Session Abstract

The Science DMZ design pattern is an effective way to provide high performance data transfer while avoiding the need to scale up the entire campus gateway infrastructure (router, firewall, IDS, etc.) to handle occasional ultra-high bandwidth flows. Nevertheless, campus IT security and policy guidelines must still be enforced. This presentation will discuss what we have learned in designing and deploying a high performance SDN dataplane as a Science DMZ “on ramp” to the Internet2 backbone. Traffic management, control integration, security, bandwidth partitioning and guarantees, and techniques to simplify deployment and operation of an SDN Science DMZ will be covered in the presentation.