Our analysis of Congress is that there are some 500 people there, at least 300 of them are akin to airport windsocks, and that is when you talk to them about a public policy issue, they have their hand up to see which way the wind is blowing, regardless of whether or not they're charmed by your arguments. Well, that means that leaves several hundred, maybe, who have some sort of philosophy. I don't know whether maybe it's a hundred real bad ones and a hundred that are better, but there are very few for whom I personally have a great deal of respect. Now there are some of them who I have more respect for, but there are some good people there for sure who are both good people and who both agree with me on many things, so I have a great deal of respect. But I should say that there is no member of Congress for whom I have greater respect than our final speaker this afternoon, Congressman Ron Paul. He is a representative from Texas, the 22nd district. He is a physician, got his medical degree from Duke University as a graduate of Gettysburg in Pennsylvania. He has been very active in the issue of gold and he serves now as a member of the Gold Commission and he wrote a book called Gold, Peace and Prosperity. The example of Dr. Paul's voting record can be attested to by the fact that in the first two years that the council has had a survey of Congress on some 60 bills, Congressman Paul has been far and away the outstanding member of Congress in our voting study. He has also received the top rating from the National Federation of Independent Businesses, Watchdog of the Treasury and he has also been named the taxpayer's best friend by the National Taxpayers Union. He heads a foundation, a nonprofit foundation called the Foundation for Racial Economics Education, which publishes a paper called the Freedom Report. We started out with Leonard Ligio talking about ideas that have consequences but ideas don't exist simply in the ether. They have to get somewhere into the public policy realm and we've asked Dr. Paul to talk this afternoon to us as a close to our convention about the politics of these radical ideas. Thank you, Richard. Thank you very much. Delighted to be with you this afternoon. I feel like there's not going to be a whole lot I can offer to a sophisticated audience like this who have heard of all the experts and explained to you the best way to solve our problems. But I do have a special perspective on this problem that we face by being a member of Congress and one who certainly joins the council in their desire for a competitive free economy. It was mentioned by Richard the awards that I've won, like voting most often for competition for the least amount of taxes and the least amount of spending, it was not too long ago in the last election that we had a corporation that we were soliciting support from and hoping at least to neutralize them so the money didn't go to the opposition. We sent word to them, we were seeking their support and the spokesman came back and said, well, yes, we sort of like what he's doing but he's not pro-business. And of course we found out a little bit more about what pro-business means and I'm sure you can guess. Pro-business doesn't necessarily mean an opportunity to compete and to earn a profit, produce a product and a service and withstand the tests of the free market. Pro-business means that you should help them a little bit and in this particular case they had come to me and asked me for an assistance in getting a grant, a contract and we weren't too receptive to it and this made them unhappy and therefore they were going to challenge me and have persistently and they certainly passed the word around that I'm not pro-business. Now I think most of you can understand that rather clearly what pro-business means and the problems we face in Washington as politicians who will advocate a free market position. Some days it's very discouraging, you think, well, you'll never get anywhere because the system is built in to benefiting only the special interests and the politicians know the system, all we have are bureaucrats and programs up here to deal with and there's not much chance that we can get our views and our ideas across. I think there's every bit of reason to be optimistic even though we have those down moments. There has been a tremendous change. I first went to Congress in 1976, I lost after that but it was an early start for me in 1976 and I would say compared to 76 till now there's quite a bit of difference about what's happening. Not necessarily in legislation but what's happening in the country and among groups like this and that's where the difference is. I was fortunate enough not too long ago to be invited to a group in Milwaukee, a free market group that I was very impressed by. Just the other night I was invited up to Newark, New Jersey and they said when the information came to me from the staff they said this Chamber of Commerce group wants to talk up in Newark and I stopped and I said Newark wants a Chamber of Commerce wants me to talk. Do they know who I am and they said oh yeah yeah they know, they want to talk about free enterprise and they believe in it and I said are you sure? So the conversation went back and forth and they said yes, they really believe in free enterprise and there's some good guys up there and they know exactly your voting record and they want you to come up and defend it and I said well I need some more credentials and finally I got some more information, seems like Richard might have even recommended them, I can't recall who all said but they said yes it's a good group, they know what they're doing and know what they're talking about and I thought well the real test will be this. I said well if they're really really serious and they did ask about talking about the gold standard also, I said see if they offered an honorarium, I said see if they'll agreed to the contract and pay me in gold and sure enough they came back and they said they'd pay me in gold so I thought well I guess for the first time I'll come north of the Mason Dixon and east of the Mississippi and I'll venture in and but it was a delight, I mean it was a good group, had a foundation associated with the group and I think it's very encouraging to know that this exists outside of Texas, you know I thought only Texas had the good guys. So but ideas are changing, the rhetoric's getting a little bit better in Washington, I still think we have a long way to go in Washington to correct the ills, I am a firm believer in the saying that ideas do have consequences but I take this into consideration in light of the fact that politics sometimes move and meander about for non-essential reasons it isn't so direct I think that most people still do vote for very very superficial reasons and this can almost be used to our benefit as well because in spite of my voting record which is rather definitely defined as far as not voting for subsidies even for my own district which becomes difficult to defend in a political campaign for instance we have three major projects in our district that would be considered federally necessary to to exist we need the federal government that is the port authority which needed more money the flooding areas that needed for a flood insurance and also the NASA project which is rather large for Houston and sometimes you can get away with a bad vote if they don't know about it but those three issues were used day in and day out against me in the campaign said Ron Paul doesn't even care about his own district he votes against us all the time and it's it's a principally a Democratic district so it isn't a partisan thing that was going on I'm not an 80% Republican district so I wasn't guaranteed an election regardless it's a principally a Democratic district so the conception or the perception of most everybody on the house floor when they're voting is that yes they got to see the which way the windsocks blowing in order to survive as a politician I think they're misconstruing things I think the American people are much more sophisticated and much more willing to to look at at issues in in in some sort of way because in in spite of that I was still able able to you know achieve a political victory that is not lose on the fact that I did not become the champion of the handout that people are willing to but in the same sense did all those people out there those 50 plus point oh one percent who elected me did they really understand my philosophy the free market did they understand all the ideas you know I don't think so I think that the ideas were important I think the ideas of interventionism has been important to move the country in a bad direction for a long time and that the ideas that I hold and the ideas that the people who support me hold and the ones who are ready to willing to work and send me money those ideas are critical to me and to the movement and the perception that the people hold is critical it will be a mixture though of something very very superficial my estimation about how people vote for candidates is not so much that they voted for me not so much that I was a champion of the free enterprise system but somebody who voted honestly and did my very best and that they could trust me and I think that perception probably was over balanced you know all the negative approach of saying well you know he isn't getting enough for us matter of fact it's sort of built it almost confirmed the fact that they could trust me because I was even willing you know to take a stand that might be conventionally construed as non-political so certainly ideas have have consequences they're critical to the ultimate destiny of the nation and yet on a day-in-day-out political battle I think you have to take this and weigh it there's a relative weight to it but the ultimate nature of the government in the country will depend on the ideas that groups like this develop and the ideas that you hold and the perceptions especially of those who contribute in working campaigns but when it comes down to pulling a lever it will be for quite a different ways and I think this is a way that you can bring the conflict together that politics never deal in real ideas versus the idea that everybody deals only in that people only deal in ideas because I think it's a combination of both in 76 I would say the perception of my views that I took were looked at in a much more negative way than they are looked at now the word libertarian is used quite frequently with the free market and it's a different meaning for some than for others but in general they will associate my views with a libertarian view or a free market view in 76 I would say there were very very few who have even heard the word understood or even asked about it and yet today they will kidnally come up to him and they said well what's the libertarian position on this and this means that they're they're becoming aware that there is something else that there is another viewpoint besides the competing forces and that are using government in a conservative way versus a liberal way and they see that there is another stand and over time I hope I can persist with gaining respectability for it in that that they respect the view they might not agree with it but I find that they're not ashamed of it because even though they might not be anxious to take those rare stands on the house floor that are dangerous politically but correct philosophically but if there happens to be a rating where there's only five or ten votes and they happen to do well on it more or less accidentally but my name is associated with it it seems like they would like to use that they would like to benefit say and go back march into their district where they may have been voting to liberal and go to their conservative friends say look see I have credentials now I voted with somebody who knows and understands and believes in the free market so so they do want to cling to somebody or some things with that are related to sound principles yesterday we had a pretty typical example of the conflict of those who would like to deal in ideas who would like to follow the general rhetoric of what's been happening in the last several months versus the old problem of the political interpretation of what they should do with a vote this was the agriculture bill I think it's interesting if