gÉant now and next steps -- agnès pouélé ([email protected]) agnes pouele, network...

GÉANT now and next steps -- Agnès Pouélé ([email protected])

Agnes Pouele, Network Engineer DANTE

GÉANT now and next steps

NORDUnet 2002 Conference

Copenhagen 15th of April 2002

GÉANT now and next steps -- Agnès Pouélé ([email protected]) 2

Agenda

• Introduction to GÉANT

• GÉANT topology

• GÉANT peerings

• GÉANT services– Multicast– IP premium– Other activities

• Long term views


Introduction to GÉANT

• GÉANT is a 10 Gbps Pan-European Network that supports the development activities of the European National Research & Education Networks (NRENs)

• GÉANT was launched in December 2001 and is the successor of TEN-155


Cyprus

Israel

Estonia

Latvia

Lithuania

Slovak Rep.

Romania


GÉANT Topology

• We have currently 19 PoPs across Europe– 2 New PoPs under construction: Israel and

Croatia

• Trunks– 9*STM64 in West of Europe– 12*STM16 in West and East of Europe.


GÉANT Topology

• Accesses to GÉANT– 12 connections at STM16 POS capacity– 10 connections <= to STM1 capacity


GÉANT Topology

uk

fr

at

ch

cz

pl

hu

sk

gr

ie

si

be

nl

lu

it

es

de

se

IUCCJanet Nordunet

EenetLatnet

Litnet

Posnan

DFN

Cesnet

Sanet

HungarnetRoEduNet

Arnes

Grnet

Switch&Cern

Renater

Rediris

FCCN

Surfnet

Belnet

Restena

Heanet

Carnet

INFN

Aconet

Unicom-b Cynet

STM64 circuitsSTM16 circuitsSTM4 circuitsSTM1 circuits


GÉANT ConnectionsNREN ACCESS MCAST Type

Austria POS STM-4 NO Mcast

Slovenia POS STM-4* NATIVE

Belgium POS STM-16 NATIVE

Croatia ATM E3 NATIVE

Czech Rep. POS STM-16 NATIVE

Cyprus E3 TBA

Germany POS STM-16 NATIVE

ESTONIA POS STM-1 NATIVE

Portugal POS STM-4 NATIVE

Greece POS STM-16* NATIVE

Ireland POS STM-1 NATIVE

Hungary POS STM-16 NATIVE

Italy POS STM-16 NATIVE

Israel T3 NATIVE

United Kingdom POS STM-16 NATIVE

Latvia E3 NATIVE

Lithuania T3NATIVE

Norway, Sweden, Finland,Island

POS STM-16 NATIVE

Poland POS STM-16 NATIVE

Spain POS STM-16 NATIVE

France POS STM-16 NATIVE

Luxembourg POS STM-1 NATIVE

Roumania E3 NATIVE

Slovak Rep. POS STM-1 NATIVE

Netherlands POS STM-16 NATIVE

Switzerland POS STM-16 NATIVE/TBA

Bulgaria E3 TBA

• 27 National network research peerings


GÉANT Research Interconnections

GÉANTAS20965

CAnet

DFN

NREN2JANET

NREN4

GTRENSTM-16

UKDE

Esnet

... ...

AbileneSTM-4

www.dante.net/nep/gtren.html

GTREN is the Global Terabit Research & Education Networkinitiative of DANTE and UCAID to establish an intercontinentalnetwork connecting the various regional research networks.


Future Connectivity • EUMEDConnect Project (36 months)

– Part of the Euro-Mediterranean Information Society (EUMEDIS) initiative

– EuropeAid (EC) funded programme

– Beneficiaries are most of the North Africa and Eastern Mediterranean states

– EUMEDConnect aims to provide the necessary network infrastructure

– Will provide intra-regional connectivity and connectivity to GÉANT

– Phase 1 (until end of April)


• Caesar project– Same type of project but for South of America

Future Connectivity


GÉANT Services

• GÉANT Standard IP Service• Ip traffic from NREN to NREN (About 27

countries)• IP traffic from NREN to Research Peerings

(Abilene, Canarie, Esnet, NII ..)

