Changes between Version 16 and Version 17 of FeddAbout


Ignore:
Timestamp:
May 21, 2014 10:19:45 AM (10 years ago)
Author:
faber
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • FeddAbout

    v16 v17  
    160160Multiple segments of a federerated experiment can be embedded on the same testbed specifying the testbed_name as ''name''/''subname''.  In that syntax, ''name'' is the identifier of the testbed on which to embed the node and ''subname'' is a unique identifier within the federated experiment.  All the nodes assigned to '''deter/attack''' will be in the same sub-experiment and that will be a different sub-experiment from nodes in '''deter/defend'''.
    161161
     162= Experiment Services =
     163
     164An important part of the cohesive experiment framework created by the DFA is the web of services interconnecting the sub experiments.  A service, in this context, is fairly liberally defined; it is any one of several pre-defined ways of sharing information between sub-experiments.  That sharing can be statically defined at experiment creation time or change dynamically throughout the course of the experiment. Static information includes the accounts to create on various machines or the hostnames to export to sub-experiments.  Dynamic information includes mounting filesystems or connecting user experiment tools, like [http://seer.isi.deterlab.net SEER].
     165
     166Each service has an ''exporter'' the testbed that provides the service, and zero or more ''importers'', testbeds that use the information.  In addition, services can have attribute/value pairs as parameters.
     167
     168The specific services currently supported by fedd are:
     169
     170 '''hide_hosts'''::
     171 By default, all hosts in the topology are visible across the experiment.  This allows some hosts to be completely local.  The hosts chosen are given by the '''hosts''' attribute to the service.
     172 '''local_seer_control'''::
     173 Adds a local seer control node to sub-experiments in the exporting testbed.
     174 '''project_export'''::
     175 Exports the user configuration and filesystem named by the '''project''' attribute to the service to the importing testbeds
     176 '''seer_master'''::
     177  Adds a second seer controller to the exporting testbed that is capable of aggregating the inputs from several local seer masters.  To create a seer instance that sees several sub experiments, create a '''local_seer_control''' in each and export a '''seer_master''' to all.
     178 '''SMB'''::
     179  Export a set of SMB/CIFS filesystems.
     180 '''userconfig'''::
     181  Export the account information from a given project or group if the testbed supports such abstractions.  Currently accepts the '''project''' attribute for that purpose.
     182
     183Service advertisement, provision, and specification is an ongoing area of research in federation, and we expect these specifications to become more detailed and useful as that research progresses.
    162184
    163185= Attribute-Based Access Control (ABAC) =