can come up with better options. And we will need some enhancement on the UI side to make these things work. This is just for exposing the features which is already available. And I think we have seen one attempt of doing this by one of the contributors and we are trying to get in touch with him and collaborate and see how far we can take. We want to take it at a much much higher level because he was just talking about collecting the logs. We want to expose the log back to the user so that becomes more usable. So that's pretty much what I wanted to cover in terms of logging. So I'll give it back to my colleague Sriram who is going to take the next. Just to recap, we have covered two topics so far. One is scheduling firewall rules and how we can use logging to generate information and intelligence out of the network. The next thing we are going to cover is the ability to choose a router and a firewall. To understand what is the context for this, let's look at the challenges that we have today with the current solutions in OpenStack. So I don't know how many of you attended the DVR presentation yesterday but in a non-DVR case, your router and firewall is hosted on a network node. It faces a typical challenge of performance and scale because it's restricted by the hardware configuration that is available on the network node and it's also the single point of failure. And HA in Neutron is not something very easy to implement. And in a DVR case, the proposal is to move the routing into the compute nodes. You still have some limitation which is bound by the compute nodes capacity. So you still have some challenges. It does solve the performance issue a little bit. And the third challenge that we have seen is how can we leverage some of the rich features and functionality that networking appliances provide? For example, next generation firewalls nowadays can do very smart application-level tracking and enforce security policies in a very dynamic fashion. How do we bring those capabilities into OpenStack where the default IP tables are supporting a very simple five-tuple kind of security policy? So the solution we are proposing is a combination of things. When you look at the new network operating systems and modern networking hardware, it's more and more Linux-based. So it's possible to leverage them and make them as a network node themselves. You can run agents on them and they are purpose-built for networking functionality and they are built from ground up for performance and resilience. So you don't have to reinvent HA or performance with those appliances. So we can offload, routing, and firewall wherever needed into those devices. From the real-world perspective, you can bring in differentiated services. You can have some tenants realize the benefit of these advanced services and make them pay for it. Or you can have tenants who want probably a lower quality of service and go with IP tables approach. That flexibility can also be built in OpenStack given its complete open nature. The idea is really we can have all the solutions coexist. It's not that you can go with one or the other. There is a possibility to support different combinations. So I'm just taking a simple case here of a non-DVR and to highlight the problem. Let's say you have a setup where you have two network nodes, network node 1 and network node 2. And the network node 2 happens to be a 2x powerful CPU and 4x memory compared to network node 1. When you try to create a router or firewall rule, you don't get as a choice as a user where that router lands up. It could land up on network node 1, which is not as capable. What if tenants wanted to choose and are ready to pay for it? The ability to host their networking services on a much more capable system. So there is a precedent in OpenStack for this. It's not something that doesn't exist today. In OpenStack, you have the ability to choose a DHCP agent and this functionality has been there for a while. As an administrator today, you can attach a specific DHCP agent to a network. And this gives you those benefits of redundancy performance because you have the ability to choose the right DHCP agent for you. And in this screenshot, we have controller, which is a network node and a controller and a dedicated network node. And I'm just highlighting in OpenStack that you can choose it today. That's what we are getting there. So we want to make it available for routers and firewalls. There's a back-end application so that we know it can be done at each lab. We can choose a specific one for each and every router. And the firewall as a service, because of the scope it works, the next thing we want to do is associate to a router at the router creation screen itself. And again, what we have suggested here is you can treat in the default behavior also. There are routers where tenants want to create their routers on a specific particular network node or a firewall. It could be physical or virtual. They have the ability to choose. And what we want to do further from here is depending on the capabilities of that router and firewall, expose advanced capabilities to customers and end users. The additional benefits, which is basically if you want to move to an NFV kind of a model, you don't have to rip and replace everything. You can bring up nodes dedicated with virtual form factor firewalls and routers appliances, allow users to move one step at a time instead of moving one shot and grow your system over a period of time to a more richer SDN-based solution. So those are the three topics we wanted to cover. So we had some more ideas on performance and scale improvements. You want to cover that? I think we have time. So we wanted to cover this in case we had a little bit of time left. So basically this is like in the current implementation of firewall as a service, we see that there are a few performance issues which can be fixed very easily. So this is like looking at the existing problem and proposing a solution. So let us take the use case where we have four networks, network 10 and 20 are connected by router, 30 and 40 are connected by another router. So the first problem is in open stack, today when you create a rule, there is no validation done. You can actually start creating invalid rules. So basically I'm creating a rule from 70 to 80 network which is not there in my topology. So which actually succeeds in open stack. It doesn't do any