19
5775 Allentown Blvd. Suite 101 Harrisburg, PA 17112 Internet2 Technology Exchange October 17, 2017 Gwendolyn Huntoon - KINBER Kenneth Miller - Penn State Jim Stankiewicz - NJEDge.Net Barr von Oehsen - Rutgers Regional Data DMZ in Support of Distributed Applications in Pennsylvania and New Jersey

Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

  • Upload
    others

  • View
    3

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

5775AllentownBlvd.Suite101Harrisburg,PA17112

Internet2 Technology ExchangeOctober 17, 2017

GwendolynHuntoon- KINBERKennethMiller- PennStateJimStankiewicz - NJEDge.NetBarrvonOehsen - Rutgers

Regional Data DMZ in Support of Distributed Applications in Pennsylvania and New Jersey

Page 2: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

Agenda• Motivation• CampusNetwork• RegionalNetwork• CurrentStatus• NextSteps

Page 3: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

RegionalDataDMZ• High-bandwidthnetworkconnectivitybetweentheregionalnetworks,PennREN(KINBER)andNJEdge aswellasindividualorganizationslocatedinPennsylvaniaandNewJersey.

• Long-termgoalofconnectingthisregionalinfrastructuretothebroadercommunityviaregionalandnationalnetworkconnections,includingInternet2.

• InitialapplicationtoutilizethisinfrastructureistheVirtualDataCollaboratory (VDC).– NSFfundedDIBBSprojectwiththegoalofestablishingstateoftheartdata-intensivecomputingsolutions,storage,andnetworking,federatedwithaninnovativedataserviceslayer

Page 4: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

DataDMZTopologyRutgers UniversityPennsylvania State University

NJEDge

KINBER

©2017 Rutgers, The State University of New Jersey All Rights Reserved

10G 10G

10G

100G

100G

10GHill CenterPiscataway

VDC Data Hub

NJEdgePhiladelphia

VDS Data Hub

10G

10G

Halsey StNewark

RutgersCampusNetwork

PennStateCampusNetwork

200G

200G

CoreRouter

PennStateScience

DMZ

200G

VDC Data DMZ Topology

BorderRouter

10G

Broad StPhiladelphia

Campus Edge RouterPhiladelphia

PennRENMPLS

Network

NJEdgeNewark

10G

Page 5: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

VDCApplication• CIF21DIBBs:EI:VirtualDataCollaboratory:ARegional

CyberinfrastructureforCollaborativeDataIntensiveScience(NSFAward1640834)- PI:ManishParashar;Co-PI:GraceAgnew,JamesvonOehsen,

Jenni-LouiseEvans,Vasant Honavar- CollaborationbetweenRutgers,PennState,NJEdge andKINBER- LeveragesconceptsfromthePRP

• Applications– DecipheringSequenceandStructuralCorrelatesofProtein

NucleicAcidInteractions(H.Berman,RU&V.Honavar,PSU)– High-VolumeCityDataSharingandProcessingforSmart,

Resilient,andSustainableCities(J.Gong,RU;Z.Zhu,CUNY;X.Liang,UniversityofPittsburgh;M.Balduccini,DrexelUniversity)

– OceanObservatoriesInitiative(I.Rodero,RU,M.Parashar,RU)

Page 6: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

• VDCHub:Scalabledata-intensivecomputingplatform

• Dataservicestosupportresearchworkflows

• RegionalsciencedataDMZnetwork

Network Service Layer

Data Service Layercataloging, curating, querying, discovery, federation, etc

Science & Education Use Cases

Data DMZ

PA VDC Data Hub NJ VDC Data Hub

KINBER NJEDGE

National Infr. National Infr.

PA VDC Spokes: Penn State, Univ. of Pittsburgh, Drexel, etc.

NJ VDC Spokes: Rutgers University (New Brunswick, Newark, Camden), etc.

VDCArchitecture

Page 7: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

VDCDataDMZ• Supportsdataimport/exportserviceswithnecessaryqualitiesofservicestoenableefficientandtransparentaccesstodataandcomputeregardlessofascientist’slocation.

