Welcome back to my YouTube channel. This is Daniel Rossell here for today's video I'm gonna be taking a look at pexels and showing you guys how to Upload video content onto their newly designed and very very slick looking website now firstly Why would you want to put stock video up on pexels? What's in it for you as a creator now? To be honest, it's more here's here's my philosophy I do sell some stock video on pond 5. It's a nice little site hustle It's I sell I think a couple of clips on a good month right now. It's very small, but you know Every little helps pays for beer pizza and microphones now and again So it's a nice little thing to do and sometimes if I have really good Stuff, um, I'll go ahead and put that up there now pexels is a is a free stock library for photos and videos and I use pexels quite regularly For my work, which is in marketing communications. I'm talking about my day job I use it for my youtube video sometimes if I need Less so the stock video, but sometimes the stock photography. So I use pexels. It's free I don't need to be signed up for commercial library and honestly the reason I put up stuff on pexels Myself is to kind of give back to that ecosystem a bit because you know, it's not good to be just just to be a taker so pexels is primarily for video, but it is also a stock video library And recently I was you know going through my computer trying to clean up a bit of space Seeing if there was anything that was potentially resellable Or if not that might be fine for pexels and I came across a few clips And when I did I said why look at this they have done a they have done a nice job Rolling out a very slick new interface, you know, sometimes when You log into google and They've like changed some buttons and it feels like sometimes for Luddites like me that the only reason you the ux design profession exists is to Piss people like me off. You don't like their cheese being moved very much Um, but this is actually a really good example of I think a great redesign It's a lot better than it was before and I thought I'd uh take season the opportunity to Um show you guys how to do it if you if you have a few clips So this is the uploader so you need to set up an account and I just want to quickly Run through these on behalf of the good people at pexels because uh, they did write me back on twitter So firstly, um, it's original content that you have captured now This goes these all apply equally whether you're uploading photos or videos um, so No, no graphic nudity violence or hate Um, I'm gonna upload a video of me cutting an onion from today. So I think we're probably good on that front Here's actually important one that might trip some folks up mindful of the rights of others You must have permission from people and for property depicted in the photos and videos so When you're uploading stock to pond 5 you 4 you technically do need a talent release if you are uploading Video with someone in it right other than yourself. So likewise for uh for pexels you you do need that So that's a very easy one to kind of accidentally fall in breach of so be be aware of that And just this is you know, there it's like ron seal. It does what it says on the tin They're letting you know now It's going to be downloaded and used for free And it's going to be licensed under the pexels license It's always not a bad idea to scrutinize the small print that no one ever bothers looking into Especially when like pexels, they've done a really good job at making it, you know less jargonian more intelligible So they kind of highlight the main points all the photos and videos on pexels are free So you're not making money from pexels. There is actually a donate functionality It's it's appreciated for people using pexels stuff to Link to their creator or to attribute them, but it's not required very important It's courteous, but not required as it's written here attribution is not required It's always appreciated, but it's not required. Okay And folks can modify so if you're looking at this under the creative commons or cc licenses Uh people who know more about that can tell me which one this is but that is it is you are granting permission for folks using your video To modify the video that they get from pexels and likewise you as someone using it can do that, right? And there's some stuff that they protect you against as the creator sharing stuff Uh through it so you can sell unaltered copies so someone can't Uh download or there technically would be a breach of pexels if they were to download the wonderful video of Me cutting up some onions. I'm about to show and put on a premiere of Daniel's onion cutting expedition or sell that on pond five, which would be very very sneaky That would be not culture. Okay, so you are protected. So let me just show you guys what I'm gonna do now I'm gonna open up to my computer if it will ever wake up here and uh I'm just gonna get a random video from my shoot this morning with some onions Is a cooking video for a bit of fun a bit of variety on my youtube channel And right here's a video this one of this one of this has no commercial potential No one wants to see this video of me cutting a white onion, but you never know for pexels I do try to keep it, you know, not set not put up terrible stuff As a courtesy and I think probably they're to us, but you know, you never know That's the thing about these stock libraries and sometimes I type in the most obscure Queries into pexels like, you know, uh, I can't think of any samples right now, but um, that's kind of the principle or reciprocity That you're helping other people. Maybe they're making Documentaries, maybe they're just you know for a social post you're helping them find something So this could be a pexels video of cutting knife cutting into into White onion two one three nine in my clip library. So I'm going to go and upload this to pexels now I'm not going to read through all the stuff. I just did and I'm going to just drag and drop now this functionality Is brand spanking new as of about two weeks. You get to see it. I'm going to put myself down here You get to see it creaking up. This is what it's like folks to run a youtube channel with a uh four Megabyte per second or megabit, whatever it is internet connection. It is painful They don't have fdp upload, which is something I used to find kind of an irritating but Um, this new drag and drop uploader is a lot better the old one I did find would break sometimes or choke on uploads and you'd have you'd be trying to keep uploading and it just wouldn't work So it looks like they really have done some improvements. So while that's going on because we're about halfway through Here's how it works video. You don't have to fill out quite as many fields as you do on pond five, which is nice I'm just going to call it a knife I'm going to be descriptive because when people come looking for Stock clips are looking for something specific usually.   So if uh, there are any they'll populate here And you can also enter a location if it's something location specific here. It's not now something they've introduced in their recent UI overhaul is this these nice little copy paste things So, um, even though they don't have fdp Which would be nice. I'm just saying pexels Um, they do allow you to copy and paste tags. So for example, if I'm uploading You know a few different shots from let's say the empire state building I can copy instead of having each time skyscraper new york Empire state building you can copy those tags across so they've made it easier for folks to share Their stock photos and videos for free And again, as I said, I don't think we all have to pay mortgages or you have to pay rent I don't put all my stuff on pexels But anything I can put on pexels that I think might be useful to someone I put on pexels Alrighty, so we should be good now Um, and by the way, the video must not contain clips or musics you downloaded or is from someone else And now you can click on submit content and then you have a little waiver thing here You only uploaded photos and videos that you on the you don't need to read this every time That you own the copyright to and that you created myself Indeed that was me the real thing chopping an onion and any depicted people or owners or depicted property Gave you the permission to publish the photos and videos So I did ask the onion if he was okay being on pexels and he said that's cool understand and agree submit content and that is should be it and um now the content's being uploaded There's there's a bit of a lag uh regarding videos because they it looks like to me they go through Vimeo And then they get embedded so i'm just going to pause this video here and see if I can find it on my profile now So my onion video is being processed in the background, but i'll just show you some stuff I have put up now. These are not prize-winning photos or videos But um, I do like my little on air sign and I thought it might be useful I tagged it like you know home video recording studio And i'm just going to filter here on my videos to show you what they look like for other folks I thought this is quite a nice one actually of uh whales I took when I was out well-watching earlier this summer And as you can see uh for those familiar with Vimeo It's definitely a Vimeo thing Uh, this is just a few seconds of water not the most steady footage But you do get a little share link that you can share to with your community More info gives you so three folks that one person downloaded it. That's better than zero You get to see your dimensions aspect ratio frames per second duration And you can delete the video if you've decided after the fact that you want to um That you want to lead us and another cool thing is this integrates I'm going to put myself away for one sec This does integrate with google maps, right? So I didn't add a location tag and in retrospect it was in provincetown massachusetts Well off the coast of that rather Um, so you can then save that location and add it in uh and you can also update your tags So that's pretty much it guys in terms of uh pexels from the Creator side how to share stuff. They've done a good job really good job In fact with that nice new interface and you know if you have stock that you know, you're not you don't you You don't need you're not going to be putting it up on a commercial stock marketplace Because then you'd be in breach of their terms of conditions because you're selling it for free on pexels So keep your pexel stuff for pexels and your commercial stuff If you are a commercial stock seller separately and help the creative community to increase their stock Photo photo and video library. Thank you guys for watching this video as ever And if you do want to subscribe for more, please subscribe to this youtube channel. Have a great day


