SlideShare ist ein Scribd-Unternehmen logo
1 von 48
Downloaden Sie, um offline zu lesen
Current & Future Linux on System z
Technology Deep Dive
NSA Open Source User Group Meeting
Friday 29-JAN-2010
UNCLASSIFIED
Introductions
● Shawn Wells (sdw@redhat.com, 443-534-0130)
U.S. Intelligence Community Sales Manager
– Former NSA-er (S31121, Data Management)
– Former Tech Director, led Red Hat's Global System z Business
Unit until 1-DEC-2010
– RHCE
● Jim Stann (jstann@redhat.com, 703-703-626-8580
Senior Solutions Architect
– Formally SUN from 1996-2009
– Moved to Red Hat as a technical pre-sales engineer
– RHCE
Agenda
● Current technology through RHEL 5.4 relating to
both x86 and s390x platforms
– RHEV / KVM
– System z Hardware Enablement
– Performance Numbers
● Roadmap moving forward (RHEL 5.5, RHEL6)
– Ext4
– Kernel patches & improvements
– Performance
● Open Dialog
Development Model
Development Model
Development Model
7
Red Hat Confidential - NDA required
Release Roadmap Highlights: RHEL 5
■ RHEL 5.3 released January 20, 2009
● Virtualization
● Improved scalability (Xen-based)
● 126 sockets & 1TB memory per host
● > 4 nics and > 16 disks per guest
● 2MB page table support
● AMD RVI support
● Virtio drivers to run 5.3 on KVM hosts
● libvirt-cim CIM/WBEM provider
● Timer improvements
● Platform enablement
● Nehalam enablement and testing
● OFED 1.3
● SystemTap updates
● GDB debugger refresh
● FCoE enablement for specific configurations
● Broad driver refresh
● GFS2 fully supported
● Ext4 TechPreview
● DHCPv6 Support
FasTr
ack
■ FasTrack 7%
● Early release of low impact fixes
■ Hardware Enablement - 7%
● New chipsets and processor feature
support
■ New Features - 21%
● Feature requests from customers
and partners
■ Other - 65%
● Bugfixes
● Documentation
8
Red Hat Confidential - NDA required
Release Roadmap Highlights: RHEL 5 contd.
■ RHEL 5.4 released August 2009
● Virtualization technology refresh
● Addition of KVM in parallel to Xen
● VT-D / IOMMU support for KVM & Xen
● 32 pv-guest on 64 bit hosts supported with Xen
● Improved timer support for FV guests (kvm & VMWare)
● Libvirt refresh
● Platform enablement
● RAS, EDAC
● OFED 1.4
● Hugepage core dump support
● Storage improvements (fcoe-utils, IO accounting in iostat, iSCSI offload, driver updates, XFS)
● Network improvements (IO/AT, IPv6, drivers)
● IPMI update
● SystemTap updates
■ RHEL 5.5 planned for early Q2 2010
● Regular minor release with hardware enablement, reduced content compared to 5.4
● Intel Boxboro-EX platform, AMD Magny-Cours processor
● PCIe AER support
9
Red Hat Confidential - NDA required
Release Roadmap Highlights: RHEL 6
■ Planned for early 2010, development currently in Fedora 12
■ Planning focus
● Virtualization – making RHEL an optimized host & guest
● Performance & scalability optimized
● Qumranet thin client enablers
● Resource containment, guest resource isolation & security containment
● Device optimization
● Manageability
● Integration with RHEV Management
● AMQP messaging base (for use in virt, MRG)
● IPA enablers – for audit, smartcard, desktop integration, MRG & virt – enabling centralized
administration
● Open standard management enablers
● Power Management
● For virt, bare metal, laptop
● Hardware level as well as dynamic system service startup and suspend
● Scalability
● Larger max CPU, mem, IRQs, filesystem – both virt & bare metal
● RAS (Hotplug, data integrity)
● Hardware Enablement
● UEFI – new bios boot loader interface, when legacy mode goes away
● Currency – leveraging RH's & community innovation post-RHEL5 codebase
RHEL 5.3
Current Technology
RHEL 5.3: Overview
 FasTrack 7%
 Early release of low impact fixes
 Hardware Enablement - 7%
 New chipsets and processor
feature support
 New Features - 21%
 Feature requests from customers
and partners
 Other - 65%
 Bugfixes
 Documentation
 GA on January 20, 2009
 ~150 additions, ~3,400 BugZillas
FasTrack
Features
Hardware
Other
RHEL 5.3: Networking
 Provision of several selectable TCP congestion modules (2.6.13)
 Ref: http://lwn.net/Articles/128681/
 IPV6 - Support several new sockopt / ancillary data in Advanced API (2.6.14)
 IPv4/IPv6: UFO (UDP Fragmentation Offload) (2.6.15)
 Offloads IP fragmentation functionality of large UDP datagram to hardware
 Improves performance
 Add nf_conntrack subsystem: (2.6.15)
 Common IPv4/IPv6 generic connection tracking subsystem
 Allows IPv6 to have a stateful firewall capability (not previously possible)
 Increased security
 Enables analysis of whole streams of packets, rather than only checking
the headers of individual packets
RHEL 5.3: Networking
 IPv6
 RFC 3484 compliant source address selection (2.6.15)
 Add support for Router Preference (RFC4191) (2.6.17)
 Add Router Reachability Probing (RFC4191) (2.6.17)
 Generic segmentation offload (GSO) (2.6.18)
 Available in place of TSO (TCP Segmentation Offload)
 Performance improvements for large packet transfers without hardware
assistance
 SELinux per-packet access controls
 Replaces old packet controls
 Add Secmark support to core networking
 Allows security subsystems to place security markings on network
packets (2.6.18)
 Inclusion of DCCPv6 – Datagram Congestion Control Protocol (2.6.16)
RHEL 5.3: Storage Management
 RAID 4/5/10 support added to dm-raid.
 Full support for software iSCSI target.
 Full support for LVM cluster mirror (cmirror).
 Add the ability to prioritize paths on HP MSA/HSV active/passive storage
controllers.
 Reduce boot time by improving lvmcache, to reduce the amount of device
scanning.
 Enhanced disk partition statistics
RHEL 5.3: File System / Storage Mgmt
 Block device encryption support, including support for /root partition, including
configuration in anaconda installer.
 ext4 tech preview
 samba: rebased from 3.0.28 to 3.0.32 for bugfixes
 Now supports Windows Vista and 2008
 fixes for DC functionality (interoperability with Citrix and Domain trusts)
 Ecryptfs fixes (tech preview)
RHEL 5.3: System Services
 Rebased version of CUPS print server, now fully Kerberized
 dhcpv6 support
 ktune, a service that sets several kernel tuning parameters to values suitable for
specific system profiles. Currently, ktune provides a profile for large-memory
systems running disk-intensive and network-intensive applications. New
package, tech preview.
 Package upstream rebases to the following utilities:
 ksh, lm-sensors, lftp, net-snmp, openIPMI-tool, openldap, openmotif, python-
urlgrabber, openPegasus, VNC
 RPM to Fedora 9 version, which includes numerous bugfixes
 yum and yum-utils primarily for speed improvements
 totem, rb, and gstreamer rebased to enable modular codecs addition
 Numerous wireshark security fixes
RHEL 5.3: Security Enhancements
 pkinit clients can now be configured to use keys for client certificates which may
not contain Kerberos-specific extensions & interoperability fixes
 nss_ldap now configured with support for paged results extension
 SELinux: enablement of New NetworkManager and Audit functionality.
 SELinux: Hundreds of AVC denial fixes.
 Improved Audit and Logging
 TTY input audit support
 Remote audit logging via unencrypted connection
RHEL 5.3: System z Specifics
BugZilla ID Summary
46327 stage1: sshd error loading shared lib: libfipscheck.so.1
184770 LTC18425-62140: (big) xDR system Initialization for LPAR Clients
472788 rhel 5.3 snapshot3 scsi mpath install failed on z9bc lpar
439479 LTC:5.3:201474:Include gcc 4.3 as Add-On for latest z10 instruction set support
439440 LTC:5.3:201160:Long Random Numbers Generation
439441 LTC:5.3:201158:Selective Logging of ECKD DASD devices
439482 LTC:5.3:201542:FCP - Enhanced Trace Facility
447379 LTC:5.3:200994:Linux CPU Node Affinity
463917 unable to find DASD drives to install
439484 LTC:5.3:201490:Libica Library: Integration of Icainfo
43946 LTC:5.3:201360:OSA 2 Ports per CHPID Support - Installer Enhancements
466474 [RHEL5.3] *** glibc detected *** /usr/bin/python: double free or corruption (!prev): 0x000 0000080d55e90 ***
466305 cosmetic error message: failure in nl_set_device_mtu
466291 anaconda silently omits uninitialized disk
RHE 5.4
RHEL 5.4 : Overview
 The official GA release of Red Hat Enterprise Linux 5.4 (*kernel-2.6.18-164.el5*)
was released on 02-Sep-2009
 Generic (not s390 specific) updates include
 Virtualization: full support for the Kernel-based Virtual Machine (KVM)
hypervisor only on x86_64 while Xen only x86 & Power based virtualization is
still available & supported
 Network: Kernel & Userspace update to support Generic Receive Offload
(GRO) which increases the performance of inbound network connections by
reducing the amount of processing done by the CPU. Furthermore Netfilter
Framework & Bind Updates
 Storage: Support for the XFS file system has also been added to the kernel
as a Technology Preview.
 Tools: SystemTap is now fully supported, and has been re-based to the
latest upstream version.
RHEL 5.4: File System / Storage Mgmt
 Add integrity check to cryptsetup-luks, in order to meet FIPS-140 requirements.
 Ext4 - refreshed the backport for our tech preview to bring in bug fixes and
support for delayed allocation.
 File system freeze/quiesce interface added to support hardware snapshots for file
systems.
 Full support for FUSE and libfuse to allow end users to more easily install
and use their own user space FUSE file systems.
RHEL 5.4: System z Specifics
BugZilla ID Summary
475556 [LTC 5.4 FEAT] DS8000 support: Large volume support (userspace) [201738]
475569 [LTC 5.4 FEAT] Shutdown actions tools [201755]
461288 [EMC 5.4 feat] Require kernel support to issue Control I/O to CKD dasd on EMC Symmetrix
arrays
474688 [LTC 5.4 FEAT] Automatic IPL after dump (kernel) [201169]
475346 [LTC 5.4 FEAT] Improve checking mechanisms and workflow of Linux on System z Anaconda
install process [201676]
475670 [LTC 5.4 FEAT] Program directed IPL support - no XML in system dumper [200782]
475552 [LTC 5.4 FEAT] FCP - Performance data reports [201730]
488496 [LTC 5.4 FEAT] 201173:Crypto Hardware Enablement Device Driver Support - toleration
475564 [LTC 5.4 FEAT] Shutdown actions interface (userspace) [201748]
474679 [LTC 5.4 FEAT] Dynamic CPU hotplug daemon for System z [201132]
475345 [LTC 5.4 FEAT] Change list of Anaconda network alternatives to indicate supported devices on
System z [201679]
475551 [LTC 5.4 FEAT] TTY terminal server over IUCV (kernel) [201734]
BugZilla ID Summary
475556 [LTC 5.4 FEAT] DS8000 support: Large volume support (userspace) [201738]
475569 [LTC 5.4 FEAT] Shutdown actions tools [201755]
461288 [EMC 5.4 feat] Require kernel support to issue Control I/O to CKD dasd on EMC Symmetrix
arrays
474688 [LTC 5.4 FEAT] Automatic IPL after dump (kernel) [201169]
475346 [LTC 5.4 FEAT] Improve checking mechanisms and workflow of Linux on System z Anaconda
install process [201676]
475670 [LTC 5.4 FEAT] Program directed IPL support - no XML in system dumper [200782]
475552 [LTC 5.4 FEAT] FCP - Performance data reports [201730]
488496 [LTC 5.4 FEAT] 201173:Crypto Hardware Enablement Device Driver Support - toleration
475564 [LTC 5.4 FEAT] Shutdown actions interface (userspace) [201748]
474679 [LTC 5.4 FEAT] Dynamic CPU hotplug daemon for System z [201132]
475345 [LTC 5.4 FEAT] Change list of Anaconda network alternatives to indicate supported devices on
System z [201679]
475551 [LTC 5.4 FEAT] TTY terminal server over IUCV (kernel) [201734]
475563 [LTC 5.4 FEAT] Shutdown actions interface (kernel) [201747]
474664 [LTC 5.4 FEAT] System z support for processor degradation
[200975]
475334 [LTC 5.4 FEAT] FCP - Performance Data collection (kernel)
[201590]
475572 [LTC 5.4 FEAT] HiperSockets Layer3 support for IPv6 [201751]
475548 [LTC 5.4 FEAT] FCP - Performance data collection (blktrace)
[201729]
477189 [LTC 5.4 FEAT] Pick up latest version of s390-tools
475558 [LTC 5.4 FEAT] TTY terminal server over IUCV (userspace)
[201735]
474646 [LTC 5.4 FEAT] Kernel NSS support - kernel part [200790]
475333 [LTC 5.4 FEAT] FCP - Performance Data collection & analysis
(userspace) [201591]
475571 [LTC 5.4 FEAT] Large image dump on DASD [201752]
BugZilla ID Summary
475556 [LTC 5.4 FEAT] DS8000 support: Large volume support (userspace) [201738]
475569 [LTC 5.4 FEAT] Shutdown actions tools [201755]
461288 [EMC 5.4 feat] Require kernel support to issue Control I/O to CKD dasd on EMC Symmetrix
arrays
474688 [LTC 5.4 FEAT] Automatic IPL after dump (kernel) [201169]
475346 [LTC 5.4 FEAT] Improve checking mechanisms and workflow of Linux on System z Anaconda
install process [201676]
475670 [LTC 5.4 FEAT] Program directed IPL support - no XML in system dumper [200782]
475552 [LTC 5.4 FEAT] FCP - Performance data reports [201730]
488496 [LTC 5.4 FEAT] 201173:Crypto Hardware Enablement Device Driver Support - toleration
475564 [LTC 5.4 FEAT] Shutdown actions interface (userspace) [201748]
474679 [LTC 5.4 FEAT] Dynamic CPU hotplug daemon for System z [201132]
475345 [LTC 5.4 FEAT] Change list of Anaconda network alternatives to indicate supported devices on
System z [201679]
475551 [LTC 5.4 FEAT] TTY terminal server over IUCV (kernel) [201734]
475563 [LTC 5.4 FEAT] Shutdown actions interface (kernel) [201747]
474664 [LTC 5.4 FEAT] System z support for processor degradation
[200975]
475334 [LTC 5.4 FEAT] FCP - Performance Data collection (kernel)
[201590]
475572 [LTC 5.4 FEAT] HiperSockets Layer3 support for IPv6 [201751]
475548 [LTC 5.4 FEAT] FCP - Performance data collection (blktrace)
[201729]
477189 [LTC 5.4 FEAT] Pick up latest version of s390-tools
475558 [LTC 5.4 FEAT] TTY terminal server over IUCV (userspace)
[201735]
474646 [LTC 5.4 FEAT] Kernel NSS support - kernel part [200790]
475333 [LTC 5.4 FEAT] FCP - Performance Data collection & analysis
(userspace) [201591]
475571 [LTC 5.4 FEAT] Large image dump on DASD [201752]
475530 [LTC 5.4 FEAT] Extra kernel parameter via VMPARM [201726]
475557 [LTC 5.4 FEAT] DS8000 Disk Encryption [201740]
474942 [LTC 5.4 FEAT] Add vmconvert option to vmur tool [201758]
475570 [LTC 5.4 FEAT] Provide service levels of HW & Hypervisor in
Linux [201753]
468172 FEAT: 201085: cio_ignore entry in generic.prm for LPARs
474700 [LTC 5.4 FEAT] Crypto Device Driver use of Thin Interrupts
[201174]
475350 [LTC 5.4 FEAT] Dialog defaults for Linux on System z specific
Anaconda [201677]
475820 [LTC 5.4 FEAT] Linux to add Call Home data [201167]
484296 [LTC 5.4 FEAT] Automatic IPL after dump (userspace) [201757]
S390-tools package rebased to Version 1.8.1
