Method and system for constructing network topology architecture of energy data center

Abstract

The invention discloses a network topology architecture construction method and system of an energy data center, and relates to the technical field of network topology architecture.The method comprises the steps that a buffer area and a multi-layer protection mechanism are constructed based on an external environment and an internal core network, request information is subjected to multiple filtering, and the request information subjected to multiple filtering is obtained; deploying a load balancer, performing calculation by using a scheduling algorithm to obtain a load score, and distributing the request information after multiple filtering based on the load score; and carrying out certificate verification and data transmission on the distributed request information subjected to multiple filtering by using the identity verification server. According to the method, the buffer area and a multi-layer protection mechanism are established, and the request information is subjected to multiple filtering, so that malicious or unnecessary data are prevented from flowing into an internal network; through carrying out load scoring on the request information, resource distribution of the server is optimized, and the risk of performance reduction or downtime caused by overload of a certain server is avoided.

Description

Technical Field

[0001] The present invention relates to the technical field of network topology architecture, and in particular to a method and system for constructing a network topology architecture of an energy data center. Background Art

[0002] With the advancement of informatization, energy data centers have gradually become an important infrastructure in the energy industry. The energy data center portal aims to provide comprehensive energy data and related services to governments, enterprises and the public. By establishing a unified and efficient service window, the portal can provide users with an intuitive and easy-to-use data display platform, significantly improving the transparency and service efficiency of the energy industry. In recent years, with the rapid development of big data and cloud computing technologies, the sharing and management of energy data has gradually transformed towards intelligence and automation. The portal of the energy data center can provide users with personalized information retrieval and service experience by integrating multiple functional modules, such as data resource library, demand center, energy information and product market. Through these modules, the portal not only optimizes the display, application, review and release process of energy data, but also promotes the market application and ecological cooperation of data products. At the same time, with the growth of data service demand, the energy data center portal needs to carry a larger scale of user access requests, which puts forward higher requirements for the efficiency, security and reliability of the network architecture. In order to support the flow and processing of massive energy data, the portal system needs to continuously optimize its network topology and improve the scalability and load balancing capabilities of the system.

[0003] Although the existing energy data center portal has made significant progress in providing comprehensive services, there are still deficiencies in the design and implementation of the network topology architecture. First, the existing system is susceptible to single point failures when responding to large-scale data requests, resulting in slower system response or service interruptions. This is mainly due to the lack of an effective multi-layer protection mechanism in the network architecture, which makes it difficult to quickly recover when the network is attacked. Second, the existing load balancing mechanism can often only be scheduled based on basic load indicators, and fails to fully consider network bandwidth or equipment health status indicators, resulting in the system being unable to make reasonable resource allocation under high load conditions, affecting the performance and stability of the entire system. In addition, there are limitations to the working method of the authentication server, especially when user requests are frequent, the verification process can easily become a bottleneck, affecting the data transmission efficiency. Therefore, improvements are still needed in terms of security, reliability and system optimization to better meet the growing demand for energy data services. Summary of the invention

[0004] In view of the above-mentioned problems, the present invention is proposed.

[0005] Therefore, the problem to be solved by the present invention is how to provide a method for constructing a network topology architecture of an energy data center, by utilizing multiple protections, multi-layer filtering, load balancing and identity authentication to reduce potential network attacks and failure risks, and provide a more stable and sustainable operating environment for the energy data center.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0007] In the first aspect, an embodiment of the present invention provides a method for constructing a network topology architecture of an energy data center, which includes constructing a buffer area and a multi-layer protection mechanism based on the external environment and the internal core network, performing multiple filtering on request information to obtain multiple filtered request information; deploying a load balancer and using a scheduling algorithm to calculate to obtain a load score, and allocating the multiple filtered request information based on the load score; and using an identity authentication server to perform credential verification and data transmission on the allocated multiple filtered request information.

[0008] As a preferred solution of the method for constructing the network topology architecture of the energy data center described in the present invention, wherein: the construction of the buffer area includes: setting up the Internet exit area and the buffer area as the buffer area between the network data cloud platform and the Internet; using the third-party access area as the buffer area between the external terminal and the network data cloud platform to isolate the external environment from the internal core network; constructing the multi-layer protection mechanism refers to setting up multiple boundary devices for multiple blocking to form a multi-layer protection mechanism.

