SlideShare a Scribd company logo
Globus for System Administrators
Vas Vasiliadis
vas@uchicago.edu
CHPC National Conference
December 5, 2019
Globus Connect Server
3
• Makes your storage accessible via Globus
• Multi-user server, installed and managed by sysadmin
docs.globus.org/globus-connect-server-installation-guide/
Local system users
Local Storage System
(HPC cluster, NAS, …)
Globus Connect Server
MyProxy
CA
GridFTP
Server
OAuth
Server
DTN
• Default access for
all local accounts
• Native packaging
Linux: DEB, RPM
Globus Connect Server v4
4
Local system users
Local Storage System
(HPC cluster, NAS, …)
Globus Connect Server
MyProxy
CA
GridFTP
Server
OAuth
Server
DTN
Non-POSIX Connectors
POSIX-compliant Connector
server
For now, assume you
should use GCS v4, except
for very specific needs
Which version of Globus Connect Server do I use?
Which version of Globus Connect Server do I use?
Are you a Globus
subscriber?
Do you have a High Assurance or BAA
subscription (and plan to set up a high
assurance endpoint)?
Use
GCS v4
Use
GCS v5.3
No
Yes
No
Yes
Would you like to support multiple storage
system types on one endpoint?
Do you want to enable HTTPS access to
your storage?
Do you plan to use the S3, Box, Google
Drive or Ceph connectors?
No
No
No
Yes
Yes
Yes
Creating a Globus endpoint on your server
• In this example, Server = Amazon EC2 instance
• Installation and configuration of Globus Connect
Server requires a Globus ID
• Go to globusid.org
• Click “create a Globus ID”
– Optional: associate it with your Globus account
7
What we are going to do:
Install Globus Connect Server
• Access server as user “campusadmin”
• Update repo
• Install package
• Setup Globus Connect Server
Server
(AWS EC2)
ssh
ec2-22-23-24-25
Log into Globus
Transfer a file
1
2
3
Access the newly created
endpoint (as user ‘researcher’)
4
8
Access your server
• Get the IP address for your EC2 server (bit.ly/ec2ip)
• Log in as user ‘campusadmin’
ssh campusadmin@<EC2_instance_IP_address>
• Please sudo su before continuing
– User ‘campusadmin’ has passwordless sudo privileges
9
Install Globus Connect Server
$ sudo su
$ curl –LOs
http://downloads.globus.org/toolkit/globus-connect-
server/globus-connect-server-repo_latest_all.deb
$ dpkg –i globus-connect-server-repo_latest_all.deb
$ apt-get update
$ apt-get -y install globus-connect-server
$ globus-connect-server-setup
You have a working Globus endpoint!
Use your Globus ID username and
password when prompted
Access the Globus endpoint
• Go to Manage Data à Transfer Files
• Access the endpoint you just created
– Search for your EC2 host name in the Endpoint field
– Log in as “researcher”; you will see the user’s home directory
• Transfer files between a test endpoint (e.g. ESnet
read-only) and your EC2 endpoint
11
Globus accounts and endpoint access
• Globus account: Primary identity (+ Linked Identities)
• Endpoint initially accessible by creator
• Endpoint not visible?
– Primary identity is your institutional ID?
– Link your Globus ID!
Configuring Globus
Connect Server
13
Endpoint configuration
• On the Globus service: app.globus.org/endpoints
• On your DTN: /etc/globus-connect-server.conf
– Standard .ini format: [Section] Option = Value
– To enable changes run globus-connect-server-setup
– “Rinse and repeat”
14
Common configuration options
• Endpoints page
– Display Name
– Visibility
– Encryption
• DTN configuration file
– RestrictPaths
– Sharing
– IdentityMethod (CILogon, Oauth)
– SharingRestrictPaths
Exercise: Make your endpoint visible
• Edit endpoint attributes
– Change the name to something useful, e.g. <your_name> EC2
Endpoint
– For the “Visible To” attribute select “Public - Visible to all users”
• Find your neighbor’s endpoint
– Thanks to our superb security …you can access it too J
16
Path Restriction
• Default configuration:
– All paths allowed, access control handled by the OS
• Use RestrictPaths to customize
– Specifies a comma separated list of full paths that clients may access
– Each path may be prefixed by R (read) and/or W (write), or N (none) to explicitly
deny access to a path
– '~’ for authenticated user’s home directory, and * may be used for simple
wildcard matching.
• e.g. Full access to home directory, read access to /data:
– RestrictPaths = RW~,R/data
• e.g. Full access to home directory, deny hidden files:
– RestrictPaths = RW~,N~/.*
17
Exercise: Restrict access
• Set RestrictPaths=RW~,N~/archive
• Run globus-connect-server-setup
• Access your endpoint as ‘researcher’
• What’s changed?
18
• In config file, set Sharing=True
• Run globus-connect-server-setup
• Flag endpoint as “managed” (in web app or via CLI)
* Note: Creation of shared endpoints requires a
Globus subscription for the managed endpoint
Enabling sharing on an endpoint
19
Sharing Path Restriction
• Restrict paths where users can create shared endpoints
• Use SharingRestrictPaths to customize
– Same syntax as RestrictPaths
• e.g. Full access to home directory, deny hidden files:
– SharingRestrictPaths = RW~,N~/.*
• e.g. Full access to public folder under home directory:
– SharingRestrictPaths = RW~/public
• e.g. Full access to /proj, read access to /scratch:
– SharingRestrictPaths = RW/proj,R/scratch
20
Limit sharing to specific accounts
• SharingUsersAllow =
• SharingGroupsAllow =
• SharingUsersDeny =
• SharingGroupsDeny =
21
Endpoint Access
Control/Activation
22
Ports needed for Globus
• Inbound: 2811 (control channel)
• Inbound: 7512 (MyProxy), 443 (OAuth)
• Inbound: 50000-51000 (data channel)
• If restricting outbound connections, allow
connections on:
– 80, 2223 (used during install/config)
– 50000-51000 (GridFTP data channel)
23
EndpointactivationusingMyProxy
Default
configuration
(avoid if at all
possible)
EndpointactivationusingMyProxyOAuth
Best practice
configuration
Single Sign-On with InCommon/CILogon
• Your Shibboleth server must release R&S attributes to
CILogon—especially the ePPN attribute
• Local account must match institutional ID (InCommon ID)
– Test by creating a local user with same name
• In /etc/globus-connect-server.conf set:
AuthorizationMethod = CILogon
CILogonIdentityProvider =
<institution_listed_in_CILogon_IdP_list>
26
Managed endpoints and
subscriptions
27
Subscription configuration
• Subscription manager
– Create/upgrade managed endpoints
– Requires Globus ID linked to Globus account
• Management console permissions
– Independent of subscription manager
– Map managed endpoint to Globus ID
• Globus Plus group
– Subscription Manager is admin
– Can grant admin rights to other members
28
Creating managed endpoints
• Required for sharing, management console, reporting, …
• Convert existing endpoint to managed via CLI (or web):
globus endpoint update --managed <endpt_uuid>
• Must be run by subscription manager
• Important: Re-run endpoint update after deleting/re-
creating endpoint
29
Monitoring and managing
Globus endpoint activity
30
Management console
• Monitor all transfers
• Pause/resume specific transfers
• Add pause conditions with various options
• Resume specific tasks overriding pause conditions
• Cancel tasks
• View sharing ACLs
31
Endpoint Roles
• Administrator: define endpoint and roles
• Access Manager: manage permissions
• Activity Manager: perform control tasks
• Activity Monitor: view activity
32
Demonstration:
Management console
Endpoint Roles
Usage Reporting
33
…on performance
34
Balance: performance - reliability
• Network use parameters: concurrency, parallelism
• Maximum, Preferred values for each
• Transfer considers source and destination endpoint settings
min(
max(preferred src, preferred dest),
max src,
max dest
)
• Service limits, e.g. concurrent requests
35
Illustrative
performance
Disk-to-Disk Throughput: ESnet Testing
0 1,000 2,000 3,000 4,000 5,000 6,000 7,000 8,000 9,000
scp
scp (w/HPN)
sftp
GridFTP
(1 stream)
GridFTP
(4 streams)
Disk-to-Disk Throughput (Mbps)
37Source: ESnet (2016)
• Berkeley, CA to Argonne, IL
(RTT: 53 ms, Capacity: 10Gbps)
• scp is 24x slower than GridFTP on
this path
• >1 Gbps (125 MB/s) disk-to-disk
requires RAID array
Deployment Scenarios
38
Current best practice: The Science DMZ
39
Source
security
filters
Destination
security
filters
Destination
Science DMZ
Source
Science DMZ
Source
Border Router
Destination
Border Router
Source Router Destination Router
User
Organization
DATA
CONTROL
Physical Control Path
Logical Control Path
Physical Data Path
Logical Data Path
* Ports 443,
2811, 7512
* Ports 50000-
51000
Data Transfer
Node (DTN)
Data Transfer
Node (DTN)
* Please see TCP ports reference: https://docs.globus.org/resource-provider-guide/#open-tcp-ports_section
ext*
XFS
ZFS
~/
~/scratch
Common endpoint configuration (GCSv4)
Data Transfer Node
POSIX
Connector
ext*
XFS
ZFS
GPFS
Lustre
~/projects
Common endpoint configuration (GCSv4)
Data Transfer Node
POSIX
Connector
~/
~/scratch
ext*
XFS
ZFS
GPFS
Lustre
~/projects
Multi-endpoint configuration (GCSv4)
Data Transfer Node
POSIX
Connector
Western
Digital
ActiveScale
Connector
~/archive
~/
~/scratch
~/vault
ext*
XFS
ZFS
GPFS
Lustre
~/projects
Multi-endpoint configuration (GCSv4)
43
Data Transfer Node
POSIX
Connector
Western
Digital
ActiveScale
Connector
~/archive
Amazon
S3
Bucket
Amazon S3
Connector
~/
~/scratch
Data
Control
Globus cloud connector deployment
Globus endpoint
with Google gateways
Other
Globus
endpoints
Globus
Collection
Globus
Collection
v
DataTransferNode(s)
Globus connectors
Network paths
• Separate control and data interfaces
• "DataInterface =" option in globus-connect-server-
conf
• Common scenario: route data flows over Science
DMZ link
45
Dual-homed DTN – high speed data path
Data
Transfer
Node
GridFTP
Server
Science DMZ
Control
Channel
Data
Transfer
Node
GridFTP
Server
Data Channel
if0
if1
Internet2
path
Control
Channel
Dual-homed DTN – internal data path
Data
Transfer
Node
GridFTP
Server
Science DMZ
Control
Channel
Data
Transfer
Node
GridFTP
Server
Data Channel
if0
if1
LAN/
Intranet
path
Control
Channel
Firewall
if0
if1
Other Deployment Options
48
Encryption
• Requiring encryption on an endpoint
– User cannot override
– Always enforced for protected data (High Assurance endpoints)
• Globus uses OpenSSL cipher stack as currently
configured on your DTN
• FIPS 140-2 compliance: ensure use of FIPS capable
OpenSSL libraries on DTN
www.openssl.org/docs/fips/UserGuide-2.0.pdf
49
Distributing Globus Connect Server components
• Globus Connect Server components
– globus-connect-server-io, -id, -web
• Default: -io, –id and –web on single server
• Common options
– Multiple –io servers for load balancing, failover, and
performance
– No -id server, e.g. third-party IdP
– -id on separate server, e.g. non-DTN nodes
– -web on either –id server or separate server for OAuth interface
50
ext*
XFS
ZFS
Distributing Globus Connect Server components
Data
Transfer
Node
OAuth
Server
GridFTP
Server
MyProxy
CA
Science DMZ
(ACL limited)
Port 2811
accepts inbound
connections
from Globus
Firewall
Globus Network Manager
For environments with super duper
special network constraints…
(a.k.a. ”for the very brave”)
52
Globus Network Manager
• Information from GridFTP to facilitate dynamic
network changes
• Callbacks during GridFTP execution on local DTN
• Supplements information available via Globus
transfer API
• Pre-listen (binding of socket)
• Post-listen
• Pre-accept/Pre-connect (no Data yet)
• Post-accept/Post-connect (data in flight)
• Pre-close
• Post-close
Globus Network Manager Callbacks
Network manager use cases
• Science DMZ Traffic Engineering
– Use SDN to dynamically route data path
– Control path uses traditional route
• Automated WAN bandwidth reservation
– OSCARS, AL2S
• Note: All this requires custom code …mostly in C!
Open Discussion
56

