def def def TERENA AR 04

>// TERENA

ANNUAL REPORT 2004

def def def TERENA AR 04 28-02-2006 13:31 Pagina 1

p.2

[TERENA / annual report 2004] /

> Website screenshots from some of the TERENA members


p.3

-Contents4 FOREWORD7 POLICY AND OUTLOOK

14 INFORMATION SHARING14 ....Information Dissemination15 ....TERENA Compendium and Focus Study16 ....Networking Development Programme17 ....TF-PR19 CONFERENCES AND WORKSHOPS19 ....TERENA Networking Conference 200423 ....802.1X Training Workshop24 TECHNICAL PROGRAMME24 ....Introduction to the Technical Programme25 ....The Technical Programme in 200427 ....Task Forces27 ......... TF-AACE28 ......... TF-EMC229 ......... TF-CSIRT31 ......... TF-Mobility33 ......... TF-Netcast33 ......... TF-VVC34 ......... TF-NGN36 ....TERENA Projects36 ......... Adding Certificate Retrieval to OpenLDAP36 ......... Guide to Network Resource Tools36 ......... IP Telephony Cookbook38 ....External Projects38 ......... 6NET40 ......... 6LINK40 ......... SCAMPI42 ......... TRANSITS43 ......... SEEREN44 ......... MOME45 ......... EGEE47 ......... LOBSTER48 SERVICES48 ....Trusted Introducer 50 MEMBERSHIPS AND LIAISONS50 ....ENPG and European Commission51 ....DANTE52 ....Internet252 ....CCIRN53 ....GLIF53 ....Internet Society54 APPENDICES54 A. Financial Report 200457 B. TERENA Membership in 200459 C. TERENA Staff in 2004 60 D. List of Acronyms

[TERENA / annual report 2004] / CONTENTS

> Contents


p.4

[< Foreword

Dear Reader,

The past year has been a busy one for TERENA - a year in which traditional

activities continued successfully while in parallel new initiatives and new

organisational arrangements got off the ground.

The annual TERENA conference took place in Rhodes in June, and attracted more than 400participants. It was a lively event, with many good speakers and active discussions, and itreceived a very favourable evaluation from the participants.There is every reason to heartilythank the people from GRNET, who were bold enough to host a conference on an island inthe Aegean.

The year has seen the start of two major EU-funded projects with TERENA as a partner, bothof which have presented new challenges and ways of working for the staff of the TERENASecretariat. In the spring,TERENA became the dissemination partner of the large Grid projectcalled EGEE (Enabling Grids for E-sciencE), bringing TERENA closer in touch with some ofthe large users of the European networking services. In the second half of the year, animportant milestone was the official start of the GN2 project, which brings together almost allnational research and education networks in Europe, DANTE and TERENA in a collaborativeeffort. During the spring, the preparations for the GN2 project required a lot of attention, andhere TERENA was very much involved in shaping the details of the project together withDANTE and the national network organisations.

Regarding TERENA directly, the GN2 project provides funding for the continuation andimprovement of some activities that were earlier funded separately by the EuropeanCommission, such as the successful TERENA Compendium of National Research andEducation Networks and foresight studies.The project also provides some modest funding thatenables TERENA to do a bit more to provide assistance to the development of researchnetworking in less advanced parts of Europe, thus trying to tackle some of the problemsconnected with the Digital Divide in Europe as observed in the SERENATE reports -a long-held wish of our organisation.

The GN2 project also marks the beginning of new joint research and development activitiesthat build on the groundbreaking initiatives in some of the TERENA task forces. During thefour-year lifetime of the GN2 project it is expected that the ongoing work in the TERENAtask forces will provide background and inspiration for these research and developmentactivities as well as new initiatives of this kind.

[TERENA / annual report 2004] / FOREWORD

> Dorte Olesen


p.5

In the last four months of the year, all TERENA task forces received a new mandate - either bya task force completing its tasks and a new task force taking over to follow up on the resultsachieved, or by an existing task force continuing with a revised mandate.This of course was wellco-ordinated with the start of the joint research activities in the GN2 project.

Several very successful initiatives grew out of TERENA task force work. One example is theTACAR service, which had already started in 2003, but which grew and received positiveworldwide recognition during 2004.Another example is the IP Telephony Cookbook, whichbecause of large demand has been distributed in much larger numbers than originally expected.These examples illustrate that TERENA has been able to offer a good breeding ground for new,bottom-up initiatives, and that TERENA, as a small and flexible organisation, has beensuccessful in following up on such new ideas. Other new initiatives of this kind have come upin 2004 and will lead to more concrete activities in early 2005, such as a workshop onconnecting schools to national research and education networks, and a CAMP workshop forpeople on campuses of universities and research institutions who are responsible forauthentication and authorisation of their users.

In 2003,TERENA established its first non-technical task force,TF-PR - aiming at theexchange of experience in the public relations area, which has become increasingly importantboth at the level of the national research and education networks and at the broader Europeanlevel. In 2004, the online news agency named PeaR has become a publicly accessible service,and it is used widely by the European research and education networking community.TF-PRhas also put the spotlight on the usability of websites of national research and educationnetworking organisations.

During the year,TERENA has intensified the collaboration with the NREN PC - the PolicyCommittee of the GN2 project - and in the autumn, the meeting of the TERENA GeneralAssembly was combined with a meeting of the NREN PC, the two meetings taking place onconsecutive days in Cyprus, allowing common members to minimise their travel. It is theintention to also use this model for future meetings.

In June 2004, I participated in a study trip to North America arranged by the EuropeanCommission.The goal was to exchange experiences on high-performance networking with ourNorth American colleagues, and it was encouraging to note that European research networkingis now at the forefront of developments in several respects - although there is, of course, stillinspiration to be found in the United States and Canada, especially with regard to theinteraction with the high-end user groups in, for example, scientific computing and thebiosciences.



p.6

All in all, 2004 has been a very active and interesting year for TERENA and its memberorganisations, and there is every reason to thank all the participants in TERENA task forces andother contributors to the TERENA activities for their efforts - it is impressive to see all thegood results. Special thanks go to Agathoclis Stylianou, who stepped down as TERENATreasurer this year after having served the maximum four-year period in office

> Dorte Olesen,

President



p.7

[TERENA / annual report 2004] / POLICY AND OUTLOOK

(>Policy and Outlook

The future has started. Last year, TERENA’s annual report devoted much

attention to the results of the SERENATE studies, which had been completed in

December 2003.

SERENATE tried to look 5-10 years ahead into the future of European research and educationnetworking, and recommended the exploration of the use of hybrid network architectures, inwhich switched optical paths are introduced alongside the traditional general-purpose routednetwork. Only one year later, such hybrid IP-optical infrastructures are actually being deployed ina large number of national research and education networks, as well as in the next generation ofthe pan-European research network backbone, GÉANT2. Other recommendations from theSERENATE Summary Report are also being followed up in collaborative actions of theEuropean research and education networking community.An example is the work towards thecreation of a pan-European authentication and authorisation infrastructure, which is undertakenas part of the GN2 project and which builds on the achievements of the EduRoam servicecreated by TERENA’s task force TF-Mobility.

These developments illustrate that the European research networking community has taken upthe challenges of new user requirements and new technologies, and is now facing rapid and far-reaching changes.TERENA, the organisation in which the members of that communitycollaborate, plays a crucial rule in all of this.

In this rapidly changing environment, it is important for TERENA to focus on the mission andobjectives of the association, and to fully exploit the successful characteristics of the work that theorganisation supports.Therefore, the TERENA Executive Committee has developed a strategicvision about the organisation, which it has published in October 2004 in its Activity Plan for thenext year:

> In the vision of the Executive Committee,TERENA is first and foremost a collaborativeorganisation.The core business of the association is to bring together managers, technicalspecialists and other people in the research networking community with their counterpartsfrom other countries in Europe.This collaborative character is the strength of the organisation:with hardly more than a dozen staff members of its own,TERENA is able to mobilise theexpertise and experience of hundreds of professionals in the research and education networkingenvironment.This also means that the TERENA activities are highly dependent on the humanand other resources that are contributed by the research networking community.The successfulresults of TERENA activities are not the achievements of the TERENA Executive Committeeor the TERENA Secretariat staff - they are the achievements of the community.


> TERENA is a lean and flexible organisation. If there is a need in the community for newinitiatives,TERENA can move in quickly and organise events or studies, or provide technicaland organisational assistance without delay, drawing on the strengths of the TERENA memberorganisations themselves.

> The membership of TERENA encompasses not only national research and educationnetworking organisations but also regional research networking organisations, researchinstitutions that are large users of network infrastructure and services and equipment vendorsand telecommunications operators. Moreover, many of the people who participate in TERENAtask forces, projects, conferences or workshops are not employees of TERENA memberorganisations but work in universities, research institutes or industry. In general,TERENAactivities are open for participation by anyone from the wider research networking communitywho can make a contribution, and experts with different backgrounds are encouraged tocontribute to TERENA activities.

> The open nature of the activities is a fundamental characteristic of TERENA. It also puts themembership of the association in a certain perspective.Although there are some potential risks,the TERENA membership has decided to maintain the open nature of TERENA activities.They see their membership fee payments to TERENA not as a ‘quid pro quo’, but as acontribution based on solidarity in the European research and education networkingcommunity.

> Although TERENA’s remit in knowledge transfer is principally focused on the countriesrepresented in the TERENA membership,TERENA strives to assist other countries insoutheast Europe, in eastern Europe and to the south and east of the Mediterranean in theirattempts to catch up with the more advanced countries in Europe. It is very important for themanagers and technical specialists of the research network organisations in these countries toparticipate in TERENA activities, because that offers them the possibility of receivinginformation about the latest developments and to learn from experiences elsewhere.The opennature of TERENA’s activities gives them that opportunity.

> There are other countries further away from Europe where research and education networkingis at a level that is much lower than the European average. Other organisations - for example,CEENet, NATO and UNESCO - are better placed than TERENA to promote thedevelopment of research and education networking in these regions;TERENA will collaboratewith those other organisations to the best of its abilities.

> TERENA is uniquely placed to foster collaboration between the research and educationnetworking community and industry. National research and education network organisationsand DANTE usually have a customer-supplier relationship with industry that involves officialtender procedures and competition between potential suppliers, which may pose obstacles topre-competitive collaborations with the same companies. Because TERENA is not a directcustomer of these companies, it is easier for TERENA to organise joint activities for thedevelopment of new technologies or services in which these companies take part.

> TERENA is also very well placed to foster the collaboration between the research andeducation networking community and large organisations of users of network facilities in

p.8



science and possibly in education. Independent of the supplier-customer relationship betweenresearch network organisations and user organisations,TERENA can involve user groups (suchas international scientific organisations and facilities, and very large long-term research projects)in the collaborative activities of the European research networking community.This becomesmore and more important as the requirements of very demanding scientific applications have anincreasing impact on the design of research networks and the services offered.

> Because the activities of TERENA are driven by the collaboration of professionals in theresearch and education networking community, it is, in the final instance, the community thatdecides about the direction of TERENA activities. Indeed, the members of the communitychoose themselves which activities they will join, and thereby determine the feasibility ofinitiatives. Nevertheless the members of the TERENA Executive and the TERENA Secretariathave an important role in picking up new trends and (sometimes very rudimentary) ideas forpotential new activities, and in investigating their feasibility and the support for them.Thesetting of priorities is a very important part of this process. It is essential for TERENA tochoose its activities in such a way that it stays at the forefront of developments, while at thesame time promoting the coherence among its membership. In this manner, the associationmakes an important contribution to European leadership in research and educationnetworking.

p.9


> TERENA Executive Committee (December 2004)Shirley Wood, Dorte Olesen, Lajos Bálint, Claudio Allocchio, Marko Bonac and Sabine Jaume-Rajaonia

^


`The strategic vision of the Executive Committee is based on the Mission and ObjectivesStatement of the association, which was adopted by the TERENA membership in 2002.ThisStatement reads as follows:

The Statutes of the TERENA association state:“The objectives of TERENA are to promote and participatein the development of a high-quality international information and telecommunications infrastructure for thebenefit of research and education. It will take whatever steps are required to accomplish that this infrastructureis based on open standards and uses the most advanced technology available.”

These objectives translate into four categories of activities, which are the pillars of the organisation:

> Fostering new initiativesTERENA provides an environment for fostering new initiatives of the European research networkingcommunity. In this context TERENA can provide a neutral basis for investigating the feasibility of ideasand developing and piloting new services for the TERENA community and possibly the Internetcommunity at large.

> Technical ProgrammeTERENA supports joint European work in developing, evaluating, testing, integrating and promoting newnetworking, middleware and application technologies.TERENA brings together technical specialists fromTERENA member organisations and the wider European research networking community in task forcesand innovative collaborative projects.TERENA organises topical workshops and ad-hoc meetings toexchange experiences and to plan for joint activities.The TERENA Technical Programme liaises withsimilar activities in other continents.

> Knowledge transferTERENA organises conferences, workshops and seminars for the exchange of information betweenTERENA member organisations and in the wider research networking community, and to make them andthe Internet community at large aware of relevant developments.TERENA also pursues the transfer oftechnical and managerial knowledge to less advanced networking organisations in the countries representedby the TERENA membership, both on a bilateral and on a multilateral basis.

> Promoting members’ interestsTERENA represents the common interests and opinions of its member organisations in contacts withgovernments, funding bodies, industry and other organisations. In this context TERENA advises theEuropean Commission, national governments and other authorities on policy and technical matters relatedto support for the development of research and education networking infrastructures, services andapplications.TERENA also liaises with similar organisations from other continents, promoting theEuropean views and expertise.

All activities are undertaken under the guidance and responsibility of the TERENA Executive Committeeand under the ultimate authority of the TERENA membership, as represented by the TERENA GeneralAssembly.The Technical Programme is guided by the TERENA Technical Committee and reviewed annuallyby the Technical Advisory Council.

The General Assembly met twice in 2004.The first meeting took place in Rhodes, Greece on 10-11 June, following the TERENA Networking Conference 2004.The meeting was hosted byGRNET, the Greek national member of TERENA.The assembly welcomed 3Com Corporation

p.10



as a new associate member of TERENA. It also admitted RED.ES as the new national memberfor Spain, replacing CSIC.The meeting decided to terminate the TERENA membership ofKPNQwest per 1 September 2004.The General Assembly received the Annual Report of the TERENA Executive Committee on the year 2003 and adopted the financial accounts forthat year.

Lajos Bálint (HUNGARNET, Hungary) was appointed Treasurer for a two-year term of office.He succeeded Agathoclis Stylianou, who had served as TERENA’s Treasurer for the maximumperiod of four years.The General Assembly discussed the future evolution of TERENA and itscollaboration with DANTE and the Policy Committee of the GN2 project. It also discussedpossible changes to the TERENA Statutes and the Rules & Regulations, and asked the ExecutiveCommittee to prepare proposals for these amendments for decision taking in the next GeneralAssembly meeting.

That next meeting took place in Limassol, Cyprus on 21 October.The meeting, which wascombined with a meeting on the following day about the procurement for the new GÉANT2network, was hosted by CYNET,TERENA’s national member for Cyprus.The General Assemblyadmitted the University of Belgrade - AMREJ as a new national member of TERENA,representing Serbia and Montenegro.

