Tsinghua University
Building a Full-Traffic Visibility & Control Platform for Campus Network
Client Introduction
Tsinghua University is China’s leading higher education institution, with a campus network covering teaching, research, administrative and residential zones. Supporting over 400,000 daily terminal connections, 100G backbone links and petabyte-level data exchange, it powers core services including online education, research data synchronization and IPv6 test networks, serving as a benchmark for digital campus construction in China.
Pain Points
Before deployment, Tsinghua University’s legacy campus network architecture faced critical bottlenecks in capacity, operation, security and long-term scalability: Mirror port resource bottleneck: Only 4 mirror ports on core switches failed to match 10G+ large-traffic access, resulting in severely insufficient traffic acquisition capacity. Performance-capacity mismatch: Massive campus traffic with high bandwidth peaks (tens to hundreds of Gbps per scenario) far outstripped the 10G processing limit of traditional analysis devices. Complex multi-campus O&M burden: Hybrid architecture with physical, virtual and multi-cloud segments across campuses had no unified management entry, creating extremely high operational difficulty. Compliance traceability gap: Lack of full raw traffic retention left no basis for post-incident investigation, failing to meet compliance audit requirements. Blind spots in fault & threat detection: Diverse terminals and complex scenarios made full-link traffic visibility impossible, leading to slow troubleshooting of failures and hidden threats. Insufficient long-term scalability: Legacy architecture could not support the 5-year digital upgrade roadmap for teaching, research and administration.
Products & Solutions
Tsinghua University deployed Sinovatio Network Packet Broker (NPB) and Traffic Visualization Management Platform (MANO) to build a unified campus network traffic management solution. The solution performs one-time acquisition of campus mirrored traffic, and enables unlimited traffic reuse and preprocessing through packet replication, aggregation, filtering and load balancing. Backed by centralized management orchestration (MANO) plus security and performance monitoring modules, it supports plug-and-play deployment of security analysis and audit systems, comprehensively improving campus network security and O&M efficiency.