UnionPay Cloud Product Upgrade Full-stack Nationalization Building Financial Technology Cloud Foundation

UnionPay Cloud Product Upgrade Full-stack Nationalization Building Financial Technology Cloud Foundation

Based on Software-Defined Networking (SDN) and virtualization technology, build a secure, efficient, and unified private cloud management platform for China UnionPay, realize centralized control and automated configuration of network resources, complete the domestic substitution of core infrastructure, and support the innovation and digital transformation of financial business.

Financial Technology Cloud Infrastructure Financial Cloud Infrastructure

Background and Challenges

UnionPay China, as the joint organization of China's bank cards, has extended its acceptance network to more than 181 countries and regions around the world, with more than 2,500 member institutions at home and abroad.With the rapid development of cloud computing, big data, and artificial intelligence technologies, digital transformation has become the only way for financial institutions to maintain competitiveness and sustainable development.In 2022, China UnionPay launched the upgrade project of the private cloud resource platform, aiming to build a safe, efficient, and unified financial technology cloud infrastructure platform.However, the original IT infrastructure faces multiple challenges in resource management, system integration, network architecture, security compliance, and domestic substitution, and urgently needs a more flexible and efficient infrastructure management solution.

  • Difficulties in data center resource management

    The original data center adopts a physical isolation method, with low resource utilization and poor scalability, which cannot meet the requirements of rapid business allocation

  • Complex business system integration

    High coupling of heterogeneous systems, large integration difficulties between systems, and great challenges for unified platform management

  • Rigid network architecture

    The traditional three-tier network architecture lacks flexibility and automation capabilities, and cannot efficiently support the rapid deployment and elastic expansion of cloud-based services

  • Security compliance and localization requirements

    Financial core institutions have extremely high requirements for security and data isolation, and need to accelerate the process of infrastructure localization and replacement

Background and Challenges

Solution

YunCloud Smart has developed a private cloud management platform for China UnionPay based on Software Defined Networking (SDN) technology. SDN achieves centralized management and automated configuration of network resources by separating the network control plane from the data forwarding plane. By virtualizing hardware resources, it achieves flexible allocation and efficient utilization of resources; through SDN technology, it dynamically adjusts the network topology structure and resource allocation to provide support for rapid deployment and migration of business. At the same time, it procures domestic SDN hardware and software equipment and domestic operating systems to build a full-stack domestic and independent controllable technology route from the bottom-level hardware to the cloud platform.

INFRASTRUCTURE — Domestic infrastructure layer

Domestic SDN network equipment; Domestic operating system; OpenFlow compatible switch; Virtualized computing and storage resources

SDN CONTROL — SDN control and orchestration layer

Open standard SDN controller; Network resource pooling and orchestration; 7-layer traffic control and tenant isolation; Dynamic network topology scheduling

CLOUD SERVICE — Cloud platform service layer

IaaS Infrastructure as a Service; PaaS Platform as a Service; DaaS Data Service; Integrated O&M management platform

Core characteristics

Leading SDN technology advantages

Introducing the world's leading SDN network architecture, adopting open standard SDN controller software, with excellent network orchestration and resource scheduling capabilities. Compatible with mainstream OpenFlow switch devices, ensuring strong technical openness and scalability, and achieving the separation of network control plane and data forwarding plane.

Self-owned and controllable domestic route

Develop a clear national industrialization substitution plan, through the procurement of domestic SDN equipment, domestic operating systems, and so on, to build a complete self-controllable technology route from the underlying hardware to the cloud platform. At the same time as ensuring security and controllability, provide practical driving force for the development of domestic SDN hardware and software products, and eliminate the lock-in risk of foreign manufacturers.

A complete cloud network integration architecture

Fully integrate cloud computing and SDN network technology, using a centralized controller to uniformly manage public cloud, private cloud, and traditional network resources, achieving unified orchestration and service provisioning of the network layer and computing storage layer, building a complete cloud network integration architecture system, supporting cloud deployment of various financial applications.

Unified platform operation and maintenance management

Adopting a unified operation and maintenance management platform, planning, deploying, monitoring, analyzing, and optimizing the SDN network, cloud platform resources, and application services throughout their lifecycle, achieving integrated and automated operation and maintenance capabilities. The SDN controller dynamically adjusts network resources based on real-time traffic to ensure the quality of the network for critical business.

Profit and value

Build an autonomous and controllable financial cloud infrastructure with SDN and domesticization to empower the digital transformation of UnionPay.

Large-scale Production Verification
Significant Cost Reduction and Efficiency Improvement
Domestic Substitution Implementation
Industry Demonstration and Strategic Value
14 months
Development and launch cycle
3 layers
IaaS/PaaS/DaaS cloud services
35%+
Enhancement of network resource utilization
4 stages
Quality assurance of acceptance