Bandwidth on Demand update Hans Trompert, Peter Hinrich, Gerben van Malenstein Oslo, Norway – September 17, 2012 EVN-NREN Meeting

One or more network services on a single port SURFnet6: Single Service Port (SSP) -One network service, one port -Currently used for SURFinternet & SURF-lightpaths SURFnet7: Multi Service Port (MSP) -Multiple network services on a single port -Efficient use of network interfaces 2

Multiple Service Port Connected institution No extra equipment No Patching No Invoice SURFnet7 Accessible 3

Multiple Service Port Connected institution SURFnet7 4 A 5 Gbit/s B 2 Gbit/s C 1 Gbit/s

BoD in SURFnet7 NOC engineerApplication User NSI Inter Domain GUI API BoD SURFnet7 NMS SURFconext Identity Provider Group Provider GUI API 5

Teams and Ports NOC Engineers BoD Admins Users NOC Engineer Team Institute A Admin Team User Team 1 Physical Ports Institute A BoD Unallocated Physical Ports defines Institute B Admin Team User Team 2 Physical Ports Institute B Virtual Ports Team 1 Virtual Ports Team 2 6

Virtual Port Request 7

xx 8

NMS VLAN 50 VLAN 50 VLAN 1062 VLAN 1062 Physical Port BW Port X Port Y Fixed IP services Fixed LP services VLAN 11 Port X Virtual Port Team 1 Max BW Port Y Port X NOC engineer marks port for dynamic use Physical Ports Port Y NOC engineer asigns port to institute A BoD Unallocated Physical Ports Available BW BoD Port Y Available BW BoD Port ID + Signaling Type + Available Bandwidth is learned through NBI Physical Port BW Available BW BoD = total BW physical port – BW existing static services Available BW BoD BW + VLAN set by BoD Admin A VLAN 33 VLAN 33 Institute A Institute B Available BW BoD Fixed IP services Bandwidth Allocation NOC engineer asigns port to institute B Port X Port Y Port X VLAN 3 Port Y Max BW BW + VLAN set by BoD Admin B VLAN 23 Port X Virtual Port Team 2 Max BW VLAN 1 Port Y Max BW

BoD Administrators Authentication through SURFconext –Federated institutes use own IdP –Non-Federated institutes use SURFguest ( Authorization through SURFconext –Rights are based on group ( membership –All BoD administrators from the same institute are member of the same group –The group belonging to the institute is administered in BoD –The administrators of a group are reachable through one verified address In BoD an administrator can: –View the physical ports of his institute –Accept or deny new virtual port requsts from users –View, edit and remove the virtual ports that are mapped on his physical ports –View the teams that are using his ports –View and cancel the reservations that were made on his ports Note: As an administrator you are also automatically an user in BoD 10

BoD Users Authentication through SURFconext –Federated through the IdP of its home institute –Or non-Federated access using SURFguest ( Authorization through SURFconext –Rights are based on group ( membership –Users can be invited to join a group by the group administrator In BoD an user can: –View the teams he is a member of –Request new virtual port from a BoD providing institute –View and the virtual ports belonging to his team(s) –Create a reservation between two virtual ports –View current, future and past reservations –Manipulate current and future reservations Currently only cancel reservation In the future also modify reservation (extend end time, modify bandwidth) 11

BoD API (for advanced users) API based on the Open Grid Forum Network Service Interface –In the SURFnet6 OpenDRAC interface: NSI Connection Service 1.0Rio (Automated GOLE Oct 2011) NSI Connection Service 1.0SC (in production since 2Q2012) –In the SURFnet7 BoD interface: NSI Connection Service 1.0SC available October 2012 NSI Connection Service 2.0 expected to be available 1Q2013 NSI Topology Exchange 1.0 expected to be available 1Q2013 SURFnet NSI Requester Client for debugging purposes –For the moment available at 12

Users NEXPReS (JIVE, ASTRON) DAS-4/ASCI GoNL IBIS SARA BoD user group Selected users involved in development of GUI 13 SURFnet - We make innovation work ICT departmentsSURFnet NOC

W hans.trompert[at]surfnet.nl gerben.vanmalenstein[at]surfnet.nl Creative Commons “Attribution” license: