Update of Ankabut Jan 2010

Transcription

1 WORKING DRAFT Last Modified 12/08/ :59:34 Arabian Standard Time Printed Update of Ankabut Jan 2010 Dr. Steven B. Winstanley Acting COO

2 Executive Summary The project has faced challenges deploying the network and Etisalat has remained pivotal to these issues. that project has been affected by delay. The main source of delay surrounds network configuration and enhancement in order to allow basic services. Through the hard work undertaken in a proof-of-concept trial, a technical solution has been defined. Ankabut Team has gained approval to offer national (and regulated) Internet services to academic institutions: caveat!. Ankabut is encouraged to see quite a few requests from the academic institutions asking about how to improve their networks and services though a tailored approach to academic networking. 2

3 Agenda Overview Routed Connections VPN Connections Issues List International Connectivity Conclusion 3

4 Setting the scene ANKABUT Project Objectives What do we do Connecting academia to advance IP networking Establish a forum to discuss collaboration Encourage collaborative research within the UAE Provide a mechanism to share lectures Encourage inter-library access Increase collaboration with international universities Connect international institutions to home networks Enable applications on the IP network Be on-time with the project schedule Maintain financial discipline Provide a mechanism for accurate reporting. 4

5 Ankabut National Network 5 Universities covering 25 Campuses INTERNET2 MANLAN New York Internet 2 Peering Router IAT IAT HCT / Women's HCT / Women's HCT / Men's Ras Al Khaima Fujairah HCT / Men's IAT HCT / Women's HCT / Men's HCT / Women's KUSTAR Sharjah + NTP 10 GE Dubai ZAYED UNIVERSITY IAT IAT Aviation Academy IAT Institute Of Nursing UAE University HCT / Women's HCT / Men's AL Ain Data Centre 1 GE Ankabut NOC Proposed Data Centre Abu Dhabi VEDEC (Suwaihan IAT) HCT / Women's HCT / Men's HCT CENTRAL SERVICES HCT CERT KUSTAR ZAYED UNIVERSITY 5

6 Agenda Overview Routed Connections VPN Connections Issues List International Connectivity Conclusion 6

7 Main Topic of Focus Networking Getting the Foundations Right. Universities connected through two different links to both Internet and Ankabut networks. These networks can only be accessed from two different end-user equipments (i.e. two PCs, two Printers, and often two desks). No users can access tailored education services provided by other national research and education networks (NRENs) through Ankabut. * College Students Perceptions of the Libraries and Information Resources: A Report to the OCLC Membership. Dublin, OH:OCLC,

8 The Networking Solution In a regulated environment Ankabut is unable to carry the Internet This architecture has been tested and is successful. Seamless working between networks in the campus is possible. Additional high performance routers have to be purchased and deployed. It does have a complex network structure requiring specialised personnel and University owned equipment. For small institutions this is technically and economically unfeasible. 8

9 The Proof of Concept Results Academic Network: RESULT GOOD USA, CA, San Diego, SDSC - San Diego Supercomputer Center 1 lightning.sdsc.edu ( ) ms ms ms 2 dolphin.sdsc.edu ( ) ms * ms 3 hpr-lax-hpr--sdsc-10ge.cenic.net ( ) ms ms ms 4 hpr-i2-newnet--lax-hpr.cenic.net ( ) ms ms ms 5 so rtr.hous.net.internet2.edu ( ) ms ms ms 6 xe rtr.atla.net.internet2.edu ( ) ms ms ms 7 xe rtr.wash.net.internet2.edu ( ) ms ms ms 8 xe rtr.newy32aoa.net.internet2.edu ( ) ms ms ms ( ) ms ms ms ( ) ms ms ms ( ) ms ms ms ( ) ms ms ms ( ) ms ms ms ( ) ms ms ms Commercial Network: RESULT GOOD USA,, Global One 1 biad401-fe isl-1.gip.net ( ) ms ms ms ( ) ms ms ms 3 ge oakbb1.oakhill.opentransit.net ( ) 1.07 ms ms ms 4 gi5-24.ashse2.ashburn.opentransit.net ( ) ms ms ms 5 telecomitalia.gw.opentransit.net ( ) ms ms ms 6 customer-side-etisalat-7.pal.seabone.net ( ) ms ms ms ( ) ms ( ) ms ( ) ms ( ) ms ms ms ( ) ms ms ms ( ) ms ms ms ( ) ms ms ms 9

10 The Proof of Concept Conclusions All was not rosy Configuring the network based upon the PoC allows the users to seamless access both networks. 100% differentiation of traffic can be made between Ankabut and Internet on the out-bound direction. On the inbound direction Etisalat hypostasized an extremely small percentage of traffic may access the university (much less than 1%). This leakage hypothesis could also be envisioned for the existing Ankabut network. However Ankabut maintained; Etisalat would not loose revenue from this mechanism of operation, as a university will require full internet connectivity. 10

