Rick SummerhillChief Technology Officer, Internet2

rrsum@internet2.edu

TIP 200821 January 2008

Honolulu, HI

Internet2 Update

Contents

• Technologies• Middleware• Security• Network Research Support• Performance• Dynamic Circuit Services

• The Internet2 Network• Services• Future Challenges

Middleware

• Shibboleth 2.0 should be out within a month• Completes the Shib/SAML Integration

• InCommon continues to grow• New investigations on federation peering - now 15-

20 international federations• COManage work continues

• Leverages federated identity and the attribute ecosystem• Shib-enabled; uses Grouper to manage groups, Signet to

manage privileges, Eddy for diagnostics• Open and proprietary applications can be plumbed to work

with it• See some of the detailed talks on Middleware

Security

• Much of the activity will be moving toward the campus level

• Support for and collaboration with the REN-ISAC• Incident handling

• SALSA working groups• Disaster Recovery• CSI-2 (Interoperable security incident reporting)• Federated wireless access

• Grants to investigate security efforts• Integration of identity management and security efforts

(CAMP in next few weeks - full)

Network Research Support

• Observatory data usage continues to grow• Investigating data needs at lower layers

• Continue work on grants like Ultralight, DoE, and 100x100• Deploying a small experimental network using netFPGA

cards for the 100x100 project

• Investigating use of new (old?) ideas like Phoebus• Investigating international connections and how to

measure• Support for recent GENI solicitation

Performance

• End-to-End performance monitoring• Primary component under development is PerfSONAR• What is perfSONAR?

• A set of protocols and schemas for implementing a service-oriented architecture for sharing and controlling network performance tools

• A community of users and developers (Internet2, ESnet, GEANT2, and RNP)

• A set of software (the sample implementation)

• Java release v2.1 available• perfSONAR-PS beta released this week• Encourage deployment at all levels - campus,

regional, national, and international

Dynamic Circuit Network

• Designed using the work done through the HOPI (Hybrid Optical and Packet Infrastructure) project (more on that later).

• Currently uses the Ciena infrastructure• To be extended to the full infrastructure as more is

developed.• The DCN software suite now available - current

version 0.2• Developed by Internet2, ESnet, and DANTE through

the DICE collaboration• Encourage participation of a wider group of developers - contact

Internet2 if there is interest

The Internet2 Network

• Designed with the following in mind:• The R&E community runs applications with very

demanding needs, from high bandwidth to quality of service• Demand for control at lower layers of the the

network stack

• Interest in Hybrid Networking - using networks at different layers in innovative ways• How can one augment layer3 networks with layer1

capabilities

The HOPI Testbed

• Understanding these capabilities lead to the HOPI project

• HOPI is now being decommissioned, although several segments continue to exist

• Successful project that lead to DCN• Many thanks to the HOPI partners, including

• Force10, Glimmerglass, and HP• The TSC (testbed support center) including IU, NCREN, and

MAX• Some support for DCN continues from these groups

• Special thanks to the NSF and the DRAGON project

10

Internet2 IDEA Awards• For advanced applications with:• Positive impact• Technical merit• Potential for further adoption

• IP and (new) static wave categories• Winners receive recognition and

(for static wave category) 10 Gbps circuit on Internet2 Network

• Submit by 28 January 2008• Additional information available at the

information table

www.internet2.edu/ideawww.internet2.edu/idea

The Internet2 Network Design Goals• Multiple layers…Multiple domains…One

infrastructure, flexibility at all layers• IP services• Static Wave services• Dynamic Wave services• Commercial Peering services

• Carrier-class reliability / Massively scalable / Flexible

• Enable both production services and also experimental services

• Continue technical innovation & vision in the global Research and Education community

• Initially provisioned with ten 10-Gbps wavelengths (100 Gbps) with all 10 dropping at each core optical node

• Unlimited capacity: Can grow beyond 40 wavelengths on additional fibers with linear costs

• Community Controlled: Complete access to the entire system - IU NOC now controls all layers in the network

• Reliable: Level(3) provided service level agreements on waves

• Scalability: Potential for 40 & 100 Gbps support• SC 06 and SC 07 demos of 40 and 100 Gbps

• Rapid/Flexible: Reprovisioned (10GE to OC-192) and tested 10 λ’s between NYC-DC-Chicago (~1000 miles) in 31 minutes!

The Internet2 Network Architecture Summary

Internet2 Infrastructure

Wave Infrastructure - ESnet and Internet2

• The Internet2 Hybrid Network• The Internet2 IP network• The Internet2 circuit infrastructure, dynamic in nature

• The ESnet Hybrid Network• The ESnet IP network• The ESnet SDN circuit (dynamic) network

• The wave infrastructure can support multiple networks• Internet2 has complete control of the wave infrastructure• It can support both highly experimental and production

quality

• The Internet2 Network as follows:

Internet2 NetworkPartners

Services • Hybrid Network• IP Network

• Research Traffic similar to the past• Commodity Peering Services

• Dynamic Circuit (DC) Network

• Waveco• Static Waves (SONET or Ethernet) on the Infinera

Platform• Static Circuits (SONET or Ethernet) on the Ciena

Platform

• Fiberco• Dark fiber (and ancillary services); professional

services

Static Circuit Services

• Physical Connections: • 1 or 10 Gigabit Ethernet• OC-192 SONET

• Circuit Service Types:• Point-to-Point Ethernet Circuit, tagged or untagged• Point-to-Point SONET Circuit • Bandwidth provisioning available in 50 Mbps

increments

Static Circuit Services

• Provide for user specific network paths:• Guaranteed bandwidth• Deterministic behavior in terms of bounds on jitter,

latency, and packet loss rates

• Can be provisioned in multiple ways:• Over Infinera backbone• Over the Ciena CoreDirectors• Even via MPLS over IP network

Commercial Peering Service

• Potential to position R&E community as the leader with respect to IPv6 connectivity

• Working with commodity providers to enable new IP multicast applications

• Insure net neutral paths between R&E community and commodity-hosted content, services, and users.

Internet2 Dynamic Circuit Network (DCN)• Similarities to IP Network

• One-arm connection• Protocol-based connection• Connect to anyone else also connected to the

network

• Dynamic Circuit characteristics• Flexible bandwidth up to 10 Gbps• Set up circuits in seconds• Circuits lasts for hours or days

• Operates on the Ciena Platform currently

Internet2 DCN

• Roll-out• Persistent for 2008 • No additional fee to IP connectors

for 2008

• Support• Documentation• Workshops• User group

• Challenge is innovative use of the Technology

Phoebus

• Phoebus - TCP data flows• File transfers over long distance segments

not requiring congestion control• Lead by Martin Swany at the University of

Delaware

Challenges

• These are great times in the networking world• New and innovative ideas for networking abound!

• A Challenge to you:• Given the technologies being developed by the

community, from middleware to perfSONAR to DCN, what are innovative ways to use those technologies?• Given new technologies coming in Ethernet and

G.709, what networking directions should our community take over the next few years?

• The new Internet2 governance puts the direction in the hands of the community!

Questions?

network@internet2.edu