Ielements (up to third-order), beta functions, tunes,chromaticities, radiation integrals, natural emittance, floorcoordinates, beam moments, etc .. It also has the ability tooptimize results of tracking using a user-supplied function ofthe beam parameters at one or more locations.

Figure 1.1.2: Beam analysis using Elegant and its CUI

Sequential application Tracy3 is successfully ported onIntel Xeon Linux server. This program does the computationof off momentum particle (i.e. electrons) loss in presence ofmultipolar magnetic field error.

Parallel application ORBIT_MPI (Objective RingBeam Injection and Tracking - a particle tracking code forparticle accelerator rings) is successfully ported on Kshitij-lHPC cluster using GNU FORTRAN 77 & C (g77, gcc)compiler, OpenMPI version 1.3.3, FFTW version 2.1.5.

Porting of above three software packages i.e. Elegant,Tracy3 and ORBIT _MPI was required by Indus Operations &Accelerator Physics Design Division.

Parallel application ADF bundle with HPMPI(Amsterdam Density Functional, version 20 10 - a FORTRANprogram for calculations on atoms and molecules) has beenported successfully on Kshitij-2 HPC cluster. Porting of thissoftware was required by SRS Coordination section.

E) Training and hands-on sessions conducted at UserHall:

One week training course on Microsoft Excel wasorganized by Computer Centre for RRCAT employees in twobatches during 18thJuly to 29thJuly 2011.

One week training course on HTML 5 was organized byComputer Centre from lOthOctober to 14th October 20 11.

Reported by:Alpana Rajan (alpana@rrcat.gov.in) and Ani! Rawat

RRCAT NEWSLETTER ~ ;iiSY; l34

INFRASTRUCTUREI

1.2: Development of Information Systems atRRCAT

A) Commissioning of new RRCATInfonet server in loadbalancing mode for high availability of applications:

The reliability and availability ofRRCATlnfonet serverhas become critical due to deployment and wide usage ofapplications like Project Monitoring Software, BudgetMonitoring Software, Indent Preparation Module, PurchaseInformation Module, software packages for APAR (AnnualPerformance Assessment Report) Evaluation andAssessment, Leave, Payslip & Income Tax details etc .. Theseapplication software packages have wide user base, thus theyhave direct performance value and time window limitassociated for any downtime and unavailability.

Server Load Balancer SLB was installed and configuredfor Tomcat web server with features for applicationacceleration, failover, security and management for newRRCATInfonet clustered servers.

The new setup of Server Load Balancer and clusteredweb server has been configured to provide high performance,high availability, and scalability of RRCATInfonetapplications by distributing the load among applicationservers. Load balancing switch has been configured to routethe http, https, sftp and smtp requests to distribute load amongapplication servers by maintaining IP persistency in round­robin manner. Two Application servers have been setup byusing Apache Tomcat v 6.0.29 and JRE v 1.5. One server hasbeen configured as file server to share the applicationdirectory to the web servers over NFS (Network File Systemversion 4.0).

Cliftnl

.~~

HTTPS •••••3 ~ .

"'" RRCA Tlnlon ••

$o,-ver LoadBalancer

Figure 1.2.1: Server Load Balancer for applications onRRCATInfonet

Vol. 25 Issue 1, 2012 ~

INFRASTRUCTURE

The application servers and file server have been installed andconfigured on Dual processor Quad core Xeon @3.4 GHzservers with 16 GB RAM. SSL is configured for digitalcertificate based applications. Configuration has been donefor integration of Tomcat Web Server and Java Servlets withOracle lag OCA (Oracle Certifying Authority) server for PKI(Public Key Infrastructure).

The software has two steps for Registration process forcandidates applying on-line. Based on the information filledby applicants in first step, login credentials are sent to themthrough email.

,tlt1"'~I\ Welcome to Online Application Submission for RRCA T Recruitment

",..

Figure 1.2.2: On-line Application Submission for RRCATRecruitment

Server load balancing will help to address the followingrequirements:

B) Development and deployment of software for On-lineSubmission of Applications for Recruitment of RRCATon Internet:

After final submission of application form, an email issent to the applicant mentioning his Application Number forfuture reference and correspondence.

