National ICT Services Guido Guizzunti – Riccardo Veraldi CNAF Review 2015

The INFN Information System Guido Guizzunti CNAF Review 2015

Overview The INFN Information System department was born in the aim to digitalize and manage all the administrative and accounting processes of the INFN Institute In order to provide reliability and availability two geographically distributed teams work in synergy: 8 people at Frascati National Laboratories (LNF) and 9 people in Bologna (at CNAF) The infrastructure is based on several physical servers managed via RedHat Cluster and many virtual machines executed on oVirt datacenters, in order to provide high resiliency and availability Provisioning is performed employing tools like Puppet and Foreman, to ease installation, configuration and management tasks, both for physical and virtual servers CNAF Review 2015, Guido Guizzunti304/05/2015

Main Activities Financial and Accounting systems, based on Oracle Business Suite (EBS) and Oracle Database Attendance and Accesses collection systems, based on Java and Oracle Database, used by all INFN sites Human Resources and Organization system, based on Java and Oracle Database (Godiva) User Portal, based on the Vaadin Java framework, as a unique access point for all INFN web applications (work in progress) Business Intelligence, based on the Open Source Jaspersoft Suite, used for data gathering, analysis and elaboration Disaster Recovery Project, based on Oracle Dataguard and custom scripts, in collaboration with National Services, in order to replicate critical data on a geographically different location (work in progress) CNAF Review 2015, Guido Guizzunti404/05/2015

Oracle Business Suite 12 In order to manage INFN accounting, the Oracle EBS was chosen In 2011 the SUN Solaris platform was migrated to RedHat Linux Cluster 5, implemented on commodity hardware – Performance increased – Costs reduced for hardware and system services In 2014 the EBS v.11 was migrated to EBS v.12, to achieve a more modern and stable platform, better integrated with web applications and officially supported by Oracle – RedHat Cluster bit -> RedHat Cluster bit – Oracle DB 10g -> Oracle DB 11gR2 – Oracle EBS 11 -> Oracle EBS 12 – Java: 1.4 -> 1.7 Problematic implementation due to strong customizations made in the past to make the software compatible with INFN requirements CNAF Review 2015, Guido Guizzunti504/05/2015

Digitization and dematerialization Document Management system, based on the Alfresco platform, is progressively being adopted as the repository to store all INFN documents, like technical papers, contracts, invoices, etc. Electronic Invoicing Service, which is now mandatory for all public institutions Digital Protocol: to manage electronically all the document flows to and from each INFN's functional Unit (work in progress) Electronic Mandate, which simplify the collaboration between INFN and bank systems These solutions offer several benefits: – Simplification of administrative procedures – Better service quality and improved efficiency – Minimize costs – Reduction in time required for document search and retrieval CNAF Review 2015, Guido Guizzunti604/05/2015

Godiva Godiva is a custom tool, developed by INFN, that provides a single access point to all information on personnel: personal data, contracts, roles within the organization, etc. In order to avoid redundancy and misalignment, all administrative applications (such as finance and accounting, attendance and access collection) extract the information about personnel from the Godiva database (work in progress) Developed on Vaadin web framework based on Java and running on Apache Tomcat The main Oracle database resides in Frascati and is replicated to CNAF in real time via the DataGuard tool, as part of the Disaster Recovery project CNAF Review 2015, Guido Guizzunti704/05/2015

General ICT Services Riccardo Veraldi CNAF Review 2015

Overview CNAF is officially invested since the early 90s of the task to implement, manage, maintain and coordinate services which are critical and fundamental because of their importance and catchment area not only for CNAF itself but for the whole INFN community. The CNAF department which carries out this activity is called "National ICT infrastructures and Services". The Department is working in collaboration with other CNAF units like Network and Information System to carry on large projects as Disaster Recovery and INFN Documental system CNAF Review 2015, Riccardo Veraldi904/05/2015

Strategic and critical high priority services Authoritative DNS for the top level domain infn.it Mail relay MX backup for all domains with 15 days retention policy National Mailing lists: over than lists for INFN related projects. Over than s delivered every day Centralized Web Site management, based on Joomla CMS. More than 80 sites are managed. Network Time Protocol service for INFN computers Backup service for INFN Certification Authority (CA) data Eduroam and TRIP coordination Centralized License distribution INFN AAI and AFS services CNAF Review 2015, Riccardo Veraldi1004/05/2015

Brand New "cutting edge" services Multi Master DNS for high availability services, based on a pool of DNS servers distributed across INFN sites Synchronization and desktop backup "Pandora"a Dropbox like service. More than 600 active accounts. INFN Documental Service (Alfresco) ISSS (coordinator Francesco Giacomini) to provide an infrastructure of well-integrated tools in support of software development projects within INFN VDI desktop service for INFN administration offices, used experimentally by some INFN sites INFN video chat service (XMPP) CNAF Review 2015, Riccardo Veraldi1104/05/2015

Mid-term development plan Deployment of services on a geographically distributed infrastructure – Management and live migration of services for HA and business continuity purposes between CNAF, LNF and other sites (GE) – Technologies under investigation: LAN extension between CNAF and LNF via a Layer2 MPLS VPN (LNF and GE sites need 10Gbit geographical connections) SDN network virtualization technologies as an alternative technique for LAN extension among sites Block storage replication (GPFS, GlusterFS) Migration of "stateless services" on Cloud environments – Multi-zoned Cloud architecture between CNAF and LNF will be investigated Manpower: at the moment with 2 FTE (and one staff only) we are below the critical mass CNAF Review 2015, Riccardo Veraldi1204/05/2015