Finance is an important core of the national economy. Under the complex international environment, with the accelerated pace of digital transformation, my country's financial credit innovation has gradually entered the stage of comprehensive promotion. It is imperative to break the monopoly of foreign giants on China's financial digital infrastructure and software and hardware.
As a technology-driven comprehensive securities group in the first phalanx of China's securities industry, Huatai Securities has always been at the forefront of technology-driven digital transformation in the securities industry. Started the infrastructure construction of Xinchuang earlier in the industry to realize the localized replacement of core components. With the development and construction of Xinchuang cloud environment, building a unified, self-service and standardized operation management platform centered on cloud management has become the top priority.
This article will take the construction of Huatai Securities Xinchuang cloud management platform as an example to discuss the best practice of Xinchuang cloud management platform construction in the securities industry.
Xinchuang development, ushered in new resource operation and management challenges
Huatai Securities firstly sorted out and analyzed the status quo of its own infrastructure such as virtualization, storage, and physical servers. The main problems to be solved are as follows:
Difficulty 1: It is difficult to manage the basic resources of Xinchuang
For Huatai Securities, which is in the first phalanx of the securities industry, the construction of Xinchuang infrastructure is a must. However, for a market-oriented institution such as a securities company, its business structure is both sophisticated and complex, and the infrastructure construction of Xinchuang is very complex.
Therefore, whether the Xinchuang cloud management platform can run on a single track in the Xinchuang environment, including the Xinchuang server, the Xinchuang operating system, the Xinchuang database and the Xinchuang middleware, to realize the transformation of the basic components and the business layer of the Xinchuang, and realize the change of the rules. The first goal of the construction of the Xinchuang cloud management platform is to change the production and implementation of the Xinchuang environment that is truly tested and used.
This puts forward higher requirements for the performance, ecology, stability and adaptability of the Xinchuang cloud management platform compatible with Xinchuang infrastructure.
Difficulty 2: It is difficult to quickly deliver cloud network resources
Huatai Securities has a huge amount of applications for cloud and network resources, and involves multiple management processes. For example, developers and testers need to fill in the relevant resource application form on the IT management system. After the approval of the layer-by-layer process, the resources are manually issued to the resource users manually, which makes the online resource application process take a long time. Cloud and network resource management is highly dependent on manual work, which greatly consumes human resources.
Therefore, one of the key points of this construction is how to implement the IT management system and self-service delivery of resources. This requires the Xinchuang cloud management platform to have the platform capabilities of unified application, one-stop delivery, automatic implementation and unified operation.
In addition, it can comprehensively manage the Xinchuang cloud environment, build a management, operation and maintenance and use experience consistent with mainstream commercial cloud platforms through business abstraction, and liberate business departments from the tedious operation and maintenance of infrastructure resources through standardized resource services. out to focus more on business innovation.
Difficulty 3: Multi-cloud resource management is difficult
Huatai Securities currently has a variety of cloud resources, covering multiple platforms such as Vmware, AWS, and Azure. When performing operation and maintenance work, it needs to log in to the corresponding platform for operation and management. The workload of operation and maintenance is large and the work is prone to errors. With the continuous increase in the types of cloud resources in the later period, the old management method is unsustainable.
Therefore, how to seamlessly integrate various types of cloud resources and realize the localization of core components, the Xinchuang cloud network management platform centrally manages the cloud network resources of the infrastructure center, including traditional VMware, public cloud, Xinchuang cloud resources, network, Storage resources, etc., to quickly manage the stock resources to ensure the continuous operation of the business, and to build a cloud management platform based on the daily work habits of IT operation and maintenance are the top priorities of this project.
The specific construction plan of Xinchuang cloud management platform
The Huatai Securities Xinchuang cloud management platform implemented by Boyun this time is Huatai Securities, in the process of building the group's digital platform system, to promote the integration of cloud and network, and to build a group-level unified management platform for cloud and network integration. The Xinchuang cloud management platform is positioned as the overall support for Huatai Securities Group's "one network and four clouds" technology strategic goal , and will serve as one of the core competency systems of the technology management system in the future.
The key construction plan of Xinchuang cloud management platform is as follows:
First, help Huatai Securities to achieve unified management of infrastructure, including the existing VMware environment, other planned private clouds, public clouds, and planned SDN networks.
Second, with the help of Xinchuang cloud management platform to realize the transformation of the existing operation mode, connect with the IT management system, solve the problems of manual delivery and low resource utilization in the traditional mode, and help the IT department to change from a "management"-based model to a Transformation to a "service"-based model.