Well, actually, you need to wait one minute. Yes, I'm trying to set up the screen. I have some problems. That's not good. I'm giving you a cleaning don't do it. Why I can't have a mirror? I'm sorry. I'm sorry. Do you have an output? Yes, but it doesn't work. Nothing works. Did it detect your HDMI? It's not here. It finds the projector. I don't know. I don't know. Laptop. Can you do it again? Laptop. You don't have this laptop. Yes, I have them. Do you want to get Martin's laptop? Yeah, probably. Hey, Martin. Let me try with that one. You can try to use your laptop. All right. Just one of them as well. Thank you. Here's your laptop. What? Take my laptop. Here's your laptop. No. It's a very small laptop. Here you go. Thank you. Thank you. Thank you. Thank you. Thank you. Can I have your mic? Hey, I have a projector. He's got my projector. Give me my laptop. It's a very small laptop. VDA. He's got my projector. VDA to HDMI. VDA to HDMI. Very small. Very small. Thank you. I need your presentation somehow. Awesome. They hack themselves. I just leave this here for future things. I just leave this here for future things. I need to find out more papers. Oh, not that. It does not have... I keep thinking.  Don't worry, we're still running. I think Andrew actually won for his PhD, to be honest. Ah, let's try that again. Blue. Okay. Guy in blue? That one? Yeah. Perfect. Yeah, it's not my road so... Okay. Okay. Okay, sorry for the delay. I'm Nestoras. I'm going to present today GR Shopee, a handy hardware interface module for GNU radio. It's a work that... it's a project we've developed with George Valdakis. They are, first, for SDR Maker Space, which is a collaboration between Libre Space Foundation and European Space Agency. So, let's talk about why we wanted to develop a GR Shopee. The reasons were that, as we all probably know in this room, there are various SDR devices, and we want an easy way to configure them within GNU radio. One approach is having a generic block-like Osmocom source that provides one, but we believe it's not so easy for an experienced user to configure its device correctly. That is mostly because it's a static block. It may report elements that aren't in the RF chain of the hardware device we are using, so we wanted to improve that. So, let's talk about Shopee's DR for start. Shopee's DR is an open-source C++ project to interface with SDR hardware devices. What it actually provides, it's a C++ interface, which Shopee's DR modules that are the implementation of that interface can provide direct support for hardware devices. That way it's really simple to create a new SDR module for a new device and configure any new device. Another cool feature that Shopee provides, it's the Shopee remote that allows us to use an SDR device like it's a local network peripheral. We can have it on a different machine and get the data from the stream through the local network or the networking generator. So, here starts our work, which is Shopee, which is an out-of-stream module for GNU radio. It provides a source and sync block that actually wraps the Shopee's DR functions that the API provides. Really simple till here. What we do differently from Osmo-com is that we try to have dynamic parameters in our XML blocks, so it's easier for the users to configure the devices correctly. What I mean here, when I say that the devices are posted, I mean it from the the Shopee point of view. That means that someone has changed the XML file accordingly to understand when the device, for example, a Pluto is on the block to generate the correct fields. So here is just a list of the fields that the DR Shopee provides. It's pretty straightforward. We choose a device, we can pass some arguments, stuff like that. We have our corrections, pretty basic stuff, I believe. So, let's see a little bit our blocks. Here, for example, we have a source block and we have decided to work with a device that uses the imaginary driver that's called Forstheim 2019. So, to do that, we have Shopee's DR module installed, but from our point of view, this is an unsupported driver. So, we see here the general tab that has some basic information and on the RF Option tab we have all the fields that we mentioned before. Okay, so we have here the corrections, we have antennas, gain values and stuff like that. Those fields, because Forstheim 2019 driver is unsupported doesn't mean that the device supports all of them. What will usually happen if you try to, for example, try to have a frequency correction and the device does not support it, is that you're going to see a message that what you're trying to do is not allowed and the device still works like expected. So, when we see Shopee with a different kind of driver, for example here we have an Air Spy, which is a supported device from our Shopee blogs. The general fields are the same but if you look closely here, you can see that we don't have the correction fields anymore because Air Spy doesn't support those corrections and we now generate a new field that has a specific gain name, so it's easier to configure them. And also, for example, it changes that value to auto so the automatic gain would be true and we wouldn't see any of those fields and the device would use the automatic gain control. One problem with this approach is that we actually were hiding a field and we're hiding more fields every time. That is a problem that doesn't actually come from us. We didn't like that but GNU Radio didn't allow us to do something more fancy, unfortunately. But it works pretty well. So, another reason we believe that is a really good out of the module is because we think it expandable and montable easily. We have one XML file for the sync block and one XML file for the source block and those files, if you see the formatting, it's pretty much, we have generated all the fields, for example the PGA gains or the mix gain or whatever and what we do is if you see that the device driver is something we support show the field or hide the field, so if you open the XML files you could understand very easily what you have to add to support a new device, for example. Also as the main block in the C++ implementation is a wrapper for Shopee API it's also pretty simple to add new function calls from the Shopee SDR API. Also, as I mentioned before because the Shopee modules are independent than the Shopee SDR API main code they can build separately, we don't need to rebuild everything over and over again so it's pretty simple to create a new module to support a new device that is not even released right now, for example and we believe that is very important. So to conclude this talk we believe that you should use Shopee, because Shopee is the R0 best API it's easily maintainable it's a pretty inactive project we have some talk for example we wanted a new feature and we talked with the guy that contributes to the Shopee API Also, the Shopee is a really handy way to configure all of the devices it's really simple for an experienced user I want to mess around with what my device supports what is that gain, I have one which one should I put in those fields what values do I have to put there and also because we have that kind of abstraction that we just wrap the API function calls it's pretty easy to maintain because we don't have to mess with the main code we have to add new devices in the XML file if anyone is there so we don't say that everything is perfect with the Shopee one problem is that not all modules are exactly the same for example when I was adding the arguments field some modules were reading them only when they are making the device another were reading them also when they set up the stream so we had some problems there the XML file it may be pretty easy to add a new device but it's not so easy if you want to add a new game for example you can mess up some stuff also it's pretty messy with the Chita and the spaces that you must use for the Python to generate it correctly so that is all from me thank you any questions yes that's a good question we have some preliminary measurements


O'Reilly, this is something that begs more work. O'Reilly AutoZone and this whole contingent, including advanced auto parts, has always been very solid in terms of its growth. I wonder whether there doesn't have to be some consolidation in that industry now. I bought the idea that the sales were weaker because we had a mild winter. That doesn't extend into the spring. I have to do more work. I do not understand why these companies are performing as poorly as they are given how consistent they've been. AutoZone's been a big buyer of its stock.  I look at that, Jeff Smith, and I look at that and I say to myself, now wait a second, this group has got to start doing some merging. These are big companies, but we don't need all of them. I do think that there is mergers on the horizon, but I don't recommend stocks based on takeover when their fundamentals still require more number cuts and more downgrades, which is what awaits us with AutoZone, O'Reilly, and advanced auto parts.