I just tell you a little bit about what happened because it tells you about what's what happens generally in legislation the the vote came up we were ready for final passage the committee member who's usually managed in the bill standing at the desk and he was standing there and he's usually the one responsible for getting a recorded vote in the minority side usually asked for it because we're usually on the losing side of a particular vote this was a large appropriation but as it came up and everybody had hung around from the last amendment vote because they knew final passage would come up and they would be a recorded vote and all of a sudden the speaker looked and paused for a minute and fell a set down and it was passed and it was hardly by whisper and as multi-billion dollar budget was passed it was many billions of dollars over the I'm hauled back I don't know exactly how many dollars over but it was over the president's request and there's a question of whether the president might even veto the agriculture bill because it's higher than the budget resolution there was no recorded vote and the main reason was this there are a lot of conservative Republicans in the Midwest who believe that they cannot ever vote against an agriculture bill and get reelected if I can vote against NASA get reelected they ought to consider it you know but they they said we couldn't do it and they didn't want to of course if they voted for it or you for it then they would say well there you go you voted to break the budget so of course it would be better not to have a vote but then an unusual procedure after it was substituted with the Senate number which was essentially just a parliamentary maneuver then another member out of the farm district came and asked for a vote and they got a recorded vote at an unusual time so we did go back and had a recorded vote but there at that time the conservative Republican who has been the champion the leader of your cause to cut spending is moaning and groaning you know my god now I have to vote for this so there there is a lot of that that goes on they're not you know serious enough nor do they have a comprehension of what really needs to be done in the Congress which means that we should you know cut the budget the truth is is we're not cutting the budget the budget is very very high it's way above last year's budget and with the planned increases in the defense military foreign aid budget it's it's it's going it's it's out of control I imagine most people here know the name Han Senholz I was talking to Dr. Senholz yesterday and I think the announced in Bruce probably knows these figures better than I do the announced deficit for last year I believe I saw was at 55 billion somewhere in that range and yet he claims with his calculation of off-budget I need to run this down and check him out make sure he's given me the right figures but he claims that there's 141.5 billion dollar real debt increase you know for last year's budget when you take off all the off-budget so there's still there's still a lot of deficits going going on and that means they're still going to be a bit of pressure on the on the Federal Reserve now the one the one area that I work in the most was mentioned in the introduction that I'd like to talk about a little bit where where I think ideas do have consequences in that debate and talk has has developed into a popular movement and that is on the money issue in 74 I ran for the very first time and it was out of frustration over what happened in 1971 in the Republican administration with wage and price controls and the closing of the gold window and it was the money issue that I was most interested in and I was not elected that year but came up here in in 76 and it was mostly laughs about what was going on with the with the monetary system yet now there's a serious discussion going on we have a gold commission that's been established a lot of people will call up and say you know just tell me tell me just what what is the most optimistic thing you think can happen with the gold commission after you do all your report you know you're not in the majority you know they'll ask it in a very negative way they'll say well the most the best the best benefit has already come and that is it's a public discussion it's in the Wall Street Journal and Barron's and Time and and Newsweek you know all the conventional magazines ABC, CBS, McNear Lair and everybody's talking about it now not because all of a sudden they have become philosophic and believe that we ought to have a morally and constitutionally sound currency but out of desperation because we have such a lousy currency that is depreciating so quickly and that the bond market's being wiped out and they can't build houses so out of necessity they do have to look for new idea or different idea and different approach and it just happens that the gold commission was established and in place and the need came along the commission certainly has been the vehicle for the discussion the need has blended in and there is a very very serious discussion going on we will have our third meeting for the gold commission on on Monday so this is an event that moved much quicker than I ever dreamed I would have thought that it would be several more years before serious discussion would occur and I'm even now lean toward more pessimism and say you know there's still no chance that anything is going to happen you know it's going to be a long time but there are others who believe that you should have a gold back currency who are much more optimistic and think it could even occur within months I don't happen to believe that but I was surprised about the rapidity of the changes that have occurred since 76 and I am hopeful for that I do believe though that the idea put out by Hayek or at least popularized by Hayek I can't believe he he was the originator that is of competing market currencies and this is catching hold I mean can you imagine I mean the Chamber of Commerce is pretty soon going to be I'm going to be champion the Chamber of Commerce I mean they wrote about in the Wall Street Journal yesterday and talked about competing currencies so and looking back in the just another aside on who may be on our on our friends that in the debates in 1968 when when we took off the 25% cover the small bank association the the the small group of bankers were strongly disapproving the removal of the gold cover the ABA was for it but the smaller banks were for it for holding on to a gold currency and I still run into a lot of bankers and usually so often hard money people say well the bankers you know our inflation is well some of the big bankers are but there are a lot of bankers who believe in honesty and sound money and I think that we we're moving in the right direction and and quickly because somebody did take the time to write down an idea and something that I can hang my hat on and to and to use and in some way or another popularize it or get voted for for other reasons I might not be able to explain all those things well enough to all my constituents but if I can convince them I'm going to do my very best to give them something that we would call an honest currency and they trust me yes then the ideas will have a consequence when I go to Washington try to implement these ideas as long regardless of how I get there and this is some of the political mistakes made by some they believe that if you're a purist in thought and you're going to go to Washington be a purist therefore you have to put everything out on the table exactly as it would be and everybody understands every iota of anything you've ever said well that sounds good and your workers should understand everything you believe in but in a campaign that's not true in a campaign it's going to be votes coming for various reasons very very superficial reasons and in politics you take your votes how you get them you don't don't refuse a vote because somebody's voting for you because they misunderstood you and you say well I want I don't want your vote because I'm really not for that you know you you just live in the real world of politics but when we get there we have to do something which is most important this is often a debate is the idea world more important in the political world and I had somebody come up to me the other day and they try to discourage when they say it's time you drifted away from the world of ideas and got more involved in the world of politics get your political action committee going and start you know you raising money and getting certain members into the Congress which is a reasonable suggestion for somebody who does deal in politics but he was de-emphasizing said the ground work has been down we've done the work and everybody knows what the free market ideas are and we don't need to concentrate so much in the educational aspect well I don't think that's quite true I think we still have a lot more work but I don't say that education is the only thing and politics is nothing I've had some very good libertarian friends who say yes educate yourself take care of yourself help your neighbor and educate your neighbor but forget about the government the government's the enemy you can't change government you can't even participate in government but I don't buy that obviously I wouldn't be here I can do a little bit better staying in Texas I don't have to come up here and run around if I didn't believe that some formal government is necessary and good and that we can change it and feel very fortunate that we have a government and a system free enough where we can change it where we can get involved where we can go out and do something and I think that's so important but the ideas I think are critical and we have to work with them we have to continue with it it's what's so wonderful about it isn't a group like this some might be more inclined to working only with ideas and others only in politics and you know that's fine but I think it takes both I think the ideas have to be there and you have to have an ideological movement before the politician can do anything and I think that I'm we're all you know in a transition and I think I'm really in the middle at the beginning at in the middle of that transition that I can even see it where you know a hard line approach in 76 was scoffed at much more so than now but books like Bob has coming out they're gonna make great assistance that's the kind of stuff that needs to be done somebody needs to put one of those in the hands of every legislative assistant in Congress you know that would be a good project so they can refer to that should be a reference book when they're dealing with OSHA you know to come up and have something they can look at they can look at an alternative so that's critical it's critical in in making the ideas work in the legislative sense the two can't be separated as far as I'm concerned and I am happy to try to deal with both and is for this reason that I have pursued putting out a freedom report where I I considered quite modest but something that is attractive to a lot of people who might not have read it otherwise you know they aren't interested in reading economic textbooks but they might receive a short easily read piece or an article sent to to them from me and I have a large number of people in that list and I'm always trying to expand those numbers and I can get a lot of people to read that that wouldn't have read otherwise so this is the spread in the ideas but I couldn't come to Washington I mean it's hard enough as it is I think being at the early stages of a libertarian revolution but there is nothing if I'm standing by myself but because of the groups you know the groups in Wisconsin and Newark and Alaska and Texas all through the country that are growing now this will make the difference the only real question I have and I believe Hayek states this question to or doubt and is how much time does it take to make sure that the people will endorse those ideas and understand why we can abolish OSHA and EPA and come up with something else without destroy in the country will there be enough people to understand that you know if you did go to a sound currency possibly there's a little bit more adjustment period than some of us would like maybe there will be a bit of malinvestment and debt to be liquidated and will