The national research and education network organisation of Serbia and Montenegro,AMREJ,is not yet a legal entity.The University of Belgrade is responsible for co-ordinating the developmentand management of the national backbone. International co-operation is also handled by theUniversity of Belgrade.All major universities, institutes, university hospitals and libraries areconnected to the network.The government funds the Gigabit backbone that connects the largestuniversity towns as well as permanent connections for all institutions.

Fast development of the dark-fibre network has been possible thanks to exceptional support frommany national research networking organisations in the European Union and TERENA. For acountry that was isolated for many years,AMREJ is the crucial infrastructure for the establishmentand improvement of international co-operation in education and science.

The assembly adopted a number of changes to the statutes of the association.According to theamended statutes, the terms of office of members of the Executive Committee will be three yearsinstead of two years as previously, and there will be a fixed schedule of resignations.The changesin the statutes also open up the possibility for a wider set of international organisations tobecome an international member of TERENA.The amended statutes came into force on 20 December 2004.

The Limassol meeting also adopted changes to the TERENA Rules & Regulations, therebyintroducing a change in the fee and voting system for national members of the organisation.Thenew system introduces a new category of national membership for members from countries witha very small gross national income. It also introduces reductions in the membership fees forcountries that have a small gross national income and that are not classified by the World Bank asa high-income economy.

p.11



p.12

The General Assembly adopted TERENA’s budget for the year 2005. In order to compensatepartially for the continuing inflation, it was decided to raise the unit membership fee from 4,700euro to 4,800 euro.

Finally, the meeting heard progress reports about the TERENA Technical Programme and aboutTERENA’s activities in the organisation of conferences and workshops.TERENA PresidentDorte Olesen presented the Executive Committee’s Activity Plan for the year 2005.

The Activity Plan for 2005 states that TERENA will build on the achievements of recent yearsand further develop its activities. Some specific highlights are:

> TERENA will be deeply involved in the GN2 project, which will provide the pan-EuropeanGÉANT2 backbone network, but which also includes a number of Joint Research Activitiesand Networking Activities.The project will provide financial support for the production of theannual TERENA Compendium of National Research and Education Networks, co-ordinationand pooling of resources through TERENA task forces, GN2 events at the TERENANetworking Conferences and support to the development of research networks in less advancedregions in and around Europe. Starting in 2006, the project will also enable a large-scaleforesight study into the expected development of research and education networking.

> The collaboration in the GN2 project will intensify the communications and relations betweenTERENA, DANTE and the national research and education networking organisations. It isexpected that this will improve the information exchange between these organisations and willpossibly lay the foundations for further collaborative activities.

> During the last years, it has been one of TERENA’s priorities to take initiatives to supportresearch networking organisations and activities in the less advanced regions of Europe. It isplanned to expand these activities significantly in 2005, thanks to the financial support from theGN2 project.

> TERENA will promote the involvement with the European research and educationnetworking community of industry and of scientific and educational organisations that are largeusers of networking facilities.The SERENATE studies have pointed out the importance ofcloser collaboration with users and with industry. Companies and international scientificorganisations will be encouraged to join the TERENA membership.

> TERENA will give special attention to the issue of inclusiveness, i.e., the extension of the usercommunity of research and education networks beyond institutions for higher education andresearch establishments.

www.terena.nl



p.13

TERENA Executive Committee in 2004:

President Dorte OlesenVice President Conferences Shirley WoodVice President Technical Programme Claudio AllocchioTreasurer Agathoclis Stylianou (until 11 June)

Lajos Bálint (from 11 June)Members Marko Bonač

Sabine Jaume-Rajaonia



p.14

// Information Sharing

// Information Dissemination

TERENA provides information and technical and managerial advice to its

member organisations, not only on a multilateral but also on a bilateral basis.

More generally, the TERENA Secretariat aims to intensify the bilateral contacts with the staff of themember organisations.When TERENA Secretariat staff members attend a meeting in a Europeancountry, they will try to combine this with a visit to the national TERENA member organisation.Thisyear, informal visits were made, among others, to the offices of the TERENA member organisations inBelgium, the Czech Republic, Estonia, France, Italy, Malta, Norway, Poland and Portugal.

Another way to disseminate information about TERENA’s activities and to make more contacts inthe European networking community is for TERENA staff to participate in national and regionalresearch networking conferences. For example,TERENA Chief Administrative Officer Bert vanPinxteren presented TERENA’s activities at the RedIRIS Technical Days in Toledo, Spain inOctober, giving special attention to some data from the TERENA Compendium.TERENA ChiefTechnical Officer John Dyer gave a presentation on TERENA and its activities when a delegationof representatives of Swedish universities visited the TERENA offices in May.TERENA SecretaryGeneral Karel Vietsch presented the results of the SERENATE studies to a meeting of the Frenchassembly of representatives of university networks in Paris in May, and he spoke about managerialand policy issues at a workshop organised by EENet in Tartu, Estonia in November.

The TERENA Secretariat publishes announcements on new developments in the TERENAactivities on the TERENA website.These announcements are sent by electronic mail to therepresentatives of the TERENA member organisations and any other persons who havesubscribed to the distribution list. On the website the Secretariat also maintains a calendar ofevents that are of interest to the research and education networking community.

A new initiative in 2004 was the publication of a TERENA Executive Newsletter. Starting with apilot edition in September, the newsletter has been distributed monthly, aimed exclusively atmembers of the TERENA General Assembly. It has the form of a simple and relatively shortperiodic email message, and it provides news - concerning technical, managerial or political topics- that will be of interest to managers of research and education network organisations.Topicscovered include news about TERENA and its member organisations as well as interesting newsitems from the wider research and education networking community and its environment.TheTERENA Executive Newsletter aims to assist managers of the member organisations by drawingtheir attention to developments that they might not learn about so easily otherwise.

www.terena.nl/news/

[TERENA / annual report 2004] / INFORMATION SHARING


p.15

// TERENA Compendium and Focus Study

Like previous editions, the 2004 edition of the TERENA Compendium of National Researchand Education Networks in Europe consists of two parts. One part contains basic informationon national research and education networks in Europe and surrounding regions.This part isavailable on the Web only. For each network organisation, the webpages offer - in addition to thebasic data - information about organisation, staffing, finances, user base, network capacity,services, plans and developments.The second part consists of a compilation and analysis, givinginformation on various dimensions of a large number of networks.This second part is availableon the Web and also in printed form. It is organised into chapters that cover basic information,users/clients, network dimensions, traffic figures, and staffing and funding.

The data for the Compendium were collected through a questionnaire, which was developedwith the help of a review panel. Members of the panel were Lajos Bálint (HUNGARNET),Marko Bonač (ARNES), Urs Eppenberger (SWITCH), Sabine Jaume-Rajaonia (Renater),Peter Kaufmann (DFN) and Mike Norris (HEAnet).The panel had one face-to-face meetingand conducted most of its work via email.

A new Web interface was developed that allowed organisations to enter information themselvesdirectly into the Compendium database, using a simple login/password system.As soon as asection was completed, it could be published on the Web. On the basis of the responses, the first,limited edition of the analytical part was published in May for the TERENA memberorganisations only.The limited edition contained 31 graphs, maps and tables.All respondentswere asked to correct their entries if needed, and a number of member organisations suggestedchanges and additions to the analytical part.

The final version of the analytical part of the TERENA Compendium 2004 was published inNovember. Based on the suggestions received, it contained 53 graphs and tables, presented on 60 pages.The geographic coverage was wide, including data from 50 countries in and around Europe.

The production of the 2003 edition of the Compendium and part of the production of the 2002edition had been funded by the European Union through the COM-REN project. No suchfunding was available for the 2004 edition. However, one last result from the COM-RENproject was published in 2004, namely the report on a focus study on the funding, managementand operations of European research networks.

The objective of the focus study was to examine a selected number ofresearch networks in Europe in more depth than had been possible in thecontext of the Compendium. In particular, the study looked at funding levelsand trends in funding, analysed across the levels of the network hierarchy.Thework was carried out by external consultant John Martin and TERENA staffmember Baiba Kaškina.The study was completed at the end of May.Theresulting report presents a large number of new, detailed data about thefunding, operations and management of the diverse spectrum of researchnetworks that is currently found in Europe. It also contains a number ofsignificant conclusions.



p.16


The Compendium and the report on the focus study were used as valuable sources of informationby researchers and policy makers in a number of countries. Several TERENA memberorganisations distributed copies of the publications nationally, and used the data in their dialoguewith policy makers at the national level. John Martin gave a presentation on the focus study atthe TERENA Networking Conference in Rhodes in June.

www.terena.nl/compendium/

www.terena.nl/compendium/2004/focus_study.pdf

// Networking Development Programme

For a number of years, it has been one of the explicit objectives of TERENA to support researchand education networks in the less favoured regions of the geographic area covered by theTERENA membership.The plan for a Member Development Programme that was discussed bythe TERENA General Assembly in 2003 identifies measures to improve communication betweenTERENA member organisations, to stimulate and facilitate participation of networking expertsfrom less favoured regions in international activities and to help networking organisations todevelop policies for improving research networking facilities and services.

Working visits of TERENA staff members to the research networking organisations in specificcountries are a suitable instrument to establish a common understanding of the problems andissues in the country concerned, and of the ways in which TERENA could collaborate to addressthe problems.The series of working visits was continued in March 2004, when Valentino Cavalliand Kevin Meynell visited MARNET, the national research and education network organisationin the Former Yugoslav Republic of Macedonia. During this two-day visit, they discussedMARNET’s activities with members of the MARNET Board of Directors and the MARNETstaff; they had also meetings with representatives of the national government as well as with thevice-rector and researchers from the University Ss. Cyril and Methodius in Skopje. ForTERENA, the visit has resulted in more knowledge about the networks, services andtechnologies available in the country, as well as a better understanding of organisational, fundingand management issues.A number of problems and impediments were identified and highlightedafter the meetings in a confidential report containing recommendations to the MARNET Boardof Directors and the relevant decision-making bodies.

The GN2 project, which started in September, offers new opportunities for providing support tothe development of research and education networking in less advanced countries, since somemodest European Union funding is made available for this purpose.The geographic scope of thisaction will be the countries whose national research and education network organisations areparticipants in the GN2 project and the countries that have obtained connectivity to GÉANTthrough the SEEREN and EUMEDCONNECT projects.The action is co-ordinated byTERENA.

On the basis of the information collected in the TERENA Compendium and the SERENATEreports, a limited number of countries will be selected on which the development supportactivities will be focused.To provide a basis for the various activities to assist in the development


p.17


of research and education networking, needs-assessments will be carried out for each of the focuscountries during the lifetime of the GN2 project.The support activities themselves can take manydifferent forms, for example: technical workshops, managerial workshops, consultancy to researchand education networking organisations in less advanced countries and secondment of staffmembers from those organisations with more advanced national research networkingorganisations and universities.

The first deliverable was completed in December, namely a document specifying the terms ofreference for country needs-assessments.The first of those assessments will be undertaken in thespring of 2005.

The staff members of GN2 project partners who are working on the various activities in this partof the GN2 project are assisted by a development support panel composed of seniorrepresentatives of national research and education network organisations.The TERENA ExecutiveCommittee has appointed Claudia Battista (GARR), Marko Bonač (ARNES), Sabine Jaume-Rajaonia (Renater) and Jorge Sanchez-Papaspiliou (GRNET) as members of the panel, which ischaired by Valentino Cavalli.

// TF-PR (Public Relations and Information Dissemination)

Established in September 2003 with an initial two-year mandate,TF-PR promotes collaborationbetween research and education networking organisations in Europe in the areas of publicrelations and information dissemination, through activities at the level of PR Manager /Information Officer.The task force had three meetings in 2004: on 4-5 March in Brussels, on 6

> TF-PR in Vienna


p.18


June in Rhodes and on 16-17 September in Vienna.All three events included tutorials andpresentations in workshop sessions as well as a business meeting with updates on the progress ofthe work items.

TF-PR’s first full year was characterised by a growth of active participation in the meetings andactivities of the task force.The March meeting was attended by eighteen participants representingsixteen research and education networking organisations, while at the meeting in Vienna theattendance numbered twenty-five from twenty organisations.This growth reflects the mountinginterest of research networking organisations to effectively disseminate information about theiractivities and achievements.

Launched in late 2003, the PeaR news agency was turned into a publicly available servicefollowing discussions at the TF-PR meeting in Rhodes. Subsequently, in September, PeaR wasmade available to the home organisations of the task force members to run as a syndicated newsservice on their websites through an RSS feed.

A heuristic evaluation of 29 websites of national research and education network organisationswas carried out by Gitte Kudsk and Julia Gardner of UNI•C.The results and practicalrecommendations were presented by Gitte Kudsk at the task force meeting in Brussels and shewas subsequently invited to present the findings also at the meeting of the TERENA GeneralAssembly in Rhodes in June.Many organisations are planning a major overhaul of their websites and TF-PR participantsgained important insights from three presentations in Vienna arguing the pros and cons of usingdata content management systems and also whether a custom-made or an ‘off-the-shelf ’ package is the best solution. SURFnet’s security awareness campaign was presented at the meetings inRhodes and Vienna, and the possibilities of expanding it to a European level are being explored.Progress was made on a list of Frequently Asked Questions about research networking.A page wascreated on the TF-PR website that links to various glossaries of terms. Examples of user surveyscarried out by research network organisations were presented and published.

Following the meeting in September, a team was created to prepare a survey to collectinformation about the staffing, budgets, responsibilities, publications and other activities of the TF-PR participants.The aim is to understand better how PR Managers and Information Officersin the research networking community operate, and to assist TF-PR members in making the casefor changes within their own organisations.The survey data and a draft version of the report willbe presented in the first TF-PR meeting in 2005.

The task force will organise a structured series of tutorials on the basics of public relationspractice.TF-PR participants who are not public relations professionals can benefit from theexperience and knowledge of other members of the group and from invited speakers.Thesetutorials will form an important part of future task force meetings.

www.terena.nl/news/pr/


p.19

[TERENA / annual report 2004] / CONFERENCES AND WORKSHOPS

*>Conferences and Workshops

*>TERENA Networking Conference 2004

The TERENA Networking Conference 2004, which was held in Rhodes, Greece

on 7-10 June, was the twentieth annual European research and education

networking conference.

The Rhodes campus of the University of the Aegean provided a professional and attractive venue for more than 400 participants from Europe and beyond.A total of 129 speakers addressed the conference over the four days, giving invited talks or presenting papers selected by theconference programme committee.

An unprecedented number of meetings and events took place around the conference, includingmeetings of the TERENA task forces TF-AACE,TF-Mobility and TF-PR. Other TERENAbodies meeting in Rhodes were the TERENA General Assembly and the TERENA TechnicalAdvisory Council.Workshops organised by the EU-funded projects 6NET and MOME wereincluded as integral parts of the conference programme. In addition there were project meetingsof MOME and 6NET/Euro6IX, and an IPv6 cluster meeting.

Juniper Networks hosted an R&E Summit that is becoming an annual conference event, as is the popular Cisco Systems Next-Generation Internet Symposium, held for the fourth year onthe Thursday and Friday after the conference.Ted Hanss from Internet2 and Egon Verharen fromSURFnet delivered a one-day, hands-on training on H.323 videoconferencing to a selectedgroup of participants who already work in the area of providing videoconferencing services.

