Status of the WIS VPN Pilot Project in

Status of the WIS VPN Pilot Project in Region II and V Prepared for ET-WISC Geneva Oct 11 -14, 2005 Akihiko Nakazono Toshikazu Nishio Japan Meteorological Agency

Background-1 • In 2004, the FWIS VPN Pilot Project was launched as a collaborative project between Regions II and V and eleven volunteer NMHS in the Regions participated in the project. – RA-II: China, Hong Kong, India, Japan, Republic of Korea, Saudi Arabia, Vietnam – RA-V: Australia, Brunei, Malaysia, New Zealand • The Project successfully proved that it was feasible for relatively small centers to establish a VPN link through Internet as long as they would receive appropriate technical assistance from advanced centers.

Background-2 • Outcomes of the Project were presented to the ITT-FWIS meeting held in September 2004, Geneva. • The meeting highly appreciated the Project especially for promoting involvement of small centers in activities toward development of WIS, and it also requested to continue the Project extending to the WIS application level in cooperation with other pilot projects for WIS application components such as request/reply portal and metadata standards.

Concept of the Advanced Phase To study how small Centres that have less expertise and/or less telecom infrastructures could get benefits from forthcoming advanced WIS environment to their operational purposes through Internet-VPN.

Major Challenges s Comprehensive and continual tests from transport level to application level s Simulation of NC operation with prototype applications supported by prototype GISC/DCPC servers. s Prototype application of data input service driven by WMO metadata and schema, and support MTDCF s Study of authorization and authentication methods for secure data reporting and providing s Possible cooperation with other Pilot Projects s Expansion of participants.

Outline • Two years project from 2005 through 2006 • 13 Participants (as of 1 st October 2005) – RA-II: China, Hong Kong, India, Islamic Republic of Iran, Japan, Republic of Korea, Oman, Saudi Arabia, Vietnam – RA-V: Australia, Brunei, Malaysia, New Zealand • Internet bandwidth of the participants varies from 512 Kbps to 440 Mbps • Beijing, Melbourne, and Tokyo act as provisional GISC/DCPC, and others act as provisional NC

Challenges of the VPN • Establish Permanent Internet-VPN • Establish VPN through dial-up, mobile or temporary Internet environment • Use of private IP Melbourne address in the VPN Beijing Tokyo • Use of IPv 6 Hong Kong Hanoi ( option) Permanent VPN link Simulating GISC/DCPC New Delhi Internet Seoul Kuala Lumpur Tehran Darussalam Jeddah Muscat Wellington VPN links among centers participating in the pilot project

Prototype Application & Server • Use SATAID as the prototype user application for NCs • Use PANDORA for the prototype data server Application portal Data portal Software updating Updated Application software VPN Gathering data from different data sources NC (National Centre) Internet Prototype application NWP products Satellite data Data sources Satellite data Reference information

SATAID • SATAID is an application program originally developed for meteorological training, especially for nephanalysis. • SATAID could display most of meteorological data, e. g. GPV, radar, profiler as well as satellite images, has many useful image analyzing capabilities, e. g. superposition, animation, cross-section, drawing contour, annotation. • SATAID has been registered on WMO VL resource library

An example of SATAID

PANDORA Server • PANDORA Server is an http driven data and proxy server. • PANDORA works as one-stop data server, it forwards a request automatically if it can’t satisfy a request by itself and other PANDORA could. • PANDORA has capability of data conversion and cut off to decrease the quantity of transfer data. • PANDORA has been installed at Bo. M for training avtivities while inside JMA for operational purposes.

Structure of PANDORA http: //hostname/ITGRAD 10/_IRDLLLY. AASV. IE 10/2005 -06 -08 t 0600/　 none/2005 -06 -08 t 0600/min 1/1/1/　 PI 10 LV/data 0. grb 2 Client USER Application (SATAID) PANDORA SERVER Request Forwarding Apache Request Proxy Request Reply Pandora Script Reply Converter Cache DATA Metadata Other PANDORA SERVER

Collaboration with UNIDART • VPN-PP is collaborating with other Pilot Projects, especially UNIDART • JMA already implemented a test Client, and going to build a server to provide data catalog which is compliant to WMO Metadata Std. Data source Request/Reply with authentication Cooperation with UNIDART project in RA VI Internet VPN Data GRID Data sources UNIDART portal Catalogue Matadata

Reporting Observed Data (Data Input Service) Station index Date/Time Input data on Web WIND_dir WIND_spd Secure connection (VPN or HTTPS) NC (National Centre) Reporting observational data Internet 47401 01 0600 360 10 Visibility 20 Air temp 12. 4 Dew point 9. 7 Pressure 01 1002. 5 SMJP 01 RJTD 010600 AAXX 01064 47401 41/70 23610 10124 20097 40025. . = <xml> <xmlusers>country name</xmlusers> <code>47401</code> <date>20050101</date> <time>0600</time> <winddeg>360</winddeg> Data creation <windspeed>10</windspeed> <view>20</view> Conversion to BUFR <temp>12. 4</temp> <dew_point>9. 7</dew_point> <pressure>1002. 5</pressure> 2132330 E 1 A 10 FE 00112 A 0 B 0 AA </xml> Data in XML BUFR

Utilization of IPv 6 • Additional collaborative IPv 6 test is planned among　Bo. M, KMA, and JMA • Test items are being discussed among technical contacts • IPv 6　Addresses – Bo. M : 2001: 8 ffff: 8001: : /48 – KMA : 2001: – JMA : 2001: 240: E 5: : /48

Progress of the Advanced Phase • Build basic system and opened the VPN-PP Web Site for VPN users (early July 2005 ) • Established first VPN connection with HKO (21 st July) • Opened Discussion Web Page (12 th Aug) • Opened Traffic analysis Web Page (22 nd Aug) • Established IPv 6 Access (26 th Aug) • Installed PPTP based VPN for mobile users (9 th Sep) • Opened Web site to non-VPN users (16 th Sep) • Opened MTSAT imagery page (22 nd Sep)

Coming Soon-1 • Complete Establishing VPN Connections with All Participating Centres • Data service with PANDORA server for the prototype application - SATAID • Cooperate UNIDART by providing catalog and data • Monitoring throughput of Internet-VPN • Coordinate IPv 6 utilization with Bo. M and KMA

Coming Soon-2 • Enrich Prototype Data ( add GPV, …) • Create & Provide Data Catalog in accordance with WMO Metadata std. • Accept Reporting data through VPN and Convert it to TDCF • Prototype schema driven input method, that could check major errors at input

WIS VPN-PP Homepage

What’s New Page

MTSAT Imagery List

Discussion Room

Traffic Monitoring

Continuous Monitoring of the Round Trip Time

Traffic Monitoring

Monitoring WEB Service

Thank You