IPv6 Security Babik, M; Chudoba, J; Dewhurst, A ...
Journal of physics. Conference series,
10/2017, Volume:
898, Issue:
10
Journal Article
Peer reviewed
Open access
IPv4 network addresses are running out and the deployment of IPv6 networking in many places is now well underway. Following the work of the HEPiX IPv6 Working Group, a growing number of sites in the ...Worldwide Large Hadron Collider Computing Grid (WLCG) are deploying dual-stack IPv6/IPv4 services. The aim of this is to support the use of IPv6-only clients, i.e. worker nodes, virtual machines or containers. The IPv6 networking protocols while they do contain features aimed at improving security also bring new challenges for operational IT security. The lack of maturity of IPv6 implementations together with the increased complexity of some of the protocol standards raise many new issues for operational security teams. The HEPiX IPv6 Working Group is producing guidance on best practices in this area. This paper considers some of the security concerns for WLCG in an IPv6 world and presents the HEPiX IPv6 working group guidance for the system administrators who manage IT services on the WLCG distributed infrastructure, for their related site security and networking teams and for developers and software engineers working on WLCG applications.
The fraction of Internet traffic carried over IPv6 continues to grow rapidly. IPv6 support from network hardware vendors and carriers is pervasive and becoming mature. A network infrastructure ...upgrade often offers sites an excellent window of opportunity to configure and enable IPv6. There is a significant overhead when setting up and maintaining dual-stack machines, so where possible sites would like to upgrade their services directly to IPv6 only. In doing so, they are also expediting the transition process towards its desired completion. While the LHC experiments accept there is a need to move to IPv6, it is currently not directly affecting their work. Sites are unwilling to upgrade if they will be unable to run LHC experiment workflows. This has resulted in a very slow uptake of IPv6 from WLCG sites. For several years the HEPiX IPv6 Working Group has been testing a range of WLCG services to ensure they are IPv6 compliant. Several sites are now running many of their services as dual-stack. The working group, driven by the requirements of the LHC VOs to be able to use IPv6-only opportunistic resources, continues to encourage wider deployment of dual-stack services to make the use of such IPv6-only clients viable. This paper presents the working group's plan and progress so far to allow sites to deploy IPv6-only CPU resources. This includes making experiment central services dual-stack as well as a number of storage services. The monitoring, accounting and information services that are used by jobs also need to be upgraded. Finally the VO testing that has taken place on hosts connected via IPv6-only is reported.
The production deployment of IPv6 on WLCG Bernier, J; Campana, S; Chadwick, K ...
Journal of physics. Conference series,
01/2015, Volume:
664, Issue:
5
Journal Article
Peer reviewed
Open access
The world is rapidly running out of IPv4 addresses; the number of IPv6 end systems connected to the internet is increasing; WLCG and the LHC experiments may soon have access to worker nodes and/or ...virtual machines (VMs) possessing only an IPv6 routable address. The HEPiX IPv6 Working Group has been investigating, testing and planning for dual-stack services on WLCG for several years. Following feedback from our working group, many of the storage technologies in use on WLCG have recently been made IPv6-capable. This paper presents the IPv6 requirements, tests and plans of the LHC experiments together with the tests performed on the group's IPv6 test-bed. This is primarily aimed at IPv6-only worker nodes or VMs accessing several different implementations of a global dual-stack federated storage service. Finally the plans for deployment of production dual-stack WLCG services are presented.
Abstract
Mast cells (MC) are well known for their contribution to vascular inflammation and atherosclerosis. We have shown that MC proteases and histamine amplify lipopolysaccharide (LPS)-induced ...inflammatory responses in human coronary artery endothelial cells via stimulation of TLR4 expression. This study examined mRNA levels of COX1, COX2, TLR4 and eNOS in aortic tissues of MC-deficient (W/Wv) mice and wild type controls (WT) to gain insight into the role of MC in vascular pathophysiology. We also determined the effect of MC degranulation on gene expression in aortas 24 h after intraperitoneal injection of MC degranulation agent compound 48/80 (1 μg/g body wt). We found that, in comparison to WT, aortic tissues of W/Wv mice express lower levels of COX1, COX2, TLR4 and eNOS mRNA. Injection of compound 48/80 resulted in marked stimulation of expression of these genes in aortas of WT, but not in W/Wv mice, confirming the involvement of MC degranulation products in this process. To determine whether a deficiency of MC and/or decreased COX expression in W/Wv mice is associated with changes in prostanoid homoeostasis, the levels of prostacyclin and thromboxane A2 metabolites in urine samples were analyzed. The levels of 6-keto PGF1α and 11-dehydro TXB2 in 24 h urine of both genotypes were comparable when normalized for the volume and creatinine excretion. These results suggest that, although MC deficiency suppresses the expression of COX1 and COX2 genes in the vasculature, the systemic prostanoid homeostasis remains protected.
