CC-NIE Integration: Creation of an Institutional Cyberinfrastructure to Enable Researcher-Oriented, Federated Environment for Large, Collaborative Science Projects

由于传统的校园网络基础设施设备、政策和工程实践，网络基础设施进步的广泛采用一直是研究人员面临的挑战。这个密苏里大学（MU）的项目在I2创新网络骨干网上实现了从圣路易斯穿过哥伦比亚到堪萨斯城横跨密苏里州的100gb连接。它包括广域网实验，以无缝集成MU的网络基础设施和科学DMZ与远程校园（俄亥俄州立大学）网络基础设施。它还涉及集成先进技术（例如，100Gbps连接，perfSONAR, OpenFlow, RoCE/iWARP），这些技术与MU和OSU的不同研究人员的用例相关。在这种环境中构建CI需要对资源进行身份验证、授权和受策略限制的访问。该项目涉及到第二代互联网创新网络的所有三个要素：软件定义网络（SDN）、OpenFlow和联邦身份。密苏里大学正在修改其现有的网络基础设施，以适应OpenFlow和SDN支持的先进工具。现有的科学DMZ与创新网络科学DMZ兼容。MU还在定制Shibboleth Federated Identity Management服务，以提供对特定资源的细粒度授权和访问。授权服务器实现策略，控制单个用户或程序的带宽消耗。该项目通过项目网站上的出版物、通过各种区域和国家会议以及期刊文章广泛传播研究成果。来自该项目的开源软件也将提供。

Wide spread adoption of cyberinfrastructure advances has been a challenge to researchers mainly due to the traditional cyberinfrastructure equipment, policies and engineering practices at campuses. This University of Missouri (MU) project enables a 100 GB connection extending across the state of Missouri from St. Louis through Columbia to Kansas City directly on the I2 Innovation Network backbone. It includes wide-area network experimentation to seamlessly integrate MU's cyberinfrastructure and Science DMZ with a remote campus (Ohio State University) cyberinfrastructure. It also involves integrating advanced technologies (e.g., 100Gbps connectivity, perfSONAR, OpenFlow, RoCE/iWARP) relevant to the use cases of diverse researchers at MU and OSU.Building CI in this environment requires authentication, authorization, and policy-limited access to resources. The project engages all three elements of Internet2's Innovation Network: Software Defined Networking (SDN), OpenFlow and Federated Identity. The University of Missouri is modifying its existing cyberinfrastructure to accommodate advanced tools enabled by OpenFlow and SDN. The existing science DMZ is compatible with the Innovation Network Science DMZ. MU is also customizing Shibboleth Federated Identity Management services to provide fine-grained authorization and access to specific resources. The entitlement server implements policy that controls the bandwidth consumed by individual users or programs. The project broadly disseminates research results through publication on the project web site, disseminated through various regional and national conferences, and journal articles. Open source software from the project will also be made available.