they be patient enough to wait six months or 10 months or a year and keep your hands off that's a big question and right now today I would say no they have no patience at all and that we stand on the verge of attempting to impose our ideas and yet at the same time we stand on the on the brink of a of a holocaust economically and socially because if the money doesn't work in the welfare checks won't buy anything the people who have been conditioned that they have a right to your wallet and they don't receive the purchasing power stolen from your efforts yes they're going to revolt and then there's going to be chaos and our attempt to change things will go down the drain that's why I think it's so important that in dealing with the ideas that we may have the ideal that we would like ideally there should be no post office and there should be private delivery of mail but that doesn't mean that I should draw up a law today and abolish the post office at eight o'clock tomorrow morning and that would be it even though I think that probably would work pretty well I think it would by the day after I think would be delivering mail again but as a suggestion that the people might accept a little easier is just legalize the right for you to deliver your first class mail and the transition would come and that's why I I think the idea of competing occur currencies is so good in something that is achievable I'm optimistic enough to think that we may get that a major part of that into the majority report they would never accept the idea that tomorrow we will quit monetizing debt and we will have a gold currency that's not going to happen but they see the the true anti-gold pro paper person is let's threaten by gold and say yeah if you kooky people want to hold gold coins go ahead and we'll mint coins and let you have them I think it'd be much difficult more difficult to get rid of the legal tender laws and get rid of the taxation on the buying and the selling of the gold but we're making inroads into this idea that we ought to have it stand on its merits the paper money versus the gold money so I am very very hopeful I think psychologically if nothing else even if we didn't start using the gold immediately psychologically if if the gold commission came out at March 31st and said the Treasury will now mint one-tenth one-half one-quarter an ounce gold ounce gold coins and to be sold to the American people and the liberal say oh that's great we're gonna miss up the South Africans you know and they'll say yeah that's good we'll sell them and let the people buy them and let them min them as often as possible you know I've always worried about a lot of people who aren't too convinced we have the gold at Fort Knox and I don't even know if we do but and they won't audit it so I thought here well let's sell it that'll be the best thought it ever we'll find out if it's there let the gold and I used to believe more strongly that the gold had to be in hand with the government because it had to be a government hundred percent gold coin standard and we couldn't do it on our own but I'm more convinced every day that the safest thing we can do is secure our liberties allow the marketplace to work and get the hands and the hands of the people get the golden hands of people it would work I mean we wouldn't have to worry about matter of fact even it would be a tragedy if the gold didn't exist in Fort Knox but even without it I think that with freedom and with the incentives that come along with a free market the market could handle it the gold would come to the country we would become productive and prices would adjust so it's a matter of convincing the people that they don't have anything to fear about freedom I think that takes a lot of understanding about the transition so that we can teach them to keep their hands off very often I can compare this to what happens when the and this doesn't happen quite so much as it did a few years ago but when penicillin first came out the physician was inundated with people coming in because penicillin was given so carelessly patient would come in would have a viral cold and I want to shot a pen doc you know and so well you know that the patient's pressuring the doctor the doctor's harassing doctors gonna make an extra ten bucks so he gives him a shot of penicillin doesn't do anything with the cold and it complicates things it makes his condition worse because penicillin is dangerous to those people who are allergic it makes a bacteria so that they're not susceptible to the penicillin so it has all kinds of potential complications if you give antibiotics carelessly that's the way it is in the economy you know if you keep your hands off things will solve the problems as well and it takes a good doctor who can say but you need to go home and take a rest and just let things be you know and we don't need to be interfering with you but today I'm afraid really what we face is the crisis soon if the unemployment rates jumps to 10 11 12% is the Federal Reserve gonna be say tight you know and are they gonna turn of money supply loose and what will happen to the unemployment benefits what will happen to all those programs our side is still too weak and that's why the efforts that have to be made in the educational field I think can't be under emphasized I don't feel secure that we have done all the work necessary educationally and we have to popularize them even though it is true that a movement only needs three or four percent of the people totally dedicated and understanding it you still have to have a consensus of the people not to fear what you're doing and be convinced that you're right and you have to be leading the way in a conventional sense with the media and the government and people getting up and standing up and leading so that people do not panic and that's what we need we need time I believe if we had a monetary and economic catastrophe tomorrow the next day or the next year the net result would be negative I think that we would lose more freedoms but I believe that if we had some more time the chances would be much better that the groundwork will be done in that we can impose change if we can get the people to understand that a price probably will have to be paid I haven't bought the argument that there will be no price to pay for the unwise spending of the 50 years and the unwise inflation if it were so easy to go from where we are and say that we can wave a magic wand and don't worry about deficits deficits don't matter and all this and say that we can go to a gold standard interest rates are going to come down everything's gonna be alright you know that's the best argument I've ever heard for 50 years of inflation and I'd do that I'd go for 50 years of inflation if we can switch our direction and there's no penalty pay now that's the tough part who's going to bring it on and say yes this is it and we must do it but I'm optimistic to think that we're in better shape than we were the movement certainly is growing for those who believe in individual liberty and that it has to be kept going but I believe it's that we're at a critical stage and I believe in the next few years you're going to see the results that's just hope and pray that we don't have a international or a national catastrophe that sets us back so to me it's most important that groups like the council for competitive economy are encouraged and and continue to be supported they need to help they are effective congressman by the way rich are very very much aware of ratings you get some respectability and they hear about this and they don't like to be rated low you know that's bad so keep it up do two or three a year or something keep after I'm telling they rate lousy and send it to their district or something you know but they don't like to be rated and if they if they're rated poorly so I think all these things are great and you should be encouraged and and thanked because I'm I'm convinced that groups like this National Taxpayers Union and and others are very very much of a help to me and someday soon we're going to get several more dozen over here that believe the same way thank you very much thank you congressman Paul our policy whenever possible is to not let people go away without having the chance to ask a few questions so if you don't mind we'll take a few if you've got it question yes sir ron ball and others who respect but the console for competitive economy stands for the government and we have language barriers because of the influx of many foreign elements into our country that don't know what the legitimate functions of government or free society really are and we must depend on those people that have platforms a lot so you can tell them or to come to an audience of people that this kind of association so that we can further down to the mentality of absorption for the electorate with one man one vote because that's what puts you in office and keeps you there and once you get off the way to the practice of medicine your life's work and get into another vocational activity of a forgotten country and then in order to sleep on a pillow step for the better to make their conscience not necessarily the politician for the statesman you don't want to evade the truth if you want to speak it which makes a difference between the politician and the statesman who'd rather die for cause than to sell their soul to the country's store and because he couldn't live with it and I think that this country has been based on my principles and I don't see why they like to view it any time or any one of your kind would have to do that now what are your potentials and what is your thinking this kind of political action to preserve a competitive economy because freedom follows a free market like life today and when the economy is free we can retain those nice things and you're thinking along in terms of what am I going to do outside the legislative realm and what can I all right well I don't know if I understand the question completely but I think that that is part of the part of the responsibility and the obligation I have is to continue to communicate with these people and anybody and everybody else that I can for them to understand you know what what the issue is all about and what the philosophy is all about but I think this is done differently by everybody no I don't oh well there are some Spanish speaking people but uh I don't speak Spanish I have enough trouble understanding this all in English you know we're going to a gold standard in other words if Reagan woke up tomorrow morning and was convinced that this was the only thing to do what what is the procedure there are different procedures I have one that is proposed in the form of legislation and it would essentially say that there would be no more monetization of debt the government would live within their means and the Federal Reserve note would be redeemed at a market value of gold set in one year and the government would get out of the business of monetizing debt completely and totally and their budget would be balanced and but there are various other forms and this is a difficult question I I don't know the the the very best because matter of fact today I was talking with Murray Rothbard on this very subject and he has some questions in his mind too and I respect him as being one of the brightest free market economists and his proposal is that that you set a price of gold very very high so that you don't have to worry about you know deflation a few times in the past they've set the price low like in England in the 20s and it didn't last so he suggests that it that it be set high by the government rather than the market and I think all these different considerations have to be considered but that should be what we're really debating you know in the gold commission rather than monetarism is what we drifted into the spouse free enterprise and I'll put the word free in quotes are also those who seek subsidies protection tariffs what have you wouldn't competitive enterprise really be a better term to use well I'd be I'd be very favorable to that term matter of fact it's rarely that I use the word free enterprise or laissez-faire laissez-faire connotes a lot of negativism and free enterprise sort of is a word that people get turned off with competitive enterprise tells you a little bit more