All right, let's go ahead and get started Hi, everyone. I'd like to thank you for joining us today. I am Chris short Principal technical marketing manager at Red Hat. I'm also a cloud native computing foundation investor. I I'll be modern in today's webinar Qvert beyond containers coming full circle back to VMs Before I introduce today's guests do a review housekeeping items During the webinar, you're not able to talk as an attendee But there is a Q&A box that pretty much everyone on the call will be monitoring Feel free to type your questions in and if I can't answer them kind of on the fly I will make sure they're fielded up and wrecked and stacked accordingly Drop your questions in there and we will get to them. Thank you the The next thing is if you have You know questions or want to just share information in the chat feel free And without further ado, let me introduce Rupak Parikh Co-founder and CTO and Joshua hurt senior software engineer at platform nine Please take it away Thanks Chris Pretty excited to talk about Qvert as we go not only with with communities with containers But beyond that with virtual machines So I have Josh hurt with me here. Hello. Back from nine. He's one of engineers at our Kubernetes team So today we will talk about Qvert I will do just one introduction talk about few use cases Josh will then talk about how to really use it. How do you create virtual machines with it? Then I will talk about architecture and followed by a demo and QA So what is Qvert? Well, Qvert is a operator. It's a set of CIDs to create virtual machines along with containers It had it uses the same orchestration engine as Kubernetes to do scheduling use the same storage Same networking so if you're CNI It can reuse that if you have monitoring with Prometheus You should be able to use that or anything else that you're using with Kubernetes and obviously all the tooling including your favorite cube Cattle it started in 2016 with Red Hat Kudos to them a fantastic project open source in 2017 It's trying to be part of the CNCF sandbox It is 1,800 plus stars. You can join virtualization channel on Slack To see what's going on there is weekly meeting there and these are the few companies who have Contributed contributed to Kubernetes cube work along with along with Red Hat So I was looking at a PR recently where Qvert was trying to make a case to become a CNCF sandbox Project and I stumbled upon a lot of comments from the users who are really using it So as a tea and media and then software are the three examples that I have posted on the slide They are using it for different use cases but all of them either want to be running virtual machines because they have Legacy workloads or workloads that cannot move out of virtual machines Or they are using it in very interesting ways to run Kubernetes on Kubernetes And I will talk about that in a movement So let's go through some of the use cases that I have seen I'm pretty sure that there are many many more but really You have Kubernetes as one orchestration platform to manage both virtual machines and containers, which means you can use your CI CD pipeline your processes your RBAC DAX or whatever you have done to integrate your Kubernetes with With other systems in house including a monitoring logging systems. So can I just mention some sure? So Elaborating a bit more on the one orchestration platform. I think that this is perhaps one of the more underrated Like benefits of using Qvert to manage your VMs You do have solutions such as Kubernetes native API gateways, which allow VMs to talk to containerized workloads, but this Means that your VMs are still running outside of Kubernetes So although the connectivity is there the management of the VMs themselves is still outside of Kubernetes requiring some other orchestration tool To do that and that's just more difficult, right operation-wise Yeah, so you want to mention that. Yep. Thanks, Josh So that means you have two systems to maintain and two different APIs and two different sets of integrations Yeah, so the next one in line is pretty obvious you have applications which are Moving from being monolithic or perhaps running in virtual machines and you are trying to create microservices out of some of them and That you want to interoperate you want to run them under one orchestration platform Maybe there are virtual machines Which are running network function virtualization for telecom industries and for a lot of Intensive workloads you may be using custom kernel modules using things like SR IOV Which gives you performance benefits are using custom kernel module as well You may you may be running virtual machines Where you where it will stay in virtual machines for a really long time Before they move to containers. So you will be you can use network functions for that particular kind of workloads and in the application stack if you have Services that you're trying to again turn into microservices that can run into containers. They can they can run in the container side by side Especially with the NFV stack with a lot of careers use There is a strong desire to move to microservices, but their technical limitations on how containers May not be used for for the network functions. It's also the virtual machines are still relevant there Next one is a really interesting use case that I did not really think about but when I was browsing through The list that I spoke about I stumbled upon that and Josh here as well did exactly the same thing But we call it the turtles all the way down What what people are doing is they take a set of physical servers Run a keyword on it create virtual machines and those virtual machines are given to the users In a self-service way so that they can create more user level or workload Kubernetes clusters on those virtual machines. It's a self-service Kubernetes cluster creation on top of Kubernetes running virtual machine the the cluster API has a keyword cloud provider that that you can easily use to do that and It's becoming very popular Josh. We have to add on that Yeah, so just there's there's a lot of hype around bare metal Kubernetes and I think that that maybe makes sense for say a production cluster when you need the absolute most performance out of you know your machines or your workloads or for your workloads, but the flexibility of having this type of setup with cube vert to take full advantage of your bare metal machines is really just Excellent. I've long thought that having some sort of I as or virtualization software on top of your on-prem servers for what you can run Kubernetes on top of is The most efficient use of your your on-prem hardware. So This just really works super well together. It is immediately what me as a developer gravitated towards using And it it just works great Which brings to the last point in the use cases We have predominantly Cube word being used in depth as clouds. So you have virtual machines, which are immutable. So if you have builders Which are still based upon the virtual machines, but you would like to start them But that throw them away you want to give self service like the baby Just spoke about how you can do Kubernetes on Kubernetes You can give it to your developers to run virtual machines and just increasing the velocity and the productivity Inside your CI CD pipeline or the cell service use case So with that, let me hand it over to Josh So we'll talk about What are the different ways in which you can create virtual machines and what are the few other things that are available in Cuba? Yeah, thanks for your part Okay, so we got a little bit of overlap here and these concepts if we can maybe Delete some of these. Oh, okay, or just restart it. Yeah, let's go ahead Josh Okay, there we go Excellent. Thanks. You know, I just restarted microservices, so Yeah, I just want to run through some of the concepts So the very first thing that most people will want to create is the virtual machine so the virtual machine itself is Nothing. It is just a object Right and containing in that object The spec is the the virtual machine instance spec is actually embedded in the the virtual machine CRD itself Right and this allows sort of one level of abstraction above your actual running virtual machine So that you can give it directive such as running or not or additional labels and so on and so forth right including things like well data volume integration, but that's Not right here. So yeah, and then the actual VM that is running is the virtual machine instance From here on out. I'm really just going to refer to it as VMI because it's a big mouthful And so These are the two building blocks You have Some things like virtual machine instance replica set because it is a CRD and So you get a lot of Kubernetes native ways of defining these resources and handling them as well and so One one thing that I really like about Qvert is this other resource they have called a VMI preset and this is Most commonly referred to as a flavor and a lot of other VM based virtualization platforms right EC2 open stack so on so forth The nice thing about the way that a VMI preset works here that addresses possible issues with other flavors and in other platforms is it kind of has this fallback mechanism so because Qvert is CRD base then you get to use things in a Kubernetes native way and that means using labels So you specify when you create a VMI preset you specify a label And as long as your VMI has a label which matches that the VMI will automatically use all of the Specifications in your VMI preset, which is you can set everything in there as you could set in a VMI itself But then the cool part about that is your VMI could override Anything and it'll always just default to the VMI preset if it's not overridden and that's like a really powerful thing Because you're not it's not as rigid right as a true flavor Josh the what can you do with preset? Can you set memory? CPU if that it you can do what we do with flavor but as any device with the flavor sizes Can you do more? Right you can do more so you can actually set networking as well Okay, which is pretty nice because then you start to get into this territory That is maybe neutron ish in in some ways, right? So Yeah, moving on you have these two primary VM booting options That's whether basically it comes down to whether or not you want changes to persist After your VM is gone, right? So for a lot of ephemeral workloads are just spinning up to accomplish some task and then spinning down You don't really need Persistence so they have this ephemeral disc Cubebird has made it really easy to have Just images listed because they have a way to integrate Basically keep the list of images and Docker, which is really nice. It's simply just writing it to slash beta and Slash slash slash disk. Yeah, so and then you have persistent disks and Basically, it's a persistent volume claim with the image right And so I just wanted to mention because it solves The hard problem of how do I load in compatible images for VMs under the cube bird organization? There's a second repo called CDI containerized data importer and it just makes the Uploading and cloning of images, you know a little bit simpler It's a CRD which sits basically on top of pbc and it's the data volume Right and there's this nice diagram here that explains pretty much the most common use case which is having the golden image and Your VMs can sort of reference that right and then storage You get cloud in it, you know Config drive no cloud you can actually set a cloud in it and Have all of your cloud in it be in a secret in kubernetes, which is nice if you have cloud in it to contain sensitive information empty disks for just You know additional extra storage. It all just simply gets mounted as a device at the end of the day host disks is nice, especially if You just have an image on the node itself that you don't want, you know anywhere else and then data volumes kind of Sit on top of a lot of these available options and you also get these Kubernetes primitives such as config map secrets and service accounts that really are just mounted as Discs inside the VM So it's very straightforward. There is a limitation today Where any updates to the config map secret or service account will not actually be reflected in the VM So you would need to read Restart the VM in order for that to take effect will