SONA – 數(shù)據(jù)中心的發(fā)展之路及云南省電子政務信息平臺建設思路

SONA–

數(shù)據(jù)中心的發(fā)展之路傳統(tǒng)的數(shù)據(jù)中心的問題應用系統(tǒng)及服務通訊的應用計算的基礎架構(gòu)網(wǎng)絡基礎架構(gòu)基礎設施(電力,冷卻,

布線,及物理安全)存儲的基礎架構(gòu)EnterpriseDataCenterInternetDataCenterPublicWebSite100sofServerswithIntegratedStorageE-CommerceApplication4-TierApplication

App.ServerInternetDataCenterSupply-ChainManagementTraditionalVoicePBXIn-HouseDevelopedApps2-TierCRMApplicationNCRDBServerDataWarehousingFinance,HR,PayrollandEDIMainframeSystemsTapeBackupMultiple2-TierERPInstancesEngineeringServicesNASFilersE-MailE-MailAppliancesIPServicesDNSRADIUSLDAPJBODOperationsCenter現(xiàn)有的基礎架構(gòu)缺乏靈活性不足的恢復能力費用高昂不一致的安全策略不一致的業(yè)務永續(xù)/容災計劃資源利用率不足運維復雜,低效隔離的應用環(huán)境僵化隔離的基礎架構(gòu)數(shù)據(jù)中心基礎架構(gòu)的發(fā)展路徑

三個階段性步驟自動化存儲資源網(wǎng)絡資源計算資源DynamicProvisioningandInformationLifecycleManagement(ILM)toEnableBusinessAgilityBusinessPoliciesOn-DemandServiceOriented虛擬化存儲資源網(wǎng)絡資源計算資源應用系統(tǒng)ManagementofResourcesIndependentofUnderlyingPhysicalInfrastructuretoIncreaseUtilization,EfficiencyandFlexibility數(shù)據(jù)網(wǎng)絡服務器

互連網(wǎng)絡CentralizationandStandardizationto

LowerCosts,ImproveEfficiencyandUptime整合LANWANMAN存儲網(wǎng)絡存儲

網(wǎng)絡

智能化信息網(wǎng)絡

(IIN)HPC集群網(wǎng)格InstantMessagingUnifiedMessagingMeetingPlaceIPCCIPPhoneVideoDeliveryPLMCRMERPHCMProcurementSCM協(xié)作應用系統(tǒng)傳統(tǒng)的架構(gòu)/面向服務的架構(gòu)業(yè)務應用系統(tǒng)基礎架構(gòu)層計算網(wǎng)絡存儲網(wǎng)絡服務器陣列服務器交換存儲交換數(shù)據(jù)中心互連MDSFamilySFSFamilyCatalystFamilyONSFamilyDirectorFabricModularRackBladeInfinibandSwitchingDWDM,SONET,SDH,FCIP計算資源網(wǎng)絡虛擬化服務存儲資源外圍設備DataCenterBranchCampusTeleworkerWAN/MANEnterpriseEdge

網(wǎng)絡平臺思科數(shù)據(jù)中心網(wǎng)絡架構(gòu)的框架交互服務層基礎架構(gòu)管理服務管理先進的分析和決策支持基礎架構(gòu)的增強服務計算服務存儲交換服務安全服務應用網(wǎng)絡化服務Virtualization,Replication,

VirtualFabricsRDMA,

LowLatencyClusteringFirewalls,IntrusionProtection,

SecurityAgents應用加速服務WAAS,AppAcceleration,

Optimization,SecurityandServerOffload可適應的管理服務網(wǎng)絡基礎架構(gòu)虛擬化服務虛擬化應用網(wǎng)絡化服務基礎架構(gòu)的增強服務數(shù)據(jù)中心里的安全服務Storage&TapeArraysAVSWAASApplicationNetwork

ServicesMDS9500BranchWAN,VPN,InternetCatalyst6500VirtualFirewallsProvidesIsolationandControlsAccessHostProtection–CiscoSecurityManagerVSANsforStorageIsolationDDOSGuardProtectionApplication-LayerSecurityIntrusionProtectionPreventOutbreakPropagationFCSecurityProtocolforAuthenticatingAccess系統(tǒng)管理員安裝新的服務器安裝O/S,

補丁及應用系統(tǒng)網(wǎng)絡管理員連接以太網(wǎng),配置VLAN及端口的相關(guān)設置負載均衡管理員把新的服務器加入到服務器群組中安全管理員檢查安全策略,增加防火墻的可通過的端口地址網(wǎng)絡管理員確保訪問路由指向新的服務器存儲管理員配置LUN,映射至服務器存儲管理員規(guī)劃磁盤卷及相關(guān)資源假設我們需要增加一臺服務器到Web服務器群組…Thechallengeisoneof‘coordinationdelays’.Thistypeofsimplescale-outofanexistingserveoftentakesenterprises90-days.Newserviceturn-ups,aftertheapplicationhasbeendeveloped,oftentake180+days.VFrameisdesignedtoeliminatethesedelaysandautomatetheprovisioningofservices今天:需要部署一個企業(yè)的服務VFrame可控制服務器啟動并連接到對應的LUN/映象VFrame配置端口,VLAN,及交換策略VFrame增加服務器到負載均衡的群組中VFrame在防火墻服務模塊上配置虛擬防火墻VFrame規(guī)劃可路由的子網(wǎng)地址VFrame獲取對應的LUN及WWN

名稱VFrame獲取可用的存儲卷及啟動的映象文件第三方資源規(guī)劃的應用VFrame提供企業(yè)服務的資源規(guī)劃(Provisioning)未來的服務器資源規(guī)劃的實現(xiàn)VFrameProvisioning60+%服務器利用率~30%服務器數(shù)量減少BranchOffice分支架構(gòu)文件服務器的膨脹

解決方案:廣域應用加速服務FileStorageintheDataCenterWAN/VPNNetworkLocalFile&PrintServerFileStorageDistributedCoreFileEngineTapeArraysFilesStorageArraysFilesNetworkAttachedStorageFilersFilesLANSpeedsforRemoteFilesFilesAdministratorAdministrator更低的成本Consolidatefilesonscalable,centralizedNASCentralizefileadministration增強的靈活性DynamicprovisioningofadditionalstorageUniversalauthorizedaccesstoinformation增強的恢復能力Consistent,compliantsecurityandbusinesscontinuance,backupbestpracticesRemoteUsers網(wǎng)站應用的性能保證

解決方案:應用加速服務WAN/VPNNetworkAPPSARETOOSLOW!RemoteBranchTelecommuterDataCenter2x-5xFasterApplicationDelivery!增強的性能DramaticallyreducestheamountofinformationsenttotheclientfromthecentralsiteDynamicallyCaches,TransformsContent,CompressesContent,andSecurestheWebWithFull-ProxyFunctionalityReduceslatencyandimprovesresponsivenessbyhandlingallredirectionsAVS-3100業(yè)務連續(xù)及規(guī)章要求

解決方案:增強的業(yè)務連續(xù)方案MDS

9500DWDM

NetworkSONET/SDHIPWANMetro/Wide

DataCenter

Interconnect

NetworkONS

155X0

154xxONS

154547X00

Storage&

TapeArraysBladeServersUNIX/NTServers

Mainframes13MDS

9500Storage&

TapeArraysBladeServersUNIX/NTServers

MainframesAccessNetwork廣泛的應用支持Asynch/SynchReplication,Backup,PointinTimeCopyMulti-vendorSupport:EMC,HP,HDS,IBM,Appliances3rdPartyApplianceSupport:SANTapNetworkAssistedServerlessBackup連續(xù)訪問GlobalSiteSelectorVPN–IPSec,SSL,MPLSOptimizedExitRouting優(yōu)化的SAN擴展Multi-protocolTransport:FCIP,DWDM,Sonet/SDHDistance/ApplicationOptimization:WriteandTapeAccelerationSecurity:FCIPEncryptionandFC-SPAuthWANUtilization:CompressionandLargeB2BCreditsAvailability:VSANsandInterVSANRouting層次ServerVirtualizationVRemoteDMAServicesVirtualI/OClusteringServicesComputeFabricServicesFabricGatewayServices服務器集群總結(jié)HPC/網(wǎng)格存儲/磁帶區(qū)域核心層匯聚層接入層邊緣層核心層FirewallServicesIntrusionDetectionVPNTerminationDOSProtectionAnomalyDetectionContentCachingSSLOffloadingServerBalancingFileCachingAONAnalysisAppAccelerationFabricRoutingServicesDataReplicationSvcsStorageVirtualizationFabricGatewayServicesVirtualFabrics(VSANs)NetworkAnalysisQoSIPMcIGPsSTPMPLSVLANsDoSGREVRFIPSecHSRPPVLANsVRRPGLBPIGPsABScalingEthernetModuleCiscoCatalystLayer2Switch10GigabitEthernetGigabitEthernetCiscoCatalyst6500MultilayerSwitchCiscoCatalystLayer3SwitchInfinibandCisco3000SeriesFabricServerSwitchCisco7000SeriesFabricServerSwitchVirtualServerLinkVirtualServersFibreChannelCiscoMDS9500MultilayerDirectorFibreChannelTrunkARedundantSANFabric電子政務網(wǎng)公安內(nèi)網(wǎng)安全控制及監(jiān)控追溯部門數(shù)據(jù)交換邊界接入平臺公安數(shù)據(jù)交換雙向數(shù)據(jù)流轉(zhuǎn)政府部門業(yè)務數(shù)據(jù)電子政務網(wǎng)前置代理服務邊界接入平臺應用服務授權(quán)安全訪問數(shù)字身份認證查詢?nèi)肭謾z測授權(quán)認證審計追溯專題共享數(shù)據(jù)庫教育、計生委、人力資源、民政、國土數(shù)據(jù)交換通道授權(quán)查詢通道派出所信息采集為各級政府部門提供5千個授權(quán)查詢用戶公安內(nèi)部用戶農(nóng)轉(zhuǎn)城、常住人口、流動人口、出租房等數(shù)據(jù)一、共享平臺功能介紹——共享平臺網(wǎng)絡環(huán)境二、共享平臺功能介紹——農(nóng)轉(zhuǎn)城轉(zhuǎn)戶統(tǒng)計二、共享平臺功能介紹——數(shù)據(jù)導出二、共享平臺功能介紹——數(shù)據(jù)使用填報共享平臺各成員單位辦理各項權(quán)益事務需求單位業(yè)務要求業(yè)務