1. Sponsored by the National Science Foundation GENI Terminology Sarah Edwards, GENI Project Office Violet Syrotiuk, Arizona State University

2. Sponsored by the National Science Foundation 2 GEC22 – March 23, 2015 GENI Terminology slice project aggregate experimenter resource

3. Sponsored by the National Science Foundation 3 GEC22 – March 23, 2015 Experimenter An experimenter is a researcher who uses GENI resources Different types of experimenters have different roles and permissions: Advisor vs Grad Student Teacher vs TA vs Student Experimenter

4. Sponsored by the National Science Foundation 4 GEC22 – March 23, 2015 Slice credentials Clearinghouse and Aggregates Clearinghouse: Manages users, projects and slices –Standard credentials shared via custom API or new Common CH API –GENI supported accounts: GENI Portal/CH, PlanetLab CH, ProtoGENI CH Aggregate: Provides resources to GENI experimenters –Typically owned and managed by an organization –Speaks the GENI AM API –Examples: PlanetLab, Emulab, GENI Racks on various campuses Create & Register Slice Researcher Aggregate Manager API - listResources - createSliver … Aggregate Manager Aggregate Resources users slice s clearinghouse projects Tool

5. Sponsored by the National Science Foundation 5 GEC22 – March 23, 2015 Creating a GENI account GENI Portal is at: https://portal.geni.net Instructions for creating an account are: http://groups.geni.net/geni/wiki/SignMeUp

6. Sponsored by the National Science Foundation 6 GEC22 – March 23, 2015 GENI User Authentication For many experimenters: no new passwords familiar login screens The GENI Portal leverages InCommon for single sign-on authentication Experimenters from 304 educational and research institutions have InCommon accounts GENI Project Office runs a federated IdP to provide accounts for non-federated organizations.

7. Sponsored by the National Science Foundation 7 GEC22 – March 23, 2015 Projects Projects organize research in GENI Project Lead Members Slice Projects contain both people and their experiments A project is led by a single responsible individual: the project lead Today we will use a project created for this class

8. Sponsored by the National Science Foundation 8 GEC22 – March 23, 2015 Slice A slice is a container of resources used in an experiment. A slice can contain resources from one or more aggregates A slice is in a single project A slice has an expiration Slice names are public, reusable and unique (within a project)

9. Sponsored by the National Science Foundation 9 GEC22 – March 23, 2015 Resource A resource is a piece of infrastructure A resource can be real or virtual. Resource specifications (aka. RSpecs) are used to describe and request resources. Examples: Compute: computer vs virtual machine (VM) Wireline Network: VLAN or OpenFlow Wireless: WiMAX

10. Sponsored by the National Science Foundation 10 GEC22 – March 23, 2015 Aggregate An aggregate manages a set of reservable resources Aggregates include: GENI racks OpenFlow WiMAX InstaGENI RackExoGENI Rack

11. Sponsored by the National Science Foundation 11 GEC22 – March 23, 2015 Expiration and renewal slice expiration time ≤ project expiration time each resource expiration time ≤ slice expiration time each resource expiration time ≤ aggregate’s max expiration project slice resource (optional) project expiration time slice expiration time resource expiration time now In general, to extend the lifetime of your resource reservation, you must renew the slice and all resources resource

12. Sponsored by the National Science Foundation 12 GEC22 – March 23, 2015 Experimenter (aka Student) Putting it all together slice aggregate project Member: Lead: Experimenter (aka Professor) Layer 2 resource

13. Sponsored by the National Science Foundation 13 GEC22 – March 23, 2015 Using SSH with a public/private keypair Login to all GENI compute resources using ssh with a private key 1.The public key is loaded onto the node when you reserve resources. 2.You provide the private key when you log into the node. There are several ways to offer your private key to ssh. You should never be prompted for a password to log into a GENI compute node. If you are, something has always gone wrong. No password!

14. Sponsored by the National Science Foundation 14 GEC22 – March 23, 2015 SSH with a password ssh Experimenter local> ssh jdoe@remote.edu jdoe@remote.edu’s password: ######## Welcome to remote! jdoe@remote> exit local> ssh jdoe@remote2.edu jdoe@remote2.edu’s password: ######## Hash of password stored on each remote machine User enters password once for each connection to each machine *nix-based system (Windows behavior may vary)

15. Sponsored by the National Science Foundation 15 GEC22 – March 23, 2015 SSH with a private key Experimenter local> ssh-add ~/.ssh/id_rsa Enter passphrase for ~/.ssh/id_rsa: ######## local> ssh jdoe@remote.edu Welcome to remote! jdoe@remote> exit local> ssh jdoe@remote2.edu Welcome to remote2! jdoe@remote2> exit local> ssh jdoe@remote3.edu Welcome to remote3! jdoe@remote3> exit ssh Public key is stored on each remote machine User enters passphrase to unlock private key for all connections to all machine Private key is stored only on local machine *nix-based system (Windows behavior may vary)