Hi everyone again welcome to this lecture today, we will be continuing the Linux networking topics this is lecture number 4 we finished the Linux basics and now we are into Linux networking today we will be talking about the domain name system this is one of the important things that we really touched upon doing the first lecture and then now we will be taking it up much more details. So before I want to before I go into the this domain name system itself let's recap what we learned the last lecture the lecture number 3 which was mainly about the file transfer protocol or FTP we learned about how to do the FTP itself by using the FTP and then followed by the FTP server command and then there are various commands that be used to transfer files back and forth you can transfer it into the FTP server and also you can get the file into your system and there are various modes by which you can transfer all those things we learned and then we also learned something that is unique which is how to set up an FTP system or FTP site in your machine the specifically we learned about the FTP access dot control or CTL this particular file decides in the flash EPC area and this is the main file that is used to provide access to any users and here there we use several keywords on access deny read only write only things like that to make sure that the whoever is connecting to do any kind of FTP activity has all the permissions he or she needs to do the file transfers then we also learn some administrative commands like FTP who FTP count the thing command that you already know about things like that to see how we can transfer effectively but I hope it was interesting for you all and now let's look at some activities that I want you to do based on the last lecture so go ahead and actually answer these questions what do these comments do in FTP then LCD M which so I think like these are the commands that we already learned in the last class so it should be fairly easy for you to answer these questions the second one is slightly more challenging is what commands will you use to set up an anonymous FTP essentially like I mean this is I'm clearly referring to the FTP access control inside that how do you what do you write to set up the anonymous FTP some hints I can give you the when you talk about an anonymous FTP you don't know who is actually connecting so you need to make sure that you need to give all the permissions that is needed for any kind of access so yes it depends on what they want to access but I also want you to give some idea as to how you want to give this the permissions and then the other question this is very simple is where will you set up the FTP access control this answer is I think like I mean in the previous slide so just refer back immediately you'll get it so again this question is slightly difficult than the first one the first one is helps you to get the base understanding and this one likely more and then if you are still like I mean if you are looking for more challenge for you it is the third question it is the find the number of connections that are available for each FTP server configuration in your machine so your machine is has like several configuration of FTP find the number of connections that are available for each of those who are who are connected to those various FTP servers I think like I mean this is fairly easy assignment just you should be able to do it in move and if you are paying attention to the lecture 3 so now we will start today's lecture today's lecture is on domain name system as I mentioned so let's look at the domain name system here we will be learning about configuring the domain name system name resolution we will also try to configure the dial up network using the PPP or the point-to-point protocol and then we will also try to understand the plan services such as DHCP and LDAP these are all like acronyms that we will study later then we will also like look at some of the graphical applications and the remote dial up authentications and then we will also look at some plant level tools such as web browsers and email plans because these are kind of you can almost think of them as applications of the DNS name resolution system so first of all what is the DNF DNF is the hierarchical distributed naming system for computers services or any resources connected to the internet or even a private network so that everyone knows what the other computers or services are available and address so address is one of the key things that you know everyone wants to have you have your home address and so like I mean in the locality people know like how to get hold of you to come to your house and they also know your name so we can mostly approach you and then they know that it is you so it is kind of it gives the identity of a person similarly the domain name service and domain name system you can think of it as a directory where we store the identities of all the people and the key thing is I think we saw a little bit in the last month the like I mean as you know the IP addressing that we learned when we learned about IP addressing IP addresses are this four of the numbers which are binary or maybe you can convert that into decimal or hexadecimal but issue is if I asked you to remember say like 10 IP addresses from different sites you will soon just not able to recollect recall any of the numbers so for humans we need something which and identify what is available for example Google.com you need to know what like I mean the you need to know the IP address in order to go to the Google.com but at the same time what you want to remember is just the Google.com not exactly so the domain name system provides a way to actually do so let's look at how we do it so in this course we will be talking about like setting up but again it's a translation file that how you can do it as where you can think of the numerical IP addresses on one side and then the actual text based domain names on the other side so and imagine right I mean this you can use it to find and locate any computer services and devices worldwide this is one of the beauty of internet so that you can really find any computer in any part of the world connected to internet very quickly using the domain names so in fact as I said it's an address book or phone book you can think of it for internet so that that's how you should be with some domain name like say like example.com it translates into address <IP_ADDRESS> so I mean the DNS will just store that that name essentially the that www.example.com along with its address so that if you type in www.example.com it takes you to that site using the actual IP address the new internet IP address closely associated with the DNS is also the URLs essentially like I mean that is the the names starting with HTTP so URL stands for the universal uniform resource locators and essentially that's basically it's a form of the IP addressing which is which part which which is a part of the DNS so on the domain name syntax essentially like I mean so we will be learning about it before that let's look at the how we do the name resolution the DNS itself is implemented by domain name server the domain name server essentially keeps multiple all the details the IP addresses of in the world pretty much in the world and it's corresponding the textual addresses in one place here the term domain means the name of the multiple hosts in the net in the internet and they are that are collectively the most widely known the domain name is the.com very much lot of people will be a lot of you working for one of the.com and we call it like the.com era things like that and an organization can have its own domain or collection of domains the the network hosts the names of the network hosts are the host name essentially and the FQDN refers to the fully qualified domain name it combines the host name with the name of the domain so we will see some of the examples in the later section so this is essentially like I mean how you would set up the name resolution the domain name syntax is one thing is the top-level domain is always represented at the right most as the right most level you can almost think of the domain name as an inverted tree structure so the.com is at the top here you see that the.com is at the top and then followed by the remaining part in the the.com is here and then you can also have the other other items to the left of the.com so let us look at some of the examples so here there are multiple examples the top-level domain name the.com one example is www.idm.com which is essentially like I mean ARM refers to commercial organization all for the first three letters and the other top-level domain name is widely used is also .gov or .gov here the example is www.state.gov or irs.gov things like that the .gov refers to the government it is typically the US federal government then you have edu which is the another very common top-level domain name for example here it is www.itla.edu should be like Stanford.edu several schools edu and these are the educational institution so that is why the first three letters again it stands for edu. Now the military US military has its own top-level domain name again that is denoted by the first three letters myel and any kind of organization whether it is profit or nonprofit mostly it is nonprofit they have their own domain names that is the ORG and then so these were the primary top-level names for long long long time top-level domain names were only like edu. Today the US has opened up with other ones like net is any networking services it is not just limited to the networking services there are many companies now getting the this one and then .us is another one it is mostly a geographical domain and it exists with the other domains in US and it is also used by a lot of state governments even though in the California uses also a lot of .gov names as well then there are country specific names for example JP Japan IT is Italy DE is stands for the Dwight or Germany and I think like you all know what I am stands for that's the India and one of the famous domain names in Indian India is airnet.in which is essentially the educational research network so that goes to a lot of educational institutions and you can find those several other names like UK stands for the United Kingdom a US I think is the for the Australia things like that so you should be able to find the top-level domain names for a lot of these things and nowadays like actually like now they have the the board the particular body that controls this the domain names they are opening up in a big way so more domain names that are available today so before we go into the resolver the there is also the hierarchy of domains as I mentioned like I mean when you are reading the the domain names it goes from right to left with each label specifying one subdivision and each level is separated by the next level by a full stop or a dot so we just call it like www.idm.com is essentially an imperfect as the calm being at the top level and then under that one of the sub domain is IBM it could be Intel could be another sub-domain so that will be www.intel.com and then if you are on to put more stuff within Intel they like the semiconductor division or they like microprocessor division you will see like microprocessor.intel.com so that means that it's a subdivision under the Intel you and there are some rules governing the name central each label can go up to 603 characters the tree of subdivisions may have up to 127 levels so I mean I don't think like anybody is using that kind of thing but you can think of the the deepest tree that can accommodate all these things so the other rule that also says is the full domain name must not exceed the length of 253 characters in its textual representation so the internal binary representation of the DNS has a maximum length of 255 aspects of storage but