Firewall Requirements for Distributed and Grid Computing

1
Firewall Requirements for Distributed and Grid
Computing

• Mary Thomas
• Dept. of Computer Science,
• Director, Advanced Computing Environments Lab
• http//acel.sdsu.edu

2
DG Firewall requirements

• Applications
• Web servers services
• Grid servers services
• Hardware in ACELab
• My Access
• My List

3
Projects/Applications

• Communities we interact with
• SDSU Frost, Kelley/Edwards/Roher (bio),
  Impelluso, Paolini (ME), Castillo (CSRC)
• External NSF/DOE projects, TeraGrid, DOE Science
  Grid/Fusion Grid
• International ITER (next year)
• Research (Thesis), development production
  (specific projects, eg a bio portal for
• SDSU External communities
• Host/Develop services
• Web and Grid
• Informational, Interactive (secure access)
• Web portals (multiple)
• Lab research project websites
• science application( eg Rob Edwards Metagenomics
  portal).

4
Web (specific)

• Web Portals
• HTML, Perl/CGI, Python/Zope, Java (JSP, Servlets,
  Portlets), and whatever else comes along
• Web services (SOAP/HTTP)
• Server services hosting env.
• TCP/IP, HTTP/HTTPS over SSL
• Java/Tomcat/Apache
• Python Perl
• Port 80, but also need testdev range

5
Grid (configurable ports)

• Informational no security involved
• Interactive
• transactions require authentication,
  authorization
• GRAM (), GridFTP()
• Cert. Authority (CA PKI), MyProxy cred. server
• Toolkits
• Globus/IBM Toolkit, GridPort,
• JavaCoG, etc.
• MyProxy
• Web Services Resource Framework (WSRF)

6
Individual

• Access rohan, sciences, projects mail servers
  from my Thunderbird client running laptop off
  campus
• SSH/SCP access to rohan and all my dev systems
• Off site access to my development portal systems

7
Hardware (current but growing)

• 4 Dell 1850 servers, several student systems
• 1 6 TB storage facility
• All need remote (off campus) access vis SSH, but
  also to access dev. services
• Gig-E network (in progress)
• TeraByte files (1012 1million x 1million).
• Between campus TG node at SDSC (via Frost lab?)

8
Requirements Ports (current list)

• Hosting Services
• Old style Grid
• Globus GRAM(2119)
• GRIS(2135)
• GIIS(2136)
• GridFTP(2811)
• MyProxy(7510)
• WSRF any port range can work
• Access Grid (xx)

• Web (80, config)
• Remote clients
• access to these services by fixed or dynamic
  clients
• Also
• HTTP (80, range)
• SSH (22?)
• HTTPS (448)

9
Requirements Network

• Need minimally Gig-E network capable of moving
  TByte files between computational resource
  (cluster) storage facility
• Need for campus wide network
• Need to access
• external networks National Light Rail (NLR),
  Internet2, Optiputer, TeraGrid, etc.
• PetaByte (1000 Tbyte) storage facilites SDSC
  other NSF projects (Human Genome, Astronomy, High
  Energy Physics, etc.)

10
Campus Grid
External
Ext nets
NOC
Gig-E (ad hoc/Frost lab)
SDSU
NLR/Internet2
TeraGrid
Switch
Kelly Lab
Storage
HPC
Edwards/Rowher Lab
PGE Cluster
ACEL( GMCS)
Viz
Switch
Frost Lab
Switch
Storage
PGE Cluster
Switch
PGE Cluster
ACEL Services
PGE Cluster
PGE Cluster
Switch
PGE Cluster
PGE Cluster
Servers
Workstations
Storage
Main campus
Viz Services
11
SDSU Data Grid Proposal(forming plans now)

• Goal Obtain NSF funding to instantiate a major
  campus data grid (storage, security)
• All campus research projects with large
  data/distributed/grid will have these
  requirements
• NSF CFP (due July) campus research
  infrastructure 5 years of funding
• Management Teams (fundingsupport)
• CSRC, Jose Castillo (main host/admin)
• Campus IT (networks, accounts, etc.)
• Campus Security (authentication, ports, etc)
• Faculty/researchers use, advise, allocations,
  help fund

12
Contact Information

• Mary Thomas (4-1694)
• mthomas_at_sciences.sdsu.edu
• ACE Lab
• http//acel.sdsu.edu
• SDSU Data Grid Project
• http//pipeline3.acel.sdsu.edu8080/datagrid
• Globus
• http//www.globus.org