1. Sponsored by the National Science Foundation 1 Lab Zero – March 14, 2014 Are you ready for the tutorial? 1.Grab a Worksheet and instructions 2.Did you do the pre-work? A. Do you have an account? B. Have you installed the tools? * SSH * omni Do you have an account? GENI Portal is at: http://portal.geni.net Jane Jane Doe

2. Sponsored by the National Science Foundation Lab Zero: A First Experiment using GENI

3. Sponsored by the National Science Foundation 3 Lab Zero – March 14, 2014 Hands On Exercise Do a Simple Experiment in GENI Reserve two VMs connected at Layer 2 Layer 2 VM

4. Sponsored by the National Science Foundation 4 Lab Zero – March 14, 2014 Understand GENI Terminology slice project aggregate experimenter resource

5. Sponsored by the National Science Foundation 5 Lab Zero – March 14, 2014 Use the GENI Portal and Flack

6. Sponsored by the National Science Foundation 6 Lab Zero – March 14, 2014 Experiment Workflow Part I: Design/Setup Part II: Execute Part III: Finish

7. Sponsored by the National Science Foundation 7 Lab Zero – March 14, 2014 The GENI Portal is… A web-based tool for experimenters to manage experimenters, projects, and slices. Includes simple tools to reserve resources. More to come in the future.

8. Sponsored by the National Science Foundation 8 Lab Zero – March 14, 2014 Flack is … A graphical user interface (GUI) for: –designing topologies in GENI –reserving resources in GENI

9. Sponsored by the National Science Foundation 9 Lab Zero – March 14, 2014 Experimenter An experimenter is a researcher who uses GENI resources Different types of experimenters have different roles and permissions: Advisor vs Grad Student Teacher vs TA vs Student Experimenter

10. Sponsored by the National Science Foundation 10 Lab Zero – March 14, 2014 Projects Projects organize research in GENI Project Lead Members Slice Projects contain both people and their experiments A project is led by a single responsible individual: the project lead Today we will use a project created for this class

11. Sponsored by the National Science Foundation 11 Lab Zero – March 14, 2014 Creating Projects Only project leads can create projects. Project names are public, unique and permanent A project may contain many experimenters; an experimenter may be a member of many projects Projects have an optional expiration (e.g. for classes, tutorials) For today’s exercise we will use a project for this class

12. Sponsored by the National Science Foundation 12 Lab Zero – March 14, 2014 Experiment Workflow Part I: Design/Setup Part II: Execute Part III: Finish

13. Sponsored by the National Science Foundation 13 Lab Zero – March 14, 2014 Part I: Establish Management Environment 1 Pre-work: Design your experiment 2.1 Pre-work: Create a GENI account 2.2 Pre-work: Project lead (aka professor) adds you to project Project Name: 2.3 Generate and Download SSH Keypair Tutorial instructions: http://groups.geni.net/geni/wiki/GENIExperimenter/Tutorials/GettingStarted_PartI/Procedure

14. Sponsored by the National Science Foundation 14 Lab Zero – March 14, 2014 Creating a GENI account GENI Portal is at: https://portal.geni.net Instructions for creating an account are: http://groups.geni.net/geni/wiki/SignMeUp

15. Sponsored by the National Science Foundation 15 Lab Zero – March 14, 2014 Creating a GENI account GENI Portal is at: https://portal.geni.net Anyone with an account at a supported identity provider (usually your school or employer) can log in, but they will have no privileges If you don’t have such an account, we will make you an account at the GPO Identity Provider You must be a member of a project to do anything interesting

16. Sponsored by the National Science Foundation 16 Lab Zero – March 14, 2014 InCommon For many experimenters: no new passwords familiar login screens Leverage InCommon for single sign-on authentication Experimenters from 304 educational and research institutions have InCommon accounts

17. Sponsored by the National Science Foundation 17 Lab Zero – March 14, 2014 Using SSH with a public/private keypair Login to all GENI compute resources using ssh with a private key 1.The public key is loaded onto the node when you reserve resources. 2.You provide the private key when you log into the node. There are several ways to offer your private key to ssh. You should never be prompted for a password to log into a GENI compute node. If you are, something has always gone wrong. No password!

18. Sponsored by the National Science Foundation 18 Lab Zero – March 14, 2014 SSH with a password ssh Experimenter local> ssh jdoe@remote.edu jdoe@remote.edu’s password: ######## Welcome to remote! jdoe@remote> exit local> ssh jdoe@remote2.edu jdoe@remote2.edu’s password: ######## Hash of password stored on each remote machine User enters password once for each connection to each machine *nix-based system (Windows behavior may vary)

19. Sponsored by the National Science Foundation 19 Lab Zero – March 14, 2014 SSH with a private key Experimenter local> ssh-add ~/.ssh/id_rsa Enter passphrase for ~/.ssh/id_rsa: ######## local> ssh jdoe@remote.edu Welcome to remote! jdoe@remote> exit local> ssh jdoe@remote2.edu Welcome to remote2! jdoe@remote2> exit local> ssh jdoe@remote3.edu Welcome to remote3! jdoe@remote3> exit ssh Public key is stored on each remote machine User enters passphrase to unlock private key for all connections to all machine Private key is stored only on local machine *nix-based system (Windows behavior may vary)

20. Sponsored by the National Science Foundation 20 Lab Zero – March 14, 2014 Expiration and renewal slice expiration time ≤ project expiration time each resource expiration time ≤ slice expiration time each resource expiration time ≤ aggregate’s max expiration project slice resource (optional) project expiration time slice expiration time resource expiration time now In general, to extend the lifetime of your resource reservation, you must renew the slice and all resources resource

21. You are here Projects Slices Log Messages HelpProfile Tools Map

22. 2 Login Join Project Generate SSH Keys

23. On your local machine… > mv ~/Downloads/id_geni_ssh_rsa ~/.ssh/. > chmod 600 ~/.ssh/id_geni_ssh_rsa > ssh-add ~/.ssh/id_geni_ssh_rsa 2

24. Sponsored by the National Science Foundation 24 Lab Zero – March 14, 2014 Resource A resource is a piece of infrastructure A resource can be real or virtual. Resource specifications (aka. RSpecs) are used to describe and request resources. Examples: Compute: computer vs virtual machine (VM) Wireline Network: VLAN or OpenFlow Wireless: WiMAX

25. Sponsored by the National Science Foundation 25 Lab Zero – March 14, 2014 Aggregate An aggregate manages a set of reservable resources Aggregates include: GENI racks OpenFlow WiMAX InstaGENI RackExoGENI Rack

26. Sponsored by the National Science Foundation 26 Lab Zero – March 14, 2014 Slice A slice is a container of resources used in an experiment. A slice can contain resources from one or more aggregates A slice is in a single project A slice has an expiration Slice names are public, reusable and unique (within a project)

27. Sponsored by the National Science Foundation 27 Lab Zero – March 14, 2014 Experimenter (aka Student) Putting it all together slice aggregate project Member: Lead: Experimenter (aka Professor) Layer 2 resource

28. Sponsored by the National Science Foundation 28 Lab Zero – March 14, 2014 slice Part I continued: Obtain Resources 3.1 Create a slice 3.2 (optional) Renew your slice 3.3 Reserve two VMs at on aggregate 3.4 Check Whether VMs are Ready to be Used Layer 2 VM

29. 3.1 Create Slice

30. 3.2 Extend slice expiration

31. 3.3 Launch Flack

32. Launch Flack usernameslice name all available aggregates 3.3

33. Draw two VMs connected by a link 3.3

34. Change names of VMs 3.3

35. Set IP and mask of interfaces

36. Reserve resources 3.3

37. Resources are READY!!! 3.4

38. Sponsored by the National Science Foundation 38 Lab Zero – March 14, 2014 Experiment Workflow Part I: Design/Setup Part II: Execute Part III: Finish

39. Sponsored by the National Science Foundation 39 Lab Zero – March 14, 2014 client eth___ 10.1.1.1 ___.___.___.___ server eth___ 10.1.1.2 ___.___.___.___ Data i/f Control i/f Data i/f Control i/f Internet Control plane switch Data plane switch GENI Rack

40. Sponsored by the National Science Foundation 40 Lab Zero – March 14, 2014 Part II: Execute Experiment 4.1 Login to nodes (two nodes: client & server) 5 Execute experiment 5.1 Send IP traffic 5.2 Install and use iperf 5.3 Bring down the server’s data interface 5.4 Bring down the server’s control interface 6.1 Logout of nodes Internet Data Interfaces Control Interfaces ssh Layer 2 Experimenter serverclient

41. Login 4.1

42. $ sudo ifconfig $ ping 10.1.1.2 –c 5 # server data i/f $ ping 172.17.1.9 –c 5 # server ctrl i/f $ sudo ifconfig server client 5.1

43. Worksheet Project Name:GEC20 Slice Name: lab0 5.1 client eth___ 10.1.1.1 ___.___.___.___ server eth___ 10.1.1.2 ___.___.___.___ Data i/f Control i/f Data i/f Control i/f Internet Control plane switch Data plane switch GENI Rack

44. # do one of: $ sudo yum install iperf #IG $ sudo apt-get install iperf #EG $ hash # server data i/f $ iperf –c 10.1.1.2 … # server ctrl i/f $ iperf –c 172.17.2.4 … # do one of: $ sudo yum install iperf $ sudo apt-get install iperf #EG $ hash # start an iperf server $ iperf -s server client 5.2

