150 likes | 240 Views
Extending the Measurement Infrastructure of Pipes beyond Abilene. Jeff W. Boote. The Measurement System (4/03). The New Abilene will have measurement devices as part of its structure. Abilene. PMP. PMP. PMP. PMP = Performance Measurement Point (at each Abilene Node).
E N D
Extending the Measurement Infrastructure of Pipes beyond Abilene Jeff W. Boote
The Measurement System (4/03) The New Abilene will have measurement devices as part of its structure Abilene PMP PMP PMP PMP = Performance Measurement Point (at each Abilene Node)
The Measurement System (4/03) Extend the System to Campuses Campus X Abilene PMP PMP PMP Campus Y PMP PMP PMP at each Campus Border
Measurement Domain Definition • A measurement domain is simply a useful construct for centralizing the policy and control issues for a specific group of hosts control here is primarily about defining a specific set of regular tests to run between a specific set of hosts
Single Domain to Multiple Domain adds Complications Who can run a test, between what hosts, and who gets the results? • Results must be able to flow to all authorized, interested parties • Policy • Configuration control • Data flow
Policy Issues • Authentication • Federations of measurements, require federations of authentication and the sharing of trust • Authorization • Federated authentication requires a model where the definitions of “roles” are shared by all parts of the federation
Federated Authentication/Authorization • There are many very good efforts in this area. • Shibboleth, Akenti, GSI, KX509… • That said, it is important that we soon start engaging that community more directly and start fully integrating the work! • Perhaps start with the GSSAPI? • Gives you Kerberos and GSI • What gives us roles?
Configuration Issues • Distributed scheduling better integrates on-demand tests to any point • Distributed scheduling makes management of overall configuration more difficult • Desire to distribute configuration some • Should be able to drop in a new set of hosts to run a particular “experiment” without changing rest of configuration
Use Cases • Full mesh • List of hosts (NxN) • Nearest neighbor • List of peers for a given host (1xN) • One on one • Same as 2 (1x1) • Subset of one domain with subset of another domain • Sparse mesh (JxK) = NxN + !(PxQ)
Want to optimize these organizations • Full Mesh • One node with any group of others • Subset of mesh with subset of another mesh (inter-domain tests) Does this capture most measurement configurations?
Data Flow • Peers may want results of test directly • NOC alarms… • Data may need to be collected to a central point before distributing further • Firewalls, aggregation points…