[0009] As a preferred solution of the network topology architecture construction method of the energy data center described in the present invention, the multiple boundary devices include a first boundary device, a second boundary device and an isolation boundary device; the multiple filtering of the request information includes: the client sends Internet request information to the second boundary device through the Internet, the second boundary device filters the Internet request information according to a second preset rule, and if the Internet request information meets the second preset rule, the Internet request information that meets the second preset rule passes through the second boundary device; the second boundary device forwards the Internet request information that meets the second preset rule to the load balancer, the load balancer selects a front-end server according to the scheduling algorithm, and checks the front-end server; when the selected front-end server works normally, the first boundary device again filters the Internet request information that meets the second preset rule according to the first preset rule, and if the Internet request information meets the first preset rule, the Internet request information that meets the first preset rule passes through the first boundary device; the first boundary device sends the Internet request information that meets the first preset rule to the isolation boundary device in the buffer zone, the isolation boundary device filters the Internet request information that meets the first preset rule according to the isolation preset rule, and if the Internet request information meets the isolation preset rule, the Internet request information that meets the isolation preset rule is sent to the selected front-end server.

[0010] As a preferred solution of the method for constructing the network topology architecture of the energy data center described in the present invention, the load balancer is used to distribute request information from the Internet to multiple front-end servers according to the actual load status of the front-end servers; the load balancer is arranged between the buffer boundary device and the Internet exit boundary device.

[0011] As a preferred solution of the method for constructing the network topology architecture of the energy data center described in the present invention, wherein: the calculation using the scheduling algorithm to obtain the load score means that the scheduling algorithm of the load balancer calculates the load content and related weights of the front-end server, wherein the calculation formula of the scheduling algorithm for the load score of the front-end server is as follows:

[0012] Load score = CPU utilization × CPU weight + memory utilization × memory weight

[0013] + Network bandwidth utilization × bandwidth weight + distance × distance weight

[0014] Among them, CPU utilization, memory utilization and network bandwidth utilization are all status characteristics of the corresponding front-end server itself; the distance is the distance between the terminal that sends the Internet request information and the corresponding front-end server; the CPU weight, memory weight, bandwidth weight and distance weight are determined by manual settings or other preset algorithms.

[0015] As a preferred solution of the method for constructing the network topology architecture of the energy data center described in the present invention, wherein: the identity authentication server is set in the portal Internet domain of the buffer zone, which is closer to the Internet than the intranet and extranet exchange platform, and has an equal number of boundary devices in front; the identity authentication server is used to import existing user information into the central user directory, integrate the identity authentication server with the central user directory and set it in the intranet and extranet exchange platform or buffer zone, wherein the identity authentication server and the front server can be the same device, so that the identity authentication function is deployed by the load balancer.

[0016] As a preferred solution of the method for constructing the network topology architecture of the energy data center described in the present invention, the credential verification includes the following steps: the Internet sends a request message, the request message arrives at the intranet exchange platform, the identity authentication server on the intranet exchange platform receives the request message, and prompts the user to enter the access credential; the identity authentication server obtains the access credential and queries the user information from the central user directory to verify the validity of the access credential. If the identity authentication server determines that the access credential is valid, the identity authentication server obtains the user authority information corresponding to the access credential from the central user directory; after determining that the access credential is valid, the identity authentication server obtains the corresponding user authority information according to the content of the central user directory, and encapsulates the request information, access credential and user authority information into a data packet and generates an encrypted packet using an encryption algorithm; the identity authentication server transmits the encrypted packet to the data main domain through a network connected to the data main domain; after receiving the encrypted packet, the data main domain decrypts the encrypted packet according to a pre-set decryption method, restores the data packet, and extracts the request information, access credential and user authority information from the data packet.

[0017] In the second aspect, in order to further solve the security problems existing in the network topology architecture, the embodiment of the present invention provides a network topology architecture construction system for an energy data center, which includes: an information filtering module, which is used to build a buffer area and a multi-layer protection mechanism based on the external environment and the internal core network, obtain request information and perform multiple filtering to obtain multiple filtered request information; an information allocation module, which is used to calculate the score based on the load content and related weights of the front-end server, and the load balancer uses a scheduling algorithm to obtain the load score, and allocates the multiple filtered request information based on the load score; a verification transmission module, which uses the identity authentication server to perform credential verification on the allocated multiple filtered request information, and transmits data according to the credential verification result.

