perfsonar psui in a multi-domain federated environment WACREN Conference 17-18 March 2016 Antoine Delvaux PSNC/GÉANT adelvaux@man.poznan.pl GÉANT perfsonar Service Manager perfsonar Developer
What is perfsonar? Network measurements toolkit active measurements: latency (owd + rtt), throughput, loss, traceroute measurements on links or on full paths runs on CentOS and Debian CLI tools and web interface Single domain or across domains measurements (multidomains) March 18, 2016 2
Who makes perfsonar? Open Source Project http://github.com/perfsonar International Collaboration ESnet GÉANT Indiana University Internet 2 Open to new partners and external contributions March 18, 2016 3
Multi-domain monitoring and measurements Help to establish end-to-end usage expectations 1000s of perfsonar instances deployed world wide many are open for measuring network performance Help to identify and isolate performance problems as they happen on local switches firewalls bottlenecks packet loss on links the longer the path, the more dropped packets affect performance Useful for NOC and PERT engineers, network researchers, students,... March 18, 2016 4
Multiple ways to use perfsonar CLI Local web-based UI, measurements configuration Dashboards, to quickly spot issues MaDDash (Monitoring and Debugging Dashboard) Central configuration distributed to nodes Alarms, in Nagios, when performance decrease Central, shared, UI: psui March 18, 2016 5
perfsonar parts Measurement Point (MP) (also called testpoint) Can be source or target of measurements perfsonar Toolkit (full ISO image for easier installations) MP + Measurement Archive (MA) web interface for configuration MaDDash and measurement mesh Central MA and visualisation dashboard Central mesh configuration tools psui (perfsonar web UI) federated visualisation GUI on demand measurements March 18, 2016 6
MaDDash example (dev testbed) March 18, 2016 7
psui: a truly multi-domain tool Centralised visualisation system for perfsonar Visualise archived measurements from public MA Trigger on demand measurements from and to all public MP Data from your own domain and any other domain making their data public Discovery of ps nodes using the Lookup Service Can help analyse network performance on a whole path, crossing domains March 18, 2016 8
psui: loss & latency example 9
perfsonar UI AuthenticatioN Sources SAML based Single Identity Providers (IdPs) Federations of IdPs Local XML file and local database Roles to give access to different part of the UI query archives make on demand measurements configure the MP and MA sources configure the users March 18, 2016 10
psui federated access A single centrally managed psui can serve multiple domains GÉANT federated psui demo instance http://psui.geant.net WACREN psui deployment - to come soon, stay tuned! March 18, 2016 11
How to prevent abuse? Federated access, you don t know all your users Use roles in the psui Configure your MP to limit measurements: bwctl.limits file restriction based on source IP max throughput limit measurement duration limit protocol (UDP/TCP) March 18, 2016 12
Useful in the WACREN region? RREN: Multi-Domain Need to see performance improvements In the region, between NREN Globally, to REN worldwide To provide services, enable collaboration, help researchers and students You need performance on your networks Measure end to end performance March 18, 2016 13
RTT Between Uni Lagos and snrer Dakar ~150ms 14
How? What to do? NMM Workshop organised by WACREN in September 2015 in Abuja many NREN engineers attended What do next? Deploy your perfsonar node And let's setup a multi-domain WACREN measurement mesh! March 18, 2016 15
http://www.perfsonar.net http://github.com/perfsonar/ perfsonar-user@lists.internet2.edu WACREN Conference 17-18 March 2016 Antoine Delvaux PSNC/GÉANT adelvaux@man.poznan.pl GÉANT perfsonar Service Manager perfsonar Developer