 The s390utils package has been rebased to version 1.8.1.
 This package provides the essential tool chain for Linux on System z. It contains everything
from the boot loader to dump related tools for a system crash analysis .
 News Features (excerpt)
 DASD related tools: Add Large Volume Support for ECKD DASDs
 Ipl_tools: Can be used to change the reipl & shutdown behaviour
 ziomon tools: Set of tools to collect data for zfcp performance analysis.
 lsluns: List available SCSI LUNs depending on adapter or port.
 lszcrypt: Show information about zcrypt devices and configuration.
 chzcrypt: Modify zcrypt configuration.
 cpuplugd: Daemon that manages CPU- and memory-resources based on a set of rules.
Depending on the workload CPUs can be enabled or disabled. The amount of memory
can be increased or decreased exploiting the Cooperative Memory Management
(CMM1) feature.
 chchp: Tool to modify channel-path states
 lschp: Tool to list information about available channel-paths.
 mon_procd: Daemon that writes process information data to the z/VM monitor stream.
 vmur: Tool to work with z/VM spool file queues (reader, punch, printer).
 zfcpdump_v2: Version 2 of the zfcpdump tool. Now based on the upstream Linux kernel
2.6.23.
 Plus various bug fixes
Kernel
 Control Program Identification (CPI)
 If your RHEL5.4 Linux instance runs in LPAR mode, you can now use the extended
control program identification (CPI) module, sclp_cpi and the sysfs interface
/sys/firmware/cpi to assign names to your Linux instance
 The names are used, for example, to identify the Linux instance on the HMC.
 This feature is only available while running in LPAR
 Extra kernel parameter via VMPARM
 Modify the IPL records to append extra parameters specified with the z/VM VMPARM
option to the kernel command line.
 Support for processor degradation
 Adds support for processor degradation, which allows processor speed to be reduced in
some circumstances (i.e. system overheating). This new feature allows automation
software to observe the machine state.
 TTY terminal server over IUCV
 Provide central access to the Linux console for the different guests of a z/VM.
 The terminal server connects to the different guests over IUCV.
 The IUCV based console is ASCII based.
 Fullscreen applications like vi are usable on the console.
Virtual Server
 Named Saved Segments (NSS)
 Using NSS the z/VM hypervisior makes operating system code in shared real memory
pages available to z/VM guest virtual machines.
 With this update, Linux guest operating systems using z/VM can boot from the NSS and
be run from a single copy of the Linux kernel in memory.
z/VM
Expanded Storage
z/VM Central Storage
z/VM Page
Space
Linux
Guest
Virtual
Disk
Linux
Guest
Virtual
Disk
0 MB
Linux
A
Guest
Storage
Linux
B
Guest
Storage
Linux A
mem=xxxx
Linux B
mem=xxxx
Shared Memory
vi
bash
Linux NSS
Networking
 HiperSockets Layer3 Support for IPv6
 How IPv6 support for HiperSockets devices running in layer 3 mode is available
 IPv6 is supported on:
 Ethernet interfaces of the OSA-Express adapter running in QDIO mode.
 HiperSockets layer 2 and layer 3 interfaces
 z/VM guest LAN interfaces running in QDIO mode.
 IPv6 is not supported on the OSA-Express Token Ring and ATM features.
RAS
 Multi volume dump support for DASDs
 Added the ability to dump on multiple ECKD DASD devices, which can be necessary, if
the system memory size is larger than the size of a single DASD device.
 Service Levels of Hardware & Hypervisor
 A new Interface which provides service levels of hardware and z/VM service-levels to
the Linux userspace. Interface: /proc/service_levels
 Lstape support for SCSI Tapes
 With this feature it is now possible to list installed FCP-attached tape devices (SCSI
tapes) besides channel attached tapes using the lstape command
 Shutdown Actions Interface
 The new shutdown actions interface allows to specify for each shutdown trigger (halt,
power off, reboot, panic) one of the five available shutdown actions (stop, ipl, reipl,
dump, vmcmd).
 A sysfs interface under /sys/firmware is provided for that purpose.
 Possible use cases are e.g. to specify that a vmdump should be automatically triggered
in case of a kernel panic or the z/VM logoff command should be executed on halt.
 Automatic IPL after dump
 The new shutdown action dump_reipl is introduced. It combines the actions dump and
re-ipl, first a dump is taken, then a re-ipl of the system is triggered
Storage
 FCP performance data collection & reports:
 Fibre Channel Protocol (FCP) performance data can now be measured. Metrics that are
collected and reported on include:
 Performance relevant data on stack components such as Linux devices, Small
Computer System Interface (SCSI) Logical Unit Numbers (LUNs) and Host Bus Adapter
(HBA) storage controller information.
 Per stack component: current values of relevant measurements such as throughput,
utilization and other applicable measurements.
 Statistical aggregations (minimum, maximum, averages and histogram) of data
associated with I/O requests including size, latency per component and totals.
 DS8K Encryption Support
 This feature enhances s390-tools to be able to display if the Storage has its disk
encrypted or not.
 Kernel support to issue Control I/O to dasd on EMC Symmetrix arrays
 Support has been added to the kernel to issue EMC Symmetrix Control I/O. This update
provides the ability to manage EMC Symmetrix storage arrays.
Future Linux on System z Technology
Advanced Virtualization
 Dynamic Memory Add/Remove (kernel 2.6.27)
 Enable to attach and use standby memory that is configured for a logical partition or
z/VM guest.
 Memory Attach & Detach requires running Linux on System z as a VM-guest requires
z/VM 5.4 plus the PTF for APAR VM64524.
 Standby CPU activation/deactivation (kernel 2.6.25)
 Allow standby CPUs to be activated / deactivated
 Suspend / Resume (kernel 2.6.31)
 With suspend and resume support, you can stop a running Linux on System z
instance and later continue operations.
 When Linux is suspended, data is written to a swap partition. The resume process
uses this data to make Linux continue from where it left off when it was suspended.
 A suspended Linux instance does not require memory or processor cycles.
Storage Support
 HyperPav (kernel 2.6.25)
 HyperPav is addressing the need to access more data with good performance and high
availability!
 This feature, which required a IBM DS8000™ disk storage system in average leads to a
higher utilization, resulting in I/O transfer rates.
 Activated automatically when the necessary prerequisites are there (DS8000 with
HyperPAV LIC, z/VM 5.3). Transparent for the Linux on System z guest
 DASD Large Volume Support (> kernel 2.6.29)
 Large Volume Support is a feature that allows to use ECKD devices with more than
65520 cylinders. This features is available with DS8000 R4.0
 High Performance FICON (HPF) (kernel 2.6.29)
 Added HPF support to the DASD Device Driver
 HPF is an extension to the FICON architecture and is designed to improve the execution
of small block I/O requests.
 HPF streamlines the FICON architecture and reduces the overhead on the channel
processors, control unit ports, switch ports, and links by improving the way channel
programs are written and processed.
Usability & Serviceability
 Automatic IPL After Dump (kernel 2.6.30)
 Extension to the shutdown action interface which combines the actions dump and re-
ipl, first a dump is taken, then a re-ipl of the system is triggered
 Compiler Improvements (gcc 4.3/4.4)
– The latest compiler enhancements allow a customer to recompile existing applications
which can be optimized for the latest hardware generation without any changes to the
source code.
– This can lead up to a > 10 % performance improvement.
 Large Page Support (kernel 2.6.25)
– Support for a new access method to allocate larger chunks of memory, resulting in
performance improvements, especially in Java based environments
– This feature exploits z10 hardware features and provides a software emulation for older
systems.
Miscellaneous
 STP/ETR Support (kernel 2.6.27)
 Support for clock synchronization using the server time protocol (STP) or an external
time reference (ETR).
 Kernel vdso support (kernel 2.6.29)
 Kernel provided shared library to speed up a few system calls (gettimeofday,
clock_getres, clock_gettime)
36
Red Hat Confidential - NDA required
Filesystems
■ Ext4 – main, default filesystem. Incremental scalability (ie 100TB files) &
perf enhancements over ext3.
■ SSD device tuning & testing
■ NFS
● NFS4.0 – as default
● NFS4.1 – referrals, delegation & failover.
● Secure NFS, selinux labels over the wire – enabler for secure virt – timeframe likely post-GA
update
■ Fuse kernel portion as enabler.
■ GFS2
● Targeting HA clusters of up to 16 nodes.
● Primary incremental focus is stabilization and performance
● Possible improvements in ability to shrink/defragmentation
■ BTRFS – next generation, enhanced data integrity, ease of use, &
scalability. Unlikely to be production ready for RHEL6GA. Likely tech
preview, non root/boot.
37
Red Hat Confidential - NDA required
Power Management
■ Kernel
● Tickless kernel – fewer interrupts, more idle time to drop to lower power states
● ASPM – (Active State Power Management) – PCI Express reduced power states on
inactivity
● ALPM (Aggressive Link Power Management) – SATA links in low power mode when no I/O
pending
● Kernel enhancements tracking hardware capabilities for deeper low-power states and
virtualizatized guest lower power states
■ System services / daemons
● Intelligent drive spin down
● Reduced wakeup count (audit / profile package set and adapt)
● New system startup infrastructure, upstart, facilitates dynamic service initiation and
suspension. Have more services start on demand.
● Dynamically power down unused peripherals when idle – ie, network, bluetooth
■ Power monitoring tools
● GUI tools for tuning & monitoring power policy
● APIs for power monitoring and policy configuration
38
Red Hat Confidential - NDA required
Kernel Scalibility
■ Scalability limits – Maximum values
● Max CPUs – dynamic allocation of CPU structs (2.6.29) allows supported limit of 4096 and
theoretical limit of 64K.
● Max IRQs – dynamic allocation (2.6.28) allows limit of 256
● Max memory 48-bit addressing (256TB) requires pending patch incorporation
● Max # processes – 4 million on 64 bit kernels
● Max threads per process remains at 32000 (same as RHEL5)
● Filesystem limits for ext4 – 100T (practical target – bounded by fsck time)
■ Scalability features
● Split LRU VM – different eviction policies for file backed vs swap backed
● Ticket spinlocks fixes NUMA starvation
● CFS scheduler – better NUMA balancing
39
Red Hat Confidential - NDA required
IPA Client (Identity, Policy, Audit)
■ IPA client in core RHEL for centralized security management
● Kerberos authentication with host based access control
● Provides central storage of extended user attributes
● Enables centralized policy for applications, including SELinux policy
● Audit log aggregation services & search capabilities
40
Red Hat Confidential - NDA required
Security enhancements
■ Virtualization isolation in conjunction with SELinux
● May be post-GA update
● Labeled NFS for filesystem isolation
● Cut-and-paste window controls per authorization level
● Guest confinement via SELinux policy enhancements
■ NSS crypto
● Broaden the core services which utilize NSS crypto libraries
● Allows cheaper implementation of new features, ie TPM & centralized key store
● Incremental targeted conversion of: Openswan, openldap, glibc
● Add new crypto GUI for key import & establishment of trust
■ Smartcard integration
● Login, Firefox, Thunderbird port RHEL5 smartcard enablers.
■ Volume encryption
● Basic operation already present in RHEL5 – incremental centralized key management for
RHEL6
■ Sectool – compliance checking / intrusion detection utility – validates
system admin config, ie file permissions, valid UIDs, reasonable
passwords, etc
41
Red Hat Confidential - NDA required
Desktop – product themes
■ General Desktop technology update
■ Large scale desktop deployment:
● Power management
● Mobility
● Hw enablement
● Monitors / docking / projectors
Q & A
Red Hat Enterprise Linux Performance Update
Industry Benchmark Performance Records on Nehalem
Aug 31, 2009
Product Marketing, Platform BU, Red Hat
44
Red Hat Confidential - NDA required
RHEL on NEHALEM means …
Best Performance on web apps
 Highest SPECWeb2005 result ever
 Performance: Top 11 SPECWeb(c)2005 results based on Red Hat Enterprise Linux
 Six new 2-socket HPC benchmarks
 Manufacturing Industry: 4 on commercial computer simulation apps broadly used
 Performance: 70 - 115 % faster than previous Intel Xeon 5400
 Energy Industry: Eclipse simulations for days and months to optimize their tactics to extract oil
 Performance: 150 % faster than previous Intel Xeon 5400.
 Cisco and Red Hat benchmark
 Performance: Top spot for 2-socket systems with new blade server from Cisco
 Cisco Unified Computing System exceeded the previous Intel mark in SPECopmMbase by 154%
 Oracle Applications and Red Hat benchmark
 Top result for 2-Socket system with Oracle’s E-Business Suite
45
Red Hat Confidential - NDA required
SPECfp*_base2006 (Intel Xeon)
0
5
10
15
20
25
30
35
40
45
(3.8 GHz, 2MB L2, 800 MHz FSB,
single-core)
5160 (3.0GHz, 4MB L2, 1333MHz
FSB,dual-core)
x5482 (3.2 GHz, 2x6MB L2, 1600
MHz, quad-core)
X5570 (2.93 GHz, 8 MB L3, 6.4 GT/s,
quad-core)
Best Performance …
Floating Point SPEED Performance on SPECfp*_base2006 benchmark
MS
Windows
Server
2003* Ent.
SP1
11.7
SLES 10
18.3
SLES 10
26.5
RHEL 5.3
39.3
46
Red Hat Confidential - NDA required
SPECweb*2005 (Intel Xeon)
0
10000
20000
30000
40000
50000
60000
70000
80000
(3.8 GHz, 2MB L2, 800 MHz FSB,
single-core)
5160 (3.0GHz, 4MB L2, 1333MHz
FSB,dual-core)
x5460 (3.16 GHz, 2x6MB L2, 1333
MHz, quad-core)
X5570 (2.93 GHz, 8 MB L3, 6.4 GT/s,
quad-core)
Best Performance …
Web Server Performance on SPECweb*2005 benchmark
RHEL 4U2
4555
RHEL 5.2
15193
RHEL 5.2
29591
RHEL 5.2
75023
47
Red Hat Confidential - NDA required
Best Performance …
Multiphysics Finite Element analysis using ANSYS*
RHEL 5.1
RHEL 5.3
RHEL 5.1
RHEL 5.3
48
Red Hat Confidential - NDA required
Best Performance …
Crash Simulation analysis using LS-DYNA* (single node)
RHEL 5.3
RHEL 5.3
RHEL 5.3
RHEL 5.3
RHEL 5.3
RHEL 5.3

