21-25 May 2012
New York City, NY, USA
US/Eastern timezone

Secure Wide Area Network Access to CMS Analysis Data Using the Lustre Filesystem

22 May 2012, 13:30
4h 45m
Rosenthal Pavilion (10th floor) (Kimmel Center)

Rosenthal Pavilion (10th floor)

Kimmel Center

Poster Computer Facilities, Production Grids and Networking (track 4) Poster Session


Dr Dimitri Bourilkov (University of Florida (US))


This paper reports the design and implementation of a secure, wide area network, distributed filesystem by the ExTENCI project, based on the Lustre filesystem. The system is used for remote access to analysis data from the CMS experiment at the Large Hadron Collider, and from the Lattice Quantum ChromoDynamics (LQCD) project. Security is provided by Kerberos authentication and authorization with additional fine grained control based on Lustre ACLs (Access Control List) and quotas. We investigate the impact of using various Kerberos security flavors on the I/O rates of CMS applications on client nodes reading and writing data to the Lustre filesystem, and on LQCD benchmarks. The clients can be real or virtual nodes. We are investigating additional options for user authentication based on user certificates. We compare the Lustre performance to those obtained with other distributed storage technologies.

Primary author

Dr Dimitri Bourilkov (University of Florida (US))


Dr Bockjoo Kim (University of Florida (US)) Dave Dykstra (Fermi National Accelerator Lab. (US)) Jorge Luis Rodriguez (Florida International University (US)) Paul Ralph Avery (University of Florida (US))

Presentation Materials