UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER

UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES CNIL May 2006 Report These slides found at http: //iris. eecs. berkeley. edu/reports/ 10/27/2021 1

UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Mission: Provide excellent computing and networking services in support of the EECS department's instructional and research goals. Last years’ goals: Improvement of Instructional Services • Consolidation, Refurbishing Labs (119 Cory, 330 Soda, 276 Soda, 277 Soda) • Refresh Hardware • Better sharing of people and servers Strengthening research IT infrastructure (focus on security) • Campus Minimum Security Standards – we’re farther along than everyone • VPN, patches, 802. 11 a, encryption, authentication, firewalls, passwords, port scanning, reduce unnecessary services, training, etc. • Plus: Logging, access control, physical security • Still expensive and hard to do well (and people are the risk) 10/27/2021 2

UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Some Other Accomplishments From Last Year • New Helpdesk office in 313 Soda M-F 9 am-1 pm • IRIS Webpage FAQs • New support for Mac OSX • Added CUSG printer support contracts • Created “yum” repository for updating Linux client software. • New Barracuda Anti-Spam Servers • eliminated internal mail relays • Air. Bears and 802. 11 a service to Soda, Cory, BWRC, and HMMB • MESH network across large swaths of campus Thanks to Chairs Malik and Lee, CUSG debt is eliminated at FY end 10/27/2021 3

UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Staff Changes • From 31 FTE to 30 FTE • New IT Director – Eric Fraser • New ISG Staff – Linda Huang • New IMG Staff – Emrys Ingersoll 10/27/2021 4

UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Network Rolling Upgrade Replace Core Network this year Core Wireless Closet 4 years • Equipment at end of life • Improve bandwidth between Soda and Cory to 10 Gb • Improve bandwidth to centralized storage and other services to 10 Gb • Higher backplane bandwidth to support Gb to the desktop in the next round of upgrades • Can offer Gb to the desktop or server rooms at a cost to the user of $16 K for 48 -ports Replace Firewalls this year • Equipment at end of life • Current system is susceptible to DOS attacks 10 Gb to campus is possible for an additional ~$10 K but likely premature • This would allow high bandwidth to Campus Datacenter, not to CENIC • Will wait until driven by research needs or co-location to campus datacenter Replace wireless infrastructure next year Replace closet networking in two years • At that time full Gb to desktop will be supported Network ICF fee stays same this year as last. Next 2 years should increase and then level off (offset by future decreases in storage and CIS) 10/27/2021 5

UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Storage Updates Historically, Storage needs have grown at a rate of 1 TB/year Current Net. App System • Nearing full capacity of design • Net. App is very expensive for everything • but, has been extremely flexible and reliable Net. App Additional Capacity this year • buy 1 TB of storage, which puts us at capacity of current system • additional growth on current hardware possible by reducing the duration of snapshots Purchase small amount of new hardware this year to ease migration to more flexible hardware next year • SAN solution • looking at solutions from Sun, IBM, and Blue. Arc What additional types of storage would you like to see? • Premium with no backups • Archival storage for read-only (such as web pages for old project data) • Temporary scratch, work, or collaborative space • Web-based 10/27/2021 6

UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Identity Management Unifying EECS Usernames with Cal. Net ID Background • EECS has historically kept unified user space over 5000 computers, 1500 users • Recent campus deployment of Cal. Net “friendly” usernames • Useful to unify user@eecs. berkeley. edu with user@berkeley. edu • Many campus services (Blu, Uni. Bears, Air. Bears, BFS) now utilize Cal. Net for authentication • In long-run could shift burden of account mgmt. to campus and free up technical resources Immediate Goals • Encourage all EECS users to setup Cal. Net ID to one that matches EECS username • Where there is a conflict • Attempt to reclaim Cal. Net ID to match EECS username (some success in the past) • or, consider changing EECS username • Develop an LDAP plug-in which will authenticate first against EECS, then against Campus • this will even work if EECS and campus names/passwords do not match Longer-term goals • Support longer usernames on EECS systems (Jan 2007) • LDAP authoritative server for Unix (Jan 2007) • Windows logins synchronized with LDAP (not yet tested) • Integration with Cal. Net ID • also working on single sign-on Cal. Net ID for web applications (EECS/ERSO) 10/27/2021 7

UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Fiscal Year 2005 -06 Fiscal Year 2006 -07 % Difference $75. 50/month/user 0% Collaborator $25. 00/month/user 0% Emeritus $12. 00/month/user 0% ICF - Resident $9. 75/month/user 0% $2. 50/month/user 0% $7. 00/GB/month $4. 50/GB/month -21% $890/year 0% $2670/year 0% $94. 50/hour 0% FEE Structure CIS - Full User Non-Resident Storage CUSG - Desktop Server Time and Materials Dropped previously proposed $5/month windows charge 10/27/2021 8