SONA – 數(shù)據(jù)中心的發(fā)展之路及云南省電子政務(wù)信息平臺建設(shè)思路

SONA–

數(shù)據(jù)中心的發(fā)展之路傳統(tǒng)的數(shù)據(jù)中心的問題應(yīng)用系統(tǒng)及服務(wù)通訊的應(yīng)用計(jì)算的基礎(chǔ)架構(gòu)網(wǎng)絡(luò)基礎(chǔ)架構(gòu)基礎(chǔ)設(shè)施(電力,冷卻,

布線,及物理安全)存儲的基礎(chǔ)架構(gòu)EnterpriseDataCenterInternetDataCenterPublicWebSite100sofServerswithIntegratedStorageE-CommerceApplication4-TierApplication

App.ServerInternetDataCenterSupply-ChainManagementTraditionalVoicePBXIn-HouseDevelopedApps2-TierCRMApplicationNCRDBServerDataWarehousingFinance,HR,PayrollandEDIMainframeSystemsTapeBackupMultiple2-TierERPInstancesEngineeringServicesNASFilersE-MailE-MailAppliancesIPServicesDNSRADIUSLDAPJBODOperationsCenter現(xiàn)有的基礎(chǔ)架構(gòu)缺乏靈活性不足的恢復(fù)能力費(fèi)用高昂不一致的安全策略不一致的業(yè)務(wù)永續(xù)/容災(zāi)計(jì)劃資源利用率不足運(yùn)維復(fù)雜,低效隔離的應(yīng)用環(huán)境僵化隔離的基礎(chǔ)架構(gòu)數(shù)據(jù)中心基礎(chǔ)架構(gòu)的發(fā)展路徑

三個(gè)階段性步驟自動化存儲資源網(wǎng)絡(luò)資源計(jì)算資源DynamicProvisioningandInformationLifecycleManagement(ILM)toEnableBusinessAgilityBusinessPoliciesOn-DemandServiceOriented虛擬化存儲資源網(wǎng)絡(luò)資源計(jì)算資源應(yīng)用系統(tǒng)ManagementofResourcesIndependentofUnderlyingPhysicalInfrastructuretoIncreaseUtilization,EfficiencyandFlexibility數(shù)據(jù)網(wǎng)絡(luò)服務(wù)器

互連網(wǎng)絡(luò)CentralizationandStandardizationto

LowerCosts,ImproveEfficiencyandUptime整合LANWANMAN存儲網(wǎng)絡(luò)存儲

網(wǎng)絡(luò)

智能化信息網(wǎng)絡(luò)

(IIN)HPC集群網(wǎng)格InstantMessagingUnifiedMessagingMeetingPlaceIPCCIPPhoneVideoDeliveryPLMCRMERPHCMProcurementSCM協(xié)作應(yīng)用系統(tǒng)傳統(tǒng)的架構(gòu)/面向服務(wù)的架構(gòu)業(yè)務(wù)應(yīng)用系統(tǒng)基礎(chǔ)架構(gòu)層計(jì)算網(wǎng)絡(luò)存儲網(wǎng)絡(luò)服務(wù)器陣列服務(wù)器交換存儲交換數(shù)據(jù)中心互連MDSFamilySFSFamilyCatalystFamilyONSFamilyDirectorFabricModularRackBladeInfinibandSwitchingDWDM,SONET,SDH,FCIP計(jì)算資源網(wǎng)絡(luò)虛擬化服務(wù)存儲資源外圍設(shè)備DataCenterBranchCampusTeleworkerWAN/MANEnterpriseEdge

網(wǎng)絡(luò)平臺思科數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)的框架交互服務(wù)層基礎(chǔ)架構(gòu)管理服務(wù)管理先進(jìn)的分析和決策支持基礎(chǔ)架構(gòu)的增強(qiáng)服務(wù)計(jì)算服務(wù)存儲交換服務(wù)安全服務(wù)應(yīng)用網(wǎng)絡(luò)化服務(wù)Virtualization,Replication,

