HEAnet Services Update 2014

HEAnet Services Update 2014

Strategic Plan 2014-2016 Continue to be the trusted provider of networking and infrastructure services Be the preferred broker of cloud and other services to our clients Be recognised for fast, agile, efficient delivery of shared services

Seamless Connectivity (wired, WiFi, 4G) Seamless Federated Access (& SSO) Seamless Roaming (eduroam) Private Community Cloud Brokerage (to public cloud services) Adding value in the Cloud Value Chain(s) CAMPUS PRIVATE CLOUD PRIVATE COMMUNITY CLOUD PUBLIC CLOUD

Strategy Informing New Multi-Layered Services Model License Negotiation (Software & Content) - Procurement/Frameworks - Legal Templates Tailored Public SaaS/IaaS - Federated Access - Peering Brokerage IaaS Application Services Infrastructure Platform Data Centre, Storage, Compute Connectivity, Network Futures, SDN e.g. VLEs, Exam systems, Repositories THE NETWORK UNDERPINS THE HIGHER LAYERS

Strategy Informing 2014 New Service Organisation Layer Structure Highlights BROKERAGE APPLICATION SERVICES NETWORK INFRASTRUCTURE PLATFORM Network Engineers NETWORK Student Mobile Broadband Deal (with Meteor) IReL Irish Research e-library Edugate Standby IdP/Managed IdP/Hosted IdP High-Availability Managed Moodle UCD Webhosting Solution INFRASTRUCTURE Vidyo Desktop Conferencing APPLICATION Service PLATFORM SERVICES EduStorage Expansion Carriganore High-Power Data Centre IaaS Proof-of-Concept Platform Engineers Software Engineers Layer 2/IP (RMAN) Equipment Upgrade Planning Schools 100Mb Roll-Out Completion Backbone Optical Layer Completion BROKERAGE Product & Negotiation Skills

Network Layer Update

Old Network for New? Equipment is already 10 years old. Reaching End of Support Increased failure rate. Impact on client services Increased security and privacy vulnerabilities Threat of clients loss of trust 12 10 8 6 4 2 0 Hardware faults per year 2011 2012 2013 Q1-Q3 2014 Cost of investing in current equipment is higher than replacing equipment Difficulty in creating new services and migrations

Benefits Integration of two network cycles into one -> reduced site and service disturbance Meet the ever-increasing traffic throughput demands Ability to deliver new services aimed at improving intra-campus connectivity and mergers Bring the benefits of upcoming network futures to client premises in terms of virtualization and software defined networks for cloud and shared services Reduced carbon footprint in client premises

Current and proposed architecture Reduced footprint Virtualisation Item Current Proposed Number of devices 260 180 Client facing interfaces 315 140 Current Operation tools 10 6 IP/CPE IP/CPE Services 1 + 2 5 IP/CPE Proposed L2/MPLS L2/MPLS New New L2/MPLS New Optical Optical Optical Optical Optical Optical

Benefits More capacity More services Upcoming Cloud Flexible and consolidation Client Client Client Client Client New New New New Client Client Client L2VPN -> New Transparent Ethernet and incl. P2P L3VPN -> New IPv4/6 Unicast and Multicast NaaS/SDN: OpenFlow services Client

Benefits L2 L2 Current MPLS MPLS Proposed/intended New New New New Superior resilience to satellite sites in access rings Take full advantage of / leverage dark fibre rings

RMAN Project Timeline Preparation Stage Project justification and grant application Technical Dialogues HEA approval to publish CFT (Go/No-go) Prepare, publish, evaluate and award tender Stage I Contract formulation and Order placement Installation Acceptance and payment Stage II Order placement Installation Acceptance and payment 2014 2015 2016 2017 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Board Subject to funding available Staged approach Transition Q4 2015 Q2 2016 + Q3 2016 Q1 2017 client collaboration client input Minimal service interruption

