Videos Archive - Page 3 of 286

Appearance: HPE Presents at Cloud Field Day 24

Company: HPE

Video Links:

Personnel: Brad Parks, Juden Supapo

In this CFD session, we explore how Hewlett Packard Enterprise (HPE) is transforming the way enterprises provision, manage, and protect hybrid cloud environments with the HPE CloudOps Software suite, comprising HPE Morpheus Enterprise, HPE OpsRamp, and HPE Zerto. Including discussion and live demo of HPE’s orchestration and automation control plane for on-prem technologies like VMware, Nutanix, Microsoft, Red Hat, and public clouds, including AWS, Azure, GCP, Oracle, and more.

HPE addresses the complexities of hybrid cloud environments with its CloudOps portfolio, which includes Morpheus, OpsRamp, and Zerto. Morpheus focuses on delivering self-service capabilities for provisioning VMs, containers, and application stacks across various environments, offering a unified catalog of services, a comprehensive API, a Terraform provider, and a ServiceNow plugin. It provides consistency in the provisioning experience and automates the dependencies involved, such as IP address assignment, DNS entries, Ansible scripts, observability agent installation, backup job creation, and cost allocation. Morpheus also includes a built-in cluster management engine for provisioning Kubernetes clusters and offers a KVM stack, now delivered as Morpheus VM Essentials, to provide core hypervisor capabilities.

OpsRamp is geared towards day two and beyond operations, focusing on observability and monitoring of infrastructure. It offers hybrid discovery, observability, and monitoring capabilities across compute, network, storage, virtualization, and containerization, supporting various cloud platforms and providing a unified view of the infrastructure. OpsRamp aims to correlate alerts, identify root causes, and integrate with ITSM platforms for incident management, as well as enabling intelligent automation for remediation. The platform’s architecture involves deploying OpsRamp gateways for on-prem infrastructure and using agents for servers, providing active monitoring and automation capabilities, with plans to incorporate user experience monitoring.

The integration between Morpheus and OpsRamp enables combined day-zero/one and day-two operations, with Morpheus handling provisioning and OpsRamp focusing on monitoring and management post-deployment. The two platforms can be linked to trigger operational workflows for remediation and present observability data within the Morpheus UI. Both platforms emphasize automation, API-driven approaches, and integration with existing tools and workflows, facilitating a unified and streamlined experience for managing hybrid cloud environments. Policies around tagging and access control were also discussed as essential features to support.

HPE’s Hybrid Cloud Strategy & Portfolio Overview

Appearance: HPE Presents at Cloud Field Day 24

Company: HPE

Video Links:

Vimeo: HPE’s Hybrid Cloud Strategy & Portfolio Overview
YouTube: HPE’s Hybrid Cloud Strategy & Portfolio Overview

Personnel: Brad Parks

Brad Park from HPE opens by outlining the company’s hybrid cloud strategy and portfolio, emphasizing the importance of achieving a cloud operating model for AI and other initiatives. He highlights the challenges posed by technical debt and the complexities of heterogeneous enterprise environments. The goal is to address these complexities with solutions that transcend individual tech stacks, focusing on provisioning, governance, security policy, and FinOps at a broader level.

The HPE portfolio is presented as a “Fantastic Four” analogy, with GreenLake as the unifying leader, providing a platform for accessing various HPE services through a single pane of glass. The CloudOps Suite is introduced as the software control plane, comprising Morpheus for self-service provisioning and lifecycle management, OpsRamp for observability and reducing mean time to resolution, and Zerto for cyber resiliency and data recovery. This suite aims to manage the lifecycle of application workloads across any cloud, hypervisor, or hardware profile.

Beyond the core components, HPE offers a private cloud portfolio with pre-engineered turnkey systems and flexible options, leveraging the CloudOps Suite. The ultimate goal is to help customers achieve a modern cloud operating model, improve efficiency, and accelerate time to value for both traditional and AI workloads. HPE is also working on integrating these services, building on existing integrations, and enabling use cases like automated database deployment with cost optimization. The placement of Zerto under the CloudOps suite is explained by its focus on protecting workloads, which exist across different environments and technologies, rather than being tied to specific storage types.