VirtualFabricsRDMA,

LowLatencyClusteringFirewalls,IntrusionProtection,

SecurityAgents應(yīng)用加速服務(wù)WAAS,AppAcceleration,

Optimization,SecurityandServerOffload可適應(yīng)的管理服務(wù)網(wǎng)絡(luò)基礎(chǔ)架構(gòu)虛擬化服務(wù)虛擬化應(yīng)用網(wǎng)絡(luò)化服務(wù)基礎(chǔ)架構(gòu)的增強(qiáng)服務(wù)數(shù)據(jù)中心里的安全服務(wù)Storage&TapeArraysAVSWAASApplicationNetwork

ServicesMDS9500BranchWAN,VPN,InternetCatalyst6500VirtualFirewallsProvidesIsolationandControlsAccessHostProtection–CiscoSecurityManagerVSANsforStorageIsolationDDOSGuardProtectionApplication-LayerSecurityIntrusionProtectionPreventOutbreakPropagationFCSecurityProtocolforAuthenticatingAccess系統(tǒng)管理員安裝新的服務(wù)器安裝O/S,

補(bǔ)丁及應(yīng)用系統(tǒng)網(wǎng)絡(luò)管理員連接以太網(wǎng),配置VLAN及端口的相關(guān)設(shè)置負(fù)載均衡管理員把新的服務(wù)器加入到服務(wù)器群組中安全管理員檢查安全策略,增加防火墻的可通過的端口地址網(wǎng)絡(luò)管理員確保訪問路由指向新的服務(wù)器存儲管理員配置LUN,映射至服務(wù)器存儲管理員規(guī)劃磁盤卷及相關(guān)資源假設(shè)我們需要增加一臺服務(wù)器到Web服務(wù)器群組…Thechallengeisoneof‘coordinationdelays’.Thistypeofsimplescale-outofanexistingserveoftentakesenterprises90-days.Newserviceturn-ups,aftertheapplicationhasbeendeveloped,oftentake180+days.VFrameisdesignedtoeliminatethesedelaysandautomatetheprovisioningofservices今天:需要部署一個(gè)企業(yè)的服務(wù)VFrame可控制服務(wù)器啟動并連接到對應(yīng)的LUN/映象VFrame配置端口,VLAN,及交換策略VFrame增加服務(wù)器到負(fù)載均衡的群組中VFrame在防火墻服務(wù)模塊上配置虛擬防火墻VFrame規(guī)劃可路由的子網(wǎng)地址VFrame獲取對應(yīng)的LUN及WWN

名稱VFrame獲取可用的存儲卷及啟動的映象文件第三方資源規(guī)劃的應(yīng)用VFrame提供企業(yè)服務(wù)的資源規(guī)劃(Provisioning)未來的服務(wù)器資源規(guī)劃的實(shí)現(xiàn)VFrameProvisioning60+%服務(wù)器利用率~30%服務(wù)器數(shù)量減少BranchOffice分支架構(gòu)文件服務(wù)器的膨脹

解決方案:廣域應(yīng)用加速服務(wù)FileStorageintheDataCenterWAN/VPNNetworkLocalFile&PrintServerFileStorageDistributedCoreFileEngineTapeArraysFilesStorageArraysFilesNetworkAttachedStorageFilersFilesLANSpeedsforRemoteFilesFilesAdministratorAdministrator更低的成本Consolidatefilesonscalable,centralizedNASCentralizefileadministration增強(qiáng)的靈活性DynamicprovisioningofadditionalstorageUniversalauthorizedaccesstoinformation增強(qiáng)的恢復(fù)能力Consistent,compliantsecurityandbusinesscontinuance,backupbestpracticesRemoteUsers網(wǎng)站應(yīng)用的性能保證

解決方案:應(yīng)用加速服務(wù)WAN/VPNNetworkAPPSARETOOSLOW!RemoteBranchTelecommuterDataCenter2x-5xFasterApplicationDelivery!增強(qiáng)的性能DramaticallyreducestheamountofinformationsenttotheclientfromthecentralsiteDynamicallyCaches,TransformsContent,CompressesContent,andSecurestheWebWithFull-ProxyFunctionalityReduceslatencyandimprovesresponsivenessbyhandlingallredirectionsAVS-3100業(yè)務(wù)連續(xù)及規(guī)章要求