validation. So the second problem that we see is let us say you create a firewall policy and associate three rules to it. But rule one is specific to router one, rule two is for router two, rule three is for router three. So even till kilo what we have seen is all the three rules are pushed onto all the routers. So which is basically router one doesn't even care about rule two and rule three. So that is the problem that we are seeing and that we have seen. So the proposal is like I mean what we see is there is no rule validation and unnecessary rules are pushed onto all the routers which actually is like a security hole waiting to happen and effects performance because when a rule is evaluated it has to be it has to scan across all the rules that are present in the system. So coming back to the solution what we see is what we can do is when a invalid rule is added to the system it can throw up an error to the user saying I don't see this particular network in my topology. So we can reject it right there when you add a rule. So that is the first enhancement that we can do and the second thing we can see is let us say I have three rules rule one is from network 30 to 40 rule two is from network 10 to 20 and there is a third case which is called any rule which can go to on the all the routers in the system. So you associate it to a policy and you create a firewall and associate the policy to it. So when you do the deployment the rule specific to the 10 to 20 goes to it rule specific to the other router goes to it the any any rule is a special case which actually gets copied to both the routers. This is the optimal way in which we can actually utilize the rules. So these are the two things that we observe in the current open stack implementation which can be improved. So that's all we had for today. Before we go to the Q&A we have a few other things to quickly talk about. Just yep so Chandan and I have written a book on open stack networking which was released just couple of days back. We have some free coupons you know we'll choose based on the Q&A session which are the best set of questions. These three coupons for complete the book will be free but we have discount coupons which anybody can use at packpublications.com. So any questions? Yeah that is true but the case is like let us say you have a rule defined and you never created the network. It's like a rule which is which can be pushed on to any router like currently. I mean till you create the actual network that rule is invalid state. If it will be great you can speak it on the mic I think it gets recorded. I don't know. Any other questions from anyone? So we told that the first part of the problem is to start logging. I think it was very evident that we will use the IP table construct or a configuration to start logging and then what we are proposing is when the IP table starts logging we will use syslog configuration to push it to a centralized server. So once you have the log configured on the centralized server then it's up to us. We can write an agent or a looping call which can from time to time grab the logs from the log server and depending on the prefix we had a log prefix right. The log prefix can be used to identify such say which tenant is going to this logs generating which which tenant is generating these logs. So depending on that we can filter out the log and show it to the tenant. So the logs can catch the tenant ID or some identification information for the tenant so that when you show it on horizon UI you can filter out the log specific to the tenant and show it to him on the screen. It might it might be totally outside of Neutron yes yes yeah as I said see part of this solution is within Neutron but if you look at the bigger picture if you want to support the bigger use cases you have to bring in see the log server does not have anything to do with Neutron or the analyzer does not have anything to do with Neutron right yeah yeah we yeah we can either leverage them or if you think there if we think there's value in creating our own then only we can look at creating something like that right we can always leverage whatever is there. So we have to make it pluggable that's the theme of Neutron right so the open stack in general we have to make it pluggable and customizable and leverage solution that already exists. Handle the deletion cases where a router is deleted and there are like rules firewall rules associated with it. Yeah so currently it is handling kilo also so when you delete a rule there will be a callback to the firewall plugin. So there is a callback which happens and we actually can take care of the rule deletion. So at least yeah so basically the rule can be moved to a inactive state but in that case we will be ending up with the okay so if you take this particular solution what I propose is if you have a bunch of rules associated with a router and the router gets deleted these rules are now in an invalid state so they can be moved to an inactive deactivated state there is an active or the inactive state for a rule. No I think yeah yeah no no he's saying the router is deleted the router you can delete the router see the rule can remain but it's not active so basically firewall is active okay let me tell the scenario we have a firewall and a rule and a router and you have filtered the rules and applied to the router like you have rule one which is given to router one now you go and delete the router one now on the firewall this rule which is which has got pushed previously what should happen to this rule this is invalid right now right because router has gone. Yes rule can exist yeah rule can exist when you say the rule will not be deleted in the yeah I think when a router is deleted you don't need to do anything to the firewall or the rule it can exist if there could be other routers or if it is a last router it can still exist when you create the next firewall or next router and you associate that time validation needs to happen no the rule will exist in the UI but it will become an inactive state in the UI yes exactly depends on the exact state at that point if there are other valid routers present it should stay multiple you have to validate I think we are done we are okay yeah I think we are thank you and thanks for coming and listening to us and we'll be available right here for if you need some other help or questions or discussions thank you