More Related Content

What's hot

Globus for System Administrators
Globus for System AdministratorsGlobus for System Administrators
Globus for System Administrators
Globus
 
Develop with linux containers and docker
Develop with linux containers and dockerDevelop with linux containers and docker
Develop with linux containers and docker
Fabio Fumarola
 
Docker volume
Docker volumeDocker volume
Docker volume
MyoungSu Shin
 
Linux containers and docker
Linux containers and dockerLinux containers and docker
Linux containers and docker
Fabio Fumarola
 
Modern Deployment Strategies
Modern Deployment StrategiesModern Deployment Strategies
Modern Deployment Strategies
Perforce
 
Automating Research Data Workflows (GlobusWorld Tour - UCSD)
Automating Research Data Workflows (GlobusWorld Tour - UCSD)Automating Research Data Workflows (GlobusWorld Tour - UCSD)
Automating Research Data Workflows (GlobusWorld Tour - UCSD)
Globus
 
Dockerizing a multi-component Open Data app
Dockerizing a multi-component Open Data app  Dockerizing a multi-component Open Data app
Dockerizing a multi-component Open Data app
Stergios Tsiafoulis
 
Gluster Storage
Gluster StorageGluster Storage
Gluster Storage
Raz Tamir
 
3 Git
3 Git3 Git
60 Admin Tips
60 Admin Tips60 Admin Tips
60 Admin Tips
Gabriella Davis
 
Docker
DockerDocker
HTTP 프로토콜의 이해와 활용
HTTP 프로토콜의 이해와 활용HTTP 프로토콜의 이해와 활용
HTTP 프로토콜의 이해와 활용
SangJin Kang
 
Docker 1.5
Docker 1.5Docker 1.5
Docker 1.5
rajdeep
 
January OpenNTF Webinar - Backup your Domino Server - New Options in V12
January OpenNTF Webinar - Backup your Domino Server - New Options in V12January OpenNTF Webinar - Backup your Domino Server - New Options in V12
January OpenNTF Webinar - Backup your Domino Server - New Options in V12
Howard Greenberg
 
Stateful Containers: Flocker on CoreOS
Stateful Containers: Flocker on CoreOSStateful Containers: Flocker on CoreOS
Stateful Containers: Flocker on CoreOS
Stephen Nguyen
 
Web Performance Optimization with HTTP/3
Web Performance Optimization with HTTP/3Web Performance Optimization with HTTP/3
Web Performance Optimization with HTTP/3
SangJin Kang
 