(Supported by NIH R01-HL070101 and Carey Arthritis Fund)
A patient with a metastatic colon carcinoma was treated by immunoadsorption (IA) therapy using heat‐killed, formalin‐stabilized protein A‐containing Staphylococcus aureus Cowan I as the ...immunoadsorbent. The patient experienced both subjective and objective positive clinical response without undue morbidity. The patient's response correlated well with laboratory findings of decreased concentrations of carcinoembryonic antigen (CEA), immunoglobulin G (IgG), immune complexes (IC) and histopathologic data. The patient underwent surgery following 15 IA treatments; she lived for eighteen months post‐treatment.
Full text
Available for:
BFBNIB, FZAB, GIS, IJS, KILJ, NUK, OILJ, SBCE, SBMB, UL, UM, UPUK
During immunoadsorption of plasma immunoglobulin G (IgG) and/or its complexes, using nonviable Staphylococcus aureus Cowan I (SA) as an immunoadsorbent, we observed a consistent drop in plasma ...calcium during every immunoadsorption procedure. The percentage of decrease in plasma calcium was directly dependent on the amount of SA adsorbent present. Although SA can bind both IgG and calcium, the degree of binding of IgG was greater than that of calcium. Calcium could not be detected in the IgG fraction of the plasma SA, however, could bind an appreciable amount of ionized calcium. Extracorporeal perfusion of plasma over SA greatly decreased plasma calcium in a hypercalcemic patient, indicating the feasibility of this method in such patients. Questions concerning the significance of lowering calcium levels as a concomitant of other effects observed in cancer patients undergoing immunoadsorption therapy using SA evolve from the above and become a new focus for attention.
Progressive and severe autoimmune hemolytic anemia developed in a patient with chronic lymphocytic leukemia (CLL) despite treatment with chlorambucil, high doses of corticosteroids and attempts to ...transfuse packed red blood cells. Splenectomy was not performed because of severe coronary artery disease. Direct antiglobulin tests revealed a warm red blood cell autoantibody of IgG-type with anti-e specificity. The patient was treated by extracorporeal immunoadsorption of plasma IgG using a cell separator and protein A as the immunoadsorbent. The patient responded by an increase in the hemoglobin levels and platelet counts after two treatments. Specificity of the procedure was shown by a decrease in the serum IgG and by the demonstration of the same reactivity to ficin-treated reagent red blood cell panel of the eluate from the protein A. Antibody titers of the patient's red blood cell eluate decreased from 1:128 to 1:64 and eventually the anti-e specificity was lost. This is a report of a novel approach to treatment of the acute phase of an autoimmune hemolytic anemia.
Using heat-killed, formalin-stabilized Staphylococcus aureus Cowan I suspension, it was possible to remove myeloma IgG and autoimmune anti-red blood cell antibodies from two patients' plasma ...following an extracorporeal procedure. The arterial anticoagulated blood was processed through a cell separator machine. The separated plasma was pumped through a bacterial filter containing S. aureus suspension. The adsorbed plasma was then reunited with the blood cells and returned to the patient through the vein. S. aureus Cowan I could selectively remove the myeloma IgG and autoimmune anti-red cell antibodies from the patients' plasma prolonging the lives of these two terminal patients. The immunoadsorption procedure appears to be a safe, practical and quick method for the removal of pathological IgG from the patients' plasma.
Full text
Available for:
DOBA, IZUM, KILJ, NUK, PILJ, PNG, SAZU, UILJ, UKNU, UL, UM, UPUK
PDF
