CC* Networking Infrastructure: Science DMZ for Data-enabled Science, Engineering, and Health

亚利桑那州立大学肩负着能够获得科学、工程和卫生领域的发现和学术研究的使命，正在部署一个采用科学非军事区架构的高级研究网络。在推进在大型公立研究型大学部署21世纪网络基础设施的知识的同时，该项目还推进了网络网络基础设施如何支持科学、工程和卫生领域的研究和教育。这项工作是由校园网络基础设施专家合作实施的，目的是：1)通过实现对广域网络的无摩擦访问，改善校园网络连接，以实现STEM研究和教育活动的高速数据移动。2)确保STEM研究和教育活动的安全和高性能的数据移动。3)提高STEM研究和教育生产力。该项目结合了国家在网络体系结构、安全以及联合身份验证和身份管理方面的最佳实践。更换现有的边缘网络设备，并安装优化、调整的数据传输节点，可提供无摩擦的广域网络路径和简化的研究数据移动。严格的路由器访问控制列表和入侵检测系统在Science DMZ内提供安全，并通过PerformSONAR进行端到端网络性能测量，防止出现丢包等问题。科学数据流得到了一个过程的支持，该过程包括用户参与、迭代技术改进、培训、文档和后续行动。网络设计和实施由一个外部顾问委员会指导，该委员会由来自能源科学网络、Internet2、参与绩效和运营中心(EPOC)、被子和亚利桑那州“太阳走廊”研究网络的专家组成。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Drawing upon its mission to enable access to discovery and scholarship in science, engineering, and health, Arizona State University is deploying an advanced research network employing the Science DMZ architecture. While advancing knowledge of deploying 21st century cyberinfrastructure in a large public research university, this project also advances how network cyberinfrastructure supports research and education in science, engineering, and health. This effort is being carried out by a partnership of campus cyberinfrastructure experts to: 1) Improve campus network connectivity to enable high speed data movement for STEM research and education activities, by enabling friction-free access to wide area networks. 2) Ensure secure and performant data movement for STEM research and education activities. 3) Increase STEM research and education productivity.The project incorporates national best practices in network architecture, security, and federated authentication and identity management. Replacing existing edge network equipment and installing an optimized, tuned Data Transfer Node provides friction-free wide area network path and streamlined research data movement. A strict router access control list and Intrusion Detection System provide security within the Science DMZ, and end-to-end network performance measurement via perfSONAR guards against issues such as packet loss. Science data flows are supported by a process incorporating user engagement, iterative technical improvements, training, documentation, and follow-up. Network design and implementation are guided by an external advisory board consisting of experts from the Energy Sciences Network, Internet2, the Engagement Performance and Operations Center (EPOC), The Quilt, and Arizona's “Sun Corridor” research network.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.