| BoD over GÉANT (& NRENs) for FIRE and GENI users GENI-FIRE Workshop Washington DC, 17th-18th Sept 2015 Michael Enrico CTO (GÉANT Association)

| The leading collaboration on network and related infrastructure and services for the benefit of research and education, contributing to Europe’s economic growth and competitiveness A first website with basic information is at 2 TERENA and DANTE have joined forces!

| One organisation comprising TERENA and DANTE staff, activities and ethos: Networking. Services. People. We are owned by our core membership of: 36 National Members (European NRENs) 1 Representative Member (NORDUnet - on behalf of 5 Nordic NRENs) Associates also welcome: including commercial organisations and multi-national research infrastructures and projects 3 TERENA and DANTE have joined forces!

| Europe’s 500Gbps Network - e-Infrastructure for Horizon 2020 Latest transmission and switching technology Routers with 100Gbps capability Optical transmission platform designed to provide 500Gbps super-channels 12,000km of dark fibre Over 100,000km of leased capacity (including transatlantic connections) 28 main sites covering European footprint Together with Europe´s NRENs, GÉANT connects 50M users across 10,000 European institutions GÉANT connects 65 countries outside of Europe, reaching all continents through international partners

| Transatlantic Links Amsterdam Boston Chicago NY Wash London Frankfurt Paris Geneva ACE/3x10G EEX/ESNET/2x100G EEX/ESNET/100G EEX/ESNET/40G ACE/10G LHC/NRENs/10G ANA/Internet2/100G ANA/NORDUNET/100G GÉANT/100G

| Transatlantic Links (more detail) US Peer Transatlantic path peering locations. G = GEANT global L = LHCONE Washington- London 100G (Internet2/ANA) Washington – Frankfurt nx10G* (ACE) New York – Amsterdam 100G (NORDUnet /ANA) New York – Paris 100G (GEANT) Boston- Amsterdam 40G (ESnet) New York –London 2 x 100G Diverse (ESnet) Washington – Geneva 100G (ESnet) Internet 2GG/LG ESnetG/LL CANARIEG/L**G/L *Where n currently = 3, will reduce to 2 in October. **Additional peerings with CANARIE planned for 10/2015 Amsterdam-New York 10G (ACE), not shown will be ceased in Q NREN Owned Geneva-Chicago (not shown) to cease Q once circuits migrated away

| BoD in Europe Today (using AutoBAHN)

| A single AutoBAHN instance deployed in a domain consists of three main software components: InterDomainManager (IDM) Domain Manager (DM) Technology Proxy (TP) The following components need to be deployed once for the whole AutoBAHN environment: Topology Service Web GUI - graphical user interface Access points AutoBAHN Client Portal – web i/f External API (web service) for integrating custom application Integration Support for Network Service Interface (OGF NSI standard) v2 Federated with AutoGOLES BoD in Europe Today (cont)

| BoD in Europe Today (limited availability) But currently no hard BW reservation!

| Specific questions (1/2) How does GÉANT see the policies to let external parties reserve BW through BoD? e.g. if we develop a component ('aggregate manager') on top of BoD, can we let US people reserve bandwidth between (e.g. Cloudlab in Utah and iMinds)? Technically it is possible. Note, no hard BW reservation at present (trust us!) If sufficient customer demand is present and it can cost effectively be done (these two things are required for the business case), then true BW reservation will be planned in the service roadmap. Either way any circuit reservations will be subject to existing AUPs, including those currently being formalised with both Internet2 and ESnet (e.g. in respect of use of ANA and EEX). We welcome the opportunity to support the GENI-FIRE community in building their aggregate manager.

| Specific questions (2/2) Is GÉANT itself planning to implement something on top of BoD (with a more or less standard API), or offering NSI signalling API, and is this GÉANT internal only, or e.g. end-to- end internationally (which raises then again the first question on policies who can set up such connections) NSI interface to AutoBAHN already present MAY “refactor” BoD to single domains each exposing NSI, allowing approved parties to create circuits across the GÉANT network, for example European NRENs. International circuit creation does raise policy and AUP questions however we are confident these can be overcome with more dialogue to understand international partner requirements.

| A note on AUP evolution Will these get in the way of GENI-FIRE collaboration? NO! GÉANT doesn’t really operate a formal AUP We rely on NREN AUPs to act as “filters” against unsuitable traffic (e.g. commercial-commercial transit) Most European NRENs have operated such AUPs Most do not preclude access by commercial entities provided that research is being conducted There are signs that NRENs are dropping their AUPs and relying on AUPs of their connected institutions

| (For completeness) “Alternatives” to BoD MD-VPN (based on MPLS with BGP-LU) As used by XIFI/FI-LAB AutoGOLEs (excluding GÉANT Open)

| 14 Thank you and any questions