CC* Integration: Archipelago: Linking Researchers On-Campuses and in the Cloud through SDN-Enabled Microsegmentation

研究人员经常在工作中产生大量数据，以至于他们的数据对底层计算机网络造成压力。 一些学术机构为研究数据建立了单独的网络，但这非常昂贵。 Archipelago是一个旨在提高计算机网络性能和安全性的项目，使科学家更容易、更便宜地移动、存储和分析他们的数据。 它使用相对少量的非常快速、灵活的网络设备，这些设备使用一种称为软件定义网络（SDN）的技术来引导研究数据绕过瓶颈，使其看起来像一个单独的科学网络，而不必花费所有资金来建立真正的第二个网络。Archipelago解决了在校园网络中限制SDN采用的缺点，从评估下一代SDN转发元件、SmartNIC（智能网络接口卡）设备和专用SDN数据平面开始，以创建其混合架构。 该架构通过在附近的分发点实施流量策略来连接SDN孤岛，这些分发点连接到具有智能路由器或提供控制平面功能的下一代硬件驱动的SDN转发元件（取决于规模）的商品服务器。 这种从软件到SmartNIC转发的转变加快了数据平面的性能，并有效地利用了控制平面的分布式CPU资源，从而释放了服务器资源用于其他用途。这一强大的策略驱动架构可实现细粒度流量转发策略，以实现微分段、增强网络安全、高效数据传输和其他应用。该项目将利用敏捷软件开发技术，这些技术来自杜克和合作伙伴环境中的部署经验，与供应商无关的研究网络设计，易于被那些由于人员或技术资源限制而不愿意冒险进入SDN架构的机构采用。 由于群岛架构逐步增强了现有网络，（因此具有成本效益），并且由于其软件组件是通过开源许可部署的，它将为已经建立SDN网络的机构提供新的强大功能，该奖项反映了NSF的法定使命，被认为是值得的通过使用基金会的知识价值和更广泛的影响审查标准进行评估，

Researchers often generate very large amounts of data in their work, so much so that their data stresses the underlying computer networks. Some academic institutions build a separate network for research data, but this is very expensive. Archipelago is a project that seeks to improve the performance and security of computer networks to make it easier and less costly for scientists to move, store, and analyze their data. It uses relatively small numbers of very fast, flexible network devices which use a technique known as Software Defined Networking (SDN) to steer research data around bottlenecks giving the appearance of a separate science network without having to spend all the money needed to build a true second network.Archipelago addresses shortcomings that have limited adoption of SDN within campus networks, beginning with evaluation of next-generation SDN forwarding elements, SmartNIC (Smart Network Interface Card) devices and purpose built SDN data planes to create its hybrid architecture. This architecture connects islands of SDN by enforcing traffic policies at nearby distribution points linked to commodity servers with SmartNICs or next-generation hardware-driven SDN forwarding elements (depending on scale) that provide control plane functionality. This shift from software to SmartNIC forwarding accelerates data plane performance and efficient use of distributed CPU resources for the control plane frees server resources for other uses. This robust policy-driven architecture enables fine-grained traffic forwarding policies for microsegmentation, enhanced cybersecurity, efficient data transfer, and other applications.Utilizing agile software development techniques that are informed by the deployment experience at Duke and within partner environments, this project will deliver a powerful, vendor-agnostic research network design that is easy-to-adopt for institutions that have been reluctant to venture into SDN architectures due to personnel or technical resource constraints. Since the Archipelago architecture augments existing networks incrementally (and therefore cost effectively) and because its software components are deployed via open-source licensing, it will provide new and powerful capability to institutions that already have established SDN networks, as well as for those that have been reluctant to venture into SDN architectures due to financial constraints.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.