Protecting the Keys to the Kingdom with Fortinet

Appearance: Fortinet Presents at Cloud Field Day 24

Company: Fortinet

Video Links:

Vimeo: Protecting the Keys to the Kingdom with Fortinet
YouTube: Protecting the Keys to the Kingdom with Fortinet

Personnel: Derrick Gooch, Julian Petersohn, Srija Allam

The Three Pillars of Fortinet AI Security: Protect from AI, Assist with AI, and Secure AI. This demonstration illustrates how Fortinet combines AI-driven analytics for SOC assistance with deep protection for AI workloads themselves. Showcasing a simulated attack on a cloud-based e-commerce application powered by an AI chatbot, and highlighting vulnerabilities that can be exploited through prompt injection and server-side request forgery (SSRF). Julian, acting as the attacker, successfully gains access to AWS metadata, steals credentials, and manipulates the chatbot to respond in “ducky language” by injecting malicious content into the S3 bucket storing review data. The attack demonstrated how an attacker could exploit hidden or overlooked API features, underscoring the importance of input sanitization and proper configuration of cloud resources.

Srija then demonstrates Fortinet’s web application firewall (FortiWeb) capabilities in mitigating SSRF attacks through input validation and parameter filtering. By creating rules to block requests originating from local or auto-configuration IPs, FortiWeb successfully prevents Julian from obtaining a new token. Derek showcases FortiCNAP’s ability to monitor API calls, detect malicious activity based on IP address geolocation, and identify misconfigured roles with excessive entitlements.

Finally, Derek initiates an automated remediation workflow using FortiSOAR, triggered by the detection of malicious activity. The workflow cleans the malicious file from the S3 bucket, blocks access from the attacker’s IP address, and revokes the temporary credentials, showcasing a comprehensive approach to threat detection, response, and remediation in a cloud environment. The presentation concludes by reinforcing the importance of a layered security approach that combines preventive measures, monitoring, and automated responses to protect AI-powered applications and cloud infrastructure.

AI Powered Web Application Protection with Fortinet

Appearance: Fortinet Presents at Cloud Field Day 24

Company: Fortinet

Video Links:

Vimeo: AI Powered Web Application Protection with Fortinet
YouTube: AI Powered Web Application Protection with Fortinet

Personnel: Derrick Gooch, Julian Petersohn, Srija Allam

Fortinet’s approach to securing AI workloads involves a layered defense strategy. Their presentation at Cloud Field Day 24 demonstrated SQL injection (SQLi), Server-Side Request Forgery (SSRF), and model manipulation attacks against an AI-powered application using the Model Context Protocol (MCP), showcasing how Fortinet solutions protect at each stage of the attack kill chain. The demonstration highlighted the vulnerabilities introduced by AI agents and the importance of securing this new attack surface.

The presented environment, deployed in AWS as microservices, features a vulnerable e-commerce application (“Juice Shop”) augmented with an AI chatbot. Traffic between VPCs is routed through a security services VPC, where FortiWeb (web application firewall) and FortiGate provide inspection. The attack flow involves a user interacting with the chatbot, which then communicates with a large language model (OpenAI) via MCP. This interaction exposes vulnerabilities, as demonstrated by an attacker successfully injecting SQL code through the chatbot interface, bypassing traditional web application firewall protections.

Fortinet demonstrated how FortiWeb’s machine learning capabilities can detect and mitigate these attacks. By learning normal application traffic and building a model of expected API behavior, FortiWeb can identify anomalous requests, such as SQL injection attempts. The system then evaluates these alerts, leveraging its threat intelligence database to determine appropriate actions, including blocking malicious requests. Furthermore, FortiWeb’s AI assistant provides detailed analysis of attacks, including remediation recommendations, and generates API documentation to keep up with rapidly evolving pre-built APIs.