Birds-of-a-feather meetings provided conference attendees with the opportunity to flocktogether with like-minded people to discuss new ideas and activities of common interest in aninformal setting.The conference included a wide variety of birds-of-a-feather sessions, bothscheduled and ad-hoc.Topics included lower-layer technologies, EU Structural Funds (for thecountries that had recently joined the European Union), and product management; a well-attended birds-of-a-feather meeting called ‘Beyond Lightpaths’ discussed hybrid IP-opticalnetworks.

A meeting in preparation for a new task force on voice and video attracted members of previousTERENA task forces as well as new participants. Ken Klingenstein from Internet2 and BobMorgan from the University of Washington assembled the middleware enthusiasts to discuss thedefinition, development and deployment of middleware infrastructures and to exchangeexperiences on, and look for possibilities for, global collaboration.


p.20


The conference theme ‘One Step Ahead’ was a reflection of the belief that in many areas,European research and education networking leads in the development of networkinginfrastructures, technologies and services.The twenty years of development were summed up byPeter Kirstein from University College London in his talk in the opening plenary session. Heexplained that the first decade had brought large-scale backbones up to Megabits per second,resolved the protocol wars, made remote communication a standard service and provided Webaccess.The second decade brought backbones to low Gigabits per second, remote access toMegabits per second and enabled readily available real-time communications. Peter Kirstein

predicted that the next decade will see the removal of the constraints of distancein academia.

The second and third days of the conference both kicked off with plenarysessions. Bob Jones from CERN and Jaap van Till from Stratix Consultancy in theNetherlands presented two important conference topics. Bob Jones’ talk wascalled ‘Grids - the Next Killer Application’. Just as twenty years ago the Internetrevolutionised computer communications, Grids are now poised to have the sameeffect on distributed computer systems. He described the state of Grids today andoutlined the plans for a production Grid facility for Europe as undertaken by theEGEE project.The area of Grids was further discussed in parallel sessions, which

addressed the subjects of an optical network infrastructure for global Grid computing, adistributed coding environment and the design of a commercial Grid service. Later in theconference, Grid technologies again featured in a session on ‘Greedy Applications’, which areenabled by Grid technologies and require huge amounts of bandwidth.

Jaap van Till introduced the important topics of vulnerability and security. He explained how theInternet is one of the vital infrastructures of society, and how we can try to make it safer and lessvulnerable to attack.

The plenary speakers on the third day introduced two additional conference topics.Vijay Kumarspoke about the Open Courseware Initiative of the Massachusetts Institute of Technology, which

> The opening plenarysession

> Coffee break at the conference


p.21


aims to make the content of 2,000 classes freely available on the Web. He also spoke about theMIT-led key infrastructure initiative, OKI, which is developing an open architecture to promotethe development of portable and sustainable applications for IT-based education.

Erik Huizer, Professor of Internet Applications at the universities of Twente and Utrecht, woreanother hat as Director Strategy, Innovation and Business Development with NOB Cross MediaFacilities, and addressed the conference on the controversial and timely subject of ‘Copyright andthe Internet: One Step Behind’. He pointed out that copyright was invented to stimulatecreativity and innovation but said that it seems to stifle rather than promote them now that we arein the digital era. He outlined the need for a comprehensive framework of legislation, technologyand business practice that follows the spirit of copyright law, so that creators get their rewards,while at the same time users do not feel restricted.

The closing plenary speaker referred to the many topics and technologies that had been discussedthroughout the conference and presented an important practical use for a broad range of them.Alan Noble from Buckingham County Council sketched a vivid picture of his project to bringlife-long learning to the community.While his talk focused on the United Kingdom, and morespecifically on his project now being tested in the County of Buckinghamshire, it was easy to seehow relevant the ideas and solutions are to many places in the world.The project is nowsuccessfully delivering accessible and attractive programmes to the community, contributing to themuch-needed upgrading of job skills and at the same time enabling a broad spectrum of thepopulation to participate fully in the new IT-based society that confronts them, particularly thosewhom the traditional educational structure has failed in the past.

The balance of each day of the conference was devoted to parallel sessions, running four at a time,with invited talks and some sixty selected papers on technologies for the ‘last mile’, Quality ofService tools, services and performance monitoring, voice and video services, advanced networkcollaboration, and the middleware services of authentication and authorisationand ‘upperware’. Special attention was given to optical networks, includingpractical examples of the rollout of some of the big optical networksworldwide.

Some of the current TERENA activities were presented, as well as a record oftwelve short papers on recent results. Mobility was the subject of two well-attended sessions, and a discussion on eLearning followed on from theintroduction by Vijay Kumar in his plenary talk.

The venue meant that special consideration was given to issues affecting theMediterranean and southeast European regions. Project meetings of the southeast European andMediterranean networks were held before the conference, and two conference sessions werededicated to networking prospects for southeast Europe, following on from the SEEREN project.

The TERENA Networking Conference 2004 was hosted by GRNET, the Greek Research andTechnology Network.The conference was made possible by the sponsorship of Cisco Systems,Logicalis, OTE Business, the Municipality of Rhodes, OTEGlobe, IBM, Juniper Networks,POLYCOM, COLT, INTRACOM, Sun Microsystems, Extreme Networks, Global Crossing,Level 3 Communications and GRNET.

> Vijay Kumardemonstrates one ofthe points from hiskeynote talk


p.22



p.23


The conference programme on the conference and TERENA websites was generated by the newconference software package, CORE, developed by members of the TERENA Secretariat staff tostreamline handling of conference data for the website, for the presentations and for othermultimedia functions at the conference.

Papers and presentation slides from the conference as well as the video archive of each sessionhave been made available at the programme section of the conference website. Selected papersfrom the conference have published on the TERENA website.

www.terena.nl/conferences/tnc2004/

www.terena.nl/library/tnc2004-proceedings/

*>802.1X Training Workshop

On 30 March, and again on 31 March, SURFnet and TERENA organised in the TERENAoffices in Amsterdam an introductory and training workshop on the use of 802.1X technology.The workshop explained the general concepts of 802.1X technology and provided a practicalintroduction on how to set up an 802.1X-based infrastructure.

Although 802.1X technology is not something new for people who work in the field ofauthentication, the technology has increasingly drawn attention in the past years, as it is beingused to provide access to wireless networks. It has been one of the activities of TERENA’s taskforce TF-Mobility to investigate the use of 802.1X for the provision of inter-NREN roaming.Universities have been using 802.1X to provide access to their wireless networks, and thistechnology appears to be the most successful choice for institutions that intend to set up awireless network for the first time.

Each of the two workshops was attended by about twenty participants from various Europeancountries. Due to the interactive nature of the workshop, the number of attendees had to belimited, and despite the repetition of the programme on the second day, many potentialparticipants had to be disappointed.The feedback from the participants was very positive.

Each workshop started with presentations on the theoretical foundations of the 802.1Xtechnology. Klaas Wierenga (SURFnet) discussed the need for, and benefits of 802.1X,TomRixom (Alfa & Ariss) went into the technical aspects and Paul Dekkers (SURFnet) talked aboutthe server side of 802.1X.This was followed by hands-on exercises, where trainees had to set upand configure different systems.

www.terena.nl/tech/task-forces/tf-mobility/1x/index.html


p.24

[TERENA / annual report 2004] / TECHNICAL PROGRAMME

[> Technical Programme

[> Introduction to the Technical Programme

The focus of the Technical Programme is determined by a number of Special Interest Areas, fieldsof networking technology that are of particular interest to the use of networks by researchers,teachers and students.At least every two years, the Special Interest Areas are reviewed by theTechnical Advisory Council, a body composed of the senior technical managers of the TERENAmember organisations.The Technical Programme is co-ordinated and supervised by the TERENATechnical Committee, a small group of experienced networking professionals.

Activities in the Technical Programme are organised in task forces and projects.These are oftencreated as the result of discussions in workshops, seminars and ad-hoc technical meetings.

TERENA task forces are open groups where specialists undertake joint work under specific termsof reference in relevant technology areas.As a rule, a task force has a limited lifetime that is linkedto the completion of a defined set of deliverables.Task forces also have an important function inthe exchange of information about other activities in their field and the development of plans fornew initiatives.Task force activities are carried out on a voluntary basis by experts and engineersfrom research networking organisations, universities and laboratories in Europe and are supportedby TERENA staff through the provision of mailing lists, webpages, meeting arrangements andother secretariat functions.

TERENA projects are carried out by experts and engineers from the European researchnetworking community on the basis of a contract with TERENA. Sources of funding may varydepending on the size and scope of the project. Except for very small projects, funding requires acombination of contributions from TERENA’s own resources and from TERENA members andother interested organisations.

In addition,TERENA participates in projects in the Framework Programmes of the EuropeanUnion. In recent years, staff members of the TERENA Secretariat have been spending anincreasing part of their time on the work in these projects, which are co-funded by the EuropeanCommission. Starting from September 2004, the support provided by the Secretariat staff to theTERENA task forces is also co-funded by the European Commission, through the GN2 project.

www.terena.nl/tech/

The TERENA Technical Programme supports joint European work in the development

and testing of new networking, middleware and application technologies. It brings

together technical specialists and engineers from TERENA member organisations

and the wider European research networking community.


p.25


[> The Technical Programme in 2004

The Technical Advisory Council held its annual meeting on 7 June, just before the start of theTERENA Networking Conference 2004 in Rhodes.The meeting was attended by 43 personsrepresenting 21 TERENA member organisations.The main business of the meeting was the reviewof the Special Interest Areas.To provide some background for the discussions, each member of theTERENA Technical Committee made a presentation about the hot issues in the technical areas inhis portfolio.The presentations covered voice and video collaboration, security, Grids, middleware,TF-NGN and future activities in lower-layer technologies, and end-to-end and campus issues.

Members of the Technical Advisory Council noted that the interactions and dependenciesbetween applications, middleware and lower layers are becoming ever more complex, and thisdevelopment is making the definition of a framework of separate Special Interest Areas for theTERENA Technical Programme increasingly difficult. Following the debate in the meeting, thediscussion was continued in the subsequent weeks using the Council’s mailing list.

Based on the consensus that emerged from that discussion, the TERENA Executive Committeedecided in September to define six Special Interest Areas:> Lower-layer technologies> Security> Middleware> Mobility>Voice and video collaboration> Grids.In addition, there will be two areas for further development: campus networking and end-to-endissues.

The TERENA Technical Committee met four times in 2004 to discuss the progress of the variousactivities in the Technical Programme, to consider proposals for new TERENA projects and todecide on the creation of task forces.These meetings took place in the TERENA office inAmsterdam on 12 January, 26 March, 15 September and 20 December.

> Technical Advisory Council meeting in Rhodes


p.26


In the January meeting, the relationship between European middleware activities and the MACE(Middleware Architecture Committee for Education) initiative in the United States was discussedin depth.This is an important issue, because without strong co-ordination and co-operationbetween the continents it is possible that divergent and hence potentially non-interoperablesolutions to problems like authentication and authorisation might be adopted.TERENA is amajor co-ordinator of European middleware activities, being responsible for such (pilot) servicesas TACAR and EduRoam. In order to foster strong links between the European and NorthAmerican middleware activities, members of the TERENA Technical Committee activelyparticipate in the MACE meetings.

In the December meeting, the field of end-to-end and campus issues was discussed in some detail.The conclusions were that there are some generic problems to be addressed: authorisation,management and bandwidth demand. However, it is equally important to establish relations withnew communities that have not traditionally had strong links with the networking community.The members of the TERENA Technical Committee are particularly keen to reach the non-scientific and culture-based communities and work with them on effective use of networks tosupport their disciplines.

During the year, there have been many developments in the TERENA Technical Programme.Some task forces successfully completed the work that they had set out to do and were succeededby new task forces that will build on the achievements.The other task forces continued theirwork, but with new terms of reference. Initiatives like TACAR and EduRoam turned out to bevery successful and received worldwide recognition.The TERENA Secretariat took on tasks in anumber of new Framework Programme projects: EGEE, MOME and LOBSTER. In September,the start of the GN2 project gave a new, additional function to the TERENA task forces assounding boards for the Joint Research Activities in that project.The GN2 project also brings co-funding from the European Union to the support provided by the Secretariat for theTERENA task forces, thereby introducing partial financing by the European Union of one of themost central elements of TERENA’s core business.

www.terena.nl/tech/tac/

www.terena.nl/tech/ttc/

TERENA Technical Committee in 2004:

Claudio Allocchio (chairman) Vice President Technical ProgrammeRoberto BarberaChristoph GrafVictor ReijsMartin SutterTon VerschurenSteve WilliamsKarel Vietsch Secretary GeneralJohn Dyer Chief Technical OfficerBrian Gilmore MACE liaison


p.27


> Task Forces

> TF-AACE (Authentication andAuthorisation Co-ordination for Europe)

TF-AACE was established in 2002 and reached theend of its mandate in April 2004.A final meeting washeld on 6 June, before the TERENA NetworkingConference 2004 in Rhodes.The results of the workof the task force have been described in a finalreport, which was published on the TF-AACEwebsite in August.

Two main objectives of the task force were toencourage the deployment of an interoperableauthentication and authorisation infrastructure in theEuropean research and education networkingcommunity, and to co-ordinate the contributionsfrom that community to the standardisation process,through liaisons with, for example, the IETF, theGlobal Grid Forum and Internet2.

The work of the task force focused on five workareas:> interoperability requirements for European

academic Public Key Infrastructures (PKIs)> common requirements for inter-institutional

authentication and authorisation> experiments and evaluation of new technologies

for PKIs> support for existing initiatives on common identity

in the Internet> contributions to common and similar projects to

ensure compatibility of PKIs and authenticationand authorisation infrastructures.

The task force has combined the results of earlieranalysis by TF-AACE participants with some othermaterials to produce a report on the technicalalternatives for building inter- and extra-institutionalauthentication and authorisation infrastructures.Thedocument addresses architectural and technologicalissues, and includes an analysis of the problems thatsuch infrastructures can address and the benefitsderived from their use: enabling mobility of students,better protection of information, support for

‘nomadic’ users, improved user convenience andimproved efficiency.

Reaching consensus in the relatively new andcontinuously evolving field of authentication andauthorisation systems and infrastructures requires acommon language to describe concepts, elements andactions.TF-AACE has written a document definingthe most commonly used terms, taking into accountthe authentication and authorisation glossaryproduced under the auspices of the Global GridForum.The task force report has been the startingpoint for a glossary of terms about roaming that wasproduced by the GN2 project in November.

The task force realised that the trend in authenticationand authorisation is to develop and deploy localsolutions, tuned to satisfy the particular requirementsof the environment in which they are deployed.Although it was not possible to achieve fullinteroperability between the different solutions, someproofs of concept and tests were made to interconnectsome of the various solutions, for example, PAPI andSPOCP, and A-Select and PAPI.The characteristicsfor a possible interoperable framework were alsoidentified in terms of sets of attributes, commonprotocols and APIs.

One of the typical approaches to building aninteroperability framework is the definition of areference implementation.The evolution of thetechnology and the different developments havemade the purpose of building such a referenceimplementation for authentication and authorisationsystems obselete.Therefore, the task force hasproposed the concept and validated the design of anAuthentication and Authorisation Requester-Responder (AA-RR) as a system able to assessinteroperability among authentication andauthorisation systems and infrastructures.

www.terena.nl/tech/archive/tf-aace/


p.28


> TF-EMC2 (European Middleware Co-ordination and Collaboration)

TF-EMC2 was established in September 2004 with a two-year mandate. Its objective is to promote thedevelopment and deployment of open andinteroperable middleware infrastructures amongnational research and education networks andacademic and research institutions.

