ESnet4: Networking for the Future of DOE Science ESnet R&D Roadmap Workshop, April 23-24, 2007

1

ESnet4: Networking for the Future of DOE

ScienceESnet R&D Roadmap Workshop, April 23-24, 2007

William E. Johnston

ESnet Department Head and Senior ScientistLawrence Berkeley National Laboratory

[email protected], www.es.net

mailto:[email protected]

http://www.es.net/

2

ESnet is an important, though somewhat specialized, part of the US Research and Education infrastructure

• The Office of Science (SC) is the single largest supporter of basic research in the physical sciences in the United States, … providing more than 40 percent of total funding … for the Nation’s research programs in high-energy physics, nuclear physics, and fusion energy sciences. (http://www.science.doe.gov)

• SC will supports 25,500 PhDs, PostDocs, and Graduate students, and half of the 21,500 users of SC facilities come from universities

• Almost 90% of ESnet’s 1+Petabyte/month of traffic flows to and from the R&E community

http://www.science.doe.gov/

3

DOE Office of Science and ESnet – the ESnet Mission

• ESnet’s primary mission is to enable the large-scale science that is the mission of the Office of Science (SC) and that depends on:– Sharing of massive amounts of data– Supporting thousands of collaborators world-wide– Distributed data processing– Distributed data management– Distributed simulation, visualization, and computational

steering– Collaboration with the US and International Research and

Education community

• ESnet provides network and collaboration services to Office of Science laboratories and many other DOE programs in order to accomplish its mission

4

What ESnet Is• A large-scale IP network built on a national circuit

infrastructure with high-speed connections to all major US and international research and education (R&E) networks

• An organization of 30 professionals structured for the service

• An operating entity with an FY06 budget of $26.6M

• A tier 1 ISP (direct peerings will all major networks)

• The primary DOE network provider– Provides production Internet service to all of the major DOE Labs* and

most other DOE sites– Based on DOE Lab populations, it is estimated that between 50,000 -

100,000 users depend on ESnet for global Internet access• additionally, each year more than 18,000 non-DOE researchers from

universities, other government agencies, and private industry use Office of Science facilities

* PNNL supplements its ESnet service with commercial service

Office of Science US CommunityDrives ESnet Design for Domestic Connectivity

Institutions supported by SC Major User Facilities

DOE Multiprogram LaboratoriesDOE Program-Dedicated LaboratoriesDOE Specific-Mission Laboratories

Pacific NorthwestPacific NorthwestNational LaboratoryNational Laboratory Ames LaboratoryAmes Laboratory

Argonne National Argonne National LaboratoryLaboratory

BrookhavenBrookhavenNationalNational

LaboratoryLaboratory

Oak RidgeOak RidgeNational National

LaboratoryLaboratoryLos AlamosLos Alamos

National National LaboratoryLaboratory

Lawrence Lawrence LivermoreLivermoreNational National


LawrenceLawrenceBerkeley Berkeley NationalNational


FermiFermiNationalNational

Accelerator Accelerator LaboratoryLaboratory

PrincetonPrincetonPlasmaPlasmaPhysicsPhysics


Thomas Jefferson Thomas Jefferson National National

Accelerator FacilityAccelerator Facility

NationalNationalRenewable Energy Renewable Energy


StanfordStanfordLinearLinear

Accelerator Accelerator CenterCenter

Idaho National Idaho National LaboratoryLaboratory

General General AtomicsAtomics

SandiaSandiaNational National

LaboratoriesLaboratories

Footprint of Largest SC Data Sharing Collaborators Drives the International Footprint that ESnet Must Support

• Top 100 data flows generate 50% of all ESnet traffic (ESnet handles about 3x109 flows/mo.)• 91 of the top 100 flows are from the Labs to other institutions (shown) (CY2005 data)

7

• An architecture tailored to accommodate DOE’s large-scale science– Move huge amounts of data between a small number of

sites that are scattered all over the world

• Comprehensive connectivity– High bandwidth access to DOE sites and DOE’s primary

science collaborators: Research and Education institutions in the US, Europe, Asia Pacific, and elsewhere

• Full access to the global Internet for DOE Labs– ESnet is a tier 1 ISP managing a full complement of

Internet routes for global access

• Highly reliable transit networking– Fundamental goal is to deliver every packet that is received

to the “target” site

What Does ESnet Provide? - 1

8

• A full suite of network services– IPv4 and IPv6 routing and address space management– IPv4 multicast (and soon IPv6 multicast)– Primary DNS services– Circuit services (layer 2 e.g. Ethernet VLANs), MPLS

overlay networks (e.g. SecureNet when it was ATM based)– Scavenger service so that certain types of bulk traffic can

use all available bandwidth, but will give priority to any other traffic when it shows up

– Prototype guaranteed bandwidth and virtual circuit services


9


• New network services– Guaranteed bandwidth services

• Via a combination of QoS, MPLS overlay, and layer 2 VLANs

• Collaboration services and Grid middleware supporting collaborative science– Federated trust services / PKI Certification Authorities with

science oriented policy– Audio-video-data teleconferencing

• Highly reliable and secure operation– Extensive disaster recovery infrastructure– Comprehensive internal security– Cyberdefense for the WAN

10


• Comprehensive user support, including “owning” all trouble tickets involving ESnet users (including problems at the far end of an ESnet connection) until they are resolved – 24x7x365 coverage– ESnet’s mission is to enable the network based aspects of

OSC science, and that includes troubleshooting network problems wherever they occur

• A highly collaborative and interactive relationship with the DOE Labs and scientists for planning, configuration, and operation of the network– ESnet and its services evolve continuously in direct

response to OSC science needs– Engineering services for special requirements

11

ESnet HistoryESnet0/MFENet mid-1970s-1986

ESnet0/MFENet 56 Kbps microwave and satellite links

ESnet11986-1995

ESnet formed to serve the Office of Science

56 Kbps, X.25 to45 Mbps T3

ESnet21995-2000

Partnered with Sprint to build the first national footprint ATM network

IP over 155 Mbps ATM net

ESnet32000-2007

Partnered with Qwest to build a national Packet over SONET network and optical channel Metropolitan Area fiber

IP over 10Gbps SONET

ESnet42007-2012

Partner with Internet2 and US Research& Education community to build a dedicated national optical network

IP and virtual circuits on a configurable optical infrastructure with at least 5-6 optical channels of 10-100 Gbps each

transitionin progress

TWC

SNLL

YUCCA MT

BECHTEL-NV

PNNLLIGO

INEEL

LANL

SNLAAlliedSignal

PANTEX

ARM

KCP

NOAA

OSTI ORAU

SRS

JLAB

PPPL

Lab DCOffices

MIT

ANL

BNLFNAL

AMES

NREL

LLNL

GA

DOE-ALB

OSC GTNNNSA

International (high speed)10 Gb/s SDN core10G/s IP core2.5 Gb/s IP coreMAN rings (≥ 10 G/s)Lab supplied linksOC12 ATM (622 Mb/s)OC12 / GigEthernetOC3 (155 Mb/s)45 Mb/s and less

NNSA Sponsored (13)Joint Sponsored (3)Other Sponsored (NSF LIGO, NOAA)Laboratory Sponsored (6)

42 end user sites

SINet (Japan)Russia (BINP)CA*net4

FranceGLORIAD (Russia, China)Korea (Kreonet2

Japan (SINet)Australia (AARNet)Canada (CA*net4Taiwan (TANet2)Singaren

ESnet IP core: Packet over

SONET Optical Ring and Hubs

ELP

DC

commercial peering points

MAE-E

PAIX-PAEquinix, etc.

