CC*Networking Infrastructure: Scalable Secure Science DMZ for Academic and Clinical Research at the University of Virginia

CC*网络基础设施：弗吉尼亚大学用于学术和临床研究的可扩展安全科学 DMZ

• 批准号: 1659331
• 负责人: Ronald Hutchins
• 金额: $ 43.24万
• 依托单位: University of Virginia Main Campus
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-01-01 至 2018-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1659331&HistoricalAwards=false
• 关键词: CC; Networking; Infrastructure; Scalable; Secure

Performance of campus networking infrastructure at the University of Virginia (UVA) is encumbered by conventional security approaches such as multi-layered firewalls. Recognizing that the research community needs increasingly higher performance yet more secure-data storage and transfer capabilities, UVA is implementing an ambitious upgrade to its research computing infrastructure. The scalable secure science DMZ project enables more efficient, flexible and secure data transfer between multiple end nodes across campus through two primary activities. First, a multi-stage network infrastructure is built to enable rapid data transfer and efficient data sharing for both secure data as well as for conventional non-secure data. Second, the existing data transport infrastructure is enhanced through a combination of network upgrades, network configuration changes, and the implementation of Science DMZ functionality. The new research network infrastructure leverages Virtual Local Area Networks (VLANS) to isolate data paths as needed for security and/or other purposes. Demands for especially high bandwidth are accommodated through a network of Distributed Data Transfer Nodes (DDTNs) that are positioned near the data sources. As a result, researchers are able to quickly and efficiently transfer and share data from instrument to central storage; from workstation to central computing facilities; from central facilities to external computing centers; and from one institution to another, with assurance of appropriate security based on the sensitivity classification of the data. The new research-oriented network configuration significantly enhances research capacity by eliminating bottlenecks at high-throughput laboratories and centers, the health-sciences sites, and conventional academic research units located throughout campus.

弗吉尼亚大学（UVA）校园网络基础设施的性能受到多层防火墙等传统安全方法的阻碍。认识到研究界需要越来越高的性能和更安全的数据存储和传输能力，UVA正在实施其研究计算基础设施的雄心勃勃的升级。可扩展的安全科学DMZ项目通过两个主要活动在校园内的多个终端节点之间实现更高效、更灵活和更安全的数据传输。首先，构建了多级网络基础设施，以实现安全数据和传统非安全数据的快速数据传输和有效数据共享。其次，现有的数据传输基础设施通过网络升级、网络配置更改和Science DMZ功能的实现得到增强。新的研究网络基础设施利用虚拟局域网（vlan）根据安全和/或其他目的的需要隔离数据路径。对特别高带宽的需求可以通过位于数据源附近的分布式数据传输节点（ddtn）网络来满足。因此，研究人员能够快速有效地将数据从仪器传输和共享到中央存储；从工作站到中央计算设施；从中央设施到外部计算中心；从一个机构到另一个机构，并根据数据的敏感性分类保证适当的安全。新的面向研究的网络配置通过消除高通量实验室和中心、健康科学站点以及遍布校园的传统学术研究单位的瓶颈，显著提高了研究能力。