[0018] In a third aspect, an embodiment of the present invention provides a computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: when the computer program is executed by the processor, any step of the method for constructing a network topology architecture of an energy data center as described in the first aspect of the present invention is implemented.

[0019] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, wherein: when the computer program is executed by a processor, any step of the method for constructing a network topology architecture of an energy data center as described in the first aspect of the present invention is implemented.

[0020] Beneficial effects of the present invention: The present invention establishes a buffer area and constructs a multi-layer protection mechanism, and effectively isolates the external environment from the internal network, thereby enhancing data security and network stability. By performing multiple filtering on request information, malicious or unnecessary data flowing into the internal network is reduced, thereby effectively preventing possible network attacks. By deploying a load balancer and combining a scheduling algorithm to load score request information, the resource allocation of the server can be optimized, the efficient operation of the data center can be ensured, the server load can be reasonably scheduled, and the risk of performance degradation or downtime caused by an overloaded server can be avoided. By using an identity authentication server to perform credential verification, it can effectively ensure that only authorized users can access specific resources, thereby ensuring the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:

[0022] Figure 1 This is an overall flow chart of the method for constructing the network topology architecture of the energy data center in Example 1.

[0023] Figure 2 This is a schematic diagram of the structure of the computer device in Example 3.

[0024] Figure 3 This is a schematic diagram of the network topology architecture of the energy data center in Example 4. DETAILED DESCRIPTION

[0025] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the accompanying drawings.

[0026] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0027] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive with other embodiments.

[0028] Example 1

[0029] Reference Figure 1 , which is the first embodiment of the present invention, and this embodiment provides a method for constructing a network topology architecture of an energy data center.

[0030] The existing methods for building network topology architectures have the following main problems: First, when responding to large-scale data requests, existing systems are susceptible to single point failures, resulting in slower system response or service interruptions. This is mainly due to the lack of an effective multi-layer protection mechanism in the network architecture, which makes it difficult to quickly recover when the network is attacked; secondly, the existing load balancing mechanism can often only be scheduled based on basic load indicators, and fails to fully consider network bandwidth or device health status indicators, resulting in the system being unable to make reasonable resource allocation under high load conditions, affecting the performance and stability of the entire system; in addition, there are limitations to the working method of the authentication server, especially when user requests are frequent, the verification process can easily become a bottleneck, affecting data transmission efficiency.

[0031] The present application provides an effective solution to the above-mentioned problems. Next, a method for constructing a network topology architecture of the energy data center will be described in detail in combination with multiple embodiments.

[0032] Figure 1 The overall flow chart of the network topology architecture construction method of the energy data center is shown, including:

[0033] S1: A buffer area and a multi-layer protection mechanism are constructed based on the external environment and the internal core network to perform multiple filtering on the request information to obtain the multiple filtered request information.

[0034] Preferably, constructing the buffer area includes: setting up an Internet exit area and a buffer zone as a buffer area between the network data cloud platform and the Internet.

[0035] The third-party access area is used as a buffer area between external terminals and the network data cloud platform to isolate the external environment from the internal core network.

[0036] Preferably, building a multi-layer protection mechanism means setting up multiple boundary devices to perform multiple blockings, forming a multi-layer protection mechanism, and effectively preventing external attackers from intruding into the internal network.

[0037] Specifically, the multiple boundary devices include a first boundary device, a second boundary device, and an isolation boundary device.

[0038] Furthermore, multiple filtering of the request information includes: the client sends Internet request information to the second edge device via the Internet, the second edge device filters the Internet request information according to a second preset rule, and if the Internet request information meets the second preset rule, the Internet request information that meets the second preset rule passes through the second edge device.

[0039] The second edge device forwards the Internet request information that complies with the second preset rule to the load balancer. The load balancer selects a front-end server according to the scheduling algorithm and checks the front-end server.