Service Discovery & Load-Balancing under Docker 1.12.0 @ Docker Meetup #22
Service Discovery & Load-Balancing under Docker 1.12.0 @ Docker Meetup #22Service Discovery & Load-Balancing under Docker 1.12.0 @ Docker Meetup #22
Service Discovery & Load-Balancing under Docker 1.12.0 @ Docker Meetup #22
Ajeet Singh Raina
 
Docker advance topic
Docker advance topicDocker advance topic
Docker advance topic
Kalkey
 
Introduction to docker
Introduction to dockerIntroduction to docker
Introduction to docker
Hiroki Endo
 
Real-time, Exactly-once Data Ingestion from Kafka to ClickHouse at eBay
Real-time, Exactly-once Data Ingestion from Kafka to ClickHouse at eBayReal-time, Exactly-once Data Ingestion from Kafka to ClickHouse at eBay
Real-time, Exactly-once Data Ingestion from Kafka to ClickHouse at eBay
Altinity Ltd
 

What's hot (20)

Globus for System Administrators
Globus for System AdministratorsGlobus for System Administrators
Globus for System Administrators
 
Develop with linux containers and docker
Develop with linux containers and dockerDevelop with linux containers and docker
Develop with linux containers and docker
 
Docker volume
Docker volumeDocker volume
Docker volume
 
Linux containers and docker
Linux containers and dockerLinux containers and docker
Linux containers and docker
 
Modern Deployment Strategies
Modern Deployment StrategiesModern Deployment Strategies
Modern Deployment Strategies
 
Automating Research Data Workflows (GlobusWorld Tour - UCSD)
Automating Research Data Workflows (GlobusWorld Tour - UCSD)Automating Research Data Workflows (GlobusWorld Tour - UCSD)
Automating Research Data Workflows (GlobusWorld Tour - UCSD)
 
Dockerizing a multi-component Open Data app
Dockerizing a multi-component Open Data app  Dockerizing a multi-component Open Data app
Dockerizing a multi-component Open Data app
 
Gluster Storage
Gluster StorageGluster Storage
Gluster Storage
 
3 Git
3 Git3 Git
3 Git
 
60 Admin Tips
60 Admin Tips60 Admin Tips
60 Admin Tips
 
Docker
DockerDocker
Docker
 
HTTP 프로토콜의 이해와 활용
HTTP 프로토콜의 이해와 활용HTTP 프로토콜의 이해와 활용
HTTP 프로토콜의 이해와 활용
 
Docker 1.5
Docker 1.5Docker 1.5
Docker 1.5
 
January OpenNTF Webinar - Backup your Domino Server - New Options in V12
January OpenNTF Webinar - Backup your Domino Server - New Options in V12January OpenNTF Webinar - Backup your Domino Server - New Options in V12
January OpenNTF Webinar - Backup your Domino Server - New Options in V12
 
Stateful Containers: Flocker on CoreOS
Stateful Containers: Flocker on CoreOSStateful Containers: Flocker on CoreOS
Stateful Containers: Flocker on CoreOS
 
Web Performance Optimization with HTTP/3
Web Performance Optimization with HTTP/3Web Performance Optimization with HTTP/3
Web Performance Optimization with HTTP/3
 
Service Discovery & Load-Balancing under Docker 1.12.0 @ Docker Meetup #22
Service Discovery & Load-Balancing under Docker 1.12.0 @ Docker Meetup #22Service Discovery & Load-Balancing under Docker 1.12.0 @ Docker Meetup #22
Service Discovery & Load-Balancing under Docker 1.12.0 @ Docker Meetup #22
 
Docker advance topic
Docker advance topicDocker advance topic
Docker advance topic
 
Introduction to docker
Introduction to dockerIntroduction to docker
Introduction to docker
 
Real-time, Exactly-once Data Ingestion from Kafka to ClickHouse at eBay
Real-time, Exactly-once Data Ingestion from Kafka to ClickHouse at eBayReal-time, Exactly-once Data Ingestion from Kafka to ClickHouse at eBay
Real-time, Exactly-once Data Ingestion from Kafka to ClickHouse at eBay
 

Similar to Globus for System Administrators (CHPC 2019 - South Africa)

Globus Endpoint Administration (GlobusWorld Tour - STFC)
Globus Endpoint Administration (GlobusWorld Tour - STFC)Globus Endpoint Administration (GlobusWorld Tour - STFC)
Globus Endpoint Administration (GlobusWorld Tour - STFC)
Globus
 
Data Publication and Discovery with Globus
Data Publication and Discovery with GlobusData Publication and Discovery with Globus
Data Publication and Discovery with Globus
Globus
 
GlobusWorld 2021 Tutorial: Globus for System Administrators
GlobusWorld 2021 Tutorial: Globus for System AdministratorsGlobusWorld 2021 Tutorial: Globus for System Administrators
GlobusWorld 2021 Tutorial: Globus for System Administrators
Globus
 
GlobusWorld 2021 Tutorial: The Globus CLI, Platform and SDK
GlobusWorld 2021 Tutorial: The Globus CLI, Platform and SDKGlobusWorld 2021 Tutorial: The Globus CLI, Platform and SDK
GlobusWorld 2021 Tutorial: The Globus CLI, Platform and SDK
Globus
 
Advanced Globus System Administration Topics
Advanced Globus System Administration TopicsAdvanced Globus System Administration Topics
Advanced Globus System Administration Topics
Globus
 
Introduction to Globus for System Administrators
Introduction to Globus for System AdministratorsIntroduction to Globus for System Administrators
Introduction to Globus for System Administrators
Globus
 
Globus for System Administrators
Globus for System AdministratorsGlobus for System Administrators
Globus for System Administrators
Globus
 
Introduction to Globus for System Administrators
Introduction to Globus for System AdministratorsIntroduction to Globus for System Administrators
Introduction to Globus for System Administrators
Globus
 
Advanced Globus System Administration
Advanced Globus System AdministrationAdvanced Globus System Administration
Advanced Globus System Administration
Globus
 
Introduction to Globus for System Administrators
Introduction to Globus for System AdministratorsIntroduction to Globus for System Administrators
Introduction to Globus for System Administrators
Globus
 
Introduction to Globus for System Administrators
Introduction to Globus for System AdministratorsIntroduction to Globus for System Administrators
Introduction to Globus for System Administrators
Globus
 
Advanced Globus System Administration
Advanced Globus System AdministrationAdvanced Globus System Administration
Advanced Globus System Administration
Globus
 
Globus Command Line Interface (APS Workshop)
Globus Command Line Interface (APS Workshop)Globus Command Line Interface (APS Workshop)
Globus Command Line Interface (APS Workshop)
Globus
 
Globus for System Administrators
Globus for System AdministratorsGlobus for System Administrators
Globus for System Administrators
Globus
 
Introduction to Globus: Research Data Management Software at the ALCF
Introduction to Globus: Research Data Management Software at the ALCFIntroduction to Globus: Research Data Management Software at the ALCF
Introduction to Globus: Research Data Management Software at the ALCF
Globus
 
Automating Research Data Flows and Introduction to the Globus Platform
Automating Research Data Flows and Introduction to the Globus PlatformAutomating Research Data Flows and Introduction to the Globus Platform
Automating Research Data Flows and Introduction to the Globus Platform
Globus
 
"What's New With Globus" Webinar: Spring 2018
"What's New With Globus" Webinar: Spring 2018"What's New With Globus" Webinar: Spring 2018
"What's New With Globus" Webinar: Spring 2018
Globus
 
Jupyter + Globus: The Foundation for Interactive Data Science
Jupyter + Globus: The Foundation for Interactive Data ScienceJupyter + Globus: The Foundation for Interactive Data Science
Jupyter + Globus: The Foundation for Interactive Data Science
Globus
 
