CC* Networking Infrastructure: Science DMZ for Data-enabled Science, Engineering, and Health

亚利桑那州立大学的使命是使人们能够获得科学，工程和健康方面的发现和奖学金，亚利桑那州立大学正在部署一个采用科学DMZ架构的先进研究网络。在推进在大型公立研究型大学部署21世纪世纪网络基础设施的知识的同时，该项目还推进了网络网络基础设施如何支持科学，工程和健康方面的研究和教育。这项工作由校园网络基础设施专家合作开展，目的是：1）改善校园网络连接，通过无摩擦访问广域网，为STEM研究和教育活动提供高速数据移动。2)确保STEM研究和教育活动的安全和高性能数据移动。3)提高STEM研究和教育的生产力。该项目结合了网络架构、安全性以及联合身份验证和身份管理方面的国家最佳实践。更换现有的边缘网络设备并安装优化的数据传输节点，可提供无摩擦的广域网路径和简化的研究数据移动。严格的路由器访问控制列表和入侵检测系统在Science DMZ内提供安全性，通过perfSONAR进行端到端网络性能测量可以防止数据包丢失等问题。科学数据流由一个包含用户参与、迭代技术改进、培训、文件编制和后续行动的过程提供支持。网络设计和实施由外部顾问委员会指导，该委员会由来自能源科学网络、Internet2、参与性能和运营中心（EPOC）、The Quilt和亚利桑那州“太阳走廊”研究网络的专家组成。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Drawing upon its mission to enable access to discovery and scholarship in science, engineering, and health, Arizona State University is deploying an advanced research network employing the Science DMZ architecture. While advancing knowledge of deploying 21st century cyberinfrastructure in a large public research university, this project also advances how network cyberinfrastructure supports research and education in science, engineering, and health. This effort is being carried out by a partnership of campus cyberinfrastructure experts to: 1) Improve campus network connectivity to enable high speed data movement for STEM research and education activities, by enabling friction-free access to wide area networks. 2) Ensure secure and performant data movement for STEM research and education activities. 3) Increase STEM research and education productivity.The project incorporates national best practices in network architecture, security, and federated authentication and identity management. Replacing existing edge network equipment and installing an optimized, tuned Data Transfer Node provides friction-free wide area network path and streamlined research data movement. A strict router access control list and Intrusion Detection System provide security within the Science DMZ, and end-to-end network performance measurement via perfSONAR guards against issues such as packet loss. Science data flows are supported by a process incorporating user engagement, iterative technical improvements, training, documentation, and follow-up. Network design and implementation are guided by an external advisory board consisting of experts from the Energy Sciences Network, Internet2, the Engagement Performance and Operations Center (EPOC), The Quilt, and Arizona's “Sun Corridor” research network.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.