even though like I mean it allows the 255 of this in practical practically actually it's much shorter because the domain registries don't have like a lot of other space that this that is needed for updating this particular IP address and the domain names themselves can contain any character that are that can be representable in an object so it is not limited to this alphabet something like that but typically basically includes the ASCII character set that is A to Z digits 0 through 9 uppercase H to Z and also hyphen is also can be accommodated this particular rule is also known as LDH rule this is letter digits and hyphen usually the domain names are interpreted in the case independent manner so the lower case IBM and uppercase IBM means the same thing and the definition of a host name is a domain name that has at least one IP address associated so the way to convert that IP address is to store the IP address with the corresponding domain names in a text file as I said like this is this is your direction and this is actually located in the slash ETC slash hosts file which should be you will be able to find it so I am not aligning that slash ETC slash hosts there are other files that are also being used the host dot on and NS switch dot on they determine the order in which the resolver the resolver looks at various sources to resolve the IP address again as I said you know the IP address and the whole directory structure is all hierarchical and sometimes you may not have the storage space to store everything so you have to look at these additional file to see where is the the information if it goes beyond the hierarchy that is supported within the within your let us look at configuring the DNS resolver so graphically here you can see basically the host name which is Sundance the domain name I think X mission dot form again you can you can see that the dot form is the popular domain name followed by the sub domain is X mission and then you have your host name and then the primary DNS that you can say what is the domain name system name and then there is a 192 dot 160 about 105 I think by now you know like it is for octets what they mean there is what is a network and what is the actual host ID and then the same thing like second again specify part of like two networks and in one network is named as the fifth computer mission fifth node and this in the second one it is actually the second one so here is the web main utility which is essentially like used to configure the DNS resolver this one is again like the configuration page essentially like I mean one of these tabs is what you click to get the other one and then the DNS solver so here is how the DNS client itself is configured something like this may be like hard to read but it also gives the same information the DNS server information the host name and then there are anything like that those are the main information that is in the site and that is used to configure this system but before we go into the next one is the ballot network using the point-to-point protocol I just wanted to add how the address the resolution works so essentially like I mean the domain name resolvers determine the appropriate domain name servers responsible for the domain name and it does so by using a sequence of queries starting from the make most of the top level domain so a network host is actually configured with some initial cache essentially which has some known addresses and then when you query to the root servers you get like in the authoritative top level domain again just clarify that authoritative server authoritative name server is a server that gives the answers that have been like configured by the original source so again these are all like I mean a self-spawning system almost think of it that way there the initially the domain administrator pretty much codes this the domain names to one of the servers and then from that point onwards it just spawns and then basically like I mean it actually provides answers to the next server and then that pretty much like because really it goes on and populates all the servers in fact if you are doing any kind of web web searching things like that this is one of the key answers that was developed basically that one person gets to know something by recursion you everybody else in the network knows about the same thing and this actually helps in doing a lot of web searches there the material itself what you're searching on will be stored distributed across the network and whenever you want you can easily get it because you know the system can use recursion to handle this information presented to the top level so the entire directory is also known as registry so and then there is also like the main registrar who essentially registers any key or in fact all the IP addresses so let's look at the the point-to-point protocol or PPP PPP is PPP is one of the protocols that is used to connect to internet via modern it includes the features that that is security flexibility and dependability all of them than terminal emulation so emulation is another way that you can use there pretty much what is in the remote side you emulate it into your machine and so basically that's what the other thing will do or kind of mimics what the other PPP is essentially more interactive in the sense that whatever the messages that you are sending basically they'll actually send to the remote system and executed there one thing to notice it's like it's not very secure and used to be like very challenging and challenging to configure and manage there are two advances that happen that improve the PPP security one was the password authentication protocol or path that stores the user data in a file that only the root user can access then the second one is which is becoming more and more important is the challenge handshake authentication protocol called CHAP this is most secure PPP option so one example will be like your RSA secure access token token mechanism there it challenges you with either a password or particular pin number and then once you send that pin number then it starts it on some variants of this methodology you have a pin with a random number generator and this random generator is actually synced with the server inside the system or inside the company and then once you generate a random number based on your pin and that's compared against what is generated in the system because the algorithms do allow the system to be doing very similar to what you are so once it understands that once the passwords do match then it provides that that handshake is exactly carried over and then that's how the user gets authenticated and now he can actually do whatever he wants inside the system because it knows exactly the coordinates and decided he has been established so let's look at how this connection will happen it's a text mode utility for the WV dial that pretty much works to eliminate all this difficulty in connecting with PPP and this one you can actually use it from the command line in the server in red hat Linux there's a utility called RP3 which is provided this is a wizard driven graphical utility so it goes through the various steps to make sure that you can set up the PPP connections in Linux KDE graphical environment to utility called KPP is used and then the dial D is also like used to automate PPP but dial D is kind of difficult to use and little bit more challenging to set up so here is one example of how do we set the PPP connection so here the many many options one is the PPP do all my authentication begin connection in the computer is turned on you may or may not want to do that and then let user start and stop the connection so this is like a good option so that the machine doesn't shut you down when it and then the other one is the make connection the default route which is also kind of important so that you receive the maximum then configure the name resolution automatically which is I think it's a good thing to do you are considering the PPP because once you do the name resolution automatically then it is going to a primary source and actually getting that information and then it populates and as I mentioned the recursive population will enable that the whole thing is populated in no time then there are other options for restarting and then one thing to note is essentially like once you set up a PPP if it cannot find the connection it can sign and you can set up the time to wait for the connection to be complete finally the it also provides the way to configure the primary DNS and the secondary then there are some low power features this is also mentioned here like bringing the link up and down automatically in activity time set essentially you can do all these things so here there's more dialogue boxes this is used to set up an account and starting a connection using the KPPP in open Linux so as I mentioned like there are other PPP servers this in the Linux KDE that will manage the KPPP so using the KPPP to set up an account and start a connection I think I given you are familiar with some of the PPP and VHPP because they have any iPhone or anything you will be working on this a lot so just to give you more sense of how this name mapping really work is so as I mentioned basically like the network host is initially configured so it has at least some basic directory and then builds on the directory so then you make a query into one of the root servers to find the server authoritative for the top domain then once that is completed that gives you the servers for the next level because it contains for that particular top level.com what is the the next part which is IBM gives you that the corresponding idea this and then you essentially like now the you have sent a query to the server the address of the server that is returned and then essentially like that will provide the address of the DNS service DNS server that is authoritative for the second level so now we first went to the first level domain then that gave us some information we take that information and then we submit to the second level domain name and then now that is going to return something that's that's all you need you stop it right there but won't continue again you can go and continue on with other sub levels as well whatever is available so one thing that I wanted to add to the slide that he talked about where this is domain names for this one so today like I mean .com and .net domain names they use the directory there are the domain registry from VeriSign VeriSign is the company that keeps these two all domain essentially so the register who is using which domain how long is supposed to use and also what are the dates that the things will expire so just to keep in mind so let's talk about DHCP DHCP stands for dynamic host configuration protocol we learned a little bit when we talked about the IP addressing we just started talking about it but we will continue in that lecture so as I mentioned like I mean initially we started with IP addressing the core of it and pretty much like I mean we wanted every machine in the world who is connected to the internet have a unique identifier but with just this four octets it's just not possible and not only that if a machine is connected to a network you know then you may want to move that machine to some other place and either replace it with a new machine or not replace it with a new machine but you need more addresses than what is provided so that you can be successful in doing this DNS and the other thing and then also like you don't make any of the DNS DNS you don't want to make them like obsolete so the way to do it is this dynamic host configuration protocol which lets you change the IP addresses at the time of installation or at the time of setting it up so essentially like the DHCP allows the configuration of the service that hands out IP addresses to the network clients and since