Third, the Xinchuang cloud management platform needs to have the ability to support software SDN and hardware SDN. Through the control of the network, it can realize automatic IP allocation of administrators, daily network management of administrators, security management of administrators, and automatic network application of ordinary users. .
The content and main functions of the specific construction plan of the Xinchuang cloud management platform are as follows:
1. Realize the management of basic resources of Xinchuang
Through the Xinchuang cloud management platform, the computing resources, storage resources, network resources and security resources built by different manufacturers and different technical architectures used in the resource center are centrally managed and automatically implemented. Establish a unified management and control portal for heterogeneous resources, realize unified scheduling of global resources, and improve delivery efficiency.
Comprehensively manage the Xinchuang cloud environment, and build a management, operation and maintenance and use experience consistent with other existing cloud platforms through business abstraction, which greatly facilitates administrators to manage resources in a unified manner from a business perspective and improve management efficiency.
2. Get through the integrated delivery of cloud network security services
Integrated delivery is to provide users with an integrated service entry. Realize the integration of cloud network security resource application, approval, and delivery processes. Shorten the resource delivery cycle and improve the overall delivery efficiency of infrastructure resources. Improve the efficiency of resource application and use of business users and reduce the cost of resource use. It is connected with the original IT management system of Huatai Securities. Users apply for resources in the IT management system. After being approved by the IT management system, the cloud management platform automatically creates resources and delivers them to users.
The original approval process is retained. On the premise of not changing the user's usage habits, users can apply for resources by themselves; the self-service application of resources can track the whole process of users, which improves the user service experience; automates the delivery of resources and improves the service quality.
3. Realize the adaptation of Xinchuang environment
The platform runs in the Xinchuang environment, including the Xinchuang server, the Xinchuang operating system, the Xinchuang database and the Xinchuang middleware.
Through the cloud management platform running in the Xinchuang environment, the Xinchuang cloud management platform that realizes the localization of core components centrally manages the cloud network resources of the infrastructure center, including traditional VMware, public cloud, Xinchuang cloud resources, network, storage resources, etc. .
4. Intelligent operation of infrastructure resources
Intelligent operation is to establish a set of intelligent cost and energy efficiency management and optimization system. Realize automatic and intelligent resource scheduling optimization and provide multi-dimensional operation analysis reports. Provide administrators with operation management tools from a global resource perspective, provide business users with operation management tools and resource optimization strategies from a specific business perspective, continuously improve resource utilization efficiency, and provide performance analysis and data statistics for different dimensions.
Best Practices of Xinchuang Cloud Management Platform in Securities Industry
Huatai Securities Xinchuang cloud management platform has managed 25000+ VC virtual machines, 3000+ physical machines , 2000+ EC2 of AWS, and 1000+ ECS of Alibaba Cloud . In addition, it includes multiple cloud network environments, such as development and testing cloud, core business cloud, collaborative office cloud, and financial private network.
At the same time, the platform has built a comprehensive service catalog including virtualization, storage, physical servers, and three-party system services. Users can use the cloud management platform to apply for resources by themselves, and to manage the life cycle of resources to achieve integration with AD, ITSM, monitoring platforms, The log platform, network management platform and other existing systems are deeply connected, and the original management platform is gradually replaced without changing the existing process.
The Xinchuang cloud management platform also realizes the centralized and unified management of Xinchuang's basic resources left and right by the infrastructure center. At present, the daily work orders of Huatai Securities Xinchuang cloud management platform are as many as 200+. Through the construction of Xinchuang cloud management platform, the existing work is standardized, standardized and automated, reducing manual repetitive labor and releasing administrator labor.
In general, combined with the development needs of the securities industry and the development direction of the "Xinchuang cloud management platform" in the securities industry, the Huatai Securities Xinchuang cloud management platform covers modules such as multi-cloud unified management, unified monitoring and energy efficiency analysis. The unified management of Xinchuang's infrastructure resources, and at the same time, it is connected with multiple external systems such as IT management system and AD. On this basis, intelligent operation and maintenance, refined operation, and convenient service application are realized.
The development of Xinchuang in the securities industry is one of the keys to the development of my country's financial Xinchuang. Huatai Securities, as the leading representative institution in the securities industry, the construction of the Xinchuang cloud management platform will play a role in the promotion of Xinchuang in domestic securities and other financial institutions. Benchmarking role.
Huatai Securities will also continue to promote the construction of "one network and four clouds" in the future. As the only cloud management product and solution provider for the construction of its Xinchuang cloud management platform, Boyun will continue to help Huatai Securities achieve its strategic goals.