Defending Cloud AI Applications with Fortinet

Appearance: Fortinet Presents at Cloud Field Day 24

Company: Fortinet

Video Links:

Vimeo: Defending Cloud AI Applications with Fortinet
YouTube: Defending Cloud AI Applications with Fortinet

Personnel: Aidan Walden

The scalability, GPU access, and managed services of public cloud make it the natural platform for developing and deploying AI and LLM-based applications—and why this changes the architecture of security itself. Fortinet is focusing on securing AI applications in the cloud, a topic that dominates its conversations with customers. They emphasize the cloud’s unique ability to provide the scalability needed to run GPUs and TPUs, simplifying deployment and accelerating the development of agentic services. They are seeing increased reports of model theft and prompt injection attacks, alongside traditional hygiene issues like misconfigurations and stolen credentials, highlighting the growing need for robust security measures in cloud-based AI deployments.

Fortinet’s approach involves a layered security strategy that incorporates tools such as FortiOS for zero-trust access and continuous posture assessment, FortiCNAP for vulnerability scanning throughout the AI workload lifecycle, and FortiWeb for web application and API protection. FortiWeb uses machine learning to detect anomalous activities and sanitize LLM user input, addressing the OWASP Top 10 threats to LLMs. The company also highlights the importance of data protection, implementing data leak prevention measures on endpoints and in-line to control access to sensitive data and training data.

The presentation outlines a demo environment showcasing a segmented network with standard security measures in place. Fortinet will inspect both north-south and east-west traffic between nodes, monitoring the environment with FortiCNAP. The demo will demonstrate how a combination of old and new attacks, such as SQL injection escalating into SSRF and model corruption, can compromise AI applications. The aim is to highlight the importance of securing access, implementing robust data protection measures, and maintaining vigilance against evolving AI-specific threats.

Where are we going with Oxide Computer Integrations

Video Links:

Vimeo: Where are we going with Oxide Computer Integrations
YouTube: Where are we going with Oxide Computer Integrations

Personnel: Matthew Sanabria

Matthew Sanabria focuses on future integrations for the Oxide Computer Company, aiming to expand its capabilities and make it a more attractive choice for customers. These integrations include a Kubernetes CSI plugin to enable Oxide storage with Kubernetes, the Kubernetes Cluster API to create clusters across different platforms using Kubernetes, and observability enhancements. The goal is to provide a comprehensive platform that integrates seamlessly with existing infrastructure and tools.

A key component of the future integrations is centered around observability. Oxide has developed a Grafana data source plugin that translates Oxide metrics for Grafana, eliminating the need for operators to use OXQL directly. Additionally, an OpenTelemetry receiver is being developed to convert Oxide metrics to the OpenTelemetry format, enabling users to send data to their preferred observability vendors, such as Datadog or Honeycomb. This effort aims to provide flexibility and compatibility with existing observability platforms.

The discussion expanded to potential use cases for Oxide in various verticals. Oxide aims to replace existing hypervisor infrastructure, offering a lower licensing cost option with its own hypervisor. For life sciences, research pipelines and data pre-formatting for supercomputers are key areas. Furthermore, Oxide emphasized that their platform provides traditional VMs capable of supporting any software, addressing concerns, and expanding possibilities of the types of applications and workloads that can be deployed on the Oxide platform.

Oxide Integrations: Empowering Platform Teams and Developers with Oxide Computer

Video Links:

Personnel: Matthew Sanabria

Matthew Sanabria from Oxide Computer Company discusses integrations that empower platform teams and developers to build on top of the Oxide platform. As Oxide is API-driven, these integrations are crucial for engineering teams needing to work at scale. Sanabria covers three platform integrations: a Go SDK, a Terraform provider, and a Packer plugin, demonstrating how each allows developers to interact with and manage resources on Oxide in a familiar way. The Go SDK offers programmatic access to the Oxide rack, while the Terraform provider enables state management for resources, and the Packer plugin allows the creation of custom images with baked-in application logic.

The presentation then shifts focus to Kubernetes integrations, which are vital for teams standardizing on Kubernetes. Oxide provides integrations for deploying and managing Kubernetes on its infrastructure, including a Cloud Controller Manager, a Rancher node driver, and an Omni infrastructure provider. The Cloud Controller Manager manages node health, load balancing, and routes, providing a Kubernetes-native integration. The Rancher node driver enables users to create Kubernetes clusters on Oxide via the Rancher UI, and the Omni infrastructure provider integrates with Talos Linux, an immutable Linux operating system designed for Kubernetes nodes.

