An Hierarchical Policy Policy- -Based Based An Hierarchical - PowerPoint PPT Presentation

An Hierarchical Policy Policy- -Based Based An Hierarchical Architecture for for Integrated Integrated Architecture Management of Grids and Networks of Grids and Networks Management Ricardo Neisse Ricardo Neisse Evandro Della Della Vechia Vechia Pereira Pereira Evandro Lisandro Zambenedetti Granville Zambenedetti Granville Lisandro Maria Janilce Bosquiroli Almeida Maria Janilce Bosquiroli Almeida Liane Margarida Margarida Rockenbach Rockenbach Tarouco Tarouco Liane Federal University of Rio Grande do Sul Sul Federal University of Rio Grande do

Outline Outline � Introduction � Introduction � Grids, networks and policies � Grids, networks and policies � Hierarchical mapping architecture � Hierarchical mapping architecture � System prototype � System prototype � Conclusions and future work � Conclusions and future work Slide 2 2 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

Introduction Introduction � Configuration of the underlying network to allow the � Configuration of the underlying network to allow the grid operation grid operation � Grid resources distributed along several network � Grid resources distributed along several network administrative domains: management problems? administrative domains: management problems? � Network policies x Grid policies � Network policies x Grid policies � A system to generate network policies based on � A system to generate network policies based on grid policies grid policies Slide 3 3 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

Grids, networks and policies Grids, networks and policies Grid Management Grid Management I nfrastrucutre (Toolkit) I nfrastrucutre (Toolkit) Grid Grid Administrator Administrator Grid node Grid node (users and (users and resources) resources) Administrative domain Administrative domain Slide 4 4 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

Grids, networks and policies Grids, networks and policies Grid administrator Grid administrator Web Services Web Services (SOAP/ HTTP) (SOAP/ HTTP) Services Resource (Cluster) Local network administrator Local network administrator Network infrastructure Slide 5 5 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

Hierarchical policies and grids Hierarchical policies and grids High Grid management policies abstraction level Mapping defined by the network administrator Network management policies Policy deployment via PDPs Configuration actions into devices Slide 6 6 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

Grid policy examples Grid policy examples if (user == "neisse neisse" and " and if (user == " startTime >= "11/25/2003 00:00:00" and >= "11/25/2003 00:00:00" and startTime endTime <= "11/25/2003 23:59:59") <= "11/25/2003 23:59:59") endTime { { if (resource == "LabTec LabTec Cluster") { Cluster") { if (resource == " allowAccess = true; = true; allowAccess login = griduser login = griduser; ; maxProcessing = 50%; = 50%; maxProcessing networkQoS = = remoteProccessControl remoteProccessControl; ; networkQoS } } if (proxy == "LabTec LabTec Cluster" and Cluster" and if (proxy == " resource == "UFRGS Data Server") resource == "UFRGS Data Server") { { allowAccess = true; = true; allowAccess maxAllowedStorage = 40GB; maxAllowedStorage = 40GB; networkQoS = = highThroughputDataIntensive highThroughputDataIntensive; ; networkQoS } } } } Slide 7 7 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

Mapping architecture Mapping architecture Grid Grid policy Grid Toolkit repository Toolkit Grid domain Grid domain Grid policy Grid policy editor editor Grid Grid Rule Mapping administrator administrator repository Mapping Engine Engine Mapping rule Network policy Mapping rule editor repository editor Network Network administrator administrator Grid Grid policies policies Network domain Network domain PDP PDP IETF PBNM IETF PBNM Mapping rules Mapping rules architecture architecture Network policies policies Network PEP PEP PEP HTTP/HTTPS HTTP/HTTPS Slide 8 8 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

