Status of the WIS VPN Pilot Status of the WIS VPN Pilot Project in Region II and VProject in Region II and V

Prepared for ET-WISC Geneva

Oct 11-14, 2005

Akihiko Nakazono Toshikazu Nishio

Japan Meteorological Agency

Background-1Background-1• In 2004, the FWIS VPN Pilot Project was launche

d as a collaborative project between Regions II and V and eleven volunteer NMHS in the Regions participated in the project.– RA-II: China, Hong Kong, India, Japan, Republic of Korea, Saudi A

rabia, Vietnam

– RA-V: Australia, Brunei, Malaysia, New Zealand • The Project successfully proved that it was feasibl

e for relatively small centers to establish a VPN link through Internet as long as they would receive appropriate technical assistance from advanced centers.

Background-2Background-2

• Outcomes of the Project were presented to the ITT-FWIS meeting held in September 2004, Geneva.

• The meeting highly appreciated the Project especially for promoting involvement of small centers in activities toward development of WIS, and it also requested to continue the Project extending to the WIS application level in cooperation with other pilot projects for WIS application components such as request/reply portal and metadata standards.

Concept of the Advanced PhaseConcept of the Advanced Phase

To study how small Centres that have less expertise and/or less telecom infrastructures could get benefits from forthcoming advanced WIS environment to their operational purposes through Internet-VPN.

Major ChallengesMajor Challenges Comprehensive and continual tests from transport

level to application level Simulation of NC operation with prototype applicat

ions supported by prototype GISC/DCPC servers. Prototype application of data input service driven

by WMO metadata and schema, and support MTDCF

Study of authorization and authentication methods for secure data reporting and providing

Possible cooperation with other Pilot Projects Expansion of participants.

OutlineOutline

• Two years project from 2005 through 2006

• 13 Participants (as of 1st October 2005)– RA-II: China, Hong Kong, India, Islamic Republic of Iran,

Japan, Republic of Korea, Oman, Saudi Arabia, Vietnam– RA-V: Australia, Brunei, Malaysia, New Zealand

• Internet bandwidth of the participants varies from 512Kbps to 440Mbps

• Beijing, Melbourne, and Tokyo act as provisional GISC/DCPC, and others act as provisional NC

Challenges of the VPNChallenges of the VPN• Establish Permanent Internet-VPN• Establish VPN through dial-up, mobile or

temporary Internet environment • Use of private IP

address in the VPN• Use of IPv6

( option)Interne

t

Permanent VPN link

VPN links among centers participating in the pilot project

Beijing Tokyo

Hong Kong

Seoul

Kuala Lumpur

Darussalam

WellingtonMuscat

Jeddah

Tehran

New Delhi

Hanoi

Melbourne

Simulating GISC/DCPC

Prototype Application & Prototype Application & ServerServer

• Use SATAID as the prototype user application for NCs

• Use PANDORA for the prototype data server

NWP productsSatellite data

UpdatedApplication software

Prototype application

NC (National Centre) Internet

Application portalData portal

Satellite dataReference information

Data sources

VPN

Gathering data from different data sources

Software updating

SATAIDSATAID• SATAID is an application program originally de

veloped for meteorological training, especially for nephanalysis.

• SATAID could display most of meteorological data, e.g. GPV, radar, profiler as well as satellite images, has many useful image analyzing capabilities, e.g. superposition, animation, cross-section, drawing contour, annotation.

• SATAID has been registered on WMO VL resource library

An example of SATAID

PANDORAPANDORA ServerServer• PANDORA Server is an http driven data and pr

oxy server.• PANDORA works as one-stop data server, it fo

rwards a request automatically if it can’t satisfy a request by itself and other PANDORA could.

• PANDORA has capability of data conversion and cut off to decrease the quantity of transfer data.

• PANDORA has been installed at BoM for training avtivities while inside JMA for operational purposes.

Structure of PANDORA

RequestRequest

Apache

PANDORA

SERVER

USER Applicatio

n (SATAID)

USER Applicatio

n (SATAID)

DATADATA

ProxyProxy

Client

http://hostname/ITGRAD10/_IRDLLLY.AASV.IE10/2005-06-08t0600/　 none/2005-06-08t0600/min1/1/1/　PI10LV/data0.grb2

http://hostname/ITGRAD10/_IRDLLLY.AASV.IE10/2005-06-08t0600/　 none/2005-06-08t0600/min1/1/1/　PI10LV/data0.grb2

Pandora Script

Pandora Script

MetadataMetadata

CacheCache

ReplyReply

RequestRequest

ReplyReply

Other PANDORA SERVER

Request ForwardingRequest

Forwarding

ConverterConverter

Collaboration with Collaboration with UNIDART UNIDART

• VPN-PP is collaborating with other Pilot Projects, especially UNIDART

• JMA already implemented a test Client, and going to build a server to provide data catalog which is compliant to WMO Metadata Std.

Data sources

UNIDART portal

Data GRID

VPN

Data source

Request/Replywith authentication

MatadataCatalogue

Internet

Cooperation with

UNIDART project

in RA VI

Reporting Observed DataReporting Observed Data(Data Input Service)(Data Input Service)

Data in XML

2132330E1A10FE00112A0B0AA

BUFR

<xml><xmlusers>country name</xmlusers><code>47401</code><date>20050101</date><time>0600</time><winddeg>360</winddeg><windspeed>10</windspeed><view>20</view><temp>12.4</temp><dew_point>9.7</dew_point><pressure>1002.5</pressure></xml>

Reporting observational data

NC (National Centre)

47401

0101 0600

360

10

20

12.4

9.7

1002.5

Station index

Data creation

Conversion to BUFR

Secure connection(VPN or HTTPS)

Internet

Input data on Web

SMJP01 RJTD 010600 AAXX 01064 47401 41/70 23610 10124 20097 40025 ....=

Dew point

Date/Time

WIND_dir

WIND_spd

Visibility

Air temp

Pressure

Utilization of IPv6Utilization of IPv6

• Additional collaborative IPv6 test is planned among　 BoM, KMA, and JMA

• Test items are being discussed among technical contacts

• IPv6　 Addresses– BoM : 2001:8ffff:8001::/48 – KMA : 2001:– JMA : 2001:240:E5::/48

Progress of the Advanced Progress of the Advanced PhasePhase

• Build basic system and opened the VPN-PP Web Site for VPN users (early July 2005 )

• Established first VPN connection with HKO (21st July)

• Opened Discussion Web Page (12th Aug)• Opened Traffic analysis Web Page (22nd

Aug)• Established IPv6 Access (26th Aug)• Installed PPTP based VPN for mobile users

(9th Sep)• Opened Web site to non-VPN users (16th

Sep)• Opened MTSAT imagery page (22nd Sep)

Coming Soon-1Coming Soon-1

• Complete Establishing VPN Connections with All Participating Centres

• Data service with PANDORA server for the prototype application - SATAID

• Cooperate UNIDART by providing catalog and data

• Monitoring throughput of Internet-VPN• Coordinate IPv6 utilization with BoM and

KMA

Coming Soon-2Coming Soon-2• Enrich Prototype Data ( add GPV, …)• Create & Provide Data Catalog in

accordance with WMO Metadata std.• Accept Reporting data through VPN

and Convert it to TDCF• Prototype schema driven input

method, that could check major errors at input

WIS VPN-PP Homepage

What’s New Page

MTSAT Imagery List

DiscussionRoom

Traffic Monitoring

Continuous Monitoring of the Round Trip Time

Traffic Monitoring

Monitoring WEB Service

Thank YouThank You