15
The Grid Architecture The Grid Architecture William E. Johnston Distributed Systems Department Computational Research Division Lawrence Berkeley National Laboratory dsd.lbl.gov Office of Science U.S. Department of Energy

The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

  • Upload
    buitu

  • View
    215

  • Download
    0

Embed Size (px)

Citation preview

Page 1: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

The Grid ArchitectureThe Grid Architecture

William E. Johnston

Distributed Systems DepartmentComputational Research Division

Lawrence Berkeley National Laboratorydsd.lbl.gov

Office of Science

U.S. Department of Energy

Page 2: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

What are the Core Grid Middleware Services?What are the Core Grid Middleware Services?

• A common security model for Grid services and Grid applications provides uniform and versatile authentication, authorization, and privacy– Basis of the cyber-trust that enables collaboration

among the many organizations of a large science project

– Preserves local autonomy of resource owners– Correctly used, provides pretty good security

• Standardized access to computing systems and data storage systems

• Tools and services supporting construction and management of collaborations (virtual organizations)

Page 3: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

What are the Core Grid Middleware ServicesWhat are the Core Grid Middleware Services

• Services for dynamic construction of execution environments supporting complex distributed applications– locating and co-scheduling many resources to support,

e.g., transient and complex, science and engineering experiments that require combinations of instruments, compute systems, data archives, and network bandwidth at multiple locations

• Management of dynamic pools of underlying resources– Automatic resource registration and de-registration– Resource discovery

• Evolving to a Web Services / object oriented model of core services

Page 4: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

4

SensorNet Architectural ConsiderationsSensorNet Architectural Considerations

• Web Services approach is very likely to be dominate mechanism for distributed applications interfaces

• Combining Grids with Web Services brings dynamic resource management to Web Services (major industry push lead by IBM)

• Grid Services are Web services with a few additional behavoirs (ports) defined to do service initiation (factory) and lifecycle management of transient, stateful (e.g. Grid) services – i.e. dynamically created services

• Global Grid Forum (www.ggf.org) – international standards org. modeled on IETF (about 500 members from N. America, Europe, and Asia Pacific)

Page 5: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

5

NERSCSupercomputing

& Large-Scale Storage

PNNL

LBNLANL

ESnet

Europe

DOEScience Grid ORNL

ESNetX.509

CA

Grid Managed ResourcesAsia-Pacific

Funded by the U.S. Dept. of Energy, Office of Science,Office of Advanced Scientific Computing Research,

Mathematical, Information, and Computational Sciences Division

Sys

tem

s m

anag

emen

t an

d ac

cess

Com

mun

icat

ion

Ser

vice

s

Aut

hent

icat

ion

Aut

horiz

atio

n

Sec

urity

S

ervi

ces

Grid

In

form

atio

n

Ser

vice

Uni

form

Com

putin

gA

cces

s

Uni

x an

d O

GS

I ho

stin

g

Glo

bal E

vent

Ser

vice

s,

Aud

iting

, M

onito

ring

Co-

Sch

edul

ing

Uni

form

Dat

a A

cces

s

Supernova Observatory

scientific instruments

Synchrotron Light Source

User Interfaces

Higher-level Services / OGSA (Data Grid Services, Workflow management, Visualization, Data Publication/Subscription, Brokering, Job Mg’mt, Fault Mg’mt, Grid System Admin., etc.)

Core Grid Services / OGSI: Uniform access to distributed resources

Applications (Simulations, Data Analysis, etc.)

Application Frameworks (e.g. XCAT, SciRun) and Portal Toolkits (e.g. XPortlets)

Page 6: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

6

NWGISS Top Level ArchitectureNWGISS Top Level Architecture

Map server

data

Integrated NWGISS OGC Server Interface

OGC Compliant Clients (e.g., NWGISS MPGC)

Catalog Server

Data Catalog

OGC protocols

Capabilities Catalog

catalog access

CreateCapabilities

XML capability

Coverage server

Coverage Mapping

Page 7: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

NERSCSupercomputing

& Large-Scale Storage

PNNL

LBNLANL

ESnet

Europe

DOEScience Grid ORNL

ESNetX.509

CA

Grid Managed ResourcesAsia-Pacific

Funded by the U.S. Dept. of Energy, Office of Science,Office of Advanced Scientific Computing Research,

Mathematical, Information, and Computational Sciences Division

Sys

tem

s m

anag

eme

nt a

nd

acce

ss

Com

mun

icat

ion

Ser

vice

s

Aut

hent

icat

ion

A

utho

rizat

ion

Sec

urity

S

ervi

ces

Grid

In

form

atio

n

Ser

vice

Uni

form

Com

putin

gA

cces

s

Uni

x an

d O

GS

I ho

stin

g

Glo

bal

Eve

ntS

ervi

ces,

A

uditi

ng,

Mon

itorin

g

Co-

Sch

edul

ing

Uni

form

D

ata

Acc

ess

Supernova Observatory

scientific instruments

Synchrotron Light Source

Core Grid Services / OGSI: Uniform access to distributed resources

Portals

Higher Level Services

Frameworks

• Workflow engineoWSFLocurrent state reporting

Toolkits andCollectiveservices

• Grid Data Servicesoversion mg’mtomaster dataset mg’mtoreliable file xferonet cachesometadata cat’lg

• Replica Servicesometadataoreplica location

• Virtual Data Servicesomaterialized data cat’lgovirtual data cat’lgoabstract planneroconcrete planner

Map server

Integrated NWGISS OGC Server Interface

OGC Compliant Clients (e.g., NWGISS - NASA EOS DAAC access)

