CCNIE workshop Campus Infrastructure GENI racks Heidi Picher

CC-NIE workshop : Campus Infrastructure GENI racks Heidi Picher Dempsey January 7, 2013 www. geni. net Sponsored by the National Science Foundation January 7, 2013 1

Outline • GENI Racks and Connections • Campus Requirements • GENI Rack Installation and Support Sponsored by the National Science Foundation January 7, 2013 2

GENI Racks and Connections • Racks provide reservable, sliceable compute and network resources using Aggregate Managers (AM). • Comply with GENI AM API • Support GENI RSpec v 3 • Support federation with existing Slice Authorities (GENI Project Office (GPO), Proto. GENI (University of Utah), and Planet. Lab Central (Princeton University) for access now Sponsored by the National Science Foundation January 7, 2013 3

Racks and Connections (cont. ) • Racks are GENI Aggregates • GENI Meta. Operations (Indiana University) provides support, monitoring and escalation • Internet 2 and NLR provide core data plane resources that experimenters can control • Regionals provide more network resources that experimenters can control (CENIC, Gp. ENI, Kan. REN, MOXI, MAX, NYSERNET, SOX, UEN) • GENI network resources interconnect and coexist with other research networks (e. g. Star. Light) Sponsored by the National Science Foundation GMOC Identity Provider GENI Clearinghouse Experimenter Tools January 7, 2013 Aggregates* * Includes GENI racks and (if desired) designated campus resources 4

Core Connections: Layer 2 Now GENI AL 2 S GENI PG GENI AL 2 S GENI PG GENI AL 2 S Peering GENI PG NLR (5 -8 nodes) GENI AL 2 S • • • Multiple 1 G and 10 G connections with VLANs connecting experimenter nodes Campus access to Internet 2 via ION/DYNES or direct connection (existing or AL 2 S) Campus access to NLR via Frame. Net or direct connection I 2 map with GPO edits Sponsored by the National Science Foundation January 7, 2013 5

Core Connections: Internet 2 AL 2 S Sponsored by the National Science Foundation January 7, 2013 6

Core Connections Coming Soon (starting 2013) • Full GENI implementation on AL 2 S • Peering with multiple SDN networks possible (e. g. NLR, Southeast Network Access Point) • Campus access via stitching or direct connection to AL 2 S (see CCNIE architecture slides) • Support experimenter control of nodes or access to AL 2 S production services Sponsored by the National Science Foundation January 7, 2013 7

GENI Rack Campus Requirements • Provide space, power, security (as with other campus IT resources) • Provide at least 1 Gbps Open. Flow/SDN path from rack to campus boundary • Connect campus resources to GENI rack for faculty/experimenter use • Operate with up-to-date GENI-specified software (e. g. AM API, Open. Stack) • Provide no-cost access to rack resources for GENI authorized users at other campuses • Provide points of contact for GENI response team (see http: //groups. geni. net/geni/attachment/wiki/Comprehensive Security. Pgm/Aggregate Provider Agreement v 3. pdf ) Sponsored by the National Science Foundation January 7, 2013 8

Installation and Support: GENI Rack Teams • • Insta. GENI: University of Utah (software and engineering), partnered with HP Labs (commercial hardware/firmware), Northwestern University (deployment coordination and engineering) and Princeton (Planet. Lab integration). Exo. GENI: RENCI and Duke (software and engineering), IBM (commercial hardware/firmware and on-site installation) GENI also provides Open. Flow developer support for both teams via Open Network Labs All teams support open source development and share via their project and GENI wikis and repositories Sponsored by the National Science Foundation January 7, 2013 9

GENI Rack Installation and Support Flow Sponsored by the National Science Foundation January 7, 2013 10

Support: GPO Testing • Acceptance Tests for experimenter, administrator, and monitoring functions still underway – Exo. GENI experimenter functions good, shared monitoring and administration in progress – Insta. GENI network and administration tests delayed by delivery logistics, monitoring just added • Confirmation Tests for each installation • Interoperability testing for GENI AM API and RSPECs with Omni command-line tool releases • Latest Status http: //groups. geni. net/geni/wiki/GENIRacks. Home/Exogeni. Racks/Accept ance. Test. Status http: //groups. geni. net/geni/wiki/GENIRacks. Home/Instageni. Racks/Acce ptance. Test. Status http: //groups. geni. net/geni/wiki/GENIRacks. Home/Exogeni. Racks/Confir mation. Test. Status http: //groups. geni. net/geni/wiki/GENIRacks. Home/Instageni. Racks/Confi rmation. Test. Status Sponsored by the National Science Foundation January 7, 2013 11

Support: Access and Usage Policies • GENI Slice Authorities currently used for control plane access to GENI rack, clearinghouse in progress -- more on this in Marshall’s talk • Campus sets policies for GENI rack connections to campus data plane before installation • Rack teams, GPO and campus staff configure security policy control points for data plane during installation and test (e. g. in campus, GENI rack and Science DMZ switches/routers) • Campus staff uses FOAM (with or without automated approval) for per-service operations control of GENI rack Open. Flow connections to campus data plane (no admin needed for others). Sponsored by the National Science Foundation January 7, 2013 12

