KREONET & GLORIAD-KR(KREONet2) Contents 1. KREONET and KREONet2 Infra. (local and global), Services, KREONET-S (SD-WAN), Upgrade 2. LHCOPN and LHCONE Activities KREONET (Korea Research Environment Open Network) - (1988) started with Korean National Science & Research Network. - (2005) As a Core Member of GLORIAD project, Started international research network service. - 17 Domestic Regional GigaPoPs(Seoul, Deajeon, Gwangju, Busan, Changwon) - 4 International GigaPoPs(Chicago, HongKong, Seattle, Amsterdam) - Support about 200 R&E organizations : Government Research Institutes, Universities, Public Sector, libraries, and so on. on. - Operates 365*24 NOC (Network Operation Center) Service - Connected with Internet exchanges (KT, SKB, Sejoing Telecom) and L2 direct peering with Clouds(Amazon, Microsoft) - Provides L1 LightPath service, L2 Carrier Ethernet Service, <Major Activities> - KREONET-S (KREONET SD-WAN) Project - eduroam KR, NRO of Korea MAP OF KREONET 2017 - CERT-KREONET - Science DMZ, DTN, … KOREA RESEARCH ENVIRONMENT OPEN NETWORK Seattle Chicago Gangneung Seoul Incheon Songdo Suwon 200G United States of America Cheonan 100G Sejong Ochang IX Internet eXchange – 10G Daejeon Pohang Amsterdam Daegu Jeonju CERN Ulsan 100G Hong Kong 100G 100G Changwon Busan Europe Gwangju China 10G KREONET POP - National-wide 100Gbps National Research Network 100G KRLIGHT POP - 17 Domestic GigaPoPs, 4 International GigaPoPs - KREONET Backbone Availability: 99.99%(‘17) - KREONet2/GLORIAD Backbone Availability: 99.90%(‘17) Jeju - User: about 200 national research institutes, universities etc. (500,000 users) . KREONET: Korea Research Environment Open Network - Installed in 17 domestic regional PoPs http://stats.es.net/ServicesDirectory/ - 100Gbps perfSONAR enabled in Daejeon PoP, opened for users • • 10,000 Tbyte 10,000 Tbyte 12,000 Tbyte 14,000 Tbyte 16,000 2,000 Tbyte 2,000 Tbyte 4,000 Tbyte 6,000 Tbyte 8,000 Total Traffic Volume is almost 14,000is Volume Traffic Total upgrade the last since rapidly growing been the traffic has volume 0 0 Tbyte 2011년 1월 2011년 3월 2011년 5월 2011년 7월 2011년 9월 2011년 11월 2012년 1월 2012년 3월 2012년 5월 2012년 7월 2012년 9월 2012년 11월 2013년 1월 2013년 3월 2013년 5월 2013년 7월 2013년 9월 Last Upgrade Backbone 2013년 11월 2014년 1월 2014년 3월 2014년 5월 Tbytes 2014년 7월 2014년 9월 2014년 11월 2015년 1월 2015년 3월 month(2018)per 2015년 5월 2015년 7월 2015년 9월 2015년 11월 2016년 1월 2016년 3월 2016년 5월 2016년 7월 2016년 9월 2016년 11월 2017년 1월 2017년 3월 2017년 5월 2017년 7월 2017년 9월 2017년 11월 2018년 1월 2018년 3월 2018년 5월 2018년 7월 2018년 9월 Bio/genome Supercomputing HEP High Energy Physics Climate Education… Astronomy Future Internet Changes Climate Changes Education & Collaboration Community-based Virtual Network Physical Backbone Medical Science Future Internet Astronomy Bio/Genome Culture & Art Constructions Supercomputing KREONET High Performance Networking Service Technical Support For advance research Lambda Networking Service(Lightpath) L2 VPN Service bandwidth gurenteed(CE) Big data transfer 1:1 bandwidth gurenteed Networking Service 1:1, 1:M, M:N high performance Virtual Private Networking Service Consulting for Science DMZ, DTN Tuning Network and end System R&E IP Networking Service SDN-based VDN (Virtual Dedicate Network) Service General Internet Service Dynamic Bandwidth on Demand Service by