Catalog Server

OGC protocols

Data generation

prescriptions

Catalog

Coverage server

Coverage Mapping

Data managed by Grid Data Services

• Portal libraries•e.g. XPortlets (IU)

•Frameworks•e.g. XCAT (distributed CCA framework- IU)

Mo

stly Web

Services B

ased

• DataBase access•e.g. OGSA DAIS

Page 8: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

Scalable Monitoring, Activation, Scalable Monitoring, Activation, and Publication Serviceand Publication Service

Brian TierneyDan Gunter

Distributed Systems DepartmentComputational Research Division

Lawrence Berkeley National Laboratory

Office of Science

U.S. Department of Energy

Page 9: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

sensorsensor

Basic GGF, Grid Monitoring Architecture(evolved from our early work with monitors – a direct descendent

of MAGIC Testbed technology)

sensor

producer

Monitoring/event data• Subscription based event

channel• Typed collection of data w/

specific structure

registry

Raw Events• untyped data w/o specific

structure

Producer registry• catalogue of event types

and structure

Producer• Accept subscriptions• Deliver monitor data• Support query and filtering• Manage registration

self registration

query for monitor / event producers with specific characteristics

subscribe

consumer

9

Consumer• Sensor location discovery• Receive monitor data• Query and filter requests

to producer

Page 10: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

The GMA Producer and Consumer Interfacesare Well Defined – An Important Feature of the Architecture

(Allows construction of standardized services)

consumer

sensorsensorsensor

producer

registry registration

query

Standardized services:monitor archive, analysis service, etc.

producer interface

consumer interface

10

registration

registration

registration

query

“A Grid Monitoring Architecture,” B. Tierney, et al, Global Grid Forum Document.http://www-didc.lbl.gov/GGF-PERF/GMA-WG/

sensorsensorsensor

producer

sensorsensorsensor

producer

Page 11: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

11

Scalable Monitoring, Activation, and Scalable Monitoring, Activation, and Publication Service (SMAPS)Publication Service (SMAPS)

• We are generalizing the basic Grid Monitoring Architecture in several dimensions in order to address various aspects of scalability– Lots of producers– Lots of consumers– Lots of sensors, high data rates– Self organizing, self healing collections of all of

these– Complex producer subscriptions

§e.g. generalized queries and downloadable event filters and analysis modules

D. Gunter, B. Tierney, C. E. Tull, V. Virmani, “On-Demand Grid Application Tuning and Debugging with the NetLogger Activation Service,” 4th International Workshop on Grid Computing (Grid2003)

Page 12: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

SMAPS: Separation of Command and DataSMAPS: Separation of Command and Dataand GMA Cacheand GMA Cache

(scalability for number and operational modes of sensors)(scalability for number and operational modes of sensors)

– load reduction for consumer– light-weight producers

§ move heavy weight functions to a GMA cache system – e.g. filtering and compression for satellite up-link

§ this gives light-weight producers, only managing sensors, providing standard messaging, subscription, etc. – more suitable for field / mobile units

consumerregistry

E.g. a GMA cache(aggregate the monitor events to reduce

overhead on the consumer – e.g. thedatabase of an archive service)

producer interface

consumer interface

sensorsensorsensor

producer

sensorsensorsensor

producer

sensorsensorsensor

producer

Status: operational (skeletal registry)

cmd data

• Separation of command and data allows for standard cmd. protocol (SOAP) and API (WSDL defined) and efficient data transport

• Division of functionality using the standardized service interfaces allows, e.g.

Page 13: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

13

SMAPS: Sensor Activation SMAPS: Sensor Activation (scalable management of sensor data)(scalable management of sensor data)

• Do not want all monitoring data collected all the time– Potentially too much data– Allow for adjusting the level

of monitoring as needed for:§ operation§ debugging§ performance tuning§ error analysis

• Add a standard sensor control channel and “manager” function– manager may be combined

with producer

consumer /sensor control(activate and

subscribe)

registry

GMA cache(aggregate the monitor events to reduce

overhead on the consumer – e.g. thedatabase of an archive service

producer interface

consumer interface

sensorsensorsensor

producer

sensorsensorsensor

producer

Status: operational

consumer

requested sensor

behavior

manager

subscribe

manager

Page 14: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

14

SMAPS: Security and Group ManagementSMAPS: Security and Group Management

Status: prototype being constructedCollaboration with Deb Agarwal and Olivier Chevassut

registry

consumer

secure, reliable multicast group

producerproducer

sensorsensorsensor

producerproducer

sensorsensorsensor

Page 15: The Grid Architecture - ITTC · • A common security model for Grid services and ... authorization, and privacy – Basis of the cyber-trust that enables ... • Services for dynamic

15

SMAPS: Autonomic (selfSMAPS: Autonomic (self--healing) andhealing) andSelf Organizing Sensor NetsSelf Organizing Sensor Nets

• Using Peer-to-Peer services provides scalable discovery of all available registries containing specific data types

• Combining P2P with reliable multicast provides:– P2P with security– Very rapid location of any available rendezvous point

§ e.g. sensors can select among any available, compatible producers⇒ self-organization (e.g. sensors that are isolated from original producer can rapidly locate any suitable producer and reconnect to it

§ if all original producers are lost, then setting up an authorized producer on any system on the remaining network will reestablish a rendezvous point, and the sensors will automatically start reconnecting

§ Since producers can serve as a light-weight registry

– resource scalability – as servers get loaded, just add more – the rendezvous protocol could select a target for new sensors based on load

Status: experiments be conducted and design options considered. Collaboration with Wolfgang Hoschek and Karlo Berket