I usually use them you know the word the market economy the free market but I think a competitive economy is exactly what we're looking for I've been an activist in politics since maybe 76 and the biggest kitchen coffee table debate is where is the constituency and this has been a constant subject of discussion my my my friends in the last five years in your opinion looking at the diversity of this group is as an example if you were going out to find the market for these ideas okay where do you think the most important places are to sell the ideas that what's the most fertile ground are you talking about uh in a political sense or in an educational sense in a political sense there's no answer because the number one reason why I think I'm in congress is that the majority of the people of the district trusted me so your constituency is every place and that I cared about a working man as much as I cared about a businessman's profit my rating went down in the nasa area which was real republican I still got 62 that's pretty good I could have gotten maybe 70 if I'd played played all their games but the labor district my vote went up not because I was a champion of labor unions but because they trusted me and they thought I cared about what was happening to their pocketbook with inflation you know they didn't understand the belt so the constituency is every place so I would never narrow it down and narrow somebody's targets down it's to be broad-based and and go after everybody and depends of course whether you're being you're approaching it as a democrat versus a republican versus libertarian you know it just depends so much on on the political approach in the group but you don't you don't decide well there's a free market people that we reject the bankers you know there's a lot of a lot of people in the banking business that believe in sound money you know and that you don't reject it and I think that's what I do sometimes I get careless and sometimes I get to the point where I figure well most businessmen uh aren't free market well that's wrong most businessmen aren't good free market people and all they want is a chance because the small businessmen the ones they give the bad uh reputation of the international people who are in trade and one tariffs and are can bid up the contracts but that's a small number of people I mean there are three big companies that needed to port dug deep and in consent political consensus of everybody was that was the key to all the votes in my hometown and yet my vote went up in that district and I I didn't raise a finger to do anything to get more federal money into the district so uh I think there's a misperception I think that the constituency is every place and you should address that but you have to recognize that that eventual vote isn't going to come because uh because I had this uh very definite viewpoint on liberty the last 30 years there's been in my view an unfortunate association of a free enterprise philosophy with uh militarism and foreign interventionism do you see this changing at all the uh changing away from the association of a of a of a of the so-called free market and militarism uh no I would say it's probably uh being enhanced uh in the last uh years um that again I think is uh information needs to be out we don't have any one major group uh we have a group maybe talking about a competitive economy and somebody talking about gold and somebody talking about taxes but how many groups uh uh non-tax foundations who are dedicated to uh uh working for a non uh interventionist foreign policy I would uh I don't know of of any uh educational group that way but uh I know one thing that if you want to talk about a good subject with average conservative republicans I can get them applauding every time about do you think it's time we ought to quit paying for the defense of Japan when they take the money and give it to their car companies you know they're sick of it they say oh is that right I said yeah you want me to spend you want to know why I don't spend vote for all those military budgets then they understand it they never get it offered so I would say there's a there is a source or there is a some a vacuum that could be filled by a group that would promote that because I think the American people are basically ready more so than ever yes after the war Europe was torn up we were wealthy give them a couple bucks you know just because we're eventually going to destroy the dollar they can't see all that but now the dollar's destroyed and they're broke they can't buy a house they can't buy a car and you know they want something done so they're they're ready for that and uh when you tell them that you know you're spending more money and you're getting less defense you're not even getting any defense price is getting a contract for tanks that don't work you know and uh it's getting worse and do you feel any more secure because you have tanks that don't work that you're going to send to Europe do you feel more secure because we're building bombs that the Germans won't let us put over there where they're supposed to be you know it's it's just a ridiculous struggle do you feel more secure because we're going to send three billion dollars worth of weapons to Pakistan so they can fight India why don't you want to give a waxes to Saudi Arabia Saudi Arabia well because I don't want the f-15s that we gave to Israel to shoot them down you know it goes on and on so dr paul one theme that i've detected in your comment about your success in the last election the fact that people trust you i know that you've used the ethical perspective but on the free market arguing that it's not just efficient but it's morally correct and we are at the council for a competitive economy have stressed that in our work in congress because we know that when businessmen go to a congressman and say well we go along to get along and vote for us and pay you off how do you see your success as it relates to the use of the ethical argument by congressmen to argue that the free market is right regardless of whether it helps my district do you think congressmen can be persuaded to go that direction not very often unfortunately i don't think that means you should not keep pursuing it and maybe they will accept that as a legitimate argument but i've made this statement i hope someday this is going to be an incorrect statement but the weakest argument in a committee hearing is to use a moral or a constitutional argument i that doesn't carry much weight pragmatism is the only thing what's it going to do you know they'll have things like a housing bill coming up and there's an amendment proposed well the person proposing the amendment will then have a sheet of paper just like that that goes out and they'll have it broken down by the computer what it means to texas what it means to houston what it means to district 22 what it means that's you know that's the thing that carries the weight uh is that pragmatic argument under that circumstance now if uh if they want to vote a certain way and they know you have a moral argument they'll love it and they'll use it but they'll be hypocritical about it uh there are some of the worst anti-constitutional congressmen over there who love to recite to congress because they happen to be right say on the draft and they will you know champion that and i think that's that association that sometimes they desire to have with me when i happen to be in their corner but they don't really care about an overall concept of the constitution and really uh defend the constitution down the line but when it's beneficial to them they'll recite the constitution or a moral argument but i think it should be continued to be used and i think as there's a transition up here uh and we'll get new people and uh they'll be more reasonable i'm afraid our time has run out and thank you very much i enjoyed it thank you very much congressman paul your comments about uh penicillin case and uh bob's talking about the solving economic problems through the marketplace remind me that my philosophy in the economy a political economy through the council is the same as my father who has been a physician for 45 years and i asked him one time what his secret was and he said that very early in his career he learned that most people would get better if he didn't do something to kill him and i think that's it thank you all very much for coming we've had a very successful conference thank you


Hello everyone, and thanks for joining us to our Open Infra-Live episode. This is our weekly one-hour live meeting where we discuss, share and talk about all the greatest updates from the Open Infrastructure community. My name is Samuel Ortiz. I worked at Apple. And I'm also a Cata containers architecture committee member. And as a matter of fact, today we're going to talk about Cata container use cases.  We have Peng Tao from the ANG Group. We also have Ubertus Franke from IBM, Brent Olligworth from AMD, and Xiaobao Feng from Huawei. Just so everyone knows, we will save some time at the end of this episode for Q&A. So feel free to drop questions in the comments section throughout the show, and we'll try to answer as many as possible at the end of the session. Alright, so Cata container use cases. Before we actually go into those use cases, I'd like to very quickly give you an update of the Cata container project. Alright, so what's new with Cata? Well, even before going with the next release, I'd like to give you a quick refresher on the previous one, 2.1.0. Then we'll look at 2.2.0, then the upcoming one, and we'll talk a little bit about two interesting points. The use cases, meetings and discussion that we're currently having, and the new stable branch measurement model that we're trying to follow with the project. Alright, so 2.1.0. If we can go to the next slide, yes, thank you. Yeah, 2.1.0 is the last official Cata container release. It was released on May 15th with a few interesting features. The Cata agent that's running inside the Cata continuous guest is now asynchronous, so it gives us improved performance, better IO utilization, and better resource utilization in general. We also decided that Cata deploy will be our main way of deploying and distributing Cata containers. As for tracing, and tracing is a very important part of Cata containers in order to follow the bug and look at what's happening among all the different pieces of the project. On tracing, we went from open tracing to open telemetry. We also improved the direct device assignment, also called a device pass-through, and we added support for IPv6, and also a virtual IOMM, which is a very interesting way of doing memory hotplug and hothuntplug. And last but not least, as we released 2.1.0, we officially deprecated Cata 1.x, the very first series of Cata continuous release. So thanks for all the fish, Cata 1.x, and Long Live 2.1. Cata 2.0.0 is the next Cata continuous minor release. It's scheduled for August 6th, but I think it may be delayed by one week. This is something that we're currently discussing in the Cata continuous architecture committee meetings. There are public every week on Tuesday at 3pm UTC. So if you want to join and discuss this, feel free to join on the meeting and discuss with the rest of the committee. So it's scheduled for August 6th, maybe delayed by week. And with the 2.2.0, we're going to see a few interesting new features. First of all, we work quite a bit on the stabilization of the CI. And it's kind of a hidden feature for end users, but for the community, it's a key feature because it's basically kind of telling us if the development... It's really helping development and accelerating development if the CI can be reduced and stabilized and so on. So PRs can get merged much, much quicker as we stabilize CI. We also continued working on tracing. We've seen a lot of improvement, stabilization. There's been a lot of discussion upstream on tracing. And so this is moving forward in a very nice way. We added a feature for watching volumes and monpoints and kind of being able to detect from the guest if the stone fires are changing on the mounted volumes and monpoints. And this is a very important feature for some production use cases. And also we moved the machine type for one of the app providers that we support with Kata containers, QMU. We