like coming you are creating new IP addresses and essentially but it's in under the sub domain so that it does not clash with the main domain now you can actually like keep updating whatever web address that you want all you got to do is to make sure that the DHCP server has that information and it's actually like so better so advantage of DHCP is it can reduce the administration cost quite a bit the DHCP server itself is involved by default on many Linux Linux systems so you don't need to do any kind of thing for the DHCP server and you can also look at the configuration of your machine in the lab from the slash ETC slash the D dot console console so how do you use the DHCP so again in this section DHCP like I mean we can move on figure the DHCP graphically as shown here this is one of the things where you can actually like IP addresses that you can give you like some pointers to the very log and and then you can let it run so now let's look at the LDAP or lightweight the directory access protocol this is quite the directory structure that lets the users query a database of network resource information so the LDAP directories are organized as inverted trees and in order to use the directory services the client software allows the traversal of the tree looking for the needed data objects in the same tree are referred to using a formalized set of enterprise so that's pretty much on the local directory access protocol now let's look at how it is organized so here in the LDAP you can see that basically there are two different types of objects one is the container objects and then the other one is the leaf objects and it's very easy for you to actually select the container objects you can see that actually the FDR admin FDR and PON or the container objects and then the the the low-level items files and etc they are the leaf objects so here let's spend some more time to understand how the LDAP works so here like I mean we have a top domain called just called top on the top we have like Latvia IP and then then we have also like another one Mexico and there are attributes of these country objects the attribute will be a class is country the name whatever the name of the states or the country the the just the name of the place itself and then there's an internal code and then also the capital city so these are the four items from the from for this particular LDAP so like under Mexico you can still have like IBM and Excel and in fact you can also have in Italy have ties with Italy and then you progressively go down essentially like then it's the various people on the base people there is books for example here there is a Cm named Louis Rodriguez and another Cm is laser jet and third one is a marketing group itself and then from there you can still focus down go down the hierarchy dimension like I mean you can have all the two levels of logic and also like I mean everybody is trained in those kind of things so now let's a bit more so how do we run applications remotely so the way that to be run for example here like I mean you can think of the host name the host computer has just two programs so here all this K paint K cal if I can be paint these are all just the host program whereas actually like I mean I take it back only the first two only the first two but then the remaining programs out of the remaining programs the DMP or a paint it out they are more like batch programs of their actually they we want to run it under this server so what do you do so again the number one requirement is we need to configure the remote host before we can use it so we need to tell in that computer as to what the pitch clients will be using that resource so we need to authenticate that the user in the remote system one way to do it is like I mean actually there are several like first authentication services are available a quick one is like the exhaust plus kind of thing there it actually opens up the terminal for receiving any kind of X requests the XR is another one which is it's more secure than a ghost X host since it employs the use of the code but I think like X host is quite prevalent today I want you to in fact try some of the X host commands and see how they work and then for the remote graphical terminals the X DMCT get you the remote X service and it will have a logical login screen or a graphical login screen and it will be using this time so for remote execution there are our units that are available what are our units we will see in the next slide but essentially like things like copying or going to a directory those kind of things this are utilities are much more helpful to connect to a remote machine and then perform this operation and then the UUCP is essentially like I mean that the transferring emails over model between the two mail so the are commands that I mentioned earlier these are like standard your links commands are who is essentially like a remote who so it it logs in to see like I mean what is who is using what then our time is the other one how long the server is up and then so that the it tracks that our login is a remote login this everybody should familiar with which is essentially a way to get the the remote system respond to your request and then RSH is another widely it is essentially it executes a command in the remote computer before logging and then RCP is the other one which is copying the files so it helps in copying that's not even copy and then basically it's a very fast discoverer of no sorry so so RCP is essentially to copy one or more files between two computers it could be like either a local computer and remote computer or just between two remote computers so RCP is another widely used command so now let's look at some of the mail clients one of the most famous one is browser so the popular Linux browsers are links is one of them which is a tech-based browser and it's actually comes up free with a lot of Linux machines let's keep coming together is still you then Mozilla Firefox is another one this is by far the most common one again Mozilla is again another open-source type of graphics so and then they they they they work on that and other browser browsers are opera, Dillo, galleon, skips, etc. now we go into more details regarding the links browsers sorry Linux browsers again I'm like let's go to this previous slide and then so there are several popular Linux browsers links is one of them is the x-based browser that is installed by by default on many popular Linux installation so let's look at the links browser here and it's the text browsers are kind of it's a small p of this point because we are all used to a lot of this graphical user interface and working with the browser this text browser is kind of unique and think of it you can see that actually like a kind of stuff and then basically like it goes on and then the way to interact it is also like some arrow keys that you can go to like scrolling up and down and then you need to provide the address in a particular box and then display this good thing about these kind of text browsers are first of all they are fairly easy to bring up the secondly the text browsers are much more faster than the graphics-based ones but nowadays like I mean actually the processes speak so much that you don't see any difference but if you remember even the Google started as the text-based browser and actually not a browser but at least a website and then it basically added various graphics but even today actually like I mean the basic Google is just a blank page with just one small window where you can type in and then get the information so the next topic is going to be the email but before we go in the email I also wanted to talk about few things one is on the security so the the DNS software needs to consider the security aspects of it there are some vulnerability issues that was discovered and they were exploited by some malicious users there is something called DNS cache causing in which the the data is distributed the cache resolvers under the pretense of being an authoritative resolve so basically like I mean it corrupts the DNS entries so that if you are typing the Google.com it will take you to some one site or some other site and it also like I mean the once that data gets put in in one of the servers as I mentioned basically the whole system both in the recursive mode where now then another system another system queries about the addresses suddenly like when you get this this address which is also like the corrupted address and then suddenly the corrupted address just flows through the system some of the denial of services also can be can be used or can be can the result of this kind of attack there you capture the directory of one of the system and then put a fake the URL or fake IP address for a given URL and then whenever somebody types it in it takes you to like say say like flash now flash there flash now which is like no place so that's kind of the denial of services attack again it's all results in this whole recursive mechanism so if we obey it obey and use it properly we can also like get back the proper results otherwise it's basically we can easily manipulate and the destroy the whole thing so once these kind of attacks started coming now we are talking about the domain name security extension domain name system security extension or DNS sec or short these extensions offer some kind of programmatically signed bits and then since they are encrypted and that can prevent some of the attacks essentially so now nowadays like I mean there are several extensions that I will devise to make it secure a simple thing will be like in CTPS secured HTTP the hypertext hypertext transfer protocol they also have like some spoofing effects whereas so like I mean this is another way to attack some of those things which where you just change the names slightly for example if it is Google.com this is DOGLE.com somebody can spell another site for DOGEL.com Google.com where if you type that wrongly suddenly like you end up in a different altogether different site which can do another thing and this kind of vulnerability is exploited in what is called the phishing phishing is PHI SHING it is kind of an act of it is an attempt to actually acquiring information that has used in its passwords and even credit cards by masquerading as a or covering yourself as a trustworthy site so that you can get all this information and phishing even though like I mean right now it's very popular like there are several phishing types and doing all the things this term phishing itself was described in detail in 1987 so imagine it's been around for a long long long time it's now famous because of the internet so with that I am going to conclude for tonight or for this lecture we will be talking about understanding the email and continuing from this point in the next lecture okay so thank you very much once again thanks


Well, residents obviously need to recycle and want to recycle for environmental purposes. It's good, it's green, it produces the impact of plastics on the environment. But also, recycled material is an asset. The better we treat that asset, the more respect we give that asset, the cleaner the recycled material, the more valuable it is. The money which we get from that recycled material then gets recycled back into the council and helps to preserve frontline services. More consumers than ever before want to do their bit for the environment. So it's a really important time for recoup and pledge to recycle plastics to be working with leading authorities like South Cambridgeshire and Cambridge to actually deliver clear, consistent, simple messages to the public. We actually see a wide range of products being made from the recycled plastics and that can include new packaging, it can include parts for the automotive sector, clothing for example, part benches, you name it, you can make it from recycled plastics.


