No Amount Of Spin Will Make This Gun Control Movement Different

The anti-gunners want to believe this time will be different. In truth, they might be right. Politicians are notoriously wishy-washy when it comes to polling numbers, and many polls seem to be showing broad support for gun control measures, at least in part. It’s not hard to imagine that gun rights are in real jeopardy this time.

However, let’s also be realistic. This particular gun control movement isn’t any different, despite what some people may try and claim (via The Christian Century).

 

When Sam Zeif met with President Trump after the mass shooting at his high school in Parkland, Florida, he broke down in frustration and tears. “How have we not stopped this?” he asked. “After Columbine? After Sandy Hook?”

Zeif’s outrage is understandable. It’s also easy to understand those who have become cynical about political leaders’ persistent unwillingness to tackle gun violence. More than 200 school shootings have taken place since the murders at Columbine, Colorado, in 1999. About 39,000 gun deaths happen each year in the United States. Legislators have mourned but done nothing to address the problem. No meaningful gun control legislation has been passed at the federal level since 1994, when a ban on certain semiautomatic weapons was tucked into the crime bill. That ban expired in 2004.

A couple of points.

First, of those 39,000 deaths, two-thirds are suicides. That tends to be left out when that number is mentioned, and it’s important. Most people understand that you won’t stop suicides by banning the tools people use to commit suicide. If you do that, you’ll eventually have to ban gravity as well. Most of that number is the result of people making a decision and acting on that decision, often without hurting anyone else. Let’s keep that in mind.

Second, since they brought up the assault weapon ban from 1994, it should also be noted that crime was trending downward before the law was passed and continued downward since the law sunset. In other words, the law had no appreciable impact on crime. Imagine that.

Additionally, a red wave overtook Congress following that bill’s passage, which made even Democrats wary of passing gun control legislation.

But the hundreds of thousands of people who gathered at March for Our Lives rallies in late March offered hope that a new movement is under way, led by teens who have seen the trauma of gun violence firsthand and say: no more. What’s hopeful about the latest movement, besides the refreshing leadership of uncynical students, is how it has avoided some of the patterns that have paralyzed previous efforts.

If by “refreshing leadership of uncynical students,” you mean leadership funded by astroturf movements and consisting of foul-mouthed and uninformed individuals, then sure. It’s refreshing.

To start with, the student-led movement has recognized that gun violence affects everyone; it is an issue for people of all races and places. It is an issue that should unite Americans, not divide them.

In her speech at the rally in Washington, 17-year-old Jaclyn Corin acknowledged the racial divide that has to be overcome on this issue. In 2012, black teenagers occupied Florida’s state capitol to protest the shooting of black teenager Trayvon Martin—without getting the kind of attention the Parkland survivors are getting. “But we share this stage today and forever with those communities who have always stared down the barrel of a gun,” said Corin. Edna Chavez, a student from South Los Angeles, was one of the speakers at the Washington rally. “I learned to duck from bullets before I learned to read,” she said.

When are these people going to stop pretending that gun violence is somehow worse than any other form of violence? If your loved one is killed, it doesn’t matter if it was done with a gun or a knife, they’re just as dead. A gun is a tool, but it’s also a tool that is used to save far more lives than take them.

The real problem is violence, plain and simple. Taking away a tool doesn’t make violence go down. In fact, it increases. Take London, for example. England has strict gun control measures, measures that would never fly in the United States even in this current environment. Now London has a higher murder rate than New York City.

If you’re serious about stopping violence, you need to find out why people are violent in the first place. Refusing to start there just shows us you’re not serious about the issue.

The movement also has avoided partisan politics. “This isn’t about the GOP. This isn’t about the Democrats,” said student Cameron Kasky. “This is about us creating a badge of shame for any politicians who are accepting money from the [National Rifle Association] and using us as collateral.” Judging from past failures at gun control, effective strategies and rhetoric will be issue-oriented, not party-oriented.

Yes, Kasky said that.

But the March for Our Lives also featured a lot of bashing of the Republican Party. Marco Rubio has been a repeated target of David Hogg’s, as well as the target of ire for many of the movement’s followers. A look at the signs at the walkouts and the marches show just how wrong this claim is.

Donald Trump called Hogg, Kasky’s fellow traveler, in hopes of having a thoughtful discussion, and Hogg bragged about hanging up on the man. Here he is, the President of the United States, someone who you have to get on your side if you want national level gun control, and Hogg hangs up on him. Why? Because bashing Trump is cool.