Weitere ähnliche Inhalte

Was ist angesagt?

淺談 Live patching technology
淺談 Live patching technology淺談 Live patching technology
淺談 Live patching technologySZ Lin
 
Intel(r) Quick Assist Technology Overview
Intel(r) Quick Assist Technology OverviewIntel(r) Quick Assist Technology Overview
Intel(r) Quick Assist Technology OverviewMichelle Holley
 
RHCE FINAL Questions and Answers
RHCE FINAL Questions and AnswersRHCE FINAL Questions and Answers
RHCE FINAL Questions and AnswersRadien software
 
OSDC 2014: Nat Morris - Open Network Install Environment
OSDC 2014: Nat Morris - Open Network Install EnvironmentOSDC 2014: Nat Morris - Open Network Install Environment
OSDC 2014: Nat Morris - Open Network Install EnvironmentNETWAYS
 
Building, deploying and testing an industrial linux platform @ Open source su...
Building, deploying and testing an industrial linux platform @ Open source su...Building, deploying and testing an industrial linux platform @ Open source su...
Building, deploying and testing an industrial linux platform @ Open source su...SZ Lin
 
2008-06-25 Marist System z Summer Professors Series
2008-06-25 Marist System z Summer Professors Series2008-06-25 Marist System z Summer Professors Series
2008-06-25 Marist System z Summer Professors SeriesShawn Wells
 
7 hands on
7 hands on7 hands on
7 hands onvideos
 
LF_OVS_17_Riley: Pushing networking to the edge
LF_OVS_17_Riley: Pushing networking to the edgeLF_OVS_17_Riley: Pushing networking to the edge
LF_OVS_17_Riley: Pushing networking to the edgeLF_OpenvSwitch
 
DPDK & Layer 4 Packet Processing
DPDK & Layer 4 Packet ProcessingDPDK & Layer 4 Packet Processing
DPDK & Layer 4 Packet ProcessingMichelle Holley
 
High Performance Security and Virtualization for Oracle Database and Cloud-En...
High Performance Security and Virtualization for Oracle Database and Cloud-En...High Performance Security and Virtualization for Oracle Database and Cloud-En...
High Performance Security and Virtualization for Oracle Database and Cloud-En...Ramesh Nagappan
 
Long-term Maintenance Model of Embedded Industrial Linux Distribution
Long-term Maintenance Model of Embedded Industrial Linux DistributionLong-term Maintenance Model of Embedded Industrial Linux Distribution
Long-term Maintenance Model of Embedded Industrial Linux DistributionSZ Lin
 
Embedded Linux/ Debian with ARM64 Platform
Embedded Linux/ Debian with ARM64 PlatformEmbedded Linux/ Debian with ARM64 Platform
Embedded Linux/ Debian with ARM64 PlatformSZ Lin
 
Infraestructura oracle
Infraestructura oracleInfraestructura oracle
Infraestructura oracleFran Navarro
 
Red Hat for IBM System z Update v5
Red Hat for IBM System z Update v5Red Hat for IBM System z Update v5
Red Hat for IBM System z Update v5Filipe Miranda
 
BKK16-409 VOSY Switch Port to ARMv8 Platforms and ODP Integration
BKK16-409 VOSY Switch Port to ARMv8 Platforms and ODP IntegrationBKK16-409 VOSY Switch Port to ARMv8 Platforms and ODP Integration
BKK16-409 VOSY Switch Port to ARMv8 Platforms and ODP IntegrationLinaro
 
LF_OVS_17_IPSEC and OVS DPDK
LF_OVS_17_IPSEC and OVS DPDKLF_OVS_17_IPSEC and OVS DPDK
LF_OVS_17_IPSEC and OVS DPDKLF_OpenvSwitch
 
High Performance Security With SPARC T4 Hardware Assisted Cryptography
High Performance Security With SPARC T4 Hardware Assisted CryptographyHigh Performance Security With SPARC T4 Hardware Assisted Cryptography
High Performance Security With SPARC T4 Hardware Assisted CryptographyRamesh Nagappan
 
ONIE / Cumulus Networks Webinar
ONIE / Cumulus Networks WebinarONIE / Cumulus Networks Webinar
ONIE / Cumulus Networks WebinarCumulus Networks
 
ONIE: Open Network Install Environment @ OSDC 2014 Netways, Berlin
ONIE: Open Network Install Environment @ OSDC 2014 Netways, BerlinONIE: Open Network Install Environment @ OSDC 2014 Netways, Berlin
ONIE: Open Network Install Environment @ OSDC 2014 Netways, BerlinNat Morris
 

Was ist angesagt? (20)

淺談 Live patching technology
淺談 Live patching technology淺談 Live patching technology
淺談 Live patching technology
 
Intel(r) Quick Assist Technology Overview
Intel(r) Quick Assist Technology OverviewIntel(r) Quick Assist Technology Overview
Intel(r) Quick Assist Technology Overview
 
RHCE FINAL Questions and Answers
RHCE FINAL Questions and AnswersRHCE FINAL Questions and Answers
RHCE FINAL Questions and Answers
 
OSDC 2014: Nat Morris - Open Network Install Environment
OSDC 2014: Nat Morris - Open Network Install EnvironmentOSDC 2014: Nat Morris - Open Network Install Environment
OSDC 2014: Nat Morris - Open Network Install Environment
 
Building, deploying and testing an industrial linux platform @ Open source su...
Building, deploying and testing an industrial linux platform @ Open source su...Building, deploying and testing an industrial linux platform @ Open source su...
Building, deploying and testing an industrial linux platform @ Open source su...
 
2008-06-25 Marist System z Summer Professors Series
2008-06-25 Marist System z Summer Professors Series2008-06-25 Marist System z Summer Professors Series
2008-06-25 Marist System z Summer Professors Series
 
7 hands on
7 hands on7 hands on
7 hands on
 
LF_OVS_17_Riley: Pushing networking to the edge
LF_OVS_17_Riley: Pushing networking to the edgeLF_OVS_17_Riley: Pushing networking to the edge
LF_OVS_17_Riley: Pushing networking to the edge
 
DPDK & Layer 4 Packet Processing
DPDK & Layer 4 Packet ProcessingDPDK & Layer 4 Packet Processing
DPDK & Layer 4 Packet Processing
 
High Performance Security and Virtualization for Oracle Database and Cloud-En...
High Performance Security and Virtualization for Oracle Database and Cloud-En...High Performance Security and Virtualization for Oracle Database and Cloud-En...
High Performance Security and Virtualization for Oracle Database and Cloud-En...
 