• Commodity peerings• Commodity IP users to Commercial Peerings

(KPNQwest, Global Crossing, Infonet)


GÉANT Services

• Multicast Service– Multicast is enabled for all the NRENs and

Research Peerings

• Replacement of the Managed Bandwidth Service– Premium IP Service (End to End Service for low

Delay, low Jitter, negligible loss).– VPN layers 2


GÉANT Services

• Upcoming New Services• Security and Dos attack detection• IPV6


GÉANT MULTICAST SERVICE

www.dante.net/nep/GÉANT-MULTICAST/


Coverage

•GÉANT is a transit domain for Multicast traffic as well.

•24 NRENs over 27 have explicitly asked for being enabled multicast

•Fully enabled with the Research peerings


Access to the Service

• Via the primary access to GÉANT

• Via a GRE tunnel (currently nobody)

• Support of PIM-SM v2 only

• MBGP/MSDP/PIM-SM v2 peering


Operational procedures

• Currently under definition

• Goal: fully supported service as Unicast.

• Monitoring of the infrastructure via a set of adapted tools. – Beacon Matrices

• http://beaconserver.GÉANT.net:9999/

• http://beaconserver.GÉANT.net:19999/

– Looking glass => http://www.dante.net/nep/lg/

– Others (volume, MSDP, MBGP …)


Operational procedures

• Troubleshooting – Extension of the trouble ticket systems to

multicast incidents – Establishment of a database of Incidents– “Sanctions” for mis-behaving customers ...


IP PREMIUM SERVICEhttp://www.dante.net/sequin/


IP Premium Service

• This service which is currently being piloted in GÉANT has the aim to provide international Virtual leased line based on Diffserv.

• The Premium IP service is an end-to-end service (University to University) crossing multiple administrative domains

• It is defined on the basis of the Diffserv Expedited Forwarding Per Hop behavior which is required to offer– Bandwidth, low loss, upper bounded delay and jitter


IP Premium model

•Premium IP packets are tagged with DSCP code =46 at the entrance of GÉANT Domain.

•Rate Limitation is applied per aggregate on the NREN’s access, based on the total demanded bandwidth towards the destination.

•Filters are made on two parameters (NRENs networks + DSCP value)


IP Premium model

• Admission Control is made manually based on the Sum of bandwidth already booked on the destination access.


IP Premium:Virtual Leased Line service

UK

DE

NREN Janet

DFN

AS20965

GÉANT backbone

AS786

AS680

A

B

RegionalNetwork

RegionalNetwork

SE

FR

Rate limitation is applied on the NREN access

Rate limitation is applied on the NREN access

Tagging DSCP=46Tagging DSCP=46

Admission Control streams < 5 % of the BW access

Admission Control streams < 5 % of the BW access


Premium IP tests

• H.323 (CH, IT, DE)

• AQUILA (IST) (AT, PL)

• MOICANE (IST) (IT, GR, PT, RO)


Other activitiesSecurity

(http://www.dante.net/security)

[email protected]


• DANCERT (DANTE’s Computer Emergency Response Team)

• Team responsible for defining and implementing DANTE security policy.

• DoS attack service protection• Proactively through rate limiting and anti-spoofing

measures.

• Reactively through DoS tools applying filters and helping report and investigate attacks.

• Assistance in investigating security incidents such as:

• Hacking, Port Scanning, Spam reports


Other activitiesIPV6

(http://www.6net.org)


IPV6: 6NET project

• 36 Month project started in January 2002

• Participants• Cisco (coordinating partner)

• DANTE (GÉANT), NRENs, other organisms

• Testbed for activities using/supporting native IPv6

• Interconnection of national IPv6 testbeds

• Support for applications which exploit IPv6 (eg mobile)

• Demonstration of complete native IPv6 stack


FR

UK

IT

AT

DE

SE

GR

CH

NL

ColtDeutche TelekomTeliaTunneledNordic

• Native STM-1line to Greece under negotiation

• International IPv6 connectivity provided by partners including DANTE to NACSIS

Planned Y1 6NET topology

Testbed for activities using/supporting native IPv6


GÉANT Long term views

• Upgrade of the core network from 10 Gbps to 40 Gbps.– With one Lambda?– With several Lambda's?

• Provisioning of Soft permanent channels to build Virtual Optical Private Network


Thanks

• Questions ?

gÉant now and next steps -- agnès pouélé ([email protected]) agnes pouele, network...

Documents