How Local Governments Use The Yangmingshan High-speed Rail Station Cluster In Taiwan Province To Promote Industrial Revitalization

1.

overall plan and target positioning

• treat the yangmingshan high-speed rail station group as a regional edge computing and network entry node to form a three-in-one revitalization platform of “transportation + computing power + industry”.
• goals include improving the digital capabilities of local e-commerce, tourism, smart manufacturing and agriculture, and ensuring high availability and security of online services.
• deploy vps, edge hosts and cdn nodes to achieve low-latency service distribution based on fiber optic access in the site group and pop in the computer room.
• unified management of domain names and dns policies, combined with anycast and multi-line dns to achieve high-speed nearby response to domain name resolution.
• establish standardized operation and maintenance and emergency ddos response processes to achieve minute-level switching and traffic cleaning when traffic is abnormal.

2.

basic network and computer room layout

• build a small pop computer room at each high-speed rail station or surrounding transfer point, equipped with at least 2 independent backbone optical fiber access and roadm redundancy.
• it is recommended that each pop configure an edge server group (physical + virtual) and connect to the county main data center through sd-wan.
• network bandwidth planning example: each pop site has an uplink of at least 10gbps, and the main data center aggregation bandwidth is 100gbps to support peak traffic.
• domain name resolution uses local anycast dns, and ttl is set within 60 seconds for fast switching.
• deploy a multi-active architecture for important services (ticket purchase, e-commerce, real-time monitoring) and synchronize to the nearest pop to reduce the risk of single point of failure.

3.

server, vps and host deployment strategies (including configuration examples)

• distinguished by service type: vps for lightweight services, gpu/high cpu physical servers for computing-intensive services, and distributed storage clusters for storage services.
• it is recommended to use kvm or proxmox for virtualization technology and kubernetes for containerization for elastic scaling.
• domain name and certificate management are unified using automated acme issuance and combined with waf policy to connect to the cdn portal.
• the following is an example of server configuration for typical three types of nodes (shown in the center table):

node type	cpu	memory	storage	upstream bandwidth
edge vps node	4 vcpus	8gb	100gbnvme	1–10 gbps
edge physical server	16 cores (2×8)	64gb	2tb nvme + 10tb hdd	10 gbps
clean/aggregate servers	32 cores	128gb	4tb nvme	100 gbps

• the configuration in the table can be scaled up or deployed in shards according to the number of visits and budget to ensure business flexibility.

4.

cdn and ddos defense practice

• cooperate with mainstream cdn providers (such as cloudflare, akamai, alibaba cloud cdn) to establish cache nodes near the site group to reduce back-end requests.
• waf and rate limiting are executed at the edge layer, and malicious requests are blocked at the pop layer to avoid back-to-source pressure.
• ddos defense strategy: the local pop first implements a rate limit of 5–10gbps, and then increases the rate to 100gbps and above to clean nodes when encountering a larger attack.
• daily monitoring combined with traffic anomaly detection (based on thresholds and machine learning) triggers automated scripts to adjust acls and traffic mirroring.
• the business domain name adopts multiple cdn redundancy and parallelization, and cooperates with global anycast to improve damage resistance and distribution efficiency.

5.

industrial integration and service scenarios

• travel and sightseeing: deploy edge nodes for ticketing and ar tour services at high-speed rail stations to enhance real-time interactive experience and reduce latency.
• local e-commerce: cache local merchant product libraries in edge vps to achieve second-level response and low-cost cdn bandwidth.
• smart agriculture: deploy iot gateways on surrounding farms and aggregate data through edge nodes of the station cluster for near-real-time analysis.
• innovation incubation: provide standardized vps/domain name/ssl one-stop packages to local entrepreneurial teams to lower the entry threshold.
• data compliance and localized storage: prioritize sensitive data of residents and enterprises to the county master data center to meet regulatory requirements.

6.

real cases and implementation process examples

• real operation experience (refer to the cooperation model between multiple cdns and local idcs): a county-level government connected the station group pop with the local computer room through bidding, and first deployed edge vps and dns anycast nodes in three stations.
• initial investment: approximately 3 physical servers per pop (see physical server configuration in the table above), with a total initial bandwidth budget of 30–50gbps to ensure holiday traffic.
• achievements: within half a year of launch, the peak response time of local e-commerce transactions dropped from the original average of 900ms to 120ms, and the concurrency of mobile tourist maps and ticketing increased by 3–5 times.
• operation and security: combined with the cleaning services of cloudflare or alibaba cloud, in two large traffic events, the attack traffic was successfully isolated through the 100gbps cleaning layer, and the business was not interrupted.
• promotion suggestions: phased pilot (select 3 sites → expand to all site groups), simultaneously establish local operation and maintenance teams and cloud/vendor slas, and form a replicable "site group + computing power" industry revitalization model.