Design And Implementation Of Cloud Server Architecture For Universities

As cloud computing becomes more mature,cloud servers can satisfy much more needs of universities.At present,most cloud servers used in universities are based on mainframes,which make their operating systems non-optional.Furthermore,the mainframes are expensive and are difficult to operate.This architecture is mostly used for scientific computation,but is usually unsuitable for some other application scenarios,such as computer labs and web servers.For this reason,we aim to design and implement a reliable and secure architecture of the cloud server for universities based on clusters.In this paper,we found three main problems of building cloud servers for universities,including the building of storage architecture,network architecture and security architecture.First,we design and implement the storage architecture for two scenarios,respectively: the computer labs and the web servers.In the storage architecture for computer labs,we make the virtualization level and the storage level share the same physical servers.In the storage architecture for web servers,we make the physical servers located in virtualization level share the storage server located in storage level.Then we propose a hybrid storage architecture which is suitable for both scenarios.Second,for the purpose that users in universities can access cloud servers through the campus network,we design and implement the network architecture,including DHCP service and NAT service.We use a fixed IP pool in the DHCP service architecture to solve the problem of cyclic waiting in traditional DHCP.We also build a web service in a carefully-designed gateway to replace the traditional hardware gateway,which can be controlled by program.Finally,we analyze the security of cloud servers built as above.In order to deal with the security vulnerabilities,we assume some typical attack scenarios and propose the metadata initial service architecture.Because the requesters of the metadata initial service can achieve the highest confidential data,we propose a secure implementation of the metadata initial service to ensure the legal identity of them.After having been used for a year,the designed architectures and the implemented system have been proved reliable and secure.Meanwhile,the system is flexible,extensible and economic,many cloud computing researches can be conducted based on it.