moved it from the PC machine type to a more modern one, which is Q35. So that's for 2.2.0. Then we also started to look at a simplified release management. So we're now going to have a different release cadence. We're going to do a new release candidate for either the next major or minor release every three weeks. So this is a fixed cadence. So every three weeks, depending on if we decide to go with a major or minor release, we'll have a new release candidate. And then we do a one minor release every 12 weeks. So 2.2 would be released and 2.3, if everything goes fine, should come 12 weeks after that. And also we decided to simplify the way we handle stable branches. We used to maintain at least two stable branches. We now move to something simpler and actually more pragmatic and that maps more closely to what people do in production. Which is basically maintaining one stable branch. We only need one stable branch. And the stable branch is basically going to track the previous minor or major release depending on what the last one was. But this is going to be what our stable unique branch is going to track from now. And the last point I want to talk about before we go into the use case discussion with our guests are actually the data container use case meetings that we are currently holding on a weekly basis. So we looked at a few different interesting streams that are mapping to production use cases either deployed today or that people are trying to deploy or are interested to deploy in production. And we kind of narrow it down to two interesting use cases. The first one is performance isolation. And in this weekly meeting we're trying to discuss, present and look at the best practices for kind of keeping Cata containers in production, keeping the resources overhead that Cata containers bring and the noisiness keeping all of these constrained and making it as seamless as possible as far as capacity and resource consumption is concerned when people run Cata in production. And the next use case meeting that we're holding also on a weekly basis and feel free to ask at the end of the conversation, at the end of the session or reach one of us in the community to get the data on how to join those meetings. But the last one, the other use case meeting that we're holding is the confidential containers meeting where it's a cross industry meeting with the budget folks from IBM, from AMD, from Intel, Apple and Talibaba. It's a very interesting use case. I encourage everyone to join and join your discussions. Essentially, we're trying to build a complete end-to-end stack for running confidential computing workloads with Cata containers. And I've all of these integrated with Kubernetes so that people can essentially take a container image and run that through confidential computing. So yeah, that's it for the updates. I think we can now move to the actual use case presentation. I'd like to welcome Peng Tao from the end group. Peng, welcome. The stage is yours. Hi, thank you. Thank you, Sameer. Can you show my slides? We can see your slides. Go ahead. Okay, thank you. My name is Tao Peng from the end group and I'm a staff engineer in the end group. And I'm also a member of the Cata architecture community. Today I will talk about why we use Cata containers in the end group and how we use it in the end group. And also the key point we are actively working on on Cata containers, which is the Cata containers performance isolation. As mentioned, SMU will have a small working group to focus on the end topic. Can we move to the next slide? Okay, so why we use Cata containers? The most obvious reason is that we do not want to share a host kernel with different ports. So in one case, if a port has some bug and triggers a kernel panic, it will panic the entire host and affect all the ports on the same host. And another thing is even if it doesn't panic their host, it can panic itself. The application panic goes out of memory all the time. And all these scenarios will affect the containers, the ports on the same host. And we do not like different applications, different services to affect each other in our environment. So that's the reason. Can you move to the next slide? Okay, thank you. Another reason is performance-sharer. When we run different containers with a normal container, we will have to share many kernel resources such as kernel objects and different kernel streets. All these kernel resources are a point of debtors. So when we run different services on the same host, they will affect each other's performance. And as you know, we are an online internet company and we do online payment transactions all the time. And in these transactions, we do time generator. And RPCS run chip is very critical in our use case. And when we share the kernel objects with different ports, we will get higher performance generator and it ends up during our online service performance. So that's another reason that we do not want to run containers in the normal RPC container way. So can you move to the next slide? Okay, thank you. So our solution is to run cata containers. With cata containers, even if we still share the same host kernel, we have a hypervisor layer and we run different cata ports in different guest OASs. And then when one guest panics, it will not affect the other ports on the same host. Also with this guest OAS level isolation, we no longer share a lot of host kernel 3s on the host and our service performance is much more stable with cata. So can you move to the next one? Thank you. So in our group, with cata containers and many other technologies, we build a trust native infrastructure. Within this infrastructure, we run offline and online services and different jobs. We do our service containers, big data jobs, edge computing and many offline tasks on the same host. And we use cata to isolate them. We still run ccontainers such as since the isolation is not free, we want best performance for the online services. We have to run them still in the traditional ccontainer. But for many other jobs like offline computing and offline services, we do run them in cata containers. And below cata containers, we have container storage and container network all built on top of some open source and internal technologies. Under this stage, we run our infrastructure on top of some Alibaba technologies like Alibaba operating system and there are cloud bare metal services. Can you run? Okay. So just because we run cata is simple. We run different priority tasks. We run high priority tasks still in traditional ccontainer but we put all the low priority tasks in cata containers so that the indoor priority tasks will not affect the performance of their high priority tasks. Next slide. Thank you. So with that in mind, we still use cata containers the same way as the option cata containers. So we run a cata monitor demo. It will monitor all the cata containers with two processes. And then the same way to process it will expose all the cata metrics to cata monitor and this will be projected to permissions and we can do more analysis on permissions. So this is... Sorry. Okay. Go next slide. Next slide. So with our event, we still use another technology we call a net-ass image acceleration service. So the permit to serve with ZAT is when we start a container a lot of time is used to pour the container image and we create an open source project and the... And put it in a C&C of Stringerfly project. There's a link to it. It's called an image service and we call it... We name it a net-ass. And it's your specified system and it can... We can pour image very quickly and download all the image data on demand later. Then net-ass expose both fields but how it supports. So we run both traditional 1c container and also cata containers on top of net-ass. So can you go next slide? Okay. So with our use case, the most interesting topic we would like to see in the cata community is performance isolation. So we are having the weekly performance isolation meeting to look into how we can isolate different tasks with cata container. So right now we look into it in different angle. For the network part, we look into how we can direct assign a NIC with password capability. We kind of use a customized C&I to do it right now. And we'd like to see... to implement it in the cata community as well. Also we use block device password with customized CSI. And we are working with Eric from Apple to get an upstream implementation for this capability as well. For CPU isolation, we are looking at the mixture of CPU set and CPU share on the same host. And also for memory, we are looking at how we can use NUMA and RBT on the same node. So we're coming to join our weekly community performance isolation use case meeting if you are also interested in this topic. So that's all for my session. Let's welcome Brent and Herbert. Nick from IBM. Yes, next we have Brent Folliwod from AMD and Berges from IBM. Welcome to the stage and the show. And I think you're going to have some very interesting bits to share. Go ahead, please. Thank you, Samuel. Yeah, great to be here. Okay, this is kind of a fun picture. This actually sits behind me on my shelf somewhere. It's an interesting point in time. So this is all public record. May 6, 2015, AMD changed from the New York Stock Exchange to the NASDAQ. I actually had the opportunity to go and to ring the opening bell. What's not public record is what happened the day after that. And of course the day after that, I was on Wall Street. We were having meetings with various financial services companies and really coming to a deep understanding of a specific problem that they have, which is this. Many of these companies, and I'm talking about regulated industries, financial health, defense, they have to significantly over provision because at month end, when they need to run transaction processing, when they need to run burst transactions, it actually becomes very, very difficult for them to find any sort of opportunity to share their hosting, share the compute that they're doing. They tend to operate inside data centers that look like prisons and are highly siloed. So that's sort of the start of my team's interaction with confidential computing. John Hollingsworth, I'm a senior manager in our AMD Epic Software Ecosystem team. I lead a group that works with open source partners. We've got the Linux distros, the container orchestration, the libraries, tool security compilers as well. But we have been on a journey for the last seven, eight years to figure out how to solve that problem. This is a fantastic case study as well. Most of you may be familiar with this. I'll invite you to read it. Normally, I don't do that in a presentation, but this one's worth actually going through and parsing the text. Trend Micro runs a zero-day initiative, phone-to-own competition, and they have a virtual machine escape category. Think, go into a conference room. They set up a hypervisor, put a secret on the hypervisor, and then allow people to connect as guests and see if they can break in. This competition was famous because in 2019, the team Flora Acetate was able to win a Tesla Model 3 by successfully exploding the security on it. And hopefully you've read this. I love doing this presentation in person because typically somebody gasps audibly when they understand what this is actually saying. And so I'll play it backwards for you. Essentially, they set up this hypervisor, they gave the team's access to a guest, and the successful team was able to set up a website ahead of time, open their website inside Microsoft Edge, exploit a bug in Edge to break out of Windows 10, exploit a bug in Windows 10 to break out of Windows 10, exploit a bug in VMware to break out and completely control the machine. No software installation and essentially all configured ahead of time. It's horrifying. You think about what happens when bugs like this are discovered. Microsoft, of course, patches the bug. VMware is going to patch the bug. And Flora Acetate in 2019 did the exact same thing again. Still the same website configured ahead of time. It's terrifying that this is entirely possible. And so sometime around March 2017, I started building demos, talking to partners. We're looking at the challenge that we've got. And along the same time, AMD came out with a memory encryption technology called