November 2011 - Nsi-wg - lists.ogf.org

Re: [Nsi-wg] Issue 8 in ogf-nsi-project: Common fail/confirm message type.
by ogf-nsi-project＠googlecode.com 30 Nov '11

30 Nov '11

Updates: Status: WontFix Comment #4 on issue 8 by guy.robe...(a)gmail.com: Common fail/confirm message type. http://code.google.com/p/ogf-nsi-project/issues/detail?id=8 We don't see sufficient need for this change.

1 0

FW: ogf.org domain banned
by Guy Roberts 30 Nov '11

30 Nov '11

My emails from nsi-wg(a)ogf.org<mailto:nsi-wg@ogf.org> seem to be being blocked by the Microsoft spam filter even though the ogf.org server has been taken off the spam list below. Could you please investigate? Guy From: Guy Roberts Sent: 25 November 2011 10:26 To: replogle(a)ogf.org; 'ogf-it(a)ogf.org' Cc: t.kudoh(a)aist.go.jp; Inder Monga (imonga(a)es.net) Ross Winter; Richard Hughes-Jones Subject: ogf.org domain banned Hi Joel, We are having a problem with the OGF mailing lists. Apparently the IP address of the ogf.org domain has been banned by www.barracudacentral.org<http://www.barracudacentral.org> Many people are missing our NSI working group emails if their spam filters are checking this list. Oct 26 13:22:09 mx1 sendmail[5717]: p9QBM70N005717: ruleset=check_rcpt, arg1=<jordi.ferrer(a)i2cat.net<mailto:jordi.ferrer@i2cat.net>>, relay=www.ogf.org [65.182.181.180], reject=553 5.3.0 <jordi.ferrer(a)i2cat.net<mailto:jordi.ferrer@i2cat.net>>... Spam blocked see: http://www.barracudacentral.org/lookups/ip-reputation?ip=65.182.181.180 Could you please ask the IT support investigate? Thanks, Guy _____________________________________________________________________ ** Guy Roberts, PhD Network Engineering & Planning * * Tel: +44 (0)1223 371300 * * City House Direct: +44 (0)1223 371316 * 126-130 Hills Road Fax: +44 (0)1223 371371 * Cambridge * CB2 1PQ E-mail: guy.roberts(a)dante.net<mailto:guy.roberts@dante.org.uk> D A N T E United Kingdom WWW: http://www.dante.net _____________________________________________________________________

2 1

NSI abstract at TNC'12
by Radek Krzywania 30 Nov '11

30 Nov '11

Hi all, So far so good :) We have almost final version of the abstract (see attachment). I cleaned the document from track changes, and put last edits from Jerry and John. Since we have 9 authors by now, I've put a table with all of them to fit on one page. I will mark we want to put a full paper (if TNC will accept the abstract), which has chanced to be published then in some recognizable media, so there will be even more work but more space to get into every (well, most) aspect of the NSI in details. Authors - please verify affiliations, I took addresses from web pages! I am still missing the references - ogf is still migrating and I can't access gridforge! Does anyone have copies of architecture and NSI CS specifications? I would appreciated the title and authors list ASAP. I am now closing alone in a room to the final overall reading. This is the last call for changes! The submittion deadline is 5pm but TNC servers are quite heavy utilised at that time and someone can fail to submit ;) so further changes may not be uploaded for evaluation. Best regards Radek ________________________________________________________________________ Radoslaw Krzywania Network Research and Development Poznan Supercomputing and radek.krzywania(a)man.poznan.pl Networking Center +48 61 850 25 26 http://www.man.poznan.pl ________________________________________________________________________

2 1

NSI abstract at TNC'12
by Radek Krzywania 30 Nov '11

30 Nov '11

Hi all, In the attachment you will find v3 of the Abstract. Thanks to Chin it’s more English and easier to read. As the deadline for submission is Wed, I would like to encourage all who wants to contribute to this abstract to comment it. I would like to submit it tomorrow afternoon, and od not wait for the last moment. Also I would like to need Author Biographies for all the authors, which currently are (please correct me if I missed someone, or someone do not want to be one - I place co-chairs by default): - Radek Krzywania - Inder Monga - Guy Roberts - Tomohiro Kudoh - Chin Guok - Jerry Sobieski Btw - the issue of having whole session will be solved probably on Jan 2012 when TNC Programme Committee will have a meeting. We need to submit paper/papers anyway in regular way. Best regards Radel ________________________________________________________________________ Radoslaw Krzywania Network Research and Development Poznan Supercomputing and radek.krzywania(a)man.poznan.pl Networking Center +48 61 850 25 26 http://www.man.poznan.pl ________________________________________________________________________