Long-term Maintenance Model of Embedded Industrial Linux Distribution
Long-term Maintenance Model of Embedded Industrial Linux DistributionLong-term Maintenance Model of Embedded Industrial Linux Distribution
Long-term Maintenance Model of Embedded Industrial Linux Distribution
 
Embedded Linux/ Debian with ARM64 Platform
Embedded Linux/ Debian with ARM64 PlatformEmbedded Linux/ Debian with ARM64 Platform
Embedded Linux/ Debian with ARM64 Platform
 
Infraestructura oracle
Infraestructura oracleInfraestructura oracle
Infraestructura oracle
 
DPDK In Depth
DPDK In DepthDPDK In Depth
DPDK In Depth
 
Red Hat for IBM System z Update v5
Red Hat for IBM System z Update v5Red Hat for IBM System z Update v5
Red Hat for IBM System z Update v5
 
BKK16-409 VOSY Switch Port to ARMv8 Platforms and ODP Integration
BKK16-409 VOSY Switch Port to ARMv8 Platforms and ODP IntegrationBKK16-409 VOSY Switch Port to ARMv8 Platforms and ODP Integration
BKK16-409 VOSY Switch Port to ARMv8 Platforms and ODP Integration
 
LF_OVS_17_IPSEC and OVS DPDK
LF_OVS_17_IPSEC and OVS DPDKLF_OVS_17_IPSEC and OVS DPDK
LF_OVS_17_IPSEC and OVS DPDK
 
High Performance Security With SPARC T4 Hardware Assisted Cryptography
High Performance Security With SPARC T4 Hardware Assisted CryptographyHigh Performance Security With SPARC T4 Hardware Assisted Cryptography
High Performance Security With SPARC T4 Hardware Assisted Cryptography
 
ONIE / Cumulus Networks Webinar
ONIE / Cumulus Networks WebinarONIE / Cumulus Networks Webinar
ONIE / Cumulus Networks Webinar
 
ONIE: Open Network Install Environment @ OSDC 2014 Netways, Berlin
ONIE: Open Network Install Environment @ OSDC 2014 Netways, BerlinONIE: Open Network Install Environment @ OSDC 2014 Netways, Berlin
ONIE: Open Network Install Environment @ OSDC 2014 Netways, Berlin
 

Ähnlich wie 2010-01-28 NSA Open Source User Group Meeting, Current & Future Linux on System z

2009-01-20 RHEL 5.3 for System z
2009-01-20 RHEL 5.3 for System z2009-01-20 RHEL 5.3 for System z
2009-01-20 RHEL 5.3 for System zShawn Wells
 
2009-03-13 Atlanda System z Council Meeting
2009-03-13 Atlanda System z Council Meeting2009-03-13 Atlanda System z Council Meeting
2009-03-13 Atlanda System z Council MeetingShawn Wells
 
2008-09-09 IBM Interaction Conference, Red Hat Update for System z
2008-09-09 IBM Interaction Conference, Red Hat Update for System z2008-09-09 IBM Interaction Conference, Red Hat Update for System z
2008-09-09 IBM Interaction Conference, Red Hat Update for System zShawn Wells
 
Red hat Enterprise Linux 6.4 for IBM System z Technical Highlights
Red hat Enterprise Linux 6.4 for IBM System z Technical HighlightsRed hat Enterprise Linux 6.4 for IBM System z Technical Highlights
Red hat Enterprise Linux 6.4 for IBM System z Technical HighlightsFilipe Miranda
 
2009-04-14 IBM ISV Partnership Call
2009-04-14 IBM ISV Partnership Call2009-04-14 IBM ISV Partnership Call
2009-04-14 IBM ISV Partnership CallShawn Wells
 
2013 linux days final
2013 linux days final2013 linux days final
2013 linux days finalRandomShare
 
2010-11-08 NSA Technical Symposium
2010-11-08 NSA Technical Symposium2010-11-08 NSA Technical Symposium
2010-11-08 NSA Technical SymposiumShawn Wells
 
SHARE.ORG in Boston Aug 2013 RHEL update for IBM System z
SHARE.ORG in Boston Aug 2013 RHEL update for IBM System zSHARE.ORG in Boston Aug 2013 RHEL update for IBM System z
SHARE.ORG in Boston Aug 2013 RHEL update for IBM System zFilipe Miranda
 
DPDK Summit 2015 - Intel - Keith Wiles
DPDK Summit 2015 - Intel - Keith WilesDPDK Summit 2015 - Intel - Keith Wiles
DPDK Summit 2015 - Intel - Keith WilesJim St. Leger
 
Seminar Accelerating Business Using Microservices Architecture in Digital Age...
Seminar Accelerating Business Using Microservices Architecture in Digital Age...Seminar Accelerating Business Using Microservices Architecture in Digital Age...
Seminar Accelerating Business Using Microservices Architecture in Digital Age...PT Datacomm Diangraha
 
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under Linux
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under LinuxPractical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under Linux
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under LinuxSamsung Open Source Group
 
Oracle RAC Presentation at Oracle Open World
Oracle RAC Presentation at Oracle Open WorldOracle RAC Presentation at Oracle Open World
Oracle RAC Presentation at Oracle Open WorldPaul Marden
 
OSDC 2014 ONIE by Nat Morris
OSDC 2014 ONIE by Nat MorrisOSDC 2014 ONIE by Nat Morris
OSDC 2014 ONIE by Nat MorrisCumulus Networks
 
Nordic infrastructure Conference 2017 - SQL Server on Linux Overview
Nordic infrastructure Conference 2017 - SQL Server on Linux OverviewNordic infrastructure Conference 2017 - SQL Server on Linux Overview
Nordic infrastructure Conference 2017 - SQL Server on Linux OverviewTravis Wright
 
[발표자료] 오픈소스 Pacemaker 활용한 zabbix 이중화 방안(w/ Zabbix Korea Community)
[발표자료] 오픈소스 Pacemaker 활용한 zabbix 이중화 방안(w/ Zabbix Korea Community) [발표자료] 오픈소스 Pacemaker 활용한 zabbix 이중화 방안(w/ Zabbix Korea Community)
[발표자료] 오픈소스 Pacemaker 활용한 zabbix 이중화 방안(w/ Zabbix Korea Community) 동현 김
 
2008-07-15 zNTP Conference, Red Hat Enterprise Solutions for System z
2008-07-15 zNTP Conference, Red Hat Enterprise Solutions for System z2008-07-15 zNTP Conference, Red Hat Enterprise Solutions for System z
2008-07-15 zNTP Conference, Red Hat Enterprise Solutions for System zShawn Wells
 

Ähnlich wie 2010-01-28 NSA Open Source User Group Meeting, Current & Future Linux on System z (20)

2009-01-20 RHEL 5.3 for System z
2009-01-20 RHEL 5.3 for System z2009-01-20 RHEL 5.3 for System z
2009-01-20 RHEL 5.3 for System z
 
2009-03-13 Atlanda System z Council Meeting
2009-03-13 Atlanda System z Council Meeting2009-03-13 Atlanda System z Council Meeting
2009-03-13 Atlanda System z Council Meeting
 
2008-09-09 IBM Interaction Conference, Red Hat Update for System z
2008-09-09 IBM Interaction Conference, Red Hat Update for System z2008-09-09 IBM Interaction Conference, Red Hat Update for System z
2008-09-09 IBM Interaction Conference, Red Hat Update for System z
 
Red hat Enterprise Linux 6.4 for IBM System z Technical Highlights
Red hat Enterprise Linux 6.4 for IBM System z Technical HighlightsRed hat Enterprise Linux 6.4 for IBM System z Technical Highlights
Red hat Enterprise Linux 6.4 for IBM System z Technical Highlights
 
2009-04-14 IBM ISV Partnership Call
2009-04-14 IBM ISV Partnership Call2009-04-14 IBM ISV Partnership Call
2009-04-14 IBM ISV Partnership Call
 
2013 linux days final
2013 linux days final2013 linux days final
2013 linux days final
 
Rhel7 vs rhel6
Rhel7 vs rhel6Rhel7 vs rhel6
Rhel7 vs rhel6
 
2010-11-08 NSA Technical Symposium
2010-11-08 NSA Technical Symposium2010-11-08 NSA Technical Symposium
2010-11-08 NSA Technical Symposium
 
SHARE.ORG in Boston Aug 2013 RHEL update for IBM System z
SHARE.ORG in Boston Aug 2013 RHEL update for IBM System zSHARE.ORG in Boston Aug 2013 RHEL update for IBM System z
SHARE.ORG in Boston Aug 2013 RHEL update for IBM System z
 
RHEL roadmap
RHEL roadmapRHEL roadmap
RHEL roadmap
 
RAC - Test
RAC - TestRAC - Test
RAC - Test
 
DPDK Summit 2015 - Intel - Keith Wiles
DPDK Summit 2015 - Intel - Keith WilesDPDK Summit 2015 - Intel - Keith Wiles
DPDK Summit 2015 - Intel - Keith Wiles
 
Seminar Accelerating Business Using Microservices Architecture in Digital Age...
Seminar Accelerating Business Using Microservices Architecture in Digital Age...Seminar Accelerating Business Using Microservices Architecture in Digital Age...
Seminar Accelerating Business Using Microservices Architecture in Digital Age...
 
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under Linux
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under LinuxPractical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under Linux
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under Linux
 
Oracle RAC Presentation at Oracle Open World
Oracle RAC Presentation at Oracle Open WorldOracle RAC Presentation at Oracle Open World
Oracle RAC Presentation at Oracle Open World
 
OSDC 2014 ONIE by Nat Morris
OSDC 2014 ONIE by Nat MorrisOSDC 2014 ONIE by Nat Morris
OSDC 2014 ONIE by Nat Morris
 
What's New in RHEL 6 for Linux on System z?
What's New in RHEL 6 for Linux on System z?What's New in RHEL 6 for Linux on System z?
What's New in RHEL 6 for Linux on System z?
 
Nordic infrastructure Conference 2017 - SQL Server on Linux Overview
Nordic infrastructure Conference 2017 - SQL Server on Linux OverviewNordic infrastructure Conference 2017 - SQL Server on Linux Overview
Nordic infrastructure Conference 2017 - SQL Server on Linux Overview
 
[발표자료] 오픈소스 Pacemaker 활용한 zabbix 이중화 방안(w/ Zabbix Korea Community)
[발표자료] 오픈소스 Pacemaker 활용한 zabbix 이중화 방안(w/ Zabbix Korea Community) [발표자료] 오픈소스 Pacemaker 활용한 zabbix 이중화 방안(w/ Zabbix Korea Community)
[발표자료] 오픈소스 Pacemaker 활용한 zabbix 이중화 방안(w/ Zabbix Korea Community)
 
2008-07-15 zNTP Conference, Red Hat Enterprise Solutions for System z
2008-07-15 zNTP Conference, Red Hat Enterprise Solutions for System z2008-07-15 zNTP Conference, Red Hat Enterprise Solutions for System z
2008-07-15 zNTP Conference, Red Hat Enterprise Solutions for System z
 

Mehr von Shawn Wells

2017-10-10 AUSA 2017: Repeatable DCO Platforms
2017-10-10 AUSA 2017: Repeatable DCO Platforms2017-10-10 AUSA 2017: Repeatable DCO Platforms
2017-10-10 AUSA 2017: Repeatable DCO PlatformsShawn Wells
 
2017-07-12 GovLoop: New Era of Digital Security
2017-07-12 GovLoop: New Era of Digital Security2017-07-12 GovLoop: New Era of Digital Security
2017-07-12 GovLoop: New Era of Digital SecurityShawn Wells
 
2017-07-11 GovLoop: Changing the Open Hybrid Cloud Game (Deploying OpenShift ...
2017-07-11 GovLoop: Changing the Open Hybrid Cloud Game (Deploying OpenShift ...2017-07-11 GovLoop: Changing the Open Hybrid Cloud Game (Deploying OpenShift ...
2017-07-11 GovLoop: Changing the Open Hybrid Cloud Game (Deploying OpenShift ...Shawn Wells
 
2017 02-17 rsac 2017 tech-f02
2017 02-17 rsac 2017 tech-f022017 02-17 rsac 2017 tech-f02
2017 02-17 rsac 2017 tech-f02Shawn Wells
 
2017-02-21 AFCEA West Building Continuous Integration & Deployment (CI/CD) Pi...
2017-02-21 AFCEA West Building Continuous Integration & Deployment (CI/CD) Pi...2017-02-21 AFCEA West Building Continuous Integration & Deployment (CI/CD) Pi...
2017-02-21 AFCEA West Building Continuous Integration & Deployment (CI/CD) Pi...Shawn Wells
 
