CNIL May 2006 Report These slides found at iris.eecs.berkeley/reports/

1. UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES CNIL May 2006 ReportThese slides found at http://iris.eecs.berkeley.edu/reports/

2. UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES • Mission: Provide excellent computing and networking services in support of the EECS department's instructional and research goals. • Last years’ goals: • Improvement of Instructional Services • Consolidation, Refurbishing Labs (119 Cory, 330 Soda, 276 Soda, 277 Soda) • Refresh Hardware • Better sharing of people and servers • Strengthening research IT infrastructure (focus on security) • Campus Minimum Security Standards – we’re farther along than everyone • VPN, patches, 802.11a, encryption, authentication, firewalls, passwords, port scanning, reduce unnecessary services, training, etc. • Plus: Logging, access control, physical security • Still expensive and hard to do well (and people are the risk)

3. UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Some Other Accomplishments From Last Year • New Helpdesk office in 313 Soda M-F 9am-1pm • IRIS Webpage FAQs • New support for Mac OSX • Added CUSG printer support contracts • Created “yum” repository for updating Linux client software. • New Barracuda Anti-Spam Servers • eliminated internal mail relays • AirBears and 802.11a service to Soda, Cory, BWRC, and HMMB • MESH network across large swaths of campus • Thanks to Chairs Malik and Lee, CUSG debt is eliminated at FY end

4. UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Staff Changes • From 31 FTE to 30 FTE • New IT Director – Eric Fraser • New ISG Staff – Linda Huang • New IMG Staff – Emrys Ingersoll

5. UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Network Rolling Upgrade Core Core Core Wireless Wireless Wireless • Replace Core Network this year • Equipment at end of life • Improve bandwidth between Soda and Cory to 10Gb • Improve bandwidth to centralized storage and other services to 10Gb • Higher backplane bandwidth to support Gb to the desktop in the next round of upgrades • Can offer Gb to the desktop or server rooms at a cost to the user of $16K for 48-ports • Replace Firewalls this year • Equipment at end of life • Current system is susceptible to DOS attacks • 10Gb to campus is possible for an additional ~$10K but likely premature • This would allow high bandwidth to Campus Datacenter, not to CENIC • Will wait until driven by research needs or co-location to campus datacenter • Replace wireless infrastructure next year • Replace closet networking in two years • At that time full Gb to desktop will be supported • Network ICF fee stays same this year as last. • Next 2 years should increase and then level off (offset by future decreases in storage and CIS) Closet Closet Closet 4 years

6. UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Storage Updates • Historically, Storage needs have grown • at a rate of 1TB/year • Current NetApp System • Nearing full capacity of design • NetApp is very expensive for everything • but, has been extremely flexible and reliable • NetApp Additional Capacity this year • buy 1TB of storage, which puts us at capacity of current system • additional growth on current hardware possible by reducing the duration of snapshots • Purchase small amount of new hardware this year to ease migration to more flexible hardware next year • SAN solution • looking at solutions from Sun, IBM, and BlueArc • What additional types of storage would you like to see? • Premium with no backups • Archival storage for read-only (such as web pages for old project data) • Temporary scratch, work, or collaborative space • Web-based

7. UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Identity Management • Unifying EECS Usernames with CalNet ID • Background • EECS has historically kept unified user space over 5000 computers, 1500 users • Recent campus deployment of CalNet “friendly” usernames • Useful to unify user@eecs.berkeley.edu with user@berkeley.edu • Many campus services (Blu, UniBears, AirBears, BFS) now utilize CalNet for authentication • In long-run could shift burden of account mgmt. to campus and free up technical resources • Immediate Goals • Encourage all EECS users to setup CalNet ID to one that matches EECS username • Where there is a conflict • Attempt to reclaim CalNet ID to match EECS username (some success in the past) • or, consider changing EECS username • Develop an LDAP plug-in which will authenticate first against EECS, then against Campus • this will even work if EECS and campus names/passwords do not match • Longer-term goals • Support longer usernames on EECS systems (Jan 2007) • LDAP authoritative server for Unix (Jan 2007) • Windows logins synchronized with LDAP (not yet tested) • Integration with CalNet ID • also working on single sign-on CalNet ID for web applications (EECS/ERSO)

8. UNIVERSITY OF CALIFORNIA Berkeley ELECTRICAL ENGINEERING AND COMPUTER SCIENCES Dropped previously proposed $5/month windows charge