But yeah, totally non-partisan.

Third, the movement has focused on electoral process. It has called on young people to register to vote and to hold candidates accountable. “We are going to take this to every election, to every state and every city,” said Parkland student David Hogg. “When politicians send their thoughts and prayers with no action, we say no more.”

And will they?

See, everyone knows that democracy belongs to those who show up. This isn’t new, and the strategy isn’t new. There’s a reason why so many movements also try to include voter registration drives.

But the March for Our Lives only included a very vocal subsection of American youth. There were many more who never showed up at a march. Still, others are rallying in support of the Second Amendment, because even people who don’t own guns can see that taking away our rights in such a way could have horrible ramifications.

However, let’s not kid ourselves; this movement isn’t any different than the ones in the past. It’s the same movement with many of the same people involved behind the scenes. It has a few new, young faces, but they’re spouting the same old lines. Claims of non-partisanship are lies designed to mislead people who won’t look for themselves, hoping the animosities of the past aren’t noticed this time around.

But all this is, in reality, the same old gun control movement dressed up in a shiny new outfit. It’s the same tactics, the same bogus statistics, and the same rhetoric.

Anyone who claims otherwise is either delusional or a liar.

The post No Amount Of Spin Will Make This Gun Control Movement Different appeared first on Bearing Arms.

via Bearing Arms
No Amount Of Spin Will Make This Gun Control Movement Different

Chadwick Boseman Reprised His Role as T’Challa on Last Night’s Saturday Night Live

Chadwick Boseman bringing the King to SNL.

Last night, Chadwick Boseman took a well-deserved victory lap hosting Saturday Night Live, and in the process he naturally returned to the role that’s defined 2018: the Black Panther.

In a compelling rendition of SNL’s recurring Black Jeopardy sketch, T’Challa takes his place in the competition alongside Leslie Jones and Chris Redd’s African American competitors, where he delights and disappoints host Darnell Hayes (Kenan Thompson, the most dedicated sketch actor in history) by showcasing the gulf of experience between his privileged, utopian Wakandan life and the norms of the United States.

Advertisement

Boseman does great here as the delightful fish-out-of-water king, and he eventually gets the hang of it for the funny climax of the sketch. He is a wise king, after all. All hail.

via Gizmodo
Chadwick Boseman Reprised His Role as T’Challa on Last Night’s Saturday Night Live

Composite Metal Foam (CMF) Armor Withstands 23mm HEI Shells

Composite Metal Foam (CMF) Armor Tested Against 23mm HEI Shells1About a year ago, Professor Afsaneh Rabiei of North Carolina State University developed composite metal foam (CMF) armor plates. In a test conducted in 2017, the 1″ thick plate performed impressively against small arms bullets and managed to get NIJ Level IV certification. You can find below the video footage of that test. Recently, the NC State University has […]

Read More …

The post Composite Metal Foam (CMF) Armor Withstands 23mm HEI Shells appeared first on The Firearm Blog.


via The Firearm Blog
Composite Metal Foam (CMF) Armor Withstands 23mm HEI Shells

Hot-air dryers suck in nasty bathroom bacteria and shoot them at your hands

Researchers found these spewing bacteria and spores.

Washing your grubby mitts is one of the all-time best ways to cut your chances of getting sick and spreading harmful germs to others. But using the hot-air dryers common in bathrooms can undo that handy hygienic work.

Hot-air dryers suck in bacteria and hardy bacterial spores loitering in the bathroom—perhaps launched into the air by whooshing toilet flushes—and fire them directly at your freshly cleaned hands, according to a study published in the April issue of Applied and Environmental Microbiology. The authors of the study, led by researchers at the University of Connecticut, found that adding HEPA filters to the dryers can reduce germ-spewing four-fold. However, the data hints that places like infectious disease research facilities and healthcare settings may just want to ditch the dryers and turn to trusty towels.

Indeed, in the wake of the blustery study—which took place in research facility bathrooms around UConn—”paper towel dispensers have recently been added to all 36 bathrooms in basic science research areas in the UConn School of Medicine surveyed in the current study,” the authors note.

via Ars Technica
Hot-air dryers suck in nasty bathroom bacteria and shoot them at your hands

Star Wars: The Last Laser Master

The Auralnauts have finished up their epic comedic retelling of the first six episodes of Star Wars with episode 6, The Last Laser Master. Follow Laser Master Duke Dirtfarmer and his friends in the fight against the Empire and its fearsome planet-killing weapon: Laser Moon II.

