Shulou(Shulou.com)11/24 Report--

1. Preface

More and more enterprises realize the importance of "going to the cloud". However, migrating ERP systems to the cloud makes many enterprises hesitant. The main reason is process, data and security concerns. As the core business system of enterprises, ERP contains a large number of key business data. Considering the complexity and security of data migration, many enterprises are cautious about cloud, and even refuse to go to the cloud.

However, in the current era of comprehensively moving to the cloud, it is an inevitable trend to migrate ERP to the cloud. If the enterprise chooses not to go to the cloud, its overall management efficiency and comprehensive competitive strength may not be able to achieve the desired transformation goals. This will not only lead to inefficient IT management, but also make enterprises lose their advantages in the fierce market competition. Therefore, cloud on ERP has become the preferred and necessary choice for enterprises in all fields.

Recently, Huawei's cloud double 11 marketing season is under way. This article also evaluates its main ERP cloud solution, shares the services used on ERP, chooses different migration solutions for different business scenarios, and summarizes the core highlights of Huawei cloud ERP solution.

two。 Local deployment ERP VS Cloud deployment ERP

When purchasing an ERP system, the first question you have to face is whether to deploy ERP based on cloud computing or to choose the ERP installed on the local management server, that is, local deployment ERP.

Locally deployed ERP: installed on enterprise computer hardware and servers and can be managed by IT administrators.

Cloud deployment ERP: cloud deployment ERP is to cloud the enterprise's local ERP system. After ERP deployment on the cloud, the stability is higher, the response speed is faster and the data is more secure. In today's era of full cloud, it is a general trend to migrate ERP to the cloud.

The above is a service framework for deploying ERP system on Huawei Cloud. You can see that if you want to communicate between users and servers, you need to use VPN virtual private network, elastic public network IP, and cloud switching. There are three benefits.

1. Elastic public network IP can provide independent public network IP resources, can be flexibly bound with elastic cloud servers, virtual IP, load balancers and other resources, and has a variety of billing methods to meet different business needs.

2. Virtual private network can build secure, reliable and cost-effective encrypted connection channels between enterprise users' local network, data center and Huawei cloud network.

3. You can also encrypt the transmitted data based on IKE and IPsec, and provide a tenant-level exclusive gateway to ensure data security. You know, the most important thing in ERP systems is data.

Secondly, you can see that the elastic cloud server ECS is selected on the server. One of the difficulties in deploying the ERP system locally is the difficulty of expansion. When you need to expand the capacity, you also need to buy hardware to load it. If you use ECS, you can expand the capacity anytime, anywhere, and buy as much as you need.

In terms of data storage, I chose two services, OBS storage and CBR cloud backup.

1. OBS storage is a cost-effective storage service. It does not support traditional file systems and cannot be mounted directly on the server. Of course, it does not support rewriting operations, but the access speed is very fast, and it can directly expose the service to the Internet, so it is very suitable for storing some static files. Such as pictures, audio and video or App installation package, then using OBS to store large static files can effectively reduce the io performance consumption of local storage when reading files.

2. CBR provides easy-to-use backup services for cloud servers, cloud disk, SFS Turbo, cloud and local file directories and VMware virtualized environment, and can restore data to any backup point in case of virus invasion, human error deletion, software and hardware failures, etc.

Finally, there is the issue of safety that enterprises are most concerned about. The above framework is armed to the teeth in terms of security, not only in terms of high defense, but also in the host, database and other aspects.

1. Servers are often attacked by foreign forces DDoS. Websites such as Bailey and C have been attacked by foreign countries some time ago. If they are deployed locally without high defense, the server may be paralyzed in minutes. DDoS Defense provides global services to meet the challenges of DDoS attacks, providing millisecond attack response, multi-dimensional behavior analysis and machine learning, automatic tuning of defense strategies, and accurate identification of complex DDoS attacks to protect your business continuity.

2. When deploying the system locally, you also need to install plug-ins if you want to monitor the operation of servers, processes, etc. It is not so troublesome to use Cloud Monitoring. Cloud Monitoring can customize the monitoring Kanban to support multi-service and multi-dimensional view of monitoring data, and centrally present the key service monitoring indicators that users focus on, which can not only meet the overview of the operation of cloud services, but also meet the need to view monitoring details when troubleshooting.

