CSTNET is the non-profitable, nationwide academic network in China, with the aim of providing Internet service and applications for the demand of scientific research and constructing an innovative network environment for the future ICT. The service provisioning and security guarantee are key factors to ensure the success of an operational network.
In this talk, we will first give an overview of CSTNET, followed by the introduction of its infrastructure. And then, we will demonstrate the advanced scientific network services and applications provided by CSTNET. The main services include the network management cloud service, network security cloud service, unified communication service, Duckling collaboration working environment service, and network research and experimentation service. The main network applications include light-path provisioning for eVLBI and its tracking for Chang’E-1&2 Lunar Mission, massive data transmission for IHEP-NERSC Daya Bay neutrino experiment, and integrated services for ITER.
Finally, we will present how to guarantee the security in CSTNET, which is provided by the network security infrastructure and the security cloud platform. The network security cloud delivers a clear and achievable path for network administrators using SAAS paradigm to achieve the centralized and unified monitoring and to provide multitenant, on-demand, location-independent network security services. Based on the security facilities and security operating center, both personalized special services and cloud-based general services are provided for 100 institutions in CAS, including security monitoring and situation awareness service, malicious code in-depth analysis service, emergency response on information security service, security assessment and reinforcement service, and safety training service.