: FW :QmI!I'(.1io)1\ PI,SCtItiWI~l) ==~f1R1)

~=t~~lr'1:~;r~iit'ehft(=~~:~=a=;~=~~~=;£:V~CGPA~~6~~:s::~oo·;·..4~:"" ",

Application forms have been developed using PHP,HTML and Javascript. Appropriate validations are enforcedfor mandatory fields. The software was tested thoroughlybefore deployment using SQL injection tests.

Data Pump procedure is written in Java for dataconsolidation with Oracle lag and MySQL databases. Data issynchronized between Internet database server (MySQL) andinternal database server (Oracle lag). Software module forRecruitment Section has been enhanced for maintaininginformation related to applications for RRCAT Recruitment.The software provides interface for entry from paper basedapplications received by Recruitment (i.e applications notfilled online over Internet by the applicants). Provision hasbeen made for updation of "Paper copy received" status ofapplication submitted online from Internet and its paper copyreceived at Recruitment. Call letters for applicants weregenerated by using this software .

:R.f!'tJli'PMWr

:' Milt

''''''

Ifvou hm IIIUCY r.gt.tlred forU1!. POILQ!t~t!!

FOffllWUllff.gjltfltion,ftUupltl.loIlo-Mngdltlll.

After entering his/her credentials (Email-id andpassword), applicant will be required to fill Personal Details,Educational and Professional Qualifications, Course ofStudy, Experience, Details of Relatives employed in DAE etc.Applicant can edit the application details and preview theapplication form before final submission of application.After completion of final submission, the application form isgenerated in PDF format and applicant can not modifyapplication details. Applicant can print the application formand send the signed paper copy with required certificates toRecruitment Section for further processing.

Figure 1.2.3: User Registration Form

E"'''''S«Ur!\)'~fWtlhl(m.It~I'It)Qi~~

Ct3' D(' cr:~---'

'-CtKkntrt..""NO.Cfhlt1o.tllt<lbptfitncf

Advtlt1""".fI1 N~: ~II;C'f.2lto11 lnt nMt!of IIttflpl".,pltutlOn: "'Jtn.~1'"'P9IlWl!Onlll't!ll'tlttdlofhl~",~plh.loIIowIllfpoll'

t,!~iMrt(nI'lCornwtt·t:JtIJ[tiC~"'~<rI\ISclitlWtI(OltctrC IiIItIIlrninlnMTlofeGIItoFIII'l'101tq\haJillnlCGF"iI'.,E>Wif/Ke 01 S«!Wt dmlOt'mtro! In U" Jt~ 1!~fM<Yfl:l1Of(COIIIpUIf!) e!,-eTttn{.:tI1wr.ml'kJrtltQ\O'jlitn!CGP'I'"5tf'ttIt~.!cK~OIWC'olR;rw,IS 011(:)

COrrQohr5tllfflCtt~!~

Ot~!'~12\tflltlplarYlrlp.emlMono!

rtthrKlllorr.ce','C U 1tIMt(l\enitll'/i1ll\I~Q!~'~">MQI'btJId;l'I\IlII!Con«oQf'oII\g~JOI)Od(~P\e1'!lW1\l i(lIeH'Vti:I1IY(Mec!lWIUI) ~"ntCIiPA ",1I!II"K\It'OI\eI~J1tl'\ai!W19toH'i.&CtI'1O otI¢)~,,*h.~tI\iIIi1,"

""co ••

High Scalability - Server load balancing makes the twoservers appear as a single server - a single virtual service - bytransparently distributing user requests among the servers.Thus making the setup highly scalable.

High Performance - Server load balancing can direct userrequests to the server which is least busy and thereforecapable of providing fast response time.

High Availability - It improves application availabilitybecause if an application or server fails, load balancingcan automatically redistribute user requests to the otherserver.This new setup ofRRCATInfonet in load balanced mode

will provide better performance and response to the users.

Web based software has been designed, developed anddeployed for on-line submission of applications on Internetfor Recruitment ofRRCAT. The software is developed usingopen source tools like PHP version 4 and MySQL version 5.Application software has been deployed on Linux server withCentOS (64 bit) version 5.5, MySQL database with opensource GreenSQL firewall to protect the database fromvarious known threats.