Following up on the results of the work ofTF-AACE, the new task force will concentrate on sixwork items:

> The task force will develop the TACAR pilotfurther and turn it into a permanent service.

> TF-EMC2 will transform the design of the AA-RRsystem and the proof-of-concept implementationinto production-level software.

> Campus middleware issues will be addressed indifferent ways.TF-EMC2 will produce good-practice documents on, for example, establishingand maintaining directories, and on Single Sign-onsystems and their integration with authenticationand authorisation infrastructures.The task force willalso organise hands-on training events for ITpractitioners in academic institutions in Europe.

> TACAR

One particular spin-off from the work of TF-AACEis TACAR, the TERENA Academic CertificationAuthority (CA) Repository.TACAR was created in2003 to address the problem of how to get theappropriate root-CA certificates that are needed byusers’ browsers in a practical and cost-effectivemanner.The certificates collected by TACAR arethose that are directly managed by national researchand education networking organisations or that belongeither to national academic PKIs in the countriesrepresented by the TERENA membership or to non-profit research projects.TACAR provides an onlinetrusted repository of trust anchors of academic CAsand also provides the related Certificate Policies (CPs)and Certificate Practice Statements (CPSs).

TACAR policy does not define procedures to analysethe CP/CPS of a CA, and for this reason TACAR isnot meant for end-users.The repository holds acentralised set of certificates and related CPs/CPSs,so that administrators in different locations knowwhere to find a trust anchor, can evaluate the relatedCP/CPS and decide whether they want to trust aparticular CA or not.

Within TACAR, trust is established by means of aweb of personal relations between participants in

PKI-related initiatives, either co-ordinated byTERENA or with TERENA participation.Theprocess to include a root-CA certificate in TACAR is based on face-to-face meetings; however, once theprocess has been started, PGP keys can be used as atrusted method for electronic updates.

As the host of the repository,TERENA is responsiblefor undertaking the identification and authorisationprocedure for an institution that applies forparticipation.TERENA is also responsible forkeeping the repository up-to-date and for makingsure that the certificates are well-protected.

Since November, the secure download of certificatesmakes use of a self-signed certificate, which isgenerated and maintained for the sole purpose ofsecuring access to the repository.The use of a self-signed certificate forces users to verify the fingerprint of the certificate before trusting it.

By the end of the year,TACAR hosted some twentycertificates, more than half of which are used by Gridprojects.

www.tacar.org


p.29


> TF-EMC2 will look into directory schemaco-ordination and harmonisation, initiallyconcentrating on defining a list of schemas that arerelevant for information to be exchanged betweencollaborating universities.

> The task force will liaise with the Global GridForum and other virtual organisations, aiming to fillthe gap between the Grid community and theresearch and education networking community bybringing these two worlds together.

> The work of the Joint Research Activity onUbiquity (Mobility) of the GN2 project will bediscussed in task force meetings.TF-EMC2 willprovide to the GN2 project new ideas and conceptsand additional input to proposed solutions;conversely, the Joint Research Activity will use thedissemination channels of TF-EMC2.

The task force had its first meeting on 3-4 Novemberin Amsterdam.The meeting was attended by almost 40people, from both the research and educationnetworking environment and the Grids community.

A discussion about the way in which PKI is used andimplemented in Grid applications was conducted onthe TF-EMC2 mailing list and on the mailing list ofEUGridPMA, the body that co-ordinates a PKI foruse with Grid authentication middleware.This led toa document that describes how Grids deal with trustchains, summarising the differences and analogies ofGrid PKIs and PKIs in the research networkingenvironment.The report was published on the TF-EMC2 website in December.

At the end of November, a questionnaire wascirculated on the TF-EMC2 mailing list in order toobtain information about the middleware that is inplace in the national research and education networkorganisations that are represented in the task force.The results of this survey were published on thewebsite.

www.terena.nl/tech/task-forces/tf-emc2/

> TF-CSIRT (Collaboration of SecurityIncident Response Teams)

TF-CSIRT is the task force where members ofComputer Security Incident Response Teams(CSIRTs) meet, collaborate and exchange informationand experiences, and develop a cohesive environmentof trust.The participants come from differentcommunities: national research and educationnetwork organisations, universities, governmentinstitutions and commercial companies.

The task force met three times in 2004: on 15-16January in Madrid, on 27-28 May in Hamburg and on23-24 September in Valletta, Malta. On the first day ofevery meeting, a seminar was held on issues related tocomputer and network security. Presentations in theseminar sessions covered the status and developmentof individual CSIRTs, technical and legal issues, andoverviews of activities of local institutions, includinglaw enforcement agencies and commercial companies.The second day of every meeting always included atask force business meeting, where the work ofsubgroups was reviewed and other related activitieswere presented.The meetings were well attended withup to 80 participants at every event.The feedbackfrom the participants, which was collected throughmeeting evaluation forms, was generally very positive.

The task force has created a slide show about all of theTF-CSIRT activities, which is updated regularly.During the year, the slide show was presented atvarious events, for example, the CCIRN meeting inAustralia, a Silk Security Workshop in Armenia, andthe FIRST conference in Hungary.

A number of projects in the 5th FrameworkProgramme of the European Commission had theirorigins in TF-CSIRT.The eCSIRT.net and EISPP(European Information Security PromotionProgramme) projects were successfully completed atthe end of 2003 and in the early months of 2004,respectively.The TRANSITS project for trainingCSIRT staff has continued throughout the year.Another spin-off of the TF-CSIRT activities, which isnot financially supported by the EuropeanCommission, is the Trusted Introducer service. Both the


p.30


TRANSITS project and the Trusted Introducer serviceare reported on elsewhere in this Annual Report.

In earlier years,TF-CSIRT had initiated the additionof an IRT (Incident Response Team) object to theRIPE database, in order to help CSIRTs or systemadministrators to discover who is responsible for thesecurity aspects of a host or a group of hosts. Duringthe year, the object format was updated and optimisedto make it easier to use.Work to populate this part ofthe RIPE database continued throughout the year,and by the middle of 2004 approximately 7% of theIP address space was linked to an IRT object.

TF-CSIRT’s Web-based clearinghouse for incidenthandling tools is hosted by DFN-CERT in Germany.During the year, improvements to the service weremade, including the categorisation of tools, thecreation of basic workflows for incident response casesand the addition of information about existing tools.

The subgroup of TF-CSIRT that aims to create aunified Vulnerability and Exploit Description andExchange Format continued its activities in 2004.Thegroup produced a series of documents establishingconsolidated best practice for vulnerability and/orexploit description, taking into account the needs ofvendors, CSIRTs and end-users.

A new subgroup was created to work on thedevelopment of the RTIR (Request Tracker forIncident Response) incident handling tool.The aim ofthe group is to extend the current application bymaking it more stable and adding new functionality,

thus making it more adaptable for general use by bothnew and established CSIRTs.

TF-CSIRT has established closer and better definedcollaboration with Abuse teams in Europe.An AbuseForum has been created to promote collaborationbetween those teams.The discussions in this forumhave focused on three topics: viruses and worms,unsolicited electronic mail and copyright issues.TheForum organised three meetings during the year andreported about its work to the TF-CSIRT meetings.

A memorandum of understanding between TF-CSIRT and APCERT, its counterpart in the Asia-Pacific region, was drafted and discussed, and isexpected to be signed early in 2005.Thememorandum expresses the will to expand thecollaboration between the two world regions in thefield of incident response.

TF-CSIRT has continued its regular contacts withofficials of the European Commission.A TF-CSIRTdeputation met with EC officials in Brussels inSeptember and discussed possible involvement ofCSIRTs in new Framework Programme projects,possibilities to collaborate with the newly-createdEuropean Network Information Security Agency(ENISA), the planned update of the legal handbookfor CSIRTs and other issues.

In May,TF-CSIRT reviewed its set of activities anddiscussed proposed work items for the next two years.This led to renewed terms of reference for the task> Seminar session at the TF-CSIRT meeting in

Valletta

>TF-CSIRT chairman Gorazd Bozic and TERENA’sKarel Vietsch discuss EU policies at the TF-CSIRT meeting in Madrid

^ ^


p.31


force, which were approved by the TERENATechnical Committee in September.

A new element in the terms of reference is the role ofTF-CSIRT as a sounding board and a collaborationpartner for the Joint Research Activity on Security inthe GN2 project.The task force has a number ofspecified roles in providing advice to this part of theGN2 project, and TF-CSIRT and the GN2 team onsecurity research have agreed to organise theirmeetings back-to-back.

www.terena.nl/tech/task-forces/tf-csirt/

> TF-Mobility (Roaming Services for MobileDevices)

TF-Mobility was originally established in January2003 with a work programme that was planned to becompleted by June 2004.The main aim of the taskforce was to define and test an inter-NREN roamingarchitecture by:> evaluating possible authentication and authorisation

techniques in mobile environments (for example:Web-based redirection, RADIUS+802.1X,VPN)for the research community in Europe

> identifying the most suitable techniques, whichneed to be standards-based and platform-independent, and which use, whenever possible,infrastructures that are deployed in the nationalresearch and education networks

> describing the elements for a possible inter-NRENWLAN architecture based on these selectedtechnologies.

TF-Mobility had two meetings during the first half of2004, on 30 January in the TERENA offices inAmsterdam, and on 6 June in Rhodes before theTERENA Networking Conference 2004. From thevery beginning, the task force proved to be very active,and all deliverables were completed before the end ofthe original mandate.These deliverables include:> a glossary of terms for mobility, roaming,

authentication and authorisation technologies> requirements definitions for inter-NREN roaming

> inventories of 802.1X-based,VPN-based and Web-based solutions for inter-NREN roaming

> a report listing interoperability issues between theexisting national solutions, assessing the additionalwork that would be required from each solution toscale to a European level and specifying the designrequirements for a solution that could support thedescribed national solutions

> a report describing interoperability test beds atinstitutions that had implemented one of thenational roaming solutions, and presenting areference implementation for 802.1X-based,Web-based redirection and VPN-based authentication.

A final report on this phase of the TF-Mobility workthat summarises all the deliverables and describes themain results has been published on the TF-Mobilitywebsite.

In September, the mandate of TF-Mobility wasrenewed for a further two years. In this second phasethe task force will undertake work to extend roamingservice access beyond national research and educationnetworks to other networks. It will also develop moresecure, more flexible and more accountable roamingservices by investigating and testing system integrationwith other authentication, authorisation andaccounting solutions.

The task force will provide a repository of technicalknowledge that will contain information aboutstandards and products for roaming services. It willalso create a service support area for the current

> TF-Mobility members celebrating thecompletion of the initial set of deliverables


p.32


> EduRoam

Early in 2003,TF-Mobility investigated threeauthentication techniques for obtaining access to anetwork:Web-based redirection,VPN, and 802.1X +RADIUS. It was immediately clear that it would notbe possible to select one dominant solution fromthese three alternatives. It was therefore decided tochoose an approach that overlays and supportsmultiple solutions. It was agreed that the mostpromising overlay solution, which offers a goodbalance between security and scalability, is theRADIUS proxy hierarchy.

In the spring of 2003,TF-Mobility successfullydeveloped a RADIUS backend approach between anumber of national research and education networksand SURFnet using 802.1X and a RadiatorRADIUS proxy server hierarchy.This infrastructurewas named EduRoam (Education Roaming). Overthe subsequent two years it has become increasinglypopular, with more and more countries joining.Aparticular milestone was reached towards the end of

2004, when Australia also joined this Europeaninfrastructure.

EduRoam allows users of participating institutions toaccess the Internet at other participants’ locationsusing their home institution’s credentials, and all thiswith a minimal administrative overhead. Dependingon local policies at the visited institution, participantsmay also have access to additional resources.

TERENA provides a European top-level RADIUSserver to which all participating national research andeducation network organisations connect with theirnational RADIUS servers. Every institution thatwants to participate in EduRoam connects itsinstitutional RADIUS server to the national server oftheir national research and education networkorganisation. Users’ credentials are carried overRADIUS, but they are secured using a tunnellingprotocol. In this way, EduRoam provides a federatedapproach to access a network.

www.eduroam.org

TERENASURFnet

RESTENA

DFN

UNI•C

FUNET

UNINETT

UKERNA

RedIRESFCCN

AARNet

ISTF

GRNet

GARR

ARNESCARNet

CESNET

PIONIER

LANET

> The map depictsthe researchnetworkingorganisationsthat participatein the EduRoamRADIUS hierarchy.TERENA providesthe European root.


p.33


roaming services that provides information on currentroaming policies, current best practice and an onlinemap of participating national research and educationnetworking organisations and campuses with detaileddata about their roaming services.

TF-Mobility will provide information on securityissues that may affect roaming services, as well as arepository of best practices in roaming security.

The task force will also have a role as a soundingboard for the Joint Research Activity on Ubiquity(Mobility) in the GN2 project, offering anopportunity to that activity to receive feedback from awider community.

TF-Mobility had two meetings under its new termsof reference, on 10 September in Berlin and on 19November by videoconference. In the meeting inBerlin, the terms of reference were discussed and thework items and the scope of the work were agreed aswell as the choice of work-item leaders, priorities andtimescales. It was clarified that TF-Mobility works oniterative developments that are pertinent toEduRoam, while the Joint Research Activity in theGN2 project conducts research with a broader scopefor roaming and its integration with authenticationand authorisation.

www.terena.nl/tech/task-forces/tf-mobility/

> TF-Netcast (Academic Netcasting)

TF-Netcast was established in March 2003 with aone-year mandate. Its objective was to create a portalfor live-streaming announcements and to investigatethe possible extension of the portal to an academicchannel for live-streams and video-on-demand.

The task force completed most of its deliverables in2003.The beginning of 2004 was used to update thedocument on ‘Information about Resources forContent Production’ and to continue the developmentof the OpenCDN software and the TF-Netcastannouncement portal.

The final report of the task force was presented at theTERENA Networking Conference 2004 in Rhodes.The report covered all TF-Netcast activity areas,including the streaming video survey, the live-streamannouncements portal and the Open ContentDelivery Network.The final report was laterpresented to the TERENA Technical Committee andis available online.

In the last meetings of TF-Netcast, the future of thetask force was discussed.The participants felt thatanother task force with a broader scope would beneeded to continue the collaboration in the areas oflive streaming, video-on-demand and voice-over-IP.The new task force should be open to various activityareas and encourage people to bring in new ideas.

Three preparation meetings were organised to discussthe terms of reference of the new task force, to beknown as TF-VVC.The meetings on 6 May and 26August were held via videoconference, and themeeting on 9 June took place in Rhodes during theTERENA Networking Conference 2004.

www.terena.nl/tech/archive/tf-netcast/

> TF-VVC (Voice, Video and Collaboration)

TF-VVC is the successor of TF-Netcast, whichcompleted its work in the spring of 2004.The remit of the new task force is to investigate the suitability of voice, video and collaboration technologies forimplementation in research and education networks in Europe.The terms of reference of TF-VVC wereapproved by the TERENA Technical Committee inSeptember, and its current mandate will end in August 2006.

The intention is that the programme of work of TF-VVC will be more open and flexible than was thecase for TF-Netcast, which had a very focused mission.Twelve activity areas and work items have beendefined in the terms of reference, but participants areencouraged to contribute new suggestions and developthem as additional work items.


p.34


The twelve initial tasks are the following:> The task force will provide a collection of best-

practice documents, overviews and guidelinesrelated to the provision of voice, video and datacollaboration services.