解決方案:增強(qiáng)的業(yè)務(wù)連續(xù)方案MDS

9500DWDM

NetworkSONET/SDHIPWANMetro/Wide

DataCenter

Interconnect

NetworkONS

155X0

154xxONS

154547X00

Storage&

TapeArraysBladeServersUNIX/NTServers

Mainframes13MDS

9500Storage&

TapeArraysBladeServersUNIX/NTServers

MainframesAccessNetwork廣泛的應(yīng)用支持Asynch/SynchReplication,Backup,PointinTimeCopyMulti-vendorSupport:EMC,HP,HDS,IBM,Appliances3rdPartyApplianceSupport:SANTapNetworkAssistedServerlessBackup連續(xù)訪問GlobalSiteSelectorVPN–IPSec,SSL,MPLSOptimizedExitRouting優(yōu)化的SAN擴(kuò)展Multi-protocolTransport:FCIP,DWDM,Sonet/SDHDistance/ApplicationOptimization:WriteandTapeAccelerationSecurity:FCIPEncryptionandFC-SPAuthWANUtilization:CompressionandLargeB2BCreditsAvailability:VSANsandInterVSANRouting層次ServerVirtualizationVRemoteDMAServicesVirtualI/OClusteringServicesComputeFabricServicesFabricGatewayServices服務(wù)器集群總結(jié)HPC/網(wǎng)格存儲/磁帶區(qū)域核心層匯聚層接入層邊緣層核心層FirewallServicesIntrusionDetectionVPNTerminationDOSProtectionAnomalyDetectionContentCachingSSLOffloadingServerBalancingFileCachingAONAnalysisAppAccelerationFabricRoutingServicesDataReplicationSvcsStorageVirtualizationFabricGatewayServicesVirtualFabrics(VSANs)NetworkAnalysisQoSIPMcIGPsSTPMPLSVLANsDoSGREVRFIPSecHSRPPVLANsVRRPGLBPIGPsABScalingEthernetModuleCiscoCatalystLayer2Switch10GigabitEthernetGigabitEthernetCiscoCatalyst6500MultilayerSwitchCiscoCatalystLayer3SwitchInfinibandCisco3000SeriesFabricServerSwitchCisco7000SeriesFabricServerSwitchVirtualServerLinkVirtualServersFibreChannelCiscoMDS9500MultilayerDirectorFibreChannelTrunkARedundantSANFabric電子政務(wù)網(wǎng)公安內(nèi)網(wǎng)安全控制及監(jiān)控追溯部門數(shù)據(jù)交換邊界接入平臺公安數(shù)據(jù)交換雙向數(shù)據(jù)流轉(zhuǎn)政府部門業(yè)務(wù)數(shù)據(jù)電子政務(wù)網(wǎng)前置代理服務(wù)邊界接入平臺應(yīng)用服務(wù)授權(quán)安全訪問數(shù)字身份認(rèn)證查詢?nèi)肭謾z測授權(quán)認(rèn)證審計(jì)追溯專題共享數(shù)據(jù)庫教育、計(jì)生委、人力資源、民政、國土數(shù)據(jù)交換通道授權(quán)查詢通道派出所信息采集為各級政府部門提供5千個(gè)授權(quán)查詢用戶公安內(nèi)部用戶農(nóng)轉(zhuǎn)城、常住人口、流動人口、出租房等數(shù)據(jù)一、共享平臺功能介紹——共享平臺網(wǎng)絡(luò)環(huán)境二、共享平臺功能介紹——農(nóng)轉(zhuǎn)城轉(zhuǎn)戶統(tǒng)計(jì)二、共享平臺功能介紹——數(shù)據(jù)導(dǎo)出二、共享平臺功能介紹——數(shù)據(jù)使用填報(bào)共享平臺各成員單位辦理各項(xiàng)權(quán)益事務(wù)需求單位業(yè)務(wù)要求業(yè)務(wù)