native environment – 3-tier architecture intro – alternative methods of resource connection: – Bastion host – SSM – EC2 Instance Connect – demo Why we should care? – brute force attacks – exploitation NatGateway – regular resource access become more annoying solution one - bastion host Host Instance ProxyJump Bastion PreferredAuthentications publickey IdentitiesOnly=yes IdentityFile Port 22 Host Bastion PreferredAuthentications publickey IdentitiesOnly=yes IdentityFile /Users/kuba/.ssh/id_ed25519_gowaw56 User kuba Hostname 35.158.161.105 Port 22bastion host - props

—Restricted execution framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1270 30.2 Bastion —Restricting access to objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273 (1)>) is a poor email matching pattern, which will match with 'host.com>' as well as 'user@host.com', but not with 'host.com'. 2.4 新版功能. The special sequences consist of '\' and a character ACE， 例 如 www. xn--alliancefranaise-npb.nu)。随后此域名的 ACE 形式可以用于所有由于特定协议而不允许使 用任意字符的场合，例如 DNS 查询，HTTP Host 字段等等。此转换是在应用中进行的；如有可能将对用户 可见：应用应当透明地将 Unicode 域名标签转换为线上的 IDNA，并在 ACE 标签被呈现给用户之前将其转换 回 Unicode。 If

—Restricted execution framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1270 30.2 Bastion —Restricting access to objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273 (1)>) is a poor email matching pattern, which will match with 'host.com>' as well as 'user@host.com', but not with 'host.com'. 2.4 新版功能. The special sequences consist of '\' and a character ACE， 例 如 www. xn--alliancefranaise-npb.nu)。随后此域名的 ACE 形式可以用于所有由于特定协议而不允许使 用任意字符的场合，例如 DNS 查询，HTTP Host 字段等等。此转换是在应用中进行的；如有可能将对用户 可见：应用应当透明地将 Unicode 域名标签转换为线上的 IDNA，并在 ACE 标签被呈现给用户之前将其转换 回 Unicode。 If

—Restricted execution framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1270 30.2 Bastion —Restricting access to objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273 (1)>) is a poor email matching pattern, which will match with 'host.com>' as well as 'user@host.com', but not with 'host.com'. 2.4 新版功能. The special sequences consist of '\' and a character ACE， 例 如 www. xn--alliancefranaise-npb.nu)。随后此域名的 ACE 形式可以用于所有由于特定协议而不允许使 用任意字符的场合，例如 DNS 查询，HTTP Host 字段等等。此转换是在应用中进行的；如有可能将对用户 可见：应用应当透明地将 Unicode 域名标签转换为线上的 IDNA，并在 ACE 标签被呈现给用户之前将其转换 回 Unicode。 If

Features overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 1.4 Supported host operating systems . . . . . . . . . . . . . . . . . . . . . . . . . . 15 1.5 Installing VirtualBox 5.6 Cloning disk images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 5.7 Host I/O caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 5.8 Limiting 6.5 Internal networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 6.6 Host-only networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 6.7 UDP Tunnel

. . . . . . . . . . . . . . . . . . . . 14 1.4 Supported host operating systems . . . . . . . . . . . . . . . . . . . . . . . . . . 16 1.5 Host CPU Requirements . . . . . . . . . . . . . . . . . . . . 5.6 Cloning disk images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 5.7 Host I/O caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93 5.8 Limiting 6 Internal networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 6.7 Host-only networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 6.8 UDP Tunnel

Features overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 1.4 Supported host operating systems . . . . . . . . . . . . . . . . . . . . . . . . . . 15 1.5 Installing VirtualBox 5.6 Cloning disk images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 5.7 Host I/O caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 5.8 Limiting 6.6 Internal networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 6.7 Host-only networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99 6.8 UDP Tunnel

Features overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 1.4 Supported host operating systems . . . . . . . . . . . . . . . . . . . . . . . . . . 14 1.5 Installing VirtualBox disk images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 3 Contents 5.7 Host I/O caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 5.8 Limiting 6.5 Internal networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93 6.6 Host-only networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94 6.7 UDP Tunnel

. . . . . . . . . . . . . . . . . . . . 14 1.4 Supported host operating systems . . . . . . . . . . . . . . . . . . . . . . . . . . 16 1.5 Host CPU Requirements . . . . . . . . . . . . . . . . . . . . 5.6 Cloning disk images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 5.7 Host I/O caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93 5.8 Limiting 6 Internal networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 6.7 Host-only networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 6.8 UDP Tunnel

course Quiz time 2 Patterns Oldschool host device all the things© host device everywhere Conditional function body constexpr everything Disable Cuda warnings host device template 3 The dark path Function Function dispatch triple 4 Cuda proposal Conditional host device Forbid bad cross function calls 3/664/66 Motivation Patterns The dark path Cuda proposal Thank you Motivation 1 Motivation Audience Allowed function calls in Cuda CPU host GPU global device9/66 Motivation Patterns The dark path Cuda proposal Thank you Allowed function calls in Cuda CPU host GPU global device global ≃ device10/66