When enterprises deploy ERP systems, servers often face some problems, such as exposed security problems such as tampering of static resources, SQL injection, brute force cracking, and some deserialization input. Through asset management, vulnerability management, baseline check, intrusion detection, program operation authentication, file integrity check, security operation, web page tamper prevention and other functions, HSS helps enterprises manage host security risks more easily, detect hacker intrusions in real time, and meet security compliance requirements.

3. In the ERP system, the most important thing is system security, and the focus of system security is database security. Database is the core of an enterprise. If data is leaked, it will have a great impact, such as the 2022 incident of a company in Shanghai. DBSS is an intelligent database security service, based on machine learning mechanism and big data analysis technology, provides database audit, SQL injection attack detection, risk operation identification and other functions to ensure the security of the database on the cloud.

4. Firewall is essential for servers. When deploying ERP in the cloud, high defense AAD and WAF firewall can be used together, which can completely avoid malicious attacks and intrusions by hackers.

Through the comparison of the above local deployment ERP and cloud deployment ERP, we can see that cloud ERP is flexible and scalable and can be customized and upgraded according to the needs of enterprises, while local ERP needs to be maintained and upgraded by enterprises themselves. In addition, the cost of cloud ERP is relatively low, while local ERP requires more capital and human resources.

3. Huawei cloud services used on ERP

The above figure shows the services used to build a primary cloud ERP. Here is a basic description of elastic CVM ECS, elastic public network IP, cloud database RDS for SQL Server, enterprise host security HSS, cloud backup CBR and other services.

3.1 ECS 、 IP 、 CBR

The above figure shows the configuration I selected, including basic configuration: general computing enhanced, model C7, 4C8G, general SSD40G; network configuration: full dynamic BGP, billing method: bill by bandwidth, bandwidth: 5 Mbit / s; cloud backup: 40G.

These three products are recommended to be used together, so you can buy them together at the time of purchase. If you want to deploy a primary ERP system server, IP and backup are essential.

ECS is a cloud computer service that is readily available and flexibly expanded by Huawei Cloud. There is also a very authoritative recognition in the industry: first-class certificate of compliance with cloud computing service standards, first place in the track of OCP and USCP operations optimization algorithms, 51 international list records, trusted cloud technology best practice award, next generation cloud computing technology innovation award, annual leading game cloud server, etc.

Huawei Cloud humanized recommends instance types according to business scenarios, so that it is no longer difficult for us to choose because we do not understand it.

Elastic public network IP provides independent public network IP resources, including public network IP address and public network egress bandwidth service. It can be flexibly bound and unbound with elastic cloud servers, bare metal servers, virtual IP, elastic load balancers, NAT gateways and other resources, providing access to public network and being accessed by public network.

After we deploy ERP to the cloud, we must use the public network ip to access the system. There are various billing methods for purchasing elastic public network IP: various billing policies such as on-demand, bandwidth-by-bandwidth and postpaid policies are supported, and the prepaid price is more favorable. You can also add shared bandwidth to reduce bandwidth usage costs:

CRB is a cloud backup service, which can provide easy-to-use backup services for cloud servers, cloud disk, SFS Turbo, cloud and local file directories, as well as VMware virtualized environment. It can restore data to any backup point for scenarios such as virus invasion, erroneous deletion, software and hardware failures.

You can adjust your backup strategy, such as automatic backup every day, automatic backup every two days, or weekly backup.

3.2 Cloud Database RDS for SQL Server

Microsoft SQL Server is a popular commercial relational database in the world, which can integrate all kinds of common management development tools of Microsoft. Cloud database RDS for SQL Server supports applications based on Windows architecture, and it has the characteristics of ready-to-use, stable and reliable, secure operation, flexible scaling, easy management, economy and practicality, allowing you to focus more on business development.

Can choose a suitable model according to the actual situation, here I choose the basic model to experience. The following are the specifications for the selection of basic models:

Connect RDS for SQL Server instances via public network

Huawei Cloud provides two connection methods to connect instances through RDS for SQL Server clients: non-SSL connection and SSL connection. Among them, SSL connection realizes the function of data encryption and has higher security.