SEV. In 2018 was our first implementation that went upstream into the Linux kernel and very shortly afterward, we had a prototype of Cata in GitHub. It's been something that we've been engaged in. We've been looking at. We've been kicking the tires on for the entire time that we've been working upstream inside this SEV project. I'm excited to be here with Hubertus. IBM and AMD, it's public since 2020, have been working together to figure out how we improve our security with specifically regard to container, working together on the container project that's the Cata container. Hubertus, say hello. I guess I give your introduction as well and we'll dive in from there. Okay, cool. I'm Hubertus Franck. I'm in research. I lead a team here on confidential computing, in particular integration into the cloud and integration into the cloud run times. And just as Brandt and Peng already mentioned, I mean the main thing is the customer has to have absolute trust in what that data is not being exposed, right? In particular, as we're going into regulated environments, governments are putting stricter rules, for instance, on health data in place. We have to be able to ascertain that the hypervisor as an example, although it can get access to the data, sees no value in it. That means encryption is a key point as Brandt was presenting a key point for us to basically marry the confidential or the container-based workloads with effectively the technologies that are coming out like AMD, SAP. Back to you, Brandt. Awesome. Thanks. So a couple of thoughts. The questions that we got coming into the podcast here, why are we doing this? What are we looking for? What's interesting? How can the Cata community help? So, Aaron, thank you for grabbing this slide. This is an interesting place to drive the conversation. We often talk about three pillars of security, being, of course, confidentiality that only I can read my data. Integrity protection is the idea that only I can modify my data, right? If I'm borrowing a machine from Hubertus, I don't want him as administrator or as root being able to read what I'm doing or modify it in any way. And, of course, attestation is this idea that I can prove it. And then we talk about the three states of data. We've got data that's in flight. Most often, that's network, as we're talking about it. We've got data at rest. Most often, that's the disk. And then data in use. The three states of data, the data in flight and data in rest, these are fairly well understood, fairly well solved problems. It's the data in use one that's specifically a challenge. And one of the things that I find really exciting about the Cata Container Project and Samuel mentioned this earlier, right? A complete end-to-end stack for putting these pieces together. So, Aaron, let's take a look at the next slide. This is really my motivation here. So, this is an interesting example. This is, of course, the Chrome browser. It's possible this is Firefox, actually. But I've gone to amd.com and, of course, I have the wonderful little lock symbol that has become ubiquitous. People understand that now. You know, even my grandmother can go on to a website and look and see if there's a lock to figure out whether or not she's secure. Of course, if you click on that, you're going to get a reporting of the certificates that were used for attestation. And so, it starts with attestation and it works backwards, right? I've got a certificate. I've got it signed by a trusted authority. I know that I trust that authority. I can look at the set of algorithms that were used to encrypt my transaction. I know that a man in the middle can't read that data. I know that they can't modify it without me finding out about it. And so, I know that I have confidentiality, I have integrity, and I have attestation. The thing that's exciting for me, specifically about the Cata Container Project, is I see leadership in the ability to do this in a way that's going to actually flow through to the end user. And so, with this 2018 prototype that we've had in place, and with the SEV technology, it's been possible for us to offer confidentiality. Meaning, you could just turn it on and the containers would run in an encrypted mode. We're currently in the process of investing in Cata containers. We're working with the community. We're working with folks like IBM to go do all the other things as well. And it's critical that in the next couple of years, we've got the ability to build an infrastructure that can do all of this, as well as participate in things like the Confidential Computing Consortium that helps us understand how to flow this through to the end user. We need for everybody to be able to run in a secure mode. And just like the lock screen that's on your web browser, be able to see that you're actually implementing a completely secure stack. Hubert, just comments, or what else would you like to add there? Yeah, so there's some interesting new developments, right, that our teams are working on. Samuel is aware of those, right? Particularly, you want to also bridge between the storage and the network and the memory, so to speak, right? And one of the things that I think the community is very receptive from is if you, for instance, think about, as a use case, the clients effectively would like to have their own kernel image, as an example, right, and their own VM image. Today, that's basically still governed, so to speak, by the Kata community, right? But at the end of the day, if, for instance, the client would like to have their own VM, such as a micro-VM, to drive down the image size and things like that, we want to make sure that we're going to bring in the technologies like encrypted boot inside the VM itself, right? And that actually creates quite some challenges, right? Because we need to effectively make sure that the boot image itself is not visible to the host itself, right? And so by building, for instance, the VM coupled with the SAP technology, we are creating the enclave. And so many of the technologies that we know how to do from the VM perspective, we want to now also bring into the Kata community. And that's exactly where the confidential container initiatives is going to be. Thank you. All right, I think last slide. This is just interesting to offer as SEV roadmap from an AMD perspective. All of these technologies are public and available. Again, speaking specifically about the ability to do confidentiality and integrity protection, and when you look across the roadmap, we now offer technologies that will do confidentiality and integrity protection for memory, for registers, for cache. We're very excited about the roadmap. Of course, there's a Linux project that's terribly interesting to go work on SNP. And we're excited about the technology that we're offering here. I think that's close to the end of our time. Where does any other final comments, and then we can probably wrap it up.  Very good. Thanks. Awesome. Thanks, guys. Hey, thanks a lot, Brent. Thanks a lot to Bertos. It was very interesting. And as a matter of fact, we're really much involved with the confidential computing for those who are not aware, the upstream code in Kata containers supports memory encryption for a few hardware technologies. SCV is one of them. So a lot of progress on that front in the upstream project. So if you want to join this discussion, we actually have a meeting right after this live session about confidential computing. So yeah, thanks again. This was very interesting. Our next guest is Xiaobao Feng and he's going to talk about how Huawei is using Kata containers. Feng, welcome to the stage. Hello. Hey. Okay. So I'd like to share our deployment of Kata containers on Huawei public cloud service. I'm an engineer working in Huawei cloud and my job is focused on the container runtime. So these are the contents of my presentation. So first I will make a brief introduction on two cloud services. It's container services on the Huawei cloud, the CCI and the CC Turbo. And both of them use Kata containers as the container runtime on the nodes. And then I will go into more detail about the deployment of Kata containers on these two services, including our enhancement of the Kata containers. Okay. Next slide, please. Okay. First, let's take a look at CCI. CCI is short for cloud container instance. I have to say it's the first service Kubernetes service on public cloud. The whole clusters and nodes are managed by the CCI team itself and the customers care nothing about their... They care nothing about the nodes and the global objects. They just create the workloads directly through the Kubernetes API and control commands. And the workloads are built per second based on the running time. So this makes the CCI very suitable for running batch jobs. Actually, most of the CCI customers are running batch jobs like gene computing, AI training, and inferencing. So for better support of these jobs running, we enhanced Kubernetes and Kupelet to better support the networks, storages, and the physical devices like GPU or MPU. So the CCI customers and nodes are managed independently when we started the project. It's managed by the CCI team independently. But now it's evolving to share the same nodes with the ECS service. The ECS service is the Vodal Machine service provided by public cloud. So the secure containers of CCI and the VMs of ECS can now be scheduled on the same cluster or even on the same node that will greatly increase the utilization of the data center. Next slide. So now let's talk about the CCI Turbo. CCI is short for the cloud container engine which is a complete Kubernetes service provided by public cloud. The whole cluster including the nodes and the global objects are managed by the customers themselves. The Turbo here means that it's enhanced version of CCI. Actually the big enhancement of CCI Turbo is that it can manage the physical machines provided by a BMS service on Huawei and can launch cloud containers on it. We have the offload card which is also made by Huawei installed on all of these BMS machines. And the networks and the storages are offloaded to the card which makes a high resource utilization of the host and also it will improve the performance of storages and the networks. Oh sorry, the last slide. So with CataCandenders enables our customers can... Sorry, I think it's the last slides. Sorry, no, no, no. It's the next I think. Yeah, CCI Turbo, yeah. So with CataCandenders enabled our customers can use CCI Turbo as a platform to provide their own SaaS or past services and without the security concern of their run C container. Okay, next slide. Okay. So now let's go into more detail about the Cata deployment on these two services. First let's see how Cata connects the network on Huawei cloud on CCI. This answer is our implementation of CNI, of course Neutron is deployment on the same node of CCI and it costs Neutron to allocate the Neutron port so the IP address is also allocated so there is no overlay network. It also costs the OVS commands to create bridges and the VHOS user port and this OVS is a is a TPTK version so it can create a VHOS user port and then the yarns will add this VHOS user port to the CataCandabox with the network sub commands of Cata Runtime. So with the TPTK enabled the network packets are transmitted through the shared huge page memories between QMU and OVS which makes high bandwidth and low latency for containers a special point here is that the pre-allocated huge pages should be recognized as a locatable memory for Kubernetes as we all know that this is an important parameter for the Kubernetes schedule. We add a feature gate which is called a locator memory from a huge page to Kubernetes. When it is enabled the Kubernetes will convert the huge pages to a locatable memory when reporting to a scheduler and the memory limit on the node will be converted to the huge page. Okay, next slide. The containers running on CCI also have to access the local and remote storages on the cloud so we made support of it. CCI support of local storages differs from other services in that it should ensure IO isolation for each port because ports of multi-tenants may be running on the same node so we enhance COPLIT to support IOPS and BPS limit limitation for each port. For remote storages we implement our own CSI driver to support the CSI