PNW

GPo

P/PA

cific

Wav

e

ESnet3 Today Provides Global High-Speed Internet Connectivity for DOE Facilities and Collaborators (Early 2007)

ESnet core hubs IP

Abilene high-speed peering points with Internet2/Abilene

Abilene

Abile

ne

CERN(USLHCnet

DOE+CERN funded)

GÉANT - France, Germany, Italy, UK, etc

NYC

Starlight

SNV

Abilene

JGILBNL

SLACNERSC

SNV SDN

SDSC

Equinix

SNV

ALB

ORNL

CHI

MRENNetherlandsStarTapTaiwan (TANet2, ASCC)

NA

SAA

mes

AU

AU

SEA

CHI-SL MA

N LA

NAb

ilene

Specific R&E network peersOther R&E peering points

UNM

MAXGPoP

AMPATH(S. America)AMPATH

(S. America)

ESne

t Sc

ienc

e D

ata

Net

wor

k (S

DN

) co

re

R&Enetworks

Office Of Science Sponsored (22)

ATL

NSF/IRNCfunded

Equinix

IARC

13

ESnet is a Highly Reliable Infrastructure

“5 nines” (>99.995%) “3 nines”“4 nines” (>99.95%)

Dually connected sites

Note: These availability measures are only for ESnet infrastructure, they do not include site-related problems. Some sites, e.g. PNNL and LANL, provide circuits from the site to an ESnet hub, and therefore the ESnet-site demarc is at the ESnet hub (there is no ESnet equipment at the site. In this case, circuit outages between the ESnet equipment and the site are considered site issues and are not included in the ESnet availability metric.

14

ESnet is An Organization Structured for the Service

Applied R&D for new network services(Circuit services and end-to-end monitoring)

Network operations and user support(24x7x365, end-to-end problem resolution

Network engineering, routing and network services, WAN security

Science collaboration services(Public Key Infrastructure certification authorities,

AV conferencing, email lists, Web services)

5.5

8.3

7.4

1.5

5.5

3.5

Internal infrastructure, disaster recovery,security

Management, accounting, compliance

Deployment and WAN maintenance

30.7

FTE

(ful

l-tim

e st

aff)

tota

l

15

ESnet FY06 Budget is Approximately $26.6M

Total expenses: $26.6M

Target carryover:

$1.0MManagement and

compliance: $0.7M

Collaboration services: $1.6

Internal infrastructure,

security, disaster recovery: $3.4M

Operations: $1.1M

Engineering & research: $2.9M

WAN equipment:

$2.0M

Special projects (Chicago and LI MANs):

$1.2M

Total funds: $26.6M

SC R&D: $0.5M

Carryover: $1MSC Special

Projects: $1.2M

Circuits & hubs: $12.7M

SC operating:$20.1M

Other DOE: $3.8M

Approximate Budget Categories

16

Planning the Future Network - ESnet4There are many stakeholders for ESnet

1. SC programs– Advanced Scientific Computing Research– Basic Energy Sciences– Biological and Environmental Research– Fusion Energy Sciences– High Energy Physics– Nuclear Physics– Office of Nuclear Energy

2. Major scientific facilities– At DOE sites: large experiments, supercomputer centers, etc.– Not at DOE sites: LHC, ITER

3. SC supported scientists not at the Labs (mostly at US R&E institutions)

4. Other collaborating institutions (mostly US, European, and AP R&E)

5. Other R&E networking organizations that support major collaborators– Mostly US, European, and Asia Pacific networks

6. Lab operations (e.g. conduct of business) and general population7. Lab networking organizations

These accountfor 85% of allESnet traffic

17

Planning the Future Network - ESnet4• Requirements of the ESnet stakeholders are primarily

determined by1) Data characteristics of instruments and facilities that

will be connected to ESnet• What data will be generated by instruments coming on-line over the next

5-10 years?• How and where will it be analyzed and used?

2) Examining the future process of science• How will the processing of doing science change over 5-10 years?• How do these changes drive demand for new network services?

3) Studying the evolution of ESnet traffic patterns• What are the trends based on the use of the network in the past 2-5

years?• How must the network change to accommodate the future traffic patterns

implied by the trends?

18

(1) Requirements from Instruments and Facilities

• Advanced Scientific Computing Research– National Energy Research Scientific

Computing Center (NERSC) (LBNL)*– National Leadership Computing Facility

(NLCF) (ORNL)*– Argonne Leadership Class Facility (ALCF)

(ANL)*• Basic Energy Sciences

– National Synchrotron Light Source (NSLS) (BNL)

– Stanford Synchrotron Radiation Laboratory (SSRL) (SLAC)

– Advanced Light Source (ALS) (LBNL)*– Advanced Photon Source (APS) (ANL)– Spallation Neutron Source (ORNL)*– National Center for Electron Microscopy

(NCEM) (LBNL)*– Combustion Research Facility (CRF)

(SNLL)*

• Biological and Environmental Research – William R. Wiley Environmental Molecular

Sciences Laboratory (EMSL) (PNNL)*– Joint Genome Institute (JGI)– Structural Biology Center (SBC) (ANL)

• Fusion Energy Sciences– DIII-D Tokamak Facility (GA)*– Alcator C-Mod (MIT)*– National Spherical Torus Experiment (NSTX)

(PPPL)*– ITER

• High Energy Physics– Tevatron Collider (FNAL)– B-Factory (SLAC)– Large Hadron Collider (LHC, ATLAS, CMS)

(BNL, FNAL)*• Nuclear Physics

– Relativistic Heavy Ion Collider (RHIC) (BNL)*– Continuous Electron Beam Accelerator

Facility (CEBAF) (JLab)*

DOE SC Facilities that are, or will be, the top network users

*14 of 22 are characterized by current case studies

19

The Largest Facility: Large Hadron Collider at CERNLHC CMS detector

15m X 15m X 22m,12,500 tons, $700M

human (for scale)

20

(2) Requirements from Examiningthe Future Process of Science

• In a major workshop [1], and in subsequent updates [2], requirements were generated by asking the science community how their process of doing science will / must change over the next 5 and next 10 years in order to accomplish their scientific goals

•Computer science and networking experts then assisted the science community in– analyzing the future environments– deriving middleware and networking requirements needed to

enable these environments

•These were complied as case studies that provide specific 5 & 10 year network requirements for bandwidth, footprint, and new services

Science Networking Requirements Aggregation SummaryScience Drivers

Science Areas / Facilities

End2End Reliability

Connectivity Today End2End

Band width

5 years End2End

Band width

Traffic Characteristics

Network Services

Magnetic Fusion Energy

99.999%

(Impossible without full

redundancy)

• DOE sites

• US Universities

• Industry

200+ Mbps

1 Gbps • Bulk data

• Remote control

• Guaranteed bandwidth

• Guaranteed QoS

• Deadline scheduling

NERSC and ACLF

- • DOE sites

• US Universities

• International

• Other ASCR supercomputers

10 Gbps 20 to 40 Gbps

• Bulk data

• Remote control

• Remote file system sharing


• Guaranteed QoS

• Deadline Scheduling

• PKI / Grid

NLCF - • DOE sites

• US Universities

• Industry

• International

Backbone Band width parity

Backbone band width

parity

• Bulk data

• Remote file system sharing

Nuclear Physics (RHIC)

- • DOE sites

• US Universities

• International

12 Gbps 70 Gbps • Bulk data • Guaranteed bandwidth

• PKI / Grid

Spallation Neutron Source

High

(24x7 operation)

• DOE sites 640 Mbps 2 Gbps • Bulk data

Science Network Requirements Aggregation SummaryScience Drivers

Science Areas / Facilities

End2End Reliability

Connectivity Today End2End

Band width

5 years End2End

Band width

Traffic Characteristics

Network Services

Advanced Light Source

- • DOE sites

• US Universities

• Industry

1 TB/day

300 Mbps

5 TB/day

1.5 Gbps

• Bulk data

• Remote control


• PKI / Grid

Bioinformatics - • DOE sites

• US Universities

625 Mbps

12.5 Gbps in

two years

250 Gbps • Bulk data

• Remote control

• Point-to-multipoint


• High-speed multicast

Chemistry / Combustion

- • DOE sites

• US Universities

• Industry

- 10s of Gigabits per

second

• Bulk data • Guaranteed bandwidth

• PKI / Grid

Climate Science

- • DOE sites

• US Universities

• International

- 5 PB per year

5 Gbps

• Bulk data

• Remote control


• PKI / Grid

High Energy Physics (LHC)

99.95+%

(Less than 4

hrs/year)

• US Tier1 (FNAL, BNL)

• US Tier2 (Universities)

• International (Europe, Canada)

10 Gbps 60 to 80 Gbps

(30-40 Gbps per US Tier1)

• Bulk data

• Coupled data analysis processes


• Traffic isolation

• PKI / Grid

Immediate Requirements and Drivers

23

Tera

byte

s / m

onth

3) These Trends are Seen in Observed Evolution of Historical ESnet Traffic Patterns

ESnet Monthly Accepted Traffic, January, 2000 – June, 2006•ESnet is currently transporting more than1 petabyte (1000 terabytes) per month•More than 50% of the traffic is now generated by the top 100 sites — large-scale science dominates all ESnet traffic

top 100 sites to siteworkflows

R2 = 0.9898

0.0

0.1

1.0

10.0

100.0

1000.0

10000.0

Jan,

90

Jan,

91

Jan,

92

Jan,

93

Jan,

94

Jan,

95

Jan,

96

Jan,

97

Jan,

98

Jan,

99

Jan,

00

Jan,

01

Jan,

02

Jan,

03

Jan,

04

Jan,

05

Jan,

06

ESnet Traffic has Increased by10X Every 47 Months, on Average, Since 1990

Tera

byte

s / m

onth

Log Plot of ESnet Monthly Accepted Traffic, January, 1990 – June, 2006

Oct., 19931 TBy/mo.