[0040] When the selected front-end server operates normally, the first edge device again filters the Internet request information that meets the second preset rule according to the first preset rule. If the Internet request information meets the first preset rule, the Internet request information that meets the first preset rule passes through the first edge device.

[0041] The first boundary device sends the Internet request information that complies with the first preset rule to the isolation boundary device in the buffer zone. The isolation boundary device filters the Internet request information that complies with the first preset rule according to the isolation preset rule. If the Internet request information complies with the isolation preset rule, the Internet request information that complies with the isolation preset rule is sent to the selected front-end server.

[0042] S2: Deploy a load balancer and use the scheduling algorithm to calculate and obtain a load score, and distribute the multiple filtered request information based on the load score.

[0043] Preferably, the load balancer is used to reasonably distribute various request information from the Internet to multiple front-end servers according to the actual load status of each front-end server, reduce the burden of a single front-end server, avoid service interruption caused by failure of a front-end server, and improve the overall processing capacity and response speed of the system by processing requests in parallel.

[0044] Specifically, the load balancer is set between the buffer boundary device and the Internet exit boundary device, avoiding direct exposure to the Internet and becoming a target of attack. It also allows the load balancer to have sufficient time to analyze, process and distribute the received request information, prevent the load balancer from reacting too slowly, and make full use of the effect of the load balancer.

[0045] Further, the load score is calculated by using the scheduling algorithm, which means that the scheduling algorithm of the load balancer calculates the load content and related weights of the front-end server, wherein the calculation formula of the load score of each front-end server by the scheduling algorithm is as follows:

[0046] Load score = CPU utilization × CPU weight + memory utilization × memory weight

[0047] + Network bandwidth utilization × bandwidth weight + distance × distance weight

[0048] Among them, CPU utilization, memory utilization and network bandwidth utilization are all status characteristics of the corresponding front-end server itself; the distance is the distance between the terminal that sends the Internet request information and the corresponding front-end server; the CPU weight, memory weight, bandwidth weight and distance weight are determined by manual settings or other preset algorithms.

[0049] S3: Use the authentication server to perform credential verification and data transmission on the assigned multiple filtered request information.

[0050] Preferably, the identity authentication server is set in the portal Internet domain of the buffer zone, which is closer to the Internet than the intranet and extranet exchange platforms, and has an equal number of boundary devices in front, thus ensuring sufficient security while ensuring response speed.

[0051] Preferably, the identity authentication server is used to import existing user information into the central user directory, and the identity authentication server is integrated with the central user directory and set in an intranet or extranet exchange platform or buffer, wherein the identity authentication server and the front-end server can be the same device, so that the identity authentication function is deployed by the load balancer, which is more conducive to resource allocation and improves the response rate.

[0052] Specifically, the credential verification includes the following steps: the Internet sends a request message, the request message reaches the intranet exchange platform, the identity verification server on the intranet exchange platform receives the request message, and prompts the user to enter the access credential.

[0053] The authentication server obtains the access credential and queries the user information from the central user directory to verify the validity of the access credential. If the authentication server determines that the access credential is valid, the authentication server obtains the user authority information corresponding to the access credential from the central user directory.

[0054] After determining that the access credentials are valid, the identity verification server obtains the corresponding user authority information based on the content of the central user directory, and encapsulates the request information, access credentials and user authority information into a data packet and generates an encrypted packet using an encryption algorithm.

[0055] The authentication server transmits the encrypted packet to the data master domain through a network connected to the data master domain.

[0056] After receiving the encrypted package, the data master domain decrypts the encrypted package according to the pre-set decryption method, restores the data packet, and extracts the request information, access credentials and user authority information from the data packet to complete the entire transmission process.

[0057] It should be noted that in the network topology, multiple paths are designed to connect different network areas to ensure that when a path fails, data can be automatically switched to other paths for transmission; between the buffer and the data center, two or more border firewall and border switch paths can be designed to ensure that when one path fails, data can be transmitted through other paths.

[0058] Furthermore, the intranet and extranet exchange platform is the junction point between the internal network and the external network. From the perspective of the Internet access party, the intranet and extranet exchange platform are relatively close and usually have high-performance network equipment, which can handle a large number of concurrent requests, and the response speed of user requests will be very fast; in addition, the location of the intranet and extranet exchange platform of the present invention is between the Internet exit area, the buffer zone and the network data cloud platform, and isolation processing is performed through multiple boundary devices in the Internet exit area and the buffer zone, thereby greatly improving security.

