基于IPv6的成品油销售企业互联网业务IT基础架构设计

IT Infrastructure Design of the Internet Business IT Infrastructure of the Refined Oil Sales Enterprise Based on IPv6

【目的】近年来,随着监管力度的增大,监管机构相继提出等级保护、IPv6、信息技术应用创新等监管要求。为了满足企业自身互联网业务信息化建设的需求,应对潜藏在互联网用户中的各种威胁,且符合相关建设的规范,提出了基于IPv6的成品油销售企业互联网业务IT基础架构设计。【方法】首先,对企业互联网业务IT基础架构建设的各项需求进行分析;其次,对安全设备的配置进行研究;最后,采用智能DNS设备配置双栈解析地址来解决用户双栈访问的问题,采用功能独立且互补的安全设备组合部署来解决安全防护问题。【结果】该设计支持IPv4到IPv6过渡期的双栈访问,满足了互联网业务安全防护的需求。【结论】该设计可为IT从业人员的相关工作提供一定的参考依据。

[Purposes]Recent years,with the increasing regulatory efforts of regulatory agencies,regula⁃tory requirements such as classified protection,IPv6,and Information technology application innovation have been successively proposed.In order to meet the needs of the enterprise's own internet business in⁃formation construction,deal with the various threats hidden in the internet users,and meet the relevant construction specifications,the design of the Internet business IT infrastructure of the refined oil sales enterprise based on IPv6 is proposed.[Methods]First,this paper analyzes the requirements of enterprise internet business IT infrastructure construction;second,this paper studies the configuration of security equipment;finally,the intelligent DNS device is used to configure the dual-stack parsing address to solve the problem of user dual-stack access,and the functional independent and complementary security device combination deployment is used to solve the security protection problem.[Findings]This design method supports double stack access during the transition period from IPv4 to IPv6,and meets the re⁃quirements of Internet business security protection.[Conclusions]This design method can provide a ref⁃erence basis for the relevant work of IT professionals.