Aug., 1990100 MBy/mo.

Jul., 199810 TBy/mo.

38 months

57 months

40 months

Nov., 2001100 TBy/mo.

Apr., 20061 PBy/mo.

53 months

25

Requirements from Network Utilization Observation

• In 4 years, we can expect a 10x increase in traffic over current levels without the addition of production LHC traffic– Nominal average load on busiest backbone links is ~1.5 Gbps today– In 4 years that figure will be ~15 Gbps based on current trends

• Measurements of this type are science-agnostic– It doesn’t matter who the users are, the traffic load is increasing

exponentially– Predictions based on this sort of forward projection tend to be

conservative estimates of future requirements because they cannot predict new uses

• Bandwidth trends drive requirement for a new network architecture– New architecture/approach must be scalable in a cost-effective way

Traffic Volume of the Top 30 AS-AS Flows, June 2006(AS-AS = mostly Lab to R&E site, a few Lab to R&E

network, a few “other”)

DOE Office of Science Program

LHC / High Energy Physics - Tier 0-Tier1

LHC / HEP - T1-T2

HEP

Nuclear Physics

Lab - university

LIGO (NSF)

Lab - commodity

Math. & Comp. (MICS)

Tera

byte

s

FNAL -> CERN traffic is comparable to BNL -> CERNbut on layer 2 flows that are not yet monitored for traffic – soon)

Large-Scale Flow Trends, June 2006Subtitle: “Onslaught of the LHC”)

27

Traffic Patterns are Changing Dramatically

• While the total traffic is increasing exponentially

– Peak flow – that is system-to-system – bandwidth is decreasing

– The number of large flows is increasing

1/05

1/06

6/06

2 TB/month 2 TB/month

2 TB/month

2 TB/month

7/05

total traffic, TBy

total traffic,TBy

28

The Onslaught of Grids

Answer: Most large data transfers are now done by parallel / Grid data movers

• In June, 2006 72% of the hosts generating the top 1000 flows were involved in parallel data movers (Grid applications)

• This is the most significant traffic pattern change in the history of ESnet

• This has implications for the network architecture that favor path multiplicity and route diversity

plateaus indicate the emergence of parallel transfer systems (a lot of

systems transferring the same amount of data at the same time)

Question: Why is peak flow bandwidth decreasing while total traffic is increasing?

29

Traffic coming into ESnet = GreenTraffic leaving ESnet = BlueTraffic between ESnet sites% = of total ingress or egress traffic

Traffic notes• more than 90% of all traffic Office of Science• less that 10% is inter-Lab

What is the High-Level View of ESnet Traffic Patterns?ESnet Inter-Sector Traffic Summary, Mar. 2006

Peering Points

Commercial

R&E (mostlyuniversities)

7%

12%

23%

5%

3%

43%

ESnet

~10%Inter-Labtraffic

48%

58%

DOE sites

International(almost entirelyR&E sites)

30

Requirements from Traffic Flow Observations

• Most of ESnet science traffic has a source or sink outside of ESnet– Drives requirement for high-bandwidth peering– Reliability and bandwidth requirements demand that peering be

redundant– Multiple 10 Gbps peerings today, must be able to add more bandwidth

flexibly and cost-effectively– Bandwidth and service guarantees must traverse R&E peerings

• Collaboration with other R&E networks on a common framework is critical• Seamless fabric

• Large-scale science is now the dominant user of the network– Satisfying the demands of large-scale science traffic into the future

will require a purpose-built, scalable architecture– Traffic patterns are different than commodity Internet

31

Changing Science Environment New Demands on Network

Requirements Summary• Increased capacity

– Needed to accommodate a large and steadily increasing amount of data that must traverse the network

• High network reliability– Essential when interconnecting components of distributed

large-scale science

• High-speed, highly reliable connectivity between Labs and US and international R&E institutions– To support the inherently collaborative, global nature of large-

scale science

• New network services to provide bandwidth guarantees– Provide for data transfer deadlines for

• remote data analysis, real-time interaction with instruments, coupled computational simulations, etc.

32

ESnet4 - The Response to the RequirementsI) A new network architecture and implementation strategy

• Rich and diverse network topology for flexible management and high reliability

• Dual connectivity at every level for all large-scale science sources and sinks

• A partnership with the US research and education community to build a shared, large-scale, R&E managed optical infrastructure• a scalable approach to adding bandwidth to the network• dynamic allocation and management of optical circuits

II) Development and deployment of a virtual circuit service • Develop the service cooperatively with the networks that are

intermediate between DOE Labs and major collaborators to ensure and-to-end interoperability

33

• Main architectural elements and the rationale for each element1) A High-reliability IP core (e.g. the current ESnet core) to address

– General science requirements– Lab operational requirements– Backup for the SDN core– Vehicle for science services– Full service IP routers

2) Metropolitan Area Network (MAN) rings to provide– Dual site connectivity for reliability– Much higher site-to-core bandwidth– Support for both production IP and circuit-based traffic– Multiply connecting the SDN and IP cores

2a) Loops off of the backbone rings to provide– For dual site connections where MANs are not practical

3) A Science Data Network (SDN) core for– Provisioned, guaranteed bandwidth circuits to support large, high-speed science data flows– Very high total bandwidth– Multiply connecting MAN rings for protection against hub failure– Alternate path for production IP traffic– Less expensive router/switches– Initial configuration targeted at LHC, which is also the first step to the general configuration that

will address all SC requirements– Can meet other unknown bandwidth requirements by adding lambdas

Next Generation ESnet: I) Architecture and Configuration

34

10-50 Gbps circuitsProduction IP coreScience Data Network coreMetropolitan Area Networks

or backbone loops for Lab accessInternational connections

MetropolitanArea Rings

ESnet Target Architecture: IP Core+Science Data Network Core+Metro Area Rings

New York

Chicag

o

Washington DC

Atla

nta

Seattle

AlbuquerqueSan

Diego

LA

Sunn

yval

e

Denver

Loop off Backbone

SDN Core

IP Core

Primary DOE Labs

Possible hubs

SDN hubs

IP core hubs

international connections international

connectionsinternational connections

international connections

international connectionsin

tern

atio

nal

conn

ectio

ns

Clevela

nd

2700 miles / 4300 km

1625

mile

s / 2

545

km

35

ESnet4• Internet2 has partnered with Level 3 Communications Co.

and Infinera Corp. for a dedicated optical fiber infrastructure with a national footprint and a rich topology - the “Internet2 Network”– The fiber will be provisioned with Infinera Dense Wave Division

Multiplexing equipment that uses an advanced, integrated optical-electrical design

– Level 3 will maintain the fiber and the DWDM equipment– The DWDM equipment will initially be provisioned to provide10 optical

circuits (lambdas - s) across the entire fiber footprint (80 s is max.)

