Tenders Are Invited For Computer Platforms – Central Architecture Systems And Cyber Security For The Railway It System

Computer Platforms – Central Architecture Systems And Cyber Security For The Railway It System. Processing And Storage Architecture A Central Component And A Local Component Are Provided. The Initial Architecture Of The Applications In The Iris System Was Designed In The Context Of Distributed Activities In Railway Locations Throughout Romania On A Radial Topology Network Implemented With Sdh Technology And Low Transfer Speed (32 Kb/S For Small Work Points And Up To 1 Mb/S For Large Work Points). For This Reason Applications Were Designed With Distributed Architecture (Client Components On User Workstations, Local Servers) Or With The Elimination Of The Process/Service Layer. Along With The Technological Evolution, Data Transmission Speeds On The Rentrad Network Have Increased To Min. 10 Mbps For Locations With 1-2 Workstations. In This Way, The Conditions Were Created For The Consolidation Of Operations In The Central Data Center While Preserving Local Architectures In The Regional Agencies Of Societăță Informatica Feroviaţa Sa. Local Architectures Will Implement Virtualization Solutions And Will Be Used For Process/Service Servers And Regional It Infrastructure Administration. In Defining The Requirements For The Technical Specifications, Several Objectives Were Pursued: - The Architecture Will Be Implemented In The Form Of Several Medium Virtualization Clusters; - The Virtualization Solutions Were Chosen According To The Nature Of The Hosted Applications (Oracle Virtualization For The Oracle Environment, Hyper-V For The Windows Application Environment And Redhat Openshift For The Containerized Staging Environment); - Separation Of Production And Development/Testing/Training Environments In Distinct Clusters To Be Able To Ensure Safe Testing Conditions In The Case Of Firmware Updates; The Use Of Virtualization Platforms That Allow The Implementation Of Multi-Tenant Solutions With Isolation. In This Way, Zones With Different Security Levels Can Be Implemented On Each Cluster (Critical Production Environments, Development Environments, Test Flows); - Separation Of The Storage Platform Into Two Components: - High-Performance Storage (All-Flash, At Least 4 Controllers, Nvme Transfer, High Transfer Rate, Block Only) For The Production Environment, - Storage With Classic Architecture (Low Transfer Rate, Low Speed For Disks, High Capacity, Block And File) For Historical Data, Cluster For Dmz And Repository; - All Servers Will Be Of Enterprise Class But With General Architecture To Be Easily Replaced In Case Of Failure; - Network Equipment Must Integrate Into The Architecture In Operation In The Central Datacenter. The Local Component Consists Of Two Servers Each, Installed In The Data Rooms Of The Regional It Agencies, A Nas Storage Device And Equipment. A Nas-Type Storage Equipment Identical To Those In The Regions Will Be Installed In The Railway Informatics Data Center And Is Intended For Saving Operational Information, Service Documentation And Data I