And then the other file from Saf and in the end that was made from Madeline, right? That that was yeah, that was that was from Madeline and I guess Connection yeah, it's filled because I think like was it he when he goes to see or doesn't he? He picks up her hair or something like he Yeah, yeah, he folds it in like I noticed only today and like Anchor chief yeah, so he gets it got the hair gets it from yeah from her office somewhere or something or yeah Wouldn't that how funny would that would have been if like that wasn't Madeline's hair That it was so like one of her other patients and like at the end bond died for nothing Jesus Welcome back everyone, this is Jeroen better known as Dutch Bond fan And I'm returned here for episode three of discussing no time to die And with me once again is my good buddy John from haphazard stuff and today We are going over the Bond girls again this time in retrospect In the forecasting series. We also did a Bond girl thing So how excited are you for for this little topic? I'm extremely excited Yeah, I just came back from Watching no time to die a second time just two hours ago So it's very fresh in my mind and can't wait to dive into this one being in the second time Did you have any different reactions from it than your first time? Did you did it grow on you like? That's what I've been hearing you see the second time you yeah Well different it really hasn't for me. I was expecting it. I the ending for example, we'll get more into that later Didn't change for me much my opinion I Get notice some more details if anything And speaking of the bond girls, I really got to say second time around as well I think the Cuba scenes the honor the armist Moments not just because it's heard because I happen to like her as an actress But I think she's really one of the strongest aspects that is film It's really one of the most enjoyable parts of this movie How long ago like you you've been a Anna fan for a long time Kind of yeah Well, but like you will what was the movie that you saw her and you said oh she should be a bond girl one day Yeah, that was war docks. That was war docks You should watch that one. I did see it. I saw What year was that though what what year was 2016 I think 2016 so it was it's been a while that you right came came up with that and said oh, yeah, she should she should be in a Bond movie. Yeah Yeah, and it was more of a joking jokingly fashion because there's this one shot in war docks where there's a close-up of her face when The the guy would the actor I think is called miles something did the guy that plays Teller yeah miles teller. That's right. Got a place that the main character in war docks He returns home And there's this one scene where she opens the door and they do a close-up of her face And you see her eyes up close and you can really tell it's like a brown caramel Greenest brown color That's when she really stands out. I'm like wow actually said see she should be a bond girl But I remember it was that shot that I was like wow, no, see she looks so good and Then you know like I said before there was this this scene because my my my friend filmed me on my Reaction during the announcement on Jamaica when that was live Yeah, and they announced like all the cast members before they before do you saw them seated and they go like yeah, David Densig Remy Malik and of the armist and you see me go.  Oh, yeah. Oh, I was hoping this would happen So it's quite funny because I never saw it coming. I was always kind of joking about it And then it did but I'm all jokes aside. I do feel Bringing this back to no time to die. She's just such a strong presence in this so such a You really wish she see stayed around longer Really fun such, you know, now that I have it fresh in my mind so much cool moments with her What do you think? Like how long like since you just saw it, how long is she on screen for I mean, I think it's like 15 minutes Something like that maybe 10 maybe 10, but she really stands out. It's like it's such a shame when she goes What like for such short screen time that she has she takes over the movie, right as soon as she shows up Wasn't it at like when we were talking about the Jamaica the announcement that day Didn't she say like she had no idea who her character was she she didn't know What she was gonna be doing or anything like she didn't know how to prepare yet because she was on a last-minute Addition to the cast like I guess since Craig has so much pull on these movies now I guess he he must have had an influence of saying we got to get Anna for like a part or maybe it's Fukunaga or something Yeah But it's funny like a last-minute addition to the movie one of the last people like you know about like in the cast and And so far she's like the standout. I haven't heard anything Anyone say oh, no, no, I don't she wasn't good. I all I've heard was pot has no negative things Yeah, you're right. It's and you know, I'm willing to bet I think you've mentioned this somewhere as well and maybe in your review But she's gonna be the character that's gonna be remembered fondly from this movie She's gonna she's gonna be remembered for her short scene as well I mean she was just a secret agent to three weeks training and Supposedly and she was capable inexperienced, but capable And and because I had it so fresh in my mind There's also this this cool moment where you know, they're doing shooting then they're at the bar They're doing a little salute with a wad cause she chugs it They could put the guns back and you know that the music ramps up and it's it's just such a cool moment. It's It has everything it heard chucking the Vodka martini. She clearly never really had such a strong drink. It's just that's fresh as well We never really saw that stuff Um She also I think like that Whole scene in the Cuba bar and and her with the dress and the jewelry and everything That's that's the the one piece of glamour, right and like old-school bond Kind of feeling in the home the whole film the rest is little cabins in the woods and emotional Discussions and all this stuff this seems like okay. We got like the glamorous girl We got the guns We got to make sure to get something bonding in there so that people don't forget they're watching James Bond It's the one scene like he wears the tuxedo, you know, it's it's it's one of the standout scenes in the In the whole movie and I think you're right like when people think about they're gonna think back Oh, no time to die. What are they gonna? What are the what are they gonna think about with about that movie? Oh, it's the movie that Bond dies and the one with Anna Dei Armis. Yeah, the two takeaways. Yeah And You know if you if you have to make one more aspect that seemed pretty bonding and other than obviously the DB5 and stuff It's probably that tiny shot of him When he's in the rubber raft right after that he goes back to London to go to my six Yeah, you know, he gets the rubber to reveal the the Aston from the living-day lights He drives up to the two MI six Straightens his jacket, you know the one that's risky has as well and he he walks to office And that that that tiny moment which we obviously already saw a million times in the trailer anyway But that's another bonding moment the sunglasses that suit But other than that and there isn't a lot of glamour. You're right When when you saw the shot of him in the big yellow raft, what did you immediately think of? The ending of you only live twice and fundable Seemed like they were really going back to that that late 60s period. Yeah with you only live twice I like that. So much of that. Yeah and majesties for a moment And I had the same thing today and seeing it the second time He's in the raft. He's waiting and you're it looks it looks out of place because usually Bond is with a girl And now he just looks miserable like, you know, just had Felix die on him and he's like It's kind of funny to the way he looks like some people gave him a chuckle to see him by himself in a raft You know Connery's always would have make half make a chicken next to one of these things and I don't know if you had this as well, but then you hear the the sound of the boats Coming in and for a moment Even though a submarine doesn't make that sound I expected a submarine. Oh, yeah, yeah Just like a new lift life. It's just like that ending. Yeah, I guess they weren't gonna push it that far Yeah, I know they didn't but that was the first thing popped in my mind. I had it again today. Like, oh, no There's no submarine. It's it's about so like We everybody likes or you like her. What if they ever talk about like a potential is that people are talking about it already There's talk of a spin-off movie with Paloma. Would you be on board for that? You know, you'd think I would be but I'm not for any spin-off with Bond It's not like, you know with Harry Potter or the Lord of the Rings or Star Wars where you can have this universe I think Bond isn't necessarily big enough to Don't get me wrong. She's an interesting character. I'm sure they can make an interesting movie around her But I'm not up to see any spin-offs myself from any of the characters. I just want to see Bond Um, what about you live? Remember like, you know, we went through that with Jinx and yeah Waylin right and I get like people saying, oh, I would have liked to see more of her in this movie Like that. I do agree with dad, but she was she was so entertaining and everything but it maybe it was better that like She she showed up for that short spurt and like left us wanting for more instead of hanging out and Wearing out her welcome, you know, maybe her character could get grating after a while. Who knows but I think it was like the perfect amount of time for For her and she she fired on all cylinders The moment she came in on the scene and then went after she left Yeah, maybe they used her perfectly like her screen time was the perfect length Yeah, I mean they did get a lot of the they picked a lot of boxes It's it's a funny entrance. He's like in one of these Absolutely unglamorous bars like waiting half the half outside in this glamorous dress in and like almost like a snack bar Yeah, she meets up with Bond and you're right from the moment she leaves You know she passes the cigar that's that's meant for Felix and it's like okay Bye, and I hope to see you around and then that hopefully longer next time and that was her and There was just so much into that and and it's funny too. This this struck me today as well in cinema There's this moment where you know, no me comes in from the roof and she quickly kidnaps the Professor then sick the just saw the movie, but I Yeah, yeah, yeah the the scientist and you know, she comes down Mine if I cut it and she's gone and all I'm thinking is ah, no me get out here. I'm watching cologne It's much more interesting and that's the thing with this this movie It's like you're so into and bond seems to enjoy working with it's like, yeah No, no bond is working with the CIA now.   Would you say stay in your little me? Yeah, right? So would you say like out of the two? agents that we say between no me and Paloma Who who is the more entertaining who seems to more competent who seems the one that you liked more? Yeah, I mean, that's a very suggestive question. We all know And I I think I can't speak for everyone, but I think most people agree Paloma is just the the more entertaining character I do do have to say though going to the topic of no me Forehand we were Crapping all over our expectations for Lashiana Lynch And I just saw it a second time. She isn't as bad luckily. I think yeah, we were anticipating I mean, there's still annoyance annoyance. I have with her character.  