nicolas simar, network engineer dante

12
GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2 nd AA Workshop - 20-21 Nov 2003 Malaga, Spain GN2 Performance Monitoring & Management : AA Needs 2 nd AA Workshop 20 - 21 November 2003 Malaga, Spain Nicolas Simar, Network Engineer DANTE

Upload: jett

Post on 06-Feb-2016

32 views

Category:

Documents


0 download

DESCRIPTION

GN2 Performance Monitoring & Management : AA Needs 2 nd AA Workshop 20 - 21 November 2003 Malaga, Spain. Nicolas Simar, Network Engineer DANTE. Introduction. GN2 project starting from Q3 2004 build the successor of the GÉANT network - PowerPoint PPT Presentation

TRANSCRIPT

Page 1: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

GN2 Performance Monitoring & Management : AA Needs

2nd AA Workshop20 - 21 November 2003

Malaga, Spain

Nicolas Simar, Network Engineer DANTE

Page 2: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

Introduction• GN2 project starting from Q3 2004

– build the successor of the GÉANT network– integrated activities between NRENs: Joint Research Activities

(JRA) and Services Activities (SA)

• AA required by various activities in GN2 (non extensive lists)– JRA1 – Performance monitoring & management– JRA3 – BW allocation & reservation– SA3 – end-to-end service quality across multiple domains

• Need to define a common EU-wide AA architecture (JRA5-Ubiquity and/or JRA2 Security?)

Page 3: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

What is JRA1?

• Multi-domain Network Performance Measurement Management Platform – Retrieve network information from several domains through a pre-

defined interface.

– Performance Monitoring:

• monitoring of network characteristics such as delay, packet loss, available bandwidth, “traceroute”, etc

• extended to looking glass functionality

• netflow like data (to track DoS attack)

Page 4: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

What is JRA1?

• Management platform– Provide an “aggregated/concatenated” view of the information

retrieved.

• Available bandwidth R1 -> R2 = x Mbps ; R2 -> R3 = y Mbps ; R3 -> R4 = z Mbps

• Available bandwidth R1 -> R4 = min(x,y,z) Mbps

– Enable users to generate traffic and its characteristics.

• Generate flow <IP (destIP, tos, size, etc); TCP/UDP (port, etc)>

– Allow to retrieve information out of several domains.

Page 5: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

Performance Monitoring OverviewDomain tools

Measurement Points

Drivers

Measurement Points

A B

Problem between A and B

Provide a view on a per domain basis:

First domain infoInter-domain 1-2 infoSecond domain infoInter-domain 2-3 info

Third domain info

problem located here.Here is the output of thesearch.

XXX

Page 6: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

Where does it come from?

• PERT (Performance Enhancement Response Team) need to isolate and resolve end-to-end problems.– The performance monitoring architecture should

provide an useful debugging tool for this group.

• Users are requesting to have access to more and more network information.– GRID to check what is the best way to ship data.– Network/application researchers to investigate the

result of their experiments.

Page 7: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

Objectives• Exchange monitored data between domains to

– Ease the troubleshooting– Give to the network users (for instance end-site systems administrator or

advanced network users) more information about networks-edge to network-edge performances (later on, end-to-end for end-users).

– Network/service health verification.– SLA verification.

• Re-usable parts (as much as possible).• Must be able to cope with new type of tests/network characteristics.

• Heterogeneous monitoring architecture in different domains

Page 8: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

AA Requirements• Different groups of users can perform different actions

(e.g.)– Network end-user can access a subset of monitoring data.– NREN NOC can access a subset of data and perform some test using

measurement points (MP) not under his/her administrative authority. Some limitations are applied to the tests he/she can perform.

– The domain NOC can access any data and perform any test without limitation within its administrative authority.

• Which groups are foreseen?– Domain NOC (NREN)– Other Domain NOC (NREN)– Customer NOC (campus sys-admin, regional network NOC)– Special end-users distributed over different domains or not (GRID - EGEE)– Generic end-user (default)

Page 9: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

AA Requirements1.Every domain must stay in control of its monitoring

infrastructure.1. it decide which group can access which data and which group can do

what with its MPs

2. it need to authenticate the user, map him/her to a group of user and check the what this group is authorised to do.

2.AA between the monitoring tools in different domains?3.Cross domain AA for the end users?4.e.g. a user in domain D1 should be able to start a test

between MP’s in domain D2 and domain D3

5.Flexible & extensible distributed AA architecture.

Page 10: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

Other GN2 activities

• SA3 : e2e service quality– they may automate the service provisioning.– may need some modules to authenticate and authorise

the user requesting the service (for GRID - EGEE)

• JRA3: new services– build a new service providing end-to-end L2

connectivity– may also need to automate the provisioning of the

service

• JRA2: security and JRA5: ubiquity

Page 11: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

Other Issues• What can we do?

– Use the JRA-5 AA architecture or some part of it?– Adapt an AA architecture to our needs (or to the ones

from other GN2 activities)?– Develop another scheme?

• Solicit advice regarding AA implementation in GN2 for the JRA1.

• There are two main types of users.– Domain specific users– Cross Domain users

• Compatibility with internet2 PiPEs.

Page 12: Nicolas Simar, Network Engineer  DANTE

GN2 Performance Monitoring & Management : AA Needs – Nicolas Simar - 2nd AA Workshop - 20-21 Nov 2003 Malaga, Spain

Q&A

Any further Questions, Comments, Feedback or Suggestions

please contact Nicolas Simar ([email protected])