Introduction to the Globus Platform (GlobusWorld Tour - UMich)
Introduction to the Globus Platform (GlobusWorld Tour - UMich)Introduction to the Globus Platform (GlobusWorld Tour - UMich)
Introduction to the Globus Platform (GlobusWorld Tour - UMich)
Globus
 
Connecting Your System to Globus (APS Workshop)
Connecting Your System to Globus (APS Workshop)Connecting Your System to Globus (APS Workshop)
Connecting Your System to Globus (APS Workshop)
Globus
 

Similar to Globus for System Administrators (CHPC 2019 - South Africa) (20)

Globus Endpoint Administration (GlobusWorld Tour - STFC)
Globus Endpoint Administration (GlobusWorld Tour - STFC)Globus Endpoint Administration (GlobusWorld Tour - STFC)
Globus Endpoint Administration (GlobusWorld Tour - STFC)
 
Data Publication and Discovery with Globus
Data Publication and Discovery with GlobusData Publication and Discovery with Globus
Data Publication and Discovery with Globus
 
GlobusWorld 2021 Tutorial: Globus for System Administrators
GlobusWorld 2021 Tutorial: Globus for System AdministratorsGlobusWorld 2021 Tutorial: Globus for System Administrators
GlobusWorld 2021 Tutorial: Globus for System Administrators
 
GlobusWorld 2021 Tutorial: The Globus CLI, Platform and SDK
GlobusWorld 2021 Tutorial: The Globus CLI, Platform and SDKGlobusWorld 2021 Tutorial: The Globus CLI, Platform and SDK
GlobusWorld 2021 Tutorial: The Globus CLI, Platform and SDK
 
Advanced Globus System Administration Topics
Advanced Globus System Administration TopicsAdvanced Globus System Administration Topics
Advanced Globus System Administration Topics
 
Introduction to Globus for System Administrators
Introduction to Globus for System AdministratorsIntroduction to Globus for System Administrators
Introduction to Globus for System Administrators
 
Globus for System Administrators
Globus for System AdministratorsGlobus for System Administrators
Globus for System Administrators
 
Introduction to Globus for System Administrators
Introduction to Globus for System AdministratorsIntroduction to Globus for System Administrators
Introduction to Globus for System Administrators
 
Advanced Globus System Administration
Advanced Globus System AdministrationAdvanced Globus System Administration
Advanced Globus System Administration
 
Introduction to Globus for System Administrators
Introduction to Globus for System AdministratorsIntroduction to Globus for System Administrators
Introduction to Globus for System Administrators
 
Introduction to Globus for System Administrators
Introduction to Globus for System AdministratorsIntroduction to Globus for System Administrators
Introduction to Globus for System Administrators
 
Advanced Globus System Administration
Advanced Globus System AdministrationAdvanced Globus System Administration
Advanced Globus System Administration
 
Globus Command Line Interface (APS Workshop)
Globus Command Line Interface (APS Workshop)Globus Command Line Interface (APS Workshop)
Globus Command Line Interface (APS Workshop)
 
Globus for System Administrators
Globus for System AdministratorsGlobus for System Administrators
Globus for System Administrators
 
Introduction to Globus: Research Data Management Software at the ALCF
Introduction to Globus: Research Data Management Software at the ALCFIntroduction to Globus: Research Data Management Software at the ALCF
Introduction to Globus: Research Data Management Software at the ALCF
 
Automating Research Data Flows and Introduction to the Globus Platform
Automating Research Data Flows and Introduction to the Globus PlatformAutomating Research Data Flows and Introduction to the Globus Platform
Automating Research Data Flows and Introduction to the Globus Platform
 
"What's New With Globus" Webinar: Spring 2018
"What's New With Globus" Webinar: Spring 2018"What's New With Globus" Webinar: Spring 2018
"What's New With Globus" Webinar: Spring 2018
 
Jupyter + Globus: The Foundation for Interactive Data Science
Jupyter + Globus: The Foundation for Interactive Data ScienceJupyter + Globus: The Foundation for Interactive Data Science
Jupyter + Globus: The Foundation for Interactive Data Science
 
Introduction to the Globus Platform (GlobusWorld Tour - UMich)
Introduction to the Globus Platform (GlobusWorld Tour - UMich)Introduction to the Globus Platform (GlobusWorld Tour - UMich)
Introduction to the Globus Platform (GlobusWorld Tour - UMich)
 
Connecting Your System to Globus (APS Workshop)
Connecting Your System to Globus (APS Workshop)Connecting Your System to Globus (APS Workshop)
Connecting Your System to Globus (APS Workshop)
 

More from Globus

Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus Compute wth IRI Workflows - GlobusWorld 2024Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus
 
Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...
Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...
Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...
Globus
 
Globus Compute Introduction - GlobusWorld 2024
Globus Compute Introduction - GlobusWorld 2024Globus Compute Introduction - GlobusWorld 2024
Globus Compute Introduction - GlobusWorld 2024
Globus
 
Globus Connect Server Deep Dive - GlobusWorld 2024
Globus Connect Server Deep Dive - GlobusWorld 2024Globus Connect Server Deep Dive - GlobusWorld 2024
Globus Connect Server Deep Dive - GlobusWorld 2024
Globus
 
Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...
Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...
Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...
Globus
 
Providing Globus Services to Users of JASMIN for Environmental Data Analysis
Providing Globus Services to Users of JASMIN for Environmental Data AnalysisProviding Globus Services to Users of JASMIN for Environmental Data Analysis
Providing Globus Services to Users of JASMIN for Environmental Data Analysis
Globus
 
First Steps with Globus Compute Multi-User Endpoints
First Steps with Globus Compute Multi-User EndpointsFirst Steps with Globus Compute Multi-User Endpoints
First Steps with Globus Compute Multi-User Endpoints
Globus
 
Enhancing Research Orchestration Capabilities at ORNL.pdf
Enhancing Research Orchestration Capabilities at ORNL.pdfEnhancing Research Orchestration Capabilities at ORNL.pdf
Enhancing Research Orchestration Capabilities at ORNL.pdf
Globus
 
Understanding Globus Data Transfers with NetSage
Understanding Globus Data Transfers with NetSageUnderstanding Globus Data Transfers with NetSage
Understanding Globus Data Transfers with NetSage
Globus
 
How to Position Your Globus Data Portal for Success Ten Good Practices
How to Position Your Globus Data Portal for Success Ten Good PracticesHow to Position Your Globus Data Portal for Success Ten Good Practices
How to Position Your Globus Data Portal for Success Ten Good Practices
Globus
 
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Globus
 
Developing Distributed High-performance Computing Capabilities of an Open Sci...
Developing Distributed High-performance Computing Capabilities of an Open Sci...Developing Distributed High-performance Computing Capabilities of an Open Sci...
Developing Distributed High-performance Computing Capabilities of an Open Sci...
Globus
 
The Department of Energy's Integrated Research Infrastructure (IRI)
The Department of Energy's Integrated Research Infrastructure (IRI)The Department of Energy's Integrated Research Infrastructure (IRI)
The Department of Energy's Integrated Research Infrastructure (IRI)
Globus
 
GlobusWorld 2024 Opening Keynote session
GlobusWorld 2024 Opening Keynote sessionGlobusWorld 2024 Opening Keynote session
GlobusWorld 2024 Opening Keynote session
Globus
 
Enhancing Performance with Globus and the Science DMZ
Enhancing Performance with Globus and the Science DMZEnhancing Performance with Globus and the Science DMZ
Enhancing Performance with Globus and the Science DMZ
Globus
 
