Ethiopian Cyberinfrastructure By Zelalem Assefa Agenda What is Cyberinfrastructure? Major Areas and Elements Ethiopian Status on the Major area of Cyberinfrastructure Networking Organizations Software Computational Resources Collaboration tools Data 2 Expertise Cyberinfrastructure As defined by Indiana University “Cyberinfrastructure consists of computing systems, data storage systems, advanced instruments and data repositories, visualization environments, and people, all linked together by software and high performance networks to improve research productivity and enable breakthroughs not otherwise possible.” 3 Major Areas and Elements Organizations Universities, schools Government labs, agencies Research and Medical Centers Expertise Libraries, Museums Scientific Instruments Research and Scholarship Virtual Organizations Large Facilities, MREFCs,,telescopes Education Communities Colliders, shake Tables Learning and Workforce Development Sensor Arrays Interoperability and operations - Ocean, environment, weather, Cyberscience buildings, climate. etc Discovery Collaboratio Data n Databases, Data repositories Computational Collections and Libraries Education Data Access; storage, navigation Resources management, mining tools, Supercomputers curation, privacy Clouds, Grids, Clusters Visualization Compute services Data Centers Networking Campus, national, international networks Data Software Research and experimental networks Advanced Applications, middleware End-to-end throughput Software development and support Cybersecurity Infrastructure Cybersecurity: access, Computational authorization, authentication Program Infrastructure Ethiopian Context on the Major area of Cyberinfrastructure 1. Networking Campus, national, international networks Research and experimental networks Cybersecurity 2. Organizations Universities Government labs, agencies Research and Medical Centers Libraries, Museums Virtual Organizations Communities 5 Continued .. 3. Software Applications, middleware Software development and support Cybersecurity: access, authorization, authentication 4. Computational Resources Supercomputers Clouds, Grids, Clusters Visualization Compute services Data Centers 5. Collaboration Tools 6. Data Databases, Data repositories Collections and Libraries Data Access; storage, navigation, management, mining tools, 6 curation, privacy Continued .. 6. Expertise Research and Scholarship Education Learning and Workforce Development Interoperability and operations Cyberscience 7. Scientific Instruments Large Facilities, Major Research Equipment and Facilities Construction ,telescopes Colliders, shake Tables Sensor Arrays; Ocean, environment, weather, buildings, climate. etc 7 Networking 1. Campus, national, international networks 2. Research and experimental networks 3. Cybersecurity 8 Campus Network Infrastructure for Universities EthERNet is coordinating the universities in building standard and state of the art campus network, which includes Data Center Infrastructure. Fibre and UTP Cabling Security ,Wired & Wireless LAN, VOIP etc 9 National Network -EthERNet Ethiopian Education and Research Network (EthERNet) is the Ethiopian National Research and Education Network (NREN). It is also a Research and experimental networks EthERNet 40G backbone with 10G access to 36 public Universities and Institute of Technologies having its own state of the art Data Center and Network Operation Center The optical (fiber) backbone is built on highly reliable OPGW and ADSS on EEU high voltage lines. 4841 Km of fibers are used Costs More than 1.2 billion ETB Exchange Point/Internet Gateway is at EthERNet Data Center in Addis Ababa to peer with neighboring NRENs (SudREN, KENET, SolmaliREN) and ultimately will connect to UbuntuNet, GiANT, Internet2 and all other global research and education network. Current Member of UbuntuNet Alliance National Network -EthERNet IP Network -EthERNet T8000 D Berhan Ambo Wollega Gonder Assosa M6000-3s Debere Tabour Metu Adigrat Axum Debre Markos Bahirdar Mekel 40G Semera 10G Welkete Woldiya Bahirdar(5) Kombolcha(6) Wollo Sidst Mizan Teferi Kilo(3) Edge layer Aggregation layer EPR-1(1) Civil service Jimma EPR-2(2) Bole(4) KOTEBE Wolayita Sodo AASTU Adama(8) Welkete(7) Arbaminch EiABC Wachamo AAU Hawassa IOT Meda Welabu Haromaya Bule Horra Dilla Debre Zebit Adama Dire Dawa Jigjiga Defence 12 International Network -AfricaConnect project London (UK) Agreement between AU Gateway PoP (Existing) TENET Amsterdam 10GE (Existing) Amsterdam (NL) Gateway PoP and EU (Co-funded by (Existing) Khartoum (SS) TENET SEACOM 10GE funded by EU80% ) Africa – Europe (Existing) Addis-Ababa EIG Circuit (ET) Mombasa (KE) Phase 2 Gateway PoP PoP Kampala Nairobi But we are also (KE) (UG) Edge (Country) PoP