CC*Integration-Large: Programmable Network Testbed for 400 Gbps Science DMZ

CC*Integration-Large：400 Gbps Science DMZ 的可编程网络测试台

• 批准号: 2346605
• 负责人: Sanjay Rao
• 金额: $ 80万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2024
• 资助国家: 美国
• 起止时间: 2024-10-01 至 2026-09-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2346605&HistoricalAwards=false
• 关键词: CC; Integration; Large; Programmable; Network

The data storage and transfer needs of science drivers such as high energy physics far exceeds regular campus traffic already, and continues to grow. This explosive growth in turn challenges the task of monitoring and managing research networks. This project will design, implement and deploy PRONET, a testbed to support cutting-edge research for managing Science DMZ traffic. PRONET will enable (i) real-time monitoring of Terabits per second of traffic for tasks such as security and performance; (ii) enable complex processing at network line rate to support both current Science DMZ use cases (e.g., detect security attacks) and emerging ones (e.g., process IoT traffic); and (iii) validation of programmable networking research on real-world traffic.Major areas of innovation are: (i) the design of a system for monitoring Science DMZ traffic in real time for both operational and experimental needs that can scale to Tbps of traffic; (ii) new capabilities to monitor traffic within the Science DMZ which will enable both enhanced security, and characterization of new types of traffic; (iii) demonstrating how programmable networking can enable a wide range of emerging use cases in Science DMZ environments related to security attack detection, machine learning-based traffic classification, and IoT traffic processing through support for offloading functionality to heterogeneous and distributed programmable hardware; and (iii) insights obtained by experimenting with programmable networking prototypes on real-world traffic which can advance research in the area.The team comprises PIs with complementary expertise in both networking research and management of campus cyber-infrastructure. The PIs will collaborate with Purdue's central IT organization to integrate PRONET into Purdue’s network infrastructure. The project will influence future Science DMZ designs by demonstrating use cases of programmable networking in these environments. The experiences will be disseminated to both networking researchers as well as practitioners who manage Science DMZ environments. The project will drive the adoption of programmable networking, leading to more secure, reliable, and agile network environments. The project will extensively involve graduate and undergraduate students, and the PIs will work to actively recruit students from underrepresented groups.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

高能物理等科学驱动因素的数据存储和传输需求已经远远超过常规校园流量，并且这种爆炸性增长反过来又对监控和管理研究网络的任务提出了挑战。 ，一个支持管理 Science DMZ 流量的尖端研究的测试平台将能够 (i) 实时监控每秒太比特的流量，以执行安全和性能等任务；(ii) 能够以网络线路速率进行复杂的处理。支持当前的 Science DMZ 用例（例如，检测安全攻击）和新兴攻击（例如，处理物联网流量）；以及（iii）对现实世界流量的可编程网络研究进行验证。主要创新领域是：（i）科学监控系统的设计实时满足操作和实验需求，可扩展到 Tbps 流量；(ii) 监控科学 DMZ 内流量的新功能，这将增强安全性并表征新型流量；如何可编程网络可以通过支持将功能卸载到异构和分布式可编程硬件，在 Science DMZ 环境中实现与安全攻击检测、基于机器学习的流量分类和物联网流量处理相关的各种新兴用例；以及 (iii) 获得的见解；通过在现实世界的流量上试验可编程网络原型，可以推进该领域的研究。该团队由在网络研究和校园网络基础设施管理方面具有互补专业知识的 PI 组成。PI 将与普渡大学的中心合作。 IT 组织将 PRONET 集成到普渡大学的网络基础设施中，该项目将通过展示这些环境中的可编程网络案例来影响未来的 Science DMZ 设计，这些经验将传播给网络研究人员以及管理 Science DMZ 环境的从业者。采用可编程网络，带来更安全、可靠和敏捷的网络环境，该项目将体现研究生和本科生的参与，PI 将努力积极从代表性不足的群体中招募学生。通过使用基金会的智力价值和更广泛的影响审查标准进行评估，NSF 的法定使命被认为值得支持。