1. UCLPv2 Update Sergi Figuerola Fundació i2CAT Sergi.figuerola@i2cat.net 16 th GGF Athens, Fabruary 2006

2. Private Sector Administration Universities Technology Transfer Research Innovation Dissemination Internet UCLPv2 : CANARIE’s Directed Research Program UQAM/Uottawa Solana Networks CRC/UofO/Inocybe Tech. /i2CAT i2CAT Foundation i2CAT Foundation : private non-profit Foundation created by the local government and the UPC (Universitat Politècnica de catalunya) Funding : Department of Research and Universities of the local Government, private sector and pre-competitive projects Goals : boost of Research & Innovation on the Internet second generation environment –Promote advanced networks research, innovation and broadband applications –Create new cooperation platforms Model : based on the collaboration between the public, private sectors and the universities

3. Driver for User Controlled Networks Increasingly more and more organizations are acquiring their own fiber networks –Universities, schools, hospitals, businesses Acquiring fiber in the long haul is very expensive to light and obtain –Alternative is to use “dim fiber” – point to point wavelengths –But want flexibility to do configuration and change management as with dark fiber Increasingly science needs dedicated networks for specific applications and disciplines for high data volume grids –Want to be able to manipulate the network in the same way they can manipulate the application SOA and networks −SOA has the potential to provide the same user control over networks as with applications

4. CAnet 4 design principles (UCLP) Occam’s rule of networking: – “The simplest network is the best network” Provide users with tools to do their own traffic engineering including changing topology and bandwidth –“Articulated Private Networks” Allow users to create IP networks for their own community of interest –Most importantly allow extension of network into campus to specific servers and bypass campus firewall Use Service Oriented Architecture (web services and workflow) to allow users to do their own provisioning and configuration of the network –Also allows easy integration of application - Bill St. Arnaud -

5. What is UCLP? User Controlled LightPaths – a configuration and provisioning tool built around grid technology using Web Services Allow third parties concatenate cross connects together from various links, routers and switches to produce a wide area network that is under their control –Articulated Private Network (APN) –Next generation VPN Uses Service Oriented Architecture (SOA) and so network can be integrated with other Web Service applications To extend the network into the application End of the project, March/April 2006 Is UCLP an Automated management system? NO it is a toolbox used to create customized services.

6. UCLP Concept Substrate Router Instrument WS Substrate Switch Parent Lightpath WS Timeslice WS Child Lightpath WS (may run over IP Ethernet, MPLS, etc GMPLS Daemon WS APN Virtual Router WS Wireless Sensor Network

7. Université d’Ottawa University of Ottawa UCLPv2: High Level “Architecture” Resource Management Layer Service Orchestration Layer (BPEL) User Access Layer LP-WSITF-WS XC-WS802.1q-WS GMPLS-WS VR-WSINS-WS APN-WS

8. Université d’Ottawa University of Ottawa NE-WS (I) - RML NE-WS (Network Element Web Service) –A family of network element WSs –Axis Web Service –Different types of NE-WSs exist depending on the network element it is controlling –Deployed on carrier’s side INS-WS (INStrument Web Service) –Web Service that controls a third party device (sensors, instruments, etc.) –Deployed on the APN side

9. Université d’Ottawa University of Ottawa NE-WS (II) - RML XC-WS XC PortType GUINode PortType GMPLS-WS GMPLS PortType GUINode PortType 802.1q-WS GUINode PortType MPLS-WS GUINode PortType Router-WS GUINode PortType 802.1q PortType MPLS PortType Router PortType XC-WS (Cross Connect Web Service) –SONET, SDH, Fibre, Lambda Cross Connects GMPLS-WS –GMPLS Cloud 802.1q-WS –VLAN enabled Ethernet switch MPLS-WS –MPLS Cloud Router-WS –Layer 3 router

10. Université d’Ottawa University of Ottawa NE-WS (III) - RML Interface Binding XC Port Type... XML Core Transport (TCP, UDP, SSL, etc.) Res. Manager Partition Table ONS 15454 XML OPTera 5200 XML … Memory Hash Interface Binding GUI Port Type

11. Université d’Ottawa University of Ottawa LP-WS (I) - SOL LP-WS (Light Path Web Service) –An abstraction that represents a link between one or more interconnected resources –A web service composition –The end points of the LP can be anything that is network enabled ITF-WS (InTerFace Web Service) –A web service composition that represents a single resource on a network element APN-WS (Articulated Private Network Web Service) –A BPEL workflow script that links together a number of WSs from an APN resource list and other sources

12. Université d’Ottawa University of Ottawa APN-WS (II) - SOL A workflow script that links together a number of lightpath, interface and instrument Web Services obtained from one or more providers An APN is a single network configuration Once an APN is deployed, the topology and bandwidth are fixed –If the configuration of the network elements wants to be changed, the APN must be stopped, and a new APN must be created A single researcher can have multiple network configurations defined (APNs), and set/undo each configuration when different topologies are needed

13. Université d’Ottawa University of Ottawa Web Services: LP-WS (III) Satellite Antenna OC-192 STM-64 Sensor T1/E1 Access Point GbE 802.1q IEEE 802.11b/g Server Fiber Channel GMPLS Cloud LP-WS “A lightpath represents a link between a pair of network enabled endpoints”

14. Université d’Ottawa University of Ottawa User Roles Physical Network (PN) Admin –Responsible for provisioning the network and creating network resources (lightpath and interface Web Services) for APNs to use APN Admin –Receives APN Resource Lists from PN or APN Admins –Responsible for creating the APN network configurations for the users Can partition/bond network resources –Can give or sublease its resources to other APNs Users –Can use APN configurations that were created by the APN Admin –Cannot modify network topologies

15. Université d’Ottawa University of Ottawa Security: Implementation Architecture NE-WS (Axis) APN-WS (BPEL) GUI (Java) (User to Business) (Business to Business) Certificate Authority (UCLP.CA) CRC UCLP Access Policies SOAP Messages X.509 DN: CRC- user-A X.509 DN: CANARIE UAA Certificates involved X.509 DN: CRC UAA User CRC-user-A CRC UAACANARIE UAA X.509 DN: CRC UAA Axis Handler BPEL customized Handler LP-WS (BPEL) Provider Service Container User Service Container

16. UCLP Interoperability Issues We must be able to import and export Lightpaths and Interface web services between UCLP systems –Agree on a common PortType for a proxy web service for that will be used when calling imported resources This common PortType is called the Common Data Model (CDM) Need 2 proxy webservices; 1for lightpaths, 1 for Interfaces –The proxy will be used to translate from the CDM to our own implementations –Must also agree on security conventions for accessing the resources As a minimum, we need to be able to import resources from other UCLP implementations and use them to make APNs, LPOs, etc. –Partitioning and bonding imported resources from other UCLP systems is not required at this point but will be implemented at later time In our opinion, semantic techniques and the tools are not fully mature so it was decided not to use them for UCLP interoperability. It would also take too much time for each UCLP team to overcome the learning curve involved –Implementing a Proxy web service with the CDM is the quickest and easiest way to support interoperability Can this Work be done within the GHPN –Like any other W3C community : Math, BIO, Finance Consensus WS- Network Service? …..

17. Contact Information Contact Information: Fundació i2CAT Nexus II Building c/ Jordi Girona 29 08034 Barcelona Tel. +34.93.413.75.80 Fax: +34.93.413.75.81 www.i2cat.net fundacio@i2cat.net Sergi.figuerola@i2cat.net www.uclp.ca http://grid2.canarie.ca/wiki/index.php/UCLPv2 UCLPv2 info: