Presented at GlobusWorld 2022 by a set of panelists moderated by Jason Zurawski from ESnet. Panelists offer their perspectives on scalable network infrastructure to support fast, reliable data transfer.

1. National Science Foundation Award #1826994
Jason Zurawski
LBNL / ESnet
zurawski@es.net
Data Mobility Panel: Operating Secure Data
Architectures via the Science DMZ Model
Globusworld 2022
Chicago, IL
May 10th, 2022
https://epoc.global
Mike Benedetto
American Museum of Natural History
mbenedetto@amnh.org
Nathaniel Mendoza
Texas Advanced Computing Center
nmendoza@tacc.utexas.edu
Jim Leous
The Pennsylvania State University
leous@psu.edu

2. Agenda
• Who We are
• Science DMZ Primer
• Q & A
2 – ESnet Science Engagement (engage@es.net) - 5/20/22

3. Agenda
• Who We are
• Science DMZ Primer
• Q & A
3 – ESnet Science Engagement (engage@es.net) - 5/20/22

4. 4
First Tries (and Fails)

5. Classic Science DMZ

6. Campus Utilization or Performance? Why not Both!
• What if performance was included in the campus design?
• How well does IT know your researchers requirements and expectations?
• How well do researchers know what to expectat from IT and infrastructure
performance?
• Think of this set of content as a reset – we don’t want to build IT for the sake of
building IT
• Tie infrastructure back to the user/use cases, and be sensible about the design,
installation, security, performance, and operation.
• One reference of this type of implementation is the Science DMZ design pattern
6 – ESnet Science Engagement (engage@es.net) - 5/20/22

7. 7 – ESnet Science Engagement (engage@es.net) - 5/20/22

8. AMNH Network Map(s)
8 – ESnet Science Engagement (engage@es.net) - 5/20/22

9. 9 – ESnet Science Engagement (engage@es.net) - 5/20/22

10. 10 – ESnet Science Engagement (engage@es.net) - 5/20/22

11. 11 – ESnet Science Engagement (engage@es.net) - 5/20/22

12. 12 – ESnet Science Engagement (engage@es.net) - 5/20/22

13. Agenda
• Who We are
• Science DMZ Primer
• Q & A
13 – ESnet Science Engagement (engage@es.net) - 5/20/22

14. (Canned) Q & A
• Some questions we through of – but feel free to ask your own too!
1. How are users onboarded to use your facility Science DMZ /
Data movement hardware?
2. How do you handle data transfers with special security
considerations (e.g. PII)?
14 – ESnet Science Engagement (engage@es.net) - 5/20/22

15. (Canned) Q & A – cont.
3. What are the challenges associated with getting Science DMZs / DTNs/ data movement
tools approved by institutional security staff (i.e. CISO)? What other challenges have you
faced in bridging SciComp and Security?
4. What are common usage patterns for your Science DMZ networks and data movement tools
(e.g. bursts of activity, constant use, locations you exchange with)?
5. How do you integrate your data transfer hardware with your storage systems / computing
resources? How do you validate the performance of your network and your storage (e.g.
what form of measurement and monitoring do you perform)?
15 – ESnet Science Engagement (engage@es.net) - 5/20/22

16. National Science Foundation Award #1826994
Jason Zurawski
LBNL / ESnet
zurawski@es.net
Data Mobility Panel: Operating Secure Data
Architectures via the Science DMZ Model
Globusworld 2022
Chicago, IL
May 10th, 2022
https://epoc.global
Mike Benedetto
American Museum of Natural History
mbenedetto@amnh.org
Nathaniel Mendoza
Texas Advanced Computing Center
nmendoza@tacc.utexas.edu
Jim Leous
The Pennsylvania State University
leous@psu.edu