Involving clients in our work The next GEANT project (GN4) will start in May 2015. Let us know if you are interested in taking part in activities, such as: SDN/NaaS/NFV Energy conservation Testbed as a Service Cloud procurement HEAnet is interested in increasing the cooperation with clients. Ideas are: Revive existing technical e-mail lists Mutual secondment Webinars by and for the clients Best practise document around common issues: such as Wi-Fi, campus networks, Infrastructure setups, strategic plans Provide advice on how to include wide area trends

HEAnet NOC Update 2015 will see the establishment of a HEAnet Service Desk within the NOC Change from staffed by rota to staffed by two permanent level 1 engineers Reaction to the changing nature of queries and increased demand off network & service development

17 Years of Change Not the NOC of 1997, nor 2004, nor even 2010 Majority of queries now revolve around service set-up & requests for info CCIE level engineer not needed to set up a webhost Need to free up engineers to work on network evolution & service delivery

All Change? Dedicated staff brings continuity and increased efficiency No reduction in access to expertise as required Contact details remain (noc@heanet.ie & 016609040) Escalation as required to level 2 & 3 engineers and management

Outline Process Step 1 Step 2 Step 3 Query raised via web form, email or phone Received & resolved by 1 st level SD eng Escalation as required to: Functional team; 2 nd or 3 rd level engineer Further escalation to management as required

Infrastructure & Application Services

Services Update Community Cloud update EduStorage Colocation Capacity Web Site Hosting Security Scanning Video Conference Booking Streaming service enhancement

Community Cloud Update What is it? Ciera Compute Infrastructure for Education, Research & Academia Virtual Machines as a Service Client Network Integration Linked to multiple clouds Federated, integrated, production quality Use case test bed

Ciera

Ciera

Ciera Portal to many clouds VMs connecting to client Campus LAN Virtually homed servers EduStorage integration EduGate integration RBAC

Ciera IaaS in multiple clouds HEAnet Ciera Amazon AWS Microsoft Azure Google Compute (in progress) vsphere (early stages) Workshop Friday 11am, Laurel Suite

Ciera Huge learning opportunity Building block for networks SDN L2 p2p Networking project

Ciera To Do list Stress testing Security Analysis Acceptance Testing Campus Cloud Infrastructure integration Ready for early adopters NCI, MI, UCC, UCD, UL January 2015

How is it going? EduStorage

EduStorage

EduStorage TB Allocated 350 300 250 200 150 100 TB 50 0 22 Clients 300 TB Client production services Scale-out requirement getting close

Colocation

CoLocation 3 * Data Centres Parkwest 10 2.25 free Blanchardstown 19 2 free WIT 13 0 free More planned Enterprise grade 8 + 10 High Power specialist applications Maynooth University, TCD

Website Hosting Demand for 2 styles Small sites Many different applications Enterprise sites Fewer applications Resilience, fault tolerance Directory/Campus services integration

Enterprise Website Hosting

Enterprise Website Hosting Virtual Learning environments loop.dcu.ie moodle.mic.ie moodle.wit.ie Large websites www.ucd.ie

Enterprise Website Hosting Key issues Reliability engineering Testability Support Incident response Learning outcomes Fault tolerance means regular fault simulation Testing Communications

Security Service New: Vulnerability Scanning Detailed technical audit + regular reports External & Internal scanning In-depth web application tests Single Supplier Framework license costs

Vulnerability Scanning

Video Conferencing New Booking Service: JAnet s v- scene Schedule meetings Setup meeting recording

v-scene

Streaming Service media.heanet.ie Content Management Service Video Content On Demand content Live Content Audience selection HTTPS for VLE embedding

Summary Ciera Come and explore Jan 2015 CoLocation Enterprise Hosting + more EduStorage Scaling out Security Scanning Functionality boost

Summary Website Hosting Start small, scale big Multimedia Video Conference Booking, Recording made easy Content storage for your users

