1. 2016/6/12 Joint meeting: EchoGrid, Bridge, GridComp and ETSI CROWN: A Service Grid Middleware Chunming Hu hucm@buaa.edu.cn Institute of Advanced Computing Technology School of Computer Science & Engineering Beihang University October 31, 2007, CNIC

2. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 2 CROWN Overview CROWN China Research and Development environment Over Wide-area Network Jointly Funded by National Natural Science Foundation of China NSFC eScience Program Ministry of Science and Technology of China 863 Hi-Tech Program, OMII-China Project 973 National Foundemental Research Program, iVCE Project CROWN is A Grid Middleware Suit A set of tools to support the computer sharing An infrastructure to provide security and trust to the resource sharing and collaborate scenario A toolbox to support the application development A testbed to verify the grid related technologies

3. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 3 Key Components of CROWN UI CROWN Portal CROWN Home: Rich Client Framework Grid Infrastructure CROWN NodeServer CROWN RLDS CROWN Scheduler CROWN Domain Authentication/Authorization Service CROWN Identity Mapping Service CROWN Workflow Engine Grid Developing Tools CROWN Designer

4. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 4 PCCluster Front End Cluster Nodes Device Host Devices Resources Node Server Install / Config Node Server Install / Config Node Server Install / Config RLDS Register to … RLDS Resource Management RLDS Register to … PortalsRich Client Framework Scheduler SSS Workflow Engine WfS Query Info CROWN Designer Eclipse JDTPDE S Generate Services App Application Layer App Middleware Layer Resource Layer Sec Monitor Rich Internet Application

5. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 5 IDEs and PSEs CROWN Portal A JSP-based Web Portal to integrate the administration functionalities and application interactions Plug-in structure to support the different applications Integrated with MyProxy: Certificate Management Rich Client Framework For applications with more interactions Better plug-in management mechanism: Eclipse RCP IDE for developers CROWN Designer: Provide wizard to create new Grid services: wsdl generator, stub generator, archive creation Link to a Grid testbed: monitoring, deploying, … GUI-based Workflow modeling tool as a plug-in

6. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 6 IDEs and PSEs CROWN Designer

7. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 7 Programming Model Depends on the application scenario Workflow GUI: plug-in for CROWN Designer, GUI-based modeling XML Format: BPEL extension Objects API: Process management Master worker (slave): based on meta-scheduler, especially customized scheduler MPI-support: local scheduler (OpenPBS integration)

8. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 8 Programming Model GUIXML Format Procedural API Objects API WorkflowYES Skeleton Components/ServicesYES Master worker (slave)YES Branch & Bound SPMD : MPI, object SPMDYES Active object (actors)

9. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 9 Data Management In CROWN, we provide a simple, service-oriented solution to provide a virtual file space, and a file access interface File Transfer GridFTP, FTP, HTTP(s) Virtual File System Meta Data Service: linked with each other to create a tree Local Data Service: just mount the available space to the tree Replica Management: create data replications on demand Database support Using of OGSA-DAI

10. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 10 Resource management and SLA Meta scheduler: CROWN Scheduler A BES implementation Integration with a local scheduler (say, the batch system) Using the OpenPBS as the intra-cluster job dessemination Interact with OpenPBS to monitor the job execution Hardware resource handled by middleware Monitoring the system parameters: CPU usage, memory usage, queue length, available disk space… Control: Soft-control on CPU capability allocation SLA management: Not integrated into the current CROWN version Approach: Define different service level, and mapping different resource capability Tracking of the resource usage Security Message Level Security: WS-Security specifications Attribute Certificate based: Authentication/Authorization Authentication support: User/password & X.509 & Kerberos Automatic Trust Negotiation: to support the trust remote deployment of services

11. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 11 Orthogonal Questions Globus based or not? YES, but… CROWN 2.5.3 is based on Java WS-Core We do have a service container: XServces. Migration is possible. Approach to SOA? YES Main Language API: Java Other implementation can be wrapped by a service interface Portability across platform: Based on Java Portability Interoperability with other Grid middleware JSDL+ BES: Job submission demo on SC2006 and OGF 20 With Globus, OMII, gLite, Unicore, … CNGrid GoS (OMII-China) Information model is not the same

12. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 12 Applications List of successfully executed applications eScience: MDP, AREM, gViz, Remote Control of Microscopes AREM Remote execution scenario MDP Master and Slave model

13. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 13 Distribution model Conditional Open Source: a modified BSD license Binary code are opened for download Source code are opened for partners only Computer Network and Information Center, CAS Institute of Automation, CAS Institute of Atmosphere Physics, CAS White Rose Grid Team, Leeds University, UK OMII, University of Southampton, UK …… No commercial support Provide help desktop under the OMII-EUROPE project

14. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 14 Future Plans Performance optimization Thread management for systems… Interoperability BES+JSDL: Information model: GLUE? CIM? Integration with Virtual Machine technology Requirements of service isolation System protection: Running services created by other people? Is it possible to create the VM on demand, and kill the VM after the execution of task? (Just like Globus Virtual Workspace) A key feature of CROWN 3.0

15. 2016/6/12 Thank you!

16. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 16 Security Architecture for CROWN Region CA Identity Mapping& Credential Converting Service Region 1 Domain CA Node 1 Node 2 Domain Authentication Service Domain 1.1 Domain Authorization Service Node n … Region KDC Domain KDC Node 1 Node 2 Domain Authentication Service Domain 2.1 Domain Authorization Service Node n … Region 2

17. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 17 CROWN Home CROWN Home: provided GUI for NodeServer Eclipse RCP based GUI Desktop users Java Code Security in NodeServer CPU/Memory/Disk quota Visualized Security & Certificate Management

18. CROWN Website: http://www.crown.org.cn/enhttp://www.crown.org.cn/en 18 Future Plans CROWN 3.0: CIVIC: CROWN Infrastructure for Virtual Computing, by Offering the separated and isolated computing environment for end users Realizing hardware and software consolidation and centralized management. Providing a transparent view to upper layer applications, by hiding the dynamicity, distribution and heterogeneousness of underlying resources.