GPS school time server (Beidou time service equipment) helps government cloud construction
GPS school time server (Beidou time service equipment) helps government affairs cloud construction
GPS school time server (Beidou time service equipment) helps government affairs cloud construction The
construction background is
based on the "National E-Government" 12th Five-Year Plan "Planning" (Zhongbanfa [2006] No. 18), "Anhui Provincial Development and Reform Commission, Anhui Provincial Department of Public Security, Anhui Provincial Department of Finance, Anhui Provincial Department of Finance, Anhui Provincial Bureau of State Secrecy, forwarding the National Development and Reform Commission and other four departments on further strengthening the national e-government network construction and Application Work Notice" (Wanfagai High-tech [2013] No. 410) and other documents, guided by the overall idea of Xuancheng "Smart City" construction, build a government cloud computing center to achieve unified construction, unified management, and unified use. Provide unified computer room space, network resources, storage disaster recovery, security assurance, and operation and maintenance services for the business application systems of smart cities and various departments of the city, realize the intercommunication and sharing of basic information resources, and connect the heterogeneous systems inside and outside the entire government agency from the bottom. , Applications, database resources, etc., to open up the "information islands" between various functional departments to meet social services and management, sharing geographic information platforms, collaborative office, administrative approval and law enforcement, digital city management, and seamless sharing and sharing among other functional departments The need to exchange data, realize the resource sharing of relevant departments, and improve the administrative efficiency of the government.
Goal of government cloud platform construction
: Unified construction of cloud platform resources:
as a unified basic resource platform for e-government, including: network resources, computing resources, storage resources, etc., and basic resources are pooled so that users in various departments and units can be flexible Sharing and distribution on demand.
Building a cloud computing PAAS platform for e-government applications:
As a unified basic resource platform for e-government in the city, it not only needs to provide infrastructure at the IAAS layer, but also can provide certain capabilities for the upper-level e-government applications based on the SOA architecture, including basic Common basic software resources such as databases and middleware and software resources of public components of e-government. All departments and units can not only share PAAS layer resources, but also can simply and quickly develop e-government applications with different functions on the basis of the PAAS platform.
Establish a unified and efficient operation and maintenance management platform:
Establish a unified operation and maintenance management system for the basic resource platform, and conduct unified detection, dynamic scheduling and automatic control management of resources such as computer room infrastructure, IT equipment, virtual machines, databases, and upper-level application software. Simplify the operation and maintenance management process and manual operations, improve the operation and maintenance efficiency of the basic management platform, and reduce the operating cost of the cloud computing platform.
Establish a unified security guarantee system:
In accordance with the national government extranet unified security plan, and with reference to the basic requirements of level protection, establish a unified government extranet security guarantee system, strengthen security management, unified security strategies, and unified standards and regulations to ensure the government extranet cloud The computing platform and government business system operate safely and reliably.
Analysis of management requirements of cloud computing platform for government affairs:
In order to maintain the smooth and efficient operation of various systems and applications of the cloud computing platform, according to the management requirements of the business application for the cloud computing platform described above, the management subsystem of the cloud computing platform should have the following list Management needs.
1. Able to centrally monitor and manage the performance, events and configuration parameters of virtualized environments, cloud computing platforms and physical environments;
2. It can automatically allocate corresponding computing, storage, network and security resources to the corresponding users according to the tenants' self-service or manual instructions from the administrator;
3. Able to provide QOS and SLA guarantee for the resources provided to tenants;
4. Capable of monitoring, alarming and handling accidents on the cloud computing platform itself, the underlying computer room infrastructure and upper-level application systems, with certain automation capabilities;
5. With a unified portal, after the administrator logs in, it can be divided into two different sets of functions on the operation and maintenance side and the operation side, and can decentralize power and domain;
6. It has good scalability, including at least the IT service process management system (ITIL standard) that will be used in the future, the operating lease billing system (or docking with the operator billing system), and the unified management and coordination of multiple computing centers Scheduling capability
7. With a variety of expert knowledge bases and artificial intelligence log and event analysis capabilities, it can generate different types of reports and views according to different customer needs;
8. It has good openness and can provide API (or other) calling interfaces for the upper-level PAAS and business applications of the cloud platform, so that the upper-level platform can automatically call the underlying basic resources.
Analysis of the security requirements of the government cloud computing platform:
The business application of e-government in the scope of this project requires the deployment of a municipal affairs collaborative office system, a municipal government portal website group, an administrative approval and law enforcement platform, and a social service and management information platform. Therefore, this project The focus of the security requirements in the construction process is to focus on the security protection of cloud computing infrastructure and various business application systems on the basis of a comprehensive security assurance system framework, while ensuring the scalability of the security platform in the future.
The overall construction plan of the government cloud computing center The
overall topology of the cloud platform:
Deploy a large two-tier flat environment in the computing center, and the migration of virtual machines in the second-tier environment does not change the IP address. The large two-layer flattening method reduces network complexity, simplifies network topology, and improves forwarding efficiency. In the two-layer network architecture, network virtualization technology is adopted to solve the problem of link loops and improve network reliability. In the access switch, different services or different virtual machines are added to different VLANs for Layer 2 forwarding. The server area uses physical servers for database services, and virtualization services and cloud platforms provide other platform application services. The storage area uses storage virtualization gateways to realize high-end storage storage virtualization, and cooperates with cloud platform software to achieve backup and disaster recovery functions.
Construction effect
1. Repetitive construction can be eliminated and financial expenditure can be saved. The government cloud platform can make full use of existing basic resources and effectively promote the integration of various resources. The platform provides unified resources, security, operation and maintenance and management services for government departments, which can increase the utilization rate of infrastructure and reduce operation and maintenance personnel and operation and maintenance. Expenses to prevent redundant construction and investment waste.
2. It can promote information sharing and realize business collaboration. Through the government cloud platform, an "information bridge" is established between government departments and between government departments and social service departments. Through the internal information drive engine of the platform, information integration, exchange, sharing and government work coordination between different application systems are realized. Greatly improve the overall work efficiency of government agencies at all levels.
3. An information fortress can be built to ensure data security. Through the top-level design, the government cloud platform has formulated a series of safeguard measures in terms of technology, architecture, products, operation and maintenance, management, and systems to ensure the security of applications and data deployed on the platform. In addition, through the establishment of a unified disaster recovery system, to ensure rapid and complete recovery of applications in the event of a disaster.
4. Resource allocation can be optimized and service capabilities can be improved. Through the government cloud platform, government procedures and procedures are more concise and smooth, so that human and information resources can be fully utilized and allocated. At the same time, adopting the intensive mode of government cloud platform to build e-government projects can free government departments from traditional hardware procurement, system integration, operation and maintenance and other tasks, and instead focus more on business sorting and serving the people. Service comes up, greatly improving the ability and level of serving the people.