GARUDA –NKN PARTNERS MEETgarudaindia.in/html/pdf/garuda_nkn_2011/Day 1...Page 13 National...

GARUDA – NKN PARTNERS MEET

15th July, 2011

National Knowledge NetworkPage 2

THANK YOU

► High Level Committee (HLC)► Technical Advisory Committee (TAC)► SIAC► Member Institutions► BSNL/MTNL/POWERGRID/RAILTEL► Model Project

National Knowledge NetworkPage 3

Experience life with 1000000000 bps

9th April 2009piu@nkn.in

National Knowledge NetworkPage 4

IMTECHIIT-ropar,

PU

IIT-D, IIT-R, JNU,DU,AMU, CSIR, IGIB-N, IGIB-O, NDRI, RML, NSIT, IIITD

Jammu University

Raj Univ

IIT-Gnr, AAU, SAC

BARC, TIFR,CDAC,IIT-B, Anushakti Ngr

NCRA,IITM,CDAC-P, IUCAA , Uni pune,

IISC, RRI,CDAC-KP, CDAC-Elec, IIAP, TIFR-bangalore

AAU, IIT-G, ICAR-S,univ-G,

SAHA, VECC, IIT-P, IIT-KGP ICAR-P,

CDRI, BA-univ, IIT-K, CSAU

JNKVV, RRCAT

IOP, IIT-BHU

IIT-H, CADC-H, AMD, DNA, AGRANGA Univ,

IIT-M, CDAC-M, IGCAR, Anna Univ, IIMSc,

SNEYE

VSSC, CDAC-T, RCC

DAEUniversityICARCDAC

IIT. IISCHealth CSIR

connected -66 no's

Connected Sites Under Initial Phase of NKN

National Knowledge NetworkPage 5

► NKN will connect Educational Institutes, R&D institutions,Health service facilities, Agricultural institutions and Libraries ofthe country

► In March 2010, Government of India allocated a budget of INR5990 Crore for the Implementation of NKN

► Implementation plan was finalized by TAC under the guidanceof HLC

► National Informatics Centre (NIC) was appointed as the ProjectExecution Agency (PEA)

► On Conclusion of the final Phase NKN would have connected1500+ institutions

Introduction

National Knowledge NetworkPage 6

► Need a single infrastructure that supports multitude ofapplications in a secure manner

► Provide a scalable solution► Provide low hop network► Allow core routers/networking devices to switch packets based

on some simplified header► Keep up to date with the technology► Available (24X7X365)

Need of the Hour

National Knowledge NetworkPage 7

Key Highlights

► The architecture of NKN has been designed for reliability,availability & scalability

► The network consists of an ultra-high speed core, starting withmultiple 2.5/10 G and progressively moving towards 40/100Gigabits per Second (Gbps)

► The core is complimented with a distribution layer covering alldistricts at appropriate speeds

► The participating institutions at the edge would seamlesslyconnect to NKN at Gigabit per second speed

National Knowledge NetworkPage 8

NKN

EducationalInstitutionsResearch Labs

CSIR/DAE/ISRO/ICAR

INTERNET

Connections to Global Networks

(e.g. GEANT)

EDUSAT

MPLSClouds

Broad BandClouds

National / StateData Centers/ Networks

NationalInternet

Exchange Points (NIXI)

NTROCert-IN

National Knowledge Network

National Knowledge NetworkPage 9

► At the conclusion of the final phase, NKN shall have presence in more than 500 districts of India with connectivity to major research and education institutions

► Points of Presence (PoP) : 31► Backbone Links : 89► Edge links : 1500

NKN: On Conclusion of Final Phase

National Knowledge NetworkPage 10

Technical Overview

► The backbone of the network starts from 2.5 Gbps andprogressively moves onto 10 Gbps connectivity between 7Supercore (fully meshed) locations across India.

► The network is further spread out through Core locations withmultiple of 2.5/10 Gbps partially meshed connectivity withSupercore locations.

► The network architecture and governance structure allowsusers with options to connect to the distribution layer as well.

► For special interest groups, NKN enables Virtual PrivateNetworks

► NKN provides international connectivity to its users for globalcollaborative research. Presently, NKN is connected to:► Trans Eurasia Information Network (TEIN3)► Similar connectivity to few other research networks is in the pipeline

National Knowledge NetworkPage 11

TEIN3 at CDAC, Mumbai

National Knowledge NetworkPage 12

S.No Service Type Description

1 SpecialVPN (L2), VPN (L3), VPN Switching Service, Multicast Streaming

* These services may be through a CUG as well

2 Community

Shared Storage, e-Mail List Software Application (LISTSERV), Authentication Service, Session Initiation Protocol (SIP), Collaboration Service, Content Delivery Service, International Collaborations with EU-India Grid, Global Ring Network for Advanced Applications Development (GLORIAD) etc.