really recreate the VMI object Otherwise nothing special and also there's nice stuff if you if you do choose the correct PVC types access modes and then have the you know, if you configure storage and networking just right you get live migration So So think back just wanted to mention for people who are not aware of cloud in it if you have used user data AWS where you can inject startup scripts or just playing data into the virtual machine Cloud in it will let you do it and Josh was referring how interoperable it is with the Kubernetes ecosystems of secrets and then config maps Go far Yeah, and so out of the box the the networking is It's nice. It's just native pod networking So that means that by default the bridge option is chosen So your VM will actually have the pod IP of the vert launcher pod which You know represents the actual VM And this integrates with things Out of the box like you know if you for example having sidecar containers and whatnot This is this is nice. I mean, there's other options as well. You can have you know pod masquerading so that there's a Defined citer that you can choose yourself for which VMs are an assigned a private IP and but they're knatted with the pod IP if you so choose to do that and Then there's more advanced networking use cases which start to get into more traditional VM networking setups and Some of these extra C&Is like multis especially Provide, you know the ability to run have like sRI of the Networking and so you have your VMs talk directly down to the Nick and multiple interfaces for your parts Which may be really important for virtual machines acting as that's a network functions acting as virtual routers In your setup and there's a really nice that you vert even though it is a you know still early ish project has decided to really focus on this extreme like hardcore use case because VM right uses now are advanced and Unless you have advanced features, you know advanced integrations. It's really hard to Yes, we should use kubbert for VMs because you'd be losing out on on performance, right? And so I'm gonna give it back to Rupak. He's gonna go over the architecture of kubbert So Just explain all the different concepts how you can create a custom resource of virtual machines So when you create a custom resource of machine you look you can create a machine and then you can start a machine You can stop a machine Then he'll spoke out the storage and how the machine this comes to existence with the images option for the center non-persistent So let me go into behind the scenes under the hood how exactly it works So let's start with How will you actually virtualize or you will run a virtual machine inside kubernetes? so the the very natural place is a pod and This is where you will run the virtual machine So when when you see a virtual machine instance creation What you will see is a corresponding pod startup and that pod name is word Launcher dash some things and if you look at it internal there are multiple containers Depending upon how you're starting there can be one or many if you are using container images There are actually two of them. The first one is called the volume container which looks at the docker image and Embedded virtual machine image inside the docker image it takes it Extracts it and give it to another container which is the compute container that will actually run the virtual machine that compute container a Launches word launcher, which is responsible for Intracting with livered for those of who who you do not know what livered livered is D standard library used to spawn version machines on Linux uses livered extensive way to To launch and provide the features that they use it has asked for Which includes your memory limits your CPI limits your devices that are connected to version machine now that livered Also Can be controlled and we will see this in in the later slides By other components in the system to start the version machine to stop the version machine Unlike containers which start by default version machine can be dormant and can be started later on So live word provides that capability It also has even more capabilities that are not Incubate yet, but they're slowly making their way into it For example, if you want to hot plug or unplug devices or even memory or or disk This you can but other things you may not be able to do but those can be Or will be added in in future. So the word launcher launch is cute live word as a child process the livered internally runs virtual machine Using either just playing QMU or Uses KVM Now the if you look at the diagram here, I'm showing a Kind of a storage on the host. This is where The the disk of the containers or sorry of the virtual machines live Either that or they will live on a PVC like Josh explained earlier Now I'm just talking about two containers in that part. There can be many more Depends upon what features you're using so you can have side cards for Liveness checks or you can have side cards for it's geo like Josh mentioned earlier the other thing to note is Since it uses Linux QMU and KVM By default you need to run it on the emerald server so you can run version machine natively but you can also run it in Virtual machine with binary translation, sorry an under version machine in a nested virtualization mode by using binary translation It's a little slower, but good enough for a POC or a demo or for your test purposes And I will be showing later on how am I actually I'm running This whole setup inside a virtual machine on AWS using just QMU There are some configuration options that you need to set To use the emulation mode, but once you do it, you'd be able to run the version machine So let's go to the next side. So now you have the version machine running inside a container How do you connect it to the outer world, how do you do networking well on the bottom of the screen you have the CNI When you when a container on the port is created rather a port is created I'm just showing the compute container here when a port is created We get a vEatware From the CNI into the container which appears as eth0 So if you log into the container you do IPA you will see eth0 the word launcher creates a bridge creates a tab device and Takes the IP address that was assigned to the container and then assigns it to the Virtual machine that's running inside the container Which means this part if you log in exact into this container You won't be able to go out of that container this part does not have networking by the way This is just a default option. There are many different options available So it's possible to do matting or masquerading Josh spoke about that briefly But this is the primary way by which the IP address of the pod is actually given to the virtual machine and Then the virtual machine, which is the workload communicates with other containers in the system as if it's another container or another part in the system the communication to The actual container and the pod now happens through let me go back To the shared directories or the unique sockets that are exposed Through the file system that means, you know thinking about this now one one possible Use case or benefit of this could be something like I've seen this project like overcube basically if you have bare metal running in Kuvert And then you create a bunch of VMs on that Kubernetes cluster and VMs are actually comprised of another cluster themselves Yeah, you get to use the the undercube right the underlying Kubernetes Constructs for things like load balancing whatnot you could potentially install metal LB and use these to to provide your VIP For for that like high availability. Yeah Good point because it is a virtual IP when you think about it. It was exactly in the masquerade mode. Yep. That's what it is So, okay, so let's go from so now we have created the virtual machine and saddening inside the container and the networking established Let's see how we actually create the the virtual machines Now if you look and in the source code and if you're interested There are many controllers in in the system So I'm listed. I have listed few here. These are the major ones Virtual machine corresponds to the virtual machine CRD virtual machine instance corresponds to virtual machine instance CRD and We spoke out replica set where you want to just like replica sets Containers you can create what machine replica set so what you will see is there is a controller for each and Some of these are actually very very simple, but some of them are very complicated. So for example when you create a virtual machine The calls go comes to the QCTL or API server to HD The controller actually does not much the object that sits there But when a user says, okay, you know what I want to start that virtual machine Which means you're changing the property of that version machine as soon as you start the version machine instance controller kicks in and Then it goes and starts a version machine. I will talk about that in a second So we so the product is still evolving. There are a lot many more objects that are That are going to be coming up VM groups is something So something to note. It's it's work in progress right now I just like to mention go ahead and do so Due to the fact that the project was started, you know in 2016 an open source in 2017 for anyone who's interested in going and looking at the source code Who may be familiar with some of the the newer Directory layouts or structures of developing CRDs and controllers such as Cube builder or the operator SDK This repo is going to look a little bit different However, just because those tools weren't available at the time. However, I think that the cubeverteam did a good job of Organizing things and using those those, you know primitives in Thanks, and the last one in the picture is a demon set called as word handler So unlike the controller that we just spoke about which which are single turns mostly the word handler is there's a demon set works on every node and What it does is it communicates with the word launcher With the Unix domain sockets of the next domain sockets that I spoke about earlier to do Future operations on version machines, which means you can stop it update it restart it I check the status how it's doing and and Even in future Part plug it unplug it that can be done through word handler. So these three Is is the code system behind behind Q word? So let me put this all together So this is the complete picture obviously much simplified So you have APS servers controllers are acting on the objects then communicating with the word handler to Launch the pod Which are controlled primarily by a word launcher Livered as the underlying subsystem which creates virtual machines and you have other parts living in the system Which are obviously controlled by Cubelet along with the scheduler and the APS server one thing to note because this is just a pod the scheduler is The same there's no changes. There are no changes to the scheduler It just looks at the resource constraints and schedule and schedule set up accordingly. So if you want to schedule With specific policies where you want to have and that affinity or affinity between version machines for performance or Isolation reasons you can do all of that So with that Let me stop and go for a demo So I hope Let me increase the font size a little bit more so here I'm going to be I will create a actually I've already created a Windows version machine. So this is an example of the version machine Instance object It is a win 2k 12 machine that That I have and what I have done is I just spoke about how there are many ways of creating the virtual machine and in this case What I have done is Because of the size of the image here the win 2k 12 images about I think nine nine gigs or so I directly copied it on to the onto the host. That's what I am so that I don't have to embed it inside a Docker container and and push it to a registry and then download it again So I have taken a shortcut, but you don't have to this is just for demo purposes and I'm also mounting that disc as a starter disc on On that domain by the way, if you're not familiar with live word live word calls all the machine as domain and This particular section in the specification There are lots of knobs that you can use really translated to the XML or the object specification that live word is