user-controlled for High-quality Media transfer 1G/10G/100G end-to-end path Support for 4K/8k Gateway 첨단 네트워킹 서비스 CERT-KREONET KREONET Additional Service As a National Critical Communication L2VPN-based network integration Facility appointed by Ministry of Science example) between head-quarter and branch office and ICT Performance Measurement and Enhancement Security Analysis and Evaluation for KREONET Troubleshooting for network performance based on Infrastructure PerfSONAR 과학기술사이버안전센 KREONET user protection NTP-based Time synchronization터 service Technical Support and response for cyber attack NTP: Network Time Protocol Integrated Support System for Security Control KREONET DNS IPv4/IPv6 and Automation Integrated AKAMAI CDN Service, DNS sinkhole KROENET e-conferencing KREONET eduroam Service Service Software-based e-conferencing System Building national eduroam service Vidyo Role as a NRO (National Roaming Operator) Hardware-based e-conferencing System Policy and technical support for national Cisco MSE800, Telepresence System eduroam service All KREONET users can use Promotion for eduroam service Assignment RO for High educational sector (University) : Chonnam Natioanl University Assignment RO for other sector (public…) . e-KVN: Korean e-VLBI(electronic Very Long Baseline Interferometry) Network . Real-time e-VLBI observation with real-time correlation between observatory JIVE Yonsei Astronomy Observatory Daejeon Correlation Center 100G 40G (+1G) 100G AARNET KREONet2 Seoul Daejeon 10G(+1G) Jeju Ulsan 10G(+1G) Tamna Astronomy Observatory Ulsan Astronomy Observatory KMTNet JP InternationalJP - (Daejeon) Correlation Center Correlation KASI KR (SDO) Stanford Stanford (SDO) NASA Univ., SDO with hig Data Transfer Nod 100G High performance per WAN f S h -speed storage O N A R e High-b W 10 Clea AN pat GE a ndw 10G n, h id th security policy control points Per-service Border Router Border Router Border 10GE acc Swit Sc DM Site / Campus ess ienc Z r ch/Rout perfSONAR to esou e DMZ Science r ces 10GE er per f S O En N Ro A Site / Campus te R ute r p ri LAN 10GE r se /F ire B Observ , ATCF, … , ATCF, o w rd al e l r Center, KaVa Sejong Geodetic 10G ation VLBI) JIVE, VERA, JIVE, VLBI) - InformationInstitute National GeographicNational (e NAOJ, Space 40G(+1G) 10G(+1G) 10G(+1G) ) Jeju astronomical astronomical i SSO(Australia) SAAO(South Africa) SAAO(South CTIO(Chile) - - - observatory ( observatory Ulsan astronomicalUlsan observatory (Ulsan) observatory observatory (Seoul) observatory Yonse Tamna KMTNet KMTNet KMTNet • ScienceDMZ for KISTI 5th Supercomputer – Dedicated DTN connection with NERSC DTN • Peta Scale DTN transfer Project – DTN Cluster on 100GE • Globus Online – GridFTP 5th Super- Normal computer User F/W DTN File 100G Switch System DTN DTN … SDN (VPN/ DTN Cluster DTN VDN) 슈퍼컴퓨터 5호기 DTN Cluster 100G/SDN Peta Scale transfer environment Collaboration with ScienceDMZ architecture for HPC ESnet Science Engagement ([email protected]) - 11/21/2018 © 2015, The Regents of the University of California, through Lawrence Ber over KISTI 5th Supercomputer NERSC ScienceDMZ keley National Laboratory and is licensed under CC BY-NC-ND 4.0 • 100G connection with KISTI Booth@SC18 – 100G DTN demonstration between SC18 KISTI booth and Daejeon – 100G switch and DTN will be set up at booth – PRP/APRP collaboration • Participate in Global 100G DTN demonstration with Caltech (Harvey Newman) – Participate in several demonstrations with Global partners • 100G LSST Demo (Working on a scenario) – Focus on real LSST data from Chile to real user of Korea via US – KASI(Korea Astronomy and Space Science Institute) • One of 100G users in KREONET • One of the international contributors on behalf of the LSST Korea(http://lsst.kasi.re.kr) – Two Endpoints will be available • KASI and KISTI(Daejeon) • 100G DTN will be set up before SC18 ESnet Science Engagement ([email protected]) - 11/21/2018 © 2015, The Regents of the University of California, through Lawrence Ber keley National Laboratory and is licensed under CC BY-NC-ND 4.0 Legacy Network Software-Defined Network Open Source (Vendor Neutral) High Vendor Dependency High Scalability (Vendor Lock-in) Central Control Inability to scale Virtualization Distributed Control Saving CapEX/OpEX Developing application(service) software Setting up the central control plane (OS) Building the SD-WAN infrastructure Production-level SD-WAN Deployment Intl’ Exchange (via PacificWave) Chicago-Edge Yonsei ScienceDMZ/DTN Observatory Intl’ Exchange Seattle-Core (via StarLight) OverCloud-Box (via GIST) Chicago-Core Ulsan Seoul-Edge Observatory Chicago-Edge Tamna Observatory Seoul-Core PLSI Hongkong-Core (via KISTI) Intl’ Exchange Hongkong-Edge Deajeon-Edge (via HKLight) Cloud Gateway ScienceDMZ/DT (COREEN) N Deajeon-Core OverCloud-Box GwangJu-Edge (via GIST) Busan-Core GwangJu-Core ChangWon-Core Busan-Edge PLSI KIMS (via GIST) ChangWon-Edge Tongmyong Univ. - Bandwidth on Demand by user create end-to-end dedicated network by researcher & scientist - Easy-to-Use User Interface Simple and Rapid: several-click Easy, ms Fast - User-oriented Network Visualization and Monitoring Virtual Network Topology and Operational Attributes VDN Manager: Main Scree n Time-to-Research & Time-to-Collaboration Global Topology View User-oriented Visibility: E2E & Whole VDN Topology Views Amster Amsterdam, NL < 242ms dam @Interxion 10Gbps 10Gbps < 155ms Chicago, US Chicago @Northwestern University (StarLight) Hong Kong, CN Daejeon, KR @Mega-i Advantage @KISTI 100Gbps 100Gbps Seattle, US Hong Daejeon Seattle Kong @Westin Building 10Gbps 10Gbps (PNWGP) < 33ms 0 ms < 110ms NetherLight, GEANT, NORDUnet, KIAE Amsterdam, NL StarLight, ANA- Chicago, 300G, US CANARIE, Internet2, Esnet, AMLight Seattle, US PacificWave, CANARIE, APR, TEIN, HK- Daejeon, Internet2, ESnet, IX/HKOK, KR CENIC CSTNET/CERNETHong Kong, CN 10Gbps 100Gbps (In Service) 2019.3.1~ 2. LHCOPN and LHCONE Activities LHC Optical Private Network Unprotection 10Gbps NetherLight Over ANA300G CERN KRLight KRLight L3 peering CERN network (Daejeon) (Chicago) (backup path, KISTI Dedicated 10Gbps over 100Gbps TBD) L3 peering CERN network (backup path) 10Gbps (backup) Prefix Advertising CANARIE (AS6509) (Now) GSDC(T1) AS17579 134.75.125.0/24 ASGCnet Internet2 (AS24167) (AS11537) (Near soon) 100Gbps 10Gbps KNU(T2) AS1237 155.230.20.0/22 100Gbps KCMS AS1237 210.117.209.0/25 PNU AS1237 203.253.142.0/24 KREONet2 TEIN 10Gbps (AS17579)/ 10Gbps CERN (AS24490) KREONET (AS20641) (AS1237) 10Gbps 10Gbps 10Gbps KIAE 100Gbps (AS59624) JGN GEANT (AS17934) (AS20965) 10/100Gbps ESnet (AS293) SINET (AS2907) Done In progress .