> TF-VVC will support the development, testing androllout of Content Delivery Network software.

> In the area of Content Access Portals (CAPs), thetask force will collaborate with other initiativesworldwide in order to gather information aboutexisting content and to investigate other CAP-related questions.An example is co-ordination withthe Internet2 Research Channel Global Initiative.

> TF-VVC will promote existing materials about themetadata published by TF-Netcast and willencourage discussion about models and metadata.

> The task force will promote the announcementsportal that was developed by TF-Netcast; it willinvestigate its possible extension to an AcademicNetcasting Channel.

> The task force will actively contribute to discussionson international dial and numbering plans forvideoconferencing and voice-over-IP (independentof protocol), and will make recommendations onhow to set up interconnected systems.

> Information on how different collaborativemultimedia technologies can be integrated will becollected and made available to the task forceparticipants.

> Workshops will be organised about high-end/quality systems.

> In relation to usability and the improvement of userinterfaces, the task force will promote discussionabout user needs, collect these and contactequipment vendors to ask for the requiredimprovements.

> TF-VVC will collaborate with the TERENA taskforces TF-EMC2 and TF-Mobility to investigate themiddleware requirements for access to videoresources.

> Regarding the deployment of IP telephony,TF-VVC will produce, among others, a survey ofexisting IP telephony deployments, andrecommendations on how to connect differentnodes.

> Finally, the task force will publish recommendationson how to measure end-to-end performance ofreal-time conferencing applications.

The task force had a first meeting on 16 November, byvideoconference, to discuss the start of work in all theactivity areas as well as a roadmap for the activities.

www.terena.nl/tech/task-forces/tf-vvc/

> TF-NGN (Next-Generation Networking)

TF-NGN investigates the suitability of advancednetwork technologies for future implementation inresearch and education networks in Europe. Eversince the start of the task force in November 2000,TF-NGN work has been carried out in collaborationwith the technical activities related to GÉANT andwith other European projects like 6NET andSCAMPI, without being restricted to them.

During the year,TF-NGN participants have carriedout a revision of the goals and activities of the taskforce.This process started in May, and discussions at abirds-of-a-feather meeting at the TERENANetworking Conference in Rhodes contributedsignificantly to the thinking.The new terms ofreference became effective on 1 November, and theTERENA Technical Committee has approved a two-year extension of the TF-NGN mandate.

The new mandate confirms the role of TF-NGN as a forum for exchanging experience and knowledgeabout the development and testing of innovativelower-layer networking technologies.The task forcealso contributes to the definition, development andtesting of new networking services, aiming at theirsubsequent introduction in national research andeducation networks, or on GÉANT or its successorbackbone networks. In addition,TF-NGN provides aforum for wider discussion of the work of several JointResearch Activities in the GN2 project and GN2’sService Activity on End-to-End Quality of Service.In this way, the task force provides a framework foractive collaboration between research activities in theGN2 project and organisations that are not partners inthat project.

The revised terms of reference of TF-NGN list a newset of work items. Some of them - for instance:


p.35


optical networking, improvement of multicastservices and IPv6 - build on the work carried out bythe task force in the past, whereas others are totallynew. Persons participating in the task force havevolunteered to champion the various activities andare committed to lead the relevant work items.Activities that were not in TF-NGN’s terms ofreference before include:> MPLS (Multi-Protocol Label Switching) for Virtual

Private Networks at layers 2-3 and VPLS (VirtualPrivate LAN Service)

> intelligent control plane architectures> transport protocols (studying the limitations of

TCP, fast TCP and new transport protocols)> evaluation of novel routing and switching equipment.

TF-NGN had three meetings in 2004: in Madrid on22-23 January, in Amsterdam on 10-11 May, and inLisbon on 30 September and 1 October.

In the course of this year’s meetings, the task forcereceived regular updates from DANTE staff on theupgrades of the GÉANT network, as well as on theprogress of the (preparations for the) GN2 project,including the expectations for the GÉANT2 networkand, much more extensively, the Joint ResearchActivities.Task force participants had the opportunityto provide feedback to the DANTE staff or directly tothe leaders of the Joint Research Activities of the GN2project on the overall and detailed technical issues.

Work on monitoring network performancecontinued during the year.This work included thedevelopment of various modules of a performancemonitoring infrastructure aimed at monitoringperformance data between domains to helptroubleshooting, provide network users with views ofedge-to-edge performance and verify Service LevelAgreements. In this area, collaboration has beenestablished with Internet2’s E2E piPEs and with theEGEE project. Part of this work item was carried outin combination with early work by some nationalresearch and education network organisations in theJoint Research Activity on PerformanceMeasurement and Management of the GN2 project.

Since the start of an operational IPv6 service onGÉANT in 2003, the work of TF-NGN on IPv6 has

consisted mostly of reporting and discussing progressin the deployment of IPv6 and developments relatedto IPv6 in other environments, like the 6NET,Euro6IX and 6POWER projects, the M6Bone orother developments in individual research andeducation networks.The task force has been lookingactively into the development of IPv6 Single SourceMulticast of the M6Bone multicast overlayinfrastructure, and the progress in introducing IPv6multicasting on GÉANT.

A lot of material concerning optical networking waspresented and discussed during TF-NGN meetings in2004. Presentations were given on such subjects asnew architectures for hybrid IP-optical networks andintelligent control planes, as well as on opticalamplifiers and transmission technologies by vendorslike, for instance, Sycamore Networks, Cisco Systems,Calient Networks, Juniper Networks and Optovia.Thenumber of engineers from equipment manufacturersattending TF-NGN meeting has increased during theyear, showing a growing interest in task force activitiesand the feedback from expert members of TF-NGN.

Other topics discussed at the task force meetingsconcerned updates on experiences with, and plans for,next-generation networks.These included updates on theSWITCHlambda network, PIONIER and SURFnet6.Members of TF-NGN were involved in testing andexperimenting with User Controlled Lightpathsinternationally, and in other lightpath experiments.

www.terena.nl/tech/task-forces/tf-ngn/

> Task Force Chairs in 2004:

TF-AACE Diego LópezTF-CSIRT Gorazd BožičTF-EMC2 Diego LópezTF-Mobility Carsten Bormann (until June)

James SankarKlaas Wierenga (from September)

TF-Netcast Dan MonsterTF-NGN Michael EnricoTF-PR Sandra PasschierTF-VVC Egon Verharen


p.36


> TERENA Projects

> Adding Certificate Retrieval to OpenLDAP

The project ‘Adding Certificate Retrieval toOpenLDAP’ was carried out at the University ofSalford, under the supervision of David Chadwick.The work was co-funded by TERENA and fiveTERENA member organisations: CESNET,RedIRIS, SURFnet, SWITCH and UNINETT.The project, which started in September 2001, wasconcluded in the summer of 2004.The delay was due to some complexities and to some bugs found in the design when testing had started.The bugs havebeen fixed and the migration of the code into thelatest release of OpenLDAP has been completed.

The goal of the project was to implement two of the Internet Drafts presented to solve deficiencieswhen LDAP is used in combination with Public KeyInfrastructures, namely matched values and certificatematching rules, and to build them into theOpenLDAP source code.This will allow users tosearch for certificates containing specific fields, suchas key usage or Subject Alt Names containing anemail address.

The software was demonstrated by David Chadwickat the TERENA Networking Conference 2004.The detailed design of an LDAP X.509 parsingserver as well as the final project report are availableon the Web.

www.terena.nl/tech/projects/

AddingCertificateToOpenLDAP/

> Guide to Network Resource Tools

The ‘Guide to Network Resource Tools’ (GNRT) is apopular publication, whose origins go back to 1993. Itis a user-friendly, well-organised guide, designed toprovide a basic introduction to the Internet withsections on using basic tools and services available onthe network.

The latest edition of the GNRT was completedtowards the end of 2003, and published on theTERENA website very early in 2004. In contrast toearlier editions, it has a completely modular structureand is published using novel Web technology.This willmake it possible to easily update parts of thepublication in future.

In November,TERENA signed a contract withPearson Education Ltd. for the publication of thelatest edition of the GNRT is book form. It isexpected that the book will be available frombookshops in the first half of 2005.

www.terena.nl/gnrt/

> IP Telephony Cookbook

The project to create an IP Telephony Cookbook wascompleted in February 2004.The work was carriedout by technical experts from the University of Pisa,the University of Bremen and FOKUS (the Institutefor Open Communication Systems of the FraunhoferGesellschaft), with contributions from CESNET,GRNET, the Karl Franzens University in Graz andSURFnet.The project was financially supported byTERENA, UKERNA, SUNET, CYNET,ARNESand CARNet.

The last two chapters of the Cookbook were deliveredin February.The TERENA Secretariat staff devotedmuch time and effort to editing the document andpreparing it for publication.The publication becameavailable for distribution in May and has been verysuccessful. More than 1,000 copies were distributed to25 member organisations of TERENA.The book hasbeen distributed in large numbers at the TERENANetworking Conference 2004 and at other relevantevents.The Cookbook is also available from theTERENA website in pdf-format.

The IP Telephony Cookbook provides an overview ofavailable and future IP telephony technology, focusingon usage scenarios and the necessary setups fordeploying basic and advance IP telephony services onuniversity campuses.


p.37


The Cookbook starts with an explanation of thebackground, including a description of the maincomponents and protocols for IP telephony, particularlyH.323, SIP and the Media Gateway Protocol.This isfollowed by overviews of scenarios for IP telephonydeployment: long-distance least-cost routing, alternativesolutions to legacy PBX systems and integration ofvoice-over-IP and videoconferencing.

The Cookbook describes, in detail, how to set up andoperate basic IP telephony services: including calls,authentication and billing, advanced IP telephonyservices (such as gateways between IP telephony

systems and PSTN/ISDN systems) and value-addedservices (such as Web integration of (H.323 and SIP)IP telephony services).

Finally, the book provides information aboutconnecting an IP telephony system to a global‘dialling plan’ for H.323, and an overview of currentregulatory and legal aspects in the European Unionand the United States.Two appendices report onexisting IP telephony projects and on theinteroperability of equipment.

www.terena.nl/tech/IPtel/

> Dick Visser consults the cookbook while workingon TERENA’s IP Telephony set-up.


p.38


> External Projects

> 6NET

TERENA is a partner and work package leader in the 6NET project, which encourages theadoption of IPv6. By demonstrating that IPv6 is fully functional and stable, and that IPv6 offersdistinct advantages over IPv4, the project addresses the two major misconceptions that are thoughtto be hindering the widespread acceptance of IPv6.

6NET involves 36 partners from the commercial, research and academic sectors and represents atotal investment of 18 million euro. More than half of this amount is contributed by the EuropeanUnion as part of the 5th Framework Programme.The project started on 1 January 2002 and wasdue to run until 31 December 2004, but has now been extended until the end of June 2005.

The project comprises seven work packages, which focus on building and operating a native IPv6backbone, interworking and migration from IPv4 networks, establishment of basic IPv6 networkservices, application and service support, middleware and user application trials, trials of networkmanagement tools and dissemination and exploitation of results.TERENA leads the disseminationwork package.

During 2004, a backbone IPv6 network continued to connect fifteen countries at 155 Mb/s.Thisnetwork ran IPv6 over dedicated links, although for cost reasons four links (to Greece, Hungary,Poland and Portugal) were provided over a layer-2 VPN infrastructure. Local access was providedthrough national IPv6 test beds operated by national research and education networkorganisations that were partners in the 6NET project. Connectivity to 6NET partners in Japanand South Korea was provided through connections via the UK6X in London and Renater,respectively.There were also connections to the Abilene network in the United States (viaSURFnet), Euro6IX (via the JANET-UK6X, GARR-TILab and SWITCH-Swisscom exchangepoints) and to the 6Bone (an experimental virtual network).

The success of the test bed spurred the existing GÉANT and NORDUnet networks to move todual-stack operation earlier than anticipated, and in turn, encouraged many national researchnetworks to offer IPv6 services as well. Having served its purpose, and with 6NET partners nowhaving IPv6 access via GÉANT, the test bed was decommissioned at the end of December.

The project also successfully tested IPv6 over MPLS and undertook QoS trials. IPv6 has beendeployed in a campus environment at Southampton, while large-scale wireless trials are being heldin Lancaster and Tromso. Other components that are important to widespread IPv6 deployment,such as DHCPv6, DNSSEC, autoconfiguration, multihoming, renumbering, mobile IPv6 andIPsec, have been evaluated and feedback has been provided to developers.The aim is determinewhich elements are missing, and to ensure that any problems are identified and fixed.

A number of middleware and user applications are being developed or ported by the project.Thisincludes a SIP-based telephony system (including PSTN gateway), the Access Grid conferencingtool (including IPv4-IPv6 gateway), IPv6 versions of the IBM WebSphere e-business applications,an IPv6 version of the FLUTE multicast file transfer tool and MIPv6-based video streaming forPDAs.The project has also created IPv6 versions of the Globus Toolkit, which is used to develop


p.39


Grid-aware applications (for example, IPv6 WeatherStation and eProtein), and the Open H.323Toolkit, which was used to develop an IPv6 version of GnomeMeeting. Other networkmanagement tools have been developed or ported for traffic measurement and visualisationpurposes.

The 6NET project has contributed actively to the IETF, particularly to the ipv6, v6ops, multi6and dhc working groups.A number of RFCs and Internet Drafts have been submitted in the areasof site-local addressing, multicasting, 6to4 security, SNMP over IPv6, application porting, campustransition scenarios, renumbering, dual-stack issues, 3GPP and DNSSEC.These are areas that werepreviously poorly defined, and 6NET has been able to provide input based on its operationalexperiences.The 6NET project has also worked with the Global Grid Forum to produceguidelines for IP version independence in Grid specifications, and to determine the IPv4dependencies in current specifications.

The experience gained during the project has been turned into anumber of ‘cookbooks’ aimed at network administrators. Cookbookson migrating backbone and campus networks from IPv4 to IPv6,implementing IPv6 services, and IPv6 network management havealready been published, and others are being produced.The cookbooksare available from the 6NET website, as is all of the other projectdocumentation.

TERENA is responsible for the operation and maintenance of theproject Web server (accessible via IPv4 and IPv6), including theprovision of content. It also maintains the Web-based projectmanagement system, which integrates document storage and retrieval,mailing list archives, a contacts database and a scheduling system.

TERENA organised a 6NET workshop on 9 June, in conjunction with the TERENA NetworkingConference 2004 in Rhodes.This third annual event attracted a total of 73 participants. It wasbroadcast live over the Internet and the video proceedings are available on the 6NET website.

Other events organised by the project included the Global IPv6 Service Launch Event in Brusselson 15-16 January, which was targeted at heads of government administrations and senior businessmanagers, and two IPv6 network management tutorials, which were held in Montpellier on 4-6October and in Budapest on 24-26 November.The tutorials were aimed at network administratorsand provided practical hands-on training on all aspects of IPv6 deployment and management. Dueto the popularity of these training events, at least two more will be held in 2005.

