Client Profile

Mongdong Electric Power Group, established in 2001 and headquartered in Inner Mongolia, China, is one of the key power suppliers in China. As a subsidiary of State Grid Corporation of China, Mongdong Electric Power Group is responsible for power generation, transmission, and distribution in the eastern part of Inner Mongolia, committed to providing stable and efficient power services for local economic development.

Mongdong Electric Power Group operates a variety of power facilities, including thermal power plants, wind farms, and solar power stations, covering the entire industry chain from power generation to distribution. While continuously enhancing its technical capabilities, the group is actively promoting the development and utilization of new energy sources to reduce environmental impact. In recent years, the group has made significant progress in the construction of smart grids, improving the reliability and efficiency of power supply. As the main force in power supply in Inner Mongolia, Mongdong Electric Power Group plays a crucial role in promoting local economic development and improving the quality of life for residents.

Background

Mongdong Electric Power Group has a complex internal business system with a large number of databases, including Oracle, MySQL, SQL Server, PostgreSQL, Redis, MongoDB, Dameng, and OpenGauss. Due to historical reasons, there are numerous database versions and a variety of database clients are used. Both internal developers, operations personnel, and external outsourcing teams need access to these databases.

Challenges

1. Complex Management: The numerous internal IT systems make it difficult to manage the databases uniformly. Some personnel use traditional bastion hosts for login, while others directly connect to databases via clients, leading to management chaos.

2. High Operational Costs and Security Risks: High operational costs, management difficulties, and significant security operation risks have resulted in multiple internal data security incidents.

3. Diversity and Low Efficiency: The wide range of database types and versions requires different clients for access, resulting in low efficiency and inconsistent user experience.

4. Audit and Control Issues: Using bastion hosts and clients for data changes poses control risks, as it is difficult to intercept unauthorized operations in real-time, presenting audit challenges.

Solution and Benefits

1. Deployment Plan: The application adopts a dual-machine load balancing deployment plan, with shared storage for export files to ensure high availability and data security.

2. Unified Management: The solution manages 68 internal business systems' databases, retrieves database credentials, and restricts IP access to databases through firewall policies, preventing unauthorized access.

3. Project Isolation: With numerous internal departments, the solution uses a project system to isolate users and databases, simplifying management and improving efficiency.

4. Role Authorization and Strategy Control: The solution uses role-based authorization and platform policies to limit the number of changes. Operations that trigger change limits are automatically integrated into the ticketing process, requiring multiple approvals to ensure change security.

5. Granular Permissions and Real-time Interception: The solution implements granular permissions, sets high-risk statements, and intercepts illegal operations, effectively solving data change security issues while significantly reducing management costs.

Through these measures, Mongdong Electric Power Group achieved centralized and automated database management, significantly enhancing operational efficiency and data security, ensuring the stable operation of business systems and efficient utilization of data.