容灾解决方案Disaster Recovery Solutions

为企业提供高可用性、智能切换的双活架构容灾方案，确保业务连续性Provide high-availability, intelligent failover dual-active architecture disaster recovery solutions for enterprises to ensure business continuity

了解详情Learn More
方案概述Overview

容灾解决方案简介Disaster Recovery Solutions Introduction

提瑞科技提供全面的容灾解决方案，采用双活架构设计，确保企业业务系统的高可用性和灾备能力。基于多年的行业经验和专业技术，我们为客户提供端到端的容灾解决方案，确保业务连续性和数据安全。Trisfal provides comprehensive disaster recovery solutions with dual-active architecture design to ensure high availability and disaster recovery capabilities for enterprise business systems. Based on years of industry experience and professional expertise, we provide end-to-end disaster recovery solutions to ensure business continuity and data security.

架构说明Architecture Description

架构设计详情Architecture Design Details

01

网络NetworkNetwork

  • 1、总部、各子公司针对系统的访问，将使用专线/IPsec作为主要网络，其他用户通过公网访问1. Headquarters and subsidiaries will use dedicated lines/IPsec as the primary network for system access, while other users access via public internet
  • 2、AWS与阿里云的互联将用现有100M以上物理专线或建立IPsec VPN作为备用网络2. The interconnection between AWS and Alibaba Cloud will use existing 100M+ dedicated lines or establish IPsec VPN as backup network
02

域名解析Domain Name ResolutionDomain Name Resolution

  • 1、在阿里云上建立域名解析节点，并配置从主DNS同步（若DNS在AWS，则需在云上搭建只读DNS）1. Establish domain name resolution nodes on Alibaba Cloud and configure synchronization from primary DNS (if DNS is on AWS, read-only DNS needs to be built on cloud)
03

应用部署Application Deployment

  • 1、采用阿里云负载均衡SLB作为前端，后端应用使用ECS/BES。同一应用在两地部署，实现双活架构，通过SLB的健康检查实现自动切换1. Use Alibaba Cloud SLB as the frontend, with backend applications using ECS/BES. The same application is deployed in two locations to achieve dual-active architecture, with automatic failover through SLB health checks
  • 2、对于有状态应用，需要考虑数据同步机制，可使用Redis主从复制或其他适合的方案2. For stateful applications, data synchronization mechanisms need to be considered, such as Redis master-slave replication or other suitable solutions
04

数据库访问及同步Database Access & Sync

  • 1、阿里云及AWS应用统一连接到AWS的数据库集群（包括RDS的读库）1. Alibaba Cloud and AWS applications uniformly connect to AWS database clusters (including RDS read replicas)
  • 2、AWS的数据库集群（包括MySQL、Redis）采用DTS单向/双向、实时同步到云数据库中2. AWS database clusters (including MySQL, Redis) use DTS one-way/two-way real-time synchronization to cloud databases
核心架构Core Architecture

架构设计总览Architecture Design Overview

双活架构设计Dual-Active Architecture Design

AWS (主) AWS (Primary) 业务系统 Business System 数据存储 Data Storage 阿里云 (备) Alibaba Cloud (Backup) 业务系统 Business System 数据存储 Data Storage 数据同步 Data Sync 负载均衡Load Balancing

我们的容灾解决方案采用双活架构，将业务系统同时部署在AWS和阿里云上，通过智能负载均衡和健康检查机制实现故障自动切换，确保业务连续性。Our disaster recovery solution adopts a dual-active architecture, deploying business systems simultaneously on AWS and Alibaba Cloud, achieving automatic failover through intelligent load balancing and health check mechanisms to ensure business continuity.

网络设计Network Design

组网架构设计Network Architecture Design

🌐 网络连接方案

主连接Primary ConnectionPrimary Connection

使用物理专线（100M）连接阿里云和AWS，确保高速、稳定的数据传输。Use dedicated lines (100M) to connect Alibaba Cloud and AWS to ensure high-speed and stable data transmission.

  • 带宽：100MBandwidth: 100M
  • 可用性：99.99%Availability: 99.99%
  • 延迟：低Latency: Low

备用连接Backup ConnectionBackup Connection

使用IPSEC VPN加密隧道作为备用连接，确保网络可靠性。Use IPSEC VPN encrypted tunnel as backup connection to ensure network reliability.

  • 带宽：50MBandwidth: 50M
  • 可用性：99.95%Availability: 99.95%
  • 加密：AES-256Encryption: AES-256
阿里云 Alibaba Cloud AWS AWS 物理专线 (100M) Dedicated Line (100M) VPN备用 (50M) VPN Backup (50M) 子公司 Subsidiary
DNS设计DNS Design

DNS架构设计DNS Architecture Design

🔧 DNS容灾设计

我们的DNS容灾设计确保在任何情况下都能提供可靠的域名解析服务：Our DNS disaster recovery design ensures reliable domain name resolution services under any circumstances:

  • 在DR云上创建只读域控制器，同步AWS域控制器信息与DNS信息Create read-only domain controllers on DR cloud, synchronizing AWS domain controller and DNS information
  • 云上使用阿里云PrivateZone与自建DNS配合使用Use Alibaba Cloud PrivateZone on cloud in conjunction with self-built DNS
  • 各子公司DNS系统配置转发规则也添加云上的DNS服务器IPConfigure forwarding rules in subsidiary DNS systems and add cloud DNS server IPs
  • 当AWS的DNS服务器故障后，可以由阿里云上的DNS承担转发解析的功能When AWS DNS servers fail, Alibaba Cloud DNS can take over the forwarding and resolution functions
AWS DNS服务器 AWS DNS Server 主DNS Primary DNS 阿里云 DNS Server Alibaba Cloud DNS Server 备用DNS Backup DNS 子公司A Subsidiary A DNS转发 DNS Forwarding 子公司B Subsidiary B DNS转发 DNS Forwarding DNS同步 DNS Sync
系统设计System Design

