Embed Size (px)
Citation preview
IT Update
May 26, 2015
UCI Office of Information Technology 2
Topics
} Infrastructure & Core Services } Information Security } Educational Technology } Research Computing } Enterprise Application Initiatives } OIT Organizational
ESNet
CENIC HPR
Internet2
INTERNET
CalREN
Commercial Networks
10Gbps
JYY 217/2015
Two Redundant Border Routers
and Border Firewalls
Bldg B
10Gbps Fault-Tolerant Campus Backbone
Bldg A
Various small bldgs
Floor
10Gbps
1Gbps
UCInet
1Gbps
Floor
100Mbps
3
1,640 network switches tie 183 buildings 38,992 active wired connections
1,356 wireless access points
10Gbps and 6x1Gbps commodity Internet links 10Gbps and 1Gbps to
CENIC High Performance Research/Ed network
4
Infrastructure & Core Services
5 year UCInet upgrade project • Building (wired and wireless), backbone, external connectivity • Replacing equipment no longer supported by vendor, adding capacity,
improving performance & resilience } 2014/2015:
• Additional 10Gb external link; redundant fiber link via UCLA • Additional 10Gb building connections in core routers • Router upgrades in 4 buildings (Hewitt, Sprague, Croul, NatSci 1) • Replaced aging wireless core infrastructure, 300 access points
} Next: • Upgrade core routers, building switches • Upgrade data center connectivity, FacNet backbone • Wireless enhancements to subset of campus locations
UCI Office of Information Technology
5
Infrastructure & Core Services
} Telephone System Upgrade: • ~8,200 phones migrated to the new system • ~800 phones remaining; target completion
by end of summer 2015 • New voice mail system coming as well
} Cellular service enhancement efforts are ongoing } Email and Calendaring
• Student accounts provided through Google Apps • Half of UCI exchange accounts moved to Office 365 • Long-term plans for IMAP (Thunderbird) service TBD
} Continued data center enhancements, cloud service pilots } Working to enhance “Disaster Recovery” capabilities
UCI Office of Information Technology
6
Information Security } Escalating threats & challenges:
• First week in May: 3,349 hosts and 513,458,744 probes blocked • 2.2m spam emails rejected daily during 2014 • Continuing high-impact breaches on the Internet
} Ongoing activities • Furthering risk assessment via Security Risk Assessment Questionnaire
(SRAQ) tool • 8 GB/day of logs sent to Splunk, 70 internal firewalls maintained • 75 vulnerability scans completed last year • Annual “restricted data” inventory ongoing (additional outreach needed)
} Access management initiatives • “Duo” multi-factor authentication: response to password compromise (365
users, 445 servers/applications) • Centralized Authorization Service (KSAMS) for more consistent access
management (currently 500 campus roles) } Security permeates the role of the grand majority of OIT Staff
UCI Office of Information Technology
7
Daily E-mail Blocked / Accepted - 2014
UCI Office of Information Technology
8
Educational Technology eTech Initiative (etech.uci.edu)
} Educational Technology Initiative Advisory Committee
• Faculty/student/staff committee; reviews needs & priorities
} Funding from undergraduate lecture course fee providing services and facilities in support of the courses for which the fees are paid. For example: • Classroom and computing lab technology
• Course Management System (EEE and piloting Canvas) • Educational technology support staff
} Bulk of funding goes to maintaining and incrementally improving broad-based, established services and facilities.
UCI Office of Information Technology
9
Educational Technology Classroom Technology Refresh
} Over first 3 years, technology in 87 classrooms has been refreshed: • New computers, blu-ray players, digital and analog laptop cables,
control and switching gear, microphones • Rooms re-wired for stereo, new screens and projectors, more
whiteboards, additional document cameras and other equipment • Power outlets for student use added in ELH 100, HIB 100, SSLH 100,
SSPA 1100, along with non-classroom study areas • Additional wireless coverag
} 90 outdated computers replaced in Gateway Study Center } 24 more classrooms planned for summer 2015
• BS3 1200, 12 rooms in DBH, EH 1200, HH 178, 3 rooms in IAB, 2 rooms in PCB, SSH 100, 3 rooms in SST
• HH 178 and SSH 100 present challenges due to stage areas
UCI Office of Information Technology
10
Educational Technology
} Canvas Pilot Project • Pilot commercial learning management system, Instructure Canvas • Augmenting, not replacing, EEE • Assessing if Canvas is a good fit (including third party tool integration,
additional learning management tools & features) • One year pilot - Spring 2015 / Summer 2015 – invited instructor participants
- Fall 2015 / Winter 2016 – open to all instructors opting-in undergraduate courses - Spring 2016 – assess pilot outcome (including feedback surveys, focus groups)
• Details and pilot project updates: https://sites.uci.edu/canvaspilot/ • Instructure Canvas information: http://www.instructure.com/
UCI Office of Information Technology
11
Research Computing
} “HPC” condo-model shared compute cluster: • High-performance commodity computers interconnected via high-speed
Infiniband network; over 6,000 CPU cores • Serves 34 research groups in 5 UCI schools • Proposed business plan to fund shared HPC hardware and software
costs and required additional support staff
} Evaluating UCLA service for large-scale, archival storage } Research IT mailing list and website to get word out } Long-term “Research Cyber-Infrastructure” Vision: • UC-wide summit on March 23rd sponsored by VCRs, CIOs, Librarians • Discussions about UCI’s RCI vision and strategy
UCI Office of Information Technology
12
Research Computing
UCI Lightpath: High-speed “Science DMZ” • Dedicated research network funded by $500k NSF-CIE Grant • Support “Big Data” for UCI Data-Intensive Research Groups • 10Gbps dedicated research network and external link • Bypasses firewall to improve performance (access controlled)
} What’s connected so far: • Campus HPC and Physical Sciences GreenPlanet clusters • Elghobashi lab (MAE), Pritchard Lab (ESS), Sandmeyer Gene