I at least it's so forced Typical writing But a lot I did enjoy it with her Yes, she wasn't as grating as she came off from the initial trailers I'm not sure if that was They were just Marketing it a little wrong like they were presenting her in such a bad light in those first trailers or it was like a miscalculation Or did they could they we never heard anything about like reshoots or anything like that with this, right? And they they're not going to come clean about it You just yeah, we're gonna probably if if there were any reshoots, then we'll read about it like in five years, right? But like based on those those first trailers. Yeah, she seemed like she was going to be Like like we were saying like Jinx 2.0 and she wasn't She wasn't She wasn't like you said as annoying But she also felt It's pretty inconsequential to me Yeah, like not even a significant character to to have in the thing exactly it's Another to you know, she doesn't even seem that essential to the to the whole plot either There's this moment that that got me today as well Just watching it in Norway, you know, she's supposed to track down Logan Ash, right and Bond does all the tracking down, you know, he even stays a whole night in the cabin Madeleine, you know, they wake up it turns out Logan is coming from them You know, you get the whole Jeep chase and then after a Jeep taste bond is the one that kills Logan Ash And then much later, you know, no me shows up in the car and it's like you need a ride She does the Jamaican accent joke again.  Bond could and you're the you're supposed to be the the one that that track Logan that this is not nothing on the show This is just the way her this was what happened to be written, of course But it's like, you know, she doesn't seem to have much relevance in that whole Norway thing, you know, she just takes bond up. She has like she has like the great car and everything No, oh, basically the car her car is there just to provide bond a lift back Yeah, from the from the woods. Yeah, she doesn't cool driving on the airport Which again seems so forced like there's no real chase, but he's he does some some really Sharp turning on the air. Yeah. Yeah. I mean, what would With know me what what is her standout scene in the movie? To you. Yeah, I that's what I said I think that that kick is supposed to be like her big moment or not her big moment But one of the big moments but honestly to me.  Yeah, that's got a chuckle in both my viewings, but To me we already knew where this was going like she's not she's asked for the bedroom We already know oh boy now.  It's like, yeah What about you do you have a standout moment for that's the thing like it's that's what I mean Like when I say like she feels inconsequential other than like Well, we could talk about the little 007 jokes that get thrown back and forth, but it seemed like the Her big standout moment was like doing the jinx actually a jinx thing when she comes down on the wire grabs the scientist and leaves then of course she loses the the scientist because She she's like they it's funny about them like they were saying oh, we're gonna create like a really strong She's the new 007. She seems quite incompetent in comparison to like, you know the retired Bond It doesn't seem like she she's bringing too much to the table as a 00 Like even at the end on the island. I thought it was weird and I get it It's James Bond's movie. So he's got to do some heroics, but like between her and Bond She has to get get the girl and the child off the island. I'll take care of this and Shouldn't that be no means the double-O. So right the real double-O So shouldn't she take care of like, you know all the big business with the silo door So that bond can actually leave safely with his family Yeah, and you know and if you want to make her I agree with this if you it wouldn't be a bond Climax, but if you really want to make her this this strong almost masculine type of well, it's not masculine, but you know strong and capable character Why not let her do the climax to her do the handle and open the missile side the silo door so that the missiles can come in maybe do her her ultimate sacrifice, but you know Even and I know it's a bond it bond is the star So he's got to like, you know do a lot of the heroics, but Even at like at one point on that island. She know me just guards the scientists while Bond goes running around the rest of the Island. Yeah, so she's just standing there. We're gone as like, isn't she the big New double-O seven. I mean, why why is she just standing guard? Why doesn't she at least go with bond to finish the climax? Oh, we know it's because of the writing Bond yeah, it was the finest tomb there, but it doesn't make sense at all. Yeah, I Didn't think like she she came off as strong as they They probably intended like even all like the little immature stuff about oh, what number what number is he gonna get? What yeah, what like seems like Dalvish.  So She didn't ruin the movie or anything, but I don't think like for me. I just don't think she was as as Great a revolutionary character as they probably thought they were going to make when they say, oh, this is gonna be a new female 007 and that's the rain to me. I mean this That happens a lot doesn't it where they promote one character like no this This one is different and then it really isn't and she just happens to be another one. She's fine She is you know, like you said, she didn't turn out to be full-on Christmas Jones or Jinx or whatever You know not notoriously bad and I speaking of her did you get it as well when she reinstates the 007 number? That was another thing Yeah, I was like, why would she do that? It just seems to make her Yeah, it's like and then plus, okay, right before the big mission You need now reinstate him as 007. What was Nomi's did she 006 then? I mean, I don't understand to 007's running around like it was kind of Shows you that it doesn't didn't even have relevance because they don't even mention even after bonds debt Like what number does she get now or during the mission, you know And that's how insignificant it was but I do have to admit Because this was so hyped in the media and we were so concerned with it Hey, I think they did reinstated as an afterthought later because of the backlash and be Even though it didn't make much sense story-wise it did give me some relief and today in second time I knew she was gonna reinstate it obviously But I do find after the reinstating she becomes more likeable Because in the beginning she's like, oh, I I get why you shot him and it's like well you true That's what she says to money penny like, you know, I get where you why you shot him It's like see see one one ups bond bond one ups her back and then sees all annoyed like I don't know what a what a jerk I'm like, well you you just you just started it yourself and it's She's yeah, I can't stand her in the beginning and I again, this is nothing on her acting This is just the way she's written and then later she becomes more respect. She starts respecting bond more She looks at bonds kissing away his family and she sees he's respecting the whole thing and then she becomes more likeable, but yeah Yeah, so I didn't She was fine When she did give back like the 007 number I was kind of surprised because that was one thing like I Talked about a while back as I said, why would she give back the 007 number? because it would just make her seem weak and It seemed like pointless like a pointless action to do Because as we said bond doesn't care why would bond care about his double like the number That he's given like Craig's bond wouldn't even care. He wouldn't he wouldn't mean anything to him So like, you know the significance of bestowing the 007 number back on to Craig. He wouldn't care. It's us who would care You know, yeah, it seems like an audience pleasing move which I have to admit that pleased me But yeah, story wise if she was and if she was such a strong Character so capable in all this stuff why why not go through the whole movie with her as 007? Yeah, and Another thing is I'm missing the link where she starts respecting bond to all of a sudden reinstated Because I've I've I've made it a point to find the moment today And I guess it's the moment because bond tells her about the lead where to find Logan ash But when he tells her like yeah, you need to find this guy uh Logan ash and and she's all annoyed like Okay, then and then later she does find him and all of a sudden she tells him like well to be fair as sir It was command commander bond that got me the lead. It's like oh, so now the respect has grown It's it's it doesn't seem to be a lot of build up to because she she goes from hating to Oh, I actually like him in like what seems like an instant. Yeah, they're a little um, I guess like their partnership or team up or It it was kind of rudimentary to me It didn't it wasn't it wasn't like a big mind blowing Oh, this is neat because like she's going to learn something and like he'll learn to respect her and all that it It just seemed like you know by the numbers. Oh, we're not going to like each other for a while Then like oh, well, some we're gonna like start to respect each other bond basically Does her mission Yeah, she's and then like dies for it uh, yeah but It in in fact and this could this could be a good segue I thought she was a pretty dumb double o agent The moment when bond is visiting blow felt and madeline's there and madeline is in the bathroom Putting on the perfume and you just saw the movie so you could maybe like you know Tell me if i'm wrong.  And like I guess like madeline's like, oh, yeah, okay, and she looks just possessed And I was when I was what when I first I only saw once but I was like the first time I was watching It's like doesn't know me notice anything kind of you know, she should pick up on this This chick might not be okay there But it's the same like she has no idea why she doesn't give bond a hand She's old she says it's like, uh, oh does he have an effect on this an old woman? I'm like, oh come on. Don't you get the cues like It's like this is the effect. Yeah, and she's just so annoyed with bond the whole time But at least, uh, we didn't get the whole tampon thing No, oh, so like when you you said that, um The first time after you saw it you thought there was a scene where they might have put the tampon in so like where They never put it in I think but I think see you know since he said in the interview she suggested it to carry I think it's in that scene in the bathroom The scene you just mentioned I guess he was gonna go come in and wanted to throw something in the bin.  I didn't even think about that. Yeah, you probably Yeah, that's the first thing I came in my mind. Ah, this was where she suggested to carry this must have been the tampon moment But uh, I'm glad we didn't get that Anyway, yeah, so like to sum up How would you rate her as a as a bond girl like a bond this in the average You know, um above my expectations, which which you know, I have to admit were very low for her. So, um Not as annoying like I said She had fun moments, but she was Not nowhere near as fun and it's classic a bond girl Which she never was intended anyway, but as paloma Um, but madeline too that which we have to go over as well. I guess again um Stands out a lot more than her too. Yeah. I mean, uh, for all the the hype and build up that they gave know me Uh, I would take pambouvier over her any day Yeah Yeah, waylin for me as well.  I guess it's uh, yeah So the other character we still Need to mention is I guess the one we should have started with the big one madeline Now we already discussed a lot of her in our story segment in the previous episode but um any any small Summary of her character this time around did you like her more for example compared to specter? um No, not really I I have to say though. I disagree with you here. I do like her more than in Specter in this one. Yeah, she's actually uh, she's pretty engaging in some moments. Actually, I find her um I wouldn't say like one of the best uh actresses, but I grew to appreciate her A lot more than I did in specter. She uh, she does get a lot more room to to play of and some interesting angles to to her character which uh Yeah, I like that. Although, you know, she's now actually kind of has This french background thing, which I think inspector was only an You know an accent Now it actually seems like oh, she's really a french and she actually raises her kid in french and her mother was talking in french which It's not that deep, but yeah, she seemed she seemed more interesting to me more like Yeah, more well rounded more three-dimensional Um, and I liked her acting as well. See what she seemed more emotional I don't know. I see what I found her much more engaging this time around like well to her credit like she's given a lot more To do a lot more time on the screen. Yeah, she's pretty much the central the central character But there's something about her and it's just She doesn't seem very charismatic on screen like when I see her It's kind of like Like a blank piece of paper. There's there's nothing really Pulling me in to watch her like say like you compare her to uh, Paloma Who as soon as like, you know, she came on on the screen like everything lit up Right Madeleine It just seemed very mundane Much the same as like she was inspector. She She she didn't engage me in any way no matter like what they were giving her to play whether like she's uh talking to The villain or she's uh running from bad guys in the woods or shooting the gun or you know professing her love to james bond She seemed very very bland In comparison to a lot of other Bond girls that they've had in the past and I think it's kind of unfortunate I mean, it's great that if you like her and everything, but I think it's kind of unfortunate that Um for such a significant bond girl role You could say like this is the most significant thing since vesper Uh since tracy like this is significant bond girl role They cast her and it doesn't seem like her and craig Click in any way and that that was a big problem With with the movie for me was I didn't buy their romance and if I don't buy their romance or Think that this is the girl that james bond should died for Uh, it's kind of a problem. Um, yeah I mean, could you could you name five bond girls that you like more?  