You can watch the five other episodes — including Jedi Party, The Friend Zone, and Revenge of Middle Management — in this playlist.

For snackier Auralnauts fare, see How to make a blockbuster movie trailer, some Bane outtakes from the Dark Knight Rises, and the Star Wars throne room scene minus the John Williams score.

Tags: movies   remix   Star Wars   video
via kottke.org
Star Wars: The Last Laser Master

The Chmod Command and Linux File Permissions Explained

So you’ve sliced your way through all the common misconceptions about Linux, found a flavor of Linux that you like, but now you’re confused because you haven’t the faintest clue about terminal commands and Linux file permissions?

Or maybe you have a website that’s hosted on a Linux server and you’ve run into some file permission issues that can only be solved with some command line magic.

Regardless, one of the most essential Linux commands to learn


An A-Z of Linux – 40 Essential Commands You Should Know




An A-Z of Linux – 40 Essential Commands You Should Know

Linux is the oft-ignored third wheel to Windows and Mac. Yes, over the past decade, the open source operating system has gained a lot of traction, but it’s still a far cry from being considered…
Read More

is a small but powerful command called chmod. But before we explain what the command does, we have to first understand a little bit about how Linux handles file security.

The Basics of Linux File Permissions

Linux operating systems are actually Unix-like systems (understanding Linux vs. Unix), and Unix-like systems approach file permissions like so:

Every file has an owner, which determines the file’s “user class.” Every file also has a group, which determines the file’s “group class.” Any system user who isn’t the owner and doesn’t belong in the same group is determined to be others.

All files on Unix-like systems have permissions assigned to all three classes, and these determine which actions can be taken by said classes for the given file.

The three actions available on a Unix-like system are: read (the ability to open and view the contents of the file), write (the ability to open and modify the contents of a file), and execute (the ability to run the file as an executable program).

In other words, a file’s permissions determine whether or not:

  • The owner can read, write, and execute the file.
  • The group can read, write, and execute the file.
  • Anyone else can read, write, and execute the file.

Linux file permissions can be displayed in two formats.

The first format is called symbolic notation, which is a string of 10 characters: one character that represents the file type, then nine characters that represent the file’s read (r), write (w), and execute (x) permissions in order of owner, group, and others. If not permitted, the dash symbol (-) is used.

For example:

-rwxr-xr--

This means it’s a regular file with read, write, and execute permissions for the owner; read and execute permissions for the group; and only read permissions for everyone else.

The second format is called numeric notation, which is a string of three digits that each represent user, group, and other permissions, respectively. Each digit can range from 0 to 7, and each digit’s value is obtained by summing the class’s permissions:

  • 0 means no permissions allowed.
  • +1 if the class can execute the file.
  • +2 if the class can write to the file.
  • +4 if the class can read the file.

In other words, the meaning of each digit value ends up being:

  • 0: No permission
  • 1: Execute
  • 2: Write
  • 3: Write and execute
  • 4: Read
  • 5: Read and execute
  • 6: Read and write
  • 7: Read, write, and execute

So the above example (-rwxr-xr--) would be 754 in numeric notation.

That’s Linux file permissions in a nutshell.

What Is Chmod?

On Unix-like systems, chmod is a system-level command that stands for “change mode” and allows you to manually change the permission settings of a file.

Not to be confused with chown, which is another system-level command on Unix-like systems that stands for “change owner” and lets you assign ownership of a file to another user, or chgrp, which stands for “change group” and assigns a file to a different group. These are important to know, but not as commonly used as chmod.

What Does Chmod 644 Mean?

Setting a file’s permissions to 644 makes it so only the owner can access and modify the file however they want while everyone else can only access without modifying, and nobody can execute the file—not even the owner. This is the ideal setting for files that are publicly accessible because it balances flexibility with security.

What Does Chmod 755 Mean?

Setting a file’s permissions to 755 is basically the same thing as 644 except everyone also has execute permissions. This is mainly used for publicly accessible directories because the execute permission is needed in order to change into a directory.

What Does Chmod 555 Mean?

Setting a file’s permissions to 555 makes it so that the file cannot be modified at all by anyone except the system’s superuser (learn more about the Linux superuser


What Is SU & Why Is It Important to Using Linux Effectively?




What Is SU & Why Is It Important to Using Linux Effectively?

