In ancient times, there was a Jixia School Palace, and now there is a cloud university
Technology allows knowledge to transcend time and space
In the wave of transformation and upgrading of education informatization
Topsec provides customers with a safe, stable, intelligent and convenient cloud
Assist Jiangxi Tellhow Animation Vocational College to cultivate professional talents
Take Chinese animation to the next level
Jiangxi Tellhow Animation Vocational College is a higher education institution that cultivates professional talents in animation and animation, art and design across the country. In recent years, the university has adhered to the integration of industry and education, innovative development, and used advanced technologies such as cloud computing, big data, Internet of Things, and AI to empower education and teaching, and strived to improve the quality of education and the level of running schools, and strived to become an influential and exemplary application-oriented university in China. With the rapid expansion of the school, the original IT infrastructure can no longer meet the current business needs and future development goals, and it is urgent to realize digital transformation and upgrading through new technologies.
Part 01
The problem is beginning to appear, and IT construction cannot keep up with business development
With the country paying more and more attention to the training of professional technical talents, the number of students and faculty members in the school has grown rapidly, the scale of the business system has been expanding, and the number of concurrent visits has increased sharply.
Frequent service failures
The rapidly growing data volume and new business applications consume a large amount of resources, and the resource utilization rate of existing platforms exceeds 75%, and the virtual machine HA failure has occurred many times, resulting in business downtime.
It is difficult to upgrade and expand
In order to solve the problem of resource shortage, the existing platform needs to be upgraded and expanded, but the underlying code of the products in use cannot be upgraded and expanded due to the change of technical routes.
Lack of security protection in the cloud
It is difficult for traditional network security hardware to penetrate deep into the cloud for protection, the security protection effect is weak, and the use of drainage mode has a great impact on performance, and the security construction in the cloud has become the key to security upgrade.
Part 02
Precise breakthrough, a flexible and scalable cloud
After many on-site exchanges and field investigations, Topsec provides customers with a cloud platform that can imperceptibly expand and upgrade, deeply integrate security capabilities, and support smooth evolution to hybrid cloud based on hyper-convergence, and seamlessly migrate all businesses on the original platform to the new cloud platform, which fully matches the school's business development plan and plays an important role on the road of education innovation.
Platform network architecture design
The network layer of the hyper-converged platform architecture is designed as a service network, a storage network, and a management network, and the three network planes perform their respective duties without interfering with each other, and the failure of any one network does not affect the work of other networks. In addition to the isolation of the architecture design, each network uses two physical network ports to achieve a highly reliable design in an aggregated manner, so that services can continue to run stably even in the event of loose modules or network cable failures.
Design for business reliability
Adjust the priority of the virtual machines hosting core applications to high, and enable the UPS linkage switch to ensure the stability of key services in the event of an emergency, and adopt the "three replicas + aggregate distribution" mode to improve reliability and performance. The priority of non-core application VMs can be adjusted to medium and low, and the storage volume adopts the dual-copy mode to achieve dual guarantee of disk space utilization and reliability. If you enable scheduled backup and CDP on VMs, you can restore data even if a ransomware virus occurs.
Business performance design
The new generation of multi-core CPU can carry more business systems under the same conditions, which is more suitable for university business scenarios. In terms of storage, the "SSD+HDD" hybrid deployment mode is selected, and high-performance solid-state drives are used to accelerate data cache, and data is stored through large-capacity mechanical disks, effectively balancing performance and cost. In terms of network, the storage network and service network adopt a full 10 Gigabit redundancy design to ensure network stability and reliability. Deploy virtual load balancing NEs on the cloud platform to cope with high-concurrency scenarios such as course selection peaks and improve performance.
Business security design
Through the repair of vulnerabilities in the underlying system of the product, security reinforcement, and detailed control of access rights, the security of the cloud platform itself is effectively guaranteed. The hyper-converged full-link encryption capability can ensure that hard disk data is protected from theft, effectively supporting data security construction. Deploy virtual firewalls and refine policy configurations to protect the network security of school business applications.
Part 03
Time precipitation, the effect of the cloud platform is beginning to appear
At present, the newly built cloud platform has carried more than 50 business applications, providing 7*24 hours of service for 12,000+ teachers and students in school, and has been integrated into daily life such as online teaching, book borrowing and returning, face recognition, access control management, etc., providing a safe and stable cloud foundation for the school to cultivate professional talents.
It is worth mentioning that the efficient use of resources by the cloud platform reduces the cost of construction and expansion by more than 35%, and the built-in backup capability eliminates the cost of purchasing backup software. The in-depth optimization of storage by hyper-convergence improves storage performance by more than 20% compared with the previous one, which can effectively support high-concurrency scenarios. After the security NE is successfully deployed, 100+ alarms have been detected and 20+ network attacks have been prevented, effectively ensuring the normal operation of services.
The essential significance of education informatization and digital transformation and upgrading is to improve the quality of education, promote educational equity, cultivate innovative talents, and promote educational reform. In the face of the opportunities and challenges brought about by the wave of digital transformation, Topsec is willing to work together with customers to build a solid line of defense for campus network security and contribute to the high-quality development of education in the future.