is Is familiar with okay, so with that I've already created the virtual machine. So let me Do the cube cube kato? Let's say get virtual machines So there is only one version machines because remember there are two types of object. This is a version machine instance object So we let me look at all the version machine instances So now for the key plane worker one that is corresponding instance, which is running if I stop it If I stop this instance the virtual machine object will still be there, but running would be false on the other hand since I created Virtual machine instance for win-tiquet 12. It's already running and I started last night. So hopefully it's still working the Along with the cube kato There are there is another utility available called as word CTL that I will be using To show you console access as well as the VNC access to these virtual machines So let me switch into another tab and this is my Mac So let me clear the screen and what I'm going to be doing is Let me first make sure that I have all the setup correctly here so keep config that gets the VMI's And I hope to see vintica 12 and K plane worker one as the two. Okay, so we have it here I'm going to use the word CTL come on and Let me first show you the console access to K plane worker one and I think it's worth mentioning that in an effort to keep with standardizing on this Same tooling right and the standards of standardization of the platform Vert CTL is Actually available via a crew plug-in. So it plugs in to cube control to extend the functionality of cube control So once you have it installed Vert control could be Executed via cube control Vert Since you spoke about that charge Even the console worked here. I'm going to switch and show that Okay I will go back to my Another machine so on one machine. I have I have installed Word CTL. That's what I use here on another one. I have the installed CTL word Let's hit console and let me get out of this one so that we don't have multiple consoles open I'm going to this okay, go back to my machine where the Actually that we bring it up top of the okay the K plane worker worker one and It takes a second Here it goes so the console is connected we should be able to log in and Do what the work we want, but I'm going to get out of here Go back to my Mac because what I really want to show you is the VNC So that we can look at the windows desktop. So I'm going to clear this and Use my word CTL To really look at the VNC console VNC we integrate been 12k Okay, so now it's going to Use my chicken VNC and Here we are the windows version machine is running So let me send it the control of delete and here you are so the machine is running I would be able to log into the system After I change my password. I did not change the password For people who have used windows with VNC you're familiar with this problem of your cursor getting stuck. That's where I am So here you go So let me not log in. I'm having trouble with my mouse Let me not log in but as you can see the windows version machine is running So let me switch into something different now. So now we have seen how you can run your windows version machine inside a container Since you're on this topic, let me make sure that I have another Okay, so now I have another setup and So I'm going to show you That this is running on AWS So I have so I have another setup Which is a cluster running on AWS as you can make it out from the node DNS names They're all an easy to somewhere on the US East and I have Few parts running I have a and you next part and as well as my Test version machine running on this. So let me see if I can show you the test version machine So then So this is my version machine object. It's already running it is based upon The q-word Syros registry disk demo that's available on Docker So you can take this example Install q-word and you should be able to run this. So I have the version machine running As we saw that And let me make sure it is there. So you will see yes there is a test VM running and it has been running for a day and I have the other parts and I have an engine X part running so let me grab the IP address of both of them Okay, so what I want to do is since the engine X is running a Engine X server. I am hoping that going into the work launch a test VM Version machine the the that was your virtual machine I would be able to access that a particular IP address to show how the container version machine can work together so word CTO CTO Console test Okay, so I'm into the test VM and You you saw that I was wasn't able to it did not give me a prompt to log in Since it's a console. I logged in last night. I forgot to log out. It's still active Okay, so now I can I Can see if I have NC so that connect verbose mode this IP address and For 80 which is the IP address of the engine X server. I'm trying to connect on for 80 Open and then I should be able to say get slash. I should TP slash one dot one And and okay engine X replied back. I did not type in that should be Commands correctly, but hey the connection is open the containers and version machines are talking So let me stop there and open it up for questions All right, so there's there's lots of questions just you know kind of around the premise of the the architecture of cube virt so I'm going to try and explain it and maybe you can correct me if I'm wrong. Let's let's go about that So cube virt exists within Kubernetes It natively works within Kubernetes. It doesn't necessarily reach out to other hypervisors for any kind of Services or you know accessibility and it's networking security and Orchestration is all container and Kubernetes native functionality, correct So there's questions of like if I have a case cluster running on ESXi can cube virt deploy a VM to ESXi I'm assuming that's a no So if I I'm assuming you are running the cluster using virtual machines Mm-hmm Virtual machines would internally run another version machine. So this would be a case very similar to Your running virtual machines in AWS now With ESX it's possible and even with a VM. It's possible to do nested Virtualization so that will work and the emulation would also work. So the short answer is yes If you are expecting it to run virtual machines on ESX directly, no, it does not do that. Okay So just as an example because this is sort of kind of like this I Created an open stack cloud provider cluster wherein the cluster was made up of open stack VMs Mm-hmm Those open stack VMs were actually running on VMware ESX Yeah, and then I deploy it and created cube virt VMs on the open stack VMs which are running on VM ware Yep, so you can go as deep as you want It should still work So many abstraction layers so little time Yeah the So the the premise here is if you're running Kubernetes and you need to run virtual machines as well you can Do both without having to have another project or product to run the hypervisor Absolutely, you're absolutely right Chris and that's the motivation. So you have one orchestrator One set of integrations control both of them together and a lot of us Are transitioning applications existing ones new ones they need to work together and it's better to have one platform Correct so The There is there is a couple questions that I want to just knock out here very quickly How do you address security concerns? Containers communicating with MVMs in the same pod isolation multi-tenancy. That's all handled by Kubernetes, correct Yes, so if you're using CNIs with network policies Calico can all be And others you can use them as if they are containers or they are just parts So that's one level of isolation running virtual machines. They are actual virtual machines So you get the version machine isolation as well in some ways. It's a key so With that the virtual machine is isolated within the pod itself, correct So what's the machine? Yes, it's a regular machine and it's in the namespace of the bar got it. Okay Okay, so that answers that do you support any other orchestration platforms like swarm rancher cattle and messes fear anything like that No, this is very specific to to Kubernetes Yeah Yeah, and I do not know of anything else similar on So a question about performance really how does the VM? Inside the pod launch compared to like a standard, you know pod launch time What are we talking about minutes? Is it dependent upon the OS underneath to the greater extent? Well, can you talk to that? So it depends. Yeah, go ahead. Yeah, um, so There's it depends a lot on For example, whether or not you are using an ephemeral disc or ephemeral image like a like a Container disk or if you have Image already present on a PVC that doesn't need to be uploaded or or retrieved, right because there's ways of booting a VM where you've you've specified the source image via an HTTP URL So of course, it's going to automatically down pull that image and put it in a format such as the VM boot in that case we're talking about the Process around the actual VM boot if you mean the VM is booting It's pretty much instant as soon as you get well instant in the case of if you start the VMI and you All go to its console You can watch everything run and assuming you don't have a cloud in it that takes a very long time to run You should be up and running in 10 or 15 seconds, so So let me elaborate on that so you have your running a machine today Version machines the OS boot takes whatever time it takes and you really don't have control over Depends upon the operating system the modern operating systems, right? Especially the the cloud versions are pretty thin slim. They boot up very fast. Yeah Actual processes are Just like any other container or pod so the word and larger They are exactly like any other part of container that you're running So really you're talking about the time it takes to boot the machine itself So that's one and be there's a lot of times like what George was trying to explain The amount of time it takes to extract the image the virtual machine images are going to be bigger The oven to machines that that we played with there at least 300 400 MB Which is on the smaller side the windows machine that I got the Q call to image was about six gigs When he extracted it's probably nine gigs. So there is some time spent on just dealing with that.  So is there a more user-friendly interface outside of the CLI and we have You know quite a few tools there, but is there any kind of dashboarding that you know of that's been created around Cuba? Yeah, there is a web UI project that I wasn't able to show but you should be able to use it Which is a graphical interface and provides all of validation on top of what I just showed today Can you say the name again? Sorry Say that again say the name of the tool again It's called a web UI and yeah, it's just if you go to the the cube vert organization It's an operator that they Created that just deploys the web UI Cool. All right Lots of people asking for examples of yaml Literally the whole process of going from like nothing to I have a disc to I have a cube vert, you know running kind of deal Do you have a repo that you could possibly share that we could share out with everybody here? I Couldn't I have a detailed set of instructions that I've used sort of To gather, you know together some select yaml meaning apply this apply this apply this and you you should run There's also a I can put that in a repo for people to look at there is a cube vert MO repo that was made The I wasn't actually they suggested using mini cube for that and I personally wasn't able to get things to run correctly With that it's not terribly old. So maybe it was just something with my cluster Me using mini cube. I'm unsure So so Chris and others the keyboard documentation I thought was really good to be honest Okay, yeah once had the community's cluster running And and it's been a while we have been doing that but I remember once we had the cluster running It was very easy to set up the operators are really just a couple of yaml files. I can need to put in They started well the start wall. I spoke about the doc. So if you're going to get help you've worked you've worked There is a dog directory Extremely well-written documentation very crisp There is an example directory that I highly recommend everyone to look at it has tons of example. I Hope I wish to add some read me to it or we will we will contribute