45. What is the bandwidth of the data link? Why? What is the bandwidth of the control link? Why? client eth___ 10.1.1.1 ___.___.___.___ server eth___ 10.1.1.2 ___.___.___.___ Data i/f Control i/f Data i/f Control i/f Internet Control plane switch Data plane switch GENI Rack

46. Demo here

47. # ping server data i/f $ ping 10.1.1.2 … # ping server ctrl i/f $ ping 172.17.2.4 … $ exit # For ExoGENI only do: $ sudo service neuca stop # bring down data i/f $ sudo ifconfig eth12541 down # bring down ctrl i/f $ sudo ifconfig eth999 down server client 5.35.4

48. Demo here

49. 5.4 When you bring down the data interface, the destination should become unreachable. Why? client eth___ 10.1.1.1 ___.___.___.___ server eth___ 10.1.1.2 ___.___.___.___ Data i/f Control i/f Data i/f Control i/f Internet Control plane switch Data plane switch GENI Rack

50. 5.4 After you bring down the control interface, the destination becomes unreachable. Why? client eth___ 10.1.1.1 ___.___.___.___ server eth___ 10.1.1.2 ___.___.___.___ Data i/f Control i/f Data i/f Control i/f Internet Control plane switch Data plane switch GENI Rack

51. 5.4 After you bring down the control interface, your ssh session should immediately hang. Why? client eth___ 10.1.1.1 ___.___.___.___ server eth___ 10.1.1.2 ___.___.___.___ Data i/f Control i/f Data i/f Control i/f Internet Control plane switch Data plane switch GENI Rack

52. Sponsored by the National Science Foundation 52 Lab Zero – March 14, 2014 You are trying to log in to a compute node on GENI using SSH and can’t. Which are possible explanations? a)You entered the wrong password b)You didn’t offer the private key that matches the public key c)The public key wasn’t loaded onto the node d)Permissions on the private key are too permissive e)(b), (c), and (d)

53. Sponsored by the National Science Foundation 53 Lab Zero – March 14, 2014 Experiment Workflow Part I: Design/Setup Part II: Execute Part III: Finish

54. Delete Resources 7

55. Sponsored by the National Science Foundation 55 Lab Zero – March 14, 2014 Part III: Finish Experiment When your experiment is done, you should always release your resources. –Normally this is when you would archive your data –Delete your resources at each aggregate slice project aggregate experimenter resource

56. Sponsored by the National Science Foundation 56 Lab Zero – March 14, 2014 Congratulations! You have… –Run your first GENI Experiment! –Exercised your knowledge of GENI terminology –Used the GENI Portal and Flack

57. Sponsored by the National Science Foundation 57 Lab Zero – March 14, 2014 Welcome to GENI!

58. Sponsored by the National Science Foundation Working With Collaborators

59. Sponsored by the National Science Foundation 59 Lab Zero – March 14, 2014 Project Membership example Projects have 1 Lead and any number of Admins, Members, and Auditors http://groups.geni.net/geni/wiki/GENIConcepts#Project Typical Class Expiration Typical Research Project

60. Sponsored by the National Science Foundation 60 Lab Zero – March 14, 2014 Working with multiple members in a slice Members of all slices in a project: Project Leads (Professor) Project Admins (Post-docs, researchers) Other can be added manually Research Asst Slice Lead Post-Doc Slice Member Professor Slice Admin http://groups.geni.net/geni/wiki/GENIConcepts#Slice

61. Sponsored by the National Science Foundation 61 Lab Zero – March 14, 2014 Slice Access Being a member of a slice means you can act on a slice: –Add resources –Check status –Delete resources –Renew resources With any tool!

62. Sponsored by the National Science Foundation 62 Lab Zero – March 14, 2014 To ensure access in collaborator’s resources: Option 1: Make resource reservation from Portal or omni Option 2: Use a common public key Add slice member’s accounts to existing resources: $ omni -V 3 poa SLICE geni_update_users --useSliceAggregates –-useSliceMembers Alternatively… $ addMemberToSliceAndSlivers myslice username Slice Access: Logging in to resources Slice membership does not guarantee ability to login to resources! Only works on InstaGENI/ProtoGENI

63. Sponsored by the National Science Foundation 63 Lab Zero – March 14, 2014 Populating a Project 1.Member-initiated Each experimenter asks to join a project, approval needed Typical for Research projects 1.Admin-initiated Project Lead/Admin bulk-adds experimenters Typical for Classrooms or Tutorials

64. Sponsored by the National Science Foundation 64 Lab Zero – March 14, 2014 Project and Slice Roles Create project Modify project & manage membership Create sliceView project Project Lead ✔✔✔✔ Admin ✔✔✔ Member ✔✔ Auditor ✔ Manage slice membership Act on sliceView sliceAccount/ keys loaded on slice Slice Lead ✔✔✔✔ Admin ✔✔✔✔ Member ✔✔✔ Auditor ✔✔ http://groups.geni.net/geni/wiki/ProjectSlicesRoles