Rick Summerhill Chief Technology Officer, Internet2 TIP January 2008 Honolulu, HI Internet2 Update

Contents Technologies Middleware Security Network Research Support Performance Dynamic Circuit Services The Internet2 Network Services Future Challenges

Middleware Shibboleth 2.0 should be out within a month Completes the Shib/SAML Integration InCommon continues to grow New investigations on federation peering - now international federations COManage work continues Leverages federated identity and the attribute ecosystem Shib-enabled; uses Grouper to manage groups, Signet to manage privileges, Eddy for diagnostics Open and proprietary applications can be plumbed to work with it See some of the detailed talks on Middleware

Security Much of the activity will be moving toward the campus level Support for and collaboration with the REN-ISAC Incident handling SALSA working groups Disaster Recovery CSI-2 (Interoperable security incident reporting) Federated wireless access Grants to investigate security efforts Integration of identity management and security efforts (CAMP in next few weeks - full)

Network Research Support Observatory data usage continues to grow Investigating data needs at lower layers Continue work on grants like Ultralight, DoE, and 100x100 Deploying a small experimental network using netFPGA cards for the 100x100 project Investigating use of new (old?) ideas like Phoebus Investigating international connections and how to measure Support for recent GENI solicitation

Performance End-to-End performance monitoring Primary component under development is PerfSONAR What is perfSONAR? A set of protocols and schemas for implementing a service- oriented architecture for sharing and controlling network performance tools A community of users and developers (Internet2, ESnet, GEANT2, and RNP) A set of software (the sample implementation) Java release v2.1 available perfSONAR-PS beta released this week Encourage deployment at all levels - campus, regional, national, and international

Dynamic Circuit Network Designed using the work done through the HOPI (Hybrid Optical and Packet Infrastructure) project (more on that later). Currently uses the Ciena infrastructure To be extended to the full infrastructure as more is developed. The DCN software suite now available - current version 0.2 Developed by Internet2, ESnet, and DANTE through the DICE collaboration Encourage participation of a wider group of developers - contact Internet2 if there is interest

The Internet2 Network Designed with the following in mind: The R&E community runs applications with very demanding needs, from high bandwidth to quality of service Demand for control at lower layers of the the network stack Interest in Hybrid Networking - using networks at different layers in innovative ways How can one augment layer3 networks with layer1 capabilities

The HOPI Testbed Understanding these capabilities lead to the HOPI project HOPI is now being decommissioned, although several segments continue to exist Successful project that lead to DCN Many thanks to the HOPI partners, including Force10, Glimmerglass, and HP The TSC (testbed support center) including IU, NCREN, and MAX Some support for DCN continues from these groups Special thanks to the NSF and the DRAGON project

10 Internet2 IDEA Awards For advanced applications with: Positive impact Technical merit Potential for further adoption IP and (new) static wave categories Winners receive recognition and (for static wave category) 10 Gbps circuit on Internet2 Network Submit by 28 January 2008 Additional information available at the information table

The Internet2 Network Design Goals Multiple layers…Multiple domains…One infrastructure, flexibility at all layers IP services Static Wave services Dynamic Wave services Commercial Peering services Carrier-class reliability / Massively scalable / Flexible Enable both production services and also experimental services Continue technical innovation & vision in the global Research and Education community

Initially provisioned with ten 10-Gbps wavelengths (100 Gbps) with all 10 dropping at each core optical node Unlimited capacity: Can grow beyond 40 wavelengths on additional fibers with linear costs Community Controlled: Complete access to the entire system - IU NOC now controls all layers in the network Reliable: Level(3) provided service level agreements on waves Scalability: Potential for 40 & 100 Gbps support SC 06 and SC 07 demos of 40 and 100 Gbps Rapid/Flexible: Reprovisioned (10GE to OC-192) and tested 10 λ’s between NYC-DC-Chicago (~1000 miles) in 31 minutes! The Internet2 Network Architecture Summary

Internet2 Infrastructure

Wave Infrastructure - ESnet and Internet2 The Internet2 Hybrid Network The Internet2 IP network The Internet2 circuit infrastructure, dynamic in nature The ESnet Hybrid Network The ESnet IP network The ESnet SDN circuit (dynamic) network The wave infrastructure can support multiple networks Internet2 has complete control of the wave infrastructure It can support both highly experimental and production quality The Internet2 Network as follows:

Internet2 Network Partners

Services Hybrid Network IP Network Research Traffic similar to the past Commodity Peering Services Dynamic Circuit (DC) Network Waveco Static Waves (SONET or Ethernet) on the Infinera Platform Static Circuits (SONET or Ethernet) on the Ciena Platform Fiberco Dark fiber (and ancillary services); professional services

Static Circuit Services Physical Connections: 1 or 10 Gigabit Ethernet OC-192 SONET Circuit Service Types: Point-to-Point Ethernet Circuit, tagged or untagged Point-to-Point SONET Circuit Bandwidth provisioning available in 50 Mbps increments

Static Circuit Services Provide for user specific network paths: Guaranteed bandwidth Deterministic behavior in terms of bounds on jitter, latency, and packet loss rates Can be provisioned in multiple ways: Over Infinera backbone Over the Ciena CoreDirectors Even via MPLS over IP network

Commercial Peering Service Saving 50% and greater in commodity costs Enhancing commodity IPv6 and Multicast connectivity Reflects policy and technical advice of NTAC (community lead) Uses existing IP connection Operated transparently (allows researchers to work with real traffic and routing tables)

Commercial Peering Service Potential to position R&E community as the leader with respect to IPv6 connectivity Working with commodity providers to enable new IP multicast applications Insure net neutral paths between R&E community and commodity-hosted content, services, and users.

Internet2 Dynamic Circuit Network (DCN) Similarities to IP Network One-arm connection Protocol-based connection Connect to anyone else also connected to the network Dynamic Circuit characteristics Flexible bandwidth up to 10 Gbps Set up circuits in seconds Circuits lasts for hours or days Operates on the Ciena Platform currently

Internet2 DCN Roll-out Persistent for 2008 No additional fee to IP connectors for 2008 Support Documentation Workshops User group Challenge is innovative use of the Technology

Phoebus Phoebus - TCP data flows File transfers over long distance segments not requiring congestion control Lead by Martin Swany at the University of Delaware

Challenges These are great times in the networking world New and innovative ideas for networking abound! A Challenge to you: Given the technologies being developed by the community, from middleware to perfSONAR to DCN, what are innovative ways to use those technologies? Given new technologies coming in Ethernet and G.709, what networking directions should our community take over the next few years? The new Internet2 governance puts the direction in the hands of the community!

Questions?