1. Points of pain Campus vs backbone Bill St. Arnaud bill.st.arnaud@canarie.ca

2. Backbone operator perspective >NB: CANARIE operates a very small IP backbone – Our major focus is operating a “substrate” network to support a number of virtual lighpath networks – APNs >Many of our departments and users on campuses have multiple independent connections to CA*net 4 and other networks – Medical-health-HIPAA – Physics – Astronomy – Various Grids – backplane and frontplane connection – Distributed campus networks >We are seeing many APNs dedicated to specific community of interests which extend from user desktop to desktop right across the country

3. Canada HEPnet APN UoToronto Physics Tier 2 UoVictoria Physics Tier 2 TRIUMF Tier 1 CERN Tier 0 Amsterdam New York Chicago Toronto Vancouver Victoria FERMI Tier 1 Brookhaven Tier 1 UBC Physics UA Physics UoT Physics Carleton Physics UdM Physics CA*net 4 Edmonton Ottawa Geneav 10G Lightpath WS TRIUMF APN UoT APN UoV APN 1G Interface WS 5G Interface WS External links or APNs Note: Typical View on TRIUMF UCLP GUI Montreal

4. RAL LHC Tier 1 Centre Geant / SuperJanet4 / TVN Access (2*1Gbits/s) Netscreen Firewall 8Gb/s UKLIGHT (2*1Gbits/s) “Lightpath” to CERN via NetherLight Router A Router C Router B UKLight Access Router RAL Site Site Access Router R-PoP Sites Source: Robin Tasker Networks and Communications CCLRC Parallel Campus Production & Research Networks- Rutherford

5. Production & Research Networks at UCL Source: Andrew Kerl UCL

6. Points of pain- RONs and NOCs >Many of our users have direct optical connection to the backbone with NICs using long range GBICs >RONs and campuses want to “manage” the link and insert devices in the middle of the all optical link which makes it less reliable and poorer throughput >First point of contact is not local IT dept >Certificate authority and authorizing server is often off campus for many campus research groups – HIPAA – Grids – APNs >Federations good idea – but really hard to implement

7. Virtual CIO and virtual NOC >Increasingly networks and security issues are neither geographical or local domain – i.e. Jacob Forum >Outside organizations are setting standards within “your” network – In fact it may be no longer “yours” >CERN NOC is setting standards on OS, IdM, routing, network connectivity at campuses >Look at Skype security standards – Skype sits above the “network” >The “old network” is becoming increasing irrelevant >The pervasive Internet is coming because of SOA & Mashups – Google, Skype, Cisco IPICS, SOA etc