CC-NIE Integration: Creation of an Institutional Cyberinfrastructure to Enable Researcher-Oriented, Federated Environment for Large, Collaborative Science Projects

对研究人员来说，广泛采用网络基础设施的进步一直是一个挑战，这主要是由于校园中传统的网络基础设施设备、政策和工程实践。密苏里大学(MU)的这个项目实现了在I2创新网络主干上直接跨越密苏里州从圣路易斯到哥伦比亚到堪萨斯城的100 GB连接。它包括将密歇根州立大学的网络基础设施和科学非军事区与远程校园(俄亥俄州立大学)网络基础设施无缝集成的广域网络实验。它还涉及集成与MU和OSU不同研究人员的使用案例相关的高级技术(例如，100Gbps连接、PerformSONAR、OpenFlow、ROCE/iWARP)。在此环境中构建CI需要身份验证、授权和对资源的策略受限访问。该项目采用了Internet2的S创新网络的所有三个要素：软件定义网络、开放流程和联合身份。密苏里大学正在修改其现有的网络基础设施，以适应OpenFlow和SDN支持的先进工具。现有的科学非军事区与创新网络科学非军事区兼容。MU还在定制Shibboleth联合身份管理服务，以提供对特定资源的细粒度授权和访问。授权服务器实施控制单个用户或程序消耗的带宽的策略。该项目通过在项目网站上发表文章、通过各种区域和国家会议以及期刊文章来广泛传播研究成果。该项目的开源软件也将提供。

Wide spread adoption of cyberinfrastructure advances has been a challenge to researchers mainly due to the traditional cyberinfrastructure equipment, policies and engineering practices at campuses. This University of Missouri (MU) project enables a 100 GB connection extending across the state of Missouri from St. Louis through Columbia to Kansas City directly on the I2 Innovation Network backbone. It includes wide-area network experimentation to seamlessly integrate MU's cyberinfrastructure and Science DMZ with a remote campus (Ohio State University) cyberinfrastructure. It also involves integrating advanced technologies (e.g., 100Gbps connectivity, perfSONAR, OpenFlow, RoCE/iWARP) relevant to the use cases of diverse researchers at MU and OSU.Building CI in this environment requires authentication, authorization, and policy-limited access to resources. The project engages all three elements of Internet2's Innovation Network: Software Defined Networking (SDN), OpenFlow and Federated Identity. The University of Missouri is modifying its existing cyberinfrastructure to accommodate advanced tools enabled by OpenFlow and SDN. The existing science DMZ is compatible with the Innovation Network Science DMZ. MU is also customizing Shibboleth Federated Identity Management services to provide fine-grained authorization and access to specific resources. The entitlement server implements policy that controls the bandwidth consumed by individual users or programs. The project broadly disseminates research results through publication on the project web site, disseminated through various regional and national conferences, and journal articles. Open source software from the project will also be made available.