TeraGrid SC06 1

TeraGrid Workshop – SC’06 Grid Interoperability: 

TeraGrid Workshop – SC’06 Grid Interoperability Christian Todorov November 13, 2006

Agenda: 

Agenda Internet2 Overview The New Internet2 Network InCommon Reservation and Related Projects

Slide3: 

The Internet2 Overview 208 University Members 70 Corporate Members 52 Affiliate Members 2 Associate Members The Internet2 Community

Slide4: 

48 International Partnerships and Growing Europe ARNES (Slovenia) BELNET (Belgium) CARNET (Croatia) CESnet (Czech Republic) DANTE (Europe) DFN-Verein (Germany) FCCN (Portugal) GARR (Italy) GIP- RENATER (France) GRNET (Greece) HEAnet (Ireland) HUNGARNET (Hungary) NORDUnet (Nordic Countries) PSNC/PIONER (Poland) RedIRIS (Spain) RESTENA (Luxembourg) RIPN (Russia) SANET (Slovakia) Stichting SURF (Netherlands) SWITCH (Switzerland) TERENA (Europe) JISC, UKERNA (United Kingdom) Africa MCIT [EUN/ENSTIN] (Egypt) TENET (South Africa) Middle East Israel-IUCC (Israel) Qatar Foundation (Qatar) South Asia ERNET/CDAC (India)

Slide5: 

80+ Networks reachable via International Peerings http://abilene.internet2.edu/peernetworks/international.html

The New Internet2 Network: 

The New Internet2 Network Architecture

Slide7: 

The New Internet2 Network Develop a cost-effective, innovative optical system on a national footprint to serve the broad R&E community Develop a hybrid network capable of providing point-to-point /multipoint wavelength services together with an IP network Community must have complete control of the layer 1 optical system – including provisioning and switching of wavelengths Internet2 should not have to concentrate on reliability and sparing The community focus should be on networking and research, not on managing devices like amplifiers The system must be capable of supporting network research in wide variety of ways Minimal Conditions of Use (CoU), allowing full participation from the entire community in providing new services and capabilities Architecture Design Goals

Slide8: 

The New Internet2 Network Built on dedicated fiber from Level(3) Communications – 13,000+ mile footprint Built on Infinera innovative optical technology Simple and convenient add/drop technology Simple and convenient wave setup Demonstrated high reliability in initial period of operation on the Level(3) network Economics of Infinera system are disruptive in the market place Architecture has maximum flexibility Every direct connector can access every wave on the system if needed Adding add/drop points doesn’t require network redesign Network Design

Slide9: 

System includes grooming capabilities - lightpaths can be built over Ethernet or SONET Can take advantage of advanced SONET capabilities like GFP, VCAT, and LCAS Capable of lightpath provisioning to the campus Regional connectivity expected to evolve to 2 x 10 Gbps connections 10 Gbps IP connection 10 Gbps point-to-point connection (capable of STS-1 granularity lightpaths provisioned in seconds), most likely provision using Ethernet (GFP based) Hybrid capabilities The New Internet2 Network Network Design

Slide10: 

Internet2 Network DWDM Topology

Slide11: 

Infinera DWDM Gear - Static at the start Grooming capabilities in ADM to provide sub channels and HOPI types of activities at the start Simplified and standardized interface to connectors, exchange points, and other global research and education networks - 2 x 10 Gbps interfaces Measurement and control servers will support the node Internet2 Network Node Architecture

Slide12: 

Internet2 IP Network

Slide13: 

Initially provisioned with ten 10-Gbps wavelengths (100 Gbps) with all 10 dropping at each core optical node Unlimited capacity: Will add more wavelengths on additional fibers if necessary Scalability: Potential for 40 & 100 Gbps wavelength support Reliability: Level(3) provides service level agreements (SLAs) for these wavelengths Flexibility: Support for dynamic provisioning and wavelength switching The New Internet2 Network Architecture Summary