some documentation To make it easier for to consume, but it's actually very straightforward Okay Yeah, there's it right now, especially when it comes to If you're not using the container disk or one of the container disks first of all if you have a container disk that Needs to be a different OS because a lot of the examples use fedora or seros and things like that But let's say you really need like Centos or Ubuntu or something else a Windows image, right? You'd either you know, you really need to use the the CDI To in order to upload that image. It's just really difficult otherwise, which is kind of the whole reason they made it But you need to be careful. This is one of these gotchas right when when going through so the documentation is good. However When it comes to figuring out what version of the CDI works with what version of the cube vert operator That can be challenging and then I definitely ran it some ran into some issues there Compatibility wise, but once I found out some versions that worked well together I was off to the races. Yeah, so on on the screen. I'm showing a quick example of how you can create a Docker image out of a virtual machine image and as you can see it's actually very very straightforward Yeah, this is what Rupak did right to create a so this is a federal example, but it can be any q-counter image so you you put that under the Disk directory inside the image and just create the image and Then reference that as the container this and that's what's happening here. Interesting. And it's really as simple as that I had this is fascinating right like this is my just Blowing my mind right now because I have like, you know this old tool that I want to keep using and it's a VM And it's just sitting out somewhere and now I can just say oh Yep into the cluster you go Yeah, yeah, this is exciting. This is exciting stuff. All right, so, um, let's see So, okay, this is a good question Licensing right like some of these OS as you mentioned here have licenses like rail windows How how is that managed like where do you see that happening right now? Yeah, so that is a problem in fact So Linux is a lot easier. We were able to play with it very easily but windows it took us time now We come from whatization background Windows What they have done is there are a Evaluation images available that you can use and Subsequently, you will have to purchase licenses, but if you are just looking to expect We can add the links to the PDF that we are going to share From which you can download the image and then you can start using it So, yes, it's difficult, but it's not as difficult as it as it used to be So the you got images available. You should be able to create a very similar Docker file Just make sure that you purchase licenses afterwards So it doesn't let you run for a really long time and it will keep nagging you that it's not activated Right.  You can patch as if it's a regular physical machine So that's one what I would recommend if you can do it is really use immutable boot disk Which can your container this so that So that you can throw them away. There is a new version of red hat at available instead of using the old one you just have a new one and just replace it and Keep the data on a different pvc on a dot or different volume and then use them together So so that's what I would suggest, but you know choices Yeah, and also because cube vert is is able to leverage Kubernetes native concepts You're able to create things like a virtual machine instance replica set for example So now if you wanted to update You know before the likes of hot hatching if you just wanted to update say the image that all your VMs are running You know you have five of them you as a Kubernetes operator apply that to the deployment or replica set and Let the rolling upgrade to take care of it. Yep Nice All right, so it is the top of the hour. I want to respect the release time here So thank you so much for the wonderful presentation Thanks, we really appreciate your help today and Providing us with this information the webinar recording the slides will be online later Go to it was shared in the chat. I will repeat it as soon as I find it I am just filling dead air CNCF that IO slash webinars go there sometime in the near future this webinar will be available and Look forward to seeing you all at the next NCF webinar. Talk soon Thanks. Thank you


The Volante of Wikibon.org, and this is the queue where we extract the signal from the noise by going into events, like the ServiceNow Knowledge Conference. We're here in Las Vegas at the Aria Hotel. I'm here with my co-host, Jeff Frick. He's at Jeff Frick. I'm at D. Volante. You can tweet us questions and comments, and we'll make sure that we ask them to our guests. Derek Roestes here, he's the Chief Security Officer of E-Protex, ServiceNow customer. Derek, welcome to theCUBE. Thank you very much. So, yeah, so we're talking off camera, Chief Security Officer. Anytime we get somebody in theCUBE that knows security, we love to pump them up and figure out really what's going on in the world of security. It's such a complex topic, and one that a lot of practitioners in our audience struggle with. But before we get there, tell us about E-Protex and your role there. Sure, we're a very boutique consulting company. We work specifically around network medical devices, the security of those devices, and other embedded systems. And we've been around for about four years next month. We had incorporated, privately held, and we've gone, you know, we had a rough launch just because we launched in 2009, which was not the greatest year economically and financially to launch a new company, but we went ahead and braved that. And so now we've grown, you know, in the beginning when we first got ServiceNow actually was in early 2010, and we only had five users the first time we lit up ServiceNow and got started with that. So we'd gone through those growing pains of the initial startup of a company, you know, we got our web server going, we got our email system going, we got our CRM, you know, the most important things of a new business. And then after that, we now we're starting to define some processes and needed a solution to help with that. What was the impetus for going with ServiceNow at such a young stage and only five users? Yeah, so I was actually the first employee of the company, and so my background was through service management from IT, traditionally, infrastructure and security. And I knew building the company that we wanted to use something that encompassed ITSM and ITIL type strategies. And so having that as a foundation, there wasn't a lot of options even then, and there's not necessarily a lot of options even now, but kind of going with that, then we knew that that was the platform. And so I knew it also was bringing, growing the company and bringing in new employees we wanted to ensure that we were bringing in people who understood how important it was to have a disciplined process and a software platform that supported that process. So you wanted that to be a fundamental part of the culture of the company that you had just started? Yeah, the key was we didn't want, and security especially, it's very important not to be ad hoc. We had to be very repeatable. We had a customer base that we were building that we had to ensure that had trust and integrity in our processes and how we were doing things. And so we needed a platform that would support that. And I wanted to make sure when everyone was hired and trained on that platform that they knew that was important. So what was the experience like? Take us through that. So we kind of went it on our own actually. I went ahead and we decided, and I guess some people at ServiceNow told me this is unique as we didn't use any kind of implementation provider at all. So we just got the instances, we got the basic data, the dummy data that ServiceNow had, we cleaned that out and then started with kind of the modules that were there and built a few of our own, a couple stories. Unfortunately this shows how much you need to keep track of where ServiceNow deployment is going and development is going. There was no Salesforce automation module in ServiceNow when we started. And so I wrote one in about six hours. Start to finish. You should have had you in the hackathon just now. Yeah, exactly. Now I hire people to do that for me. But six hours we had our own CRM and we started using it, got the data in there and using it for our emerging customer base. And about three months later, ServiceNow made this great announcement that the Salesforce automation module is available. So I transitioned our data. Well, unfortunately I didn't learn from my mistake and that same thing happened again. The, I wrote kind of an IT GRC module so a governance risk and compliance type module and a few months later ServiceNow did it again. Do me again.  Maybe, so. Fred Lutty told us he is a famous thief. Exactly. He's out of it. Because downstairs it looks like there's a ton of kind of service providers and app providers. So was there no infrastructure, you know, kind of community of apps for you to pull from or has that really changed over time? To be quite honest, it's easy. It was easy enough, the barrier was so low to just get something written, get something going with that platform that really didn't even need to reach out too far. And now it's funny talking here at lunch with some attendees is that there's a little struggle with not necessarily finding good partners like you mentioned, but actually finding internal resources because there's a lot of competition for development and developers know this and so now they're demanding more salary and they're starting to understand that, yeah. Start their own company instead of coming and working for you. Exactly. So you're in a really kind of crazy space because you combine network attached medical devices. So you've got the medical device, you've got the HIPAA privacy issues and then you've got what was always kind of a barrier to early cloud in terms of there's all network attached. So talk about some of the unique security challenges that you guys face and the fact that you're able to overcome them. Sure, yeah. So we are, like I said, we're boutique. So as you mentioned, network medical device security is our tagline, that's what we work in. So we work in hospitals, we have over 100 sites across the country that we work in these hospitals and we kind of work with assets that traditional IT doesn't want to work with. So medical devices are one, it's not really an IT device, but it's very critical for obviously for patients, but it's critical for the business as well for hospital healthcare. And we also even work with some non-medical device stuff like HVAC systems now that are attached to the networks, cash register systems, things that IT doesn't necessarily want to deal with but have very big security concerns for availability or the confidentiality that data. And so we do assessments, audits and assessments of that and we keep track of that information in our service now instance. And now we're actually having, as service now is growing their business, we're now starting to have customers that also have service now instances and they want to get a peak in access to some of that data so we're figuring out how to integrate some of that data with them. But as you mentioned, this is a very niche, very specialized type area. And so we do these assessments, a lot of, we don't necessarily even have a direct competitor at this point in the market. That's how niche we are. But we do have individuals who say they can offer similar type products and usually what they do is they run scanning systems, almost like the service now discovery tool that they have and they go out and scan the network and do these things. Well, our business model is actually different because we do HIPAA assessments and we do a lot of things that require boots on the ground, eyes on the devices, eyes in the environment of what's going on with the medical device and who's touching it and where can they see, can a patient walk around and see some data they shouldn't see. And so that requires having actual people in there and so we send individuals in to actually do these assessments instead of automated tools necessarily. And I would imagine the devices