Um, even though Character-wise, she's supposed to be deferred real love interest of bond that the new one next to tracy and vesper And I guess you could say she's an updated version of tracy One of the the arguments I would make for that is they both have a criminal father You know, like tracy has, you know, draco, you know Um, so bond always gets in a father-in-law that's that's in crime So that that reminded me of of tracy a bit But yeah, you're right. She doesn't reach those heights, but I do find, you know, I do sense her emotions more like when she opens the box to see the the mask Even though we saw it coming from the trailers and stuff. It's The tears rolling down her, you know, I do feel her more. I'm not necessarily that interested in in everything around her but It does help that we get that little flashback of seeing her as a girl Which by the way that child actress did look a lot like a young Like I say do I didn't look up what the child actress says that plays the young madeline Yeah, but she does look, you know, you could totally imagine that's actually her being young that was well casted It does help that we get to see more of what her life was like As a child and how she grew up and how she became this this damaged mother now So yeah, I'm I'm not as negative as you know inspector. I I wasn't engaged by her at all She was just yeah, you know, she's there, you know, I made this this inappropriate joke about her in my review Like yeah, you could do her but you may as well not which is Kind of my my dumb sense of humor sometimes But I what I meant by that is she seems pretty Average like yeah, you know one of those and here she she lifts it up more I like her more and I'm not annoyed when she's around. Um, and I it gives bond sort of a A real character to care for and protect. So I I I I do agree The relationship misses some of that playfulness like like Like he had with vesper like the pillow fights and the on the beds and stuff. You don't see any of the fun They have but I do buy that these two Yeah, they could be in love. Um Yeah, so I'm not as negative about her anymore it's but I knew going in that like oh I wasn't keen on them bringing her back and from specter And so I wasn't expecting A lot from her. I I didn't think they could Um, overhaul her character completely. They they really didn't for me. Um I mean I don't I don't know how else to describe it, but there's something very I don't know vacant about her like there's something something hollow about That that that character. Yeah, and I don't think like they as much as like, oh she's uh she she she has like this history and um Supposedly has this romance with bond like she loves him Like like like you said, uh, I think in the last in the last episodes like all of a sudden They were in love inspector like right when he's like, you know strapped to the chair and everything Yeah, it didn't seem like and any kind of evolving Relationship between those two and I know you can you can make the argument too like, you know Well, like him and his romance with vesper I mean, how long were they in montanegro? And all of a sudden these two love each other I know it's like it's it's it we're speeding down the highway pretty fast with like, you know, these relationships But at least I could I enjoyed watching those two characters interact Yeah, with vesper and bond you can pinpoint the falling in love bit a lot more which I think comes in the shower when you know That's oh, yeah. Yeah, like when he comforts her. Yeah, that's yeah, that's a good point. Yeah, and here it's Yeah, you're right. There isn't really this moment where like Out of the and you just saw it you just saw it. What was the great like Or a memorable moment between those two like a romantic moment between well, I find um The moment when bond comes back to norway after just hearing from blow felts That you know, madeline didn't betray you. I did it was all me james. It was all me james Which I can't believe bond fell for that and didn't question for a second like oh, maybe maybe hey Maybe madeline got framed, you know that Because it seems in the car When he's ready to give up in the pre title sequence. He looks at madeline And and he's and she's like do something james do something you see in his eye Okay, like there seems to be a moment of doubt like maybe he does trust her But nope, he puts her on a train anyway, you know get away with this girl and he betrayed me But then I find the moment strong where he comes back in norway and he confesses to her in her house like You know, I I truly love you and I will love you again and You know, I don't regret a second of Seeing you like Five it felt like five minutes of my life But the only thing I regret is the moment on the train and it doesn't necessarily reflect much on leia's acting But I think the way craig delivered that Despite being very unbonding It was convincing to me like he has his tongue on his uh, you know Yeah, to me that's Didn't seem as melodramatic as it might have looked on paper. That was pretty powerful to me that cabin scene And I and I haven't seen this like I haven't seen the movie in like two weeks But in the cabin scene One question.  No, I don't think so because the child is um, that's what I thought. Yeah Yeah, it doesn't it's not implied that they do it again Yeah, because initially like we said, oh the only sex was in matera between those two right Uh, I couldn't remember as like no, I don't think they had sex It didn't seem because like they they had the kid right down stairs Uh, yeah, he sleeps in the same bed with her though, right? Yeah Yeah, and and actually wakes up to to matilda like and she says in french that she's hungry and craig looks at her like, oh boy um When you watch this again Okay, um They haven't seen each other in five years and all this and like they're gonna start Uh, he he trusts he's gonna trust her or begin trusting her more Why does she say that it's not his child? That matilda is not her child. What what do you make of that? What is that all about?  It's not yours and and I could hear a woman behind me like like, oh Oh, that's good. You can hear them like, oh, it's not his And it's like while it is lady Yeah, he is in fact a father That is a um I think it's one of those lines in the series that I'm gonna Just be scratching my head over Forever. I don't understand why she doesn't It also might might also be more for us As the audience to keep the secret for a little longer Uh, that that in fact it is Bond's child But why not say it again? You know immediately when when she pops up and the little toy comes down the stairs like, yep, this is this is yours For them. Well, like why so are they is this really um What kind of love is between these two if like he's she's still she's He says okay, I'm gonna I'm gonna trust you from now on essentially like at the cabin And she she lies to him again Yeah It's kind of strange. I I don't really understand I I mean, yeah Maybe people have some theories about it, but I I just don't understand what for just to get a cheap joke of like Uh, what I got to show you some what not another child is was that the reason for her to say that you could still make that joke Even if it is or uh, it would probably be just as funny. So it's true. Um, yeah It was it was strange I I'll have to watch it. Uh, obviously I'll watch the movie again at some point, but I I just didn't understand That like why she wouldn't just say it. Um, there's a lot of confusing stuff in the movie Yeah But like, um, I want to add like you think like we've covered all the Bond girls There's a fourth one that we should talk about which you just kind of brought up There is He's got a daughter. Oh the daughter. Yeah. Yeah. Well, she's a model, isn't she? She is a technically there was there was a meme some of a friend of mine made where it's like the Bond girl you were hoping for and you see the end of the Armors and then the Bond girl you get and then you see Matilda like with the little cut of play It's like, yeah Um, we could we could discuss her as well Yeah, as well. Like we already start touching on her anyway. Yeah, take her away. You know, we think of Matilde Matilde I I do you know, they did cast a cute child for um, the writing what it was fun despite it's being very unnatural to us to watch Bond cut an apple in the morning and take care of this child Yeah, um, how great would that have been if he started mixing her a martini? Would have actually you know that could have been that could have worked and you could have seen Matilde like what are you doing? May as well start the day with something strong This is another thing. I'm not as negative about that The child I mean fair enough. This is the last of the great movies You know if you're gonna do it you can only do it here because imagine Starting a new Bond movie where you already have this baggage of him having a child and being a family guy so but I did like what they did With the few moments he's in especially the the the thing that touches me. I guess a little bit is Again, I cannot imagine other Bond actors doing this But when the the cuddle the when you were the stuffed animal went that that's on the floor in the Do-do. Yeah That's in the villain layer and Bond picks it up and looks at it Even though he didn't get to bring it to her but still it is heartwarming, I guess You can see in Bond's eyes like he needs this is his job now. There is a new responsibility for him to protect Also in the saffron scene where he does the weird bowing, which I'm still not a fan of by the way Where he seems to be begging for him, but Most of it. Yeah Matilde Yeah Pretty pretty decent There were there was this fairy that she was named Matilda because of roll down. I think that's a bit far-fetched, but Anyway, what do you make of her? I'm very curious. Here it is actually She I I thought um the whole idea of like, um Okay, a child. All right. I think they added Matilde to give The relationship between him and Madeline more weight She she she kind of like uh, they added that The child element to weigh the scale down a little bit more saying like, oh see look he he's got a lot going He's got to sacrifice a lot. He does want to risk killing Matilde and Madeline. He's got to like you know die on that island I I think they yeah, they added that just because they knew It It was going to be tough to convince us Madeline was something or someone to worth dying for He said well, we got to do something else. Let's give her a kid. Let's give her bonds kid now Now like, you know, uh, that's gonna add some some weight to this decision that he's got at the end And uh, we'll uh, it'll be a lot more Convincing like that's that's the choice he's got to make um, so I I didn't really think too much of The uh, the dog it's funny because like after the ending Uh, the daughter thing is almost like forgotten. I mean Uh, the big ending with him, which I never thought I would see like, you know James Bond dying holding a stuffed bunny like it's weird um But uh Yeah, I think it was just uh just to Provide a little bit more emotional weight that Madeline wasn't uh bringing to the table Yeah, and so like I didn't I didn't think too much of it Um, okay, you just saw it There was one little scene after norway. I didn't get The the kid's saying something about do mosquitoes have friends Was it the mosquitoes? At first I didn't at first I thought she she she was talking about like There was little nano bots on her or something like uh, what what what what is the mosquito thing was her Was there some I missed I I didn't understand where that came from. I like what is she talking about? No idea I really don't have an idea. It's I saw it again just now, but I think it's just a throwaway line.  She just seems to be you know saying innocent stuff Like do mosquitoes have friends and then and then in french madeline answers with I I don't know and And then the cars come up from the jeeps the uh the land rovers whatever But I don't think it has any I didn't even think of nano bots or yeah I thought like maybe she she was getting nano bots on her from bond or something like I was like, oh, is that what she thinks that is like it's mosquito like, but I guess not she's Yeah Oh um well um out of the uh The bond girls in this movie paloma gets all my applause Hello my days