The Linux SU or root user account is a powerful tool that can be helpful when used correctly or devastating if used recklessly. Let’s look at why you should be responsible when using SU.
Read More

). This isn’t as commonly used as 644, but it’s still important to know because the read-only setting prevents accidental changes and/or tampering.

What Does Chmod 777 Mean?

Setting a file’s permissions to 777 makes it so anyone can do anything they want with the file. This is a huge security risk, especially on web servers! Literally anyone can access the file, modify it however they want, and execute it on the system. You can imagine the potential damage if a rogue user got their hands on it.

How to Use Chmod on Linux

The chmod command has a simple format:

chmod [permissions] [file]

Permissions can be given in numeric notation, which is the best format to use when you want to assign specific permissions for all classes:

chmod 644 example.txt

Permissions can also be given in symbolic notation, which is useful when you only want to modify the permissions of a particular class. For example:

chmod u=rwx example.txt
chmod g=rw example.txt
chmod o=rw example.txt

You can modify permissions for multiple classes, such as this example which sets the owner to read/write/execute but the group and others to read/execute:

chmod u=rwx,g=rw,o=rw example.txt

When assigning the same permissions to multiple classes, you can combine them:

chmod u=rwx,go=rw example.txt

But the beauty of using symbolic notation shines when you only want to add or remove the permission for a particular action for a particular class.

For example, this adds the execute permission for the file’s owner:

chmod u+x example.txt

And this removes the write and execute permissions for other users:

chmod o-wx example.txt

Lastly, if you want to apply a particular set of permissions to all files and folders within a particular directory (i.e. a recursive chmod), use the -R option and target a directory:

chmod -R 755 example_directory

While the chmod command looks a bit crazy at first glance, it’s actually quite simple and entirely logical. If you understand the above, you’ve basically mastered chmod!

Learn More About Mastering Linux

Commands like chmod, chown, and chgrp are just the tip of the Linux iceberg. If you’re brand new to the operating system, we recommend checking out these neat tricks for Linux newbies as well as these Linux commands you should never run.

But most importantly, you’d do best by checking out our comprehensive beginner’s guide to Ubuntu and Linux


Ubuntu: A Beginner’s Guide




Ubuntu: A Beginner’s Guide

Curious about Ubuntu, but not sure where to start? Everything you could possibly need to get started with the latest version of Ubuntu is right here, written in easy-to-understand, plain English.
Read More

, which will teach you everything you need to know to get started and familiarized enough to feel comfortable.



via MakeUseOf.com
The Chmod Command and Linux File Permissions Explained

15 Fun Websites for Instantly Beating Boredom Online

Even Steve Jobs was a fan of boredom. He believed that boredom allowed room for creativity. We all know how that turned out.

So, why don’t you take a page out of the latest from mind science and celebrate the doldrums of inactivity? You can do a lot of random things on the internet


5 Time-Wasting Web Sites for When You’re Bored




5 Time-Wasting Web Sites for When You’re Bored

Where do you go to when you’re bored? If you are short of ideas, we have five websites which will give you more fun stuff to do on the vast internet.
Read More

, but here are the best sites to visit if you need to kill some time.

Open The Secret Door - best Fun Websites to beat boredom

It won’t open into a dark nook at Hogwarts, but it can take you to equally unexpected places around the world. The idea is simple — open the secret door and let Google’s Street View transport you to an interesting place on the globe.

Think of it as a portal for virtual globetrotting. And if you don’t like it, just click the Take Me Somewhere Else button. It definitely ranks as one of the more fun ways to use Google Maps and Street View


16 Incredible Uses of Google Maps You Should See and Try




16 Incredible Uses of Google Maps You Should See and Try

Google Maps is an incredible tool on its own. But some websites have tapped into it to create wonderful Google Maps applications. From Google Maps games to history and literature, we cover them all.
Read More

.

Endangered Sounds of Old Technologies - best Fun Websites to beat boredom

Want a dose of serious nostalgia


5 of the Most Powerful Nostalgia Sites on the Web




5 of the Most Powerful Nostalgia Sites on the Web

Nostalgia is something the Internet loves. Let’s explore a few places where you can feel connected to different parts of your past. There’s something for everyone.
Read More

? Maybe, the sound of a dial-up modem will do it for you or the dial of a rotary phone. The Museum of Nostalgia will send you back in time. The single-person effort from Brendan Chilcutt aims to preserve the signature sounds of old technologies.