are going to be more and more outside of the hospital as well. That's all the healthcare commercials and the insurance commercials are the world where you're wearing these things or walking by these things and it's reporting back to the doctor. Yeah, we were asked to consult on a project where a healthcare provider is sending out an electronic scale. They're sending out a blood pressure cuff. They're sending out a heart rate monitor and a couple other things to individuals after they've already seen their physician and so they can get that information there instead of having to drive into a doctor's office or something, they can get that in their home and then it gets sent to a tablet that they also have been provided and that tablet information then goes to an information repository that the hospital monitors. And so there was some concerns about the security of that information and that pass-off and hand-off and who's seeing it and who's touching it. And so there's a lot of things to look at and I have a new appreciation for these things because I work for, my boss is a lawyer and so I get a lot of exposure to legal terminology and the legal implications of saying this versus this and measuring your words very carefully. That's why he's spending your time building applications. So you guys, you've focused both on physical and logical security based on what you said before. You got to have people walking around to see what the vulnerabilities are in terms of violating HIPAA. Yeah, so we work on the physical, the technical as you mentioned, we also work on the administrative. So the policies, the lawyers, you know, how the individual organizations manage or maybe don't manage the security aspects and do they have any kind of a governance organization in place to determine. And a lot of times, I think one of the sessions I heard earlier, talked about how, it was actually a healthcare organization, talked about how doctors, they'll get research grants and things and they'll just go buy things and they'll attach them to the network and they may even hire their own IT guys that are separate from the normal IT guys. Yeah, plug this in. Because I got new grant money, so I'll hire a couple IT guys and they'll deal with it and they won't be out of the main IT department because if I go to the main IT department, they can say no. But if I go and get my own guys, well they're going to say yes, because I'm paying for them. Right, right, okay, so now, let's come back to this notion of your niche. So one of the things we've been tracking is the so-called internet of things, the industrial internet, you see these GE ads, you must love that, right? Sure, sure. The operating room is now just a room, right? And it's quite interesting, it looks like it's a big wave of data and analytics applications, so you participate really in that wave, don't you? Absolutely, yeah, we look at our healthcare customers have about two network devices and or devices that store patient data per bed. So when you look at a hospital, the number of bed counts, and that's the number of devices that they have that are either attached to the network and or have patient information in them. And this has a big impact for the patients when you have patient information, every time you go to your doctor, you want to keep that confidential more than likely, unless you're Angelie Jolie, who wants to obviously bring that to the press, but most people want to keep that information. Yeah, well, most people want to keep that information private. And the other thing is there's a lot of financial information or benefits information when you think about your healthcare, that stuff gets kind of captured up in these devices as well.  And unfortunately, a lot of, you know, you talk about the internet of things, a lot of these devices are now mobile, they're easy to move around even in hospitals and they're becoming lighter weight. And so it's unfortunately easy to lose track of one or goes missing or something happens or you take it home to work on some case files at night. Unfortunately, it has, you know, probably every patient for the last five years on it, you lose this and then you just build a lot of financial information, a lot of confidential medical information. So let's dig into that a little bit. So a lot of your industry is around compliance with HIPAA and making sure you're not violating that for sure. But I think what you're getting to is the bad guys can actually profit from tapping into the medical network now. Yeah, there was a statistic, I'm not sure how it's kept pace today, but there was a statistic from the Secret Service and it was the black market value where they're attempting to put a value on the black market for a known good credit card was about a dollar. For a credit card that they knew that, you know, someone could go buy, get the number, it was going to work, they could go buy some information or buy some assets, get them shipped to their house, whatever, that was about a dollar. A medical record that was known good, they still had benefits and you could still, you know, the deductible, you could still keep working on it. That was about 80 to 90 dollars. So that shows you just, and this is a few years now so I'm not sure what the number is today. Why that giant number being completely ignorant? There's some speculation. One speculation is that, you know, there's about 40 million people in the United States who can't get or don't have, don't have access to, you know, medical benefits or health insurance.  So this is information that's, you know, it's got some value in the downside for you is just like identity theft, is if your medical information gets stolen and you don't know that and someone uses it to, you know, like check in under your name and with your information at some other hospital in some other state and they start racking up, you know, fees and things, even if the bill doesn't necessarily come to you right away before that gets sorted out. Now if you go in and maybe you get this resolved, you get an affidavit, it says I was never in this hospital here, didn't do this. Problem is, is you may have to fight with your insurance provider about the fact that someone ran up fees on your maximum lifetime benefit and or your deductible has been hit. Or you have a new free existing condition that you didn't know that you had. Someone could, we worked with a client in South Korea and, you know, this is in Seoul, South Korea. So it's only 30, 40 miles from the border of a hostile threat in North Korea to their nation. And they mentioned to us in a meeting about how, you know, it's possible someone in North Korea could essentially hack into the medical record of a dignitary, a politician, some prominent individual and could change their blood type. And this gets changed in the medical record, they come in to get some kind of work done or something happens and now they get the wrong transfusion and they could actually be like threatening. Yeah, and it sounds kinda, yeah, it sounds kinda impossible and odd, but, you know, that's a real threat to them in their country and the issues they deal with. So you've got the, I mean, the bad guy ecosystem has obviously advanced dramatically.  And now it's very stealth, right? Because they, there's different parts of the ecosystem that will get paid. Like you were talking about, you know, laptops. Somebody, don't pay somebody, go steal a laptop. Yeah, so there was a laptop that was stolen or a system that was stolen recently that I think within three months, they tracked this device down because it had some remote control software on there and it was stolen in, you know, Midwest United States and it showed up in Senegal, West Africa in less than three months. And how many people did it probably pass through on its nice little journey across the ocean? Yeah, so the, I guess the other point there is that in the, you know, traditional IT world, 80% of the money is spent on keeping the bad guys out. And only 20% on finding them after they've, you know, gone through there and doing analytics around that. So, and that has got a shift, obviously. I saw another stat that, again, this is traditional IT worlds. After an infiltration, it's, on average, it's 419 days before the infiltration is even known. Yeah, that's one of the things the HIPAA regulation deals with is a reporting, they're trying to enforce a reporting timeline, you know, 60 days for initial report, if it's over so many record, medical records that were breached, this kind of thing. The issue is that it's, the time runs after, not after the incident occurred, but after they found out about it. Yeah, right, so, yeah. So, Mike, specific question to you, Derek, is what do you guys, is that similar, is there a similar dynamic in your world, you know, your device, you know, network device world and how are you guys responding to that shift in profile? Yeah, so it's very difficult right now because medical devices in any kind of embedded system, sometimes you hear a lot of this in the media around industrial control systems, it's gotten a lot of attention, but it's very similar, which is these are systems that are largely antiquated, they're very proprietary to their manufacturers and IT organizations typically just don't know much about them and so they kind of ignore them and the operators or the owners, the individuals who shelled out the cash for these multi-million dollar systems, they don't necessarily deal with the security of that system or deal with IT about, you know, who controls this asset and who does the upgrades and how does that work? In a lot of devices too, you know, the crunch in the economy is a lot of individuals are letting the service management contracts for these devices go off and so they still need to use them for business. To give you an example, we saw, within the last 12 months, we saw a system that was a lab system in a hospital and it was still running DOS 3 and you think, okay, this is a legacy old system, they got to get rid of this. Well, they actually had only purchased it a few years ago and they had an eight year life cycle. So in five more years, this hospital will still be using a DOS 3 based system for all their lab management, all their, every lab call that comes in from that hospital will go through this system and very few people on IT are going to know how to interface with that system and do anything with it and if this hospital keeps it past that eight year life cycle, it'll probably roll off support contract because the equipment manufacturer is not going to support that old of a device anymore, they're going to try and get them to go to the new one and no one's really going to be there to do anything with it and it's going to be a big issue for everyone who uses it and owns it but no one really wants to take accountability. So great discussion, we'll come full circle now. So service now, back to service now. So what has it enabled you to do that you wouldn't be able to do otherwise? You said at the time, there was nothing else like it. So what has it enabled your business to do that you perhaps couldn't have done otherwise? The biggest thing for us is really our core line of business which is it helps us keep track of literally millions of control objectives for our customer. So we do, we have tens of thousands of audits, assessments that have been done for individual devices that we cover and then inside each one of those assessments we've got 60 plus observations and control objectives that we're looked at and then each of those have some kind of control measure or something that may or may not apply to it. So you multiply that out and we have millions of control objectives in there and in four years going from basically a spreadsheet based system just to prove the concept and then we had to have a platform that was going to be able to take all that data and help us work through it better. There's other solutions out there I'm sure but there's none that I've seen that are nearly this robust for this kind of data. That allows you to scale your business and delivers tangible business value. All right, Derek, well listen, thanks very much. I love the discussion on security. I really appreciate you coming on theCUBE and keep it right there, everybody. We'll be right back with our next guest after this break.


