1. OESS AM, OESS STITCHING FLOWSPACE FIREWALL AL2S and GENI

2. OESS provides point-to-point and multipoint circuits across an OpenFlow substrate. Deployed on Internet2’s AL2S network. OESS AM provides a GENI interface to OESS circuit provisioning – Takes GENI AM API requests and translates them into OESS API requests Based on FOAM -- modified to support OESS API – Advertises available AL2S/OESS resources (endpoints, trunks) – Receives requests for AL2S/OESS circuit creation/removal, talks to AL2S OESS to make changes to network – ‘GENI-FOAM’ workgroup defines access policy for GENI users New for this GEC: Stitching support FOAM on AL2S

3. FOAM OESS AM extended to support stitching Stitching supported on any AL2S interface that has interdomain provisioning enabled – NOC ticket to enable port for interdomain – Port owner creates ACL(s) granting ‘GENI-FOAM’ workgroup access to a set of VLANs – AL2S AM will then automatically advertise this port in stitching advertisement – Current Limitations: 1 circuit per request. One remote link per port. AL2S Stitching

4. Stitching Advertisement oessfoam chainANDTree false 10000000 1000 urn:publicid:IDN+ion.internet2.edu+interface+rtr.clev:et-5/0/0:al2s 10 100000000 1000 l2sc ethernet 9000 3900-4000 true …

5. OESS selects shortest path between the endpoints Transparent VLAN translation across core Stitching Request 10 100 l2sc ethernet 9000 1760-1779,3950- 4000 3960 true 4 10 100 l2sc ethernet 9000 670,3706-3750,3950- 4000 3959 true 3

6. Provides sliced OpenFlow interface to AL2S Slices are differentiated by VLAN ID – Each slice is allocated one or more VLAN IDs on a set of edge and trunk ports Flowspace Firewall acts as a proxy, enforcing VLAN policy for each slice Enforces rate limits for each slice on OpenFlow control channel FlowStats slicing Deployed on Internet2 AL2S network on June 17 Open source: https://github.com/GlobalNOC/FlowSpaceFirewall Flowspace Firewall