CyberTraining: Implementation: Small: Cybertraining on P4 Programmable Devices using an Online Scalable Platform with Physical and Virtual Switches and Real Protocol Stacks

传统上，网络设备的数据平面已经被设计为具有固定功能以使用一小组通信协议来转发数据分组。这种封闭式设计模式将交换机的功能限制在由供应商硬编码的昂贵的专有实现上。最近，数据平面可编程性已经引起了极大的关注，允许通信网络的所有者使用具有定制处理功能的交换机。虽然大公司现在都在使用可编程平台，但园区网络和中小型企业尚未充分受益于P4的优势，P4是数据平面编程的事实标准。阻碍更快采用P4的一个关键障碍是针对网络基础设施（CI）专业人员的培训材料的可用性，这些培训材料侧重于P4系统的操作和管理。该项目通过开发在在线教学平台（称为学术云）上运行的动手虚拟实验室来解决差距。该项目将通过P4技术降低创新的准入门槛，这将使CI专业人员能够减少设计，测试和采用新通信协议的时间;设计新的定制应用程序;了解数据包在网络中传输时的行为;开发更有效的防御网络安全攻击;提高网络安全、物联网（IoT）、拥塞控制等重要领域应用的性能，该项目的第一个目标是通过开发虚拟实验室，促进CI专业人员和一般网络所有者采用可编程P4设备。第二个目标是促进P4和虚拟实验室与副学士、学士和研究生学位课程的整合。虚拟实验室中使用的设备包括生产级设备，如软件交换机（例如，Open vSwitch、PISCES）、基于最先进的Tofino芯片的硬件交换机以及开源操作系统和控制器（例如，开放网络Linux、开放网络操作系统）。对于使用物理设备的虚拟实验室，设备吊舱包含连接到云并通过远程访问功能进行管理的P4可编程硬件交换机。虚拟实验室提供功能和流量的真实感，因为它们使用与真实的部署相同的设备，并生成交互式网络流量。它们模拟跨局域网（LAN）、广域网（WAN）、校园网、数据中心和高性能系统的通信。该项目将组织研讨会，以提高人们对这项新技术和虚拟实验室资源的认识，并对P4的CI专业人员进行培训。讲习班通过在加强和保护国家网络基础设施方面发挥关键作用的合作者共同组织和广泛传播：ESnet，为美国能源部提供科学流量的高性能网络，包括国家实验室系统;以及Internet 2和Front Range GigaPOP，两个研究和教育网络（REN），运营国家和区域通信骨干。最后，在与西方学院支持和培训中心，在美国的主要技术培训中心之一，两年和四年的指导，和网络开发集团，在虚拟化培训公司的协调，该项目将培训对P4技术感兴趣的IT讲师。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准。

Traditionally, the data plane of network devices has been designed with fixed functions to forward data packets, using a small set of communication protocols. This closed-design paradigm has limited the capability of switches to costly proprietary implementations that are hard-coded by vendors. Recently, data plane programmability has attracted significant attention, permitting the owners of communication networks to use switches with customized processing functions. While large companies are now using programmable platforms, campus networks and small- and medium-sized enterprises have yet to fully benefit from the advantages of P4, the de-facto standard for programming the data plane. A key barrier preventing faster adoption of P4 is the availability of engaging training material for cyberinfrastructure (CI) professionals that focuses on the operation and management of P4 systems. This project addresses the gap by developing hands-on virtual labs that run on a platform for online instruction, referred to as the academic cloud. The project will lower the entry barrier to innovation through P4 technology, which will enable CI professionals to reduce the time to design, test, and adopt new communication protocols; devise new customized applications; understand the behavior of data packets as they travel across networks; develop more effective defenses against cybersecurity attacks; and improve the performance of applications used in essential areas such as cybersecurity, Internet of Things (IoT), congestion control, and others.The first goal of the project is to facilitate the adoption of programmable P4 devices by CI professionals and by network owners in general, by developing virtual labs. The second goal is to promote the integration of P4 and virtual labs into academic degree programs at the associate, bachelor, and graduate levels. Equipment used in virtual labs consists of production-grade devices such as software switches (e.g., Open vSwitch, PISCES), hardware switches based on state-of-the-art Tofino chips, and open-source operating systems and controllers (e.g., Open Network Linux, Open Network Operating System). For virtual labs using physical devices, the equipment pods incorporate P4 programmable hardware switches that are attached to the cloud and are managed via remote-access capability. Virtual labs provide both functional and traffic realism, as they use the same equipment as in real deployments and generate interactive network traffic. They emulate communications across local area networks (LANs), wide area networks (WANs), campus networks, data centers, and high-performance systems. The project will organize workshops to create awareness of this new technology and virtual labs resources, and to train CI professionals on P4. Workshops are co-organized and broadly disseminated through collaborators that play a critical role in enhancing and securing the national cyberinfrastructure: ESnet, the high-performance network that carries science traffic for the U.S. Department of Energy, including the National Laboratory system; and Internet2 and Front Range GigaPOP, two Research and Education Networks (RENs) that operate national and regional communication backbones. Finally, in coordination with the Western Academy Support and Training Center, one of the main technical training centers in the U.S. for two- and four-year instruction, and the Network Development Group, a company in virtualized training, the project will train IT instructors interested in the P4 technology.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.