wiki:network

Network Architecture

We enforce a split between "Control", "Data", and "Infrastructure" networks. Control and Infrastructure share a common infrastructure, using VLANs to provide isolation. Together these provide services and user access to the testbed.

The Data networks operate on physically separate hardware, to preserve repeatability of experiments, and to prevent experiments from interfering with testbed services.

Networks do not span sites, with access being done via L3 tunnels, or public internet.

The Instrumentation network is special, in that it is accessible to experiments, but is managed by infrastructure services. This provides, for example, optical or RF devices that need direct L2 access to multiple domains. Access to this network is granted on a case by case basis to experiments. This is also the only L2 network that spans sites.

Currently, the only two sites are the main deployment in NYC, and the sandboxes at Rutgers, in North Brunswick NJ.

Consoles give user access from outside and communicate with services on the DMZ network, and access to the testbed devices over control.

Network Roles

Each Domain has a control network, that is statically configured, as well as two configurable data plane networks. Imaging and other configuration tasks is done via the control network, while experiment and radio traffic is passed on the data networks.

In addition, each "site" has some infrastructure networks.

  • CM: used for power control of nodes, not directly accessible to users, instead is managed by services
  • Inside: Private network for service traffic, VM Storage traffic, etc.
  • DMZ: User accessible network for service traffic
  • MGMT: Private network for control of network devices, VM Cluster synchronization, etc.
vlan id subnet name location
101 10.101.0.0/16 mgmt_win winlab
102 10.102.0.0/16 inside_win winlab
103 10.103.0.0/16 cm_win winlab
104 10.104.0.0/16 dmz_win winlab
105 10.105.0.0/16 mgmt_nyc nyc
106 10.106.0.0/16 inside_nyc nyc
107 10.107.0.0/16 cm_nyc nyc
108 10.108.0.0/16 dmz_nyc nyc
109 10.109.0.0/16 instrument both
110 10.110.0.0/16 bed_ctrl nyc
111 10.110.0.0/16 bed_data1 nyc
112 10.110.0.0/16 bed_data2 nyc
113 10.110.0.0/16 sb1_ctrl winlab
114 10.110.0.0/16 sb1_data1 winlab
115 10.110.0.0/16 sb1_data2 winlab
116 10.110.0.0/16 sb2_ctrl winlab
117 10.110.0.0/16 sb2_data1 winlab
118 10.110.0.0/16 sb2_data2 winlab
Last modified 12 months ago Last modified on 03/19/19 23:23:01

Attachments (1)

Download all attachments as: .zip