Research Focused Networking ● Science DMZ ● Network segment topologically close to campus edge, available as a co-location space for research data ● Optimized for exchanging large data sets with off-campus collaborators ● 10Gb/s connection to Internet-2 ● No firewalls between DMZ and the world; simple security filters only ● This means higher performance with off-campus peers, at the cost of sophistication in security
Science DMZ Logical Topology
Science DMZ Performance ● 10Gb/s connections to Internet-2 ● Connections between the DMZ and campus buildings are also at 10Gb/s, but must traverse campus firewalls; this has performance overhead ● Jumbo frames supported throughout ● Optimized for data transfers to off-campus peers over on-campus locations
Science DMZ Security ● There is a security layer between the DMZ and the world, but it is not stateful ● Packet-by-packet filtering only ● High performance, but cannot identify connection patterns or traffic profiles
Science DMZ Extensibility ● There may be situations where use of the Science DMZ topology is not practical as a co-location approach ● In some areas it may be possible to extend the DMZ into campus buildings if co-locating equipment is impractical
Science DMZ Extensibility
● Note: this is accomplished by constructing a virtualized path for research traffic, not by building a new physical path ● So---performance on the research DMZ network will still be limited by the capabilities of the physical network into the building ● Please ask us if you're interested in exploring this option; we'll consult on each case individually!
Research Network Performance Feedback ● How well does the current data network infrastructure work for your research efforts? ● Does it meet your research needs? ● How would you like to see it improved? ● We're interested in your input as we determine where and how to make improvements in the network infrastructure for research use
Survey ● Please complete our survey! Your input will be invaluable in helping us allocate resources for research infrastructure improvements!