I Need a Prompt - best Fun Websites to beat boredom

This neat website will cure your boredom with a thunderbolt of inspiration. Maybe, just a gentle prod if you aren’t a writer. But if you are a person of the pen then try the creative writing prompts


10 More Websites That Help Cure Writer’s Block With Writing Prompts




10 More Websites That Help Cure Writer’s Block With Writing Prompts

Having a tough time writing? These websites will definitely give you the boost you need.
Read More

on the site that will make you think about unfamiliar situations. The online tool is also an Amazon Alexa skill now.

NSA Haiku Generator - best Fun Websites to beat boredom

You wouldn’t combine the NSA and poetry even within a few words of each other. But this automatic haiku generator manages to pull it off. So, go ahead and stoke your wildest imagination with weird mashups of wonderful syllables.

The source of the random words is the NSA’s database of search terms it uses to red flag terrorist threats.

Sketch Something - best Fun Websites to beat boredom

Creativity is the magic pill to zap boredom. Sketch Something Daily is the antidote to your artistic mental blocks. So, pick up a pencil, pen, or even a paintbrush to take on a daily sketch challenge with the help of the illustrations here.

Try it as a daily habit and stifle the yawns as you interest yourself enough to learn the basics of drawing


10 Sites That Will Teach You How to Draw Well




10 Sites That Will Teach You How to Draw Well

We all want to draw well. But, drawing skills can only come through daily practice. Go to these ten websites and their fantastic tutorials to begin your journey.
Read More

with the help of other sites on the web.

One Tiny Hand - best Fun Websites to beat boredom

Apply a Photoshop trick to one part of the human anatomy and you have a viral hit. One Tiny Hand gazes at only one thing and make you laugh at the images of celebrities with one hand reduced in size.

Surprisingly, the Tumblr blog started with Beyoncé Knowles and not the two head of states who are parodied often.

2 Kinds of People - best Fun Websites to beat boredom

Another humorous Tumblr blog. Another dosage of laughter. The simple illustrations show that there are only two kinds of people in the world. Those that have a sense of humor and the rest who don’t.

If you fall in the former, then you will have cured your boredom. If not, read on.

Stinkmoji - best Fun Websites to beat boredom

Switch on your speakers. Turn on your webcam. And make a face at your computer. Stinkmoji is a face recognition experience that uses a 3D emoji to mimic the faces you make at the camera. It even includes an Easter egg when you open your mouth wide enough.

Oh, just make sure it’s not on your list of timewaster websites when you are in the office


Take A Break: 10 Websites To Help You Relax For Two Minutes




Take A Break: 10 Websites To Help You Relax For Two Minutes

It’s incredibly important to take the time to relax occasionally. It doesn’t do anyone any good to constantly be ON, to be working, to be stressed by the rigors of everyday life. In the same…
Read More

.

YouTube alone can take care of your lifelong boredom. So, I am cheating by mentioning the Gross Science channel. But, I couldn’t help myself as I got pulled in by all the bizarre but scientific videos here.

So, find out about clothes made of slime. Or, why your pee can change the world. As I said, I couldn’t help myself.

The Innovation Station - best Fun Websites to beat boredom

While we are on the subject of science and videos, could I also mention Innovation Station? This website alone could give you enough energy to ward off boredom. It showcases the latest videos on innovation and futuristic technologies.

It is a wonderful learning platform. As their charter says, “We aim to inspire and educate by putting innovations and innovators in the spotlight.”

Weird or Confusing - best Fun Websites to beat boredom

Wonder how unicorn meat tastes. This site will make you wonder about things like that. Press the button and it will beam you into the crazy aisles of eBay and its shopping universe where everything can be sold.

Well, it’s not all useless. That inflatable unicorn horn for cats sounds like a better deal than unicorn meat. Just hope it’s not a new eBay scam


10 eBay Scams to Be Aware Of




10 eBay Scams to Be Aware Of

Being scammed sucks, especially on eBay. You invest so much time into selling a product or researching the perfect item, complete the transaction, and then… nothing. Do you know when you’re being scammed?
Read More

.

frankenSim - best Fun Websites to beat boredom

The web toy is a wonderful simulation project by a London based animation studio. Here, you get to play “God” or Victor Frankenstein. The interactive may sound grotesque but it interesting as you manipulate the different organs and see what results.

In short, the developers say that this is a musing on how Frankenstein might have experimented with modern web tools.