2016 -11-18 OpenSCAP Workshop Coursebook
2016 -11-18 OpenSCAP Workshop Coursebook2016 -11-18 OpenSCAP Workshop Coursebook
2016 -11-18 OpenSCAP Workshop CoursebookShawn Wells
 
2016-08-29 AFITC Security Automation
2016-08-29 AFITC Security Automation2016-08-29 AFITC Security Automation
2016-08-29 AFITC Security AutomationShawn Wells
 
2016-08-24 FedInsider Webinar with Jennifer Kron - Securing Intelligence in a...
2016-08-24 FedInsider Webinar with Jennifer Kron - Securing Intelligence in a...2016-08-24 FedInsider Webinar with Jennifer Kron - Securing Intelligence in a...
2016-08-24 FedInsider Webinar with Jennifer Kron - Securing Intelligence in a...Shawn Wells
 
2016-08-18 Red Hat Partner Security Update
2016-08-18 Red Hat Partner Security Update2016-08-18 Red Hat Partner Security Update
2016-08-18 Red Hat Partner Security UpdateShawn Wells
 
2015-11-15 - Supercomputing 2015 - Applied Cross Domain
2015-11-15 - Supercomputing 2015 - Applied Cross Domain2015-11-15 - Supercomputing 2015 - Applied Cross Domain
2015-11-15 - Supercomputing 2015 - Applied Cross DomainShawn Wells
 
2015-10-05 Fermilabs DevOps Alone in the Dark
2015-10-05 Fermilabs DevOps Alone in the Dark2015-10-05 Fermilabs DevOps Alone in the Dark
2015-10-05 Fermilabs DevOps Alone in the DarkShawn Wells
 
2015-06-25 Red Hat Summit 2015 - Security Compliance Made Easy
2015-06-25 Red Hat Summit 2015 - Security Compliance Made Easy2015-06-25 Red Hat Summit 2015 - Security Compliance Made Easy
2015-06-25 Red Hat Summit 2015 - Security Compliance Made EasyShawn Wells
 
2015 06-12 DevOpsDC 2015 - Consumer to Collaborator
2015 06-12 DevOpsDC 2015 - Consumer to Collaborator2015 06-12 DevOpsDC 2015 - Consumer to Collaborator
2015 06-12 DevOpsDC 2015 - Consumer to CollaboratorShawn Wells
 
2015-01-27 ssa opening remarks
2015-01-27 ssa opening remarks2015-01-27 ssa opening remarks
2015-01-27 ssa opening remarksShawn Wells
 
2014-12-16 defense news - shutdown the hackers
2014-12-16  defense news - shutdown the hackers2014-12-16  defense news - shutdown the hackers
2014-12-16 defense news - shutdown the hackersShawn Wells
 
2014-07-31 customer convergence applied scap
2014-07-31 customer convergence applied scap2014-07-31 customer convergence applied scap
2014-07-31 customer convergence applied scapShawn Wells
 
2014-07-30 defense in depth scap workbook
2014-07-30 defense in depth scap workbook2014-07-30 defense in depth scap workbook
2014-07-30 defense in depth scap workbookShawn Wells
 
2014-05-08 IT Craftsmanship to IT Manufacturing
2014-05-08 IT Craftsmanship to IT Manufacturing2014-05-08 IT Craftsmanship to IT Manufacturing
2014-05-08 IT Craftsmanship to IT ManufacturingShawn Wells
 
2014-04-28 cloud security frameworks and enforcement
2014-04-28 cloud security frameworks and enforcement2014-04-28 cloud security frameworks and enforcement
2014-04-28 cloud security frameworks and enforcementShawn Wells
 
2014 04-17 Applied SCAP, Red Hat Summit 2014
2014 04-17 Applied SCAP, Red Hat Summit 20142014 04-17 Applied SCAP, Red Hat Summit 2014
2014 04-17 Applied SCAP, Red Hat Summit 2014Shawn Wells
 

Mehr von Shawn Wells (20)

2017-10-10 AUSA 2017: Repeatable DCO Platforms
2017-10-10 AUSA 2017: Repeatable DCO Platforms2017-10-10 AUSA 2017: Repeatable DCO Platforms
2017-10-10 AUSA 2017: Repeatable DCO Platforms
 
2017-07-12 GovLoop: New Era of Digital Security
2017-07-12 GovLoop: New Era of Digital Security2017-07-12 GovLoop: New Era of Digital Security
2017-07-12 GovLoop: New Era of Digital Security
 
2017-07-11 GovLoop: Changing the Open Hybrid Cloud Game (Deploying OpenShift ...
2017-07-11 GovLoop: Changing the Open Hybrid Cloud Game (Deploying OpenShift ...2017-07-11 GovLoop: Changing the Open Hybrid Cloud Game (Deploying OpenShift ...
2017-07-11 GovLoop: Changing the Open Hybrid Cloud Game (Deploying OpenShift ...
 
2017 02-17 rsac 2017 tech-f02
2017 02-17 rsac 2017 tech-f022017 02-17 rsac 2017 tech-f02
2017 02-17 rsac 2017 tech-f02
 
2017-02-21 AFCEA West Building Continuous Integration & Deployment (CI/CD) Pi...
2017-02-21 AFCEA West Building Continuous Integration & Deployment (CI/CD) Pi...2017-02-21 AFCEA West Building Continuous Integration & Deployment (CI/CD) Pi...
2017-02-21 AFCEA West Building Continuous Integration & Deployment (CI/CD) Pi...
 
2016 -11-18 OpenSCAP Workshop Coursebook
2016 -11-18 OpenSCAP Workshop Coursebook2016 -11-18 OpenSCAP Workshop Coursebook
2016 -11-18 OpenSCAP Workshop Coursebook
 
2016-08-29 AFITC Security Automation
2016-08-29 AFITC Security Automation2016-08-29 AFITC Security Automation
2016-08-29 AFITC Security Automation
 
2016-08-24 FedInsider Webinar with Jennifer Kron - Securing Intelligence in a...
2016-08-24 FedInsider Webinar with Jennifer Kron - Securing Intelligence in a...2016-08-24 FedInsider Webinar with Jennifer Kron - Securing Intelligence in a...
2016-08-24 FedInsider Webinar with Jennifer Kron - Securing Intelligence in a...
 
2016-08-18 Red Hat Partner Security Update
2016-08-18 Red Hat Partner Security Update2016-08-18 Red Hat Partner Security Update
2016-08-18 Red Hat Partner Security Update
 
2015-11-15 - Supercomputing 2015 - Applied Cross Domain
2015-11-15 - Supercomputing 2015 - Applied Cross Domain2015-11-15 - Supercomputing 2015 - Applied Cross Domain
2015-11-15 - Supercomputing 2015 - Applied Cross Domain
 
2015-10-05 Fermilabs DevOps Alone in the Dark
2015-10-05 Fermilabs DevOps Alone in the Dark2015-10-05 Fermilabs DevOps Alone in the Dark
2015-10-05 Fermilabs DevOps Alone in the Dark
 
2015-06-25 Red Hat Summit 2015 - Security Compliance Made Easy
2015-06-25 Red Hat Summit 2015 - Security Compliance Made Easy2015-06-25 Red Hat Summit 2015 - Security Compliance Made Easy
2015-06-25 Red Hat Summit 2015 - Security Compliance Made Easy
 
2015 06-12 DevOpsDC 2015 - Consumer to Collaborator
2015 06-12 DevOpsDC 2015 - Consumer to Collaborator2015 06-12 DevOpsDC 2015 - Consumer to Collaborator
2015 06-12 DevOpsDC 2015 - Consumer to Collaborator
 
2015-01-27 ssa opening remarks
2015-01-27 ssa opening remarks2015-01-27 ssa opening remarks
2015-01-27 ssa opening remarks
 
2014-12-16 defense news - shutdown the hackers
2014-12-16  defense news - shutdown the hackers2014-12-16  defense news - shutdown the hackers
2014-12-16 defense news - shutdown the hackers
 
2014-07-31 customer convergence applied scap
2014-07-31 customer convergence applied scap2014-07-31 customer convergence applied scap
2014-07-31 customer convergence applied scap
 
2014-07-30 defense in depth scap workbook
2014-07-30 defense in depth scap workbook2014-07-30 defense in depth scap workbook
2014-07-30 defense in depth scap workbook
 
2014-05-08 IT Craftsmanship to IT Manufacturing
2014-05-08 IT Craftsmanship to IT Manufacturing2014-05-08 IT Craftsmanship to IT Manufacturing
2014-05-08 IT Craftsmanship to IT Manufacturing
 
2014-04-28 cloud security frameworks and enforcement
2014-04-28 cloud security frameworks and enforcement2014-04-28 cloud security frameworks and enforcement
2014-04-28 cloud security frameworks and enforcement
 
2014 04-17 Applied SCAP, Red Hat Summit 2014
2014 04-17 Applied SCAP, Red Hat Summit 20142014 04-17 Applied SCAP, Red Hat Summit 2014
2014 04-17 Applied SCAP, Red Hat Summit 2014
 

Kürzlich hochgeladen

Understanding Flamingo - DeepMind's VLM Architecture
Understanding Flamingo - DeepMind's VLM ArchitectureUnderstanding Flamingo - DeepMind's VLM Architecture
Understanding Flamingo - DeepMind's VLM Architecturerahul_net
 
Patterns for automating API delivery. API conference
Patterns for automating API delivery. API conferencePatterns for automating API delivery. API conference
Patterns for automating API delivery. API conferencessuser9e7c64
 
Strategies for using alternative queries to mitigate zero results
Strategies for using alternative queries to mitigate zero resultsStrategies for using alternative queries to mitigate zero results
Strategies for using alternative queries to mitigate zero resultsJean Silva
 
Ronisha Informatics Private Limited Catalogue
Ronisha Informatics Private Limited CatalogueRonisha Informatics Private Limited Catalogue
Ronisha Informatics Private Limited Catalogueitservices996
 
SensoDat: Simulation-based Sensor Dataset of Self-driving Cars
SensoDat: Simulation-based Sensor Dataset of Self-driving CarsSensoDat: Simulation-based Sensor Dataset of Self-driving Cars
SensoDat: Simulation-based Sensor Dataset of Self-driving CarsChristian Birchler
 
Exploring Selenium_Appium Frameworks for Seamless Integration with HeadSpin.pdf
Exploring Selenium_Appium Frameworks for Seamless Integration with HeadSpin.pdfExploring Selenium_Appium Frameworks for Seamless Integration with HeadSpin.pdf
Exploring Selenium_Appium Frameworks for Seamless Integration with HeadSpin.pdfkalichargn70th171
 
How to submit a standout Adobe Champion Application
How to submit a standout Adobe Champion ApplicationHow to submit a standout Adobe Champion Application
How to submit a standout Adobe Champion ApplicationBradBedford3
 
Introduction to Firebase Workshop Slides
Introduction to Firebase Workshop SlidesIntroduction to Firebase Workshop Slides
Introduction to Firebase Workshop Slidesvaideheekore1
 
Post Quantum Cryptography – The Impact on Identity
Post Quantum Cryptography – The Impact on IdentityPost Quantum Cryptography – The Impact on Identity
Post Quantum Cryptography – The Impact on Identityteam-WIBU
 
UI5ers live - Custom Controls wrapping 3rd-party libs.pptx
UI5ers live - Custom Controls wrapping 3rd-party libs.pptxUI5ers live - Custom Controls wrapping 3rd-party libs.pptx
UI5ers live - Custom Controls wrapping 3rd-party libs.pptxAndreas Kunz
 
Revolutionizing the Digital Transformation Office - Leveraging OnePlan’s AI a...
Revolutionizing the Digital Transformation Office - Leveraging OnePlan’s AI a...Revolutionizing the Digital Transformation Office - Leveraging OnePlan’s AI a...
Revolutionizing the Digital Transformation Office - Leveraging OnePlan’s AI a...OnePlan Solutions
 
A healthy diet for your Java application Devoxx France.pdf
A healthy diet for your Java application Devoxx France.pdfA healthy diet for your Java application Devoxx France.pdf
A healthy diet for your Java application Devoxx France.pdfMarharyta Nedzelska
 
VK Business Profile - provides IT solutions and Web Development
VK Business Profile - provides IT solutions and Web DevelopmentVK Business Profile - provides IT solutions and Web Development
VK Business Profile - provides IT solutions and Web Developmentvyaparkranti
 