• ESnet has partnered with Internet2 to:– Share the optical infrastructure– Develop new circuit-oriented network services– Explore mechanisms that could be used for the ESnet Network

Operations Center (NOC) and the Internet2/Indiana University NOC to back each other up for disaster recovery purposes

36

ESnet4• ESnet will build its next generation IP network and

its new circuit-oriented Science Data Network primarily on the Internet2 circuits (s) that are dedicated to ESnet, together with a few National Lambda Rail and other circuits– ESnet will provision and operate its own routing and

switching hardware that is installed in various commercial telecom hubs around the country, as it has done for the past 20 years

– ESnet’s peering relationships with the commercial Internet, various US research and education networks, and numerous international networks will continue and evolve as they have for the past 20 years

37

Internet2 and ESnet Optical Node

fiber eastfiber west

fiber north/south

CienaCoreDirector

groomingdevice

Infinera DTN

Direct Optical Connections

to RONs

SDNcore

switch

ESnet

support devices:•measurement•out-of-band access•monitoring•security

support devices:•measurement•out-of-band access•monitoring•…….

M320

IPcore

T640

Network Testbedsvarious equipment and

experimental control plane management systems

dynamicallyallocated and routed waves

(future)

ESnetmetro-areanetworks

Internet2/Level3National Optical Infrastructure

Future access to control plane

RON

38

ESnet4• ESnet4 will also involve an expansion of the multi-

10Gb/s Metropolitan Area Rings in the San Francisco Bay Area, Chicago, Long Island, Newport News (VA/Washington, DC area), and Atlanta– provide multiple, independent connections for ESnet sites

to the ESnet core network– expandable

• Several 10Gb/s links provided by the Labs that will be used to establish multiple, independent connections to the ESnet core– currently PNNL and ORNL

39

Siterouter

Site gateway router

ESnet production IP core hub

Site

Large Science Site

ESnet Metropolitan Area Network Ring Architecture for High Reliability Sites

ESnet managedvirtual circuit servicestunneled through the

IP backbone

Virtual Circuits to Site

T320

Site LAN Site edge router

MAN fiber ring: 2-4 x 10 Gbps channels provisioned initially,with expansion capacity to 16-64

IP core router

ESnet SDNcore hub

ESnetIP core hub

ESnet switch

ESnet managedλ / circuit services

SDN circuitsto site systems

ESnet MANswitch

Virtual Circuit to

Site

SDN corewest

SDNcoreeast IP core

west

IP coreeast

ESnet production IP service

Independentport card

supportingmultiple 10 Gb/s line interfaces

USLHCnetswitch

SDNcore

switch

SDNcore

switch

USLHCnetswitch

MANsiteswitchMANsite

switch

(23)

Atlanta

ESnet4 Roll OutESnet4 IP + SDN Configuration, mid-September, 2007

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash DC

Salt Lake City

Portland

BatonRougeHouston

Pitts.

NYC

Boston

Philadelphia

Indianapolis

Nashville

All circuits are 10Gb/s, unless noted.

ESnet IP coreESnet Science Data Network coreESnet SDN core, NLR linksLab supplied linkLHC related linkMAN linkInternational IP Connections

Raleigh

OC48

(0)

(1)(1(3))

(7)

(17)

(19) (20)

(22)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(5)(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(3)

(21)

(27)

(14)

(24)

(15)

(0)

(1)

(30)

Layer 1 optical nodes at eventual ESnet Points of Presence

ESnet IP switch only hubs

ESnet IP switch/router hubs

ESnet SDN switch hubs

Layer 1 optical nodes not currently in ESnet plans

Lab site

41

(1)

(19)






Lab site

ESnet IP coreESnet Science Data Network coreESnet SDN core, NLR links (existing)Lab supplied linkLHC related linkMAN linkInternational IP Connections

ESnet4 Metro Area Rings, 2007 Configurations

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Raleigh

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash DC

Salt Lake City

Portland

Pitts.

NYC

Boston

Philadelphia

Indianapolis

Atlanta

Nashville

All circuits are 10Gb/s.

West Chicago MAN Long Island MAN

Newport News - Elite

San FranciscoBay Area MAN

BNL32 AoA, NYC

USLHCNet

JLabELITE

ODU

MATP

Wash., DC

FNAL

600 W. Chicago

Starlight

ANL

USLHCNet

OC48(1(3))

(7)

(17)

(20)

(22)(23)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(3)

(21)

(27)

(14)

(24)

(15)

(0) (30)

Atlanta MAN

180 Peachtree

56 Marietta(SOX)

ORNL

Wash., DC

Houston

Nashville

LBNL

SLAC

JGI

LLNLSNLL

NERSC

42

LHC Tier 0, 1, and 2 Connectivity Requirements Summary

Denver

Sunn

yval

e

LA

KC

Dallas

Albuq.

CER

N-1

GÉA

NT-1

GÉA

NT-2

CER

N-2

Tier 1 CentersESnet IP core hubs

ESnet SDN/NLR hubsCross connects ESnet - Internet2

CER

N-3

Internet2/GigaPoP nodes

USLHC nodes

ESnetSDN

Internet2 / RONs

Seattle

FNAL (CMS T1)

BNL (Atlas T1)

New York

Wash DC

Jacksonville

Boise

San DiegoAtlanta

Vancouver

Toronto

Tier 2 Sites

Chicago

ESnetIP Core

TRIUMF (Atlas T1, Canada)

CANARIE

GÉANT

USLHCNet

Virtual Circuits

• Direct connectivity T0-T1-T2

• USLHCNet to ESnet to Abilene

• Backup connectivity

• SDN, GLIF, VCs

Internet2 / RONsInternet2 / RONs

43






Lab site

ESnet IP coreESnet Science Data Network coreESnet SDN core, NLR links (existing)Lab supplied linkLHC related linkMAN linkInternational IP Connections

ESnet4 2007-8 Estimated Bandwidth Commitments

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Raleigh

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash DC

Salt Lake City

Portland

BatonRougeHouston

Pitts.

NYC

Boston

Philadelphia

Indianapolis

Atlanta

Nashville

All circuits are 10Gb/s.

MAX

West Chicago MAN Long Island MAN

Newport News - Elite

San FranciscoBay Area MAN

LBNL

SLAC

JGI

LLNLSNLL

NERSC

JLabELITE

ODU

MATP

Wash., DC

OC48(1(3))

(7)

(17)

(19) (20)

(22)(23)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(5)(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(3)

(21)

(27)

(14)

(24)

(15)

(0)

(1)

(30)

FNAL

600 W. Chicago

Starlight

ANL

USLHCNet

CERN

10

29(total)

2.5 Committed bandwidth, Gb/s

BNL

32 AoA, NYC

USLHCNet

CERN

10

13

5CMS

44

Aggregate Estimated Link Loadings, 2007-08

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash DC

Salt Lake City

Portland

BatonRougeHouston

Pitts.

NYC

Boston

Philadelphia

Indianapolis

Atlanta

Nashville

Existing site supplied circuits

ESnet IP core (1)ESnet Science Data Network coreESnet SDN core, NLR linksLab supplied linkLHC related linkMAN linkInternational IP Connections

Raleigh

OC48

(0)

(1)(1(3))

(7)

(17)

(19) (20)

(22)(23)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(5)(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(3)

(21)

(27)

(14)

(24)

(15)

(0)

(1)

(30)






Lab site

13

12.5

8.5

9

13

2.5 Committed bandwidth, Gb/s

6

9

6

2.52.5

2.5

45

ESnet4 IP + SDN, 2008 Configuration

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Raleigh

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash. DC

Salt Lake City

Portland

BatonRougeHouston

Pitts. NYC

Boston

Philadelphia

Indianapolis

(? )

Atlanta

Nashville(1)

OC48

(0)

(1)

ESnet IP coreESnet Science Data Network coreESnet SDN core, NLR links (existing)Lab supplied linkLHC related linkMAN linkInternational IP ConnectionsInternet2 circuit number(20)

(2)

(1)

(2)

(2)

(1)

(2)

(2)

(2)(1)

(1)

(2)(1)

(1)

(1)

(2)

(1)

(2)

(2)

(1)

(2)(7)

(17)

(19) (20)

(22)(23)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(5)(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(3)

(21) (27)

(14)

(24)

(15)

(30)

(2)






Lab site

ESnet4 2009 Configuration(Some of the circuits may be allocated dynamically from shared a pool.)