All right. Good morning, everyone. Let's get started. Welcome on this session about Cilium cluster mesh and also a bit of service mesh and how you could use them across your Kubernetes clusters and on the Edge. How many of you know about EBPF or Cilium? Good. Cool. That's great. For those who don't, I will introduce the technology before we get started with Cilium cluster mesh. My name is Raymond De Jong. I'm a Solutions Architect working at Isovalent. And Isovalent is the company behind Cilium and also in the foundation contributing to EBPF. So Isovalent founded Cilium and open-source Cilium, donated it to the community. We're an incubating project. So today we're focused on Cilium cluster mesh. But before we get started to explain about EBPF, what EBPF is, we like to say what JavaScript is to the browser. EBPF is to the kernel. It makes the kernel programmable in a very efficient way without changing the actual kernel. What it allows us to do is to, based on kernel events, attach EBPF programs to it. Today we focus on networking, but it can also happen on things like files, processes, and such. So a kernel event can be something like a process opening a socket or a network interfacing sending a packet on the wire. All those events could trigger an EBPF program. And Cilium is built on that technology. The good thing is that you don't have to know everything about EBPF to work with Cilium. Cilium abstracts that technology for you. And depending on the flags you set in your Helm values file, for example, it will trigger and mount the right EBPF programs to work for you. So Cilium is built on EBPF, and it provides advanced networking capabilities for the cloud native age, especially for Kubernetes clusters, but also beyond. Today we'll focus on the networking piece, which is mainly about low balancing across multiple clusters and a bit in combination of service mesh provided with Cilium as well. On top of Cilium, we also have observability platform, which is also useful for tracking workloads across clusters and being able to observe flows between services within your cluster and across clusters and being able to make informed decisions about network security, for example, for these workloads. So overview of cluster mesh. First of all, cluster mesh provides for multiple clusters the ability to connect clusters together to provide a unified data plane to be able to route and connect and low balance workloads across clusters. On top of that, we provide observability for those clusters using our identity aware solution. Instead of tracking IPs, we are able to create identities and attach identities to the workloads and being able to follow and observe identities across clusters. Provided we have released service mesh, you can also use service mesh across clusters and also encryption and pod IP routing are available. To get started, you have to have, at the moment, at least, non-overlapping IP ranges in your clusters. You need to be able to connect the clusters together using, for example, a VPN or some kind of physical wire, depending on your topology. And it doesn't matter if you run on clouds, a hybrid, or on prem. It can run on Opyshift, but also on GKE. And if you want, you can also run it on bring your own, let's say, Demian release, as long as you have a fairly recent kernel for the EPPF programs to work. A little bit more about the architecture. It works in such a way that each cluster has a cluster-based API server, which keeps track of its identities and exposes those identities to remote clusters. And each cluster has only read, only access to another cluster. And that means that agents in each cluster are able to read and know about identities in other clusters. And that provides all the security and connectivity and observability across clusters. So the best practice is to expose an API server through a load balancer, because obviously that's high available. But if not available, you can also expose it through a node board. So let's go through some of the use cases. The main use case is obviously high availability, where you want to expose or low balance traffic to a given service across clusters. So the cluster mesh technology works with the concept of a global service, which means is that in each cluster, you create a namespace with the same name. You just create a service in each cluster, a simple cluster IP service. And you annotate it with a special annotation, which I will show later. And that will trigger Sillium to learn about or advertise its endpoints across clusters. And that will, depending on the configuration rules set, will low balance by default traffic across clusters. And that means that if you have endpoints failing in a given cluster, traffic can low balance across cluster to the remaining endpoints in your clusters. Another very useful use case for cluster mesh is that of shared services. We see more and more, and also on edge clusters, smaller clusters or multi-tenant clusters for which you don't want to necessarily set up shared services in each individual cluster. Using cluster mesh, you can create a centralized services cluster for things like monitoring, things like secrets, things like DNS, and then expose that service through a global service. And connect that service to remote clusters for them to consume or to connect to those services in your central services cluster. And this obviously allows you to be more agile with your tenant clusters or edge clusters in such a way. Another use case is splitting services. And this is about stateful versus stateless. So similar to shared services, in this case, you would have a centralized cluster which you want to store data. You need to know the state. But you want to keep your edge clusters or your remote clusters nimble, agile, and small as you can because you want to be able to lifecycle them more easily as such. Again, the same principle, exposing a service, in this case, a data store service, for example, as a global service and exposing that service across clusters for them to be able to connect and be routed to that cluster. Then a little bit more about the actual core of this session, that's the local and remote service affinity. We like to call it topology routing. What this helps a lot with the previous use case is that you can engineer the preferred way of routing to your endpoints across a cluster mesh topology. So in this simple example, we again have a backend service. And in this case, we want to prefer, obviously, local endpoints above remote endpoints. What this allows you to do is to obviously create high availability across clusters, but only when you need it, only when all endpoints in a given cluster are failing. And this also, obviously, is very useful in multi-cluster topologies. You want to avoid cross-cluster traffic because that induces latency and such, or cost. Using a local service affinity makes that more effective and reduces latency. The other way around is the remote service affinity. The most useful use case here is to temporarily annotate a given service to prefer remote endpoints instead. What this will trigger is that all traffic by default will be forwarded to the remote endpoints. And this is very useful in rolling updates or upgrades or restarts of workloads in a given cluster. And this is how it looks like. So this is a simple example of a service of type cluster IP. And you can see that it's a backend service. And you can see two annotations. The first annotation, that one of global service equals true, that triggers that given service in that cluster with its endpoints to be advertised across clusters. So you have to do this for each cluster you want to expose endpoints for. And the second annotation for service affinity local triggers the local preferred endpoints service affinity. The other way around is the remote service affinity. Looks very similar, sorry. And in this case, you would annotate it with service affinity remote to prefer remote endpoints instead of local endpoints. So if you don't have a service affinity endpoint, it will low balance across clusters by default. And now a little bit more about how you can leverage Cilium cluster mesh in combination with Cilium service mesh to do more advanced things. Cilium service mesh has been released in Cilium 1.12 last spring, early summer. And this allows you to encourage, for example, resources such as Ingress, Layer 7 path-based routing, Percentage-based routing, Canary rollouts, things like retries and such. So in this example, you can use, for example, an Ingress resource to attract traffic into your cluster to do some kind of Layer 7 routing. In this case, Percentage-based routing. But you can also, those services, which is traffic being forwarded to, can also be global services. And you can do that same traffic engineering with those services as well. This is another example where we have the topology array routing, the service affinity across clusters, where each front-end service prefers, obviously, local endpoints. And each back-end service prefers local endpoints. But again, in case of failures, traffic is being forwarded to the remaining endpoints in other clusters. Another example is that you can even use cluster mesh in combination with service mesh to spin up new clusters. And to do, for example, Canary rollouts to that new cluster, there may be reasons why you want to migrate to a new cluster. Perhaps it's a new cloud provider, or you want to move from on-prem onto cloud. Your applications are already running. And you may want to migrate them in a step-by-step way slowly introducing more traffic, or even deploy a new version of your application on a new cluster, and then slowly introducing traffic into that new cluster using both Cilium service mesh and cluster mesh. So this is just one example. It's super flexible in terms of how you architect it. And also, without sidecars, Cilium doesn't introduce sidecars in their service mesh solution. So that means that on node level, if endpoints are in the cluster already, we reduce latency like three to four times compared to a sidecar implementation. This concludes my lightning talk about cluster mesh. First of all, if you want to know more how it actually works, if you want to try it in a lab, isofaner.com.forge.labs is a great resource for learning more. Also diving a bit on how you can, for example, use network policies across clusters using Cilium cluster mesh. On the open source side, we have the Cilium.io website. We're also getting started guides of cluster mesh, also with service mesh. And our Slack channel is open where we are able to support the community. People are happy to answer questions as such. We also have a booth, both a Cilium booth and Isovalent booth. If you want to visit us, please feel free to do so. We also have Liz Rise with us who's signing the eBPF book, so you can get a side copy from us. Very good book to learn more about how eBPF works. And with that, I'm happy to take any questions. Thank you.


