70 likes | 196 Views
Points of pain Campus vs backbone. Bill St. Arnaud bill.st.arnaud@canarie.ca. Backbone operator perspective. NB: CANARIE operates a very small IP backbone Our major focus is operating a “substrate” network to support a number of virtual lighpath networks – APNs
E N D
Points of pain Campus vs backbone Bill St. Arnaud bill.st.arnaud@canarie.ca
Backbone operator perspective • NB: CANARIE operates a very small IP backbone • Our major focus is operating a “substrate” network to support a number of virtual lighpath networks – APNs • Many of our departments and users on campuses have multiple independent connections to CA*net 4 and other networks • Medical-health-HIPAA • Physics • Astronomy • Various Grids – backplane and frontplane connection • Distributed campus networks • We are seeing many APNs dedicated to specific community of interests which extend from user desktop to desktop right across the country
Canada HEPnet APN TRIUMF Tier 1 1G Interface WS UoToronto Physics Tier 2 5G Interface WS UBC Physics UA Physics UoT Physics 10G Lightpath WS External links or APNs UoVictoria Physics Tier 2 UdM Physics TRIUMF APN UoT APN Carleton Physics Toronto Amsterdam Vancouver Edmonton Montreal UoV APN Ottawa Victoria CA*net 4 New York Geneav Chicago FERMI Tier 1 Note: Typical View on TRIUMF UCLP GUI CERN Tier 0 Brookhaven Tier 1
Geant / SuperJanet4 / TVN Access (2*1Gbits/s) Site Access Router R-PoP Sites Router B UKLIGHT (2*1Gbits/s) “Lightpath” to CERN via NetherLight Netscreen Firewall 8Gb/s RAL Site Router A UKLight Access Router Router C RAL LHC Tier 1 Centre Parallel Campus Production & Research Networks- Rutherford Source: Robin Tasker Networks and Communications CCLRC
Production & Research Networks at UCL Source: Andrew Kerl UCL
Points of pain- RONs and NOCs • Many of our users have direct optical connection to the backbone with NICs using long range GBICs • RONs and campuses want to “manage” the link and insert devices in the middle of the all optical link which makes it less reliable and poorer throughput • First point of contact is not local IT dept • Certificate authority and authorizing server is often off campus for many campus research groups • HIPAA • Grids • APNs • Federations good idea – but really hard to implement
Virtual CIO and virtual NOC • Increasingly networks and security issues are neither geographical or local domain • i.e. Jacob Forum • Outside organizations are setting standards within “your” network • In fact it may be no longer “yours” • CERN NOC is setting standards on OS, IdM, routing, network connectivity at campuses • Look at Skype security standards • Skype sits above the “network” • The “old network” is becoming increasing irrelevant • The pervasive Internet is coming because of SOA & Mashups • Google, Skype , Cisco IPICS, SOA etc