The 6NET project has clearly demonstrated that IPv6 can be deployed in a productionenvironment, and the project has been a major factor in accelerating the rollout of dual-stackoperation on regional networks and national research networks.The 6NET network itself hasbeen used to provide IPv6 connectivity to a number of worldwide events, showing that theunderlying technology is stable and reliable.The remaining tasks of the project are therefore toimprove the levels of documentation and training that are available, and TERENA will have a keyrole in that work.

www.6net.org

> Valentino Cavalli presents 6NET at the EC-BRIDGE conference in Shanghai in December


p.40


> 6LINK

TERENA is a partner in the 6LINK project, which facilitates collaboration, in the form of theIPv6 Cluster, between IPv6-related projects that are co-funded by the European Union.Theproject is co-ordinated by BT Exact and involves Consulintel, Motorola,Telscom,T-Systems Nova,Universidad Carlos III de Madrid, Universidad Politécnica de Madrid, University College Londonand the University of Southampton as well as TERENA and DANTE.All these organisations playkey roles in a variety of IPv6 activities.The project started on 1 March 2002 and was planned toend on 28 February 2005, but its lifetime has now been extended by a further month.

The 6LINK project identifies projects that have an interest in IPv6, and brings them together toshare experiences and knowledge.This is primarily achieved through public workshops, whichthis year were held in Brussels on 14 January, in Rhodes on 9 June and in Manchester on 23 September.TERENA hosted the second of these workshops at the TERENA NetworkingConference 2004, while the others were held in conjunction with the Global IPv6 ServiceLaunch Event and a RIPE meeting, respectively.

Another goal is to disseminate and promote the IPv6 work being undertaken by the variousprojects.This was pursued through the publication of information booklets such as ‘Moving toIPv6’ and ‘Broadband and IPv6’, a Web portal providing up-to-date news on IPv6 and a summaryof the standardisation work that has been conducted in the IETF, the Global Grid Forum andelsewhere.

The 6LINK project co-organised the Global IPv6 Service Launch Event in Brussels in Januarywith the 6NET and Euro6IX projects.This was a high-profile European event for policy makersand managers from industry and research to promote the use of IPv6, which was attended byCommissioner Liikanen and other dignitaries. Liaisons with the IPv6 Forum and the EuropeanIPv6 Task Force were maintained throughout the year.

www.6link.org

> SCAMPI

TERENA is the co-ordinating partner in the SCAMPI project, which develops a low-costscalable monitoring platform for the Internet.The total project budget is 5.5 million euro, ofwhich about half will be contributed by the European Commission as part of the 5th FrameworkProgramme.The other partners are CESNET and Masaryk University Brno (Czech Republic),FORTH and FORTHnet (Greece), IMEC (Belgium), Leiden University (Netherlands), NETikos(Italy) and UNINETT (Norway). Siemens (Germany) was also a partner until January 2004, butdecided to withdraw after company restructuring.The SCAMPI project started in April 2002 andwas planned to run for 30 months, but has now been extended until 31 March 2005.Nevertheless, the majority of the work was already completed by the end of 2004.

The project has developed a range of programmable PCI-based adapters that are capable ofmonitoring Internet connections at speeds of up to 10 Gb/s.These can be installed in a standard


p.41


PC, and are supported by both Linux and NetBSD.Two base cards are available for either 32-bit PCI(COMBO6) or 64-bit PCI (COMBO6X), onto which the appropriate interface cards can bemounted. Interface cards are available with 4 x 1 GE copper connections (COMBO-4MTX), 4 x 1GE/OC-48 optical connections (COMBO-4SFPRO), or 2 x 10 GE optical connections (COMBO-2XFPRO).Additional PCI cards are also available for producing precise timestamps and booting theCOMBO6/6X cards without a host PC.

The Monitoring Application Programming Interface (MAPI) is the middleware that processesnetwork flows, while presenting applications with a standardised API.This has been designed tosupport special-purpose hardware (for example, the COMBO range of cards), but it can also beimplemented inside operating system kernels as an add-on to Berkeley Packet Filters or Linux SocketFilters, on top of libpcap, or on top of traditional systems that can communicate with intelligentrouters that keep network statistics (for example, the Juniper M-Series).At the same time, the MAPIoffers a variety of interfaces to applications, which include its own well-specified functions,NetFlow/IPFIX record generation, libpcap support and the ability to function as an SNMP agent.Finally, the MAPI allows client applications to monitor multiple remote observation points, providedeach is running the MAPI daemon.

The MAPI has been successfully run not only with COMBO hardware, but also with Endace DAGadapters, Intel IXP network processors and standard NICs.As it will be released as open-source software, itshould be easy to port it to additional hardware platforms and to add functionality as required.

The project has also developed a kernel enhancement for Linux (FastRing) that creates a new type ofsocket (PF_Ring) optimised for packet capture.This improves performance as packets are not queuedin the kernel, userspace applications can access the buffer with no overhead, sampled packets do notneed to be passed to userspace for discarding and systems without support for device polling are usable.

In addition, a number of complementary applications have been developed to demonstrate thecapabilities of the SCAMPI system, and to investigate some new approaches to network monitoring.In particular, the increasing number of denial-of-service attacks, worms and viruses circulating on theInternet makes security applications an important part of any modern network infrastructure.To thisend, the project has been working on both a denial-of-service attack detection application thatattempts to detect anomalous network traffic, and an intrusion detection application that usessignatures to detect malicious network payloads. Initial implementations are already available, butfurther work on the all-important distributed analysis will be continued by the LOBSTER project.

A flow-based reporting application (Stager) has also been developed that allows network statisticscollected from the MAPI or other sources to be aggregated and turned into reports. NetFlow data isstored in an SQL database and a flexible Web-based interface allows users to create and view reports.This application has been released as open-source software and is already being used by a number oforganisations. Other applications that have been developed include a traffic summary accounting suitethat generates SDRs for classifying traffic by application, a packet capture utility for filtering andstoring packets to disk for future analysis and traffic engineering and QoS demonstrators.

In addition to being the project co-ordinator,TERENA is also responsible for the projectdissemination activities.This includes running the project Web server, organising open workshops,and developing a technology exploitation plan.


p.42


The second one-day SCAMPI workshop was held on 3 May in Amsterdam.This attracted nearly50 participants, who heard presentations on various aspects of the SCAMPI system, as well as fromFulvio Risso (Technical University of Turin), Jürgen Quittek (NEC Europe), Georg Poell (Narus)and Simon Leinen (SWITCH) on other areas of traffic monitoring. Further disseminationactivities will be undertaken in the remaining months of the project.

www.ist-scampi.org

> TRANSITS

The TRANSITS project (Training of Network Security Incident Teams Staff) started in July 2002and is funded by the European Union with an amount of 250,000 euro as part of the 5thFramework Programme. Its objective is to provide training to staff members of new ComputerSecurity Incident Response Teams (CSIRTs) and to new staff members of existing CSIRTs.Theproject partners are TERENA and UKERNA.

The TRANSITS course materials were originally developed by volunteers from TF-CSIRT, andthey are now maintained and continually updated as part of the TRANSITS project.The courseconsists of five modules: technical issues, vulnerabilities, organisational issues, operational issues and

legal issues.

TRANSITS training workshops are organised twice per year.They offer anintensive programme of two full days, with trainees working in two parallelgroups of about ten persons each.The lecturers at every workshop are fiveexperienced members of the European CSIRT community; the high trainer/trainee ratio allows for intensive interaction.The TRANSITS budget includesa small fund to partly reimburse the cost of participation of trainees fromeconomically less prosperous countries in Europe.

The first TRANSITS workshop in 2004 was held in Hamburg on 25-26May, and was attended by fifteen trainees from ten countries with verydifferent backgrounds. Lecturers were Andrew Cormack (UKERNA),Stelios Maistros (GRNET-CERT), Klaus Möller (DFN-CERT), ClaudiaNatanson (British Telecom) and Jacques Schuurman (SURFnet-CERT).

The next workshop was organised with assistance from CESNET atPrůhonice near Prague on 11-12 November. On this occasion, theprogramme was extended with an evening session on the second day: traineeswere divided in three teams and given a mock case of a potential securityincident warning; they were then asked to develop a plan for response to theproblem, taking into account all the aspects that had been taught during thecourse.The course was attended by 23 trainees from thirteen countries andfrom a good cross-section of the networking community, includinguniversities, commercial companies, government bodies and national research> Lecturers and trainees at the workshop in

Pruhonice

> Participants of the training workshop in Hamburg

o


p.43


and education networks.The lecturers were Andrew Cormack (UKERNA), Klaus Möller (DFN-CERT), Claudia Natanson (Diageo), David Parker (UNIRAS) and Jacques Schuurman(SURFnet-CERT).

In June,TRANSITS and FIRST, the worldwide association of CSIRTs, agreed that FIRST woulduse the TRANSITS materials at continental training workshops outside Europe. In a ‘Train theTrainers’ event in Budapest on 18-19 June, twelve members of CSIRTs in Latin America and theAsia-Pacific region were instructed on how to present the training course.The first trainingworkshop outside Europe was organised by FIRST on 26-27 November in Rio de Janeiro.Thehighly successful event was led by lecturers from Brazil and Mexico, and attended by eighteentrainees from thirteen different Latin-American countries.

According to the original planning, only one more TRANSITS workshop would be organised after2004, and the project would end in June 2005. In December the European Commission agreed thatthe residual funds in the project could be used to organise an additional training event in the nextyear, and that the lifetime of the project would be extended by three months.

TERENA and UKERNA are responsible for the creation of a suitable framework for themaintenance of the TRANSITS materials and the delivery of further training courses after the endof the project.This has become increasingly important because experience during the year hasshown that the TRANSITS training is very well received and that there is a large demand thatcannot be met only by the training workshops that are currently planned.Various possibilities wereinvestigated for the continuation of the activities that were started in the TRANSITS project, and aplan for action will be developed in the first half of 2005, possibly involving FIRST as acollaborating partner.

www.ist-transits.org

> SEEREN

The SEEREN project (South-Eastern European Research & Education Networking) started inDecember 2002 and was rounded off at the end of December 2004. Its objective was to connectthe national research and education networks of Albania, Bosnia-Herzegovina, Bulgaria, theFormer Yugoslav Republic of Macedonia, and Serbia and Montenegro to GÉANT.The project,which was a Specific Support Action in the European Union’s 5th Framework Programme, had abudget of almost 1.3 million euro, fully funded by the European Commission.The project was co-ordinated by GRNET.The other partners were TERENA, DANTE, HUNGARNET, RoEduNet(Romania) and the national research network organisations of the five beneficiary countries.TheSEEREN connections, which were based on links with capacities from 2 to 34 Mb/s connectingthe national research networks in beneficiary countries with GÉANT’s points of presence inGreece and Romania, were operational from the autumn of 2003 until the end of 2004.Theproject had a successful final review, which was conducted in a meeting on 6 December in Istanbul.

The participation of TERENA in the SEEREN project has been limited to the specific workpackage on dissemination of information.The major effort was devoted to the organisation of a


p.44


workshop on policy issues, which was held in Varna, Bulgaria in September 2003. In 2004, thework of TERENA focused on the follow-up of that event: the ‘Varna Statement on Policy Issuesfor NRENs in South East Europe’, a document containing the conclusions and recommendationsfrom the workshop. Under the supervision of TERENA, this document was finalised by selectedworkshop speakers during the first months of the year. It was distributed by TERENA in April togovernment authorities in southeast Europe.

www.seeren.org

www.terena.nl/conferences/nato-anw2003/Varna-statement.pdf

> MOME

The MOME project (Monitoring and Measurement Cluster) is a co-ordination action that isfunded by the European Commission with almost 530,000 euro as part of the 6th FrameworkProgramme.The project offers a platform for knowledge and tool exchange and for co-ordinatingactivities in the field of IP monitoring and measurement between projects in the 5th and 6thFramework Programmes and with other European organisations.The MOME project started inJanuary 2004 and will run for a period of two years.The project consortium, which consists ofeight partners, is led by Salzburg Research.

The objectives of the MOME project include the evaluation of the interoperability of differentactive and passive measurement components, tools and interfaces, the collection of measurementdata of different tools, the conversion and storage of them into a common format, and thedissemination of the collected measurement data to the community via an easy-to-use Web-basedinterface to enable statistical data analysis.

The project is organised in two main phases.The first year was mostly dedicated to gatheringinformation about projects and tools as well as infrastructure set-up.The second year will be themain period for data collection and analysis.Although MOME is a co-ordination action, there isalso some technical work in the project, namely the creation and maintenance of databases formonitoring and measurement tools and measurement data, including their access interfaces.

The first MOME workshop was organised on 22-23 March in Budapest.This workshop wasfocused on inter-domain performance and simulation issues. On 8 June, the MOME projectorganised a session at the TERENA Networking Conference 2004 in Rhodes.The sessionoutlined the importance and challenges of traffic monitoring and measurement and provided aninsight to the achievements of the projects participating in the Monitoring and MeasurementCluster.The attendees heard presentations from Felix Strohmeier and Ulrich Hofmann (SalzburgResearch), Jiri Novotny (Masaryk University) and Arne Oslebo (UNINETT). Both the workshopand the session at the TERENA conference were well-attended.

A survey of monitoring tools was carried out in order to get a better understanding of themonitoring tools, needs and trends of the participating projects and other organisations.Theresults of the survey were summarised in a report that was published on the MOME website.


p.45


The preparations for setting up the monitoring and measurementinfrastructure were started in the second half of the year.Therequirements for the databases were analysed, the server installed and thedatabase software developed and implemented.The databases are plannedto become available early in 2005.The MOME Standardisation Plan wasalso developed during the year and will be implemented in 2005.

TERENA is responsible for the MOME dissemination activities.Thework includes the development and maintenance of the project website,as well as the development of a Web-based project management system.

www.ist-mome.org

> EGEE

The EGEE project - the acronym originally stood for Enabling Grids for E-Science in Europe,but because of the worldwide participation in the project its meaning was later interpreted asEnabling Grids for E-sciencE - aims to develop an international computing Grid infrastructurethat provides access to major computing resources worldwide.The Grid infrastructure will beavailable to scientists 24 hours-a-day, independent of their geographic location.

The project is one of the largest of its kind, with a budget of more than 46 million euro, of whichalmost 32 million euro will be contributed by the European Commission as part of the 6thFramework Programme.The project started on 1 April 2004 and will run for two years.Conceived as part of a four-year programme, the results of these two years will provide the basisfor assessing subsequent objectives and funding needs.

The EGEE project brings together experts from almost 30 countries.The project has 70contractors and more than 30 non-contracting participants, divided into twelve federations.The core work of the project is divided into eleven different activities: five Networking Activities,two Service Activities and four Joint Research Activities.TERENA has a leading role in thedissemination and outreach activity, one of the Networking Activities.

Two pilot application domains were selected for the project. One is the Large Hadron Collider(LHC) Computing Grid, supporting data-intensive high-energy physics experiments.The othercovers biomedical Grids, addressing bioinformatics and healthcare data.All four LHC high-energyphysics experiments have successfully used the EGEE infrastructure for data challenges during 2004.There is a growing decentralised usage by biomedical application developers, with about 20,000jobs submitted corresponding to approximately 30,000 hours of CPU time. Earth sciencesapplications, selected by the EGEE Generic Applications Advisory Panel in June, are already activeon the production infrastructure.Astrophysics and computational chemistry are using the GILDAfacility for further testing.

