Transcript Document

AARNet Copyright 2014
AARNet update
Guido Aben
eResearch Director, AARNet
AARNet Copyright 2014
National Research Network
AARNet Copyright 2014
12 Projects to extend the NREN
Brisbane Metropolitan Fibre Ring - Stage 2
Brisbane Outer Metro Fibre Ring - Stage 1
Greater Perth Fibre Ring
Greater Sydney Basin Network
Lighting the AARNet Backbone - Adelaide to Perth
Murchison Radio-astronomy Observatory (MRO) Connectivity
Network Enhanced Ultra-sensitive Radio Astronomy Instrument
RDSI DaShNet
Sunshine 100Gbps Backbone
Sunshine Backbone Network Tails
TREN - Regional Network
Victorian Research Network
3
AARNet Copyright 2014
Connectivity to the MRO
Murchison
Radio
Observatory
Geraldton
Pawsey Centre,
Perth
5 x 10Gbps scalable to 80 x 100Gbps
4
AARNet Copyright 2014
Network Enhanced Ultra-Sensitive Radio Astronomy Instrument
Murchison Radio
Observatory
Narrabri
Mopra
Pawsey Centre
Parkes
Dedicated n x 10Gbps overlay network from observatories to compute
5
AARNet Copyright 2014
Network Enhanced Ultra-Sensitive Radio Astronomy Instrument
Dedicated n x 10Gbps overlay network from observatories to compute
6
AARNet Copyright 2014
Upgrade options
AARNet Copyright 2014
8
AARNet Copyright 2014
Science DMZ
AARNet Copyright 2014
The problem
10
AARNet Copyright 2014
Motivations
“Friction free networking”
1. Network architecture for high performance applications
2. Dedicated systems for data transfer
3. Performance and network measurement tools
4. Security mechanisms designed for high performance
11
AARNet Copyright 2014
Current university connection
University campus
Border router
AARNet
PE
Enterprise firewall
Site/Campus
LAN
APL-NTU
To other R&E destinations
or the internet
All flows pass through firewall,
impacting performance
12
Data-intensive
resources
- Staff
- Students
- Instruments
- Compute/storage
- etc
AARNet Copyright 2014
University connection with S-DMZ
To other R&E destinations
or the internet
University campus
Border router
AARNet
PE
Enterprise firewall
Site/Campus
LAN
APL-NTU
Clean, high-bandwidth
path to/from WAN
Site/campus access to
Science DMZ resources
Per-service
security policy
control points
Data-intensive
resources
Border Edge Switch/router
Science DMZ
13
Data Transfer Node with
high-speed storage
- Staff
- Students
- Instruments
- Compute/storage
- etc
AARNet Copyright 2014
Benefits
Performance:
Improve performance for data-intensive research
Improve general traffic by offloading “elephant flows”
High-speed access to cloud resources (RDSI, AWS, …)
14
Usability:
Software tools to enable high-speed data transfer
Integration with AARNet4 private VPN services
Cost:
Delay expensive firewall upgrades
Maximise investment in AARNet connection
High-speed switches, rather than expensive routers
Security:
Layered security, applied on both network and host
Firewalled traffic is to a known destination (Data Transfer Node)
AARNet Copyright 2014
DaShNet
AARNet Copyright 2014
RDSI : high speed network connectivity
Primary Node
Secondary
Node
AARNet 4
Routed Access
Inter-node VPN
“Enabling researchers to use, reuse and manipulate significant data collections”
16
AARNet Copyright 2014
RDSI & Science DMZ
AARNet backbone network
APL
APL NAP #1
RDSI
Node
Node
PerfSonar 1
PerfSonar 2
BES-1
AARNet
Layer 3
PE1
DTN 1
Node network
infrastructure
APL-NTU1
Node
Storage
DTN 2
Inter-Node VPN
PE2
APL-NTU2
BES-2
APL NAP #2
17
AARNet Copyright 2014
PerfSonar
18
AARNet Copyright 2014
DTN : Aspera + Globus Online
19
AARNet Copyright 2014
Software Defined Networking
AARNet Copyright 2014
Traditional vs. SDN
Network management
applications
Network device
Network OS
Network device
Network OS
Network device
Network OS
Network device
Network OS
Traditional Network
21
21
AARNet Copyright 2014
Traditional vs. SDN
Application layer
Network management
applications
API
Business applications
Controller layer
Network OS
Network device
Network services
Network device
API
Network OS
Network OS
Infrastructure layer
Network device
Network device
Network OS
Network device
Network device
Network OS
Traditional Network
22
Network device
Network device
Network device
SDN Network
AARNet Copyright 2014
AARNet SDN Testbed
23
AARNet Copyright 2014
AARNet SDN Testbed
Researchers
SDN lab
Researchers
Researchers
Researchers
SDN lab
SDN lab
SDN lab
24
AARNet Copyright 2014
Thank You