KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on...

31
KREONET TESTBED Service

Transcript of KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on...

Page 1: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

KREONET TESTBED Service

Page 2: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

Woojin Seok ([email protected]) Advanced KREONET Center Korea Institute of Science and Technology Information

Technology Workshop on Downscaling skills for Smart Climate Services

Contents

Use Cases Facility Upgrade

Global Federation Additional Changes

Page 3: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Pursuing scientific experimental Infrastructure to scientists and engineer § Providing the account for project(group account) § Sharing the results and replaying the experiment

¡ Communities § Network research communities § Scientific research communities § Industrial companies § Universities (for educational use)

Page 4: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ ~ 2014: Phase 1 § Providing testbed infrastructure in local § Several dozens of nodes

¡ 2015 ~ : Phase 2 § Increasing the testbed nodes to more than hundred § Multiple distributed sites in manageable

▪ A few domestic local sites ▪ A few international sites

§ Federating to global testbeds § Federating heterogamous resource (openstack)

Page 5: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

Technology Workshop on Downscaling skills for Smart Climate Services

Page 6: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Malignant code § Analyze malignant code on

testbed

¡ DDoS attack and defense test § Reenacting Slowloris attack and

Analyzing the web response time

020406080

3 4 5 7 7 7 28 39 44 46 47 58 59 62 62 152

179

180

219

249

298

334

407

433

Seco

nds

Nun of HTTP Connections

웹서버 연결 시간

Page 7: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ IPv6 § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share the experiment environment

¡ Multicast § Multicast experimentation § (but, that was not performed well due to additional installation by user to run multicast test)

¡ Network Protocols

§ Performance experimentation about TCP or other protocols

Page 8: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Steganography § Configuring various topologies using testbed and getting the performance

¡ Hadoop test § Some people, evaluating Hadoop application on testbed(performance and so on) § Some people, archiving NMS(network management system) data and run Hadoop

experiments with the data

Page 9: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Network related Class § The situation of University

▪ There is single system lab for a lot of students in engineering school ▪ Overwriting the installed users’ SW made trouble in sharing the system lab

§ Using dedicated system in shared testbed ▪ Dedicated system for student ▪ Continuing the last status of the system by storing the last status

§ Easy configuring to network related work

Page 10: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Security Company § For evaluating their security algorithm

▪ Experimentation

§ For evaluating their production

Page 11: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

Technology Workshop on Downscaling skills for Smart Climate Services

Page 12: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

DellR710 servers and cisco switches

Page 13: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

IBM(intel Xeon Processor) DellR720 Cisco6500/Cisco 2950

Page 14: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ (~phase 1) § Single site

¡ (phase 2 ~) planning § Additional 3~4 more sites § Enable wide area or distributed experiments

Page 15: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

Technology Workshop on Downscaling skills for Smart Climate Services

Page 16: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

KOREA-EU TESTBED Federation Project: SMARTFIRE KOREA(KISTI, ETRI, KAIST, SNU, GIST), France, Belgium, Greece, Spain

Page 17: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

https://flsmonitor.fed4fire.eu/

Page 18: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ will register KREONET TESTBED certificate to GENI Clearing House.

Page 19: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Physical Network Connectivity § Globally connected National Research&Education Networks(NRENs)

Chicago London Daejeon

Hong Kong

GRNET Beijing

Page 20: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Physical Network Connectivity § Globally connected National Research&Education Networks(NRENs)

¡ Federation § GENI AM API v2.0 for complying SFA 2.0

Page 21: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ GENI AM API v2 § GetVersion() § ListResources() § CreateSliver() § SliverStatus() § DeleteSliver() § RenewSliver() § Shutdown() § ListSlices()

¡ Ex) getversion on KREONET TESTBED > …/protogeni/test/am/getversion.py

{'output': '', 'geni_api': 2, 'code': {'protogeni_error_log': 'urn:publicid:IDN+emulab.kreonet.net+log+a3a248742b9814312faae7f4fcf66e53', 'am_type': 'protogeni', 'geni_code': 0, 'am_code': 0, 'protogeni_error_url': 'https://www.emulab.kreonet.net/ ….

Page 22: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

KREONET TESTBED

KREONET Testbed User Interface

Federation based User Interface: MySlice

Page 23: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

§ URN : urn:publicid:IDN+wall2.ilabt.iminds.be+user+ftester Module : am Method : CreateSliver Version : 2.0 StartTime : 17:16:53:360280 slice_urn : urn:publicid:IDN+wall2.ilabt.iminds.be:fed4fire+slice+sRiBM7Se0ruYQa slice_idx : 755 slice_uuid : f89e54b4-fdff-11e4-bd9f-001517becdc1 EndTime : 17:17:08:778127 Elapsed : 15.42 LogURN : urn:publicid:IDN+emulab.kreonet.net+log+1b6065fc0cfbc0fc5636447eeb7b2fc1 LogURL : https://www.emulab.kreonet.net/spewlogfile.php3?logfile=1b6065fc0cfbc0fc5636447eeb7b2fc1 Code : 0

¡ URN : urn:publicid:IDN+wall2.ilabt.iminds.be+user+ftester Module : am Method : DeleteSliver Version : 2.0 StartTime : 18:18:53:722997 slice_idx : 755 slice_urn : urn:publicid:IDN+wall2.ilabt.iminds.be:fed4fire+slice+sRiBM7Se0ruYQa slice_uuid : f89e54b4-fdff-11e4-bd9f-001517becdc1 EndTime : 17:19:10:199501 Elapsed : 16.48 LogURN : urn:publicid:IDN+emulab.kreonet.net+log+882fbb595733ee83655843374924b8a5 LogURL : https://www.emulab.kreonet.net/spewlogfile.php3?logfile=882fbb595733ee83655843374924b8a5 Code : 0

Page 24: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

Technology Workshop on Downscaling skills for Smart Climate Services

Page 25: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Heterogeneous Resource § protoGENI based resource for ICT experimentation

▪ Hundred nodes with GENI SW: bare-metal nodes with distributed § OpenStack based resource for Data-oriented experimentation

▪ Experiment environment: VM nodes with a shared big storage ▪ Ex) NMS data and analyze them by Hadoop ▪ Ex) IoT data to analyze(plan)

¡ Federating heterogeneous resource § Federating protoGENI and OpenStack by using SFA § OpenStack needs SFA wrap

Page 26: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ SFA wrap translates the incoming SFA AM calls to appropriate calls to the REST interface of the Testbed Manager.

SFA Interface

SFAWrap generic part

SFAWrap testbed-specific part

Wrapper

Testbed Manager

REST API

Page 27: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ KISTI KREONET participated ONOS project ▪ KREONET-S: a tentative name of the KREONET softwarization project for

SDN production services ▪ KREONET NOC will provide VDN(virtual dynamic network) as API

KREONET-S VDN

Page 28: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Network provisioning § KREONET TESTBED will use VDN for provisioning the distributed node

KREONET-S VDN

KREONET TESTBED distributed nodes

Page 29: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

¡ Client side interface § KREONET Slice

▪ Requesting federated heterogeneous resources ▪ Adding SDN provisioning function

SFA Interface

SFA Wrapped OpenStack

KREONET Slice

SDN based Network Provisioning GENI AM API

SDN ONOS VDN interface

KREONET-S

Page 30: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share

Contact to [email protected]

Technology Workshop on Downscaling skills for Smart Climate Services

Page 31: KREONET TESTBED Service - apan.net€¦ · § Testing routing algorithm and security algorithm on IPv6 network § Ex) The whole lab member registered a share project account to share