Comparative analysis of virtualization architectures for fault-tolerant information systems based on the requirements of the FSTEC of Russia

Abstract

The article addresses the problem of selecting a virtualization architecture for building fault-tolerant information systems that process restricted-access data, in the context of the requirements of the Federal Service for Technical and Export Control of Russia (FSTEC of Russia). A formalized approach to the comparative analysis of virtualization architectures is proposed, based on a system of criteria reflecting key regulatory requirements, including fault tolerance, isolation of processing domains, infrastructure control level, centralized management capability, and audit transparency. To evaluate the architectures, an integral compliance indicator is introduced, enabling a well-founded comparison of different architectural solutions. Based on the analysis performed, it is shown that a cluster architecture demonstrates the highest level of compliance with regulatory requirements across all considered criteria and is the preferred option for building secure virtual infrastructures. The fundamental limitations of standalone and cloud architectures, which make them unsuitable for critical systems, are also identified.