Introduction of Advanced Services for Armenian highspeed Research and Education interconnection back

1
Introduction of Advanced Services for Armenian
high-speed Research and Education
interconnection backbone

• Arthur Petrosyan
• arthur_at_sci.am
• Academic Scientific Research Network of Armenia
  (ASNET-AM)
• Institute for Informatics and Automation Problems
  (IIAP)
• of the National Academy of Sciences of Armenia
  (NAS RA)

2
Motivation

• Armenian high-speed Research and Education
  interconnection backbone basis for introduction
  of advanced network services
• Goals
• higher level of dynamic information exchange in
  teaching, learning, research
• online video conferencing
• effective scientific and statistic computing
  (Clustering/Grid)
• more efficient collaboration
• integrated network with common management

3
Example Services

• Real time communications services
• Media streaming
• VideoLAN
• Mpeg4IP
• Icecast
• Conferencing services
• VRVS (Virtual Room Videoconferencing System)/EVO
  (Enabling Virtual Organizations)
• videoconferencing and remote collaboration over
  IP networks

4
Example Services
VRVS example - High Quality Multipoint
Videoconferencing Session from the Air

• 7 March 2005
• VRVS's chief architect, Philippe Galvez
  originated an intercontinental videoconference
  using the VRVS production system, on a flight
  over the Atlantic at an altitude of 12,000 meters
  on.

• Participants at Caltech in Pasadena, California
  (USA), at a university in Kosice (Slovakia), at
  CERN in Geneva (Switzerland), and Galvez on a
  Boeing 747 en route from Los Angeles to Munich
  were able to enjoy a high quality videoconference
  session.

5
Example Services

• Eduroam

• Inter-institutional roaming (RADIUS-based
  802.1X)
• transparent Wireless LAN access for nomadic
  wireless users at different locations

Countries connected to the eduroam in the
European realm
6
Example Services

• CERT AM/AM NREN CSIRT (www.cert.am)
• High-speed Research and Education interconnection
  will permit more effective security problems
  solutions for all participant networks
• In cooperation with AM NREN CSIRT it is planned
  to provide consulting and implementation of the
  following security technologies
• DNSSEC
• Intrusion detection and prevention systems
• Allow users to supply IPv6 Glue records
• VPN
• Authentication/Authorization
• Digital signatures and certificates

7
Example Services

• Virtual Private Networks (VPN)
• VPN services will allow participant universities
  and research institutions to implement secure
  (and compressed) data transfer via encrypted VPN
  channel
• VTUN package Example of Client-Server
  many-to-one application that has proved to be
  very effective open source solution for VPN
• different levels of tunneling (IP, PPP/SLIP,
  Ethernet)
• Encryption (BlowFish 128 bits)
• Compression (zlib,lzo)
• Traffic shaping, etc.
• Works both over TCP and UDP

8
Example Services

• Secondary DNS service for participant
  universities and research institutions
• Primary DNS server will remain under own
  management
• Will allow to extend the redundancy of current
  institutions/ universities DNS service

9
Example Services

• Mail Relaying
• Multilevel E-mail filtering
• Antivirus, Antispam, Antispyware support
• Filtered contents available to administrators of
  participant networks for further viewing and
  managing

10
Example Services

• Antivirus AntiSPAM
• RBLs (Realtime Block List)
• Following RBLs proved to be effective at ASNET-AM
• spamcop.net
• spamhaus.org (sbl, xbl)
• dsbl.org
• abuseat.org
• spambag.org
• dul.ru
• ahbl.org
• dul.dnsbl.sorbs.net
• Spamassassin

11
Example Services

• ASNET-AM statistics
• RBLs
• average attempts blocked 921000 monthly/ 30700
  daily
• Spamassassin
• average attempts blocked 12000 monthly/ 400
  daily

12
Example Services

• ASNET-AM statistics

13
Example Services

• ASNET-AM statistics

14
Example Services

• Proxy service
• By using Squid web caching proxy open source
  software it is planned to extablish a proxy
  server, which can act as a peer (SIBLING or
  PARENT) for proxy servers of participant networks.

15
Example Services

• Support and Consulting services in the following
  areas
• Network Security
• Network Design, Configuration and Support
• Web Caching Infrastructure Design, Installation
  and Support
• Setting up high-performance and reliable proxy
  caches and http-accelarators
• Proxy Support (assistance to install, configure,
  and performance tune Squid web caching proxy)
• Database Support (Performance Tuning, Backup and
  Disaster Recovery Plans, etc)

16
Summary

• Deployment of Armenian high-speed Research and
  Education interconnection backbone infrastructure
  will provide integrated network with common
  management, sole security management policy and
  advanced network services with flexible and
  secure data exchange.

17
Thank You !
Arthur Petrosyan arthur_at_sci.am Academic
Scientific Research Network of Armenia
(ASNET-AM) Institute for Informatics and
Automation Problems (IIAP)of the National
Academy of Sciences of Armenia (NAS RA)