Sanabria demonstrates these Kubernetes integrations in action, showing how the Cloud Controller Manager ensures node health and prevents cascading failures, how the Rancher node driver simplifies cluster creation, and how the Omni infrastructure provider automates the deployment of Talos Linux nodes on Oxide. These integrations provide flexibility for running Kubernetes on Oxide and allow future enhancements, such as load balancers and other controllers, to be seamlessly integrated with Kubernetes.

Who wants Oxide Computer and Why

Video Links:

Vimeo: Who wants Oxide Computer and Why
YouTube: Who wants Oxide Computer and Why

Personnel: Bryan Cantrill

The video centers on Oxide’s mission to address the inefficiencies and integration challenges prevalent in the industry, which is commoditized and ossified. Oxide started with a clean sheet of paper, tackling problems accumulated over decades by building their own machines fit for purpose, rather than relying on personal computers in data centers. Oxide aims to disrupt the visceral problems in the industry, like AC power supplies per 1U/2U, cords everywhere, fans everywhere, inefficiency; that is just the beginning. Oxide sought not only to replicate what hyperscalers had done —such as using a DC bus bar design —but also to leapfrog them with new differentiators, like the cabled backplane, which removes cabling from the sleds. Another big bet the company made was removing the BIOS —the basic input/output system —originally from CPM.

Bryan Cantrill shared that the company has differentiated on several fronts, including power and efficiency, reliability, operability, and time to deployment, aiming for developers to be working within hours of the IT team uncrating the sleds. When Oxide’s board member, Pierre Lamont, asked Bryan Cantrill what Oxide’s differentiator was, Bryan responded that there is no single differentiator but many. This approach enables Oxide to serve multiple verticals and address distinct customer pain points. Oxide initially underestimated the demand from AI companies. They were surprised to find that the security of their system, particularly the true root of trust and attestation of the entire stack, was a major draw for these companies.

Addressing concerns about single vendor lock-in, Cantrill emphasized Oxide’s commitment to transparency through open-source software. The entire stack is opened up, including the service processor and associated software. The open-source approach, while not entirely mitigating single-vendor risk, provides customers with unprecedented visibility and control, fostering confidence and helping manage risk. Finally, acknowledging the barrier to entry for enterprises due to the rack-level integration, Oxide offers a trial program with a rack in a co-location facility, allowing potential customers to experience the benefits of Oxide’s system firsthand.

Scaling Up The Cloud Computer with Oxide Computer

Video Links:

Vimeo: Scaling Up The Cloud Computer with Oxide Computer
YouTube: Scaling Up The Cloud Computer with Oxide Computer

Personnel: Steve Tuck

Cloud computing has been the most significant platform shift in computing history, allowing companies to modernize and grow their businesses. While cloud computing has accelerated businesses, it has begun to hit its limits. Companies need to extend their operations beyond the public cloud for reasons like locality, security, sovereignty, and regulatory compliance. However, operating infrastructure outside the public cloud often feels like a step back in time, relying on traditional rack-and-stack approaches with limited efficiency and utility.

Oxide Computer Company aims to address this by bringing true cloud computing on-premises. To achieve this, they’ve built a completely different type of computer, a rack-scale system designed holistically from the printed circuit board to the APIs. This approach delivers improvements in density, energy efficiency, and operability, all plumbed with software for operator automation. The goal is to provide businesses with elastic, on-premises scalable computing that mirrors the efficiencies enjoyed by hyperscalers.

The Oxide system features a modular sled design for easy component upgrades, DC power, and a comprehensive software stack, including firmware, an operating system, a hypervisor, and a cloud control plane. This design enables elastic services like compute, storage, and networking, with multi-tenancy and security built in. The company has seen a surge in demand, expanding manufacturing operations and targeting various verticals, including federal, financial services, life sciences, energy, and manufacturing. Oxide focuses on providing modern API-driven services, improved utilization, enhanced energy efficiency, and a trusted product to alleviate public cloud costs and enterprise software challenges.