[0059] In summary, the present invention establishes a buffer area and constructs a multi-layer protection mechanism, and enhances data security and network stability by effectively isolating the external environment from the internal network. It reduces the flow of malicious or unnecessary data into the internal network by performing multiple filtering on request information, thereby effectively preventing possible network attacks. By deploying a load balancer and combining a scheduling algorithm to load score request information, it is possible to optimize server resource allocation, ensure efficient operation of the data center, reasonably schedule server loads, and avoid performance degradation or downtime risks caused by overloading a server. By using an identity authentication server to perform credential verification, it is possible to effectively ensure that only authorized users can access specific resources, thereby ensuring the security of data transmission.

[0060] Embodiment 2 is an embodiment of the present invention, which provides a network topology architecture construction system for an energy data center, including: an information filtering module, which is used to build a buffer area and a multi-layer protection mechanism based on the external environment and the internal core network, obtain request information and perform multiple filtering to obtain multiple filtered request information; an information allocation module, which is used to calculate the score based on the load content and related weights of the front-end server, and the load balancer uses a scheduling algorithm to obtain the load score, and allocates the multiple filtered request information based on the load score; a verification transmission module, which is used to use the identity authentication server to perform credential verification on the allocated multiple filtered request information, and transmit data according to the credential verification result.

[0061] Embodiment 3 is an embodiment of the present invention, which is different from the previous embodiment in that:

[0062] like Figure 2 As shown, if the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0063] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0064] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0065] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0066] Example 4 is an embodiment of the present invention, which provides a method for constructing a network topology architecture of an energy data center. In order to verify the beneficial effects of the present invention, a scientific demonstration is carried out through simulation experiments.

[0067] This example simulates the network topology of an energy data center in a real environment, builds a buffer area and a multi-layer protection mechanism, performs multiple filtering on request information, deploys a load balancer and uses a scheduling algorithm for calculation, distributes the multiple filtered request information based on the load score, and then uses the authentication server to perform credential verification and data transmission on the distributed multiple filtered request information. Figure 3 shown.

[0068] Among them, the Internet first sends a request message to the Internet exit area, which is processed by the Internet exit-border device and then transmitted to the DMZ area. After being processed by the DMZ area-border device and the portal Internet domain in the No. 1 resource pool, it is transmitted to the Southern Power Grid Cloud through the internal and external network exchange platform, and processed by the Southern Power Grid Cloud Area IV-border device in the Southern Power Grid Cloud. Finally, it is transmitted to the third-party access area, processed by the third-party access area-border device and enters the government network. Credential verification and data transmission are carried out with government units, including the PC terminal of the Energy Bureau, the PC terminal of the Development and Reform Commission, the PC terminal of the Ministry of Industry and Information Technology, and the PC terminals of other bureaus. Data transmission is carried out through the dedicated line of the government network, thereby ensuring that only authorized users can access specific resources, ensuring the security of data transmission, and effectively preventing possible network attacks.

[0069] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A method for constructing a network topology architecture of an energy data center, characterized in that: include: Build a buffer area and multi-layer protection mechanism based on the external environment and the internal core network to perform multiple filtering on the request information and obtain the multiple filtered request information; Deploy a load balancer and use a scheduling algorithm to calculate to obtain a load score, and distribute the multiple filtered request information based on the load score; Utilize the authentication server to perform credential verification and data transmission on the distributed multiple filtered request information.

2. The method for constructing a network topology architecture of an energy data center according to claim 1, characterized in that: The construction buffer area includes: Set up Internet egress area and buffer zone as a buffer zone between the network data cloud platform and the Internet; Use the third-party access area as a buffer area between external terminals and the network data cloud platform, isolating the external environment from the internal core network; Constructing the multi-layer protection mechanism refers to setting up multiple boundary devices to perform multiple blocking to form a multi-layer protection mechanism.