2 3

Today's NSI conf call
by Guy Roberts 30 Nov '11

30 Nov '11

Hi all, The following is dial-in information for Wednesday's NSI call, time: 7:00 PDT 10:00 EDT, 15:00 GMT, 16:00 CET, 24:00 JST 1. Dial Toll-Free Number: 866-740-1260 (U.S. & Canada) 2. International participants dial: Toll Number: 303-248-0285 Or International Toll-Free Number: http://www.readytalk.com/intl 3. Enter 7-digit access code 8937606, followed by "#" Agenda: * Time and location of NSI face-to-face meeting in February * Next version of NSI protocol document * IT issues: Gridforge and Mailing list and GFD.173 problems * Demo schedule and maintenance of demo infrastructure * NSI topology * Other issues Guy _____________________________________________________________________ ** Guy Roberts, PhD Network Engineering & Planning * * Tel: +44 (0)1223 371300 * * City House Direct: +44 (0)1223 371316 * 126-130 Hills Road Fax: +44 (0)1223 371371 * Cambridge * CB2 1PQ E-mail: guy.roberts(a)dante.net<mailto:guy.roberts@dante.org.uk> D A N T E United Kingdom WWW: http://www.dante.net _____________________________________________________________________

1 0

NSI abstract for TNC2012
by Radek Krzywania 25 Nov '11

25 Nov '11

Hi all, In the attachment you will find the first draft of the NSI abstract for TNC'12. Best regards Radek ________________________________________________________________________ Radoslaw Krzywania Network Research and Development Poznan Supercomputing and radek.krzywania(a)man.poznan.pl Networking Center +48 61 850 25 26 http://www.man.poznan.pl ________________________________________________________________________

1 1

Setting up SSL/TLS
by Henrik Thostrup Jensen 24 Nov '11

24 Nov '11

Hi As promised just a short introduction to this. Some terminology: SSL: Secure Socket Layer TLS: Transport Layer Security (mostly a new a name for SSL) HTTPS: HTTP over SSL/TLS Versions: SSLv2 is deprecated. SSLv3 and TLS 1.0 are quite similar, but not quite the same. TLS 1.1 and 1.2 still have very sporadic support. SSLv3 and TLS 1.0 is the common thing used today. Don't worry too much about the SSL/TLS name, it is protocol-negotiable along with ciphers, etc. and will most likely take care of itself. To authenticate a certificate must be used. The typical setup in www is that only the service has a certificate, so the client can authenticate the service, but not the other way (this has be done via some other means then). For NSI, the client should also have a certificate such that both parties can be identified. Getting a "real" certificate, i.e., one signed by a proper certificate authority (CA) can be a bit tricky. There are commercial providers (costs money), but often research institutions and NRENs can get them through Terena or through a grid CA (which would be part of IGTF - The International Grid Trust Federation). If this turns out to be difficult, one can make a self-signed certificate, but this is probably not what you want for production. Regarding authorization, it is usually possible to make a setup where no checking is done on the CA or the identity of the certificate. This can be a good way to start, but again, not something suited for production. Usually one will have a set of trusted CAs, and a list of identifies which are authorized (possible with some policy on the side). In the Java world the CAs are traditionally kept in whats called keystore, but in many other systems, it is just a directory with the CA files. How to setup and implement this, will vary greatly depending on your system, so I can't provide any details on this, but most HTTP servers support for it. Otherwise a proxy such as NginX can be used in front of the service. Similarly you will also have to support https on your client. In fact, this can be a good place to start as your client will then be able to make requests to https services. For now, I strongly suggest using a client which can do both http and https, in order to easy the transition. Once you have acquired a certificate, please update this page http://code.google.com/p/ogf-nsi-project/wiki/Certificates. Furthermore send the new endpoint of your service to master of the topology file (Jerry), so he can update the topology with the new endpoint. I hope this gives some overview and pointers on how to start. It should not be that difficult. Best regards, Henrik Henrik Thostrup Jensen <htj at ndgf.org> NORDUnet / Nordic Data Grid Facility.

2 1

NSI call tomorrow
by Tomohiro Kudoh 22 Nov '11

22 Nov '11

Hi all, We will have a quick call tomorrow (Nov.23) The following is dial-in information for the NSI call, time: 7:00 PST 10:00 EST, 15:00 GMT, 16:00 CET, 24:00 JST 1. Dial Toll-Free Number: 866-740-1260 (U.S. & Canada) 2. International participants dial: Toll Number: 303-248-0285 Or International Toll-Free Number: http://www.readytalk.com/intl 3. Enter 7-digit access code 8937606, followed by "#" Agenda: - TNC submittion - how we will keep things running (security? IP address filtering?) - ad-hoc meeting plan Tomohiro

2 1

NSI TNC 2012
by Radek Krzywania 22 Nov '11

22 Nov '11

Hi, are there any plans for NSI on TNC 2012? I've just got a call for paper on it. We could write a paper on demo/development experience and show current features and service cover map. What do you think? Deadline is end of Nov. Also maybe it will be feasible to have a demo there, unless not much new will be available after SC. Best regards Radek ________________________________________________________________________ Radoslaw Krzywania Network Research and Development Poznan Supercomputing and radek.krzywania(a)man.poznan.pl Networking Center +48 61 850 25 26 http://www.man.poznan.pl ________________________________________________________________________

6 5

Re: [Nsi-wg] Issue 40 in ogf-nsi-project: State machine is not a state machine
by ogf-nsi-project＠googlecode.com 16 Nov '11

16 Nov '11

Updates: Status: WontFix Comment #3 on issue 40 by thost...(a)gmail.com: State machine is not a state machine http://code.google.com/p/ogf-nsi-project/issues/detail?id=40 This issue has been acknowledged and we agree that it is not a state machine, but that it is okay.

1 0