CC*Integration-Large: Programmable Network Testbed for 400 Gbps Science DMZ

高能物理等科学驱动力的数据存储和传输需求已经远远超过常规校园流量，而且还在继续增长。这种爆炸性的增长反过来又对监测和管理研究网络的任务提出了挑战。该项目将设计、实施和部署PRONET，这是一个支持管理科学非军事区交通的尖端研究的试验床。PRONET将实现(I)针对诸如安全和性能之类的任务，实时监控每秒太比特的流量；(Ii)实现以网络线速进行的复杂处理，以支持当前Science DMZ用例(例如，检测安全攻击)和新出现的用例(例如，处理IoT流量)；以及(Iii)对真实世界流量的可编程联网研究的验证。主要创新领域是：(I)为业务和实验需求设计实时监控Science DMZ流量的系统，该系统可扩展到Tbps流量；(Ii)监控Science DMZ内的流量的新功能，这将增强安全性，并确定新型流量的特征；(Iii)展示可编程网络如何通过支持将功能卸载到异类和分布式可编程硬件，在Science DMZ环境中实现与安全攻击检测、基于机器学习的流量分类和物联网流量处理相关的一系列新兴用例；以及(Iii)通过对现实世界流量进行可编程网络原型试验获得的见解，可以推动该领域的研究。团队由在网络研究和校园网络基础设施管理方面具有互补专业知识的PI组成。PIS将与普渡的中央IT组织合作，将PRONET整合到普渡的网络基础设施中。该项目将通过演示可编程网络在这些环境中的使用案例来影响未来的科学非军事区设计。这些经验将传播给网络研究人员以及管理Science DMZ环境的从业者。该项目将推动可编程网络的采用，带来更安全、可靠和灵活的网络环境。该项目将广泛涉及研究生和本科生，私人投资机构将努力积极从代表性不足的群体中招收学生。这一奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The data storage and transfer needs of science drivers such as high energy physics far exceeds regular campus traffic already, and continues to grow. This explosive growth in turn challenges the task of monitoring and managing research networks. This project will design, implement and deploy PRONET, a testbed to support cutting-edge research for managing Science DMZ traffic. PRONET will enable (i) real-time monitoring of Terabits per second of traffic for tasks such as security and performance; (ii) enable complex processing at network line rate to support both current Science DMZ use cases (e.g., detect security attacks) and emerging ones (e.g., process IoT traffic); and (iii) validation of programmable networking research on real-world traffic.Major areas of innovation are: (i) the design of a system for monitoring Science DMZ traffic in real time for both operational and experimental needs that can scale to Tbps of traffic; (ii) new capabilities to monitor traffic within the Science DMZ which will enable both enhanced security, and characterization of new types of traffic; (iii) demonstrating how programmable networking can enable a wide range of emerging use cases in Science DMZ environments related to security attack detection, machine learning-based traffic classification, and IoT traffic processing through support for offloading functionality to heterogeneous and distributed programmable hardware; and (iii) insights obtained by experimenting with programmable networking prototypes on real-world traffic which can advance research in the area.The team comprises PIs with complementary expertise in both networking research and management of campus cyber-infrastructure. The PIs will collaborate with Purdue's central IT organization to integrate PRONET into Purdue’s network infrastructure. The project will influence future Science DMZ designs by demonstrating use cases of programmable networking in these environments. The experiences will be disseminated to both networking researchers as well as practitioners who manage Science DMZ environments. The project will drive the adoption of programmable networking, leading to more secure, reliable, and agile network environments. The project will extensively involve graduate and undergraduate students, and the PIs will work to actively recruit students from underrepresented groups.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.