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Raleigh

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash. DC

Salt Lake City

Portland

BatonRougeHouston

Pitts. NYC

Boston

Philadelphia

Indianapolis

(? )

Atlanta

Nashville






Lab site

OC48

(0)

(1)

ESnet IP coreESnet Science Data Network coreESnet SDN core, NLR links (existing)Lab supplied linkLHC related linkMAN linkInternational IP ConnectionsInternet2 circuit number(20)

3

2

2

2

2 2

2

3

3

3

2

1

22

2

3

3

3

3

32

(3)

(7)

(17)

(19) (20)

(22)(23)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(5)(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(21)

(27)

(14)

(24)

(15)

(30)

3

47

Aggregate Estimated Link Loadings, 2010-11

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Raleigh

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash. DC

Salt Lake City

Portland

BatonRougeHouston

Pitts. NYC

Boston

Philadelphia

Indianapolis

(>1 )

Atlanta

Nashville






Lab site

OC48

(0)

(1)

ESnet IP core (1)ESnet Science Data Network coreESnet SDN core, NLR links (existing)Lab supplied linkLHC related linkMAN linkInternational IP ConnectionsInternet2 circuit number(20)

5

4

4

4

4 4

4

5

5

5

3

44

5

5

5

5

54

(7)

(17)

(19) (20)

(22)(23)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(5)(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(27)

(14)

(24)

(15)

(30)3

3(3)

(21)

5045

30

15

20

2020 5

20

5

5

20

10

48

ESnet4 2010-11 Estimated Bandwidth Commitments

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Raleigh

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash. DC

Salt Lake City

Portland

BatonRougeHouston

Pitts. NYC

Boston

Philadelphia

Indianapolis

(>1 )

Atlanta

Nashville






Lab site

OC48

(0)

(1)


5

4

4

4

4 4

4

5

5

5

3

44

5

5

5

5

54

(7)

(17)

(19) (20)

(22)(23)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(5)(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(27)

(14)

(24)

(15)

(30)3

3(3)

(21)

2520

25

15

10

2020 5

10

5

5

CMS

BNL

32 AoA, NYC

USLHCNet

CERN

65

40

80

FNAL

600 W. Chicago

Starlight

ANL

USLHCNet

CERN

40

808080100

49

ESnet4 IP + SDN, 2011 Configuration

Denver

Seattle

Sunn

yval

e

LA

San Diego

Chicago

Raleigh

Jacksonville

KC

El Paso

Albuq.Tulsa

Clev.

Boise

Wash. DC

Salt Lake City

Portland

BatonRougeHouston

Pitts. NYC

Boston

Philadelphia

Indianapolis

(>1 )

Atlanta

Nashville






Lab site

OC48

(0)

(1)


5

4

4

4

4 4

4

5

5

5

3

44

5

5

5

5

54

(7)

(17)

(19) (20)

(22)(23)

(29)

(28)

(8)

(16)

(32)

(2)

(4)

(5)(6)

(9)

(11)

(13) (25)

(26)

(10)

(12)

(27)

(14)

(24)

(15)

(30)3

3(3)

(21)

50

Typical ESnet4 Hub

MAX NGIX-E Coillege Park

WDC L(3)3 racks

SDN 10 GE to AOA

SDN 10G

E to CLEV

M320M320WDC-CR1

WDC-SDN1

7609

10 GE to AO

A

10 GE

NGIX-E6509MAX

MATP7609

10 G

E

To GEANT

10 GE

10 GE

JLABFoundry

ELITE

10 GEMAX LambdaSD

N 10G

E to

ATL

10GE to ATL

10GE to CLEV

M7iM7iWDC-PR1

1GE SX

1GE SX

2xT1

OC3 SM to DOET3 to DOE-RT1

OC3cDS3

MAE-E DS3

DClabs

1GE LX? GE to Eqx-ASH

DS3 T3 to NGA

WDC-AR17206VXR

LLNL-DC2xT1

T1 ORAUDC

To Atlanta

To Cleveland

To AoA, NYC

51

The Evolution of ESnet Architecture

ESnet sites

ESnet hubs / core network connection points

Metro area rings (MANs)

Other IP networks

ESnet IP core ESnet IP

core

ESnet Science Data Network (SDN) coreESnet to 2005:

• A routed IP network with sites singly attached to a national core ring

ESnet from 2006-07:• A routed IP network with sites

dually connected on metro area rings or dually connected directly to core ring

• A switched network providing virtual circuit services for data-intensive science

• Rich topology offsets the lack of dual, independent national cores

Circuit connections to other science networks (e.g. USLHCNet)

independent

redundancy (TBD)

52Clev

eland

Europe(GEANT)

Asia-Pacific

New YorkChicago

Washington DC

Atla

nta

CERN (30 Gbps)

Seattle

Albuquerque

Aus

tral

ia

San Diego

LA

Denver

South America(AMPATH)

South America(AMPATH)

Canada(CANARIE)

CERN (30 Gbps)Canada(CANARIE)

ESnet4 Planed Configuration

Asia-

Pacif

ic

Asia PacificGLORIAD (Russia and

China)

Boise

HoustonJacksonville

Tulsa

Boston

Science Data Network Core

IP Core

Kansa

s

City

Aus

tral

ia

Core networks: 40-50 Gbps in 2009-2010, 160-400 Gbps in 2011-2012

Core network fiber path is~ 14,000 miles / 24,000 km

1625

mile

s / 2

545

km

2700 miles / 4300 km

Sunnyvale

Production IP core (10Gbps) ◄SDN core (20-30-40Gbps) ◄MANs (20-60 Gbps) or backbone loops for site accessInternational connections

IP core hubs

Primary DOE LabsSDN (switch) hubs

High speed cross-connectswith Ineternet2/AbilenePossible hubs

53

Next Generation ESnet: II) Virtual Circuits• Traffic isolation and traffic engineering

– Provides for high-performance, non-standard transport mechanisms that cannot co-exist with commodity TCP-based transport

– Enables the engineering of explicit paths to meet specific requirements• e.g. bypass congested links, using lower bandwidth, lower latency paths

• Guaranteed bandwidth (Quality of Service (QoS))– User specified bandwidth– Addresses deadline scheduling

• Where fixed amounts of data have to reach sites on a fixed schedule, so that the processing does not fall far enough behind that it could never catch up – very important for experiment data analysis

• Reduces cost of handling high bandwidth data flows– Highly capable routers are not necessary when every packet goes to the

same place– Use lower cost (factor of 5x) switches to relatively route the packets

• Secure– The circuits are “secure” to the edges of the network (the site boundary)

because they are managed by the control plane of the network which is isolated from the general traffic

• Provides end-to-end connections between Labs and collaborator institutions

54

Virtual Circuit Service Functional Requirements• Support user/application VC reservation requests

– Source and destination of the VC– Bandwidth, start time, and duration of the VC– Traffic characteristics (e.g. flow specs) to identify traffic designated for the VC

• Manage allocations of scarce, shared resources– Authentication to prevent unauthorized access to this service– Authorization to enforce policy on reservation/provisioning– Gathering of usage data for accounting

• Provide circuit setup and teardown mechanisms and security– Widely adopted and standard protocols (such as MPLS and GMPLS) are well

understood within a single domain– Cross domain interoperability is the subject of ongoing, collaborative development– secure and-to-end connection setup is provided by the network control plane

• Enable the claiming of reservations– Traffic destined for the VC must be differentiated from “regular” traffic

• Enforce usage limits– Per VC admission control polices usage, which in turn facilitates guaranteed

bandwidth– Consistent per-hop QoS throughout the network for transport predictability

ESnet Virtual Circuit Service: OSCARS(On-demand Secured Circuits and Advanced Reservation System)

UserApplication

Software Architecture (see Ref. 9)• Web-Based User Interface (WBUI) will prompt the user for a

username/password and forward it to the AAAS.• Authentication, Authorization, and Auditing Subsystem (AAAS) will

handle access, enforce policy, and generate usage records.• Bandwidth Scheduler Subsystem (BSS) will track reservations and

map the state of the network (present and future).• Path Setup Subsystem (PSS) will setup and teardown the on-demand

paths (LSPs).

User Instructions to routers and switches to

setup/teardownLSPs

Web-BasedUser Interface

Authentication,Authorization,And AuditingSubsystem

BandwidthSchedulerSubsystem

Path SetupSubsystem

Reservation Manager

User app request via AAAS

Userfeedback

HumanUser

User request

via WBUI

56

Source

Sink

MPLS labels are attached onto packets from Source andplaced in separate queue to ensure guaranteed bandwidth.