The Symphony of Blockchain - best Fun Websites to beat boredom

Visuals can help you understand even the most complex of technologies. Blockchain and cryptocurrency are all the rage now. The Symphony of Blockchain takes you on an interactive, visual and auditory exploration of what it’s all about.

It’s wonderfully hypnotic as the 3D Bitcoin blocks move and expand against the background of music. Click on each block and it opens to give you more information.

The Passive Aggressive Password Machine - best Fun Websites to beat boredom

Let’s not underrate the value of a strong password


How to Create a Strong Password That You Will Not Forget




How to Create a Strong Password That You Will Not Forget

Do you know how to create and remember a good password? Here are some tips and tricks to maintain strong, separate passwords for all of your online accounts.
Read More

in keeping the world safe. The PaP Machine is a neat little side project that can bring you out of your boredom fairly quickly with its funny and honest feedback on the strength of your passwords.

Arbitrary Awards - best Fun Websites to beat boredom

Did you know that most awards are paid for? Well, if you didn’t then that’s what this site tells you. The developers here made their own awards and gave you a platform to gift yourself one with the many choices available.

You deserve an award if you have scrolled so far down the page. And, if we managed to cure your boredom then we deserve one too. Just a nice word in the comments will do for now.

The Cure for Boredom Is Curiosity

We cycle back to what dreamers and achievers believe in. And to add an official stamp of approval to it, let me tell you about the Boredom Conference held every year. Yes, it is a scientific conference with a scholarly purpose.

So, don’t try your best to zap your boredom. Use it creatively and who knows you just might light up a new motivation


How to Regain Creative Motivation After You’ve Burned Out




How to Regain Creative Motivation After You’ve Burned Out

Writers aren’t the only ones who suffer from “creative block”. What can you do to rekindle your creative fire? Here are five easy things you can try.
Read More

.

Image Credit: monkeybusiness/Depositphotos



via MakeUseOf.com
15 Fun Websites for Instantly Beating Boredom Online

Amazon Web Services launches AWS Secrets Manager and other new tools, as cloud customers continue to prove they need security help

Werner Vogels, Amazon CTO, speaks on stage at the AWS Summit in San Francisco. (GeekWire Screenshot)

As companies move more of their workloads into the cloud, too many of them are doing a poor job securing that data. Amazon Web Services launched several new security services Wednesday that aim to provide them with tools that are easier to use, and easier to understand.

AWS Secrets Manager is a new console that brings together several existing AWS security features as well as a few new ones, and it “allows us to build systems that are way more secure than we ever could in the past,” said Werner Vogels, Amazon chief technology officer, during a keynote address at the AWS Summit in San Francisco. The console is designed to help administrators manage credentials, such as passwords to external services that often have to be manually entered, in a much more secure and centralized fashion, AWS said in a blog post.

Vogels bemoaned how data breaches have become a near-daily part of our lives over the past few years. “Most of these data breaches have been happening because we’ve been building security in our applications as an afterthought,” he said. “Today, security is everybody’s job. … And it’s our responsibility to protect our customers.”

Credentials are often a weak link in even the best information security strategies. Earlier this year security researchers discovered that hackers used an unprotected Kubernetes cluster running on Tesla’s infrastructure that led them to security credentials for Tesla’s AWS account, which they used to set up a cryptocurrency mining operation on Tesla’s dime. AWS Secrets Manager will allow customers to exert more control over who is allowed to access certain credentials, and it does that by using AWS Lambda, the company’s serverless computing service.

AWS also launched a new service called AWS Firewall Manager, which is designed to make it easier to use other AWS security services from a central dashboard. A lot of cloud security problems arise because a lot of cloud computing efforts started out as decentralized experiments on new applications by a small group of developers at a given company, and as that company starts to take advantage of more and more cloud services, security policies can differ from application to application based on how they were originally conceived.

And customers who need private certificates for securing web applications can now get those through AWS, thanks to the addition of the Private Security Certificate feature to the AWS Certificate Manager.

via GeekWire
Amazon Web Services launches AWS Secrets Manager and other new tools, as cloud customers continue to prove they need security help

Leveraging ProxySQL with AWS Aurora to Improve Performance

Or How ProxySQL Out-performs Native Aurora Cluster Endpoints

In this blog post, I’ll look at how you can use ProxySQL with AWS Aurora to further leverage database performance. My previous article described how easy is to replace the native Aurora connector with ProxySQL. In this article, you will see WHY you should do that. It is important to understand that aside from the basic optimization in the connectivity and connection management, ProxySQL also provides you with a new set of features that currently are not available in Aurora. Just think:

  • Better caching
  • Query filtering
  • Sharding
  • Query substitution
  • Firewalling
  • … and more

We will cover areas like scalability, security and performance. In short, I think is more than worth it to spend some time and give ProxySQL with AWS Aurora a try.

