CC* Networking Infrastructure: Building a Science DMZ Network for University of California Merced

作为21世纪世纪美国第一所新的研究型大学，加州默塞德大学（UC默塞德）已迅速成为新兴研究领域的区域领导者。这些研究活动中的许多都涉及非常大的数据集、数据密集型计算和数据协作，这些工作需要一个可靠、健壮和快速的网络，而这个网络在建设、管理和使用上都不同于现有的互联网。这种新型网络是为科学数据流而建立的，具有适当的安全措施，并致力于其特殊目的：研究。能源科学网络（ESNet）为这种网络开发了一个称为“科学DMZ”的模型。 加州大学默塞德正在建立一个科学DMZ网络，与“常规”网络不同，专门用于这些先进的科学应用。这一新网络缩短了数据传输时间，实现了无缝数据协作，并为加州大学默塞德校园内外的新发现奠定了基础。该项目包括一个专用的科学DMZ校园边缘路由器，可在校园内实现10、40和100 Gbps的连接，并与更广泛的科学界建立联系。每个教学楼都有专用的光纤电缆连接许多设备（数据服务器，集群甚至科学仪器），速度比当前网络提供的速度快数百倍，可靠性更高。该项目将采用不同的安全模型：通过仔细控制网络的物理拓扑结构，可以在不使用防火墙的情况下提供安全性，从而大大提高性能。

As the nation's first new research university of the 21st Century, the University of California Merced (UC Merced) has quickly established itself as a regional leader in emerging research across a wide variety of areas. Many of these research activities involve very large data sets, data-intensive computation and data collaboration.These endeavors require a reliable, robust and fast network that is different in its construction, management and use from existing internet networks. This new type of network is built for science data flows, has appropriate security measures and is dedicated to its special purpose: research. The Energy Sciences Network (ESNet) has developed a model for such a network called a "Science DMZ". UC Merced is building a Science DMZ network, distinct from the 'regular' network and dedicated for these advanced science applications. This new network cuts data transfer times, allows for seamless data collaboration and sets the stage for new discoveries on the UC Merced campus and beyond.The project includes a dedicated Science DMZ campus edge router which allows for 10, 40 and 100 Gbps connections across campus and out to the wider scientific community. Each academic building has dedicated fiber optic cables connecting many devices (data servers, clusters and even science instruments) at speeds hundreds of times faster and much more reliably than current networks provide. This project will employ a different security model: by carefully controlling the physical topology of the network, security can be provided without the use of a firewall, vastly improving performance.