Regular production traffic queue.Interface queues

SDN SDN SDN

IP IP IPIP Link

IP Link

SDN LinkRSVP, MPLSenabled on

internal interfaces

standard,best-effort

queue

high-priority queue

Based on Source and Sink IP addresses, route of LSP between ESnet border routers is determined using topology information from OSPF-TE. Path of LSP can be explicitly directed to take SDN network.

On the SDN Ethernet switches all traffic is MPLS switched (layer 2.5), which stitches together VLANs

On ingress to ESnet, packets matching

reservation profile are filtered out (i.e. policy

based routing), policed to reserved

bandwidth, and injected into a LSP. Label Switched Path

SDN Link

The Mechanisms Underlying OSCARS

VLAN 1 VLAN 2 VLAN 3

57

Environment of Science is Inherently Multi-Domain

• End points will be at independent institutions – campuses or research institutes - that are served by ESnet, Abilene, GÉANT, and their regional networks– Complex inter-domain issues – typical circuit will involve five or more

domains - of necessity this involves collaboration with other networks– For example, a connection between FNAL and DESY involves five

domains, traverses four countries, and crosses seven time zonesFNAL (AS3152)

[US]

ESnet (AS293)[US]

GEANT (AS20965)[Europe]

DFN (AS680)[Germany]

DESY (AS1754)[Germany]

58

OSCARS: Guaranteed Bandwidth VC Service For SC Science

• To ensure compatibility, the design and implementation is done in collaboration with the other major science R&E networks and end sites

– Internet2: Bandwidth Reservation for User Work (BRUW)• Development of common code base

– GEANT: Bandwidth on Demand (GN2-JRA3), Performance and Allocated Capacity for End-users (SA3-PACE) and Advance Multi-domain Provisioning System (AMPS) extends to NRENs

– BNL: TeraPaths - A QoS Enabled Collaborative Data Sharing Infrastructure for Peta-scale Computing Research

– GA: Network Quality of Service for Magnetic Fusion Research– SLAC: Internet End-to-end Performance Monitoring (IEPM)– USN: Experimental Ultra-Scale Network Testbed for Large-Scale Science– DRAGON/HOPI: Optical testbed

• In its current phase this effort is being funded as a research project by the Office of Science, Mathematical, Information, and Computational Sciences (MICS) Network R&D Program

• A prototype service has been deployed as a proof of concept– To date more then 20 accounts have been created for beta users, collaborators, and

developers– More then 100 reservation requests have been processed

59

2005 2006 2007 2008

• Dedicated virtual circuits• Dynamic virtual circuit allocation

ESnet Virtual Circuit Service Roadmap

• Generalized MPLS (GMPLS)

• Dynamic provisioning of Multi-Protocol Label Switching (MPLS) circuits in IP nets (layer 3) and in VLANs for Ethernets (layer 2)

• Interoperability between VLANs and MPLS circuits(layer 2 & 3)

• Interoperability between GMPLS circuits, VLANs, and MPLS circuits (layer 1-3)

Initial production service

Full production service

60

Federated Trust Services – Support for Large-Scale Collaboration

• Remote, multi-institutional, identity authentication is critical for distributed, collaborative science in order to permit sharing widely distributed computing and data resources, and other Grid services

• Public Key Infrastructure (PKI) is used to formalize the existing web of trust within science collaborations and to extend that trust into cyber space– The function, form, and policy of the ESnet trust services are driven

entirely by the requirements of the science community and by direct input from the science community

• International scope trust agreements that encompass many organizations are crucial for large-scale collaborations – ESnet has lead in negotiating and managing the cross-site, cross-

organization, and international trust relationships to provide policies that are tailored for collaborative science

This service, together with the associated ESnet PKI service, is the basis of the routine sharing of HEP Grid-based computing resources between US and Europe

61

DOEGrids CA (one of several CAs) Usage Statistics

User Certificates 4307 Total No. of Active Certificates 5344

Host & Service Certificates 8813 Total No. of Expired Certificates 7800

Total No. of Requests 16384 Total No. of Certificates Issued 13144

ESnet SSL Server CA Certificates 45

FusionGRID CA certificates 128

* Report as of Feb 4, 2007

0100020003000400050006000700080009000

1000011000120001300014000150001600017000180001900020000

J an-2003

Apr-2003

J ul-2003

Oct-2003

J an-2004

Apr-2004

J ul-2004

Oct-2004

J an-2005

Apr-2005

J ul-2005

Oct-2005

J an-2006

Apr-2006

J ul-2006

Oct-2006

J an-2007

Production service began in J une 2003

No.

of c

erti

fica

tes

or r

eque

sts

User Certificates

Service Certificates

Expired(+revoked) Certificates

Total Certificates Issued

Total Cert Requests

62

DOEGrids CA Statistics (5344)

**OSG10.2%

*Others19.6% ESG

0.77% ESnet0.30%

FusionGRID0.71%

LCG1.53%

iVDGL18.38%

NERSC1.55%

ORNL0.56%

PNNL0.02%

PPDG14.50%

ANL2.40%

LBNL0.90%

FNAL31.72%

* DOE-NSF collab. & Auto renewals ** OSG Includes (BNL, CDF, CMS, DES, DOSAR, DZero, Fermilab, fMRI, GADU, geant4, GLOW, GRASE, GridEx, GROW, i2u2, iVDGL, JLAB, LIGO, mariachi, MIS, nanoHUB, NWICG, OSG, OSGEDU, SDSS, SLAC, STAR & USATLAS)

DOEGrids CA Usage - Virtual Organization Breakdown

63

DOEGrids CA (Active Certificates) Usage Statistics

* Report as of Feb 4, 2007

0

500

1000

1500

2000

2500

3000

3500

4000

4500

5000

5500

6000

J an-2003

Apr-2003

J ul-2003

Oct-2003

J an-2004

Apr-2004

J ul-2004

Oct-2004

J an-2005

Apr-2005

J ul-2005

Oct-2005

J an-2006

Apr-2006

J ul-2006

Oct-2006

J an-2007

Production service began in J une 2003

No.of

cer

tifica

tes o

r req

uest

s

Active User Certifi cates

Active Service Certifi cates

Total Active Certifi cates

64

ESnet Conferencing Service (ECS)• A highly successful ESnet Science Service that provides

audio, video, and data teleconferencing service to support human collaboration of DOE science– Seamless voice, video, and data teleconferencing is important for

geographically dispersed scientific collaborators– Provides the central scheduling essential for global collaborations– ESnet serves more than a thousand DOE researchers and

collaborators worldwide• H.323 (IP) videoconferences (4000 port hours per month and rising)• audio conferencing (2500 port hours per month) (constant)• data conferencing (150 port hours per month)• Web-based, automated registration and scheduling for all of these

services

– Very cost effective (saves the Labs a lot of money)

65

ESnet Collaboration Services (ECS) 2007PST

N

ESnet

Codian MCU 1

Codian MCU 2

Codian MCU 3

LatitudeAudio Bridge

(144 ports)Latitude WebCollaboration

Server (monitoring)(data) (monitoring)

6 - T1s(144 x 64kb

voice channels)

6 - T1s1 - PRI(23 x 64kbISDN channels)

(to MCUs)Codian

ISDN to IP videogateway

SycamoreNetworksDSU/CSU

TandbergGatekeeper

(“DNS” for H.323)

• High Quality videoconferencing over IP and ISDN• Reliable, appliance based architecture• Ad-Hoc H.323 and H.320 multipoint meeting creation• Web Streaming options on 3 Codian MCU’s using Quicktime or Real• Real-time audio and data collaboration including desktop and application sharing• Web-based registration and audio/data bridge scheduling

TandbergManagement

Suite

66

Summary• ESnet is currently satisfying its mission by enabling SC

science that is dependant on networking and distributed, large-scale collaboration:

“The performance of ESnet over the past year has been excellent, with only minimal unscheduled down time. The reliability of the core infrastructure is excellent. Availability for users is also excellent” - DOE 2005 annual review of LBL

