一、项目背景
中粮（COFCO）集团以农粮为核心主业，聚焦粮、油、糖、棉、肉、乳等品类，同时涉及食品、金融、地产领域。由于业态众多，业务范围广，下属单位众多，且各级企业有独立的互联网出口，同时对集团统建的业务系统又有访问需求，各单位网络安全建设水平参差不齐，给集团网络安全管理工作带来巨大挑战。为提升集团整体网络安全水平，切实解决网络安全问题的同时为下属单位解决网络防护人员、设备、能力的不足的问题，集团信息化管理部牵头启动了广域网优化及互联网出口归集试点建设工作，由中粮全资IT专业服务公司中粮信息科技有限公司采用SD-WAN技术构建集团统一网络架构，归集互联网出入口，降低网络接入成本，构建统一的网络安全运营中心，提升集团整体网络安全防护水平。
中粮福临门信息服务（天津）有限公司作为中粮油脂财务共享中心项目运营实体，办公地点位于天津市，系统服务器位于集团总部北京数据中心，为满足共享中心员工访问互联网和集团数据中心业务系统开发使用需求，需要新建一套安全可靠的网络系统满足用户使用和集团管控需求。
二、项目建设目标
三、项目历程
此项目历经六个阶段，于2021年8月1日同中粮油脂财务共享业务同时上线投入使用。
四、项目关键成果展示
网络架构分为核心层和接入层，有线网络和无线网络一体化部署，办公应用、移动终端上网、安防监控应用数据均通过以太网承载。
采用中国移动和中国电信双出口设计，业务流量优先通过中国电信出口连接集团，中国移动为备份出口，实现网络连接高可用。
通过SD-WAN将互联网出口统一归集至集团总部互联网出口，流量必须经过总部网络安全设备，统一进行安全监控，降低本地网络安全维护成本。
此方案综合考虑了安全、性能及成本问题，在满足共享中心的业务需求的同时降低本地的网络安全运维成本。
五、项目关键成果展示
本项目建设为共享中心提供了稳定可靠、安全便捷的可视化网络接入环境，可实时监控各类网络流量分布，助力中粮油脂财务共享业务顺利上线。
采用SDWAN接入方式，避免了点对点专线高成本投入，保障业务需求的同时，节约了项目投资成本。
本项目的试点实施，为集团互联网出口归集项目在全集团的推广，积累了宝贵经验。
六、未来展望
通过本项目的建设，中粮信科将技术研究落地于实际的项目建设，积累了项目实施经验及技术能力，后续将持续优化中粮油脂财务共享中心网络使用效果，总结归纳项目经验，进一步完善集团互联网出口归集方案，扩大试点范围。为集团及各级单位的互联网出口归集建设及网络安全运营管理提供方案设计及实施解决方案，搭建安全、稳定、高效的云、网、端数字底座，助力集团十四五数字化建设。
翻译：
Project background
COFCO Group takes agriculture and grain as its core business, focusing on grain, oil, sugar, cotton, meat, milk and other categories, and involves food, finance and real estate fields. Due to the numerous business forms, wide business scope, numerous subordinate units, independent Internet export of enterprises at all levels, and the need for access to the group’s unified business system, the level of network security construction of each unit is uneven, which brings great challenges to the group’s network security management. In order to improve the overall level of network security of the group, effectively solve the network security problem and solve the problem of network protection personnel, equipment and capacity shortage for the subordinate units, the information management Department of the Group led the launch of WAN optimization and Internet export collection pilot construction.
Cofco Information Technology Co., LTD., a wholly-owned IT professional service company of CofCO, adopts SD-WAN technology to construct the unified network architecture of the group, collect Internet entrances and exits, reduce network access costs, build a unified network security operation center, and improve the overall network security protection level of the group.
Cofco Fulinmen Information Service (Tianjin) Co., Ltd. is the project operating entity of China Cereals & Oils Fat & Financial Sharing Center. Its office is located in Tianjin, and its system server is located in Beijing Data Center of the Group headquarters. In order to meet the needs of employees of the sharing center to access the Internet and the development and use of the Group data center business system, It is necessary to build a set of safe and reliable network system to meet the needs of users and group management and control.
Project construction objectives
Project history
This project has gone through six stages and will be put into use on August 1, 2021 at the same time as CofCO Oil and Oil financial sharing business.
Display of key project achievements
The network architecture is divided into a core layer and an access layer. Wired and wireless networks are deployed in an integrated way. Data of office applications, mobile terminal Internet access, and security monitoring applications are carried over the Ethernet.
The dual-export design of China Mobile and China Telecom is adopted. And the business traffic preferentially passes through China Telecom Export Connection Group. With China Mobile as the backup export to realize high availability of network connection.
SD-WAN is used to centrally collect the Internet egress to the Internet egress at the headquarters. Traffic must pass through the headquarters network security device for unified security monitoring, reducing the local network security maintenance cost.
This solution takes security, performance, and cost into consideration, meets the service requirements of the shared center. And reduces the local network security operation and maintenance costs.
Display of key project achievements
The construction of this project provides a stable, reliable, safe and convenient visual network access environment for the sharing center. Which can monitor the distribution of various network traffic in real time and help COFCO oil and oil financial sharing business go online smoothly.
SDWAN access mode is adopted to avoid the high cost input of point-to-point dedicated line and save project investment cost while ensuring business requirements.
The pilot implementation of this project has accumulated valuable experience for the promotion of the Group’s Internet export collection project in the whole group.
Future Outlook
Through the construction of this project, CofCO Information Technology Department has implemented the technical research into the actual project construction, accumulated the project implementation experience and technical capability. In the future, it will continue to optimize the network use effect of CoFCO Oil and Oil Financial Sharing Center, summarize the project experience. Further improve the group’s Internet export collection program, and expand the scope of the pilot. Provide scheme design and implementation solutions for the Group and units at all levels of Internet export collection construction and network security operation management, build a secure, stable and efficient cloud, network and terminal digital base, and help the Group’s 14th Five-Year digital construction.
本文由数字化转型网（www.szhzxw.cn）转载而成，来源：中粮信息科技；编辑/翻译：数字化转型网宁檬树。
免责声明: 本网站(http://www.szhzxw.cn/)内容主要来自原创、合作媒体供稿和第三方投稿，凡在本网站出现的信息，均仅供参考。本网站将尽力确保所提供信息的准确性及可靠性，但不保证有关资料的准确性及可靠性，读者在使用前请进一步核实，并对任何自主决定的行为负责。本网站对有关资料所引致的错误、不确或遗漏，概不负任何法律责任。
本网站刊载的所有内容(包括但不仅限文字、图片、LOGO、音频、视频、软件、程序等) 版权归原作者所有。任何单位或个人认为本网站中的内容可能涉嫌侵犯其知识产权或存在不实内容时，请及时通知本站，予以删除。