• Components– DataDMZbackboneconsistsofdirect10GEconnectionsbetweenRutgers,NJEdge andKINBER

– DataHubsconnectdirectlytotheDataDMZorthroughtheirregionalnetwork

– DataSpokesconnectthroughtheregionalnetwork

– FIONAsdeployedatHubandSpokesites

Page 8: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

VDCProjectComponents• VDCHubs– systemsites– RutgersUniversity– MainCampus– PennState– MainCampus

• VDCSpokes– collaborationsites– NewJersey– RutgersCamden,RutgersNewark– Pennsylvania– Drexel,Temple,UniversityofPittsburgh

– NewYork– CityUniversityofNewYork• DataDMZBackbone– NJEdge andPennREN(KINBER)

Page 9: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

Rutgers/NewJerseyApplications• BrainResearch• MedicalImaging• Genomics• Genetics• Bioinformatics• ObservationalAstronomy• ExperimentalPhysics• ClimateModeling• NetworkResearchCommunitiestofullyutilizeCICNet

Page 10: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

RutgersDMZ– LocalResearchPlatform

RequiresACItobeinplace– fast/low-latencynetworks,ScienceDMZs,SDN,DataTransferNodes(FIONAs),perfSONAR,XDMod,AdvancedComputing,andStorage.Buildingblockforregion,national…

Page 11: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

OneRutgersResearchPlatform• RequiresACItobeinplace– fast/low-latencynetworks,ScienceDMZs,

SDN,perfSONAR,AdvancedComputing,Storage,DataTransferNodes(DTNs),anda100Gb/sconnectiontotheoutsideworld

• ResourceswillbedistributedacrossNewBrunswick/Piscataway,Newark,andCamden

• TieredStoragesolutionthatwillincludeHIPAA/FISMAcompliance• Designedtobeatestbed toservemultipleresearchneeds(including

industry)• Elasticinthesensethatwewillgrowandshrinkintocloudresources

basedondemandandjobtype(OSG,Google,Amazon,Azure)• CouplesNSFfundednationalprojectsandcommercialcloudservices

directlyintoourenvironmentcreatingaone-stopshopfortheresearcher• DesignedtobeaPlug-N-PlayenvironmentwithdeploymentofDTNs

(FIONAS)• Asnetworkisupgraded,moreresearchgroupswillbeadded

Page 12: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

PennState/PennsylvaniaApplications• Meteorology• ClimateModeling• Bioinformatics• BiochemistryandMolecularBiology• Cryo-electronmicroscopy• Astronomy

Page 13: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

PennStateScienceDMZ

Page 14: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

Collaboration• Formednetworkinggroupaspartofthecollaboration–Mailinglistandbiweeklymeetings– NetworkengineersandprojectparticipantsfromRutgers,PennState,KINBERandNJEdge

• Activities– TechnicaldetailsforimplementingDataDMZ– Generalexchangeoftechnicalinformation,bestpractices

Page 15: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

ProjectStatus• Itishard!– Newnetworkconnections,forexample,tothespecificVDCHublocationateachcampus

– Accommodateinfrastructureupgrades• NewmachineroomatPennState• NJEdge backboneupgrade• PennRENmovetonewcolocationfacility

– Policy– whopaysforthecostsofthenewconnectionifitwasn’tincludedintheoriginalgrant

– Identifyinginitialtestingplatforms

Page 16: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

Observations• Baselinenetworktests– ExistingperfSONARplatforms,eventuallyincludeFIONAplatformsateachsite

• NetworkconnectivitypriortoconnectingDMZ– Notoptimal– 3Internet2providers(OmniPoP,DrexelandMAGPI)

– InitialVDCHubtraceroute –• ReturnpathusedthecommoditynetworkconnectionandnottheregionalnetworkorInternet2connection

Page 17: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

InitialDataDMZperfSONARDashboard

Page 18: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

What’sNext

• LeveragethedataDMZconcepttodevelopa“regionalresearchplatform”.

• FindsciencedriversamongtheinitialhubandspokesitesassociatedwiththeVDC.

• Understandopportunitiesforexpandingtoothersites.– InNewJerseyandPennsylvaniausingtheregionalnetworksforconnectivity.

– Intheregion• Connecttothenationalfabric.

Page 19: Regional Data DMZ in Support of Distributed Applications ......Regional Data DMZ • High-bandwidth network connectivity between the regional networks, PennREN (KINBER) and NJEdgeas

10/18/17 19

Q&A- Discussion

ContactInformation:

WendyHuntoon([email protected])BarrVonOeshen ([email protected])KenMiller([email protected])JimStankiewicz)([email protected])