Extending Globus into a Site-wide Automated Data Infrastructure.pdf
Extending Globus into a Site-wide Automated Data Infrastructure.pdfExtending Globus into a Site-wide Automated Data Infrastructure.pdf
Extending Globus into a Site-wide Automated Data Infrastructure.pdf
Globus
 
Globus at the United States Geological Survey
Globus at the United States Geological SurveyGlobus at the United States Geological Survey
Globus at the United States Geological Survey
Globus
 
Providing Globus Services to Users of JASMIN for Environmental Data Analysis
Providing Globus Services to Users of JASMIN for Environmental Data AnalysisProviding Globus Services to Users of JASMIN for Environmental Data Analysis
Providing Globus Services to Users of JASMIN for Environmental Data Analysis
Globus
 
Globus Compute with Integrated Research Infrastructure (IRI) workflows
Globus Compute with Integrated Research Infrastructure (IRI) workflowsGlobus Compute with Integrated Research Infrastructure (IRI) workflows
Globus Compute with Integrated Research Infrastructure (IRI) workflows
Globus
 
Reactive Documents and Computational Pipelines - Bridging the Gap
Reactive Documents and Computational Pipelines - Bridging the GapReactive Documents and Computational Pipelines - Bridging the Gap
Reactive Documents and Computational Pipelines - Bridging the Gap
Globus
 

More from Globus (20)

Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus Compute wth IRI Workflows - GlobusWorld 2024Globus Compute wth IRI Workflows - GlobusWorld 2024
Globus Compute wth IRI Workflows - GlobusWorld 2024
 
Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...
Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...
Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...
 
Globus Compute Introduction - GlobusWorld 2024
Globus Compute Introduction - GlobusWorld 2024Globus Compute Introduction - GlobusWorld 2024
Globus Compute Introduction - GlobusWorld 2024
 
Globus Connect Server Deep Dive - GlobusWorld 2024
Globus Connect Server Deep Dive - GlobusWorld 2024Globus Connect Server Deep Dive - GlobusWorld 2024
Globus Connect Server Deep Dive - GlobusWorld 2024
 
Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...
Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...
Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...
 
Providing Globus Services to Users of JASMIN for Environmental Data Analysis
Providing Globus Services to Users of JASMIN for Environmental Data AnalysisProviding Globus Services to Users of JASMIN for Environmental Data Analysis
Providing Globus Services to Users of JASMIN for Environmental Data Analysis
 
First Steps with Globus Compute Multi-User Endpoints
First Steps with Globus Compute Multi-User EndpointsFirst Steps with Globus Compute Multi-User Endpoints
First Steps with Globus Compute Multi-User Endpoints
 
Enhancing Research Orchestration Capabilities at ORNL.pdf
Enhancing Research Orchestration Capabilities at ORNL.pdfEnhancing Research Orchestration Capabilities at ORNL.pdf
Enhancing Research Orchestration Capabilities at ORNL.pdf
 
Understanding Globus Data Transfers with NetSage
Understanding Globus Data Transfers with NetSageUnderstanding Globus Data Transfers with NetSage
Understanding Globus Data Transfers with NetSage
 
How to Position Your Globus Data Portal for Success Ten Good Practices
How to Position Your Globus Data Portal for Success Ten Good PracticesHow to Position Your Globus Data Portal for Success Ten Good Practices
How to Position Your Globus Data Portal for Success Ten Good Practices
 
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
Exploring Innovations in Data Repository Solutions - Insights from the U.S. G...
 
Developing Distributed High-performance Computing Capabilities of an Open Sci...
Developing Distributed High-performance Computing Capabilities of an Open Sci...Developing Distributed High-performance Computing Capabilities of an Open Sci...
Developing Distributed High-performance Computing Capabilities of an Open Sci...
 
The Department of Energy's Integrated Research Infrastructure (IRI)
The Department of Energy's Integrated Research Infrastructure (IRI)The Department of Energy's Integrated Research Infrastructure (IRI)
The Department of Energy's Integrated Research Infrastructure (IRI)
 
GlobusWorld 2024 Opening Keynote session
GlobusWorld 2024 Opening Keynote sessionGlobusWorld 2024 Opening Keynote session
GlobusWorld 2024 Opening Keynote session
 
Enhancing Performance with Globus and the Science DMZ
Enhancing Performance with Globus and the Science DMZEnhancing Performance with Globus and the Science DMZ
Enhancing Performance with Globus and the Science DMZ
 
Extending Globus into a Site-wide Automated Data Infrastructure.pdf
Extending Globus into a Site-wide Automated Data Infrastructure.pdfExtending Globus into a Site-wide Automated Data Infrastructure.pdf
Extending Globus into a Site-wide Automated Data Infrastructure.pdf
 
Globus at the United States Geological Survey
Globus at the United States Geological SurveyGlobus at the United States Geological Survey
Globus at the United States Geological Survey
 
Providing Globus Services to Users of JASMIN for Environmental Data Analysis
Providing Globus Services to Users of JASMIN for Environmental Data AnalysisProviding Globus Services to Users of JASMIN for Environmental Data Analysis
Providing Globus Services to Users of JASMIN for Environmental Data Analysis
 
Globus Compute with Integrated Research Infrastructure (IRI) workflows
Globus Compute with Integrated Research Infrastructure (IRI) workflowsGlobus Compute with Integrated Research Infrastructure (IRI) workflows
Globus Compute with Integrated Research Infrastructure (IRI) workflows
 
Reactive Documents and Computational Pipelines - Bridging the Gap
Reactive Documents and Computational Pipelines - Bridging the GapReactive Documents and Computational Pipelines - Bridging the Gap
Reactive Documents and Computational Pipelines - Bridging the Gap
 

Recently uploaded

一比一原版英国赫特福德大学毕业证(hertfordshire毕业证书)如何办理
一比一原版英国赫特福德大学毕业证(hertfordshire毕业证书)如何办理一比一原版英国赫特福德大学毕业证(hertfordshire毕业证书)如何办理
一比一原版英国赫特福德大学毕业证(hertfordshire毕业证书)如何办理
nyvan3
 
原版一比一多伦多大学毕业证(UofT毕业证书)如何办理
原版一比一多伦多大学毕业证(UofT毕业证书)如何办理原版一比一多伦多大学毕业证(UofT毕业证书)如何办理
原版一比一多伦多大学毕业证(UofT毕业证书)如何办理
mkkikqvo
 
Template xxxxxxxx ssssssssssss Sertifikat.pptx
Template xxxxxxxx ssssssssssss Sertifikat.pptxTemplate xxxxxxxx ssssssssssss Sertifikat.pptx
Template xxxxxxxx ssssssssssss Sertifikat.pptx
TeukuEriSyahputra
 
一比一原版南十字星大学毕业证(SCU毕业证书)学历如何办理
一比一原版南十字星大学毕业证(SCU毕业证书)学历如何办理一比一原版南十字星大学毕业证(SCU毕业证书)学历如何办理
一比一原版南十字星大学毕业证(SCU毕业证书)学历如何办理
slg6lamcq
 
一比一原版(UO毕业证)渥太华大学毕业证如何办理
一比一原版(UO毕业证)渥太华大学毕业证如何办理一比一原版(UO毕业证)渥太华大学毕业证如何办理
一比一原版(UO毕业证)渥太华大学毕业证如何办理
aqzctr7x
 
一比一原版(Sheffield毕业证书)谢菲尔德大学毕业证如何办理
一比一原版(Sheffield毕业证书)谢菲尔德大学毕业证如何办理一比一原版(Sheffield毕业证书)谢菲尔德大学毕业证如何办理
一比一原版(Sheffield毕业证书)谢菲尔德大学毕业证如何办理
1tyxnjpia
 