Not a Kubernetes fan? The state of PaaS in 2024
Not a Kubernetes fan? The state of PaaS in 2024Not a Kubernetes fan? The state of PaaS in 2024
Not a Kubernetes fan? The state of PaaS in 2024Anthony Dahanne
 
Odoo 14 - eLearning Module In Odoo 14 Enterprise
Odoo 14 - eLearning Module In Odoo 14 EnterpriseOdoo 14 - eLearning Module In Odoo 14 Enterprise
Odoo 14 - eLearning Module In Odoo 14 Enterprisepreethippts
 
Enhancing Supply Chain Visibility with Cargo Cloud Solutions.pdf
Enhancing Supply Chain Visibility with Cargo Cloud Solutions.pdfEnhancing Supply Chain Visibility with Cargo Cloud Solutions.pdf
Enhancing Supply Chain Visibility with Cargo Cloud Solutions.pdfRTS corp
 
The Role of IoT and Sensor Technology in Cargo Cloud Solutions.pptx
The Role of IoT and Sensor Technology in Cargo Cloud Solutions.pptxThe Role of IoT and Sensor Technology in Cargo Cloud Solutions.pptx
The Role of IoT and Sensor Technology in Cargo Cloud Solutions.pptxRTS corp
 
Osi security architecture in network.pptx
Osi security architecture in network.pptxOsi security architecture in network.pptx
Osi security architecture in network.pptxVinzoCenzo
 
eSoftTools IMAP Backup Software and migration tools
eSoftTools IMAP Backup Software and migration toolseSoftTools IMAP Backup Software and migration tools
eSoftTools IMAP Backup Software and migration toolsosttopstonverter
 
Global Identity Enrolment and Verification Pro Solution - Cizo Technology Ser...
Global Identity Enrolment and Verification Pro Solution - Cizo Technology Ser...Global Identity Enrolment and Verification Pro Solution - Cizo Technology Ser...
Global Identity Enrolment and Verification Pro Solution - Cizo Technology Ser...Cizo Technology Services
 

Kürzlich hochgeladen (20)

Understanding Flamingo - DeepMind's VLM Architecture
Understanding Flamingo - DeepMind's VLM ArchitectureUnderstanding Flamingo - DeepMind's VLM Architecture
Understanding Flamingo - DeepMind's VLM Architecture
 
Patterns for automating API delivery. API conference
Patterns for automating API delivery. API conferencePatterns for automating API delivery. API conference
Patterns for automating API delivery. API conference
 
Strategies for using alternative queries to mitigate zero results
Strategies for using alternative queries to mitigate zero resultsStrategies for using alternative queries to mitigate zero results
Strategies for using alternative queries to mitigate zero results
 
Ronisha Informatics Private Limited Catalogue
Ronisha Informatics Private Limited CatalogueRonisha Informatics Private Limited Catalogue
Ronisha Informatics Private Limited Catalogue
 
SensoDat: Simulation-based Sensor Dataset of Self-driving Cars
SensoDat: Simulation-based Sensor Dataset of Self-driving CarsSensoDat: Simulation-based Sensor Dataset of Self-driving Cars
SensoDat: Simulation-based Sensor Dataset of Self-driving Cars
 
Exploring Selenium_Appium Frameworks for Seamless Integration with HeadSpin.pdf
Exploring Selenium_Appium Frameworks for Seamless Integration with HeadSpin.pdfExploring Selenium_Appium Frameworks for Seamless Integration with HeadSpin.pdf
Exploring Selenium_Appium Frameworks for Seamless Integration with HeadSpin.pdf
 
How to submit a standout Adobe Champion Application
How to submit a standout Adobe Champion ApplicationHow to submit a standout Adobe Champion Application
How to submit a standout Adobe Champion Application
 
Introduction to Firebase Workshop Slides
Introduction to Firebase Workshop SlidesIntroduction to Firebase Workshop Slides
Introduction to Firebase Workshop Slides
 
Post Quantum Cryptography – The Impact on Identity
Post Quantum Cryptography – The Impact on IdentityPost Quantum Cryptography – The Impact on Identity
Post Quantum Cryptography – The Impact on Identity
 
UI5ers live - Custom Controls wrapping 3rd-party libs.pptx
UI5ers live - Custom Controls wrapping 3rd-party libs.pptxUI5ers live - Custom Controls wrapping 3rd-party libs.pptx
UI5ers live - Custom Controls wrapping 3rd-party libs.pptx
 
Revolutionizing the Digital Transformation Office - Leveraging OnePlan’s AI a...
Revolutionizing the Digital Transformation Office - Leveraging OnePlan’s AI a...Revolutionizing the Digital Transformation Office - Leveraging OnePlan’s AI a...
Revolutionizing the Digital Transformation Office - Leveraging OnePlan’s AI a...
 
A healthy diet for your Java application Devoxx France.pdf
A healthy diet for your Java application Devoxx France.pdfA healthy diet for your Java application Devoxx France.pdf
A healthy diet for your Java application Devoxx France.pdf
 
VK Business Profile - provides IT solutions and Web Development
VK Business Profile - provides IT solutions and Web DevelopmentVK Business Profile - provides IT solutions and Web Development
VK Business Profile - provides IT solutions and Web Development
 
Not a Kubernetes fan? The state of PaaS in 2024
Not a Kubernetes fan? The state of PaaS in 2024Not a Kubernetes fan? The state of PaaS in 2024
Not a Kubernetes fan? The state of PaaS in 2024
 
Odoo 14 - eLearning Module In Odoo 14 Enterprise
Odoo 14 - eLearning Module In Odoo 14 EnterpriseOdoo 14 - eLearning Module In Odoo 14 Enterprise
Odoo 14 - eLearning Module In Odoo 14 Enterprise
 
Enhancing Supply Chain Visibility with Cargo Cloud Solutions.pdf
Enhancing Supply Chain Visibility with Cargo Cloud Solutions.pdfEnhancing Supply Chain Visibility with Cargo Cloud Solutions.pdf
Enhancing Supply Chain Visibility with Cargo Cloud Solutions.pdf
 
The Role of IoT and Sensor Technology in Cargo Cloud Solutions.pptx
The Role of IoT and Sensor Technology in Cargo Cloud Solutions.pptxThe Role of IoT and Sensor Technology in Cargo Cloud Solutions.pptx
The Role of IoT and Sensor Technology in Cargo Cloud Solutions.pptx
 
Osi security architecture in network.pptx
Osi security architecture in network.pptxOsi security architecture in network.pptx
Osi security architecture in network.pptx
 
eSoftTools IMAP Backup Software and migration tools
eSoftTools IMAP Backup Software and migration toolseSoftTools IMAP Backup Software and migration tools
eSoftTools IMAP Backup Software and migration tools
 
Global Identity Enrolment and Verification Pro Solution - Cizo Technology Ser...
Global Identity Enrolment and Verification Pro Solution - Cizo Technology Ser...Global Identity Enrolment and Verification Pro Solution - Cizo Technology Ser...
Global Identity Enrolment and Verification Pro Solution - Cizo Technology Ser...
 

2010-01-28 NSA Open Source User Group Meeting, Current & Future Linux on System z

