基于主备模式的堡垒机网络架构

伴随网络信息科技迅猛发展，信息网络安全等级保护制度日益被各个高校所重视和落实，如何加强园区网的网络信息资源的安全管理变成一个研究热点和难点.提出一种基于主、备机冗余的堡垒机网络架构设计，将堡垒机引入到高校网络信息安全管理中，总结高校面临的各种安全管理问题.本文分析堡垒机的各个核心管理功能，并将堡垒机引入到学校核心与数据中心之间的WAF防护体系中，给出核心配置环节和代码，最终总结全文.

Network Architecture of Fortress Machine Based on Main Standby Mode

With the rapid development of network information technology, its security protection system is increasingly being valued by various colleges and universities. How to strengthen the safety management of network information resources of campus network has become a research hotspot and difficulty. This study proposes a design of the fortress machine network architecture based on the main and standby redundancy, and takes the fortress machine into the management work of the university network information security. We also summarize the security management problems. The paper analyzes various fortress machine core management functions, and the fortress machine is introduced to the WAF protection system between the school and the core of the data center. It gives the core link configuration and code as well as the summary in the end.