military networking lessons learned – enabling … or brocade vrouter ... procedure ii 70c...

35
24 October 2016 Copyright © 2016 Pacific Star Communications Imagined. Engineered. Delivered. ® Military Networking Lessons Learned – Enabling Industrial Remote Monitoring Remote 2016 Monitoring & Control Las Vegas, NV November 4, 2016, 1:30 PM Charlie Kawasaki, CISSP CTO, PacStar

Upload: vuquynh

Post on 18-Jun-2018

219 views

Category:

Documents


0 download

TRANSCRIPT

24 October 2016Copyright © 2016 Pacific Star Communications

Imagined. Engineered. Delivered.®

Military Networking Lessons Learned –Enabling Industrial Remote Monitoring

Remote 2016 Monitoring & ControlLas Vegas, NVNovember 4, 2016, 1:30 PM

Charlie Kawasaki, CISSPCTO, PacStar

24 October 2016Copyright © 2016 Pacific Star Communications 2

Imagined. Engineered. Delivered.®

Non-stop IT Growth Potential for Remote/ICS systems: No Surprise Here● Military Benefits

− Situational awareness− Mission command/control− Resupply, maintenance

● Military opportunities for IT− Military enterprise management (including facilities)− Vehicle integration for EW, ISR, mission, and vehicle

management and control (Vetronics)− In transit, mobility and dismounted soldier comms− Coalition partner comms− Tactical microgrids

24 October 2016Copyright © 2016 Pacific Star Communications 3

Imagined. Engineered. Delivered.®

Example System: US Army VICTORY Program

http://www.geautomation.com/news/ge-contributes-armys-victory-industry-group

24 October 2016Copyright © 2016 Pacific Star Communications 4

Imagined. Engineered. Delivered.®

Military Fielded Systems: Rising Complexity● Over time, fielded system

complexity continues to rise− Unified capabilities− Application virtualization− Added networks (SIPRNet,

NIPRNet, CENTRIXS, JWICS, Coalition, NGOs)

− Wireless meshing, cellular, LoS comms

− CSfC/Suite B− Increased IA demands

Cyber defense● System challenges grow

geometrically− SWaP− Setup time/down time− Training

24 October 2016Copyright © 2016 Pacific Star Communications 5

Imagined. Engineered. Delivered.®

Similar Opportunities/Challenges: Oil and Gas

Drilling Rig Network: Networks on drilling rigs must be reliable under industrial conditions, efficient over limited bandwidth links, and easy to manage either centrally or locally. Drilling rig networks must support wired and wireless connectivity for web access, data instrumentation capture, telemetry, and real-time video streaming.

Production Monitoring: Production operations must be monitored at various points throughout the production processes including at wellheads, along various points of pipelines, and at gas compressor stations.

24 October 2016Copyright © 2016 Pacific Star Communications 6

Imagined. Engineered. Delivered.®

Similar Opportunities/Challenges: Mining

Underground “Last Mile’ Applications: The most difficult operations in underground mining. There are a number of challenges in this part of mining where fixed infrastructure is not supported and the only means of communication is via RF/wireless technology.

Environmental Monitoring: Solutions enable continuous monitoring of priority systems and metrics such as gas levels, air flow, ventilation fans, water pumps and power status. Solutions can support the collection of data for micro-seismic analysis to monitor rock mass response during mine excavation.

24 October 2016Copyright © 2016 Pacific Star Communications 7

Imagined. Engineered. Delivered.®

Similar Opportunities/Challenges: Rail

Wayside Bungalow Networking: When a rail transportation company must connect thousands of wayside bungalows to a network, security, ease of management, and reliability of the equipment is critical.

Positive Train Control: Onboard train networking equipment must communicate with wayside equipment or to operational network infrastructure reliably and securely with a low level of latency. Additionally, all onboard network equipment must be compact and able to operate in a harsh environments with a high degree of reliability.

