CERN Accelerating science

Published Articles
Title	Bootstrapping a new LHC data transfer ecosystem
Author(s)	Bockelman, Brian (U. Nebraska, Lincoln) ; Hanushevsky, Andrew (SLAC) ; Keeble, Oliver (CERN) ; Lassnig, Mario (CERN) ; Millar, Paul (DESY) ; Weitzel, Derek (U. Nebraska, Lincoln) ; Yang, Wei (SLAC)
Publication	2019
Number of pages	9
In:	EPJ Web Conf. 214 (2019) 04045
In:	23rd International Conference on Computing in High Energy and Nuclear Physics, CHEP 2018, Sofia, Bulgaria, 9 - 13 Jul 2018, pp.04045
DOI	10.1051/epjconf/201921404045
Subject category	Computing and Computers
Accelerator/Facility, Experiment	CERN LHC
Abstract	GridFTP transfers and the corresponding Grid Security Infrastructure (GSI)-based authentication and authorization system have been data transfer pillars of the Worldwide LHC Computing Grid (WLCG) for more than a decade. However, in 2017, the end of support for the Globus Toolkit - the reference platform for these technologies - was announced. This has reinvigorated and expanded efforts to replace these pillars. We present an end-to-end alternate utilizing HTTP-based WebDAV as the transfer protocol, and bearer tokens for distributed authorization. This alternate ecosystem, integrating significant pre-existing work and ideas in the area, adheres to common industry standards to the fullest extent possible, with minimal agreed-upon extensions or common interpretations of the core protocols. The bearer token approach allows resource providers to delegate authorization decisions to the LHC experiments for experiment-dedicated storage areas. This demonstration touches the entirety of the stack - from multiple storage element implementations to FTS3 to the Rucio data management system. We show how the traditional production and user workflows can be reworked utilizing bearer tokens, eliminating the need for GSI proxy certificates for storage interactions.
Copyright/License	publication: © 2019-2024 The Authors (License: CC-BY-4.0)

Corresponding record in: Inspire