In Government &
Public Sector
Huawei Safeguards WorldClass Computing Center
in Shenzhen, China
Huawei Builds Secure Network for National
Supercomputing Center in Shenzhen
Background
China developed the National Supercomputing
Center in Shenzhen (Shenzhen Cloud Computing
Center) as part of the country’s high-tech research
and development program. As a major scientific
and technological infrastructure project, the
Supercomputing Center has covered 43,000 square
meters and cost a total of CNY1.23 billion to build.
In 2010, as measured by the national supercomputer
organization, the LINPACK performance benchmark
of its mainframe system was confirmed as 1.271
PFLOPs/s (one quadrillion floating point operations
per second), which made it the second in the world
at the time.
The center serves Southern China, Hong Kong,
Macao, Taiwan, and Southeast Asia with a
variety of large-scale scientific computing and
engineering computing tasks, while providing
cloud computing services with its data processing
and storage capacity. The goal is to implement a
16
world-class, energy-efficient, high-performance
computing research and development center and
cloud computing service center with full-featured
platforms.
Key Challenges
The construction of the National Supercomputing
Center was divided into three parts: facilities,
supercomputing center, and information network
system. Building the information network system
was an indispensable step for the Supercomputing
Center implementing and administering internal
applications, as well as providing reliable bundled
services to customers. With the information network
system, the Supercomputing Center could efficiently
manage top-notch computing capabilities and stably
and securely deliver such capabilities to customers.
However, when deploying this network, managers
at the Supercomputing Center had faced two major
challenges:
One Net: Connect Everyone,
Connect as One
Through analysis of the special
requirements of National
Supercomputing Center in
Shenzhen, Huawei has provided
a network security solution
encompassing internet
access, network convergence,
service access, and security
consultation. >>
• Trouble-free, imperceptible security protection for customers
Supercomputing facilities need to continually improve their
supercomputing services in order to remain competitive. This requires
strict security requirements. As a result, the information network has to
provide trouble-free and imperceptible security protection. Trouble-free
protection means to minimize and even eliminate network security risks
and to ensure non-congested delivery of supercomputing capabilities to
customers. Network security protection must also be imperceptible to the
staff. A network security solution with high-standard security equipment
was required to meet these strict requirements.
• Comprehensive protection and highly trained personnel
Because people implement solutions and use equipment, the
O&M personnel in the Supercomputing Center must have a strong
understanding of network security and be able to quickly resolve
network security issues. In this way, the Supercomputing Center will not
only be highly protected, but also provide quality customer services.
Solution
The Supercomputing Center's special requirements included support
for super-heavy data traffic and super-high stability. Huawei has
fully considered security risk variables at different network layers and
provided a network security solution encompassing Internet access,
network convergence, service access, and security consultation.
• High performance and high reliability at the Internet access
layer
Huawei has deployed USG9500 series products (cloud data center
firewalls) and SIG9280 series products (traffic inspection and control
equipment) to guard against Internet security threats and attacks. With
99.9999 percent stability, ultra-100 Gbits/s processing performance,
and Layer-7 anti-DDoS protect the Supercomputing Center without
compromising its computing performance. Network Intrusion Protection
(NIP) series systems were also deployed to provide fine-grained traffic
monitoring and attack prevention, comprehensively protecting the
network from the network layer to the application layer.
• Millisecond-level switching for service continuity
at the network convergence layer
The network convergence layer is required to have
both vertical protection (from other network layers)
and horizontal protection (from its internal equipment)
to minimize network security risks. To achieve this,
Huawei has deployed USG9500 series products in
two-node clusters in each area of the Supercomputing
Center to prevent security threats from spreading.
This deployment of USG9500 series products also
ensures service continuity with the µs-level switching
technology.
• Secure end-points at the service access layer
The best means of preventing the spread of security
threats is to implement security filtering and detection
at the end-points of data streams. Huawei deployed the
Terminal Security Management (TSM) system, which
protects terminals in the Supercomputing Center by
using identity identification and security check features.
The TSM system features high automation (such as
simple deployment and single sign-on), which lets
terminal users get rid of clumsy tutorials.
• Professional security consulting service for a
comprehensive information security management
system
In addition to security equipment, Huawei has also
provided an information security consulting service
that complies with international information security
standards, laws, and regulations (such as ISO27001
and ISO17799) and other related industry standards.
The consulting service is based on service requirement
management and encompasses different dimensions,
including technology, operation, and management. The
consulting service helped the Supercomputing Center
set up a scientific, operable and sustainable information
security management system by taking the center's IT
development strategy and the information system’s
actual conditions into consideration. The system setup
ensures the maximum implementation of IT security
strategies and service objectives.
Customer Benefits
Huawei provided a state-of-the-art, reliable,
manageable, and controllable information network
system that:
• Guarantees fast service growth needs over the next
several years.
• S a f e g u a r d s t h e e v o l u t i o n o f a w o r l d - c l a s s
supercomputing center with imperceptible and troublefree security protection.
17