Internet2 Network Acceptable Use Policy: 

Internet2 Network Acceptable Use Policy New Internet2 Network Acceptable Use Policy (AUP) The Internet2 network can be used for any legal purpose, so long as it does not interfere with or adversely affect the operation of the Internet2 network or any network user, as may be determined by Internet2. In addition, when using the Internet2 network, users shall be subject to any posted guidelines or other rules, including Internet2's Privacy Policy, Spam Policy and Copyright Policy. All such guidelines and rules are hereby incorporated by reference into this AUP. Internet2 reserves the right to modify this AUP (and its posted guidelines or other rules) from time to time and intends to provide advance notice of any such modifications.

The New Internet2 Network: 

Services & Research The New Internet2 Network

Slide16: 

The New Internet2 Network “On-net” Waves: point-2-point or point-2-multipoint sub-λ circuits Free short-term, dynamically provisioned, deterministic STS-1 granularity circuits with framing either SONET or GFP mapped Ethernet – subject to blocking. Guaranteed medium to long-term circuits – price determined by distance, speed, duration Long-term waves for a minimum of 1 year with guaranteed SLAs Can provide ultra-high availability waves utilizing protection capabilities “Off-net” Waves: OC-x or DS-x provisioned services on the Level(3) footprint beyond Internet2 Network backbone Wavelength Services

Slide17: 

The New Internet2 Network The Internet2 Network is an ideal platform for network research - the ability to support both highly experimental projects along with production based services is a key objective The Abilene Observatory will be expanded to include the new capabilities of the network Data collection at all layers of the network, with datasets made available to network researchers Support for collocation of equipment in optical nodes Flexibility is key feature of the new network Smaller projects at lower bandwidths can be supported on variable footprints Projects can also be supported for variable lengths of time NSF projects like VINI and GENI can be supported by the new network Network Research Support

Slide19: 

InCommon is a formal federation of organizations focused on creating a common framework for trust in support of research and education. InCommon supports web-based distributed authentication and authorization services, an example of which is controlled access to protected library resources InCommon makes sharing protected online resources easier. Built using Shibboleth® authentication and authorization technology, InCommon enables cost-effective, privacy-preserving collaboration among InCommon participants. InCommon eliminates the need for researchers, students, and educators to maintain multiple, password-protected accounts. The InCommon federation supports user access to protected resources by allowing organizations to make access decisions to resources based on a user's status and privileges as presented by the user's home institution. What is it?

Slide20: 

Participation in InCommon means that trust decisions regarding access to resources can be managed by exchanging information in a standardized format. Using a standard mechanism for exchanging information provides economies of scale by reducing or removing the need to repeat integration work for each new resource. Since access is driven by policies set by the resource being accessed, higher security and more granular control to resources can be supported. Reduced account management overhead is another benefit, since users can be authenticated and access resources from the home institution and no longer need separate accounts to access particular resources. InCommon is operated by Internet2 to provide consistency and participant support. Contact John Krienke for further information:jcwk@internet2.edu Benefits

Slide21: 

Authentication: Federated Identity Users log in to home organization, which carefully manages personal information Authorization: Federated Access Management Resources allow access based on agreed upon levels of privacy and personal information release. The InCommon process:

Slide22: 

Logical Process Flow

Reservation and Related Projects : 

Reservation and Related Projects BRUW – Bandwidth Reservation for User Work – Project of Internet2 OSCARS - On-demand Secure Circuits and Advance Reservation System – Project of ESnet There has been code sharing between the projects, which have focused on user level reservations of bandwidth and network resources. Much of the recent development has been done by the OSCARS team. DRAGON – Dynamic Resource Allocation via GMPLS Optical Networks – NSF funded project that is used by multiple networks and was a key participant in the Internet2 HOPI (Hybrid Optical Packet Infrastructure) project.

Questions?: 

Questions?