In order to help the project succeed, it is vital to proactively raise awareness about EGEE and toattract interest and ultimately participation from many different science disciplines, the academic

> MOME project participants on the roof of theTERENA office


p.46


community, business and government.TERENA works closely with the EGEE Project Office,based at CERN in Geneva, and the other dissemination partners across Europe, to promote EGEEto the widest possible audience.There are 29 partners from 21 countries involved in thedissemination activities.

One of the first tasks for TERENA was to develop a brand for EGEE.Working closely with afree-lance designer and the Project Office,TERENA developed an EGEE style guide, whichexplains the rules for presenting the project on paper, online and in printed material.

A wide range of publicity material has been written, designed and published, including avariety of fact sheets explaining different aspects of the project. EGEE folders weredesigned and printed to contain the publicity material.The printed publicity material isreadily available to download from the public website.

Due to the large number of partners involved in the project and a need for much of thepublicity material to be translated into different languages, templates were designed andsupplied for generic posters, technical posters, documents and presentations.

TERENA operates and maintains the public EGEE website, which is continually updatedto reflect developments in the project.The website also has features whereby members ofthe public and journalists can ask questions and subscribe to a mailing list to receive moreinformation about EGEE. Before the project officially began,TERENA operated aninterim website for two months.There is also an EGEE technical website with sectionsabout each activity.TERENA operates and maintains the dissemination pages on thetechnical website. Here project partners can easily download the templates for publicitymaterial.

TERENA is responsible for the production of eleven formal EGEE deliverables, one of which isto write a dissemination plan (communications strategy).The first plan was written in June and itwill be revised every six months during the lifetime of the project.The plan identifies the rolesand responsibilities of the dissemination partners, potential audiences, key messages, and themethods of communication to be utilised, as well as the success criteria. Every six monthsTERENA compiles a dissemination progress report to highlight the achievements of thedissemination partners against the metrics outlined in the dissemination plan.

Media relations play a key role in dissemination.Three news releases have been written anddistributed centrally by TERENA and CERN, and a further 24 were written by otherdissemination partners, resulting in over 90 press cuttings, two radio interviews and two televisioninterviews about EGEE worldwide.

TERENA is responsible for co-ordinating two EGEE conferences each year.The first EGEEconference was held in Cork, Ireland on 18-22 April.The conference preparations required muchwork by TERENA and the local organisers, even before the official start of the EGEE project.Theconference was a success with over 300 delegates attending.

The second EGEE conference was held in The Hague on 22-26 November. Slightly different informat to the first conference, the event was held under the banner ‘European Leadership in

> Publicity materials for the EGEE project


p.47

e-Science and Grids’ during the Dutch EU Presidency.An Open Day, with talks by internationalIT leaders, marked the start of the event, followed by the First EU Concertation Meeting on eInfrastructures.The Concertation Meeting was co-ordinated by the EGEE project incollaboration with the DEISA, SEE-GRID and GN2 projects. By the end of the year, planningwas already underway for a third conference in Athens in April 2005 and for a fourth conferencein October 2005.

www.eu-egee.org

> LOBSTER

The LOBSTER project (Large Scale Monitoring of Broadband Internet Infrastructure) started on1 October 2004 and will continue until 31 December 2006. Its aim is to design and deploy a pilotEuropean infrastructure for accurate Internet traffic monitoring.The total budget of the project,which is a Specific Support Action in the 6th Framework Programme, is more than 2 million euro,of which 1.6 million euro will be contributed by the European Commission.The LOBSTERconsortium consists of FORTH and FORTHnet (Greece),Vrije Universiteit and TNO Telecom(Netherlands), CESNET (Czech Republic), UNINETT (Norway), Endace Europe Ltd.,Alcateland TERENA.

The main goal of the LOBSTER project is to deploy a pilot advanced European Internet trafficmonitoring infrastructure based on passive monitoring sensors at speeds starting from 2.5 Gb/s, andpossibly up to 10 Gb/s. Passive monitoring at such high speeds stresses the computational,communication and storage capabilities of the underlying monitoring sensor and poses severalinteresting research challenges.

The LOBSTER project is a successor of the SCAMPI project, where some of these challenges havebeen met by designing and developing an advanced passive monitoring system that combines novelhardware and software components.The LOBSTER project is going to develop applicationsenabled by the availability of the passive network traffic monitoring infrastructure, realise theappropriate data-anonymising tools that will prohibit unauthorised tampering with the originaltraffic data and focus on other related important issues.

TERENA is responsible for the dissemination activities of the LOBSTER project.The workincludes the development and maintenance of the project website, as well as the development of aWeb-based project management system. Both became operational before the end of the year.Together with the other partners,TERENA promotes collaboration with other communities andforums, for example, Internet2, the IETF,TF-NGN and TF-CSIRT.

www.ist-lobster.org



p.48

[TERENA / annual report 2004] / SERVICES

/>Services

/>Trusted Introducer

Many organisations have established a Computer Security Incident Response Team (CSIRT) to dealwith security incidents. Collaboration between CSIRTs is very important, because in many cases,incidents originate from outside the network that is affected. Such collaboration requires strong trustbetween the security teams.

The Trusted Introducer offers an accreditation scheme that assists in building a web of trust betweenCSIRTs.The Trusted Introducer collects detailed information about CSIRTs, and when a CSIRTmeets certain criteria it can be accredited. Information about accredited CSIRTs and about otherknown CSIRTs is published on the Trusted Introducer website.The information is checked on aregular basis to ensure that it is still up-to-date and that accredited CSIRTs still fulfil the criteria foraccreditation.The service provides only accreditation and not a form of certification, but thescrutiny by the Trusted Introducer gives accredited CSIRTs sufficient status for other CSIRTs tobuild their trust on.

The Trusted Introducer has operated successfully throughout the year, and has shown a furthergrowth compared to previous years. Early in 2004, there were 35 accredited CSIRTs, out of a totalof 86 known CSIRTs in Europe. One year later, these figures were 42 and 90. Of those 42accredited CSIRTs, 22 operate in the research and education sector and thirteen in the commercialsector, while six are government or military CSIRTs and one accredited CSIRT has a mixedconstituency.

The Trusted Introducer service is provided on the basis of a contract between S-CURE B.V. andTERENA by a team that is led by Don Stikvoort (S-CURE B.V.) and Klaus-Peter Kossakowski(PRESECURE Consulting GmbH). Under this contract,TERENA pays S-CURE monthlyamounts for the service provision; these amounts are re-charged by TERENA to the accreditedCSIRTs.

A Trusted Introducer Review Board reviews the operations of the Trusted Introducer and addressesall special issues that might arise from its operation.The Review Board consists of three personselected by the accredited CSIRTs as their representatives, Gorazd Božič (ex officio as chairman ofTF-CSIRT) and Karel Vietsch (TERENA representative). During 2004, the elected members wereJimmy Arvidsson (Telia, until 23 September), Jacques Schuurman (SURFnet), Marco Thorbrügge(DFN-CERT) and Wilfried Wöber (ACOnet, from 23 September).The Review Board met threetimes during the year, back-to-back with the meetings of TF-CSIRT.

Regular meetings of representatives of accredited CSIRTs are useful to build out the collaborationbetween them, and to lay the foundation for new components of the Trusted Introducer service.


p.49

[TERENA / annual report 2004] / SERVICES

Following requests for more frequent meetings of the accredited CSIRTs, the Trusted Introducer team organised threesuch meetings during the year. Like the meetings of the Review Board, those meetings were also organised back-to-back with the TF-CSIRT meetings.

One of the results of the meetings of representatives of accredited CSIRTs was the decision to expand the set ofservice components provided by the Trusted Introducer. From 1 January 2005, three new components have beenadded to the service portfolio:> statistics gathering and dissemination> re-encrypting secure mail gateway> out-of-band alerting.

Specifications of the new service components and the corresponding tariffs were described in a revised contractbetween TERENA and S-CURE for the continuation of the service from 1 September 2004. In October,TERENA, S-CURE and PRESECURE signed a three-party agreement, in which PRESECURE commits totaking over the provision of the Trusted Introducer service in case S-CURE would be unable to continue theservice provision.This contingency plan for emergencies offers an additional guarantee for the continuity of aservice that is seen as very valuable by the European CSIRT community.

www.trusted-introducer.nl


p.50

[TERENA / annual report 2004] / MEMBERSHIPS AND LIAISONS

{-Memberships and Liaisons

{-ENPG and European Commission

The European Networking Policy Group (ENPG) is the forum where civil servants from Europeancountries meet periodically to exchange information and co-ordinate their policies for (thefunding of) research networking.TERENA has the status of a permanent observer in the ENPG.On the basis of a contract with the JISC,TERENA also hosts the ENPG website and mailing lists.

The ENPG is established on the basis of a memorandum of understanding between Ministers andother national authorities that have responsibility for government funding and policy for researchand education networking. In its current form the memorandum covers the period from 2002until the end of 2007. By the end of 2004, the document had been signed by or on behalf of thegovernments of Bulgaria, Denmark, Finland, Greece, Hungary, Ireland, the Netherlands, Poland,Slovenia, Spain, Sweden, Switzerland and the United Kingdom.

The ENPG had three meetings in 2004, in Brussels on 5-6 February, in Budapest on 17-18 June,and in Edinburgh on 28-29 October. In every meeting, a representative of DANTE presented therecent developments of GÉANT and the preparations for the GN2 project, and a representativefrom the European Commission gave an update on the latest developments regarding Europeanpolicies and funding plans in the area of research networking and Grids.

The meeting in Brussels was hosted by the European Commission and featured presentations fromthe Commission on eEurope policies towards the deployment of broadband infrastructure and onthe e-Infrastructure Reflection Group. Karel Vietsch gave an update on TERENA activities. Othertopics discussed by the meeting included international connectivity, IPv6 and the preparations forthe 7th Framework Programme.

The Budapest meeting heard presentations about research networking in Hungary and about theHigh-Performance Computing Programme in that country.The ENPG discussed contacts withInternet2 and with the National Science Foundation in the United States.

The October meeting was held in Edinburgh at the National e-Science Centre.There werepresentations about the e-Science Programme in the United Kingdom and about the CotswoldsInternational Middleware Meeting that had been organised by the JISC on 14-15 October.

The members of the TERENA Executive Committee and the TERENA Secretariat staff maintaincontacts with several directorates of the European Commission services on a number of policyissues, in particular, in relation to the Framework Programmes. During the year, the contacts withthe Unit for Research Infrastructure of the Information Society Directorate-General haveintensified even further as a consequence of the GN2 project, which has led to many more formaland informal contacts in the preparation and negotiation phase as well as after the start of theproject implementation.

www.enpg.org

http://europa.eu.int/information_society/


p.51


{-DANTE

DANTE (Delivery of Advanced Network Technology to Europe Ltd.) is a limited-liabilitycompany and a not-for-profit organisation, established in Cambridge, England.The mission ofDANTE is to plan, build and operate pan-European research networks.The company wasestablished in 1993 and has since played a pivotal role in four consecutive generations of the pan-European research backbone networks: EuropaNET,TEN-34,TEN-155 and GÉANT.

During the year, GÉANT continued to operate successfully, and as usual there were a number ofcircuit upgrades to increase the overall capacity of the network. However, the focus of attentionwas very much on the preparations of its successor, GÉANT2. Before the start of the year it hadalready become clear that the proposal for the GN2 project, which would bring funding forGÉANT2 as well as for a number of Joint Research Activities and Networking Activities, had beenfavourably received by the evaluators. Nevertheless, the actual start of the GN2 project only tookplace on 1 September.The design of the network and the tendering process for the procurement ofits components had already started, as the rollout of GÉANT2 is planned to start in the summer of2005. It will deploy a hybrid IP-optical network architecture that seamlessly combines a switchedand a routed infrastructure by using the most appropriate technologies.

The collaboration between the two sister organisations TERENA and DANTE has remained veryintensive throughout the year.As each organisation is responsible for some of the various activitiesin the GN2 project, they have been working closely together to finalise the details of the project’swork description and the project management methods.This work will be continued, amongothers, in the GN2 Executive Committee, where TERENA and DANTE are both represented asnon-voting members together with a number of elected representatives of national research andeducation network organisations.

DANTE was also a partner in the 6NET, 6LINK and SEEREN projects, which are reported onelsewhere in this Annual Report. In addition, DANTE is the leader of three important projectsthat aim to promote network connectivity for research in other world regions:ALICE,EUMEDCONNECT and TEIN2.

The ALICE project was set up in 2003 to develop a research network infrastructure within theLatin American region and towards Europe. In a short time,ALICE has created the RedCLARAnetwork, linking together researchers in the countries of Latin America for the first time, and hasimplemented the link to GÉANT.A milestone was the official ALICE launch event forRedCLARA, which took place on 23 November in Rio de Janeiro.

EUMEDCONNECT is developing a network that will connect the national research andeducation networks of the Mediterranean countries to each other for the first time, and will alsogive them access to GÉANT. Connections from GÉANT to Cyprus, Malta, Israel and Turkey hadalready been realised earlier, but important milestones were reached during the year when Algeria(via Spain) and Morocco and Tunisia (via Italy) were connected as well. Connections to Egypt,Jordan and Syria were still in the planning phase at the end of the year.

TEIN2 is a new project which will connect up to ten national research networks in Asia to eachother, and provide direct connectivity to GÉANT2. European partners in the project are


p.52


DANTE, Renater, SURFnet and UKERNA, and the Asian partners are the relevant organisationsin Brunei, China, Indonesia, Japan, Korea, Malaysia, the Philippines, Singapore,Thailand andVietnam.The network is expected to be operational in late 2005.

www.dante.net

{-Internet2

Internet2 is a consortium led by 207 universities in the United States working in partnership withindustry and government to develop and deploy advanced network applications and technologies.The primary goals of Internet2 are to create a leading-edge network capability for the UnitedStates research community, to enable revolutionary Internet applications and to ensure the rapidtransfer of new network services and applications to the broader Internet community.

There is close collaboration between TERENA and Internet2. Internet2 staff contributed to theTERENA Networking Conference 2004 in Rhodes and to a number of technical meetingsorganised by TERENA throughout the year. Conversely,TERENA Secretariat staff membersparticipated in the Internet2 Spring Member Meeting in Arlington,Virginia on 19-21 April, and inthe Fall Member Meeting in Austin,Texas on 27-30 September.At these conferences,ValentinoCavalli and Kevin Meynell presented updates on specific TERENA activities.At the SpringMeeting,TERENA was also present in the exhibition area.

www.internet2.edu

{-CCIRN

The CCIRN (Co-ordinating Committee for Intercontinental Research Networking) is the singleglobal forum where representatives of research networking organisations worldwide meet on amultilateral basis.The European delegation to the annual CCIRN meetings is designated by theTERENA Executive Committee.

This year’s CCIRN meeting took place in Cairns,Australia on 3 July.The event attracted morepublicity than usual, as it was the first time in the 17-year history of the CCIRN that a meetingtook place in Australia.The meeting was chaired by the Asia-Pacific CCIRN co-chair, Shigeki Goto.The European deputation consisted of John Boland (HEAnet), David Foster (CERN),Tomaz Kalinand David West (DANTE), Peter Kirstein (University College London), Kees Neggers (SURFnet)and Karel Vietsch (TERENA).The meeting programme consisted of the exchange of a very largeamount of information in almost 30 presentations, covering optical networks, performancemeasurements, Grids, outreach programmes, IPv6 and other topics.