Brokerage Update

Brokerage Structure CONTRACT MANAGEMENT SERVICES BROKERAGE

Brokerage Objectives Facilitate easier access to third-party services Facilitate more cost-effective access to third-party services Aggregate demand to generate savings Aggregate demand to leverage service improvements Reduce procurement burden on HEAnet clients Support clients with use of procurement agreements Foster collaborative approach with Clients & Vendors Collaboration with international peers Stimulate convergence to standards (e.g. SAML)

Edugate Update

1% 3% 3% 3% Edugate growth Distribution of 10 million logins since January 14% Misc Internal Apps Combined Moodle Combined Edugate (excl. Blackboard) Combined campus library systems 76% Combined Blackboard Combined Google Apps

2014 Edugate Update Edugate authentications peaking in excess of 100,000 logins daily! 20 new Edugate services added this year Connecting 36 institutions to 173 different services IdP Service Portfolio: Standby IdP Managed IdP Hosted IdP 12 Irish HEIs joined edugain

edugain edugain: 536 Services / 150 Institutions / 12 Irish Institutions List of edugain members: http://www.edugain.org/technical/status.php List of edugain entities: http://www.edugain.org/metadata/?from=http://mds.edugain.org/feed-sha256.xml&entities&auto

IReL Update IReL Update

Millions IReL Usage Trend 2007-13 16 14 12 10 8 6 4 2 0 E-journals E-Book Database 2007 2008 2009 2010 2011 2012 2013

Value for money 2007-13 2.50 Cost of search/full text request 2.00 1.50 1.00 0.50 0.00 2007 2008 2009 2010 2011 2012 2013

Contract Management Update

40 Total Live Agreements 35 30 25 20 15 2011 2012 2013 2014

Current Portfolio 2011 2012 2013 Storage Virtualisation Storage Hardware Eduserv agreements (14) Microsoft Campus refresh Adobe Campus Adobe CLP Adobe Connect AntiVirus Articulate Blackboard Collaborate MacOS/IOS (Apple) Framework Microsoft Framework Polycom VC Equipment Support Server Hardware Student Stores for Adobe and Microsoft Vulnerability Scanning

2014 New Additions (1) 2014 Adobe VIP Application Virtualisation Software2 Zinopy Monitoring and Alerting Damovo Fastcom Logicalis VLE Framework Blackboard Desire2Learn Enovation Instructure Learning Technology Services Moodlerooms

2014 New Additions (2) 2014 Vidyo h/w, s/w Framework Image Supply Systems PlanNet21 Vu2Vu Video Platform Framework Kaltura Mediacore Panopto Student Mobile Broadband For a full list of agreements please visit: http://www.heanet.ie/brokerage

DCU - 201410 59

Services Brokerage Update

Services Brokerage JANET Video Conference Booking Service JANET File Sync & Share: Box Capito Microsoft Q Associates (http://www.heanet.ie/brokerage/file-sync-and-share)

Work in Progress Microsoft Legal Due Diligence (with JANET) Moodle SaaS (Feasibility Study) VDI (Discovery exercise) Internet 2 Services (via edugain) GÉANT Brokerage Group More Frameworks...

Peering @ INEX: Amazon, Google, Microsoft, Yahoo, etc. @ AMS-IX (via GÉANT): Blackboard, Facebook, OpenDNS, WikiMedia, etc. Layer 2 peering requirements?

HEAnet Vision for Multi-Cloud Environment HEAnet Private Community Cloud Campus Private Cloud Public Clouds Single federated portal to multi-cloud environment

Summary Highlights 2014 100Gig Capable Optical Backbone in place Layer2/IP Equipment replacement project underway Client primary connections typically 100% available All Post-Primary Schools @ 100Mb HEAnet a leading NREN re Cloud Developments Hosting Moodle for DCU, WIT & Mary Immaculate Hosting UCD s website Edugate now peaking above 100,000 log-ins daily IReL merged into HEAnet from 1 April 2014 Expansion of NOC to support extended services

Thanks for your attention. Questions?