HEPiX IPv6 working group meeting

Europe/Zurich
Vidyo

Vidyo

HEPiX IPv6 working group meeting - Vidyo - Thursday 10 December 2015

Present:   Marian Babik, Alastair Dewhurst, Terry Froy, Kashif Hafeez, Dave Kelsey, Ewan MacMahon, Edoardo Martelli, Raja Nandakumar, Kars Ohrenberg, Francesco Prelz, Duncan Rand, Andrea Sciaba, Ulf Tigerstedt,

Apologies: Thomas Finnern, Bruno Hoeft, Tiju Idiculla, Fernando López Muñoz.

Introduction

 

Minutes of October 2015 meeting

No corrections needed. Accepted.

Actions and ongoing issues

  • AndreaS/MarianB. Dual-stack SAM3 and Nagios monitoring.
    Marian and Andrea reported that work on the new ETF is basically done. They would also like to install LHCb storage tests. Fernando had problems at PIC with pre-production dCache node - the tests go via IPv4 and not IPv6. General view that IPv6-only still causes lots of problems (AFS and VOMS for example). Tests were done last week with Maarthen L. whereby some nodes were manually configures as IPv6 only but tests were still going via IPv4.
     
  • DaveK. Security Best Practices document. Ongoing.
     
  • FrancescoP. Setup for XRootD testing. Francesco reports that he still has some problems producing a portable Docker container with a portable certificate. A docker server is needed running on Centos (latest version). Francesco will send an email to the group describing the requirements to join his activities.
     
  • Alastair/Tiju.  Test Frontier with dual-stack Squid at RAL. Tiju has provided Alastair with a squid and worker node for testing. See slides later from Alastair. All tests done seem to work and dual-stack to dual-stack uses IPv6. Action complete.

Roundtable updates

a) TijuI. RAL (by email)

* On the testbed, I’ve provided a squid and a worker-node to Alastair for his testing.
* Moving the OPN links off the existing router is now a high priority task. We are in discussion with central networking to iron out some technical issues and hope to get it rolled as soon as possible, but there is no timescale at this moment.

b) Fernando. PIC (by email)

dCache middleware readiness deployment instance (who is accesible for VO cms) is now in dual-stack. Waiting dCache developers to fix dcap client in dual-stack to enable dual-stack in production. No updates about IPv6 and Enstore.

c) Francesco.

Not much progress as time has been short. He has been preparing for a tutorial at CNAF on 12th January. He notes that Docker has IPv6 as an advanced feature.  He will next consider the INFN CA in Florence. He asks if the TCS CA and its CRL are reachable over IPv6.

d) Alastair (ATLAS) - see slides
Alastair reminds us of recent problems whereby dual-stack systems at CERN do not always work with external dual-stack systems. This has been noticed in the pilot factory setup and CVMFS Stratum zero.
Alastair has been working on the the list of ATLAS central services needed from IPv6-only WNs. He proposes to enable sites to meet their CPU pledges via use of IPv6 worker nodes from April 2017 onwards (to be discussed further at the Jan F2F meeting). See the slides for details of the tests done so far - so far tests seem to work OK.

e) Ewan Mac (Oxford) reports that the CMS VO has been enabled on DPM storage for testbed use. He reports that IPv6-only UK has some problems accessing an ARC CE.

f) Marian is happy to see that ETF is working well (but with a few issues). We can look more at this at the Jan F2F meeting. IPv6-only could be tested.

g) Raja LHCb. He has found some issues with the Dirac IPv6 code that need fixing.

h) Terry Froy (QMUL)
Nothing really to report. We have some downtime ongoing at the moment and we have IPv6-enabled a number of hosts on our side (our Squids and our argus host). I also gave a talk on December 1st for an IPv6 Deployment conference run by JISC (the UK NREN) - slides available on request or ask Dave Kelsey for them.

i) Ulf (Nordic) reports that they are holding an IPv6 tutorial at the end of January. He also attend a course himself on BGP and IPv6 which he found very interesting. 

 

Testing plans

Ulf reports that he now has succeeded in getting much of the testbed back up but there are still problems stopping it working, e.g. with FTS3. He will continue to work on this.

Ongoing Actions

  • AndreaS/MarianB. Dual-stack SAM3 and Nagios monitoring.
     
  • DaveK. Security Best Practices document. Ongoing.
     
  • FrancescoP. Setup for XRootD testing. 

 

Dates of future meetings

F2F meeting on 21/22 Jan 2016 at CERN (lunchtime to lunchtime).

 

Notes by Dave Kelsey
10 December 2015 and modified 20 Jan 2016

There are minutes attached to this event. Show them.
    • 16:00 16:05
      Agenda and ongoing issues 5m
    • 16:05 16:25
      Roundtable updates 20m
      Including sites and experiments
    • 16:25 16:45
      Testing status and plans 20m
    • 16:45 17:00
      AOB and dates of next meetings 15m