The tests

I will show you the results from two different kinds of tests. One is sysbench-oriented, the other simulates a more complex application using Java, data object utilization and a Hikari connection pool in the middle as well. For the EC2 and Aurora platform I used:

  • Application/ProxySQL T2.xlarge eu-central-1a
  • 2 Aurora MySQL 5.7.12 db.t2.medium eu-central-1a
  • 1 Aurora MySQL 5.7.12 db.t2.medium eu-central-1b for AZ redundancy

The code for the application is available here, and for sysbench tests here. All the data and configurations for the application are available here. I ran three tests using both bench apps, obviously with Aurora as it comes and with ProxySQL. For the ProxySQL configuration see my previous article. The tests were read_only / Write_only / read_write. For Aurora, I only increased the number of connections and kept the how it comes out of the box approach. Note each test was run at least three times at different moments of the day, and on a different day. The data reported as final is the BEST performing result for each one.

The Results

For the impatient among us, here is a summary table of the tests: Sysbench:
summary_sysbench

Java App:
summary_for_java_app

Now if this is enough for you, you can go to the conclusion and start to use ProxySQL with AWS Aurora. If you would like to know a bit more, continue reading. Aside from any discussion on the benchmark tool and settings, I really focused on identifying the differences between the two “connectors”. Given the layer below was exactly the same, any difference is due to the simple substitution of the endpoint.

Sysbench

Read Only

The first image reports the number of events achieved at the time of the test. It is quite clear that when using ProxySQL, sysbench ran more events.
In this graph, higher is better:
read_events
In this graph, lower is better:

reads_latency

 

As we can see, the latency when using an Aurora cluster entry point is higher. True, we are talking about milliseconds, but it is not just the value that matters, but also the distribution:

Aurora cluster endpoint ProxySQL
Screen Shot 2018-03-26 at 7.17.04 PM Screen Shot 2018-03-26 at 7.17.20 PM

An image is worth a thousand words! We can see, the behavior stays constant in analyzing the READS executed, with ProxySQL performing better.

  In this graph, higher is better:
reads_reads

  In this graph, higher is better:
reads_sysb_queries

Closing with the number of total queries performed, in which ProxySQL surpassed the Cluster endpoint by ~ 4K queries.

Write Only

For writing, things go a bit different. We see that all lines intersect, and the values are very close one to the other.

I will let the images speak for themselves:

In this graph, higher is better:

write_events_sysb

In this graph, lower is better:
write_latency_sysb

Latency spiked in each ProxySQL test, and it may require additional investigation and tuning.

 In this graph, higher is better:
write_write_sysb

While the rates of writes/sec intersect with each other frequently, in the end ProxySQL resulted in more writes than the native endpoint.

In this graph, higher is better:
write_sysb_queries

In the end, a difference exists and is consistent across the different test iterations, but is minimal. We are talking a range of 25 – 50 entries in total.

This result is not surprising, and it will be clear why later in the article.


Read and Write

As expected in the read and write test, we see a different situation.

ProxySQL is still performing better than the default entry point, but not by such a big margin as in read-only tests.

In this graph, higher is better:
rw_events_sysb

In this graph, lower is better
rw_latency_sysb

Latency and events are following the expected trend, where read operations are executed more efficiently with ProxySQL and writes are close, but NOT the same as in the write only test. rw_queies_sysb

As a result, the number of queries in ProxySQL is approximately 13% better than the default entry point.

Java Application Tests

What about the Java application? First of all, we need to remember that the application used a connection pool mechanism (Hikari), and the connection pool was present in all cases (for both Aurora cluster endpoint or ProxySQL). Given that a small delay in establishing the first connection was expected, you can easily see this in the MAX value of the connection latency. In this graph, lower is better.
app_con_latency_summary

The connection latency reported here is expressed in nanoseconds and is the measure of the time taken by the connection provider to return an active connection to the application from the moment the application requested it. In other words, how long the HikariCP is taking to choose/check/return an open connection. As you can see, the MAX value is drastically higher, and this was expected since it is the connection initialization. While not really interesting in terms of performance, this value is interesting because it gives us the dimension of the cost in the CP to open a new connection, which in the worse case is 25 milliseconds. As the graphs show, ProxySQL manages both cases (first call, reassignment) more efficiently.
In this graph, higher is better.
app_crud_summary

In the CRUD summary table, we can see the number of SQL commands executed per second for each CRUD action and for each test. Once more we can see that when using ProxySQL, the application performed much better and significantly executed more operations (especially in the R/W test).

