What is a Science DMZ?

1
What is a Science DMZ? Consists of three key components, all required: • “Friction free” network path – Highly capable network devices (wire-speed, deep queues) – Virtual circuit connectivity option – Security policy and enforcement specific to science workflows – Located at or near site perimeter if possible • Dedicated, high-performance Data Transfer Nodes (DTNs) – Hardware, operating system, libraries all optimized for transfer – Includes optimized data transfer tools such as Globus Online and GridFTP

description

What is a Science DMZ?. Consists of three key components , all required: “Friction free” network path Highly capable network devices (wire-speed, deep queues) Virtual circuit connectivity option Security policy and enforcement specific to science workflows - PowerPoint PPT Presentation

Transcript of What is a Science DMZ?

Page 1: What is a Science DMZ?

What is a Science DMZ?

Consists of three key components, all required:• “Friction free” network path

– Highly capable network devices (wire-speed, deep queues)– Virtual circuit connectivity option– Security policy and enforcement specific to science workflows– Located at or near site perimeter if possible

• Dedicated, high-performance Data Transfer Nodes (DTNs)– Hardware, operating system, libraries all optimized for transfer– Includes optimized data transfer tools such as Globus Online and GridFTP

• Performance measurement/test node– perfSONAR

Details at http://fasterdata.es.net/science-dmz/

http://fasterdata.es.net/science-dmz/
http://fasterdata.es.net/science-dmz/
http://fasterdata.es.net/science-dmz/

RFP Science DMZ Core 2013 Vendor - Procurement & Strategic …forms.procurement.wayne.edu/RFPs/RFP_Science_DMZ_Core_2013_… · RFP: Science DMZ Core 2013 for the Computing & Information

RFP Science DMZ Core 2013 Vendor - Procurement & Strategic …forms.procurement.wayne.edu/RFPs/RFP_Science_DMZ_Core_2013_… · RFP: Science DMZ Core 2013 for the Computing & Information

The Science DMZ - TERENA · 2013-11-13 · “Science DMZ” may not look discrete • Most of the network is in the Science DMZ • This is as it should be • Appropriate deployment

The Science DMZ - TERENA · 2013-11-13 · “Science DMZ” may not look discrete • Most of the network is in the Science DMZ • This is as it should be • Appropriate deployment

Science DMZ

Science DMZ

Using perfSONAR and Science DMZ

Using perfSONAR and Science DMZ

The Science DMZ - globusworld.org

The Science DMZ - globusworld.org

The Science DMZ: A network design patterndownloads.hindawi.com/journals/sp/2014/701405.pdf · The Science DMZ: A network design pattern for data-intensive science1 Eli Darta,∗,LaurenRotman

The Science DMZ: A network design patterndownloads.hindawi.com/journals/sp/2014/701405.pdf · The Science DMZ: A network design pattern for data-intensive science1 Eli Darta,∗,LaurenRotman

Trinity College Next Generation Science Network … · Trinity College Next Generation Science Network and DMZ ... Trinity College Next Generation Science Network and DMZ ... InCommon

Trinity College Next Generation Science Network … · Trinity College Next Generation Science Network and DMZ ... Trinity College Next Generation Science Network and DMZ ... InCommon

Science DMZ Architecture - Linux Clusters Institute · 2017-08-18 · Science DMZ Background • The data mobility performance requirements for data intensive science are beyond what

Science DMZ Architecture - Linux Clusters Institute · 2017-08-18 · Science DMZ Background • The data mobility performance requirements for data intensive science are beyond what

ELASTIC DATA TRANSFER INFRASTRUCTURE FOR A DYNAMIC SCIENCE DMZ · Background l The Science DMZ Model:provides a network design pattern for research institutions to support high-speed

ELASTIC DATA TRANSFER INFRASTRUCTURE FOR A DYNAMIC SCIENCE DMZ · Background l The Science DMZ Model:provides a network design pattern for research institutions to support high-speed

Cyberinfrastructure for Big Science Flows: Science …ce.sc.edu/.../workshop/20190722-1-EPOC-USC-CI-DMZ-v1.pdf2019/07/22  · The Science DMZ has two main purposes: 1.A security architecture

Cyberinfrastructure for Big Science Flows: Science …ce.sc.edu/.../workshop/20190722-1-EPOC-USC-CI-DMZ-v1.pdf2019/07/22  · The Science DMZ has two main purposes: 1.A security architecture

20160927-Jennewein-Building the Science DMZ at USD

20160927-Jennewein-Building the Science DMZ at USD

The Science DMZ – perfSONAR & Network Monitoringrich/...OIN-ScienceDMZ-2-perfSONAR.pdf · The Science DMZ – perfSONAR & Network Monitoring Jason Zurawski - ESnet Engineering &

The Science DMZ – perfSONAR & Network Monitoringrich/...OIN-ScienceDMZ-2-perfSONAR.pdf · The Science DMZ – perfSONAR & Network Monitoring Jason Zurawski - ESnet Engineering &

Networks for Data Intensive Science Environments · Lawrence Berkeley National Laboratory U.S. Department of Energy | Office of Science Traditional DMZ DMZ – “Demilitarized Zone”

Networks for Data Intensive Science Environments · Lawrence Berkeley National Laboratory U.S. Department of Energy | Office of Science Traditional DMZ DMZ – “Demilitarized Zone”

The Science DMZ (Philosophy)

The Science DMZ (Philosophy)

SciGuard: A Security Architecture for Science DMZ based on …€¦ · SciGuard: A Security Architecture for Science DMZ based on SDN and NFV A collaborative project between Clemson

SciGuard: A Security Architecture for Science DMZ based on …€¦ · SciGuard: A Security Architecture for Science DMZ based on SDN and NFV A collaborative project between Clemson

Network Security and the Science DMZ - University Of Illinois€¦ · The Science DMZ* in 1 Slide Consists of key components, all required: • “Friction free” network path –

Network Security and the Science DMZ - University Of Illinois€¦ · The Science DMZ* in 1 Slide Consists of key components, all required: • “Friction free” network path –

The Science DMZ: Recent Developments · 16/05/2017  · • Science DMZ As Plaorm • Modern Research Data Portal • Pacific Research Plaorm – PRP – NRP • Note: This talk

The Science DMZ: Recent Developments · 16/05/2017  · • Science DMZ As Plaorm • Modern Research Data Portal • Pacific Research Plaorm – PRP – NRP • Note: This talk

“DMZ In a Box”. What is a DMZ? As a military term As a computing term.

“DMZ In a Box”. What is a DMZ? As a military term As a computing term.

Science DMZ Security - Home | Internet22013/01/15  · Science DMZ Security Eli Dart, Network Engineer ESnet Network Engineering Group Joint Techs, Winter 2013 Honolulu, HI January

Science DMZ Security - Home | Internet22013/01/15  · Science DMZ Security Eli Dart, Network Engineer ESnet Network Engineering Group Joint Techs, Winter 2013 Honolulu, HI January

The Science DMZ – Introduction & Architecturerich/OIN.10.2013/Science_DMZ/... · • The Science DMZ is a design pattern for network design. o Not all implementations look the same,

The Science DMZ – Introduction & Architecturerich/OIN.10.2013/Science_DMZ/... · • The Science DMZ is a design pattern for network design. o Not all implementations look the same,