Hi, welcome to Designing in the Browser, the series where we explore user interface design through the lens of modern web technology. In this season, we're doing a deep dive into the APIs that prepare you for the flexible and fluid responsive web of tomorrow. And today we're covering one of my favorite topics, art direction. One of the coolest things about web design versus print design or other static mediums is how interactive it is. You can adjust elements around on the page for a better overall user experience. Check out the first and second episodes for more on micro and macro layouts, as well as container queries. And you can even adjust the content within them. Now, we already talked about micro layouts in episode two and something that is similar but different is responsive images and art direction. With the picture element, media queries and even container queries, depending on how granular you want to get, you can adjust the art media you're sending to your user. So say that you might want a different image for a vertical layout like on a mobile device, but that image takes up way too much vertical space on wider screens. One option is to adjust the way the media object fits into the space provided. Another option is to swap it out for a different layout. And yet a third way is to readjust the content within the media object to best fit the given layout. So let's explore. Let's talk about media and aspect ratio. When you place media into an interface, there are a few options with what to do with it. First of all, you can include it as a background or a foreground image. But once you made the decision on how to add the media, you have control over how that media is presented and how it shifts to fill or fit its space. One thing you can do is specify with keywords how you want to size an image in a parent. Let's take a look at placing a background and foreground image. So here I have a demo and I have these parent elements that have a width and height of 400 pixels. So I could just set an aspect ratio on them. It's one to one. But within them, here as a foreground image, I've placed this AVIF image of these plants. You can even see in DevTools that it has an intrinsic size of 1620 by 1099 pixels. I would probably size this down in a production website, but this is just a demo. And then the intrinsic aspect ratio is 16 to 1099. So if we were to sort of guesstimate this, it's closer to 16 to 10. And the way that I have it fitting right now is covered. So it's taking up, it's filling that space. If I expand it, it's going to continue to expand to fill the space to cover the available area. Now, if I adjusted this to something like contain, then as I resize this parent element, you're going to see the full image. It's going to contain it.  Some other options here are to fill. And this will rearrange the initial aspect ratio, the inherent aspect ratio of the image. And you see it's sort of stretching and pulling here. This happens when you have both a width and height set on images. And then with background, I have similar properties here. So I have this background position centered. And I resize here. It's going to try to maintain that. But then it does cover the space, so you do get a crop. I can set this to contain. That's another option here. And you might notice that now we have multiple backgrounds. So this is because we don't have a background repeat set. By default, it's repeat. So I have to go in here and say background, repeat. No repeat. And there we just have the single image without multiple backgrounds. It's still centering it. I have the background position set. You could readjust the background position. So I could make this top. I could have it be top left, top right. I could even set it to like a pixel amount or percentage. 50% would also kind of be like moving the centering it. That's a shorthand of 50%, 50%. I could change it to 50%, 20%. So shift that around 20%, 20%. So this would just readjust the image and how it fits into this space. Other options here, auto is massive image. So it's just, you're not even seeing where that fits. Contain, there's cover. And then the other default properties. By default, images placed as content into the page have a preserved aspect ratio. But not everything does as I showed you with this demo as you're trying to set that width and height. And when you start to give that image both a width and a height, it quickly starts to lose the aspect ratio as it tries to fit into that. That's why something like object fit can be useful. Luckily, there's also the aspect ratio property, which I could have used instead of for these parent boxes setting them to a specified width and height I could have set that aspect ratio. Aspect ratio can be applied to any image, video or element in general, and it will retain its aspect ratio, whether that's a square at one to one or a video at the default 16 to nine. This can really come in handy, especially with responsive content that you don't wanna get cropped or squished. Many of the windows in the Design Sember site use aspect ratio to retain their size as they reflow. You can even create aspect ratio grids. Adding an aspect ratio for your media is also a great way to prevent cumulative layout shift by creating placeholder areas while your content loads. This way, you only need to know the given width of an area and it automatically assesses the necessary vertical or block space needed. Here's what it looks like when you don't block off vertical space for an image as you wait for it to load. There is this layout shift, but here you can see that the image space is actually being preserved by the aspect ratio. There's a background color that stays there as we wait for the content and image to load, and this aspect ratio is preserved when it's scaled up or down as well. So as the width changes, the aspect ratio remains and that will prevent cumulative layout shift because we can create these placeholder areas for images. Speaking of core of vitals, media performance and optimization is pretty important to your webpage. And one of the best things that you can do for your performance is optimize your images. And when I mean optimize, I'm not only talking about running it through an optimizer program once, I'm talking about adjusting the image format and providing your user options as well as adjusting the sizes of the images you're serving for even more significant savings. But first, let's take a peek at image formats. One new image format that's sweeping the scene is AVIF based on the AV1 video codec. It's smaller than WebP and produces less blurry results and the image media savings are really incredible. You can then serve multiple files with something like source set or the picture elements to allow the user to get the smallest possible file size for what works and is supported in their browser. With this set of images, AVIF conversion reduced them each by 92 to 95% in size. That's a 92 to 95% size savings from PNG. They went from 1.1 megabytes, 1.2 megabytes and 1.3 megabytes respectively to 89 kilobytes, 91 kilobytes and 100 kilobytes without any visual loss. And you might notice that each of these images shows the same content, but they're rearranged to better fit the screen in different aspect ratios for different available space. This is an example of swapping media for art direction. This is something that I see often in digital publications who have a mobile version of a hero image and a different one for wider formats. This comes in handy when you have a wide-angle photograph but you want a more narrow crop for mobile. But cropping isn't your only tool in the tool belt, although it is a convenient one because there are many services out there that will automatically do this for you. You can rearrange the images you're sending to best fit the interface to like these examples. I have a wide version, a one-to-one square version and a vertical version. And in code it would look like this. These are two great techniques to combine for the best outcome. You can send multiple file sizes and formats at the same time. This way your browser does the selection and your user gets the best outcome. For more information on responsive images, check out our web.dev learn design course at web.dev slash learn slash design. There you'll find modules on responsive images and at the picture element. Remember that button from our episode on micro and macro layouts? This is another example of art direction in UI. We're removing complexity and detail at smaller screens so that the human eye can better read that icon since lines become messy and blurry at smaller sizes. At larger sizes, the lines add to the cart effect. So to give you a reminder, here is that cart. We have the cart with the plus with the add to cart and as we resize this, we lose that plus. We lose some of that detail. We lose the two cart text and then we also are going to be losing those lines so that the cart doesn't become messy at a smaller icon size. So this is an example of a micro layouts with some art direction applied to it that can be placed throughout your UI. We're using container queries in this demo so that the button owns its responsive information and always looks optimal wherever it's used on the page. This would be that last option, the rearrange option of art direction. It's important to note that we can't currently use a tool like the picture element to decide on what media to send based on a container query because picture relies on viewport information and not on container information. For it to reliably send content based on a container, it would need to wait for the page to render first, do a paint pass, and then it would start the logic process to decide which image to download and render, which is relatively slow. But you can do this with background image as we're doing in this demo. Here I'm sending different background images with different aspect ratios based on the available space using container queries. So here I have this image container and I have this hero image. The hero image has an aspect ratio and a background image URL. And here I have this vertical version of the background image because it's a wide view with a lot of vertical space. But as I resize this, I might want that to be a one-to-one version. So I'm adjusting the image that I'm sending and the aspect ratio or I might want that to be a wider version as I rearrange the layouts and the image. And this is now a 16 to nine ratio with this image here. And this might be more optimal for mobile devices because I want the viewer to see the content a little bit faster and it will work a little better in some of these mobile views. And like in our button example, you can rearrange art within an art board for optimal interface design. The design sembersight is full of windows that use container queries for art direction. Here's an example of an early work in progress to briefly show how that might work. So we have this window here and I'm able to rearrange it, the width, the height and it's rearranging the entire layout of all of these elements within it. We have this interior with person, food, items on the table. And as I resize this, those are gonna shift and even stack as it gets to more vertical space to fill that space and make this interface something that works no matter where it lives on the page, no matter the available space that it has and within some boundaries. I encourage you to go on the design sembersight to resize some of these windows and try them out on your own.  With the picture element, source set and container queries, you have the ability to shrink, crop, swap or rearrange for an optimal user experience. I'll leave some links in the show notes for you to check out the demos and learn more. For now, that's all we have for this season of Designing in the Browser.  That was really cheesy, should we keep that? I'll see you all on the internet, sign off, take a break, don't forget to drink water and bye for now.