一比一原版(UCSB文凭证书)圣芭芭拉分校毕业证如何办理
一比一原版(UCSB文凭证书)圣芭芭拉分校毕业证如何办理一比一原版(UCSB文凭证书)圣芭芭拉分校毕业证如何办理
一比一原版(UCSB文凭证书)圣芭芭拉分校毕业证如何办理
nuttdpt
 
Predictably Improve Your B2B Tech Company's Performance by Leveraging Data
Predictably Improve Your B2B Tech Company's Performance by Leveraging DataPredictably Improve Your B2B Tech Company's Performance by Leveraging Data
Predictably Improve Your B2B Tech Company's Performance by Leveraging Data
Kiwi Creative
 
一比一原版(曼大毕业证书)曼尼托巴大学毕业证如何办理
一比一原版(曼大毕业证书)曼尼托巴大学毕业证如何办理一比一原版(曼大毕业证书)曼尼托巴大学毕业证如何办理
一比一原版(曼大毕业证书)曼尼托巴大学毕业证如何办理
ytypuem
 
Sample Devops SRE Product Companies .pdf
Sample Devops SRE  Product Companies .pdfSample Devops SRE  Product Companies .pdf
Sample Devops SRE Product Companies .pdf
Vineet
 
原版一比一爱尔兰都柏林大学毕业证(UCD毕业证书)如何办理
原版一比一爱尔兰都柏林大学毕业证(UCD毕业证书)如何办理 原版一比一爱尔兰都柏林大学毕业证(UCD毕业证书)如何办理
原版一比一爱尔兰都柏林大学毕业证(UCD毕业证书)如何办理
tzu5xla
 
4th Modern Marketing Reckoner by MMA Global India & Group M: 60+ experts on W...
4th Modern Marketing Reckoner by MMA Global India & Group M: 60+ experts on W...4th Modern Marketing Reckoner by MMA Global India & Group M: 60+ experts on W...
4th Modern Marketing Reckoner by MMA Global India & Group M: 60+ experts on W...
Social Samosa
 
一比一原版美国帕森斯设计学院毕业证(parsons毕业证书)如何办理
一比一原版美国帕森斯设计学院毕业证(parsons毕业证书)如何办理一比一原版美国帕森斯设计学院毕业证(parsons毕业证书)如何办理
一比一原版美国帕森斯设计学院毕业证(parsons毕业证书)如何办理
asyed10
 
[VCOSA] Monthly Report - Cotton & Yarn Statistics March 2024
[VCOSA] Monthly Report - Cotton & Yarn Statistics March 2024[VCOSA] Monthly Report - Cotton & Yarn Statistics March 2024
[VCOSA] Monthly Report - Cotton & Yarn Statistics March 2024
Vietnam Cotton & Spinning Association
 
Building a Quantum Computer Neutral Atom.pdf
Building a Quantum Computer Neutral Atom.pdfBuilding a Quantum Computer Neutral Atom.pdf
Building a Quantum Computer Neutral Atom.pdf
cjimenez2581
 
一比一原版(GWU,GW文凭证书)乔治·华盛顿大学毕业证如何办理
一比一原版(GWU,GW文凭证书)乔治·华盛顿大学毕业证如何办理一比一原版(GWU,GW文凭证书)乔治·华盛顿大学毕业证如何办理
一比一原版(GWU,GW文凭证书)乔治·华盛顿大学毕业证如何办理
bopyb
 
Cell The Unit of Life for NEET Multiple Choice Questions.docx
Cell The Unit of Life for NEET Multiple Choice Questions.docxCell The Unit of Life for NEET Multiple Choice Questions.docx
Cell The Unit of Life for NEET Multiple Choice Questions.docx
vasanthatpuram
 
一比一原版卡尔加里大学毕业证(uc毕业证)如何办理
一比一原版卡尔加里大学毕业证(uc毕业证)如何办理一比一原版卡尔加里大学毕业证(uc毕业证)如何办理
一比一原版卡尔加里大学毕业证(uc毕业证)如何办理
oaxefes
 
一比一原版英属哥伦比亚大学毕业证(UBC毕业证书)学历如何办理
一比一原版英属哥伦比亚大学毕业证(UBC毕业证书)学历如何办理一比一原版英属哥伦比亚大学毕业证(UBC毕业证书)学历如何办理
一比一原版英属哥伦比亚大学毕业证(UBC毕业证书)学历如何办理
z6osjkqvd
 
Beyond the Basics of A/B Tests: Highly Innovative Experimentation Tactics You...
Beyond the Basics of A/B Tests: Highly Innovative Experimentation Tactics You...Beyond the Basics of A/B Tests: Highly Innovative Experimentation Tactics You...
Beyond the Basics of A/B Tests: Highly Innovative Experimentation Tactics You...
Aggregage
 

Recently uploaded (20)

一比一原版英国赫特福德大学毕业证(hertfordshire毕业证书)如何办理
一比一原版英国赫特福德大学毕业证(hertfordshire毕业证书)如何办理一比一原版英国赫特福德大学毕业证(hertfordshire毕业证书)如何办理
一比一原版英国赫特福德大学毕业证(hertfordshire毕业证书)如何办理
 
原版一比一多伦多大学毕业证(UofT毕业证书)如何办理
原版一比一多伦多大学毕业证(UofT毕业证书)如何办理原版一比一多伦多大学毕业证(UofT毕业证书)如何办理
原版一比一多伦多大学毕业证(UofT毕业证书)如何办理
 
Template xxxxxxxx ssssssssssss Sertifikat.pptx
Template xxxxxxxx ssssssssssss Sertifikat.pptxTemplate xxxxxxxx ssssssssssss Sertifikat.pptx
Template xxxxxxxx ssssssssssss Sertifikat.pptx
 
一比一原版南十字星大学毕业证(SCU毕业证书)学历如何办理
一比一原版南十字星大学毕业证(SCU毕业证书)学历如何办理一比一原版南十字星大学毕业证(SCU毕业证书)学历如何办理
一比一原版南十字星大学毕业证(SCU毕业证书)学历如何办理
 
一比一原版(UO毕业证)渥太华大学毕业证如何办理
一比一原版(UO毕业证)渥太华大学毕业证如何办理一比一原版(UO毕业证)渥太华大学毕业证如何办理
一比一原版(UO毕业证)渥太华大学毕业证如何办理
 
一比一原版(Sheffield毕业证书)谢菲尔德大学毕业证如何办理
一比一原版(Sheffield毕业证书)谢菲尔德大学毕业证如何办理一比一原版(Sheffield毕业证书)谢菲尔德大学毕业证如何办理
一比一原版(Sheffield毕业证书)谢菲尔德大学毕业证如何办理
 
一比一原版(UCSB文凭证书)圣芭芭拉分校毕业证如何办理
一比一原版(UCSB文凭证书)圣芭芭拉分校毕业证如何办理一比一原版(UCSB文凭证书)圣芭芭拉分校毕业证如何办理
一比一原版(UCSB文凭证书)圣芭芭拉分校毕业证如何办理
 
Predictably Improve Your B2B Tech Company's Performance by Leveraging Data
Predictably Improve Your B2B Tech Company's Performance by Leveraging DataPredictably Improve Your B2B Tech Company's Performance by Leveraging Data
Predictably Improve Your B2B Tech Company's Performance by Leveraging Data
 
一比一原版(曼大毕业证书)曼尼托巴大学毕业证如何办理
一比一原版(曼大毕业证书)曼尼托巴大学毕业证如何办理一比一原版(曼大毕业证书)曼尼托巴大学毕业证如何办理
一比一原版(曼大毕业证书)曼尼托巴大学毕业证如何办理
 
Sample Devops SRE Product Companies .pdf
Sample Devops SRE  Product Companies .pdfSample Devops SRE  Product Companies .pdf
Sample Devops SRE Product Companies .pdf
 
原版一比一爱尔兰都柏林大学毕业证(UCD毕业证书)如何办理
原版一比一爱尔兰都柏林大学毕业证(UCD毕业证书)如何办理 原版一比一爱尔兰都柏林大学毕业证(UCD毕业证书)如何办理
原版一比一爱尔兰都柏林大学毕业证(UCD毕业证书)如何办理
 
4th Modern Marketing Reckoner by MMA Global India & Group M: 60+ experts on W...
4th Modern Marketing Reckoner by MMA Global India & Group M: 60+ experts on W...4th Modern Marketing Reckoner by MMA Global India & Group M: 60+ experts on W...
4th Modern Marketing Reckoner by MMA Global India & Group M: 60+ experts on W...
 