• ESnet has put considerable effort into gathering requirements from the DOE science community, and has a forward-looking plan and expertise to meet the five-year SC requirements– A Lehman review of ESnet (Feb, 2006) has strongly endorsed the

plan presented here

67

References1. High Performance Network Planning Workshop, August 2002

– http://www.doecollaboratory.org/meetings/hpnpw

2. Science Case Studies Update, 2006 (contact [email protected])3. DOE Science Networking Roadmap Meeting, June 2003

– http://www.es.net/hypertext/welcome/pr/Roadmap/index.html

4. DOE Workshop on Ultra High-Speed Transport Protocols and Network Provisioning for Large-Scale Science Applications, April 2003

– http://www.csm.ornl.gov/ghpn/wk2003

5. Science Case for Large Scale Simulation, June 2003– http://www.pnl.gov/scales/

6. Workshop on the Road Map for the Revitalization of High End Computing, June 2003– http://www.cra.org/Activities/workshops/nitrd – http://www.sc.doe.gov/ascr/20040510_hecrtf.pdf (public report)

7. ASCR Strategic Planning Workshop, July 2003– http://www.fp-mcs.anl.gov/ascr-july03spw

8. Planning Workshops-Office of Science Data-Management Strategy, March & May 2004– http://www-conf.slac.stanford.edu/dmw2004

9. For more information contact Chin Guok ([email protected]). Also see- http://www.es.net/oscars

http://www.doecollaboratory.org/meetings/hpnpw

http://www.es.net/hypertext/welcome/pr/Roadmap/index.html

http://www.csm.ornl.gov/ghpn/wk2003

http://www.pnl.gov/scales/

http://www.cra.org/Activities/workshops/nitrd

http://www.sc.doe.gov/ascr/20040510_hecrtf.pdf

http://www.fp-mcs.anl.gov/ascr-july03spw

http://www-conf.slac.stanford.edu/dmw2004


http://www.es.net/oscars

68

ESnet Network MeasurementsESCC Feb 15 2007

Joe [email protected]

69

Measurement Motivations

• Users dependence on the network is increasing– Distributed Applications– Moving Larger Data Sets– The network is becoming a critical part of large science experiments

• The network is growing more complex– 6 core devices in 05’, 25+ in 08’– 6 core links in 05’, 40+ in 08’, 80+ by 2010?

• Users continue to report performance problems– ‘wizards gap’ issues

• The community needs to better understand the network– We need to be able to demonstrate that the network is good.– We need to be able to detect and fix subtle network problems.

70

perfSONAR• perfSONAR is a global collaboration to design, implement

and deploy a network measurement framework.– Web Services based Framework

• Measurement Archives (MA)• Measurement Points (MP)• Lookup Service (LS)• Topology Service (TS)• Authentication Service (AS)

– Some of the currently Deployed Services• Utilization MA• Circuit Status MA & MP• Latency MA & MP• Bandwidth MA & MP• Looking Glass MP• Topology MA

– This is an Active Collaboration• The basic framework is complete• Protocols are being documented• New Services are being developed and deployed.

71

perfSONAR Collaborators• ARNES

• Belnet

• CARnet

• CESnet

• Dante

• University of Delaware

• DFN

• ESnet

• FCCN

• FNAL

• GARR

• GEANT2

* Plus others who are contributing, but haven’t added their names to the list on the WIKI.

• Georga Tech

• GRNET

• Internet2

• IST

• POZNAN Supercomputing Center

• Red IRIS

• Renater

• RNP

• SLAC

• SURFnet

• SWITCH

• Uninett

72

perfSONAR Deployments16+ different networks have deployed at least 1 perfSONAR

service (Jan 2007)

73

ESnet perfSONAR Progress• ESnet Deployed Services

– Link Utilization Measurement Archive– Virtual Circuit Status

• In Development– Active Latency and Bandwidth Tests– Topology Service– Additional Visualization capabilities

• perfSONAR visualization tools showing ESnet data– Link Utilization

• perfSONARUI– http://perfsonar.acad.bg/

• VisualPerfSONAR– https://noc-mon.srce.hr/visual_perf

• Traceroute Visualizer– https://performance.es.net/cgi-bin/level0/perfsonar-trace.cgi

– Virtual Circuit Status• E2EMon (for LHCOPN Circuits)

– http://cnmdev.lrz-muenchen.de/e2e/lhc/G2_E2E_index.html

https://performance.es.net/cgi-bin/level0/perfsonar-trace.cgi

http://cnmdev.lrz-muenchen.de/e2e/lhc/G2_E2E_index.html

74

LHCOPN Monitoring

• LHCOPN– An Optical Private Network

connecting LHC Teir1 centers around the world to CERN.

– The circuits to two of the largest Tier1 centers, FERMI & BNL cross ESnet

• E2Emon– An application developed by DFN for monitoring circuits using

perfSONAR protocols

• E2ECU– End to End Coordination Unit that uses E2Emon to monitor

LHCOPN Circuits– Run by the GEANT2 NOC

75

E2EMON and perfSONAR• E2Emon

– An application suite developed by DFN for monitoring circuits using perfSONAR protocols

• perfSONAR is a global collaboration to design, implement and deploy a network measurement framework.

– Web Services based Framework• Measurement Archives (MA)• Measurement Points (MP)• Lookup Service (LS)• Topology Service (TS)• Authentication Service (AS)

– Some of the currently Deployed Services• Utilization MA• Circuit Status MA & MP• Latency MA & MP• Bandwidth MA & MP• Looking Glass MP• Topology MA

– This is an Active Collaboration• The basic framework is complete• Protocols are being documented• New Services are being developed and deployed.

76

E2Emon Components• Central Monitoring Software

– Uses perfSONAR protocols to retrieve current circuit status every minute or so from MAs and MPs in all the different domains supporting the circuits.

– Provides a web site showing current end-to-end circuit status– Generates SNMP traps that can be sent to other management systems when

circuits go down

• MA & MP Software– Manages the perfSONAR communications with the central monitoring

software– Requires an XML file describing current circuit status as input.

• Domain Specific Component– Generates the XML input file for the MA or MP– Multiple development efforts in progress, but no universal solutions

• CERN developed one that interfaces to their abstraction of the Spectrum NMS DB• DANTE developed one that interfaces with the Acatel NMS• ESnet developed one that uses SNMP to directly poll router interfaces• FERMI developed one that uses SNMP to directly poll router interfaces• Others under development

77

E2Emon Central Monitoring Softwarehttp://cnmdev.lrz-muenchen.de/e2e/lhc/G2_E2E_index.html

http://cnmdev.lrz-muenchen.de/e2e/lhc/G2_E2E_index.html

78

ESnet4 Hub Measurement Hardware

• Latency– 1U Server with one of:

• EndRun Praecis CT CDMA Clock• Meinberg TCR167PCI IRIG Clock• Symmetricom bc637PCI-U IRIG Clock

• Bandwidth– 4U dual Opteron server with one of:

• Myricom 10GE NIC- 9.9 Gbps UDP streams- ~6 Gbps TCP streams- Consumes 100% of 1 CPU

• Chelsio S320 10GE NIC– Should do 10G TCP & UDP with low CPU Utilization– Has interesting shaping possibilities– Still under testing…

79

Network Measurements ESnet is Collecting

• SNMP Interface Utilization– Collected every minute

• For MRTG & Monthly Reporting

• Circuit Availability– Currently based on SNMP Interface up/down status– Limited to LHCOPN and Service Trial circuits for now

• NetFlow Data– Sampled on our boundaries

• Latency– OWAMP

80

ESnet Performance Center

• Web Interface to run Network Measurements

• Available to ESnet sites

• Supported Tests– Ping– Traceroute– IPERF– Pathload, Pathrate, Pipechar

• (Only on GE systems)

• Test Hardware– GE testers in Qwest hubs

• TCP iperf tests max at ~600 Mbps.– 10GE testers are being deployed in ESnet4 hubs

• Deployed in locations where we have Cisco 6509 10GE Interfaces• Available via Performance Center when not being used for other tests• TCP iperf tests max at 6 Gbps.

