园区网数据中心整体解决方案的设计与部署

发布时间：2018-07-21 10:52

【摘要】：随着高校信息化建设的发展,数据中心需要部署运行的业务信息系统越来越多,校园网用户在教学、科研、生活等方面对各种信息化服务的依赖性也越来越高。数据中心面临着基础网络架构可靠性不足,基础设施资源管理困难以及缺乏远程接入安全性等问题。如何解决数据中心当前面临的这些关键问题成为校园网信息化建设的重要内容。本文在分析研究校园网数据中心当前面临的主要问题,了解相关技术领域的国内外研究现状的基础上,明确了下一步数据中心建设过程中的主要需求。通过对OpenStack框架的关键组件进行研究,提出基于OpenStack的私有云平台构建方案,实现对数据中心资源的统一管理,提高了数据中心资源利用效率。通过升级数据中心网络冗余架构,为数据中心运行的各项服务提供更加可靠稳定的网络基础服务;设置多出口冗余网络,使得校园网用户可以通过多种方式访问网络资源,增强出口网络可靠性;并提出了基于前置机架构的服务资源访问方式,缓解公网IP地址资源紧缺的情况。提出基于高校园区网用户类型、资源访问需求等特点以及数据中心服务安全敏感度的基础上,制定园区网用户对数据中心访问策略的方案。依托高校多园区安全互联以及远程接入需求,针对高校主校区和子校区之间的网络互联、移动办公人员对主校区的远程接入以及主校区与高校合作伙伴的安全互联方式进行研究,综合应用了IPSec VPN、L2TP over IPSec VPN以及防火墙技术等,提出了数据中心远程接入方案,提高了数据中心访问的安全性,增强了园区网络外的用户在远程接入园区网后的资源访问体验。此数据中心整体解决方案不仅解决了传统数据中心当前面临的关键问题,并且具备良好的扩展能力,能够很好的适应后续较长一段时间信息化建设发展的需要。方案的成功实施可以为其他高校以及企业园区网数据中心建设提供有效的参考途径。
[Abstract]:With the development of information construction in colleges and universities, more and more business information systems need to be deployed in the data center, and the users of campus network depend more and more on various information services in teaching, scientific research, life and so on. The data center is faced with some problems, such as the reliability of the basic network architecture, the difficulty of infrastructure resource management and the lack of remote access security. How to solve these key problems of data center becomes an important content of campus network information construction. Based on the analysis of the main problems faced by the campus network data center and the understanding of the current research situation at home and abroad in the related technical fields, this paper clarifies the main requirements of the next step in the construction of the data center. Based on the research of the key components of OpenStack framework, a private cloud platform based on OpenStack is proposed to realize the unified management of data center resources and improve the efficiency of data center resource utilization. By upgrading the network redundancy architecture of the data center, it can provide more reliable and stable network basic services for the various services running in the data center, and set up redundant network with multiple exits to enable campus network users to access network resources in many ways. In order to alleviate the shortage of IP address resource in public network, the access mode of service resources based on preprocessor architecture is proposed to enhance the reliability of exit network. Based on the characteristics of campus network user types, resource access requirements and the security sensitivity of data center services, a scheme for campus network users to access the data center is proposed. Depending on the security interconnection and remote access demand of multi-campus in colleges and universities, aiming at the network interconnection between the main campus and the sub-campus of colleges and universities, The mobile office staff studied the remote access of the main campus and the secure interconnection between the main campus and the university partners, and comprehensively applied IPSec VPNU L2TP over IPSec VPN and firewall technology, and put forward the remote access scheme of the data center. The security of data center access is improved and the resource access experience of users outside the campus network is enhanced after remote access to the campus network. The whole solution of the data center not only solves the key problems that the traditional data center faces at present, but also has the good expansion ability, which can meet the needs of the information construction and development for a long period of time. The successful implementation of the scheme can provide an effective reference for the construction of data centers in other universities and enterprises.
【学位授予单位】：济南大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.18;TP308

【参考文献】