24 October 2016Copyright 2016 Pacific Star Communications

Imagined. Engineered. Delivered.®

Enhanced COTS-Based Modular Communications Solutions

24 October 2016Copyright © 2016 Pacific Star Communications 9

Imagined. Engineered. Delivered.®

Example Remote Network System*

● Satcom modem● Enterprise branch office router● Enterprise branch office

VPN/Firewall● Enterprise Server(s)● Enterprise Switch● WiFi System● UPS

* Example from undisclosed oil exploration ship

24 October 2016Copyright © 2016 Pacific Star Communications 10

Imagined. Engineered. Delivered.®

Challenges of a Data Center at the Frontier

● Suitability: Data center equipment is not suitable for a rugged environment that is typical for industrial applications, particularly for installations at the frontier.

● Less Reliability: Data center equipment is also more prone to failure when installed at the frontier.

● Power Conditioning & UPS: Power conditioning is critical since power is generated at the site and is “dirty” and intermittent at the frontier. If data center type equipment is used, additional power conditioning and UPS equipment become necessary.

● Bulky Equipment: The equipment is bulky and expensive to ship to the operational area but also to move on and off the offshore rig.

● Rackmount Hardware: Rackmount hardware is difficult to procure at the frontier.

24 October 2016Copyright © 2016 Pacific Star Communications 11

Imagined. Engineered. Delivered.®

Small Form Factor Solutions (SFF) Save SWaP

● 10.4 times lighter than a typical 1ru server● 12.4 times smaller than a typical 1ru server● Up to 18 times less power consumption

24 October 2016Copyright © 2016 Pacific Star Communications 12

Imagined. Engineered. Delivered.®

Example: Military Next Gen Network System

Reduced Size, Weight and Power (SWaP) with no loss of comms network functionality:● SFF satcom system● SFF branch office router● SFF branch office

VPN/Firewall● SFF Server(s)● SFF Switch● SFF WiFi System● UPS

24 October 2016Copyright © 2016 Pacific Star Communications 13

Imagined. Engineered. Delivered.®

8 Step Process for Re-Engineered COTS

1. Start with best of breed, enterprise COTS and or embedded COTS boards

2. Strip down3. Qualify thermal and other environmental performance4. Design/Replace power system5. Re-package6. Solution package7. System validation/verification8. 100% system QA during MFG

24 October 2016Copyright © 2016 Pacific Star Communications 14

Imagined. Engineered. Delivered.®

Example: Thermal Re-engineering

Color Scale 25 – 45 C Color Scale 25 – 45 C

Re-engineered Cooling System

OEM, Commercial cooling system

~ 20C Reduction in Hot Spot Temperature

24 October 2016Copyright © 2016 Pacific Star Communications 15

Imagined. Engineered. Delivered.®

Example: Ruggedized, Compact Rail Solution

Example Space-Constrained Rail Wayside Location

Mandatory PCT creates networking challenges. Solution: deployable SFF server for network monitoring and comms.

Uses re-engineered COTS server module with virtualized network monitoring software and voice/PTT/RoiP

24 October 2016Copyright © 2016 Pacific Star Communications 16

Imagined. Engineered. Delivered.®

Example: Oil and Gas Solution

Capture

Real-Time Data and Network

Process

Visualize

Decision

24 October 2016Copyright © 2016 Pacific Star Communications 17

Imagined. Engineered. Delivered.®

Example: Oil and Gas Solution

24 October 2016Copyright © 2016 Pacific Star Communications 18

Imagined. Engineered. Delivered.®

SFF: Detailed Comparison

Commercial Server● Size: 19” x 17.1” x 1.68”

Vol: 547 in3

● Weight: max 42.55 lb. ● Power: 350 – 550w AC● Temperature Range:

10°C to 35°C (50°F to 95°F)

Small Form Factor Server● Size: 5.3” x 7.1” x 1.6”

Vol: 60.2 in3

● Weight: 2.5 lb.● Power: 45w AC● Temperature Range:

-20°C to 60°C (-4°F to 140°F)

Makes practical virtualized applications in the field

24 October 2016Copyright © 2016 Pacific Star Communications 19

Imagined. Engineered. Delivered.®

Example: Small Router Module● Supports multiple input power scenarios for

flexible operations.− Snap on Radio Batteries (PRC152/PRC148).

