Shulou(Shulou.com)06/02 Report--

Background demand

The China Classification Society is engaged in the classification inspection, statutory inspection and notarization inspection of ships, offshore facilities and containers and their materials and equipment, as well as other related technical services. Its ship design audit team is mainly responsible for commercial ship design audit, secret-related ship design audit, auditors use professional design software such as CATIA, AutoCAD, etc., the station is equipped with double graphics card graphics workstation to provide strong graphics processing ability, and can connect to the external network to obtain network resources and facilitate communication.

Taking into account the security and confidentiality requirements of the design audit of secret-related ships, the unit decided to adopt virtualization technology, and put forward the following two requirements for the virtualization platform:

(1) the professional design software runs smoothly.

To have the corresponding graphics acceleration technology support, stable operation of CATIA, AutoCAD and so on.

(2) data assets are secure and controllable

The design and audit of secret-related ships in this unit requires high security, and corresponding policies should be set to avoid accidental data loss, man-made data theft and protect data assets.

Construction practice

Rongli tailored the solution of the ship design audit domain control cloud desktop platform to migrate the secret ship audit cloud desktop to the internal network server, use RDP to access the desktop at the station, and the firewall only allows external network users to access the internal network through the RDP protocol. The domain control mode is adopted on the cloud desktop platform architecture, and the work domain is established by Rongli RLDesktop, and the cloud desktop and cloud terminal are joined into the work domain. Disable USB peripherals, drives, printers and clipboards on cloud desktops in domain control mode. Secret-related materials are stored on the FTP server in the form of network shared files, which ensures the isolation and protection of documents while sharing documents. NvidiaGPU virtualization technology is used on cloud desktop servers to meet the requirements of GPU computing power for running large-scale professional design software.

Value income

(1) the powerful graphic computing engine ensures the running effect of professional design software.

With NVIDIA GRID GPU virtualization, Rongli can provide GPU acceleration for each virtual user, and allocate unique GPU kernel units and video memory to each design desktop according to business needs. A single GPU can support up to 32 design desktops. It provides the support of the powerful GPU computing power equivalent to the professional graphics workstation for the professional design software.

(2) strict control over the use of USB peripherals, drivers, printers and clipboards

In order to prohibit domain users from copying files, materials or other information assets from cloud desktops to cloud terminals or USB mobile storage devices, you need to disable policies such as USB peripheral mapping, drive mapping, printer and clipboard on RLDesktop configured cloud desktops, which are automatically distributed to cloud desktops by RLDesktop and take effect the next time the cloud desktops are started. Domain users cannot revise the domain control policy issued by RLDesktop on the cloud desktop even if they have local administrator permissions. Therefore, after configuring this policy, the files on the cloud desktop cannot be copied to the cloud terminal or USB mobile storage device, nor can the contents of the files opened on the cloud desktop be copied to the files opened on the cloud terminal by Ctrl+C or Ctrl+V, let alone print the files on the cloud desktop.

Rongli Information Technology (Shanghai) Co., Ltd.

Official website: http://www.ronglipower.com/

Taobao shop: https://shop194863020.taobao.com/search.htm?spm=a1z10.1-c.0.0.3dbf6d6bTIeexe&search=y

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.