3 Generic

Internet, e-Mail, e-Mail Gateway, DNS - NKN, DNS -Security for NKN Users, Web Hosting, VoIP, MCU based Video Portal, SMS Gateway, Co-Location Services (CPU, Applications & Application Services)

NKN Services

National Knowledge NetworkPage 13

► Creation of Virtual Classrooms at IITs Over NKN► 38 Virtual Classrooms are being created at 15 IITs► 26 Virtual Classrooms are fully ready and 12 are under preparation► All Virtual Classrooms are equipped with state-of-the-art high end teaching cum

learning infrastructure

IIT, GandhinagarIIT, Bhubaneswar

IIT, RoparIIT, Mandi

NKN Infrastructure

National Knowledge NetworkPage 14

NKN Infrastructure

► 23 Additional Virtual Classrooms being developed at:► Indian Institute of Science (IISC)► National Institute of Technology (NIT)► Indian Institutes of Science, Education & Research (IISER) ► Chennai Mathematical Institute (CMI)► TIFR Centre for applicable Mathematics

National Knowledge NetworkPage 15

Phase-I Phase-II

Medical Institutions (Medical + ICMR) 58 244

NKN Connectivity to Medical Institutions

► NKN will enable doctors, scientists across the country to workin the critical and emerging areas of medical field

► In Phase-I, out of 550 institutes 58 medical institutions aregetting connected with NKN

► In Phase-II, a total of 244 institutions are getting connected

National Knowledge NetworkPage 16

IP+ATM IP+OpticalGMPLS

Provider Provisioned

VPNs

MPLS

Traffic Engineering

Network Infrastructure

Any Transport over MPLS

Multi Protocol Label Switching (MPLS) as a Foundation

National Knowledge NetworkPage 17

What Is a Virtual Private Network?

► VPN is a set of sites or groups which are allowed tocommunicate with each other

► VPN is defined by a set of administrative policies► Policies established by VPN customers► Policies could be implemented completely by VPN service

providers► Flexible inter-site connectivity

► Ranging from complete to partial mesh

National Knowledge NetworkPage 18

Multicast

VoIPIntranet

Extranet

DC

Common Services

IITBIGIB

IGCAR IITM

CRRI

IGARIITD

IITC

IMT

TIFR JNUIITK

MPLS L3 VPNs

► Point to cloud single point of connectivity► Easy grouping of users and services► Enables content hosting inside the network► Supports private overlapping IP addresses► Scalable to over millions of VPNs► Per VPN QoS

National Knowledge NetworkPage 19

VRF

VRF

VRF

LDP LDPLDP

iBGP—VPNv4 Label Exchange

PE1PE4

PE3

IGCAR

IITb

IIT m

BARC

P1 P2

VRF VRF

PE2

VRFIMT

Using Route-Reflector for Scaling

► VPN service is enabled on PEs (VRFs are created and applied to VPN site interface)► VPN site’s IITm connects to a VRF enabled interface on a PE1► VPN site routing by IITm is distributed to MP-iBGP on PE1► PE1 allocates VPN label for each prefix, sets itself as a next hop and relays VPN site

routes to PE4► PE4 distributes IITm’s routes to IITb(Similar happens from IITb’s side)