What's up, everybody? We are here in Loveland, Colorado for the 2023 Rocky Mountain Rep Rep Festival. They gave me a microphone for the whole weekend.  We got a whole bunch of people lined up outside. We are ready to get them in, and it's time to get this party started. In just a few seconds, we have over 3,000 people signed up to show up. If everybody shows up, this is going to be the biggest Rep Rep Fest ever. You guys ready to go in? Let's do a countdown. Ten, nine, eight, seven, six, five, four, three, two, one. Here we go! So we are inside the Rocky Mountain Rep Rep Festival, and they officially had over 3,000 people sign up to come. It was free. All you had to do was register. So a ton of people are going to be here if all 3,000 plus show up. This will be the biggest Rep Rep Festival that has been ever yet. But hopefully all people show up. We have a great event for you. The Rocky Mountain Rep Festival is going to be awesome. We already have hundreds of people in the building. Let's go check out some awesome stuff. So this is Brandon. He came all the way from Utah. He printed the Remerf 2023 logo. It looks like it's white PLA. It's PTG. Alright, that's awesome. It looks awesome. Brandon asked me to sign this. Where do you want it? Wherever you want it. Wherever you want it? Alright, let's do it. And this is Amber. Hi Amber, I'm Jim. Nice to meet you. I'll do one of those. Nice to meet you. Can you watch all your videos along? We'll do this. We'll do one of those for you. There you go. That's for you. Thank you. Thank you for finding me. I appreciate it. And thank you for coming. Check it out. There's so much cool stuff. I know. I'm planning on walking around. We'll have a lot of fun. Find me in a little while. And we're going to do some more fun stuff. Alright. Thank you guys. I know Jim. I know Jim. I'll make it one time easy. Always these professionals. There we go. Do I need to hold the mic closer to my mouth? Sure. Does that help? I'm good. How are you? This is Jim. One of the awesome things is this maker lounge right here. We got the amazing casting couch. You can sit down, kick back, and enjoy a nice discussion. Well, and enjoy a nice discussion right here at Remurf 2023. We've had everybody from Jill telling, Voron, the CEO, CTO, the Fangs. We've had some just amazing discussions right here. And we've got Justin. Justin's right here too. Sorry, running around. Getting the flex. Sorry. So a lot of discussions have been had right here on this couch. And it's time to get out of here. It's what it's time to do. It's time to go. Are you done yet? Yeah. Okay. I don't even know. I'm stuck. I'm stuck. Oh, man down. Oh, you're still rolling. Oh, great. Hang on. I think don't hurt your back. Don't hurt your back. All right, we're out. Let me just... Let me just... Oh, God. We're getting out. Run. Run away. Run away. All right. You were messing around, weren't you? No. Here at Remurf, we actually combined with Polymaker, who helped sponsor us get to this event. And we have a Superbooth. They have some amazing models printed in almost every single color they have. And if we come around this way, we've got Battle Racers. We've got Dragsters. And they actually made a sweet tablecloth just for us. Let's go check some stuff out. So we've got the baby voron going over here. We've got some awesome Polymaker filament. Awesome. And a 3D printed plane right over here. Hey, look at this guy. We've got the zombies in the house. Gotta love some... Who's a zombie? I don't even know. Who's a zombie hedgehog anyway? I don't even know. And then if we come farther down, we've got the Battle Racers that are already here. He's hanging more Dragsters up. So hopefully they don't fall. And then... Oh, there's one. There we go. Sweet. If you were here, you would have found us right here at the edge of Tech Table, where we're going to have Battle Racers galore all over the table. Let's go check out some more awesome stuff. I don't even know what just happened. We're about to do an epic Battle Racer battle. We've got a figure eight plan for us, and we're going to count it down with the crowd right now. Everybody, five, four, three, two, one, go! We have to have an epic battle. And who knows if they're even going to make it to the finish line. Alright, put your arms up. When I hit three, drop your arms. Cool? So they have the inland 3D booth, which is right behind the Makers lounge. And I know Zach Friedman in his habitat. He's playing the brand new extraction game. If you wanted to play, you could come play with Zach Friedman right here. Zach, how are you doing? It's good. You're good? Except for the fact that I keep losing at my own game. I keep losing. So do you have a good weekend though? Oh, the weekend was great. Weekend was great. I can't believe how well they pulled this off for the first time. Yeah. It was literally amazing. Everybody's kind of ready to fold her up right now. We're about ready to do outros. But Zach is ready for more extraction. So get extraction. It's on things, right? Yeah. You can go on things. You can go at playhextraction.com. You can also check out the video on my channel. Nice. It was an April Fool's video, but it's a project. It was. April Fool's. Check out Zach Friedman's extraction video. Alright. We got to get back to you. You can search for it on things.com as well. It was good to see you. Thank you guys for hanging out, by the way. Run! One of the awesome things at Remurf 2023 are the Maker's Tables. Whoa!  But anyways, we have the Maker's Tables. This is day two. My voice is absolutely wrecked. But all of this here were people in the community. All these tables behind me were people in the community coming to show off the awesome projects that they're doing from giant rockets to 3D prints to printers and everything. And here's your look in to the Maker Tables. All the sponsors that came out for Remurf. They sold out super fast. Cocoa Press was actually one of the main sponsors. Ellie is amazing. The Cocoa Press printer just released. We got a taste of that chocolate earlier. Here's a quick look at what we saw. Fest. I can't even talk. So we've reached the last few minutes of the Rocky Mountain RepRap Festival 2023. This is the first inaugural one. I believe we had almost a thousand people come on the second day. It has been amazing. It has been so much fun. I'm losing my voice and it's time to get out of here. But as we kind of make our way through the last few people that are left here, it's kind of a look back on all the cool stuff we saw and all the cool stuff we're going to continue to see at these RepRap festivals because it's stuff like this that really makes our community strong. It brings us together. It's like-minded people, but it's time to go. So later Rocky Mountain RepRap Festival have a great year. We'll see you at Murph next. And peace. Bye. Oh, you want me to keep going? So we've reached the end of the 2023 Rocky Mountain RepRap Festival. It's time to go. We will see you next year bigger and better. For now, it's time to get out of here. See you later, everybody. Oh, whoa, whoa, whoa. Okay, see you later, everybody. Bye.