  In this graph, higher is better.
app_evnts_summary

This graph represents the total number of events run at the time of the test. An event is a full application cycle, which sees the application generate the data needed to fill the SQL (no matter if it is for read/write), create the SQL, request the connection, push the SQL, get and read the resultset returned and give back the connection. Once more, ProxySQL shows better performance.
In this graph, lower is better.

app_exectime_summary

The execution time reported in this graph is the time taken by the application to run a whole event. This is it, execution time is the time of a full cycle. The faster the cycle is executed, the better the application is performing. The time is express in milliseconds and it goes from a very fast read, which probably accesses the cache in Aurora, to almost two seconds taken to insert a batch of rows. Needless to say, the tests using ProxySQL performed better.

But Why?

Why do the tests using ProxySQL perform better? After all, it is just an additional step in the middle, which also has a cost in intercepting the queries and managing the connections.

So why the better performance? The answer is simple and can be found in the Aurora manual: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Aurora.Overview.html#Aurora.Overview.Endpoints.
The Cluster endpoint is an endpoint for an Aurora DB cluster that connects to the current primary instance for that DB cluster. Each Aurora DB cluster has a cluster endpoint and one primary instance.

That endpoint receives the read and write request and sends them to the same instance.The main use for it is to perform failover if needed. At the same time, the Reader endpoint is an endpoint for an Aurora DB cluster that connects to one of the available Aurora Replicas for that DB cluster.

Each Aurora DB cluster has a reader endpoint. If there is more than one Aurora Replica, the reader endpoint directs each connection request to one of the Aurora Replicas. The reader endpoint only load balances connections to available Aurora Replicas in an Aurora DB cluster. It does not load balance specific queries.

If you want to load balance queries to distribute the read workload for a DB cluster, you need to manage that in your application and use instance endpoints to connect directly to Aurora Replicas to balance the load.
This means that to perform a Read/Write split, your application must manage two entry points and you will NOT have much control over how the queries are handled or to which replica instance they are directed.

This could lead to unexpected results and delays. Needless to say, ProxySQL does all that by default (as described in my previous article). Now that we’ve clarified how Aurora entry points behave, let’s see about the performance difference.

cross-server-graphs

How do we read this graph? From left to right:

  • read_only test with an Aurora cluster endpoint
  • read_only test with ProxySQL
  • write_only with an Aurora cluster endpoint
  • write_only with ProxySQL
  • read and write with an Aurora cluster endpoint
  • read and write with ProxySQL

Here we go! As we can see, the tests with ProxySQL used the two configured instances, splitting R/W without the need to do anything on the application side. I purposely avoided the AZ replica because I previously identified it as having higher latency, so I can exclude it and use it ONLY in the case of an emergency.

The effects are clear in the next graph.
cpu_utilization

When using the cluster endpoint, given all the load was on a single instance, the CPU utilization is higher and that became a bottleneck. When using ProxySQL, the load is spread across the different instances, allowing real read scalability. This has immediate benefits in read and read/write operations, allowing better load distribution that results in better performance.

Conclusions

Aurora is a very interesting technology and can be a very good solution for read scaling.
But at the moment, the way AWS offers data connectivity with the Cluster endpoints and Reader endpoints can negatively affect performance.

The lack of configuration and the limitation of using different endpoints lead to confusion and less optimized utilization.

The introduction of ProxySQL, which now supports (from version 2) Aurora, allows an architect, SA or DBA to properly configure the environment. You can very granularly choose how to use each instance, without the need to have the application modify how it works. This helps keep the data layer solution separate from the application layer. Even better, this additional set of flexibility does not come with a cost.

On the contrary, it improves resource utilization and brings higher performance using less powerful instances. Given the cost of Aurora, this is not a secondary benefit.

  I suggest you try installing ProxySQL v2 (or higher) in front of your Aurora cluster. If you don’t feel confident and prefer to have us help you, contact us and we will be more than happy to support you!

via Planet MySQL
Leveraging ProxySQL with AWS Aurora to Improve Performance