Mapping architecture Mapping architecture if (srcResource.address/24 == 143.54.47.0/24 and if (srcResource.address/24 == 143.54.47.0/24 and dstResource.address/24 != 143.54.47.0/24 and dstResource.address/24 != 143.54.47.0/24 and dstResource.port == 80 and == 80 and dstResource.port dstResource.protocol == TCP) == TCP) dstResource.protocol { { p1 = new p1 = new NetworkPolicy NetworkPolicy(); (); p1.addCondition(startTime,">=",schedule.startTime schedule.startTime); ); p1.addCondition(startTime,">=", p1.addCondition(endTime,"<=",schedule.endTime schedule.endTime); ); p1.addCondition(endTime,"<=", p1.addCondition(srcAddress,"==", p1.addCondition(srcAddress,"==",srcResource.address srcResource.address); ); p1.addCondition(dstAddress,"==",dstResource.address dstResource.address); ); p1.addCondition(dstAddress,"==", p1.addCondition(dstPort,"==",dstResource.port dstResource.port); ); p1.addCondition(dstPort,"==", p1.addCondition(dstProtocol,"==","tcp tcp"); "); p1.addCondition(dstProtocol,"=="," p1.addAction(DSCP,2); p1.addAction(DSCP,2); p2 = new NetworkPolicy NetworkPolicy(); (); p2 = new p2.addCondition(startTime,">=",schedule.startTime schedule.startTime); ); p2.addCondition(startTime,">=", p2.addCondition(endTime,"<=",schedule.endTime p2.addCondition(endTime,"<=", schedule.endTime); ); p2.addCondition(DSCP,2); p2.addCondition(DSCP,2); p2.addAction(bandwith,requiredQoS.requiredBandwidth); p2.addAction(bandwith,requiredQoS.requiredBandwidth); } } Slide 9 9 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

Mapping architecture Mapping architecture if (srcResource.address/24 == 143.54.47.0/24 and if (srcResource.address/24 == 143.54.47.0/24 and dstResource.address/24 != 143.54.47.0/24 and dstResource.address/24 != 143.54.47.0/24 and dstResource.port dstResource.port == 80 and == 80 and dstResource.protocol dstResource.protocol == TCP) == TCP) { { p1 = new NetworkPolicy NetworkPolicy(); (); p1 = new ... ... inPEPs inPEPs = select pep = select pep .within[srcResource.address within[srcResource.address, 143.54.47.1] , 143.54.47.1] . .direction["in direction["in"] "] . from device.type["DiffServDevice device.type["DiffServDevice"]; "]; from inPEPs[0].deployPolicy(p1); inPEPs[0].deployPolicy(p1); p2 = new NetworkPolicy NetworkPolicy(); (); p2 = new ... ... outPEPs= select pep outPEPs = select pep .within[srcResource.address within[srcResource.address, 143.54.47.1] , 143.54.47.1] . .direction["out direction["out"] "] . from device.type["DiffServDevice device.type["DiffServDevice"]; "]; from outPEPs.deployPolicy(p2); outPEPs.deployPolicy(p2); } } Slide 10 10 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

System prototype System prototype Slide 11 11 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

System prototype System prototype Slide 12 12 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse

System Prototype System Prototype QAME QAME QAME Grid domain QAME PBNM System (PHP) Globus GT3 MDS Grid policy (Web Service/XML) Grid policy repository (LDAP) Grid editor administrator Mapping Engine Mapping System files (PHP) rule editor PDP (Java ) Network administrator Network policy repository (LDAP) HTTP/HTTPS Ricardo Neisse - - Policy 2004 Policy 2004 Ricardo Neisse Network domain FreeBSD ALTQ Routers

Conclusions Conclusions � Grid � Grid policies: they policies: they are needed, but with network are needed, but with network policies integration integration policies � Mapping � Mapping rules are rules are not easy to not easy to define, requires: define, requires: • Preview agreement between grid and network Preview agreement between grid and network • administrator administrator • Good knowledge of the network and grid infrastructure Good knowledge of the network and grid infrastructure • � Future work � Future work • How to make the definition of mapping rules easier? How to make the definition of mapping rules easier? • • Bandwidth and performance evaluation Bandwidth and performance evaluation • • Policy conflicts Policy conflicts • Slide 14 14 of 15 of 15 Ricardo Neisse - - Policy 2004 Policy 2004 Slide Ricardo Neisse