一比一原版美国帕森斯设计学院毕业证(parsons毕业证书)如何办理
一比一原版美国帕森斯设计学院毕业证(parsons毕业证书)如何办理一比一原版美国帕森斯设计学院毕业证(parsons毕业证书)如何办理
一比一原版美国帕森斯设计学院毕业证(parsons毕业证书)如何办理
 
[VCOSA] Monthly Report - Cotton & Yarn Statistics March 2024
[VCOSA] Monthly Report - Cotton & Yarn Statistics March 2024[VCOSA] Monthly Report - Cotton & Yarn Statistics March 2024
[VCOSA] Monthly Report - Cotton & Yarn Statistics March 2024
 
Building a Quantum Computer Neutral Atom.pdf
Building a Quantum Computer Neutral Atom.pdfBuilding a Quantum Computer Neutral Atom.pdf
Building a Quantum Computer Neutral Atom.pdf
 
一比一原版(GWU,GW文凭证书)乔治·华盛顿大学毕业证如何办理
一比一原版(GWU,GW文凭证书)乔治·华盛顿大学毕业证如何办理一比一原版(GWU,GW文凭证书)乔治·华盛顿大学毕业证如何办理
一比一原版(GWU,GW文凭证书)乔治·华盛顿大学毕业证如何办理
 
Cell The Unit of Life for NEET Multiple Choice Questions.docx
Cell The Unit of Life for NEET Multiple Choice Questions.docxCell The Unit of Life for NEET Multiple Choice Questions.docx
Cell The Unit of Life for NEET Multiple Choice Questions.docx
 
一比一原版卡尔加里大学毕业证(uc毕业证)如何办理
一比一原版卡尔加里大学毕业证(uc毕业证)如何办理一比一原版卡尔加里大学毕业证(uc毕业证)如何办理
一比一原版卡尔加里大学毕业证(uc毕业证)如何办理
 
一比一原版英属哥伦比亚大学毕业证(UBC毕业证书)学历如何办理
一比一原版英属哥伦比亚大学毕业证(UBC毕业证书)学历如何办理一比一原版英属哥伦比亚大学毕业证(UBC毕业证书)学历如何办理
一比一原版英属哥伦比亚大学毕业证(UBC毕业证书)学历如何办理
 
Beyond the Basics of A/B Tests: Highly Innovative Experimentation Tactics You...
Beyond the Basics of A/B Tests: Highly Innovative Experimentation Tactics You...Beyond the Basics of A/B Tests: Highly Innovative Experimentation Tactics You...
Beyond the Basics of A/B Tests: Highly Innovative Experimentation Tactics You...
 

Globus for System Administrators (CHPC 2019 - South Africa)

