Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Network Infrastructure for Academic IC CAD Environments

449 views

Published on

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Network Infrastructure for Academic IC CAD Environments

  1. 1. Network Infrastructure for Academic IC CAD Environments EUROCON 2011 - E-Learning II Network Infrastructure for Academic IC CAD EnvironmentsPedro Coke, Cândido Duarte, André Cardoso, Vítor Grade Tavares, Pedro Guedes de Oliveira April 29, 2011 Microelectronics Students’ Group DEEC - Departamento de Engenharia Electrotécnica e de Computadores FEUP - Faculdade de Engenharia, Universidade do Porto Rua Dr. Roberto Frias, s/n, 4200-465 Porto, Portugal Sala I325, Telephone: 225574199 - Ext 3230 web: usgroup.eu e-mail: info@usgroup.eu April 29, 2011 1/14
  2. 2. Network Infrastructure for Academic IC CAD Environments IntroductionAt the Microelectronics Students’ Group,students are able to take part in thedevelopment of IC projects The group provides a well-suited working environment for IC CAD design Over time, however, more complex projects demanded a more reliable and secure computer network infrastructure. April 29, 2011 2/14
  3. 3. Network Infrastructure for Academic IC CAD Environments IntroductionThis need was approached through an extracurricularactivityThe project gathered students in Computer Sciences and Electronics andComputers Engineering, interested in developing knowledge on networksecurity, allowing them to: · Pursue their own topics of interest · Autonomously explore solutions to fulfil requirements · Consolidate knowledge through hands-on experience April 29, 2011 3/14
  4. 4. Network Infrastructure for Academic IC CAD Environments Project Kick-offThe students started by reviewing the current solution inorder to identify existing problems · Maintaining software copies on many machines · More users than machines available · Sensitive information transmitted on public network April 29, 2011 4/14
  5. 5. Network Infrastructure for Academic IC CAD Environments Project RequirementsFollowing this analysis, the project requirements weredefined · Centralized user authentication · Filesystem distribution throughout the network · User storage · IC-CAD software · Secure infrastructure on insecure network April 29, 2011 5/14
  6. 6. Network Infrastructure for Academic IC CAD Environments Core Services AuthenticationThe Kerberos protocol allows secureauthentication over a non-secure networkIt relies on symmetric key cryptography to provideauthentication for users and services. · MIT Kerberos V · All core network services rely on Kerberos for authentication April 29, 2011 6/14
  7. 7. Network Infrastructure for Academic IC CAD Environments Core Services Directory ServiceLDAP is an application protocol forquerying and modifying directory serviceson the networkUsed by host machines to query for users and groups. · OpenLDAP server · Stores user and group information · Secured using Kerberos V April 29, 2011 7/14
  8. 8. Network Infrastructure for Academic IC CAD Environments Core Services StorageAFS is a networked filesystem thatprovides a location-transparent file namespace · OpenAFS server · Stores IC-CAD software and users’ homes · Uses Kerberos authentication · Access control lists (ACL) allow flexible permissions · Flexible volume management system with load-balancing April 29, 2011 8/14
  9. 9. Network Infrastructure for Academic IC CAD Environments Single Sign-OnSSO mechanisms allow users to seamlessly authenticateon all core servicesUpon first authentication request, Kerberos issues aTicket-Granting-Ticket, which can be used for authentication to otherservices without re-entering credentials.PAM and NSS are used to integrate Kerberos, LDAP and OpenAFS atlogin time. April 29, 2011 9/14
  10. 10. Network Infrastructure for Academic IC CAD Environments OS DeploymentAutomated installation mechanisms allowfor non-interactive OS deployment.The used operating system is CentOS, and Anaconda kickstart files allowfor fully automatic installation. · Host boots from network · Configuration files are copied over the network via SSH · Custom profile system to differentiate between hosts · Local package mirror to speed up install · Host is fully usable at first boot April 29, 2011 10/14
  11. 11. Network Infrastructure for Academic IC CAD Environments Network TopologyAll hosts are connected via a GigabitEthernet switch to avoid performancelossesA single computer runs all network services, and isconnected via a 2Gb connection through NIC bondingto further reduce bottlenecks.Redundancy through several servers was considered,but due the lab’s already limited resources only oneserver was deployed. April 29, 2011 11/14
  12. 12. Network Infrastructure for Academic IC CAD Environments ConclusionThe implemented infrastructure was deployed in theMicroelectronics Students’ Group laboratory networkRunning in production environment for several months without significantissues, providing a well suited environment for IC design.A simple security assessment was done using the Nessusvulnerability scanner, which revealed no faults. April 29, 2011 12/14
  13. 13. Network Infrastructure for Academic IC CAD Environments ConclusionAll the defined project requirements were fulfilledThe team was able to meet the goal of designing and implementing anetwork service infrastructure from scratch.It allowed students to develop knowledge on areas not always thoroughlyexplored during courses, with complete autonomy. April 29, 2011 13/14
  14. 14. Network Infrastructure for Academic IC CAD Environments Thank you.DEEC - Departamento de Engenharia Electrotécnica e de ComputadoresFEUP - Faculdade de Engenharia, Universidade do PortoRua Dr. Roberto Frias, s/n, 4200-465 Porto, PortugalSala I325, Telephone: 225574199 - Ext: 3230web: usgroup.eu e-mail: info@usgroup.eu April 29, 2011 14/14

×