Dual battery configuration enables hot swap without down time.

5 hour run time per battery (No PoE or external device load)

− Wide Range DC (10 – 36 VDC) for 2590 batteries, vehicle power, and other DC power sources.

− World Wide AC

● Cisco 5915 ESR Router with PoE− 12W PoE standard, 60W when provided external 48

VDC

● Fanless and environmentally rugged (-20 to 70C)− Extensively Tested to MIL-STD 801G (Operating

Temp, Vibration, Shock, Humidity, Sand/Dust) and MIL-STD-461F EMI

● 5.3” X 7.1” X 1.6”, 2.3 lbs.

24 October 2016Copyright © 2016 Pacific Star Communications 20

Imagined. Engineered. Delivered.®

Example: Small, Powerful Server Module● With a generic server module running a

hypervisor such as Vmware ESXi, Hyper-V, KVM, a whole new world of options for SFF networking becomes available. Examples include:− Routing – such as Cisco 5921 and CSR

100v or Brocade vRouter− Firewalls/IDS/VPN – such as Palo Alto

Networks− WAN Optimization – such as Riverbed

Virtual Steelhead− Wireless Controllers – such as Aruba VMC− Voice/RoIP Control – such as Cisco UCM

24 October 2016Copyright © 2016 Pacific Star Communications 21

Imagined. Engineered. Delivered.®

Example: Virtualization● Multiple input power scenarios for flexible

operations− Snap on Radio Batteries (PRC-152/PRC-

148) Run time dependent on configuration

− Wide Range DC (10 – 36 VDC) − World Wide AC

● Provides conditioned 12VDC output power to operate KG-250X

● Extensively Tested to MIL-STD 801G (Operating Temp, Vibration, Shock, Humidity, Sand/Dust) as well as FCC EMI

● 5.3” X 7.1” X 1.6”, 2.7 lbs.● Two Solid State Disk Drive Configurations

(SATA 2/3, 6 Gb/s)− Dual 1.8” Form Factor, up to 1 TB total− Single 2.5” Form Factor, up to 4 TB total

24 October 2016Copyright © 2016 Pacific Star Communications 22

Imagined. Engineered. Delivered.®

● Provides hyper-converged storage, compute and networking capabilities in ultra-low SWaP module for multiple applications and use cases.

● Key features:− High capacity RAID protected

storage (up to 32 TB of SSD storage – with 8x 2.5” SSD

− High performance compute (Intel Xeon E3 processor with up to 32 GB RAM)

− High density port count (5 routable GigE ports, 1 x USB, 1 x Full Display Port, 1 x Console)

Example: Hyper-Convergence Module

24 October 2016Copyright © 2016 Pacific Star Communications 23

Imagined. Engineered. Delivered.®

Example: Compact Transport and Mounting

Rack Mount

Mini-Transit Case

Custom Kits

24 October 2016Copyright © 2016 Pacific Star Communications 24

Imagined. Engineered. Delivered.®

Still Must Meet MIL-STD-810G/461F TestingAll tests conducted at independent, accredited test labs• Defense Logistics Association

Certification• American Association for

Laboratory Accreditation (A2LA)

• International Safe Transit Association Certification (ISTA)

Operational tests include running IP traffic through the UUT and monitoring for drop outs, errors, or other signs of degradation

