FITS (Future Internet Testbed with Security) version 2.0 provides a testbed infrastructure for network experimentation based on two different virtualization approaches, Xen and OpenFlow. Users can run their experiments in different network environments in order to compare the results or choose the more suitable one for their new protocols and mechanisms. Currently, most of the Future Internet testbeds in use or under development offer to users slices where they are able to perform large-scale experiments, monitor these experiments, and collect the results. FITS team is now developing new advanced features that will improve this basic service by offering facilities such us:

• multiple points of measurement
• security- oriented testbed operation

FITS Architecture

FITS creates an environment of experimentation, measurements, and performance evaluation geographically distributed among 14 universities. In Brazil, we have 11 universities participating in FITS:

• UFRJ (two research groups)
• UFF
• Unicamp
• UFES
• UFSC
• UFRGS
• UECE
• UFSCar
• UFPE
• UFAM
• UERJ

In Europe, we have currently 3 participating universities:

• University of Lisboa (Portugal)
• UPMC Sorbonne Universit ́s (France)
• TUM (Germany)

Each institution has its own set of nodes with local policies to run experiments. This local set of nodes is an island. FITS interconnects these islands via Virtual Private Network (VPN) connections and Generic Routing Encapsulation (GRE) tunnels to emulate layer-2 links over the Internet, as depicted in Figure 1.

Figure 1: FITS autonomous island interconnection architecture

FITS has three kinds of nodes: manager, gateway, and operational nodes as illustrated in Figure '. The operational node is the one that effectively hosts the experiments. The gateway is a special node that interconnects two testbed islands. The manager coordinates the testbed, i.e., it authenticates users and nodes, allocates network and nodes resources, and collects measurements acquired by sensors running within network elements.