CYCLONE Networking Architecture for Multi-cloud Applications
Eduard Escalona, Albert Viñés (I2CAT), Yuri Demchenko, Fatih Turkmen, Cees de Laat (UvA), Mathias Slawik, ChristopheBlanchet (CNRS-IFB), Oleg Lodygensky (CNRS-LAL), Cal Loomis (SixSq), Ralf Fischer (QSC)CYCLONE Multi-cloud Infrastructure for Data Intensive Applications

Master> 10
Bioinformatics
ResearchUsecases

Developer/Customer

Storage
Storage
PoolApp
Dev&OpsTools

WorkerWorkerWorkerWorkerWorkerWorkerWorkerWorkerWorkerWorkerCloudExt
I/P/SaaS

SlipStream
Outsourcing Workflow/ Compute

Fed IDP& SSO

Archiving Data
IdP
IdP
IdP

Federated
AAI/ABAC

ScientificData Archive

MasterScientificApplication(Workflow)

Storage
Storage
PoolWorker
WorkerWorker Worker
Worker Worker
Worker Worker
WorkerWorker

Data
Visualis &Collaboration

SlipStream

Cloud1 IaaS VPCServer

CYCLONE Architecture for Multi-cloud Applications
The CYCLONE Intercloud Architecture Framework addresses challenges
related to heterogeneous multi-cloud applications• Multilayer cloud resource integration, access control, management, andlogging for multi-cloud applications• On-demand multi-provider cloud service and infrastructure provisioning andlife cycle management (composition, (re-)deployment, management, andmonitoring)• Intra- and inter-cloud network provisioning between clouds, delivered asinter-cloud/multi-domain Virtual Private Network (VPN)• Access control, security credentials, and security context management
covering the whole application life cycle• Federated access to distributed multi-cloud resources, integrating
application-based and cloud-based security services• Data protection, including protection of data transfer between clouds as well
as data storage in-rest.
• CYCLONE approach:✓ Network Services are built as overlay networks, created as a part ofcloud application and working transparently on top of the underlying
physical infrastructure.

References[1] OpenNaaS-CNSMO [online] http://opennaas.org/[2] SlipStream Cloud Automation [online] http://sixsq.com/products/slipstream/

External/Cloud Data
Storage/Apps/Instruments

Hosting Scientific Application

Researcher/User

Data
Storage
Storage

Secure Session
Ctx Mngmt
Trust Bootstrap
SecureLogging

Collaboration &Visualisation>5
Smart Energy
Systems
UsecasesFederated
Security
Services

Data
Storage
Storage

ServerScienceCloud A

Data
Storage
Storage

SecureNetworking(CNSMO)

Data
Storage
Storage

Science Cloud B

CYCLONE Networking Services Using CNSMO• CNSMO (Cyclone Network Services Manager and Orchestrator) is thesoftware component responsible of deploying, configuring and running thenetworking services in cloud applications [1]• CNSMO is based on the Software Defined Network paradigm, implementing
an overlay network that will exploit the underlying connectivity given by ISPs
• Design is based on the virtual network bridge connecting the physicalinterface to a virtual switch, which is subscribed to an2 SDN controller that
resides in one of the VMs on the same signalling VPN.
• SDN controller manages and monitors the network traffic across VMs
instantiated in distributed clouds.

Acknowledgement

For more information refer to

CYCLONE project is supported by the Horizon 2020 EU funded Integrated
project CYCLONE project, grant number 644925.

CYCLONE website - http://www.cyclone-project.eu/
CYCLONE github - https://github.com/cyclone-projectContact: Eduard Escalona <eduard.escalona@i2cat.net>
Yuri Demchenko <y.demchenko@uva.nl>