GENI Rack Campuses Funds in hand Needs funding Oct. 24, 2012 • 43 racks planned this year • Track on GENI wiki Sponsored by the National Science Foundation January 7, 2013 13

GENI Rack Spiral 5 Installations • 43 GENI-sponsored racks with integrated Open. Flow, compute nodes, and some support for dynamic VLANS deploying this year • More campuses adding racks independently (e. g. CC-NIE, commercial projects) • Software updates expected for each rack, will retest to verify • Schedules subject to change based on campus readiness – looking for early adopter interest from this workshop Sponsored by the National Science Foundation January 7, 2013 14

Exo. GENI Draft Deployments DRAFT ONLY Subject to Change Sponsored by the National Science Foundation January 7, 2013 15

Insta. GENI Draft Deployments Location City State Arrival Month Regional Net Northwestern University Chicago IL Jan-13 MREN Clemson University Clemson SC Feb-13 SOX Georgia Institute of Technology Atlanta GA Feb-13 SOX Princeton University (temporary) Princeton NJ Feb-13 MAGPI New York University New York NY Mar-13 NYSERNET Lawrence KS Mar-13 Kan. REN Carnegie Mellon University Pittsburgh PA Apr-13 3 ROX Rutgers New Brunswick NJ Apr-13 MAGPI Southern Crossroads (SOX) Atlanta GA Apr-13 SOX Stanford University Stanford CA May-13 CENIC University of California, Berkley CA May-13 CENIC University of Maryland College Park MD May-13 MAX Corporation for Education Network Initiatives in California (CENIC) La Mirada CA Jun-13 CENIC University of California, San Diego CA Jun-13 CENIC University of Washington Seattle WA Jun-13 PNWGiga. POP Sponsored by the National Science Foundation Syracuse NY Jul-13 NYSERNet University of Illinois. Urbana Champaign IL Jul-13 MREN University of Southern Los Angeles California CA Jul-13 CENIC Cornell University NY Aug-13 NYSERNET University of Missouri Kansas City MO Aug-13 GPN University of Wisconsin WI Aug-13 Wisc. Net Case Western Reserve Cleveland University OH Sep-13 OARnet Indiana University IN Sep-13 I 2 University of Chicago IL Sep-13 MREN Midwest Open. Flow Crossroads Initiative (MOXI) Bloomington IN Oct-13 MOXI Naval Postgraduate School Monterey CA Oct-13 DREN University of Michigan Ann Arbor MI Oct-13 MOXI Ohio State University Columbus OH Nov-13 OARnet University of Colorado Boulder at Boulder CO Nov-13 Front Range Giga. Po. P University of Hawaii Honolulu HI Nov-13 PNWGiga. POP University of Kentucky Lexington KY Nov-13 University of Missouri. Columbia MO Nov-13 GPN January 7, 2013 Ithaca Madison Bloomington DRAFT ONLY Subject to Change University of Kansas New York State Education and Research Network (NYSERNet) 16

Current Support • Help for campuses and experimenters – GMOC helpdesk (call, ticket, or email 24 x 7 x 365) http: //gmoc. grnoc. iu. edu/gmoc/index/support. html – help@geni. net mailing list – IRC/chat (informal) http: //groups. geni. net/geni/wiki/How. To/Connect. To. GENIChat. Room • GMOC support for racks and Open. Flow campus infrastructure – Monitoring and status for GENI sites and racks http: //gmoc-db. grnoc. iu. edu https: //gmoc-db. grnoc. iu. edu/protected/ – – requires admin password Scheduled/unscheduled outage reporting and calendars Emergency Stop Escalation, tracking, some troubleshooting for reported problems Draft workflows • Security related support (Legal, Law Enforcement and Regulatory Reps) http: //groups. geni. net/geni/attachment/wiki/Comprehensive. Security. Pgm/LLR Responsibilities of GENI. pdf Sponsored by the National Science Foundation January 7, 2013 17

Current GENI Monitoring Examples Virtual Machines on Racks FOAM aggregates Sponsored by the National Science Foundation Slivers on Racks January 7, 2013 * Open Source monitoring client available in Python * Updated monitoring software running on all racks, backbones, and most Open. Flow aggregates * Monitoring uses URNs for resource names for better interoperabilty * Format for Insta. GENI and Exo. GENI reported data is similar 18

Current Vendor Experience Examples • Vendors often don’t implement full Open. Flow spec • Hybrid mode support varies significantly • The Quilt RFP for SDN vendors http: //www. thequilt. net/index. p hp/quilt-news/231 -quiltannounces-openflow-switchauthorized-quilt-providers Sponsored by the National Science Foundation January 7, 2013 19