  • 1. Current & Future Linux on System z Technology Deep Dive NSA Open Source User Group Meeting Friday 29-JAN-2010 UNCLASSIFIED
  • 2. Introductions ● Shawn Wells (sdw@redhat.com, 443-534-0130) U.S. Intelligence Community Sales Manager – Former NSA-er (S31121, Data Management) – Former Tech Director, led Red Hat's Global System z Business Unit until 1-DEC-2010 – RHCE ● Jim Stann (jstann@redhat.com, 703-703-626-8580 Senior Solutions Architect – Formally SUN from 1996-2009 – Moved to Red Hat as a technical pre-sales engineer – RHCE
  • 3. Agenda ● Current technology through RHEL 5.4 relating to both x86 and s390x platforms – RHEV / KVM – System z Hardware Enablement – Performance Numbers ● Roadmap moving forward (RHEL 5.5, RHEL6) – Ext4 – Kernel patches & improvements – Performance ● Open Dialog
  • 7. 7 Red Hat Confidential - NDA required Release Roadmap Highlights: RHEL 5 ■ RHEL 5.3 released January 20, 2009 ● Virtualization ● Improved scalability (Xen-based) ● 126 sockets & 1TB memory per host ● > 4 nics and > 16 disks per guest ● 2MB page table support ● AMD RVI support ● Virtio drivers to run 5.3 on KVM hosts ● libvirt-cim CIM/WBEM provider ● Timer improvements ● Platform enablement ● Nehalam enablement and testing ● OFED 1.3 ● SystemTap updates ● GDB debugger refresh ● FCoE enablement for specific configurations ● Broad driver refresh ● GFS2 fully supported ● Ext4 TechPreview ● DHCPv6 Support FasTr ack ■ FasTrack 7% ● Early release of low impact fixes ■ Hardware Enablement - 7% ● New chipsets and processor feature support ■ New Features - 21% ● Feature requests from customers and partners ■ Other - 65% ● Bugfixes ● Documentation
  • 8. 8 Red Hat Confidential - NDA required Release Roadmap Highlights: RHEL 5 contd. ■ RHEL 5.4 released August 2009 ● Virtualization technology refresh ● Addition of KVM in parallel to Xen ● VT-D / IOMMU support for KVM & Xen ● 32 pv-guest on 64 bit hosts supported with Xen ● Improved timer support for FV guests (kvm & VMWare) ● Libvirt refresh ● Platform enablement ● RAS, EDAC ● OFED 1.4 ● Hugepage core dump support ● Storage improvements (fcoe-utils, IO accounting in iostat, iSCSI offload, driver updates, XFS) ● Network improvements (IO/AT, IPv6, drivers) ● IPMI update ● SystemTap updates ■ RHEL 5.5 planned for early Q2 2010 ● Regular minor release with hardware enablement, reduced content compared to 5.4 ● Intel Boxboro-EX platform, AMD Magny-Cours processor ● PCIe AER support
  • 9. 9 Red Hat Confidential - NDA required Release Roadmap Highlights: RHEL 6 ■ Planned for early 2010, development currently in Fedora 12 ■ Planning focus ● Virtualization – making RHEL an optimized host & guest ● Performance & scalability optimized ● Qumranet thin client enablers ● Resource containment, guest resource isolation & security containment ● Device optimization ● Manageability ● Integration with RHEV Management ● AMQP messaging base (for use in virt, MRG) ● IPA enablers – for audit, smartcard, desktop integration, MRG & virt – enabling centralized administration ● Open standard management enablers ● Power Management ● For virt, bare metal, laptop ● Hardware level as well as dynamic system service startup and suspend ● Scalability ● Larger max CPU, mem, IRQs, filesystem – both virt & bare metal ● RAS (Hotplug, data integrity) ● Hardware Enablement ● UEFI – new bios boot loader interface, when legacy mode goes away ● Currency – leveraging RH's & community innovation post-RHEL5 codebase
  • 11. RHEL 5.3: Overview  FasTrack 7%  Early release of low impact fixes  Hardware Enablement - 7%  New chipsets and processor feature support  New Features - 21%  Feature requests from customers and partners  Other - 65%  Bugfixes  Documentation  GA on January 20, 2009  ~150 additions, ~3,400 BugZillas FasTrack Features Hardware Other
  • 12. RHEL 5.3: Networking  Provision of several selectable TCP congestion modules (2.6.13)  Ref: http://lwn.net/Articles/128681/  IPV6 - Support several new sockopt / ancillary data in Advanced API (2.6.14)  IPv4/IPv6: UFO (UDP Fragmentation Offload) (2.6.15)  Offloads IP fragmentation functionality of large UDP datagram to hardware  Improves performance  Add nf_conntrack subsystem: (2.6.15)  Common IPv4/IPv6 generic connection tracking subsystem  Allows IPv6 to have a stateful firewall capability (not previously possible)  Increased security  Enables analysis of whole streams of packets, rather than only checking the headers of individual packets
  • 13. RHEL 5.3: Networking  IPv6  RFC 3484 compliant source address selection (2.6.15)  Add support for Router Preference (RFC4191) (2.6.17)  Add Router Reachability Probing (RFC4191) (2.6.17)  Generic segmentation offload (GSO) (2.6.18)  Available in place of TSO (TCP Segmentation Offload)  Performance improvements for large packet transfers without hardware assistance  SELinux per-packet access controls  Replaces old packet controls  Add Secmark support to core networking  Allows security subsystems to place security markings on network packets (2.6.18)  Inclusion of DCCPv6 – Datagram Congestion Control Protocol (2.6.16)
  • 14. RHEL 5.3: Storage Management  RAID 4/5/10 support added to dm-raid.  Full support for software iSCSI target.  Full support for LVM cluster mirror (cmirror).  Add the ability to prioritize paths on HP MSA/HSV active/passive storage controllers.  Reduce boot time by improving lvmcache, to reduce the amount of device scanning.  Enhanced disk partition statistics
  • 15. RHEL 5.3: File System / Storage Mgmt  Block device encryption support, including support for /root partition, including configuration in anaconda installer.  ext4 tech preview  samba: rebased from 3.0.28 to 3.0.32 for bugfixes  Now supports Windows Vista and 2008  fixes for DC functionality (interoperability with Citrix and Domain trusts)  Ecryptfs fixes (tech preview)
  • 16. RHEL 5.3: System Services  Rebased version of CUPS print server, now fully Kerberized  dhcpv6 support  ktune, a service that sets several kernel tuning parameters to values suitable for specific system profiles. Currently, ktune provides a profile for large-memory systems running disk-intensive and network-intensive applications. New package, tech preview.  Package upstream rebases to the following utilities:  ksh, lm-sensors, lftp, net-snmp, openIPMI-tool, openldap, openmotif, python- urlgrabber, openPegasus, VNC  RPM to Fedora 9 version, which includes numerous bugfixes  yum and yum-utils primarily for speed improvements  totem, rb, and gstreamer rebased to enable modular codecs addition  Numerous wireshark security fixes
  • 17. RHEL 5.3: Security Enhancements  pkinit clients can now be configured to use keys for client certificates which may not contain Kerberos-specific extensions & interoperability fixes  nss_ldap now configured with support for paged results extension  SELinux: enablement of New NetworkManager and Audit functionality.  SELinux: Hundreds of AVC denial fixes.  Improved Audit and Logging  TTY input audit support  Remote audit logging via unencrypted connection
  • 18. RHEL 5.3: System z Specifics BugZilla ID Summary 46327 stage1: sshd error loading shared lib: libfipscheck.so.1 184770 LTC18425-62140: (big) xDR system Initialization for LPAR Clients 472788 rhel 5.3 snapshot3 scsi mpath install failed on z9bc lpar 439479 LTC:5.3:201474:Include gcc 4.3 as Add-On for latest z10 instruction set support 439440 LTC:5.3:201160:Long Random Numbers Generation 439441 LTC:5.3:201158:Selective Logging of ECKD DASD devices 439482 LTC:5.3:201542:FCP - Enhanced Trace Facility 447379 LTC:5.3:200994:Linux CPU Node Affinity 463917 unable to find DASD drives to install 439484 LTC:5.3:201490:Libica Library: Integration of Icainfo 43946 LTC:5.3:201360:OSA 2 Ports per CHPID Support - Installer Enhancements 466474 [RHEL5.3] *** glibc detected *** /usr/bin/python: double free or corruption (!prev): 0x000 0000080d55e90 *** 466305 cosmetic error message: failure in nl_set_device_mtu 466291 anaconda silently omits uninitialized disk
  • 20. RHEL 5.4 : Overview  The official GA release of Red Hat Enterprise Linux 5.4 (*kernel-2.6.18-164.el5*) was released on 02-Sep-2009  Generic (not s390 specific) updates include  Virtualization: full support for the Kernel-based Virtual Machine (KVM) hypervisor only on x86_64 while Xen only x86 & Power based virtualization is still available & supported  Network: Kernel & Userspace update to support Generic Receive Offload (GRO) which increases the performance of inbound network connections by reducing the amount of processing done by the CPU. Furthermore Netfilter Framework & Bind Updates  Storage: Support for the XFS file system has also been added to the kernel as a Technology Preview.  Tools: SystemTap is now fully supported, and has been re-based to the latest upstream version.
  • 21. RHEL 5.4: File System / Storage Mgmt  Add integrity check to cryptsetup-luks, in order to meet FIPS-140 requirements.  Ext4 - refreshed the backport for our tech preview to bring in bug fixes and support for delayed allocation.  File system freeze/quiesce interface added to support hardware snapshots for file systems.  Full support for FUSE and libfuse to allow end users to more easily install and use their own user space FUSE file systems.
  • 22. RHEL 5.4: System z Specifics BugZilla ID Summary 475556 [LTC 5.4 FEAT] DS8000 support: Large volume support (userspace) [201738] 475569 [LTC 5.4 FEAT] Shutdown actions tools [201755] 461288 [EMC 5.4 feat] Require kernel support to issue Control I/O to CKD dasd on EMC Symmetrix arrays 474688 [LTC 5.4 FEAT] Automatic IPL after dump (kernel) [201169] 475346 [LTC 5.4 FEAT] Improve checking mechanisms and workflow of Linux on System z Anaconda install process [201676] 475670 [LTC 5.4 FEAT] Program directed IPL support - no XML in system dumper [200782] 475552 [LTC 5.4 FEAT] FCP - Performance data reports [201730] 488496 [LTC 5.4 FEAT] 201173:Crypto Hardware Enablement Device Driver Support - toleration 475564 [LTC 5.4 FEAT] Shutdown actions interface (userspace) [201748] 474679 [LTC 5.4 FEAT] Dynamic CPU hotplug daemon for System z [201132] 475345 [LTC 5.4 FEAT] Change list of Anaconda network alternatives to indicate supported devices on System z [201679] 475551 [LTC 5.4 FEAT] TTY terminal server over IUCV (kernel) [201734]
  • 23. BugZilla ID Summary 475556 [LTC 5.4 FEAT] DS8000 support: Large volume support (userspace) [201738] 475569 [LTC 5.4 FEAT] Shutdown actions tools [201755] 461288 [EMC 5.4 feat] Require kernel support to issue Control I/O to CKD dasd on EMC Symmetrix arrays 474688 [LTC 5.4 FEAT] Automatic IPL after dump (kernel) [201169] 475346 [LTC 5.4 FEAT] Improve checking mechanisms and workflow of Linux on System z Anaconda install process [201676] 475670 [LTC 5.4 FEAT] Program directed IPL support - no XML in system dumper [200782] 475552 [LTC 5.4 FEAT] FCP - Performance data reports [201730] 488496 [LTC 5.4 FEAT] 201173:Crypto Hardware Enablement Device Driver Support - toleration 475564 [LTC 5.4 FEAT] Shutdown actions interface (userspace) [201748] 474679 [LTC 5.4 FEAT] Dynamic CPU hotplug daemon for System z [201132] 475345 [LTC 5.4 FEAT] Change list of Anaconda network alternatives to indicate supported devices on System z [201679] 475551 [LTC 5.4 FEAT] TTY terminal server over IUCV (kernel) [201734] 475563 [LTC 5.4 FEAT] Shutdown actions interface (kernel) [201747] 474664 [LTC 5.4 FEAT] System z support for processor degradation [200975] 475334 [LTC 5.4 FEAT] FCP - Performance Data collection (kernel) [201590] 475572 [LTC 5.4 FEAT] HiperSockets Layer3 support for IPv6 [201751] 475548 [LTC 5.4 FEAT] FCP - Performance data collection (blktrace) [201729] 477189 [LTC 5.4 FEAT] Pick up latest version of s390-tools 475558 [LTC 5.4 FEAT] TTY terminal server over IUCV (userspace) [201735] 474646 [LTC 5.4 FEAT] Kernel NSS support - kernel part [200790] 475333 [LTC 5.4 FEAT] FCP - Performance Data collection & analysis (userspace) [201591] 475571 [LTC 5.4 FEAT] Large image dump on DASD [201752]
  • 24. BugZilla ID Summary 475556 [LTC 5.4 FEAT] DS8000 support: Large volume support (userspace) [201738] 475569 [LTC 5.4 FEAT] Shutdown actions tools [201755] 461288 [EMC 5.4 feat] Require kernel support to issue Control I/O to CKD dasd on EMC Symmetrix arrays 474688 [LTC 5.4 FEAT] Automatic IPL after dump (kernel) [201169] 475346 [LTC 5.4 FEAT] Improve checking mechanisms and workflow of Linux on System z Anaconda install process [201676] 475670 [LTC 5.4 FEAT] Program directed IPL support - no XML in system dumper [200782] 475552 [LTC 5.4 FEAT] FCP - Performance data reports [201730] 488496 [LTC 5.4 FEAT] 201173:Crypto Hardware Enablement Device Driver Support - toleration 475564 [LTC 5.4 FEAT] Shutdown actions interface (userspace) [201748] 474679 [LTC 5.4 FEAT] Dynamic CPU hotplug daemon for System z [201132] 475345 [LTC 5.4 FEAT] Change list of Anaconda network alternatives to indicate supported devices on System z [201679] 475551 [LTC 5.4 FEAT] TTY terminal server over IUCV (kernel) [201734] 475563 [LTC 5.4 FEAT] Shutdown actions interface (kernel) [201747] 474664 [LTC 5.4 FEAT] System z support for processor degradation [200975] 475334 [LTC 5.4 FEAT] FCP - Performance Data collection (kernel) [201590] 475572 [LTC 5.4 FEAT] HiperSockets Layer3 support for IPv6 [201751] 475548 [LTC 5.4 FEAT] FCP - Performance data collection (blktrace) [201729] 477189 [LTC 5.4 FEAT] Pick up latest version of s390-tools 475558 [LTC 5.4 FEAT] TTY terminal server over IUCV (userspace) [201735] 474646 [LTC 5.4 FEAT] Kernel NSS support - kernel part [200790] 475333 [LTC 5.4 FEAT] FCP - Performance Data collection & analysis (userspace) [201591] 475571 [LTC 5.4 FEAT] Large image dump on DASD [201752] 475530 [LTC 5.4 FEAT] Extra kernel parameter via VMPARM [201726] 475557 [LTC 5.4 FEAT] DS8000 Disk Encryption [201740] 474942 [LTC 5.4 FEAT] Add vmconvert option to vmur tool [201758] 475570 [LTC 5.4 FEAT] Provide service levels of HW & Hypervisor in Linux [201753] 468172 FEAT: 201085: cio_ignore entry in generic.prm for LPARs 474700 [LTC 5.4 FEAT] Crypto Device Driver use of Thin Interrupts [201174] 475350 [LTC 5.4 FEAT] Dialog defaults for Linux on System z specific Anaconda [201677] 475820 [LTC 5.4 FEAT] Linux to add Call Home data [201167] 484296 [LTC 5.4 FEAT] Automatic IPL after dump (userspace) [201757]
