Background

The Ministry of Ecology and Environment (MEE) takes improving environmental quality as its core, unifies infrastructure, centrally manages data resources, promotes system integration and interconnection and open data sharing, advances business collaboration, and improves institutional standards and data-security systems. It has built a big-data application platform, a management platform, and an environmental-protection cloud architecture, making comprehensive ecological-environment decision-making more scientific, supervision more precise, and public services more convenient.

Scope of Work

Work includes building a unified ministry-level cloud platform, transforming the network system, building an information-security assurance system, and coordinating and integrating environmental-protection business systems. Existing network, compute, storage, and other IT infrastructure is fully used and further optimized to build the ministry-level “environmental protection cloud.” Compute, storage, networking, data-support, and cloud-service development, deployment, and management capabilities are strengthened to meet centralized management of data and applications and big-data decision analysis. A security system for the ministry-level cloud is built to meet network, application, and data-security needs.

The solution uses Sugon Cloudview for underlying resource virtualization. Software-defined networking enables unified management of resource pools across multiple data centers and VXLAN interconnection among pools, so that when virtual machines migrate between pools, the business systems they host and their security-group firewall policies are unaffected. A unified cloud-management platform manages hardware and basic software for unified allocation, deployment, monitoring, O&M, service, and backup, realizing full-lifecycle management including automatic management and dynamic allocation, deployment, configuration, and reclamation. Linked with the SDN system, business-system virtual machines are automatically associated with security policies.

Results

1. Strong, stable resource support for the industry big-data platform, PaaS platform, and other business systems, laying a solid foundation for industry big-data platforms, plus a visual monitoring platform for data, devices, users, and system analysis.

2. Unified management of the technical architecture:

Upgrade the center’s original sub-resource-pool platforms and interconnect them with the central resource pool; complete physical-server virtualization and migrate applications to the virtualization platform; integrate the central and sub-resource pools under unified management; and use the unified cloud platform to manage heterogeneous hardware into a unified, stable hardware architecture.

3. Significantly higher work efficiency:

A rich library of virtual-machine application templates, with deployment completed within 10 minutes; mobile-device support for remote viewing of key cloud-platform information and operations; self-service with electronic approval; and security policies defined by business departments for rapid control of east–west traffic inside the data center.

4. Unified management of the application architecture:

Use of the environmental protection cloud and related management methods to manage and promote application demand; unified development standards and resource tools through microservices and PaaS; unified resource-hosting and test platforms for application development, enabling oversight; and unified collection and use of application data through the environmental protection cloud, providing a foundation for big data.

5. Unified management of the O&M architecture:

The environmental protection cloud as a unified platform for automated and proactive O&M of application resources; integration of O&M resources through the cloud and hosted applications, standardizing development via microservices and simplifying O&M; and, with the cloud at the core, centralized O&M of applications through related tools and standards as services move to the cloud.