Bandwidth on Demand update

Hans Trompert, Peter Hinrich, Gerben van Malenstein

Oslo, Norway – September 17, 2012

EVN-NREN Meeting

One or more network services on a single port

• SURFnet6: Single Service Port (SSP)- One network service, one port- Currently used for SURFinternet & SURF-lightpaths

• SURFnet7: Multi Service Port (MSP)- Multiple network services on a single port- Efficient use of network interfaces

2

Multiple Service Port

Connectedinstitution

No extra equipment

No Patching

No Invoice

SURFnet7

Accessible

3

Multiple Service Port

Connectedinstitution

SURFnet7

4

A

5 Gbit/s

B

2 Gbit/sC 1 Gbit/s

5

BoD in SURFnet7

NOC engineer ApplicationUser

NSINSI

Inter Domain

GUI APIBoD

SURFnet7 NMS

SURFconext

Identity Provider

Group Provider

GUI API

6

Teams and Ports

NOC Engineers

BoD Admins

Users

NOC Engineer Team

Institute A Admin Team

User Team 1

Physical Ports Institute A

BoD Unallocated Physical Ports

defines

Institute B Admin Team

User Team 2

Physical Ports Institute B

Virtual Ports Team 1

Virtual Ports Team 2

7

Virtual Port Request

8

xx

NMS

VLAN50

VLAN1062

Ph

ysic

al

Port B

W

Port X

Port Y

Fixed IP services

Fixed LP services

VLA

N 1

1

Port X

Virtual PortTeam 1

Max

BW

Port Y

Port X

NOC engineer marks port for dynamic

use

Physical Ports

Port Y

NOC engineer asigns port to institute A

BoDUnallocated

PhysicalPorts

Availa

ble

BW

BoD

Port Y

Availa

ble

BW

BoD

Port ID + Signaling Type

+ Available Bandwidth is

learned through NBI

Ph

ysic

al

Port B

W

Available BW BoD = total BW physical port – BW existing

static services

Availa

ble

BW

BoD

BW + VLAN set by BoD Admin A

VLAN33

Institu

te A

Institu

te B

Availa

ble

BW

BoD

Fixed IP services

Bandwidth Allocation

NOC engineer asigns port to institute B

Port X

Port Y

Port X

VLA

N 3

Port Y

Max

BW

BW + VLAN set by BoD Admin B

VLA

N 2

3

Port X

Virtual PortTeam 2

Max

BW

VLA

N

1

Port Y

Max

BW

10

BoD Administrators

• Authentication through SURFconext– Federated institutes use own IdP– Non-Federated institutes use SURFguest (https://www.surfguest.nl/)

• Authorization through SURFconext– Rights are based on group (https://teams.surfconext.nl/) membership– All BoD administrators from the same institute are member of the same group– The group belonging to the institute is administered in BoD– The administrators of a group are reachable through one verified email address

• In BoD an administrator can:– View the physical ports of his institute– Accept or deny new virtual port requsts from users– View, edit and remove the virtual ports that are mapped on his physical ports– View the teams that are using his ports– View and cancel the reservations that were made on his ports

• Note: As an administrator you are also automatically an user in BoD

11

BoD Users

• Authentication through SURFconext– Federated through the IdP of its home institute– Or non-Federated access using SURFguest (https://www.surfguest.nl/)

• Authorization through SURFconext– Rights are based on group (https://teams.surfconext.nl/) membership– Users can be invited to join a group by the group administrator

• In BoD an user can:– View the teams he is a member of– Request new virtual port from a BoD providing institute– View and the virtual ports belonging to his team(s)– Create a reservation between two virtual ports– View current, future and past reservations– Manipulate current and future reservations

• Currently only cancel reservation• In the future also modify reservation (extend end time, modify bandwidth)

12

BoD API (for advanced users)

• API based on the Open Grid Forum Network Service Interface– In the SURFnet6 OpenDRAC interface:

• NSI Connection Service 1.0Rio (Automated GOLE Oct 2011)• NSI Connection Service 1.0SC (in production since 2Q2012)

– In the SURFnet7 BoD interface:• NSI Connection Service 1.0SC available October 2012• NSI Connection Service 2.0 expected to be available 1Q2013• NSI Topology Exchange 1.0 expected to be available 1Q2013

• SURFnet NSI Requester Client for debugging purposes– For the moment available at http://nsi-requester.herokuapp.com/

Users• NEXPReS (JIVE, ASTRON)• DAS-4/ASCI• GoNL• IBIS• SARA

BoD user groupSelected users involved in development of GUI

13SURFnet - We make innovation work

ICT departmentsSURFnet NOC

W

hans.trompert[at]surfnet.nlgerben.vanmalenstein[at]surfnet.nl

www.surfnet.nl

+31 30 2 305 305

Creative Commons “Attribution” license: http://creativecommons.org/licenses/by/3.0/