driver is called FUSI to support the block storage which is an EVS service on Huawei cloud and NAS which is a server service and object storages. All these storages can be imported directly as a PV to CCI and also the customers can create PVC and CCI can provision the storages and create PV and bind them to the PVC automatically. We also enhance the CATA to support these remote storages. For block storage CSI driver will attach it to the host but rather than mounting it on the host file system COPLIT keeps the password block device as the mount source directly to the CATA runtime. The CATA runtime will recognize the block device source as a block device so it will attach it to the virtual machine via VDIOS SCSI or VDIO BLOCK and the CATA agent will mount the device to the guest file system so it leaves nothing mounted on the host. For NAS and object storage COPLIT will give the UIR directly to CATA and the CATA agent mounts it in the VM and it also leaves nothing mounted on the host too. Many of the CCI ports are running AI jobs so they need the GPU like NVIDIA or MPU which is a Huawei ascent it is made by Huawei and it also supports the AI computing. So they need these physical devices to parallelize and accelerate the computing task. So we implement our own device plugins to support GPU and MPU device in VFI O mode. It can discover the devices through the device ID or an event ID and bind them to the VFI driver and then report them to the Kubernetes scheduler. In CATA we recompire the NVIDIA and the Huawei driver to allow them running on the customized kernel. We prepared all the dynamic libraries of driver installation package in the container file system so everything is prepared and containers just start there TensorFlow or other AI frameworks directly like what they do on the host. And to support the large-scale AI training jobs CCI also made it support NVIDIA link and even a band for customers to build a large training cluster. Okay. So now let's look at the CCTurbo. The CATA-Kanana running on CCTurbo tells more about its memory overhead in a good time because customers are directly aware of them because the clusters are managed by the customers. We need to optimize them. We rewrite the CATA-SHIM V2 in Rust to reduce the RSS of the SHIM process to under 4 megabytes. And we also made our own CUMI micro-VM it's tailored to CUMI to make it lightweight enough. The overhead of CUMI process is reduced from 30 megabytes to 10 megabytes. And the VNPUT time is also optimized to about 100 millisecond. We tailored the guest kernel of CATA based on the OLAOS, which is OLAOS which is a Linux distribution made by Huawei. This also reduced the memory footprint of guest kernel to 30 megabytes. And the kernel startup time is about 30 milliseconds. So after all these optimizations the memory overhead of each port is smaller than 50 megabytes. And the end-to-end startup time of each port is under one second which is basically met our requirement, but further optimization I think should be done. On CCTurbo the CATA containers are running on the physical machines of BMS service as I said. These physical machines provide many physical network devices in the form of VF of SIR-IoV in this to support the ENI. So we make these VF interfaces pass through to the sandbox of CATA via VFIO so loss of network performance is minimized. But Kubernetes surface traffic, Kubernetes surface traffic cannot be directly sent out through these interfaces. So we add an extra VF interface to each port as the channel of Kubernetes surface traffic. CNI will configure the IP tables in the NetNS to redirect the surface traffic. So CATA should sync it to the sandbox. This is also our enhancement of CATA. After doing all these things the network performance of CCTurbo is close to the bare metal machine. So that's all what I want to share. Thank you all. Thanks a lot Feng. It's very interesting to see how we can of all try to fix similar issues in different contexts. Thanks a lot. This is great. I have a few questions for you and for the rest of the audience. But I think we have around 10 minutes left. We can now take questions from the common box. I think one of the first one was about the amount of resource utilization of the lightweight NPM question asked by Gemal. Thanks for asking Gemal. Yes, exactly that one. I'm going to ask Tau, do you have an insight on this one? I know you've been driving the use case meeting for kind of resource isolation and I think this is kind of your turn. So what do you have to say about this? Do you have an insight? Yeah, for number of resource utilization it's actually dependent on the scale of your container size, especially when we look at the memory footprint. We have a very small fixed overhead for each port. But it also scales up with the size of your memory your port memory. I see we can see it also depends on which hypervisor you are using. Yes. You are in a hypervisor or this hypervisor have different resource utilization cost. Yeah, and the bigger the container the overhead of the VMM and the runtime becomes more marginal, obviously. Do you do some sort of sharing of memory between containers? If I'm running like 10 containers running the same image do you do some tricks for sharing memory between those containers? Yeah, in containers the guest is shared or shared with a text technology and all the containers will be used in the same host page cache and instead of consuming any guest page caches. Yeah, and that leads to interesting data when you start comparing the memory conception of Cata containers versus RunC for example where those kind of memory sharing is less possible. You see some interesting data with some containers after some size Cata containers memory overhead is less important than the RunC ones in some cases so that's pretty interesting. What about CPU overhead? CPU overhead of Cata is pretty low because I can see in your use case you already lower than 5% normally it also depends on what kind of workload you are running but normally it's below 5% in some cases the overhead is almost non-dictable. Yeah, especially with encrypted memory then once in the memory sharing it would be out the window because obviously you can't do that anymore, right? You can do these kind of tricks obviously with encrypted memory and computational computing you do not want any of your container memory to be shared with other containers but I guess it's kind of the price to pay for the additional security that you get with okay, thanks a lot thanks a lot for sharing this we had another question on emulation and VMM what kind of emulation do you run QMU so I'm going to answer partly and then ask Feng to chime in as well but we support many VMMs we support QMU obviously we also support Firecracker Cloud Advisor Acorn and essentially we have an architecture where we can potentially extend those to other app advisors but interestingly Feng mentioned about using lightweight QMU or a modified version of QMU I'm interesting to know more about this Feng, is that a fork of QMU or are you using some of the latest and greatest micro-VM machine type for example yeah it's a fork version of QMU and I think it has changed the machine type it has implemented its own machine type and also it also uses the VM Linux instead of the busy image to compress the kernel so it can optimize the boot time and also the machine type is not Q35 so it reduces many memory overhead of it in our environment the memory overhead of the common QMU is about 30 megabytes in the lightweight QMU it's under 10 megabytes and also in Huawei we also made another implement our own a new hypervisor called StrataWord it's also written in Rust and it's more lightweight but we will try it later but now we are using the QMU again so the Hubertus you want to try it? I also want to add in our own experience if you properly configure QMU rather than taking it out of the box binary you can really bring it down to sizes that are familiar with the firecracker and things like that, number one number two there is an effort within the QMU community to be much more modular the moment you start modularity you can effectively analyze and build in terms of virtualization and bring that image down even further and I think the approach to go to the micro VMs is a very important one and I think this effort that we are seeing in the QMU community and also the various initiatives of building new VMMs lightweight VMMs it's kind of been driven more and more is basically driven into KVM so what is left to emulate at the end of the day it's the memory and maybe the keyboard right? Yes, yes and then you build a very very tiny device model in user space and that's how you reduce things definitely thanks a lot for the insight we have a question from someone called Eric Ernst I think I know this guy on the directs blog device storage direct blog device it's a very interesting question I think many users are trying to do the same thing essentially not mounting the blog device on the host but doing the direct mount in the guest sorry and there's some efforts currently going on upstream for supporting that use case Feng, I think you mentioned you were working on this as well can you elaborate can you share if you're also looking at the upstream effort for this or are you aware of this kind of effort? As I know that Cudder containers only recognize the blog device as a device parameter of the container and it won't mount it to the guest directly I think I don't know if the version of the Cudder is too old for me to read I don't know okay another oh yeah go ahead you wanted to add something I just don't quite get the question so do you mean that the Cudder container in the upstream Cudder container already support the blog device mounted on no it doesn't but there's been a few discussions around it and how to do it there was a proposal that was not accepted there's also some efforts for pushing that at the Kubernetes level if I remember correctly to have a more transparent integration I think in our scenario this is more I think it's better for us to mount the blog device to the guest directly yeah I think it's the case for many use cases so people are looking at this we only have a few minutes left I'm going to take the last question from Niels it's cool to see there's several contributions to CADA all those extensions mentioned and made by AMD and why they are fed back in the upstream or do we have to pick this or that solution maybe Brent you want to talk about how AMD is upstreaming their efforts and contributions yeah happy to do that so for quite some time we had a project that was in our own GitHub but now that code is all checked and the mainline CADA project and our intent is to continue to develop that there so you don't have to go grab some sort of a branch that's right the confidential computing contribution for AMD have been merged and so I've been merged with a few other hardware vendors contribution to that effort so it's great to see and make sure that the project supports many different hardware implementation so that's pretty good thanks a lot Brent we only have a couple minutes left I just want to mention that next week we're going to have another episode of the opening for live session and this is pretty exciting we're going to have a few members of the Kubernetes both the Kubernetes Steering Committee and the OpenStack Technical Committee will be joining the episode and answering questions about integration cross project support and how you can keep with the updates on those different projects so this sounds pretty exciting I invite you to join next week episode if you want to hear about this and also if you have IDs for future episodes you can submit your IDs at www.openinfra.live anything is very welcome there I think we're running out of time I'd like to thank all our guests today for joining and participating to this session it was very interesting and thanks a lot for listening take care


Hey Fargo, this is Todd Simonson, Lieutenant Commander, United States Navy Reserve, just saying hi. I'm with Pacific Partnership 2012 aboard the USNS Mercy Hospital ship. We're here in Vietnam doing some good work. Just wanted to say hi to my beautiful wife Peggy, my son Ty, who's a Bat boy for the Red Hawks, my two beautiful daughters, Jada and Esme. Hey, I miss you, I'll see you soon.