  • 25. S390-tools package rebased to Version 1.8.1  The s390utils package has been rebased to version 1.8.1.  This package provides the essential tool chain for Linux on System z. It contains everything from the boot loader to dump related tools for a system crash analysis .  News Features (excerpt)  DASD related tools: Add Large Volume Support for ECKD DASDs  Ipl_tools: Can be used to change the reipl & shutdown behaviour  ziomon tools: Set of tools to collect data for zfcp performance analysis.  lsluns: List available SCSI LUNs depending on adapter or port.  lszcrypt: Show information about zcrypt devices and configuration.  chzcrypt: Modify zcrypt configuration.  cpuplugd: Daemon that manages CPU- and memory-resources based on a set of rules. Depending on the workload CPUs can be enabled or disabled. The amount of memory can be increased or decreased exploiting the Cooperative Memory Management (CMM1) feature.  chchp: Tool to modify channel-path states  lschp: Tool to list information about available channel-paths.  mon_procd: Daemon that writes process information data to the z/VM monitor stream.  vmur: Tool to work with z/VM spool file queues (reader, punch, printer).  zfcpdump_v2: Version 2 of the zfcpdump tool. Now based on the upstream Linux kernel 2.6.23.  Plus various bug fixes
  • 26. Kernel  Control Program Identification (CPI)  If your RHEL5.4 Linux instance runs in LPAR mode, you can now use the extended control program identification (CPI) module, sclp_cpi and the sysfs interface /sys/firmware/cpi to assign names to your Linux instance  The names are used, for example, to identify the Linux instance on the HMC.  This feature is only available while running in LPAR  Extra kernel parameter via VMPARM  Modify the IPL records to append extra parameters specified with the z/VM VMPARM option to the kernel command line.  Support for processor degradation  Adds support for processor degradation, which allows processor speed to be reduced in some circumstances (i.e. system overheating). This new feature allows automation software to observe the machine state.  TTY terminal server over IUCV  Provide central access to the Linux console for the different guests of a z/VM.  The terminal server connects to the different guests over IUCV.  The IUCV based console is ASCII based.  Fullscreen applications like vi are usable on the console.
  • 27. Virtual Server  Named Saved Segments (NSS)  Using NSS the z/VM hypervisior makes operating system code in shared real memory pages available to z/VM guest virtual machines.  With this update, Linux guest operating systems using z/VM can boot from the NSS and be run from a single copy of the Linux kernel in memory. z/VM Expanded Storage z/VM Central Storage z/VM Page Space Linux Guest Virtual Disk Linux Guest Virtual Disk 0 MB Linux A Guest Storage Linux B Guest Storage Linux A mem=xxxx Linux B mem=xxxx Shared Memory vi bash Linux NSS
  • 28. Networking  HiperSockets Layer3 Support for IPv6  How IPv6 support for HiperSockets devices running in layer 3 mode is available  IPv6 is supported on:  Ethernet interfaces of the OSA-Express adapter running in QDIO mode.  HiperSockets layer 2 and layer 3 interfaces  z/VM guest LAN interfaces running in QDIO mode.  IPv6 is not supported on the OSA-Express Token Ring and ATM features.
  • 29. RAS  Multi volume dump support for DASDs  Added the ability to dump on multiple ECKD DASD devices, which can be necessary, if the system memory size is larger than the size of a single DASD device.  Service Levels of Hardware & Hypervisor  A new Interface which provides service levels of hardware and z/VM service-levels to the Linux userspace. Interface: /proc/service_levels  Lstape support for SCSI Tapes  With this feature it is now possible to list installed FCP-attached tape devices (SCSI tapes) besides channel attached tapes using the lstape command  Shutdown Actions Interface  The new shutdown actions interface allows to specify for each shutdown trigger (halt, power off, reboot, panic) one of the five available shutdown actions (stop, ipl, reipl, dump, vmcmd).  A sysfs interface under /sys/firmware is provided for that purpose.  Possible use cases are e.g. to specify that a vmdump should be automatically triggered in case of a kernel panic or the z/VM logoff command should be executed on halt.  Automatic IPL after dump  The new shutdown action dump_reipl is introduced. It combines the actions dump and re-ipl, first a dump is taken, then a re-ipl of the system is triggered
  • 30. Storage  FCP performance data collection & reports:  Fibre Channel Protocol (FCP) performance data can now be measured. Metrics that are collected and reported on include:  Performance relevant data on stack components such as Linux devices, Small Computer System Interface (SCSI) Logical Unit Numbers (LUNs) and Host Bus Adapter (HBA) storage controller information.  Per stack component: current values of relevant measurements such as throughput, utilization and other applicable measurements.  Statistical aggregations (minimum, maximum, averages and histogram) of data associated with I/O requests including size, latency per component and totals.  DS8K Encryption Support  This feature enhances s390-tools to be able to display if the Storage has its disk encrypted or not.  Kernel support to issue Control I/O to dasd on EMC Symmetrix arrays  Support has been added to the kernel to issue EMC Symmetrix Control I/O. This update provides the ability to manage EMC Symmetrix storage arrays.
  • 31. Future Linux on System z Technology
  • 32. Advanced Virtualization  Dynamic Memory Add/Remove (kernel 2.6.27)  Enable to attach and use standby memory that is configured for a logical partition or z/VM guest.  Memory Attach & Detach requires running Linux on System z as a VM-guest requires z/VM 5.4 plus the PTF for APAR VM64524.  Standby CPU activation/deactivation (kernel 2.6.25)  Allow standby CPUs to be activated / deactivated  Suspend / Resume (kernel 2.6.31)  With suspend and resume support, you can stop a running Linux on System z instance and later continue operations.  When Linux is suspended, data is written to a swap partition. The resume process uses this data to make Linux continue from where it left off when it was suspended.  A suspended Linux instance does not require memory or processor cycles.
  • 33. Storage Support  HyperPav (kernel 2.6.25)  HyperPav is addressing the need to access more data with good performance and high availability!  This feature, which required a IBM DS8000™ disk storage system in average leads to a higher utilization, resulting in I/O transfer rates.  Activated automatically when the necessary prerequisites are there (DS8000 with HyperPAV LIC, z/VM 5.3). Transparent for the Linux on System z guest  DASD Large Volume Support (> kernel 2.6.29)  Large Volume Support is a feature that allows to use ECKD devices with more than 65520 cylinders. This features is available with DS8000 R4.0  High Performance FICON (HPF) (kernel 2.6.29)  Added HPF support to the DASD Device Driver  HPF is an extension to the FICON architecture and is designed to improve the execution of small block I/O requests.  HPF streamlines the FICON architecture and reduces the overhead on the channel processors, control unit ports, switch ports, and links by improving the way channel programs are written and processed.
  • 34. Usability & Serviceability  Automatic IPL After Dump (kernel 2.6.30)  Extension to the shutdown action interface which combines the actions dump and re- ipl, first a dump is taken, then a re-ipl of the system is triggered  Compiler Improvements (gcc 4.3/4.4) – The latest compiler enhancements allow a customer to recompile existing applications which can be optimized for the latest hardware generation without any changes to the source code. – This can lead up to a > 10 % performance improvement.  Large Page Support (kernel 2.6.25) – Support for a new access method to allocate larger chunks of memory, resulting in performance improvements, especially in Java based environments – This feature exploits z10 hardware features and provides a software emulation for older systems.
  • 35. Miscellaneous  STP/ETR Support (kernel 2.6.27)  Support for clock synchronization using the server time protocol (STP) or an external time reference (ETR).  Kernel vdso support (kernel 2.6.29)  Kernel provided shared library to speed up a few system calls (gettimeofday, clock_getres, clock_gettime)
  • 36. 36 Red Hat Confidential - NDA required Filesystems ■ Ext4 – main, default filesystem. Incremental scalability (ie 100TB files) & perf enhancements over ext3. ■ SSD device tuning & testing ■ NFS ● NFS4.0 – as default ● NFS4.1 – referrals, delegation & failover. ● Secure NFS, selinux labels over the wire – enabler for secure virt – timeframe likely post-GA update ■ Fuse kernel portion as enabler. ■ GFS2 ● Targeting HA clusters of up to 16 nodes. ● Primary incremental focus is stabilization and performance ● Possible improvements in ability to shrink/defragmentation ■ BTRFS – next generation, enhanced data integrity, ease of use, & scalability. Unlikely to be production ready for RHEL6GA. Likely tech preview, non root/boot.
  • 37. 37 Red Hat Confidential - NDA required Power Management ■ Kernel ● Tickless kernel – fewer interrupts, more idle time to drop to lower power states ● ASPM – (Active State Power Management) – PCI Express reduced power states on inactivity ● ALPM (Aggressive Link Power Management) – SATA links in low power mode when no I/O pending ● Kernel enhancements tracking hardware capabilities for deeper low-power states and virtualizatized guest lower power states ■ System services / daemons ● Intelligent drive spin down ● Reduced wakeup count (audit / profile package set and adapt) ● New system startup infrastructure, upstart, facilitates dynamic service initiation and suspension. Have more services start on demand. ● Dynamically power down unused peripherals when idle – ie, network, bluetooth ■ Power monitoring tools ● GUI tools for tuning & monitoring power policy ● APIs for power monitoring and policy configuration
  • 38. 38 Red Hat Confidential - NDA required Kernel Scalibility ■ Scalability limits – Maximum values ● Max CPUs – dynamic allocation of CPU structs (2.6.29) allows supported limit of 4096 and theoretical limit of 64K. ● Max IRQs – dynamic allocation (2.6.28) allows limit of 256 ● Max memory 48-bit addressing (256TB) requires pending patch incorporation ● Max # processes – 4 million on 64 bit kernels ● Max threads per process remains at 32000 (same as RHEL5) ● Filesystem limits for ext4 – 100T (practical target – bounded by fsck time) ■ Scalability features ● Split LRU VM – different eviction policies for file backed vs swap backed ● Ticket spinlocks fixes NUMA starvation ● CFS scheduler – better NUMA balancing
  • 39. 39 Red Hat Confidential - NDA required IPA Client (Identity, Policy, Audit) ■ IPA client in core RHEL for centralized security management ● Kerberos authentication with host based access control ● Provides central storage of extended user attributes ● Enables centralized policy for applications, including SELinux policy ● Audit log aggregation services & search capabilities
  • 40. 40 Red Hat Confidential - NDA required Security enhancements ■ Virtualization isolation in conjunction with SELinux ● May be post-GA update ● Labeled NFS for filesystem isolation ● Cut-and-paste window controls per authorization level ● Guest confinement via SELinux policy enhancements ■ NSS crypto ● Broaden the core services which utilize NSS crypto libraries ● Allows cheaper implementation of new features, ie TPM & centralized key store ● Incremental targeted conversion of: Openswan, openldap, glibc ● Add new crypto GUI for key import & establishment of trust ■ Smartcard integration ● Login, Firefox, Thunderbird port RHEL5 smartcard enablers. ■ Volume encryption ● Basic operation already present in RHEL5 – incremental centralized key management for RHEL6 ■ Sectool – compliance checking / intrusion detection utility – validates system admin config, ie file permissions, valid UIDs, reasonable passwords, etc
  • 41. 41 Red Hat Confidential - NDA required Desktop – product themes ■ General Desktop technology update ■ Large scale desktop deployment: ● Power management ● Mobility ● Hw enablement ● Monitors / docking / projectors
  • 42. Q & A
  • 43. Red Hat Enterprise Linux Performance Update Industry Benchmark Performance Records on Nehalem Aug 31, 2009 Product Marketing, Platform BU, Red Hat
  • 44. 44 Red Hat Confidential - NDA required RHEL on NEHALEM means … Best Performance on web apps  Highest SPECWeb2005 result ever  Performance: Top 11 SPECWeb(c)2005 results based on Red Hat Enterprise Linux  Six new 2-socket HPC benchmarks  Manufacturing Industry: 4 on commercial computer simulation apps broadly used  Performance: 70 - 115 % faster than previous Intel Xeon 5400  Energy Industry: Eclipse simulations for days and months to optimize their tactics to extract oil  Performance: 150 % faster than previous Intel Xeon 5400.  Cisco and Red Hat benchmark  Performance: Top spot for 2-socket systems with new blade server from Cisco  Cisco Unified Computing System exceeded the previous Intel mark in SPECopmMbase by 154%  Oracle Applications and Red Hat benchmark  Top result for 2-Socket system with Oracle’s E-Business Suite
  • 45. 45 Red Hat Confidential - NDA required SPECfp*_base2006 (Intel Xeon) 0 5 10 15 20 25 30 35 40 45 (3.8 GHz, 2MB L2, 800 MHz FSB, single-core) 5160 (3.0GHz, 4MB L2, 1333MHz FSB,dual-core) x5482 (3.2 GHz, 2x6MB L2, 1600 MHz, quad-core) X5570 (2.93 GHz, 8 MB L3, 6.4 GT/s, quad-core) Best Performance … Floating Point SPEED Performance on SPECfp*_base2006 benchmark MS Windows Server 2003* Ent. SP1 11.7 SLES 10 18.3 SLES 10 26.5 RHEL 5.3 39.3
  • 46. 46 Red Hat Confidential - NDA required SPECweb*2005 (Intel Xeon) 0 10000 20000 30000 40000 50000 60000 70000 80000 (3.8 GHz, 2MB L2, 800 MHz FSB, single-core) 5160 (3.0GHz, 4MB L2, 1333MHz FSB,dual-core) x5460 (3.16 GHz, 2x6MB L2, 1333 MHz, quad-core) X5570 (2.93 GHz, 8 MB L3, 6.4 GT/s, quad-core) Best Performance … Web Server Performance on SPECweb*2005 benchmark RHEL 4U2 4555 RHEL 5.2 15193 RHEL 5.2 29591 RHEL 5.2 75023
  • 47. 47 Red Hat Confidential - NDA required Best Performance … Multiphysics Finite Element analysis using ANSYS* RHEL 5.1 RHEL 5.3 RHEL 5.1 RHEL 5.3
  • 48. 48 Red Hat Confidential - NDA required Best Performance … Crash Simulation analysis using LS-DYNA* (single node) RHEL 5.3 RHEL 5.3 RHEL 5.3 RHEL 5.3 RHEL 5.3 RHEL 5.3