Fermilab Computing Division

CS Document 4608-v1

Secure Wide Area Network Access to CMS Analysis Data Using the Lustre Filesystem

Document #:
Document type:
Submitted by:
Dave Dykstra
Updated by:
Dave Dykstra
Document Created:
11 Jan 2012, 12:01
Contents Revised:
27 Jun 2012, 13:39
Metadata Revised:
27 Jun 2012, 13:39
Viewable by:
  • Public document
Modifiable by:

Quick Links:
Latest Version

Other Versions:
11 Jan 2012, 12:01
This paper reports the design and implementation of a secure, wide area network, distributed filesystem by the ExTENCI project, based on the Lustre filesystem. The system is used for remote access to analysis data from the CMS experiment at the Large Hadron Collider, and from the Lattice Quantum ChromoDynamics (LQCD) project. Security is provided by Kerberos authentication and authorization with additional fine grained control based on Lustre ACLs (Access Control List) and quotas. We investigate the impact of using various Kerberos security flavors on the I/O rates of CMS applications on client nodes reading and writing data to the Lustre filesystem, and on LQCD benchmarks. The clients can be real or virtual nodes. We are investigating additional options for user authentication based on user certificates. We compare the Lustre performance to those obtained with other distributed storage technologies.
Files in Document:
Associated with Events:
CHEP 2012 held on 21 May 2012 in New York, New York
DocDB Home ]  [ Search ] [ Authors ] [ Events ] [ Topics ]

DocDB Version 8.8.9, contact Document Database Administrators