National Knowledge NetworkPage 20

MPLS VPN Network

IIT M

IIT B

IIT D

IIT H

CAT

BARC

TIFR

VSC Receiver

Multicast Source

Multicast Source

Multicast in the core

Multicast VRF

Multicast Receiver

MPLS Services: Multicast VPNs

National Knowledge NetworkPage 21

Ingress PE

NKNMPLS SERVICE

CEEgress PEVLAN1VLAN1--VPN GreenVPN Green

VLAN2VLAN2--BlueBlue

VLAN3VLAN3--RedRed

IIT M

Each SubInterfaceassociated with different

VPN

vv

vv

802.1Q

VPN Green SiteVPN Green SiteDAE LABDAE LAB

VPN Blue SiteVPN Blue SiteBIO TECHBIO TECH

VPN Red SiteVPN Red SiteIIT HIIT H

Multi-VRF

L2

L3

Bio-Tech Lab

Phy LabClass Room

NKN MPLS with VPNs in campus(IIT-M) that span across NKN Cloud

National Knowledge NetworkPage 22

NKNMPLS SERVICE

PEVLAN1VLAN1--VPN GreenVPN Green

VLAN2VLAN2--BlueBlue

VLAN3VLAN3--RedRed

Each Sub-Interfaceassociated with different

VPN

VPN Blue SiteVPN Blue SiteBIO TECHBIO TECH

VPN VPN RedRed SiteSiteIIT HIIT H

GARUDA CUGBIO-TECH Project CUG

Class Room CUG

VPN Green SiteVPN Green SiteGARUDA LABGARUDA LAB

NKN RouterNKN Router

NKN Router

VPN Green SiteVPN Green SiteGARUDA LABGARUDA LAB

Internet Service

Garuda à NKN

National Knowledge NetworkPage 23

Layer 2 VPNs

► Similar to L3VPN► Designate a label for the circuit► Exchange that label information with the egress PE► Encapsulate the incoming traffic (Layer 2 frames)► Apply label (learned through the exchange)► Forward the MPLS packet (l2 encapsulated to destination on an

LSP)► At the egress

National Knowledge NetworkPage 24

L2 Extension

National Knowledge NetworkPage 25

VPLS Network

DAEIndore

DAE Kokotta

PE Router

Mumbai

PE Router Indore

PE Router

PE Router

Virtual Circuits / Pseudo wires

Physics Department

IIT Chennai

Kalapakkam

IIT-Mumbai

DAE VPN

National Knowledge NetworkPage 26

VPLS Network

DAEIndore

DAE Kokotta

PE RouterMumbai

PE Router Indore

PE Router

PE Router

IIT-Mumbai

Virtual Circuits / Pseudo wires

Physics Department

IIT Chennai

Kalapakkam

Separate VPNs

National Knowledge NetworkPage 27

MPLS Layer 3 VPN

► Management VPN – Management of P and PE routers

National Knowledge NetworkPage 28

MPLS Layer 3 VPN

► Management VPN – Management of CE routers

National Knowledge NetworkPage 29

High Availability through Design

National Knowledge NetworkPage 30

OPERATIONAL

► Complexity in existing Network

► Multiple Networks in Institute

► No single point of contact in many

cases

► Reluctance to Change

MIND SET

►Why Should I change My

Setup

►Will the change that we make

are permanent.

►Confusing multiple Scheme

TECHNOLOGY

► IP Numbering Schema, ► Multi-Homing► Hardware compatibility

Manageable for short time….

Manageable for short time….

Challenges in Initial Phase Delivery

National Knowledge NetworkPage 31

What NKN will provide?

► Bandwidth, Availability and reliability► IP space/ Interface with the APNIC► NOC and DC, DR NOC and DC► 24X 7 Support operations support► Common Services like Web/Mail/ MX/DNS etc.► All the MPLS VPN V4 / V6 and L2 VPN support.► Guidelines and Procedures to effectively use the NKN.► Routing/ Switching equipment at the end node to connect to the

NKN.► Internet bandwidth► Interface with other networks ( EU-GRID..)► Any other PORTAL / APPLICATION is deemed fit to be kept at Data

center of NKN for efficient usage.► Applications like Video on Demand may be hosted on Data Center

National Knowledge NetworkPage 32

Criterion to join NKN

► Minimum bandwidth interface will be 100mbps► Must comply to the policies of NKN

► IP Usage Policy► Operations policy► Security Policy► Collocation Policy► NKN PoP MoU► DNS Caching► Messaging Gateway Policy► Malware Filtering Policy

National Knowledge NetworkPage 33

What logistics are expected from End Nodes?

► Space for equipments. (Router/ switch/ ups/ Racks from NLD)► Air- Conditioned Environment► UPS (5 KVA & 10 KVA Based on router supplied)► 24X7 access to NKN personnel or persons authorized by NKN► Seating place for one NKN appointed person► Safety of the equipments supplied under NKN► Cabling with in the user location for connecting to the NKN

router► Right of Way with in the User Campus for cabling to be done by

the long distance providers► Nodal Officer appointed will be the single point of interface for

NKN

National Knowledge NetworkPage 34

Immediate Steps for Integration

► Migration plan ( short term)► start the discussions with the NKN team for suitable changes at

both the ends► Procurement of hardware where ever necessary through

existing empanelment► Workshop only for specific working group to formulate the

migration plan

National Knowledge NetworkPage 35

Thank You