3. The method for constructing a network topology architecture of an energy data center according to claim 2, characterized in that: The multiple boundary devices include a first boundary device, a second boundary device and an isolation boundary device; The multiple filtering of the request information includes: The client sends Internet request information to the second edge device through the Internet, and the second edge device filters the Internet request information according to the second preset rule. If the Internet request information meets the second preset rule, the Internet request information that meets the second preset rule passes through the second edge device; The second edge device forwards the Internet request information that meets the second preset rule to the load balancer, and the load balancer selects a front-end server according to the scheduling algorithm and checks the front-end server; When the selected front-end server works normally, the first edge device again filters the Internet request information that meets the second preset rule according to the first preset rule, and if the Internet request information meets the first preset rule, the Internet request information that meets the first preset rule passes through the first edge device; The first boundary device sends the Internet request information that complies with the first preset rule to the isolation boundary device in the buffer zone. The isolation boundary device filters the Internet request information that complies with the first preset rule according to the isolation preset rule. If the Internet request information complies with the isolation preset rule, the Internet request information that complies with the isolation preset rule is sent to the selected front-end server.

4. The method for constructing a network topology architecture of an energy data center according to claim 3, characterized in that: The load balancer is used to distribute request information from the Internet to multiple front-end servers according to the actual load status of the front-end servers; The load balancer is arranged between the buffer zone boundary device and the Internet egress boundary device.

5. The method for constructing a network topology architecture of an energy data center according to claim 4, characterized in that: The calculation using the scheduling algorithm to obtain the load score refers to the scheduling algorithm of the load balancer calculating the load content and related weights of the front-end server, wherein the calculation formula of the scheduling algorithm for the load score of the front-end server is as follows: Load score = CPU utilization × CPU weight + memory utilization × memory weight + network bandwidth utilization × bandwidth weight + distance × distance weight Among them, CPU utilization, memory utilization and network bandwidth utilization are all status characteristics of the corresponding front-end server itself; the distance is the distance between the terminal that sends the Internet request information and the corresponding front-end server; the CPU weight, memory weight, bandwidth weight and distance weight are determined by manual settings or other preset algorithms.

6. The method for constructing a network topology architecture of an energy data center according to claim 5, characterized in that: The identity verification server is set in the portal Internet domain of the buffer zone, which is closer to the Internet than the internal and external network exchange platform, and has an equal number of boundary devices in front; The identity authentication server is used to import existing user information into the central user directory, integrate the identity authentication server with the central user directory and set it in the intranet exchange platform or buffer zone, wherein the identity authentication server and the front-end server can be the same device, so that the identity authentication function is deployed by the load balancer.

7. The method for constructing a network topology architecture of an energy data center according to claim 6, characterized in that: The credential verification includes the following steps: The Internet sends a request message, which arrives at the intranet exchange platform. The identity verification server on the intranet exchange platform receives the request message and prompts the user to enter access credentials. The identity verification server obtains the access credential and queries the user information from the central user directory to verify the validity of the access credential. If the identity verification server determines that the access credential is valid, the identity verification server obtains the user authority information corresponding to the access credential from the central user directory. After determining that the access credentials are valid, the identity verification server obtains the corresponding user authority information based on the content of the central user directory, and encapsulates the request information, access credentials and user authority information into a data packet and generates an encrypted packet using an encryption algorithm; The authentication server transmits the encrypted packet to the data master domain via a network connected to the data master domain; After receiving the encrypted package, the data master domain decrypts the encrypted package according to a pre-set decryption method, restores the data packet, and extracts the request information, access credentials and user authority information from the data packet.

8. A network topology architecture construction system for an energy data center, based on the network topology architecture construction method for an energy data center according to any one of claims 1 to 7, characterized in that: include, The information filtering module is used to build a buffer area and a multi-layer protection mechanism based on the external environment and the internal core network, obtain request information and perform multiple filtering to obtain the request information after multiple filtering; The information distribution module is used for the load balancer to calculate the score based on the load content and related weight of the front-end server using the scheduling algorithm to obtain the load score, and distribute the multiple filtered request information based on the load score; The verification transmission module is used to use the identity verification server to perform credential verification on the allocated multiple filtered request information, and to transmit data according to the credential verification result.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method for constructing a network topology architecture of an energy data center according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for constructing a network topology architecture of an energy data center according to any one of claims 1 to 7 are implemented.

Images