Non-SSL connection.

1. Start the SQL Server Management Studio client.

2. Select "connection > Database engine" and fill in the login information in the "Connect to Server" pop-up box.

3. "Server name" is the host IP and database port of the target instance (please use a comma between IP and database port). For example: x.x.x.xpenol 8080

A) the IP of the host is the bound IP address of the elastic public network.

B) the port is the "database port" of the connection Information module in the basic Information tab.

4. Authentication is the authentication method. Select SQL Server Authentication.

5. "login name" is the Huawei cloud relational database account to be accessed. The default administrator account is rdsuser.

6. "password" is the password corresponding to the database account to be accessed.

SSL connection

The operation of SSL links is basically the same as that of non-SSL links, only one more step. Click "options", on the "connection Properties" tab, fill in the relevant information, and check "encrypted connection" to enable SSL encryption (the system does not check "encrypted connection" by default, that is, it is not enabled, it needs to be enabled manually).

3.3 Enterprise Host Security HSS

Enterprise Host Security (Host Security Service) is a personal security butler of the server. Through asset management, vulnerability management, baseline checking, intrusion detection, program operation authentication, file integrity verification, security operation, web page tampering prevention and other functions, it helps enterprises to more easily manage host security risks, detect hacker intrusions in real time, and meet security compliance requirements.

You can choose a version according to the actual situation:

Enable container node protection

When container node protection is enabled, a quota needs to be assigned to the specified node (host). After the container security protection is turned off or the node (host) is deleted, the quota can be allocated to other nodes (host).

4. Choose the migration scheme according to the business scenario

According to customers' different stages of development, different progress in information construction, and different needs, Huawei Cloud provides three cloud-based solutions for local ERP relocation, one-stop ERP system SaaS construction, and Huawei Cloud as remote disaster recovery and backup of local ERP system.

4.1 Local ERP is relocated to the cloud

The local ERP migration solution to the cloud is suitable for enterprises that have purchased ERP systems, need to deploy on the cloud or have deployed ERP applications in the local server room / IDC server room / other clouds, and need to migrate to Huawei cloud.

According to the enterprise size, budget and security requirements, the local ERP relocation solution is divided into primary solution, advanced solution and advanced solution. The product portfolio is as follows:

Primary solution: suitable for start-up enterprises, such as small and micro enterprises with annual income of less than 50 million, such as new retail, new production, new trade, etc., with a single business structure and less than 10 business users

Advanced plan: suitable for small and medium-sized enterprises with an annual income of 50 million-500 million, such as home appliances, pharmaceuticals, food and other businesses, with 10-50 users

Advanced program: suitable for medium and large enterprises, with an annual income of 500-2 billion, such as manufacturing, with more than 50 business users.

4.2 SaaS construction of one-stop ERP system

The SaaS building scheme of one-stop ERP system is suitable for enterprises with annual income of 50 million-2 billion and belong to the following two situations.

Enterprises do not have ERP system: only use independent financial management software, business and financial management are separated (such as housekeeper); low degree of information, still rely on forms for business management (purchase, sales, storage, production).

The existing ERP system of the enterprise is not enough to support the development of the enterprise: currently uses the ERP system, but only uses the financial module, does not achieve the integration of industry and wealth; currently uses the ERP, but cannot achieve the enterprise fine management, the enterprise business process has many breakpoints.

The ERP providers of Huawei Cloud United Market TOP4 (Kingdee, Dingjie, SAP, Yuyou) have mature technology and experience in ERP implementation, migration and innovation, and can provide enterprises with rich tools, technical support and best practices for building ERP systems from 0.

Kingdee ERP Shangyun solution:

ERP system is suitable for business scenarios: financial management, intelligent manufacturing, supply chain management, amoeba management, omni-channel marketing, e-commerce ERP and so on.

Dingjie ERP Shangyun solution:

ERP system is suitable for business scenarios: supply chain management, intelligent manufacturing, purchase, sale and inventory management, quality management, financial management, equipment management.

Cloud solution on SAP:

ERP system is suitable for business scenarios: cloud deployment of SAP system, cloud deployment of development and test system, cloud of disaster recovery system, cloud backup of SAP HANA, cloud integration of SAP.