系统架构设计System Architecture Design

⚙️ 系统架构

我们的系统架构设计基于高可用性和安全性原则：Our system architecture design is based on high availability and security principles:

  • 基于ACK Pro拓管版集群（可用性99.95%）部署业务系统Deploy business systems based on ACK Pro cluster (99.95% availability)
  • 使用负载均衡SLB作为集群负载出口Use SLB load balancer as cluster load egress
  • 使用自建WAF作为云上应用边界的应用安全防护Use self-built WAF as application security protection for cloud application boundaries
  • 多可用区部署，确保系统高可用性Multi-AZ deployment to ensure system high availabilityMulti-AZ deployment to ensure system high availability
SLB负载均衡 SLB Load Balancer WAF安全防护 WAF Security ACK Pro集群 ACK Pro Cluster 多可用区部署 (99.95%可用性) Multi-AZ (99.95% Availability) 可用区1 AZ 1 可用区2 AZ 2
数据管理Data Management

数据同步Data Synchronization

🔄 数据同步方案

我们采用实时数据同步机制，确保AWS和阿里云之间的数据一致性：We adopt real-time data synchronization mechanism to ensure data consistency between AWS and Alibaba Cloud:We adopt real-time data synchronization mechanism to ensure data consistency between AWS and Alibaba Cloud:

容器镜像同步Container Image SynchronizationContainer Image Sync

使用ACR和Harbor实现容器镜像在AWS和阿里云之间的同步，确保两边运行相同版本的应用。Use ACR and Harbor to synchronize container images between AWS and Alibaba Cloud, ensuring both sides run the same version of applications.

数据库同步Database SynchronizationDatabase Sync

使用数据库同步工具实现AWS和阿里云之间的数据库实时同步，确保数据一致性。Use database synchronization tools to achieve real-time database synchronization between AWS and Alibaba Cloud, ensuring data consistency.Use database synchronization tools to achieve real-time database synchronization between AWS and Alibaba Cloud, ensuring data consistency.

AWS AWS 数据库 Database 容器镜像仓库 Container Registry 阿里云 Alibaba Cloud 数据库 Database 容器镜像仓库 Container Registry 同步服务 Sync Service DTS + 镜像同步 DTS + Image Sync 数据同步 Data Sync 数据同步 Data Sync
演练计划Drill Plan

灾备演练Disaster Recovery DrillDisaster Recovery Drill

📋 灾备演练流程Disaster Recovery Drill ProcessDisaster Recovery Drill Process

1

计划阶段Planning PhasePlanning Phase

制定容灾演练方案、测试验证方案、应急预案，设定干系人。Develop disaster recovery drill plans, testing and verification plans, emergency response plans, and identify stakeholders.Develop disaster recovery drill plans, testing and verification plans, emergency response plans, and identify stakeholders.

2

方案评审阶段Review PhaseReview Phase

进行方案评审，准备灾备演练总结报告。Conduct plan reviews and prepare disaster recovery drill summary reports.

3

执行阶段Execution PhaseExecution Phase

准备演练资源，确定演练窗口和人员职责，进行网络链路验证和中断链路测试。Prepare drill resources, determine drill windows and personnel responsibilities, conduct network link verification and interruption link testing.Prepare drill resources, determine drill windows and personnel responsibilities, conduct network link verification and interruption link testing.

4

验证恢复阶段Verification & Recovery PhaseVerification & Recovery Phase

进行业务数据验证和业务验证，执行数据回切和双活架构恢复。Conduct business data verification and business validation, execute data rollback and dual-active architecture recovery.Conduct business data verification and business validation, execute data rollback and dual-active architecture recovery.

5

总结阶段Summary PhaseSummary Phase

提供灾备系统改进建议，完善容灾方案。Provide disaster recovery system improvement suggestions and refine disaster recovery plans.Provide disaster recovery system improvement suggestions and refine disaster recovery plans.

核心优势Core Advantages

方案优势Solution AdvantagesSolution Advantages

🔒

高可用性High AvailabilityHigh Availability

多可用区部署，各组件可用性均超过99.95%，确保业务连续性。Multi-AZ deployment with each component availability exceeding 99.95%, ensuring business continuity.

⚡

智能切换Intelligent FailoverIntelligent Failover

通过健康检查机制实现故障自动切换，无需人工干预。Automatic failover through health check mechanism without manual intervention.

🛡️

数据安全Data SecurityData Security

使用IPSEC VPN加密隧道，确保数据传输安全。Use IPSEC VPN encrypted tunnel to ensure data transmission security.

📈

灵活扩展Flexible Scaling

支持动态调整流量分发权重，根据业务需求灵活扩展。Support dynamic adjustment of traffic distribution weights and flexible scaling according to business needs.

🧪

完整演练Complete Drills

提供完整的灾备演练流程，确保方案可行性和有效性。Provide a complete disaster recovery drill process to ensure the feasibility and effectiveness of the solution.

💼

专业服务Professional Services

由经验丰富的专业团队提供全程技术支持和服务。Full technical support and services provided by an experienced professional team.