'j11tft~, Welcome to Online Application Submission for RRCA T Recruitment

• RRCAT NEWSLETTER Vol. 25 Issue 1, "20fZ"

IAdministrative interface was developed and deployed on

RRCATInfonet for viewing Post-wise applications submittedfrom Internet or entered by Recruitment Section. Thesoftware was used for screening of applications on the basis ofeligibility criteria like Diploma! Graduate/ Post GraduatePercentage/ marks, age, category etc. Information related toscreened-in applicants was generated for screeningcommittees. Using this software PDF file of selectedapplicants can be generated for RRCAT website.

Sd.mrk OfIImlC iCOIIpIII«I1 I!!i1

50~ ~aIi:I1~m n_ NOOin Gei.iefn c~ - Doecilil1h - tit-_·I ~- StriRAMBRI<SI1YPDAV -Male ooc n5-J0\N.1{85" ~

2~Stri_~ MaleGN 04-fEB.198'3~AlNIoM

3 ~-- StriGmj~ Male - OOC tJ5-W+.1~ ~1Ieh

4 ~~AT_l';;O!-INi4'i-- Stri~~DJ.lSKEENAU Male COC _63:N"R-!~ ~-5 ~ Stril<t.nm~_· MaIe-OO::---'8-J.l:1!B~-~--m

6 RRi';j.5i'ji"!IN'116" Strirrw.siHI~--- u __ "'*-- GN - !4-!:ECHBI i'Itrt,'fiu7 ~ SI,rMsanRm MaIe--ON --02.fEB.19111----rieWlletin n"(fJ---

B ~ Stri.MCH)~~ Male OOC -- ,H-OCT-I900·- ~ <[1 -'~-i

9"" ~ Stl'lt.tn:lZeeW1F~ --n-n--"'*--OOC ----24-J..N.1!1!8--~ ---------il----In mT--~hoiiNifo--- -Stii"kinSIi~--------- "On -- I.taIe ---COCo .. 11J.J..l.1l9J----~ . :_~-!n1,----~lli--- Stri_Ak:t,m-m.---- n_ mn---n"MaIe mG! -----:24-I:EC-1!1J7---hm U -···-----;E12'u-~ StriR¥shKllnarn -----m-MaIe OOC"uos.IMY.I900 N.JDIi'--------·:t!"13 RRCAT-7iiOiiitl3t I<J.I_NA'OIPA18.- -- Female DOC (l4.WoR-1991 EKJPfIl -- ~I~'-

14 ~ ----sM_$l.tl.t.U<'Al1-- .--- --Male -'COC ·-··lJ3.ocT~!{IJ7-- GwaIn"' ---------:r"15----~ StriSaltt(a~ l,4a1e---GN-----~IIR1-~ u;f.;

Figure 1.2.4: Administrative Interface on RRCATInfonetforRRCAT Recruitment

Provision has also been made in the software for viewingthe status of application (on Internet) on the basis ofapplicant's email-id, application no. and date of birth.

This software was used successfully for submission ofapplications on-line over Internet and further processing. Thesoftware reduced manual data entry of applications byRecruitment Section.

C) Performance Analysis of Web based Applications onSingle and Multi Core Servers:

Performance of existing single core single processorRRCATInfonet server was compared with dual processorquad core server for response time of web server, throughput(number of hits vis response time) and connection pooling visno connection pooling using Open Source PerformanceTesting Tool Apache JMeter. It was found that performance ofJava applications running on multi-core server is far betterthan those running on single core server. Web applicationsrunning on multi-core server give better performance andscalability.

Apache JMeter was used to load test the functionalbehaviour and measure performance based on throughput(number of hits vis response time) for dynamic querying ofPurchase database using Java servlets on Tomcat Web Server.The performance was tested by varying the number of users

I RRCAT NEWSLETTER

INFRASTRUCTURE

and number of threads. Load of 1000 users was simulated on

the database server to analyze overall performance underdifferent load conditions. The results are shown graphically infollowing two figures.