Enterprise Storage for the Cloud – Simplify, Scale, and Save with Pure Storage

Appearance: Pure Storage Presents at Cloud Field Day 24

Company: Pure Storage

Video Links:

Personnel: David Stamen

Pure Storage Cloud brings enterprise-grade storage to the cloud with simplicity, resilience, and efficiency. This session dives into the technical foundations that deliver consistent performance and protection while helping organizations reduce costs across cloud migration, disaster recovery, and hybrid deployments.

David Stamen introduced Pure Storage Cloud as an update to their portfolio, emphasizing a shift towards a cloud-preferred model where data availability is paramount. The new portfolio includes Pure Storage Cloud Dedicated (formerly Cloud Block Store) and Pure Storage Cloud Azure Native Service, signifying a unified experience under a single control plane. Managed services are also a key component, catering to customers seeking hosted stacks within hyperscalers such as Azure VMware Solution and Elastic VMware Service, as well as in cloud-adjacent environments. This unified experience ensures consistent management and licensing, regardless of whether customers use Evergreen 1 or CapEx-based purchasing, all managed through Pure 1 with Purity.

The presentation addressed the challenges customers face when adopting the cloud, including rising costs, limited visibility, and overprovisioning due to bundled performance and capacity. To address these issues, Pure Storage Cloud offers a unified data plane with features such as data reduction (thin provisioning, deduplication, and compression), advanced replication options (synchronous, continuous, and periodic), built-in high availability, double data-at-rest encryption, and best-in-class snapshots. These capabilities aim to provide cost efficiency, performance optimization, and enhanced data protection, resolving the sprawl and management complexities associated with diverse cloud storage options.

A significant development highlighted was the Pure Storage Cloud Azure Native Service, which allows Pure Storage to build and operate a native service that integrates seamlessly with Azure. Key features include on-demand performance scaling, native integration with Azure services via a resource provider, and simplified deployment and management within the Azure portal. Plans include expanding support for Azure VMs, enabling easy connectivity configuration, and potentially integrating with other native services such as containerization platforms (e.g., Azure Kubernetes) and PaaS offerings.

Breaking Silos and Managing Data Across On-Premises and Cloud with Pure Storage

Appearance: Pure Storage Presents at Cloud Field Day 24

Company: Pure Storage

Video Links:

Personnel: Brent Lim

Pure Fusion, built into the Purity operating environment, is a core enabler of the Enterprise Data Cloud architecture. Fusion federates arrays into a single, unified fleet and uses outcome-driven automation through Presets to ensure consistent provisioning and configuration of workloads across environments. The result: a self-service, API-driven platform that lets users manage data—not storage—across their hybrid cloud.

The presentation details the evolution of Pure Fusion to version 2, emphasizing its integration with Purity and its role in enabling the Enterprise Data Cloud architecture. A key goal is to shift the focus from managing storage infrastructure to managing data across on-premises and cloud environments. Fusion V2 prioritizes backward compatibility, allowing existing customers to leverage its benefits without requiring extensive script rewrites or retraining. Furthermore, it caters to “dark site” customers by integrating the control plane into Purity, eliminating the need for cloud connectivity while offering workload-placement recommendations through Pure One.

Fusion simplifies storage management through presets, which are declarative definitions of desired outcomes. Storage administrators and consumers can define their requirements in these presets, enabling Fusion to automate provisioning, configuration, and monitoring of workloads. The introduction of the “fleet” concept allows multiple arrays, including FlashArray, FlashBlade, and Pure Storage Cloud, to communicate and coordinate, enabling consistent application of presets across the entire data estate. This unified approach facilitates a shift from managing individual arrays to managing the fleet as a whole, streamlining operations and reducing the risk of misconfigurations.

The presentation showcased a demo of workload provisioning using presets, highlighting how junior administrators can easily deploy and configure databases with predefined settings, ensuring consistent, compliant configurations. The ability to tag resources with billing IDs facilitates chargeback and showback processes, while a compliance engine monitors for configuration drift and enables remediation. Also showcased was the potential of using Fusion with AI language models to automatically provision storage for Machine Learning training workloads. Fusion provides a framework for achieving objective-based management across multiple use cases, including MSPs, standardization, and provider-consumer separation.

The Enterprise Data Cloud with Pure Storage