Hey everybody Chuck Schumann here with Oxmore Toyota and we're really excited today. We're bringing you to the 2021 RAV4 Prime. Now, this is a brand new car. That's the first one we've seen on our lot It's one of the first in the Cincinnati region and the thing that's cool about this It's a hybrid vehicle, but it's a plug-in hybrid now We do this with the Prius we have a Prius Prime and the benefit is is you can charge this battery the Electric battery you can charge that overnight to get a full charge And then the next day run up to 46 miles just on the electric battery So for most people's commute, which is 20 miles or less you're gonna be running on all electric battery But you still have the full gas battery or gas engine on there as well So your distance is huge if you want to take this thing on vacation This is the way to go if you do an all-electric car You're gonna be stopping having to charge and you know plane it out every 200 and 300 miles or whatever this thing's gonna go a whole lot farther and not just the fuel savings and the You know All of the benefits of that and that comes with that you also have power this has 302 combined horsepower This is the most powerful fastest vehicle we have behind the Supra Zero to 60 the Supra's got it a little bit, but zero to 100 guess what this thing takes over So it's a really cool car. We're really excited about it performance power. It's got Toyota Safety Sense P2.0 Which you know so all your safety features are built in there as well and then the styling you look at this thing This is the supersonic red two-tone with the black roof. It's got the piano keyed side view mirrors the badging all around The special wheels. I really love these wheels and you can only get them on this Prius Prime. This is the XSE I should mention as well and look you got the blacked out badges We've customized this one We were so excited about having one of the first ones that we wanted to do something special with it And let me show you this interior which you're gonna fall in love with That cool stitching very sporty interior like I said, this is the XSE This is the sport version. You've got Apple CarPlay Android Auto Navigations built into this you've got all your connected features as well So you've got safety connect the remote connect where you can start this car lock it and unlock it with Your phone once you're paired up to there on the Toyota app so many cool things that you can do with this And check out this back seat. I want to point something out. This has the cold weather package. So you've got the heated steering wheel you've got the electric Little heater underneath the windshield wipers as well, and you also have intermittent It's automatic windshield wipers. So that cold weather package, but the other cool thing Let me show you if you look right here. You can see That's a button the back seats are heated as well. So you've got that there. So the back seats are heated You don't get that usually on the RAF or just really cool features again more blacked out badging cool little emblem here Very excited about this vehicle and what we're going to do we just got this in literally just got it off the truck So we're going to plug it in let it charge overnight And then we're going to drive it tomorrow tomorrow show you how that feature works go over the different drive modes and the ways You can use this vehicle to maximize not only the you know fuel efficiency of it But also the power and have some fun with it. So that's the RAF for XSE Prime brand new just here on lot here at Oxmore Toyota. We're hoping this doesn't sell tonight We want to give it a chance to charge overnight so we can demonstrate some of the cool features on it But if you do want to come and take a look at this you can visit us at oxmortoyota.com or give us a call at<PHONE_NUMBER>


I'm just trying to catch these goalposts that keep moving So YouTube team keep it clean. What's going on is engraving here with another video and in this video Man same old story same old stuff. Y'all already know the vibes the goalposts continue to be shifted They continue to be moved. They continue to be altered. They continue to be changed They just continue not to stay the same and not to be in the same position When it comes to Lamar Jackson before we get into this team keep it clean I love y'all special shout out to all the team keep it clean Patrons and I saw a lot of questions from subscribers from the team keep it clean patrons So we will be getting to those very very soon. I appreciate y'all Thank you all who came through on a live stream last night We had a lot of fun a lot of stress But a lot of fun and shout out to anybody that actually got to go to the game and were there live and Stayed through the entirety of the game kudos to you. So Of course last night the Ravens and Lamar Jackson. They came back from being down by 19 Mar Jackson's guy end up throwing for 442 yards for touchdowns and had like a 86 completion percentage, which is crazy It's insane. It just it's wild and especially to do that from how the game started If you saw how that game started and how that game was going through the first quarter He'd be like yikes through the second quarter. He'd be like oh yikes through the third quarter. He'd be like oh yikes But then that the late in the third quarter and in the fourth quarter. That's when the Ravens they just start picking it up and shout out to Wildin out because the Ravens they picked up and killed it literally and They never look back that up-tempo offense. They just started moving, but despite all of that It just it wasn't good enough for some people now, you know Twitter is a very dangerous place It's very dangerous place to be at you got a tread lightly when you go to Twitter You got to be very careful and very cautious of where you go when you're in the land of Twitter And today it was no different. I just happened to be scrolling Just having to be checking some stuff out and I entered into Brown's Twitter and This is what I saw So the original tweet was from a guy named Daryl Ruda He said that comeback orchestrated by Lamar Jackson is exactly the type of elite play Brown's fans want to see from Baker Mayfield with games on the line That's the next level for six Baker Mayfield to get to So Here we go. This was this is where it all started So this guy who responded to him I just let him remain nameless He said If it wasn't for a block field goal and a miss field goal the the coats win So wouldn't it be more elite to run up the score on the first half and win in the fourth with the sound running game And not have to rely on the above failed attempts So what he was saying is that The Ravens they should run up the score It would be more elite if the Ravens were to run up the score and then later on in the game Just close it out with a sound running game. That would be a more elite style But wait a minute if I recall the Ravens used to do that kind of stuff They used to do that kind of stuff like every week And then people would say oh these dudes can't play from behind These dudes are terrible. They can't come back from being down They're so used to being to playing with the score is lit up And they so used to being so far ahead of these other teams that they cannot come back They're not built to come back. Remember remember hearing that so many oh Ravens This is not a team that's built to play from behind Remember that I do I know y'all do too But now this guy is saying since the Ravens came back That's not elite. They should have been up and they should have been up big Really? Come on there. All right. So then somebody else Somebody else They followed that up And let's let's listen to what they followed it up with they said Don't forget the Colts only had three cornerbacks left Lamont was not doing anything until the Colts had their third string secondary in And I was like hold up That just made me think Did we where we in we on week five, right? So in order to get to week five, we have to go through weeks one through four but Check this it's 2021 Last year the pandemic was a lot crazier than it is right now So there was something that we didn't have last year. It was called a preseason so This year we had a preseason So in we're in week five in order to get to week five We had to go through weeks one through four But in order to get to weeks one through four We had to go through the preseason and what are they doing the preseason these teams start off with 90 men on their roster 90 men and it's already hard enough for those people to make just a 90 man roster alone, but then But then these teams have to pick the best of the best Only one percent of people even make it in the nfl So these teams they had to pick from the best of the best To go from 90 to 53 men So whether it's a first string player A second string player a third string player a fourth string player a fifth and whatever These are the best of the best In the world In not just on the the best of the best in the world They made it in the nfl and you know how hard that is But again when it comes to Lamar Jackson in this Ravens offense The goalpost will always Continue to be moved And it's going to be something that it's never going to stop And again, like I said You just as a Ravens fan You got to be used to it now. There's some fans That will give credit where credit is due and you got to appreciate them I love it. I love it I like myself to give credit where credit is due. I don't care if it's a browns player still it's y'all already already know I ain't like that For player play is good if a team plays good give them their credit. They deserve it if they do something Well, let's call it out if they do something bad. Let's call it out both ways But not everybody can do that And not everybody is willing to do that which is unfortunate It just I feel like that that takes away from how you view the game because if you view the game as a safe instance Like some of these browns fans Not all browns fans are like that but just these two specifically i'm speaking of if you view the game like them Then you're only gonna view it. Well, okay Browns are the best team in the world and that's it. Nobody else deserves any credit Nobody else plays good.  Oh, man, that boy Baker. That's the guy. That's our guy And Baker's nice. I like Baker Mayfield He's nice good quarterback And if that that would have happened I would have said the same thing But a lot of people just because it's not their own their own team That's not the team that they root for they're like, oh man. It ain't nothing But a lot of people because it's Lamar Jackson Then they like oh no It wasn't even all that Wasn't even impressive. It was against third stringers. He should have been blowing that that team out That's what that's what elite really is So Y'all just keep on watching for them goalposts to continue to go back and forth and back and forth and back and forth and back and forth And while those goalposts keep moving Watch Lamar's game keep rising. We out