SAFE-SiM BAA Appendix A--GFE.docx

Broad Agency Announcement Secure Advanced Framework for Simulation and Modeling (SAFE-SiM) DARPA Adaptive Capabilities Office (ACO)

HR001120S0007

16 January 2020 Appendix A—Government Furnished Equipment (GFE)

APPENDIX A

GOVERNMENT FURNISHED EQUIPMENT

Pennsylvania State University Applied Research Laboratory (ARL) 1850 Centennial Park Dr.

Suite 300 Reston, VA 20191

Modeling and Simulation Integrated Environment (MSIE)

A. Facility (see floorplan below)

a. Dedicated use

i. 1,800 ft2 integration laboratory

1. System-high classification

2. 14 total dedicated seated positions with Secure (SCI) phones

3. 38 total work stations (18 high-end) for simulation development and execution across a KVM fabric

a. Access to necessary networks and domains

4. Small conference table seating 8-10 people

5. 16’ x 4’ LED display wall for demonstrations / reviews

6. Limited non-secure commercial phones

ii. 3 additional separate rooms

1. Configurable classification

2. 2 work stations in each room

b. Non-dedicated use

i. Large secure conference room

1. TS/SCI, 30-person, VTC

ii. Small team room

1. TS/SCI, 8-person, VTC

iii. Innovation center

1. TS/SCI, mission planning area, training area, large A/V displays

B. Computing resources

a. Program-high compute environment

i. 3072 compute cores via AMD EPYC™ 7702 64-bit processors

1. Optimized for 8GB per core of RAM

ii. 100 Gbps Ethernet networking

iii. System-high storage

1. 0.5 PB SSD storage

2. 1 PB HDD storage

b. Individual secure networks

i. 300 cores per network via AMD EPYC™ 7702 64-bit processors

1. Optimized for 8GB per core of RAM

ii. 100 Gbps Ethernet networking

iii. 16 TB of storage

c. Configuration and development workstations accessed in the integration lab at Reston, VA

i. Scheduled access

1. 16 x Configuration Support nodes

a. Intel Processor i7 2.8GHz, 3.9GHz Turbo, 2 Cores

b. Intel HD Graphics 620 (onboard)

c. 8GB RAM

d. 128GB SSD

e. Windows 10/ CentOS 7 Linux

2. 14x Single GPU Workstations

a. Dual Intel Xeon Gold 5217 3.0GHz, 3.7GHz Turbo, 8 cores

b. Nvidia Quadro P6000s, 24GB, 4DPs

c. 192GB RAM

d. 3x 480GB SATA Enterprise Class SSDs

e. Windows 10/ CentOS 7 Linux

3. 8x Dual GPU Workstations

a. Dual Intel Xeon Gold 5217 3.0GHz, 3.7GHz Turbo, 8 Cores

b. Dual Nvidia Quadro P6000s, 24GB, 4DPs

c. 192GB RAM

d. 3x 480GB SATA Enterprise Class SSDs

e. Windows 10/ CentOS 7 Linux

C. Continuous Integration/Continuous Deployment (CI/CD) Environment

a. DI2E Environment (if accessible)

i. Jenkins/Artifactory CI/CD integration environment

1. Goal is Automatic Build, Test, Code Quality, Static Application Security Testing (SAST), License Compliance, Dependency Scanning, Review Apps, Dynamic Application Security Testing (DAST), Deploy, Browser Performance Testing, Monitoring

ii. Docker

iii. DISA STIG’ed Container Platform

1. Red Hat Hardened UBI

2. DSOP approved images where possible

iv. Kubernetes

1. Service Mesh (as appropriate for the workload)

a. Possible options include

i. Istio

ii. Consul

iii. linkerd

b. On-Premise Cloud Environment

i. Jenkins/Artifactory CI/CD integration environment

1. Goal is Automatic Build, Test, Code Quality, Static Application Security Testing (SAST), License Compliance, Dependency Scanning, Review Apps, Dynamic Application Security Testing (DAST), Deploy, Browser Performance Testing, Monitoring

2. DevSecOps tools

a. Packer (image creation and maintenance)

b. Vagrant for developer specific working environments.

c. Puppet

d. Ansible

e. Foreman

f. Vault

g. Etcd

ii. Docker

1. Red Hat Hardened UBI

2. DSOP approved images where possible

iii. DISA STIG’ed Container Platform

1. Red Hat Hardened UBI

2. DSOP approved images where possible

iv. Kubernetes

1. Service Mesh (as appropriate for the workload)

a. Possible options include

i. Istio

ii. Consul

iii. Linkerd

v. OpenStack distribution, delivered via the Kolla project, and based on the Stein release.

1. Updates and changes to the base release are anticipated based on interactions with hardware, updates, and security vulnerabilities.

2. Openstack instance images based on the approved / hardened CentOS baselines

3. Storage for the cloud environment based around Cinder block storage, NFS, and Ceph

vi. SELinux enforcement required for MLS sensitive workloads

D. MSIE Support

a. MSIE-CF Team best effort support as needed

i. Program Manager

ii. Scheduler

iii. Technical representatives for IT, software, & hardware

iv. Physical security

b. Facility access

i. M-F 0800-1700 EST with best effort support otherwise

c. Short-term co-location work space for performer staff as needed for transition and integration activities

d. Compute environment allocation and fair scheduling across the life of the program

e. Fix/repair troubleshooting

i. M-F 0800-1700 EST with best effort support otherwise

f. Echelon one (1) support for running simulations on behalf of performer in support and at the direction of the sponsor image1.png