Dar Es Salaam (TZ) P/PE Core PoP Kigali Gateway PoP negotiating with (Non-African Circuits) (RW) Maputo (MZ) P/PE Wet backbone Kinshasa P/PE Core PoP Core international provider to (CD) Lusaka (ZM) Wet Backbone Links Blantyre (MW) Existing Circuits hook us to UbuntuNet Windhoek Cross Border Circuit (NA) Phase 2 Circuit MPLS X-Connect TENET CLOUD alliance router in London Future WACS Cable Mtunzini (ZA) Intercontinental Circuit Gateway PoP The AfricaConnect project will benefit researchers, educators and students in Southern and Eastern Africa, focusing on the member countries of the UbuntuNet Alliance. It aims to establish a high-capacity Internet network for research and education in Southern and Eastern Africa to provide the region with a gateway to global research collaboration. Organizing a direct interconnection of the resulting regional network to GÉANT International Network – Ethiopia’s connection the outside World • Sudan (Port Sudan) • Djibouti 3 International • Kenya (Mombasa) Gateways • Addis Ababa • Bahir Dar (North through Khartoum Sudan) Redundant • Dire Dawa (East though Bahir Dar Dire-Dawa Addis Ababa National Djibouti) Shashemene Gateways • Shashemene (South through Kenya) • Total capacity is 27.74 • Through Djibouti = 14.88 • Through Sudan = 7.74 (Canar Internet Tele=4.34 and Sudan Tel = 3.1) Bandwidth • Keney (SAFARICOM) = 1.24 • Satellite = 0.465 • Broadband, Mobile & Fixed Telephone • 10 Gbps are currently being upgraded to 40Gbps National Backbone • Currently 12.5k( Km) fiber all over the country and upgraded to 18k (KM) after a year 14 Cybersecurity We have 2 firewalls to protect the whole network applications. Those two firewall are running HA (active- passive) mode and provide access, authorization, authentication. Firewall deployment topology as follows, EthERnet 1 1 0 0 G G FMC1/1 FMC1/1 HA(Active-Passive) Port1 US6820-1 Heartbeat US6820-2 Heartbeat Port2 FMC1/2 FMC1/2 1 1 0 0 G G Vlan100 Vlan101 Vlan102 Vlanx VlanN Eth1/1 Eth1/1 LAN Cisco Nexus 7009-1 Smart Group1 Cisco Nexus 7009-2 Smart Group1 Identity Other application Email Web Hosting ... Management system system Organizations 1. Universities 2. Agricultural/Gov labs, agencies 3. Research and Medical Centers 4. Libraries, Museums 5. Virtual Organizations 6. Communities 16 Organizations to be Connected - EthERNet Phase II Project 1. 100 or more higher education and other organizations to be connected to the EthERNet network. 2. Meshed transmission The transmission network will be meshed topology, and the ring topology shall increase from 2 to 5 Rings. This will enhance the network security, strengthen service availability. 3. Full OPGW migration Most of the fiber route uses the existing OPGW cable, but needs to migrate the rest that uses the existing ET’s optical fiber cable. Meanwhile, it needs to push EEU to prioritize the OPGW construction in favor of the cities which accommodate universities. 4. Redundancy at the aggregation layer For the aggregation layer, one more AG router should be for each aggregation site Fiche Gambela Dembidolo T8000 Black Lion Paulos Medical College Mill.Medical Coll M6000-3s 40G Mekidla 10G KOMBOLCHA- Amba Debark BIHAR DAR-ARA ARB KOMBOLCHA-ARA Engebara BIHAR DAR-ARB Maichew SIDIS KILO- ARA SIDIS KILO-ARB DataCenter-EPR-1 Edge layer Aggregation layer DataCenter- BOLE-AR2B BOLE-AR2A EPR-2 Bonga WELKETE-ARB Adama-ARA Kebridahar Asebe Teferi Worabe WELKETE-ARA Adama-ARB Asela Jinka IP Access Network -ISP • Other organization can easily connected to the network using the ISP infrastructure Broadband Internet CDMA Mobile (GSM) VSA • 84 IP DSLMS in 75 Major Cities • Wireless • 720 words & Main roads have Currently (10 are in Addis) Local loop coverage deployed VSAT • DSLAMs provide broadband intended • GPRS (2.5G) data services is system has the services using ADSL2+/VDSL2 for rural available for all mobile users capacity to technologies areas • EDGE (2.75 G) data services transmit both • About 2000 MSAGs in 75 major • Provide for Addis Ababa & Major cities; voice cities Mobile current active user are 1.4M (television), Data • MSAGs Provide broadband access • 3G : 1.5M capacity available data (Internet) services & with the capacity to support 1.2 in Addis, 4.5 M capacity in and telephone 1x/e-video Million Subscribers regions under implementation 96% internet to be complete in end 2015. • MSAGSs Installed near all connection Government • 4G : 400K capacity data residential and business areas s Secondary • 507 mini-DSLAMS in 507 Woreda services is available in Addis schools have • 90% Ababa: VSAT Towns geographic • Currently 35,478,485M • Each DSLMS can support 24 al 1357 schools Mobile subscribers all over the customers coverage are country. • Out of the 507 Min-DSLAMs, the of the