L_--..,·_,.:.' __ ":·f••.••• ;::_: ....~

"'_"_ l·_ ~__ ~.._ "._ ~_

Figure 1.2.5: Throughput on Single Core Server

Figure 1.2.6: Throughput on Quad Core Server

Based on the analysis of performance of web server, thethroughput of 1000 concurrent requests on quad core serverwas 180 per minute as compared to 69 per minute on singlecore. This shows that throughput of dual processor quad coreserver is almost three times more than that of single coreserver for 1000 concurrent users. Applications running onquad core server give more throughput and less response timeas compared to single core server.

Performance was also compared by running the testsusing Java Servlets for connection pooling and also byacquiring connections directly from the JDBC driver withoutconnection pooling. On comparing the pooling results at eachiteration checkpoint with the non-pooling results, it wasfound that connection pooling provides a significantimprovement on performance by reusing connections ratherthan creating a new connection for each connection request.

Based on the JMeter results shown graphically in Figure1.2.7 and 1.2.8, it was observed that the throughput of 1000concurrent requests using pooled connections was 468 perminute as compared to 83 per minute using non pooledconnections.

_ Vol. 25 Issue 1, 20:t~1

INFRASTRUCTURE

This indicated that throughput using pooled connectionsis almost six times faster than non pooled connections andweb applications realize significant performanceimprovements by using connection pooling over noconnection pooling.

Using this OCA PKI setup, Digital Certificates have beentested as proof-of-concept for:

Reliable two factor user authentication - the first factor isproof of possession of private key and second factor isvalidation of public key belonging to specific identity byOCA ..

SSL communication for web server - client browservalidates identity of a web server and encrypts data flowbetween browser and web server.

OCA PKI setup will be used for deployment ofworkflow based applications in near future.

Figure 1.2. 7: Pooled connections throughput

Reported by:Alpana Rajan (alpana@rrcat.gov.in) and Anil Rawat

1.3: Development in Networking andCommunication at RRCAT

A) Email service enhancements:

In our endeavor to improve and secure the emailsservices at RRCAT, following enhancements were made tothe email services setup:

Figure 1.3.1: Email account details view

1) Enhancements to LDAP (Lightweight DirectoryAccess Protocol) setup:

Email accounts at RRCAT are being managed usingLDAP based directory service with "ou=People,o=cat,c=in"as the base Distinguished Name (DN). This setup wasupgraded by adding "Account Validity", "Account Status","Description" and "Internet Access" attributes to eachaccount record. Proper values of these attributes for everyaccount (1800) were verified and then inserted in the existingdatabase using PHP and shell scripts. Figure 1.3.1 depictsemail account details view showing newly added attributes.

20281130065S28Z

11~

,.co.

gidNumber

........,.. -- I :::s~i~

.~ ~OO~~~

"~~~:V~~~~~I~~;~:~ervef!ecHol,,*,,~"·""_:__ ""'''''' !

if ~Jo=cat,c=1n , en

I "' ••• ~M•••

I-"""""""'athI

lIescnpoorf

Figure 1.2.8: Non pooled connections throughput

Oracle 109 platform provides tightly integrated OracleCertifying Authority (OCA) and Oracle Single Sign-on. Theintegration of Single Sign-On with OCA enables less timeconsuming setup for SSL communication between client,application server and database server. Oracle PKI setupneeds combination of robust infrastructure for managing anddistributing digital certificates and also for enforcing policiesrelated to certificate strength and validity period.

D) Oracle Certifying Authority 109 setup for DigitalCertificate based Applications:

Infrastructure for Oracle 109 OCA (Oracle CertifyingAuthority) has been setup for issuing and managing DigitalCertificates. This PKI (Public Key Infrastructure) setup willbe used for management of Digital Certificates that providedigital identities required to automate Digital Signature basedprocesses.

We have configured OCA end-user interface to obtain acertificate which can be imported into user's internet browserusing Single Sign-on credentials. We have imposed 1024 bitsRSA key length for employees and 2048 bits RSA key lengthfor servers/ PCs. The certificate validity period can also bedefined. Unique certifIcate constraint has also been enabled toprevent OCA from issuing multiple certificates to the sameemployee.

l~fRRCAT NEWSLETTER Vol. 25 Issue 1, 20121