Sequencers to ICS servers; ~300 researchers
} Researchers reporting significant performance gains
UCI Office of Information Technology
ESNet
EGW 2nd fl
UCINet Backbone
CENIC HPR
6x1Gbps 1Gbps
Border Firewalls UCI Border
Routers UCI LigthPath CORE Router
UCI LigthPath Access Switch
Rowland Hall
New 10Gbps
2x10Gbps
2x10Gbps
UCI Medical Ctr Network
UCI Resnet
2x10Gbps
UCI LightPath perfSONAR
perfSONAR
perfSONAR
OITDC
perfSONAR
Backup paths
Internet2
NLR
INTERNET
Campus General Purpose Network
perfSONAR
perfSONAR
CalREN
CalREN- California Research & Education Network CalREN-HPR- CalREN High Performance Research Network
Reines Hall
Croul Hall
McGaugh Hall
Greenplanet
10Gbps 1Gbps
HPC
Sprague Hall
ICS
In progress
Current Status Of UCI Lightpath
GNO Sequencer
GNO Sequencers
DTN
10Gbps
UCI Office of Information Technology 14
Enterprise Application Initiatives
} Large-scale application software suites required to conduct university business
} Three 30+ year old legacy systems require replacement: • HR/Payroll, Financial Systems, Student Information Systems (SIS) • Current systems lack functionality, do not support evolving campus needs,
are not sustainable • UCI Kuali Financial Systems in production! Focus on reporting, priority
enhancements, building multi-year development roadmap • UC Path and UCI SIS projects in progress
} Highly complex, challenging projects with widespread impact • Multiple projects with overlapping implementation schedules • Minimal “wiggle-room” in staff workload; backfill staffing essential where
dedicated project staff are required • Business system projects led by functional units with IT as close partner
15
} Current Systems: lack functionality; not integrated; based on antiquated technology that cannot be maintained
} Replacement project scope: Admissions, Financial Aid, Registrar, Summer Session, Graduate Division and Financial Services (Student Billing)
} Multi-year information gathering, RFP, and comprehensive evaluation process resulted in selection of Ellucian Banner Student as our new SIS
} Ellucian is our software, implementation and long-term operation partner
} Joining a large community that includes UC Davis, UC Riverside, UC Merced, Purdue, Dartmouth, Rice, University of Illinois, Texas A&M, University of Georgia, Georgia Tech, and University of South Carolina
UCI Office of Information Technology
16
} Project Leadership and Governance: • Co-Owners: Brent Yunek and Dana Roode • Project Director: Steve Noh • Executive Steering Committee, Advisory Committee
} Tentative Project Schedule: • 2015: fit-gap/design/configuration/development • 2016: tentative Admissions go-live fall 2016 • 2017: tentative Financial Aid go-live early 2017, registration/
records go-live spring 2017, billing summer 2017 • 2018: stabilization, required enhancements
} Moratorium on changes to current systems } Project website: sisproject.uci.edu
UCI Office of Information Technology
17
Enterprise Application Initiatives
} Kuali Coeus Research Administration • KC Negotiations deployed for improved process transparency • KC/Cayuse 424 integration deployed for online proposal submission to
sponsors • KC Conflict of Interest module development is well along
} Student Analytics and Data Warehouse • EAB Student Success Collaborative populated with UCI data; tools are in
pilot by three units • Student Data Warehouse populated with third week “census” snapshots;
campus roll-out anticipated by summer • Data Warehouse will need to be interfaced with new SIS • Planning continues for an over-arching Enterprise Data Warehouse (linking
student, financial, payroll, space, other campus data)
UCI Office of Information Technology
18
OIT Budget Input
} Provided status report on each of 5 OIT strategic goals: 1. Build Out and Maintain Scalable IT Infrastructure and Services 2. Support academic goals through educational and research computing
initiatives and services. 3. Partner with functional units to implement enterprise and unit
applications 4. Evolve as an enterprise IT organization through continued
improvement 5. Foster technology innovation and collaboration within the campus and
externally. } Additional input: • Funding considerations (central funding vs recharge, reallocation of
internal funds, shared service efforts) • Build Out and Maintain Scalable IT Infrastructure and Services • Support academic goals through educational and research computing
initiatives and services.
UCI Office of Information Technology
19
OIT Realignment
UCI Office of Information Technology
Scope: Top level of the organization Objectives:
• Create divisions that simplify/streamline client relationship management • Create divisions that optimize the management of IT assets and resources • Create accountability structures that are clearly defined and delineated between
IT specific domains. Outcomes:
• Enterprise Infrastructure (Director - Brian Buckler) • Enterprise Applications (Director - Carmen Roode) • Central Services (Director - Marina Arseniev) • Student and Academic Support (Director - Shohreh Bozorgmehri) • Client Services (Director - Cheryl Watt)
20
OIT Realignment
UCI Office of Information Technology
IT Service Management Scope: All campus service requests, project requests, internal processes, funding and cost management, departmental performance analytics. Objectives:
• Unify all of OIT on a single work management platform (ServiceNow). • Work automation that allows OIT to scale out services with less incremental
effort and reduces administration done manually today. • Build internal controls such as electronic signoffs & approvals, change impact
analysis, electronic work request history tracking & logging. • Define standard organizational performance metrics across all services/teams.
Outcomes: • Enhanced internal/external communications, resulting in optimal service delivery. • Better decision making through real-time data on resources, workload & funding. • Create a single source of truth for all OIT work being performed. • Continual improvement initiatives through measurements and goals.
Questions / Comments ?
21 UCI Office of Information Technology
