Purpose <p>The Hefei Advanced Light Facility (HALF), a fourth-generation synchrotron radiation source utilizing diffraction-limited storage ring technology in the low-energy regime, imposes stringent requirements on the performance and reliability of its network system. This paper details the network topology design for the HALF, aiming to meet these rigorous demands.</p> Methods <p>By implementing virtual local area network (VLAN) technology, the overall network is segmented into several independent subnets, achieving network isolation, and effectively enhancing security and stability. Additionally, a demilitarized zone (DMZ) was established, with security measures such as firewalls and antivirus software deployed to mitigate potential security threats. A network monitoring system based on the open-source software Zabbix was developed and functionally tested in the Hefei Light Source (HLS), validating its capability to effectively perform network monitoring and abnormal alarm functions.</p> Results <p>These measures ensure that the designed network system not only meets the specific requirements of HALF, but also provides robust support for its stable and efficient operation, ensuring the project achieves its predetermined goals.</p> Conclusion <p>The HALF control system employs a dual-network architecture with VLAN-segmented control subnets and integrated virtualization technologies, complemented by robust security measures, to establish a secure, efficient, and scalable infrastructure that ensures continuous system stability while maintaining future-focused network monitoring capabilities.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Design of the network system for Hefei advanced light facility

  • Haishan Yu,
  • Tian Qin,
  • Lei Cui,
  • DaDi Zhang,
  • Chuan Li,
  • Gongfa Liu

摘要

Purpose

The Hefei Advanced Light Facility (HALF), a fourth-generation synchrotron radiation source utilizing diffraction-limited storage ring technology in the low-energy regime, imposes stringent requirements on the performance and reliability of its network system. This paper details the network topology design for the HALF, aiming to meet these rigorous demands.

Methods

By implementing virtual local area network (VLAN) technology, the overall network is segmented into several independent subnets, achieving network isolation, and effectively enhancing security and stability. Additionally, a demilitarized zone (DMZ) was established, with security measures such as firewalls and antivirus software deployed to mitigate potential security threats. A network monitoring system based on the open-source software Zabbix was developed and functionally tested in the Hefei Light Source (HLS), validating its capability to effectively perform network monitoring and abnormal alarm functions.

Results

These measures ensure that the designed network system not only meets the specific requirements of HALF, but also provides robust support for its stable and efficient operation, ensuring the project achieves its predetermined goals.

Conclusion

The HALF control system employs a dual-network architecture with VLAN-segmented control subnets and integrated virtualization technologies, complemented by robust security measures, to establish a secure, efficient, and scalable infrastructure that ensures continuous system stability while maintaining future-focused network monitoring capabilities.