81

ESnet Measurement Summary• Standards / Collaborations

– PerfSONAR

• LHCOPN– Circuit Status Monitoring

• Monitoring Hardware in ESnet 4 Hubs– Bandwidth– Latency

• Measurements– SNMP Interface Counters– Circuit Availability– Flow Data– One Way Delay– Achievable Bandwidth

• Visualizations– PerfSONARUI– VisualPerfSONAR– NetInfo

82

References1. High Performance Network Planning Workshop, August 2002

– http://www.doecollaboratory.org/meetings/hpnpw

2. Science Case Studies Update, 2006 (contact [email protected])3. DOE Science Networking Roadmap Meeting, June 2003

– http://www.es.net/hypertext/welcome/pr/Roadmap/index.html

4. DOE Workshop on Ultra High-Speed Transport Protocols and Network Provisioning for Large-Scale Science Applications, April 2003

– http://www.csm.ornl.gov/ghpn/wk2003

5. Science Case for Large Scale Simulation, June 2003– http://www.pnl.gov/scales/

6. Workshop on the Road Map for the Revitalization of High End Computing, June 2003– http://www.cra.org/Activities/workshops/nitrd – http://www.sc.doe.gov/ascr/20040510_hecrtf.pdf (public report)

7. ASCR Strategic Planning Workshop, July 2003– http://www.fp-mcs.anl.gov/ascr-july03spw

8. Planning Workshops-Office of Science Data-Management Strategy, March & May 2004– http://www-conf.slac.stanford.edu/dmw2004

9. For more information contact Chin Guok ([email protected]). Also see- http://www.es.net/oscars

ICFA SCIC “Networking for High Energy Physics.” International Committee for Future Accelerators (ICFA), Standing Committee on Inter-Regional Connectivity (SCIC), Professor Harvey Newman, Caltech, Chairperson.

- http://monalisa.caltech.edu:8080/Slides/ICFASCIC2007/

http://www.doecollaboratory.org/meetings/hpnpw

http://www.es.net/hypertext/welcome/pr/Roadmap/index.html

http://www.csm.ornl.gov/ghpn/wk2003

http://www.pnl.gov/scales/

http://www.cra.org/Activities/workshops/nitrd

http://www.sc.doe.gov/ascr/20040510_hecrtf.pdf

http://www.fp-mcs.anl.gov/ascr-july03spw

http://www-conf.slac.stanford.edu/dmw2004




83

Additional Information

84

Example Case Study Summary Matrix: Fusion

FeatureScience

Instruments and Facilities Process of Science

Anticipated Requirements

TimeFrame Network

Network Services and Middleware

Near-term

Each experiment only gets a few days per year - high productivity is critical

Experiment episodes (“shots”) generate 2-3 Gbytes every 20 minutes, which has to be delivered to the remote analysis sites in two minutes in order to analyze before next shot

Highly collaborative experiment and analysis environment

Real-time data access and analysis for experiment steering (the more that you can analyze between shots the more effective you can make the next shot)

Shared visualization capabilities

PKI certificate authorities that enable strong authentication of the community members and the use of Grid security tools and services.

Directory services that can be used to provide the naming root and high-level (community-wide) indexing of shared, persistent data that transforms into community information and knowledge

Efficient means to sift through large data repositories to extract meaningful information from unstructured data.

5 years 10 Gbytes generated by experiment every 20 minutes (time between shots) to be delivered in two minutes

Gbyte subsets of much larger simulation datasets to be delivered in two minutes for comparison with experiment

Simulation data scattered across United States

Transparent security Global directory and naming

services needed to anchor all of the distributed metadata

Support for “smooth” collaboration in a high-stress environment

Real-time data analysis for experiment steering combined with simulation interaction = big productivity increase

Real-time visualization and interaction among collaborators across United States

Integrated simulation of the several distinct regions of the reactor will produce a much more realistic model of the fusion process

Network bandwidth and data analysis computing capacity guarantees (quality of service) for inter-shot data analysis

Gbits/sec for 20 seconds out of 20 minutes, guaranteed

5 to 10 remote sites involved for data analysis and visualization

Parallel network I/O between simulations, data archives, experiments, and visualization

High quality, 7x24 PKI identity authentication infrastructure

End-to-end quality of service and quality of service management

Secure/authenticated transport to ease access through firewalls

Reliable data transfer Transient and transparent data replication for

real-time reliability Support for human collaboration tools

5+ years

Simulations generate 100s of Tbytes

ITER – Tbyte per shot, PB per year

Real-time remote operation of the experiment

Comprehensive integrated simulation

Quality of service for network latency and reliability, and for co-scheduling computing resources

Management functions for network quality of service that provides the request and access mechanisms for the experiment run time, periodic traffic noted above.

• Considers instrument and facility requirements, the process of science drivers and resulting network requirements cross cut with timelines

85

Parallel Data Movers now PredominateLook at the hosts involved in 2006-01-31–— the plateaus in the

host-host top 100 flows are all parallel transfers (thx. to Eli Dart for this observation)

A132023.N1.Vanderbilt.Edu lstore1.fnal.gov 5.847



A132022.N1.Vanderbilt.Edu lstore1.fnal.gov 6.39A132021.N1.Vanderbilt.Edu lstore2.fnal.gov 6.771















A132017.N1.Vanderbilt.Edu lstore3.fnal.gov 11.489babar.fzk.de bbr-xfer03.slac.stanford.edu 2.772babar.fzk.de bbr-xfer02.slac.stanford.edu 2.901

babar2.fzk.de bbr-xfer06.slac.stanford.edu 3.018babar.fzk.de bbr-xfer04.slac.stanford.edu 3.222bbr-export01.pd.infn.it bbr-xfer03.slac.stanford.edu 11.289

bbr-export02.pd.infn.it bbr-xfer03.slac.stanford.edu 19.973

bbr-xfer07.slac.stanford.edu babar2.fzk.de 2.113

bbr-xfer05.slac.stanford.edu babar.fzk.de 2.254

bbr-xfer04.slac.stanford.edu babar.fzk.de 2.294

bbr-xfer07.slac.stanford.edu babar.fzk.de 2.337bbr-xfer04.slac.stanford.edu babar2.fzk.de 2.339



bbr-xfer08.slac.stanford.edu babar.fzk.de 2.627bbr-xfer04.slac.stanford.edu babar3.fzk.de 3.234bbr-xfer05.slac.stanford.edu babar3.fzk.de 3.271bbr-xfer08.slac.stanford.edu babar3.fzk.de 3.276

bbr-xfer07.slac.stanford.edu babar3.fzk.de 3.298bbr-xfer05.slac.stanford.edu bbr-datamove10.cr.cnaf.infn.it 2.366bbr-xfer07.slac.stanford.edu bbr-datamove10.cr.cnaf.infn.it 2.519bbr-xfer04.slac.stanford.edu bbr-datamove10.cr.cnaf.infn.it 2.548bbr-xfer08.slac.stanford.edu bbr-datamove10.cr.cnaf.infn.it 2.656

bbr-xfer08.slac.stanford.edu bbr-datamove09.cr.cnaf.infn.it 3.927bbr-xfer05.slac.stanford.edu bbr-datamove09.cr.cnaf.infn.it 3.94bbr-xfer04.slac.stanford.edu bbr-datamove09.cr.cnaf.infn.it 4.011bbr-xfer07.slac.stanford.edu bbr-datamove09.cr.cnaf.infn.it 4.177

bbr-xfer04.slac.stanford.edu csfmove01.rl.ac.uk 5.952

bbr-xfer04.slac.stanford.edu move03.gridpp.rl.ac.uk 5.959

bbr-xfer05.slac.stanford.edu csfmove01.rl.ac.uk 5.976bbr-xfer05.slac.stanford.edu move03.gridpp.rl.ac.uk 6.12bbr-xfer07.slac.stanford.edu csfmove01.rl.ac.uk 6.242bbr-xfer08.slac.stanford.edu move03.gridpp.rl.ac.uk 6.357bbr-xfer08.slac.stanford.edu csfmove01.rl.ac.uk 6.48bbr-xfer07.slac.stanford.edu move03.gridpp.rl.ac.uk 6.604

ESnet4: Networking for the Future of DOE Science ESnet R&D Roadmap Workshop, April 23-24, 2007

Documents

Transcript of ESnet4: Networking for the Future of DOE Science ESnet R&D Roadmap Workshop, April 23-24, 2007