SAVI/GENI Federation. Research Progress. Sushil Bhojwani, Andreas Bergen, Hausi A. Müller, Sudhakar Ganti University of Victoria.

Transcription

1 SAVI/GENI Federation Research Progress Sushil Bhojwani, Andreas Bergen, Hausi A. Müller, Sudhakar Ganti University of Victoria. Canada

2 Outline Introduction SAVI/GENI Federation objectives Work Involved Common APIs Inter-cloud credential authentication Inter-cloud Resources federation Current state

3 Introduction Our work is part of SAVI Theme 5 objectives To develop a test bed of cloud federation GENI and SAVI are the use cases Cloud federation is the concept whereby multiple heterogeneous cloud environments are interconnected, can authenticate and request resources from each other Many useful applications locality proximity, load balancing

4 Smart Applications on Virtual Infrastructures (SAVI) SAVI (Smart Applications on Virtual Infrastructures) is a NSERC funded Canadian distributed application platform test-bed for creating and delivering Future Internet applications. The SAVI test-bed provides flexible, virtualized converged infrastructure to support experimental research in application-oriented networking, cloud computing, integrated wireless/optical access networks, and Future Internet architectures. Theme 1: Smart Applications Theme 2: Extended Cloud Computing Theme 3: Smart Converged Edge Theme 4: Integrated Wireless/Optical Access Theme 5: SAVI Application Platform Test-bed

5 Smart Applications on Virtual Infrastructures (SAVI) Nodes Two Tier: Core at U of T and edge nodes at other universities

6 Global Environment for Network Innovations (GENI) GENI is a NSF (National Science Foundation) funded USA nationwide suite of infrastructure supporting "at scale" research in networking, distributed systems, security, and novel applications... collaborative and exploratory environments for academia, industry and the public to catalyse groundbreaking discoveries and innovation in these emerging global networks... virtual laboratory at the frontiers of network science and engineering for exploring future internets at scale.

7 GENI Connect compute resources using Layer 2 networks in topologies best suited to their experiments Install custom software or even custom operating systems on these compute resources Control how network switches in their experiment handle traffic flows Run their own Layer 3 and above protocols by installing protocol software in their compute resources and by providing flow controllers for their switches. Wireless infrastructures

8 GENI

9 GENI

10 GENI Rack Projects - Flavours ExoGENI Higher cost Flexible virtual networking topologies solution including OpenFlow Delivers a powerful platform for multi-site cloud applications through OpenFlow. Typically deployed as an integrated part of a campus network. InstaGENI Mid-range cost Expandable GENI Racks solution for a large number of campuses Delivering Internet cloud applications support, along with OpenFlow and VLAN networking. Normally deployed outside a site firewall. Layer 3 Internet Control Plane Layer 2 Data connection among GENI OpenGENI Openflow and VLAN Networking on Dell

11 GENI Aggregates A GENI aggregate provides resources to GENI experimenters, e.g., a GENI Rack at a university is an aggregate; GENI experimenters may request resources from this aggregate and add them to their slice. Different aggregates provide different kinds of resources. A GENI slice contains many aggregates

12 ref:

13 Federation Objectives As part of SAVI Theme 5 test bed, our objective is to federate both SAVI and GENI clouds This work involves three levels: The first level is to make sure that clouds expose common APIs (may be through a wrapper) The second level involves credential authentication (e.g., SAVI uses Keystone and GENI uses OAuth and bunch of others) The third level is resource acquisition across clouds

14 Federation Objectives Application level (0 level): two independent credentials; Apps do all the work used in SAVI Applications (PALTask1, ConRank2) used in GENI Applications (Distributed FS3) 1st level: work through common APIs 2nd level: one credential (SSO) 3rd level: resource acquisition

15 1st Level Client Tools NOVA (SAVI), GRAM (GENI), JFed (GENI) Translation layer middleware for different APIs Experimental test-bed setup Havana based two node controlled cloud setup environment in the lab Can replicate both SAVI and GENI independently Helps us understand the APIs and capabilities Status Working and understanding NOVA client tool (openstack) to work with GENI GRAM

16 2nd Level SSO (Single-Sign-On) The current implementation of Federated access to Openstack uses SAMLv2 protocol Need a open source authentication tool Two main choices: OpenID or OAuth (GENI uses this already) Status: A student just started on this work Goal is to use common credentials across federated clouds;

17 3 rd Level Resource Federation A little more complicated problem Different slices/vms/networking models Two models: Bunch of independent resources Unified and managed resources Aid tools Future Work

18 Challenges Many Challenges Exist Due to heterogeneous environments, different access tools, protocols and stacks Many different authentication models Many different resource models Even tools of the same family are not compatible across different versions