The CCIRN meeting was combined in Cairns with the 18th APAN Meetings on 2-7 July and theQUESTnet 2004 conference on 4-7 July. Karel Vietsch gave a one-hour keynote presentation in aplenary session of the QUESTnet conference about the findings and recommendations of theSERENATE studies.

www.ccirn.org


p.53


{-GLIF

In September 2001,TERENA hosted an international lambda workshop at its office inAmsterdam, bringing together organisations that were about to provide network services based onwavelengths and light paths. Similar workshops took place at the iGrid 2002 event in Amsterdamone year later, and at a NORDUnet conference in Reykjavik in September 2003.At this thirdmeeting, the name Global Lambda Integrated Facility (GLIF) was devised, to make it clear thatthe participants will make their lambdas available to users as a single, integrated worldwide facility.

The GLIF is a collaboration of institutions, organisations, consortia and national research andeducation networking organisations, which voluntarily share optical networking resources andexpertise for the advancement of scientific collaboration.The mission of the GLIF is to create andsustain a global facility that supports leading-edge capabilities based on new and emergingtechnologies and paradigms related to advanced optical networking.These capabilities will enablehigh-performance applications and services, including the timely transfer of massive amounts ofdata, distributed computing, data analysis, collaboration and visualisation, and control of remoteinstruments.The GLIF provides leadership in advanced technologies and pre-production services.Once such services are available from consortia of national research and education networks, theGLIF will refocus on new emerging paradigms to support its communities.

The fourth workshop took place in Nottingham on 2-3 September 2004. It was a lively and well-attended event, with some 60 attendees. It was decided to give the organisation of the GLIF amore stable basis, and TERENA was invited to provide a secretariat for the GLIF.

www.glif.is

{-Internet Society

The Internet Society is a professional membership organisation with more than 100 organisationaland 20,000 individual members in more than 180 countries. It aims to provide leadership inaddressing issues that confront the future of the Internet, and is the organisational home forgroups responsible for Internet infrastructure standards, including the Internet Engineering TaskForce (IETF) and the Internet Architecture Board (IAB).

Besides the role as a home for the IETF and the IAB, there are two other pillars of the Society:organising training in Internet technologies, especially for developing countries, and participatingin worldwide debates about critical issues in Internet politics, including censorship and freedomof expression, privacy protection, Internet governance, intellectual property and societal issues.Especially this third pillar increasingly determines the Society’s external image. In 2002, theInternet Society was awarded a contract to manage the .org top-level domain.This has developedinto a very successful activity, creating a solid financial basis for the organisation.

TERENA was one of the original charter members of the Internet Society. It remains asupportive member of the organisation, especially because of the Society’s role for the IETF andthe IAB, which TERENA considers to be the reason for existence of the Internet Society.

www.isoc.org


p.54

[TERENA / annual report 2004] / APPENDIX A

> Financial Report 2004

The financial statements consisting of balance sheet, statement of income and expenditure, andsummary cash-flow statement for TERENA for the year 2004 are presented below.

The information in these pages is extracted from the ‘TERENA Financial Report 2004’.Thisreport was audited by Horlings, Brouwer & Horlings, Registeraccountants te Amsterdam.They have statedthat in their opinion the financial statements give a true and fair view of the financial position ofthe association as of 31 December 2004 and of the result for the year ended in accordance withaccounting principles generally accepted in the Netherlands.

Balance sheet as at 31 December 2004 (in €)

31-12-2004 31-12-2003

Fixed assets 4,318 15,002

Current assets

Accounts receivable 410,997 643,111

Cash in banks and on hand 2,413,725 1,366,275

2,824,722 2,009,386

Current Liabilities -1,789,470 -1,198 ,433

NET CURRENT ASSETS 1,035,252 810,953

Long-term liabilities / Provisions -12,000 -46,067

NET ASSETS 1,027,570 779,888

Financed by:

RETAINED EARNINGS 1,027,570 779,888

>


p.55


Statement of Income and Expenditure 2004(in €)

budget

2004 2004 2003

INCOME

Contributions 946,000 945,875 949,400

Projects, workshops and conferences 608,000 886,417 631,897

Other income 14,000 56,277 27,104

TOTAL INCOME 1,568,000 1,888,569 1,608,401

DIRECT EXPENDITURE

Projects, workshops and conferences -689,000 -937,309 -979,620

Technical programme -110,000 -48,548 -84,992

-799,000 -985,857 - 1,064,612

INCOME LESS DIRECT EXPENDITURE 769,000 902,712 543,789

INDIRECT EXPENDITURE

Personnel costs -487,000 -256,632 -279,103

Other administrative costs -404,000 -432,320 -372,169

-891,000 -688,952 -651,272

OPERATING RESULT -122,000 213,760 -107,483

Interest received 40,000 37,640 39,953

Financial expenses -16,000 -2,998 -4,082

Bad debts written off -92,000 -720 -15,547

-68,000 33,922 20,324

SURPLUS OF

INCOME LESS EXPENDITURE -190,000 247,682 -87,159

>


p.56


Summary Cash Flow Statement (in €) 2004 2003

NET RESULT 247,682 -87,159

Depreciation charges 18,674 14,311

Bought tangible fixed assets -7,990 0

(Increase)/Decrease in accounts receivable 232,114 , 268

Increase/(Decrease) in current liabilities 591,037 -202,397

Increase/(Decrease) in long-term liabilities -34,067 -52,894

NET CASH FLOW 1,047,450 - 327,871

Increase/

(Decrease 2004 2003

Accounts receivable -232,114 410,997 6 43 ,111

Current liabilities 591,037 1,789,470 1,198 ,433

CASH IN BANKS AND ON HAND 1,047 ,450 2,413,725 1,366 ,275

>


p.57

[TERENA / annual report 2004] / APPENDIX B

>TERENA Membership in 2004(as at 31 December)

> National Members

ACOnet Austria Peter RastlBELNET Belgium Pierre BruyereCARNet Croatia Zvonimir StanićCYNET Cyprus Agathoclis StylianouCESNET Czech Republic Jan GruntorádUNI•C Denmark Ole KjaergaardEENet Estonia Mihkel KraavCSC Finland Leif LaaksonenRenater France Dany VandrommeDFN Germany Klaus UllmannGRNET Greece Vasilis MaglarisHUNGARNET Hungary Lajos BálintRHnet Iceland Jón Ingi EinarssonIPM Iran Siavash ShahshahaniHEAnet Ireland John BolandConsortium GARR Italy Enzo ValenteLATNET Latvia Janis KikutsLITNET Lithuania Petras ŠulcasRESTENA Luxembourg Antoine BarthelMARNET FYRoMacedonia Margita Kon-PopovskaUniversity of Malta Malta Robert SultanaSURFnet Netherlands Kees NeggersUNINETT Norway Petter KongshaugPCSS Poland Jan WęglarzFCCN Portugal Pedro VeigaANSTI/RNC Romania Dana GheorgheUniversity of Belgrade Serbia and Montenegro Zoran JovanovićSANET Slovakia Pavol HorvathARNES Slovenia Marko BonačRED.ES Spain Alberto PérezSUNET Sweden Arne SundströmSWITCH Switzerland Urs EppenbergerULAKBIM Turkey Tugrul YilmazUKERNA United Kingdom Shirley Wood

> International Members

CERN David FosterESA Stefano Zatti


p.58

> Associate Members

3Com Corporation Angelo LammeCisco Systems Grac,a CarvalhoDANTE Dai DaviesEMBL Peter StoehrFLAG Telecom Peter BolandIBM Brian CarpenterJuniper Networks Jean-Marc UzéLevel 3 Communications Geert-Jan SpeldeNORDUnet Peter VillemoesTeleglobe Yves Poppe

> Membership Fees

The annual membership fees for National Members are in seven categories, depending on thegross national income of the countries that they represent.A National Member pays the unit feemultiplied by the number of units linked to its category. International Members pay the unit feeand Associate Members pay half the unit fee.

The unit fee for 2004 was set at 4,700 euro.

Category Units Country

1 1 Cyprus, Estonia, Iceland, Latvia, Lithuania, FYRoMacedonia, Malta2 2 Croatia, Luxembourg, Slovakia, Slovenia3 4 Czech Republic, Hungary, Ireland, Romania4 6 Denmark, Finland, Greece, Iran, Norway, Poland, Portugal,Turkey5 8 Austria, Belgium, Netherlands, Sweden, Switzerland6 12 Spain7 16 France, Germany, Italy, United Kingdom

[TERENA / annual report 2004] / APPENDIX B


p.59

[TERENA / annual report 2003] / APPENDIX C

> TERENA Staff in 2004

> Secretary General Karel Vietsch

> Chief Technical Officer John Dyer> Deputy Chief Technical Officer Valentino Cavalli > Project Development Officers Kevin Meynell

Licia FlorioBaiba Kaškina

> Senior IT Support Officers Alex de JoodeDick Visser

> Webmaster Jeroen Houben

> Chief Administrative Officer Bert van Pinxteren> Financial Administrator Wilma Overdevest> External Relations Officer Joanne Barnett (from 1 March)> PR and Conference Officer Carol de Groot-Crone> Secretary Roos Stouthamer (until 31 May)

Aukje Bakker (from 13 September)


> List of Acronyms

> 3GPP Standard defined by the 3rd Generation Partnership Project6LINK IPv6 Projects Linkage Cluster6NET Large-Scale International IPv6 Test bed6POWER IPv6, QoS & Power Line IntegrationAA-RR Authentication and Authorisation Requester-ResponderALICE América Latina Interconectada Con EuropaAPAN Asia-Pacific Advanced NetworkAPCERT Asia Pacific Computer Emergency Response TeamAPI Application Programming InterfaceBSD Berkeley Software DistributionCA Certification AuthorityCAMP Campus Architectural Middleware PlanningCAP Content Access PortalCCIRN Co-ordinating Committee for Intercontinental Research NetworkingCDN Content Delivery NetworkCEENet Central and Eastern European Networking AssociationCLARA Cooperación Latinoamericana de Redes AvanzadasCOM-REN Compendium of Research & Education NetworksCORE Conference Organisation ResourceCP Certificate PolicyCPS Certificate Practice StatementCPU Central Processing UnitCSIC Consejo Superior de Investigaciones CientíficasCSIRT Computer Security Incident Response TeamDANTE Delivery of Advanced Network Technology to EuropeDEISA Distributed European Infrastructure for Supercomputing Applicationsdhc Dynamic Host ConfigurationDHCPv6 Dynamic Host Configuration Protocol for IPv6DNS Domain Name SystemDNSSEC DNS Security ExtensionsE2E piPEs End-to-End Performance Initiative Performance Environment SystemeCSIRT.net European CSIRT networkEduRoam Education RoamingEGEE Enabling Grids for E-science in Europe; later: Enabling Grids for E-sciencEEISPP European Information Security Promotion ProgrammeENISA European Network and Information Security AgencyENPG European Networking Policy GroupEU European UnionEUGridPMA European Policy Management Authority for Grid Authentication in e-Science

p.60

[TERENA / annual report 2004] / APPENDIX D


p.61


Euro6IX European IPv6 Internet Exchanges BackboneFIRST Forum of Incident Response and Security TeamsFLUTE File Delivery over Unidirectional TransportFORTH Foundation for Research and Technology -HellasGb/s Gigabits per secondGE Gigabit EthernetGÉANT Gigabit European Academic Network TechnologyGILDA Grid INFN Laboratory for Dissemination ActivitiesGLIF Global Lambda Integrated FacilityGN2 Multi-Gigabit European Academic NetworkGNRT Guide to Network Resource ToolsIAB Internet Architecture Board IETF Internet Engineering Task ForceINFN Istituto Nazionale di Fisica NucleareIP Internet ProtocolIPFIX IP Flow Information ExportIPSec IP SecurityIPv4 Internet Protocol version 4IPv6 Internet Protocol version 6IRT Incident Response TeamISDN Integrated Services Digital NetworkIT Information TechnologyIXP Internet Exchange ProcessorJANET Joint Academic NetworkJISC Joint Information Systems CommitteeLAN Local Area NetworkLDAP Lightweight Directory Access ProtocolLHC Large Hadron ColliderLOBSTER Large Scale Monitoring of Broadband Internet InfrastructureM6Bone IPv6 Multicast NetworkMACE Middleware Architecture Committee for EducationMAPI Monitoring Application Programming InterfaceMb/s Megabits per secondMIPv6 Mobile IPv6MIT Massachusetts Institute of TechnologyMOME Monitoring and Measurement ClusterMPLS Multi Protocol Label Switchingmulti6 Site Multihoming in IPv6NATO North Atlantic Treaty Organisation


p.62


NIC Network Interface CardNREN National Research and Education NetworkOC-48 Optical Carrier level 48OKI Open Knowledge InitiativePAPI Point of Access to Providers of InformationPBX Private Branch ExchangePC Personal ComputerPC Policy CommitteePCI Peripheral Component InterconnectPDA Personal Digital Assistantpdf Portable Document FormatPGP Pretty Good PrivacyPKI Public Key InfrastructurePSTN Public Switched Telephone NetworkQoS Quality of ServiceQUESTnet Queensland Education, Science & Technology NetworkR&E Research & EducationRADIUS Remote Authentication Dial-in User ServiceRFC Request for CommentsRIPE Réseaux IP EuropéensRSS Really Simple SyndicationRTIR Request Tracker for Incident ResponseSCAMPI A Scaleable Monitoring Platform for the InternetSDR Service Detail RecordSEE-GRID South Eastern European Grid-Enabled eInfrastructure DevelopmentSEEREN South-Eastern European Research & Education NetworkingSERENATE Study into European Research and Education Networking As Targeted by

eEuropeSIP Session Initiation ProtocolSNMP Simple Network Management ProtocolSPOCP Simple Policy Control ProjectSQL Structured Query LanguageTACAR TERENA Academic CA RepositoryTCP Transmission Control Protocol TEIN2 Trans-Eurasia Information NetworkTEN-155 Trans-European Network Interconnect at 155 Mb/sTEN-34 Trans-European Network Interconnect at 34 Mb/sTERENA Trans-European Research and Education Networking AssociationTF-AACE Task Force on Authentication and Authorisation Co-ordination for Europe


p.63


TF-CSIRT Task Force on Collaboration of Security Incident Response TeamsTF-EMC2 Task Force on European Middleware Co-ordination and CollaborationTF-Mobility Task Force on MobilityTF-Netcast Task Force on Academic NetcastingTF-NGN Task Force on Next-Generation NetworkingTF-PR Task Force on Public Relations and Information DisseminationTF-VVC Task Force on Voice,Video and CollaborationTRANSITS Training of Network Security Incident Teams StaffUK6X United Kingdom IPv6 Internet ExchangeUNESCO United Nations Educational, Scientific and Cultural OrganisationUNIRAS Unified Incident Reporting and Alert Schemev6ops IPv6 OperationsVPLS Virtual Private LAN ServiceVPN Virtual Private NetworkWLAN Wireless Local Area Network


p.64

[TERENA / annual report 2004] /

> TERENA Secretariat Staff (December 2004). From left to right:Back row: Wilma Overdevest, Bert van Pinxteren, Dick Visser, Kevin Meynell, Alex de JoodeMiddle row: Valentino Cavalli, Jeroen Houben, Karel Vietsch, John DyerFront row: Aukje Bakker, Licia Florio, Carol de Groot, Joanne Barnett, Baiba Kaskina

^


Documents

def def def TERENA AR 04