  • 1. Globus for System Administrators Vas Vasiliadis vas@uchicago.edu CHPC National Conference December 5, 2019
  • 2. Globus Connect Server 3 • Makes your storage accessible via Globus • Multi-user server, installed and managed by sysadmin docs.globus.org/globus-connect-server-installation-guide/ Local system users Local Storage System (HPC cluster, NAS, …) Globus Connect Server MyProxy CA GridFTP Server OAuth Server DTN • Default access for all local accounts • Native packaging Linux: DEB, RPM
  • 3. Globus Connect Server v4 4 Local system users Local Storage System (HPC cluster, NAS, …) Globus Connect Server MyProxy CA GridFTP Server OAuth Server DTN Non-POSIX Connectors POSIX-compliant Connector server
  • 4. For now, assume you should use GCS v4, except for very specific needs Which version of Globus Connect Server do I use?
  • 5. Which version of Globus Connect Server do I use? Are you a Globus subscriber? Do you have a High Assurance or BAA subscription (and plan to set up a high assurance endpoint)? Use GCS v4 Use GCS v5.3 No Yes No Yes Would you like to support multiple storage system types on one endpoint? Do you want to enable HTTPS access to your storage? Do you plan to use the S3, Box, Google Drive or Ceph connectors? No No No Yes Yes Yes
  • 6. Creating a Globus endpoint on your server • In this example, Server = Amazon EC2 instance • Installation and configuration of Globus Connect Server requires a Globus ID • Go to globusid.org • Click “create a Globus ID” – Optional: associate it with your Globus account 7
  • 7. What we are going to do: Install Globus Connect Server • Access server as user “campusadmin” • Update repo • Install package • Setup Globus Connect Server Server (AWS EC2) ssh ec2-22-23-24-25 Log into Globus Transfer a file 1 2 3 Access the newly created endpoint (as user ‘researcher’) 4 8
  • 8. Access your server • Get the IP address for your EC2 server (bit.ly/ec2ip) • Log in as user ‘campusadmin’ ssh campusadmin@<EC2_instance_IP_address> • Please sudo su before continuing – User ‘campusadmin’ has passwordless sudo privileges 9
  • 9. Install Globus Connect Server $ sudo su $ curl –LOs http://downloads.globus.org/toolkit/globus-connect- server/globus-connect-server-repo_latest_all.deb $ dpkg –i globus-connect-server-repo_latest_all.deb $ apt-get update $ apt-get -y install globus-connect-server $ globus-connect-server-setup You have a working Globus endpoint! Use your Globus ID username and password when prompted
  • 10. Access the Globus endpoint • Go to Manage Data à Transfer Files • Access the endpoint you just created – Search for your EC2 host name in the Endpoint field – Log in as “researcher”; you will see the user’s home directory • Transfer files between a test endpoint (e.g. ESnet read-only) and your EC2 endpoint 11
  • 11. Globus accounts and endpoint access • Globus account: Primary identity (+ Linked Identities) • Endpoint initially accessible by creator • Endpoint not visible? – Primary identity is your institutional ID? – Link your Globus ID!
  • 13. Endpoint configuration • On the Globus service: app.globus.org/endpoints • On your DTN: /etc/globus-connect-server.conf – Standard .ini format: [Section] Option = Value – To enable changes run globus-connect-server-setup – “Rinse and repeat” 14
  • 14. Common configuration options • Endpoints page – Display Name – Visibility – Encryption • DTN configuration file – RestrictPaths – Sharing – IdentityMethod (CILogon, Oauth) – SharingRestrictPaths
  • 15. Exercise: Make your endpoint visible • Edit endpoint attributes – Change the name to something useful, e.g. <your_name> EC2 Endpoint – For the “Visible To” attribute select “Public - Visible to all users” • Find your neighbor’s endpoint – Thanks to our superb security …you can access it too J 16
  • 16. Path Restriction • Default configuration: – All paths allowed, access control handled by the OS • Use RestrictPaths to customize – Specifies a comma separated list of full paths that clients may access – Each path may be prefixed by R (read) and/or W (write), or N (none) to explicitly deny access to a path – '~’ for authenticated user’s home directory, and * may be used for simple wildcard matching. • e.g. Full access to home directory, read access to /data: – RestrictPaths = RW~,R/data • e.g. Full access to home directory, deny hidden files: – RestrictPaths = RW~,N~/.* 17
  • 17. Exercise: Restrict access • Set RestrictPaths=RW~,N~/archive • Run globus-connect-server-setup • Access your endpoint as ‘researcher’ • What’s changed? 18
  • 18. • In config file, set Sharing=True • Run globus-connect-server-setup • Flag endpoint as “managed” (in web app or via CLI) * Note: Creation of shared endpoints requires a Globus subscription for the managed endpoint Enabling sharing on an endpoint 19
  • 19. Sharing Path Restriction • Restrict paths where users can create shared endpoints • Use SharingRestrictPaths to customize – Same syntax as RestrictPaths • e.g. Full access to home directory, deny hidden files: – SharingRestrictPaths = RW~,N~/.* • e.g. Full access to public folder under home directory: – SharingRestrictPaths = RW~/public • e.g. Full access to /proj, read access to /scratch: – SharingRestrictPaths = RW/proj,R/scratch 20
  • 20. Limit sharing to specific accounts • SharingUsersAllow = • SharingGroupsAllow = • SharingUsersDeny = • SharingGroupsDeny = 21
  • 22. Ports needed for Globus • Inbound: 2811 (control channel) • Inbound: 7512 (MyProxy), 443 (OAuth) • Inbound: 50000-51000 (data channel) • If restricting outbound connections, allow connections on: – 80, 2223 (used during install/config) – 50000-51000 (GridFTP data channel) 23
  • 25. Single Sign-On with InCommon/CILogon • Your Shibboleth server must release R&S attributes to CILogon—especially the ePPN attribute • Local account must match institutional ID (InCommon ID) – Test by creating a local user with same name • In /etc/globus-connect-server.conf set: AuthorizationMethod = CILogon CILogonIdentityProvider = <institution_listed_in_CILogon_IdP_list> 26
  • 27. Subscription configuration • Subscription manager – Create/upgrade managed endpoints – Requires Globus ID linked to Globus account • Management console permissions – Independent of subscription manager – Map managed endpoint to Globus ID • Globus Plus group – Subscription Manager is admin – Can grant admin rights to other members 28
  • 28. Creating managed endpoints • Required for sharing, management console, reporting, … • Convert existing endpoint to managed via CLI (or web): globus endpoint update --managed <endpt_uuid> • Must be run by subscription manager • Important: Re-run endpoint update after deleting/re- creating endpoint 29
  • 29. Monitoring and managing Globus endpoint activity 30
  • 30. Management console • Monitor all transfers • Pause/resume specific transfers • Add pause conditions with various options • Resume specific tasks overriding pause conditions • Cancel tasks • View sharing ACLs 31
  • 31. Endpoint Roles • Administrator: define endpoint and roles • Access Manager: manage permissions • Activity Manager: perform control tasks • Activity Monitor: view activity 32
  • 34. Balance: performance - reliability • Network use parameters: concurrency, parallelism • Maximum, Preferred values for each • Transfer considers source and destination endpoint settings min( max(preferred src, preferred dest), max src, max dest ) • Service limits, e.g. concurrent requests 35
  • 36. Disk-to-Disk Throughput: ESnet Testing 0 1,000 2,000 3,000 4,000 5,000 6,000 7,000 8,000 9,000 scp scp (w/HPN) sftp GridFTP (1 stream) GridFTP (4 streams) Disk-to-Disk Throughput (Mbps) 37Source: ESnet (2016) • Berkeley, CA to Argonne, IL (RTT: 53 ms, Capacity: 10Gbps) • scp is 24x slower than GridFTP on this path • >1 Gbps (125 MB/s) disk-to-disk requires RAID array
  • 38. Current best practice: The Science DMZ 39 Source security filters Destination security filters Destination Science DMZ Source Science DMZ Source Border Router Destination Border Router Source Router Destination Router User Organization DATA CONTROL Physical Control Path Logical Control Path Physical Data Path Logical Data Path * Ports 443, 2811, 7512 * Ports 50000- 51000 Data Transfer Node (DTN) Data Transfer Node (DTN) * Please see TCP ports reference: https://docs.globus.org/resource-provider-guide/#open-tcp-ports_section
  • 39. ext* XFS ZFS ~/ ~/scratch Common endpoint configuration (GCSv4) Data Transfer Node POSIX Connector
  • 40. ext* XFS ZFS GPFS Lustre ~/projects Common endpoint configuration (GCSv4) Data Transfer Node POSIX Connector ~/ ~/scratch
  • 41. ext* XFS ZFS GPFS Lustre ~/projects Multi-endpoint configuration (GCSv4) Data Transfer Node POSIX Connector Western Digital ActiveScale Connector ~/archive ~/ ~/scratch
  • 42. ~/vault ext* XFS ZFS GPFS Lustre ~/projects Multi-endpoint configuration (GCSv4) 43 Data Transfer Node POSIX Connector Western Digital ActiveScale Connector ~/archive Amazon S3 Bucket Amazon S3 Connector ~/ ~/scratch
  • 43. Data Control Globus cloud connector deployment Globus endpoint with Google gateways Other Globus endpoints Globus Collection Globus Collection v DataTransferNode(s) Globus connectors
  • 44. Network paths • Separate control and data interfaces • "DataInterface =" option in globus-connect-server- conf • Common scenario: route data flows over Science DMZ link 45
  • 45. Dual-homed DTN – high speed data path Data Transfer Node GridFTP Server Science DMZ Control Channel Data Transfer Node GridFTP Server Data Channel if0 if1 Internet2 path Control Channel
  • 46. Dual-homed DTN – internal data path Data Transfer Node GridFTP Server Science DMZ Control Channel Data Transfer Node GridFTP Server Data Channel if0 if1 LAN/ Intranet path Control Channel Firewall if0 if1
  • 48. Encryption • Requiring encryption on an endpoint – User cannot override – Always enforced for protected data (High Assurance endpoints) • Globus uses OpenSSL cipher stack as currently configured on your DTN • FIPS 140-2 compliance: ensure use of FIPS capable OpenSSL libraries on DTN www.openssl.org/docs/fips/UserGuide-2.0.pdf 49
  • 49. Distributing Globus Connect Server components • Globus Connect Server components – globus-connect-server-io, -id, -web • Default: -io, –id and –web on single server • Common options – Multiple –io servers for load balancing, failover, and performance – No -id server, e.g. third-party IdP – -id on separate server, e.g. non-DTN nodes – -web on either –id server or separate server for OAuth interface 50
  • 50. ext* XFS ZFS Distributing Globus Connect Server components Data Transfer Node OAuth Server GridFTP Server MyProxy CA Science DMZ (ACL limited) Port 2811 accepts inbound connections from Globus Firewall
  • 51. Globus Network Manager For environments with super duper special network constraints… (a.k.a. ”for the very brave”) 52
  • 52. Globus Network Manager • Information from GridFTP to facilitate dynamic network changes • Callbacks during GridFTP execution on local DTN • Supplements information available via Globus transfer API
  • 53. • Pre-listen (binding of socket) • Post-listen • Pre-accept/Pre-connect (no Data yet) • Post-accept/Post-connect (data in flight) • Pre-close • Post-close Globus Network Manager Callbacks
  • 54. Network manager use cases • Science DMZ Traffic Engineering – Use SDN to dynamically route data path – Control path uses traditional route • Automated WAN bandwidth reservation – OSCARS, AL2S • Note: All this requires custom code …mostly in C!