Use Friends ERP to launch cloud solutions:

ERP system is suitable for business scenarios: digital marketing, intelligent manufacturing, financial sharing, manpower sharing, intelligent collaboration, digital procurement and so on.

4.3 Huawei Cloud as remote disaster recovery backup of local ERP system

When human misoperation, software upgrade failure, virus invasion and other scenarios occur locally, you can restore locally. However, if you cannot recover locally, such as regional network failures or natural disasters, we can use the public cloud as a remote disaster recovery site for ERP.

ERP backup on the cloud: through Huawei Cloud CBR cloud backup service, ERP VMware virtual machines in the data center under the cloud can be backed up to the cloud, and cloud or cloud recovery is supported.

In the above figure, Huawei Cloud deploys the service framework of ERP, which can backup the local host and database to the cloud. You can use the public cloud as a remote disaster recovery site, which has the features of pay-on-demand and flexible expansion, and can reduce TCO.

5. Summary

Today, enterprises face the challenge of weighing the value of increased efficiency and flexibility against the cost-effectiveness of adopting cloud ERP solutions. Regardless of the size of the business or industry, cloud ERP solutions can provide important advice and opportunities for each enterprise. Through the experience of cloud solutions on Huawei Cloud ERP, we can sum up the following highlights:

Data is secure and reliable:

1. Data center stability: T4 level computer room, double AZ highly reliable, meet customers' high security needs, all 3 copies of data are stored, cross-room and cross-region storage

2. Business security compliance: 120 + authoritative compliance certification to ensure business safety compliance

3. Rich security protection: provide 10 + security services such as WAF / DDoS to ensure business security

4. Comprehensive security guarantee: technical guarantee (physical security, network security, host security, application security, data security) + system guarantee (network security and privacy security are Huawei's highest program, working with top scientists to promote cloud security).

Flexible and flexible expansion:

1. Quick launch of business: no need to spend a long time building IDC, no high one-time investment, no need to worry about equipment depreciation

2. Flexible and flexible expansion: pay for resources on demand, expand rapidly with business demand, and calmly deal with the shortage of resources and slow response caused by the growth of business volume.

3. Network stability: dynamic BGP is adopted to effectively avoid access interruption caused by line failure of a single operator.

4. Help reduce cost and increase efficiency: one-stop cloud service, reduce the pressure of enterprise operation and maintenance, help enterprise digital transformation, achieve rapid innovation, reduce cost and increase efficiency.

Service neutrality and trust:

1. More than 30 years of ICT experience: Huawei Cloud has opened up Huawei's more than 30 years of ICT technology to customers, and is committed to providing stable, reliable, secure and innovative cloud services.

2. Strictly adhere to data neutrality: Huawei Cloud does not use technical means to illegally obtain customer data and does not commercially cash customer data.

3. Focus on infrastructure: Huawei Cloud focuses on building cloud infrastructure services to help enterprises ERP on the cloud and master core data independently.

4. High-quality ground services: Huawei Cloud has local teams and 7x24 services in 300 + cities, providing consulting, deep customization, solutions, after-sales, ticket processing and other services.

Meet a variety of needs:

1. Local ERP is moved to the cloud: Huawei Cloud helps enterprises that have purchased ERP systems to achieve cloud deployment, or migrate customers' locally deployed ERP servers to the cloud.

2. SaaS construction of one-stop ERP system: Huawei Cloud combines Kingdee, Dingjie, SAP and Yuyou to provide rich tools, technical support and best practices for enterprises to build ERP system from 0.

3. Remote disaster recovery backup of ERP system: Huawei public cloud can be used as remote disaster recovery backup for enterprises with remote disaster recovery backup needs of ERP system.

4. Mature practical experience: Huawei Cloud has practical experience in 16 major industries, such as Internet, manufacturing, agriculture, etc., to help customers create value.

At present, it is Huawei Yunshuang 11 marketing season, and hot products and solutions such as ERP Shangyun enjoy super special offers. Log on to Huawei Yunguan.com before November 30, and there are even more exciting activities such as gift packages of 10,000 yuan, roulette draw, time-limited second kill and service support plan. Interested friends, this is definitely an opportunity not to be missed!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.