Background

Demilitarized Zone (DMZ) Services

Firewall/Gateway

Internal Services

Internal Clients

Future Plans

Warning: This is a work in progress. As such, this document is incomplete and (perhaps), in part, incorrect. Please send corrections to millman@socrates.berkeley.edu.

Network and Computer Services: Background

The Helen Wills Neuroscience Institute at the University of California at Berkeley brings various methodological and disciplinary approaches to bear on the problems of neuroscience. One aspect of this integration focuses on building three Technology Centers that will provide the tools used to understand how the brain works: the Brain Imaging Center, the Neurogenomics Center, and the Molecular Imaging Center.

  • BIC

    The Brain Imaging Center (BIC) at UC Berkeley is a new facility dedicated to functional Magnetic Resonance Imaging (fMRI) research. fMRI is a non-invasive "neuroimaging" technique used to discern the blood-flow correlates of neural activity.

    There are three main functional components on the BIC network: 1) the MRI scanner, 2) the servers, and 3) the workstations. A simplified view of how researchers are intended to use these units is: first, data is produced at the scanner; second, data is stored on a central file server; and finally, the data is processed and analyzed at the researcher's personal workstation.

    The centralized computing system for the BIC currently supports about 70 users, and is expected to experience considerable growth over the next several years. This system will manage a large number of MRI image data sets (each about 300 MB each). Users can access their personal data and run software from any workstation over a dedicated and secure high-speed Local Area Network (LAN).

  • LAN

    Due to the high volume of data to be processed and the spatially-distributed nature of our computational resources, we established high speed connections between computers in different buildings. Our LAN consists of two Cisco Catalyst 6500 switches, which are connected with optic fiber and communicate at Gigabit Ethernet speed (1000 Mbits/sec, full-duplex). Workstations are connected to the network at Fast Ethernet speed (100 Mbits/sec, full-duplex). Servers can be connected to the network with Gigabit or Fast Ethernet.

    Our need to have data securely transported over this network dictated that we isolate our LAN from the Internet. We did this by insulating the BIC computers from the rest of the world with a firewall. The introduction of a firewall to our computer system usefully divides our system into a number of interesting subcomponents, which I discuss in turn below.

  • Linux

    Finally, one of the self-imposed, overarching "constraints" framing the decisions we made in setting up the laboratory is to use a basically Linux driven computer network. A natural question for the reader, then is: "Why are we using Linux?" There are many different possible answers. Linux is fast, stable, secure, and robust. Additionally, the most useful software for the analysis of fMRI data runs on a variant of UNIX, and much of that runs on Linux.

    But the most interesting, if not ultimately the most compelling, reason is that it is open source. In particular, Linux is licensed under the Gnu Public License (GPL). A recent editorial in the British Medical Journal calls for the use of free software like Linux in the National Health Service. It can be found at: Medical software's free future. Another important and more general discussion about open source software is a collection of essays by leaders and innovators in the Linux community. Open Sources. Additionally, is The Cathedral & the Bazaar. This is also online at: Eric's Random Writings.

I begin by describing what services we provide to the external world in our Demilitarized Zone (DMZ), which like its name implies is largely unprotected. Next, I explain what our firewall can and can't protect us from as well as briefly describing how it does this. I then discuss what services we provide internally. In the penultimate section, I outline some of the configuration issues involved with conecting clients to our network as well as briefly listing some of the more important software used for the analysis of fMRI data. I conclude with a brief discussion about future plans for our computer systems.

Acknowledgement. Some of this equipment was purchased by a generous donation by the Webb Family.