Application of IT technology in the specific layout and implementation of security engineering design

Aside from the specific features of the product or application, how does IT technology and its methodology be specifically designed and implemented based on product features in engineering design?

Take the author's recent discussion with a security product manufacturer R&D staff on the NVR design as an example. Because the manufacturer is worried about the application environment, the network condition is not good enough. Therefore, the number of video inputs that can be managed by the NVR can be managed at a relatively low standard. Users are reluctant to purchase a PC server that installs NVR software, so the NVR is made into a hardware-software device. So if IT technology and its methodology are used, how should they adjust their R&D ideas?

First of all, the author suggests that manufacturers do not have to worry about the user's network environment, the rapid development of IT technology will eventually solve the bottleneck of the network, and the current cost of network products and systems and the implementation of the difficulty can already reach a popular level. Therefore, based on current network technology standards, manufacturers need to fully understand network products and provide manufacturers with future development technologies (these are available public information, most network manufacturers have provided laboratories developed by application vendors) to determine their own The direction of R&D of products has always kept their products ahead of technological development. The first thing manufacturers need to consider is whether their products can be upgraded to the 10G network environment, avoiding the lack of understanding of IT technologies and making their products “innate”.

Secondly, the author proposes to abandon the design philosophy that mainly consists of hardware and software design. Once the software development needs to rely on special hardware, then this is not an application that can run on all hardware platforms. Users need to purchase a specific hardware platform. Will cause obvious compatibility issues.

Taking the design of network storage architectures facing a safe city as an example, the initial design used a large number of small-capacity IP-SAN storage devices deployed in two layers. The reason is as follows: The controller of the small IP-SAN device has built-in NVR software, which can save the deployment of PC servers running NVR software and eliminate the bottleneck of NVR servers. Reason 2: The two-tier deployment of storage devices can reduce the bandwidth pressure of the backbone network. . Both of these reasons appear to be very reasonable at first and have also been recognized by users. The author had the privilege of participating in the project's architecture discussion and presenting his own opinions.

Here, first of all, the concept of network storage needs to be clarified. Network storage refers to sharing one or more sets of storage devices across multiple storage resources through a storage network. In the above case, first, the IP-SAN device has built-in NVR software to store a certain number of specific video, which does not meet the basic concept of network storage. There is no so-called computing resource. The IP-SAN storage device serves as the server's internal hard disk, which is the concept of Direct Attached Storage (DAS). Secondly, in addition to the task of processing the array itself, the controller of the IP-SAN storage device also needs to perform additional tasks of video recording, and its CPU and memory resources do not handle these two tasks at the same time. Performance issues. Third, it saves PC servers running NVR software, but not only does it eliminate server bottlenecks, but it also increases the burden of video computing.

Therefore, it is recommended to cancel the two-tier deployment of storage devices. The all-optical transmission network eliminates the pressure on the aggregation switch, and the backbone network exchange with the core switch can also be fully guaranteed. Therefore, a large-scale, high-performance storage device can be centrally deployed in the control center to replace hundreds of small-scale storage devices. Through the integration of server resources in the control center, the NVR software can be installed even without additional purchases of new server devices.

These are suggestions based on IT technology and methodology. They are recognized and implemented by everyone. Ultimately, the storage structure of the whole Ping'an City has been uniformly adjusted on the basis of IT, becoming the first large-scale design using a unified IT infrastructure. In the security system, the follow-up will continue to implement the data center operation and maintenance management plan based on ITIL (IT Infrastructure Library for ITSM or Information Service Management).