Experiences with the ProtoGENI Control Framework Guilherme Fernandes

Post on 06-Jan-2018

223 views 0 download

description

AA How to handle the case of automated services (i.e. there’s no user certificate)? If other services only accept authenticated users, service-to-service communication also needs certificates If certificates are created, they need to be pushed.. how? In our case, services should be slice ‘restrained’..

Transcript of Experiences with the ProtoGENI Control Framework Guilherme Fernandes

Experiences with the ProtoGENI Control Framework

Guilherme Fernandesfernande@cis.udel.edu

RSpec / “Reflection”• Using extensions is a good way to

annotate nodes with experiment/system specific information

• How to access this information from the nodes?• Only owner has access to manifest

• Simpler yet, how can a node ask “which slice am I a part of?”, or “who is the owner of this slice?”

AA• How to handle the case of automated

services (i.e. there’s no user certificate)?• If other services only accept authenticated

users, service-to-service communication also needs certificates

• If certificates are created, they need to be pushed.. how?

• In our case, services should be slice ‘restrained’..

• urn:…+emulab.net+services+lamp@lampdemo

Callbacks?• With global services that work with all

slices, it would be good to have callbacks for events on the slice/sliver

Dedicated Dev. Environment• 7 VirtualBox VMs: CH, boss, ops, 4 nodes

• Nodes really only limited by memory/disk/cpu• BUT Emulab busy waits (100% cpu)

• Virtual switching by Open vSwitch (Linux)• Kind of hacked right now because of issues like

Emulab only accepting port numbers (OVS uses UUIDs/port names) or OVS not having a VLAN table to store names

• Some issues with Vbox PXE booting and kernel drivers on MFS images, but isn’t too hard to setup