Author: Gallerani, L.
Paper Title Page
WEPGF045 Large Graph Visualization of Millions of connections in the CERN Control System Network Traffic: Analysis and Design of Routing and Firewall Rules with a New Approach 1
 
  • L. Gallerani
    CERN, Geneva, Switzerland
 
  The CERN Technical Network (TN) TN was intended to be a network for accelerator and infrastructure operations. However, today, more than 60 Million IP packets are routed every hour between the General Purpose Network (GPN) and the TN involving more than 6000 different hosts. In order to improve the security of the accelerator control system, it is fundamental to understand the network traffic between the two networks in order to define appropriate routing and firewall rules without impacting Operations. The complexity and huge size of the infrastructure and the number of protocols and services involved have discouraged for years any attempt to understand and control the network traffic between the GPN and the TN. In this talk, we will show a new way to solve the problem graphically. Combining the network traffic analysis with the use of large graph visualization algorithms we produce comprehensible and usable 2D large colour topology graphs mapping the complex network relations of the control system machines and services in a detail and clarity never seen before. The talk integrates very interesting pictures and video of the graphical analysis attempt.  
poster icon Poster WEPGF045 [6.804 MB]