Test Description Test Method Parameters ResultMIL-STD-810G

High Temperature Operation

MIL-STD-810GMethod 501.5Procedure II 70C Operating Pass

Low Temperature Operation

MIL-STD-810GMethod 502.5Procedure II -20C Operating Pass

High Temperature Storage

MIL-STD-810GMethod 501.5Procedure I 85C Non-operating Pass

Low Temperature Storage

MIL-STD-810GMethod 502.5Procedure I -50C Non-operating Pass

Vibration Operation

MIL-STD-810GMethod 514.6Procedure I

Rotary Wing Aircraft (CAT 14, Figure 514.6D-3/Table 5114.6D-III) Pass

Vibration Operation

MIL-STD-810GMethod 514.6Procedure I

Off Road Ground Vehicle(MIL-STD-810F, Figure 514.5C-3) Pass

ShockBench Handling

MIL-STD-810GMethod 516.6Procedure VI Per Procedure Pass

Sand and DustBlowing

MIL-STD-801GMethod 510.5Procedure I & Procedure II

Dust 15mph Wind & 10 g/m^3Sand 30 mph Wind Pass

Sand and DustSettling Dust

MIL-STD-810FMethod 502.5Procedure II Per Procedure Pass

HumidityMIL-STD-810GMethod 507.5 Temperature and Humidity Cycles Pass

MIL-STD-461F (EMI)Radiated Emmisions RE102-4 Ground Application (Navy Fixed, Air Force) PassConducted Emmissions CE102-1 All Applications Pass

24 October 2016Copyright © 2016 Pacific Star Communications 25

Imagined. Engineered. Delivered.®

Example Lab Test, Transportation Vibration

24 October 2016Copyright © 2016 Pacific Star Communications 26

Imagined. Engineered. Delivered.®

Example: 100% MFG QA

24 October 2016Copyright 2016 Pacific Star Communications

Imagined. Engineered. Delivered.®

Software: The COTS Challenge

24 October 2016Copyright © 2016 Pacific Star Communications 28

Imagined. Engineered. Delivered.®

Problem: Management Challenges● Typical:

− Multiple vendor user interfaces

− Extensive training requirements

− Complex and error-prone configuration

− Long setup times● These solutions require:

− Multiple IT professionals to deploy in the field

− High training expense

24 October 2016Copyright © 2016 Pacific Star Communications 29

Imagined. Engineered. Delivered.®

Solution: Integrated GUI

● An intuitive user interface− Set-up and operation quick and easy to learn − Significantly fewer mis-configuration errors.

● Powerful wizards and alerts− Common user interfaces across all hardware and software components − Automates complex and routine tasks

● Interoperability− Supports a broad range of tactical and enterprise communications

hardware and systems− Enables easy, consistent operation even with upgrade and replacement

of system components.● An extension of advanced IP-enabled unified communications

− Voice, video, data sharing, etc. at the edge− Without an increase in complexity of operation.

● Vendor agnostic remote management.

24 October 2016Copyright © 2016 Pacific Star Communications 30

Imagined. Engineered. Delivered.®

Integrated GUI: Saves Time/Reduces Errors

* Validated through independent testing of military communications specialists, civilian IT administrators and non-IT military and civilian users.

24 October 2016Copyright © 2016 Pacific Star Communications 31

Imagined. Engineered. Delivered.®

24 October 2016Copyright © 2016 Pacific Star Communications 32

Imagined. Engineered. Delivered.®

24 October 2016Copyright © 2016 Pacific Star Communications 33

Imagined. Engineered. Delivered.®

Wizard Advantages● Common look-and-feel● Easy to follow, step-by-step

procedures● Task-centric view, cuts across

multiple devices from different manufacturers

● Context-sensitive help● Administrator customizable

default values, ability to hide pages

24 October 2016Copyright © 2016 Pacific Star Communications 34

Imagined. Engineered. Delivered.®

Integrated GUI: Already In-Use In DoD Programs● Onboard dozens of US DoD platforms● 6,000 copies deployed in US Army WIN-T● In field exercises with US Army Wireless Command Post

WIN-T/Ft. Gordon User Jury, Feb 2016● “Even users who have not touched the system can perform basic

troubleshooting methods.”● System capabilities are user friendly.”● “Two thumbs up, we really need this in the field. From RTO in

combat team line units down to ESB supporting other networks.”From several PFC MOS 25B, 25A, as well as contractor reps from WIN-T Inc 1

24 October 2016Copyright 2016 Pacific Star Communications

Imagined. Engineered. Delivered.®

Questions?

Thank You!

Contact: Charlie Kawasakiemail: [email protected]