11 Viable solution, but still has problems. The problem becomes scalability When the solution is adopted by all institutions the network become very complex to administer. The more routers mean the network become cost-prohibitive as it grows This network does not scale to schools or smaller institutions.. 11

12 The Way Forward Let us peer with Etisalat as a Service Provider? Simpler to manage. Simpler structure. Requires no extra-hardware. Solution become available to schools. Etisalat still receives revenue from the Internet. Etisalat increases revenue from Ankabut growth. 12

13 The Way Forward Capable for Network Growth The Right Foundation Hardware cost saving made can be better directed providing network services. Etisalat opens a new NREN revenue stream with network growth. Etisalat would improve sales to education with a service developed and approved by academics. 13

14 Agenda Overview Routed Connections VPN Connections Issues List International Connectivity Conclusion 14

15 Where are we now Summary of our demands Access to Internet Bulk access to Etisalat s Internet. Educational Internet pricing structure. The suggested set-up comply with general practices and operational requirements of worldwide Educational Networks. Next Steps, consolidate our position. Ankabut has been working with the Legal Department in the TRA and have discussed the provisioning of services. Some services are ok, and some they have said we need licensing. The TRA have been pro-active in working with us over the last 4 months to investigate a solution. 15

16 Agenda Overview Routed Connections VPN Connections Issues List International Connectivity Conclusion 16

17 VPN Connectivity Zayed University Inter-campus traffic is required over Ankabut. This allows inter campus communication and the aggregation of internet at a single location. Request Received 12 January

18 VPN Connectivity Institute of Applied Technology IAT has the Internet point-of-presence in Dubai, while their Central Admin. Services is in Al Ain. Request Received 22 December

19 VPN Connectivity Higher College of Technology HCT has different content filtering for each campuses and requires services to be located centrally to reduce equipment hardware in the network. Request Received 10 January

20 VPN Connectivity Issues The requirement is simply to replicate an existing service called: IPConnect Etisalat is unable to do it because 1. Restriction on number of routing process that can be running on PE Router. 2. They can only provision static VPNs. 3. PE Routers may require to accommodate additional site connectivity. Target For Completion 4. This will impact on Design, Time line, Cost and additional Operation resources. 3 rd February 5. Need to create clear routing advertisement policies to avoid any loops and complication. 6. Need to define clear policy on advertising Internet routes on Global BGP Table and VPN at the same time. 7. If University sites are Stub network then for IPV6 technology we need to upgrade to OSPF V3 which will require to upgrade all P/PE routers, Customer Routers etc. 8. IP-MPLS backdoor will require additional consideration on Ankabut Network. 9. Customer LAN and WAN Design has to be review for complete design understanding. 10. Undesired routing may result if design is not evaluated carefully. 11.Customer may need to fine tune to enforce traffic engineering. 12.This require customer clear policy about their intention how they are planning to use their network. 13.Any miss configuration on customer side may disturb Ankabut network. 14.This is a regulated service and unable to be offered by Ankabut

21 Agenda Overview Routed Connections VPN Connections Issues List International Connectivity Conclusion 21

22 General Issues List Ankabut has a number of significant work items New Customers Waiting Rochester Institute New York University Masdar Institute Data Centre Build New potential site identifies in IAT s Premises Ankabut is currently unable to supply DU connected Universities Agree a model for unified IM/voice/video communication Telecoms Regulation Network Operation Centre International Connectivity

23 Agenda Overview Routed Connections VPN Connectivity Issues List International Connectivity Conclusion 23

24 Example NREN Structure. The Joint Academic Network in the UK: JA.NET Janet connects together academia in the UK it server 18 million students everyday.

25 Continental Networks GEANT interconnects the national NRENs Janet is connected to GEANT and is able to reach the rest of Europe. Janet has worldwide connections it shares with other GEANT connected networks.

26 Worldwide Connectivity GEANT s connections to the rest of the world GEANT is a collection of NRENs organising global communication efficiently and cost effectively.

27 Ankabut International Network Single International Peering Point 27

28 Agenda Overview Routed Connections VPN Connectivity Issues List International Connectivity Conclusion 28

29 Conclusions The main source of this delay stems from the fact that crucial network configuration and enhancement needs to be performed in order that a basic service can be provided. Forced a change on Etisalat Management Through the hard work undertaken in the Proof-of-Concept process a technical solution has been defined that will allow the operation of a service. (RFC4116). BGP Mechanism to share routing information and gained Internet Services Ankabut is seeing quite a bit of movement on network adoption in this early phase and a number of institutions have been testing the 1G connectivity and the Video Conferencing PoC unit on the network. All institutions are refining their intra-university connectivity as well as utilising the international access network. Ankabut cannot perform these items alone and has seen good inputs from a number of organisations across the UAE. However, more input is required and very welcome from all sources with or without a current connection. This presentation has highlighted the IP network and not the services, or collaborations already in progress. 29