IBM Systems - z/VM - IBM

IBM System zLinux on System z –A Strategic ViewJim ElliottConsulting Sales Specialist – System zSystems and Technology GroupIBM Canada Ltd.IBM Systems© 2008 IBM Corporation

IBM System zTopics• Overview• Deployment criteria• Security and audit• Business continuity• On the web2 CMG Canada 2009-04-14IBM Systems

IBM System z3 CMG Canada 2009-04-14IBM Systems

IBM System zOverviewIBM Systems© 2008 IBM Corporation

IBM System zLinux on IBM System zLinux + Virtualization + System z = SYNERGY• The legendary IBM mainframe – IBM System z– Legendary dependability– Extremely security-rich, highly scalable– Designed for multiple diverse workloads executing concurrently– Proven high volume data acquisition and management• The IBM mainframe virtualization capabilities – z/VM– Support for large real memory and 32 processors– Enhanced security and LDAP server/client– Enhanced memory management for Linux guests– Enhanced management functions for Linux• Open standards operating system – Linux for System z– Reliable, stable, security-rich– Available from multiple distributors– Plentiful availability of skills administrators and developers– Large selection of applications middleware and tooling from IBM, ISVs andOpen Source6 CMG Canada 2009-04-14IBM Systems

IBM System zWhat is Linux on System z?• A native mainframe operating environment– Exploits IBM System z hardwarez/VM– Not a unique version of LinuxLPAR• Application sourcing strategy– The IBM commitment to z/OS, z/VSE and z/TPF is not affected by thisLinux strategy– Customers are offered additional opportunities to leverage theirinvestments through Linux– New doors are opening for customersto bring Linux-centric workloads to thez/OSz/OSplatformz/VMLPAR7 CMG Canada 2009-04-14IBM Systems

IBM System zWhat System z brings to Linux• The most reliable hardware platform available– Redundant processors and memory– Error detection and correction– Remote Support Facility (RSF)• Centralized Linux systems are easier to manage• Designed to support mixed work loads– Allows consolidation while maintaining one server per application– Complete work load isolation– High speed inter-server connectivity• Scalability– System z10 EC scales to 64 application processors– System z10 BC scales to 10 application processors– System z9 EC scales to 54 application processors– System z9 BC scales to 7 application processors– Up to 11 (z10 EC), 8 (z9 EC) dedicated I/O processors– Hundreds of Linux virtual servers8 CMG Canada 2009-04-14IBM Systems

IBM System zWhat is different about Linux on System z?• Access to System z specific hardware– Crypto support – CPACF, Crypto2– Traditional and Open I/O subsystems• Disk (ECKD or SCSI) and tape• SAN Volume Controller– OSA-Express, OSA-Express2 and OSA-Express3 for very high speedcommunication between z/OS and Linux– HiperSockets for ultra-high speed communication between z/OS andLinux on the same machine• z/VM aware– Enhanced performance– System management tools9 CMG Canada 2009-04-14IBM Systems

IBM System zValue of Linux on System z• Reduced Total Cost of Ownership (TCO)– Environmental savings – single footprint vs. hundreds of servers– Consolidation savings – less storage, less servers, less softwarelicenses, less server management/support• Improved service level– Systems management (single point of control)– Reliability, availability, security of System z– High performance integration with z/OS, z/VSE, z/TPF• Speed to market– Capacity-on-demand capability on System z– Dynamic allocation of on-line users, less than 10 seconds to add anew Linux server image using z/VM and IBM DS800010 CMG Canada 2009-04-14IBM Systems

IBM System zSystem z – The ultimate virtualization resource• Utilization often (usually?) exceeds 90%– Handles peak workload utilization of 100% without service leveldegradation• Massive consolidation platform– Up to 60 logical partitions, 100s to 1000s of virtual servers under z/VM– Virtualization is built-in, not added-on– HiperSockets for memory-speed communication– Most sophisticated and complete hypervisor function available• Intelligent and autonomic management of diverse workloads andsystem resources based on business policies and workloadperformance objectives11 CMG Canada 2009-04-14IBM Systems

IBM System zz/VM – Unlimited virtualization• z/VM provides a highly flexible test and production environment forenterprises deploying the latest e-business solutions• z/VM helps enterprises meet their growing demands for multisystemserver solutions with a broad range of support foroperating system environments• Mature technology – VM/370 introduced in 1972• Software Hypervisor integrated in hardware– Sharing of CPU, memory and I/O resources– Virtual network – virtual switches/routers– Virtual I/O (mini-disks, virtual cache, …)– Virtual appliances (SNA/NCP, etc.)• Easy management– Rapid install of new servers– Self-optimizing workload management12 CMG Canada 2009-04-14IBM Systems

IBM System zThe value of z/VM for Linux• Enhanced performance, growth and scalability– Server consolidation enables horizontal growth– N-tier architecture on two tiers of hardware– Extensive support for sharing resources– Virtual networking– Effective isolation of Linux images, if required• Increased productivity– Development and testingServer farms– Production support• Improved operations– Backup and recovery– Command and controlLinux onSystem z imagesz/VMLPAR13 CMG Canada 2009-04-14IBM Systems

IBM System zIntegrated Facility for Linux• Additional engines dedicated to Linux workloads– Supports z/VM and Linux on System z– IFLs on “sub-uni” systems run at “full speed”• z800, z890, z9 EC, z9 BC, z10 EC, z10 BC• Traditional mainframe software charges unaffected– IBM mainframe software– Independent SoftwareVendor products• Linux and z/VM chargedonly against the IFLsz/OSz/OSz/OSLL LLiiiiiiiCCnn nnMMuu uuSSxx xxz/VM z/VM V4LinuxLPAR LPARLPARLPARLPARCP0 CP1 CP2 zAAP zIIP CP3 LN0 LN1 LN2System zIFL Engines14 CMG Canada 2009-04-14IBM Systems

IBM System zApplication serving with Linux on System zOutside worldDemilitarized Zone (DMZ)Internal networkz/VMz/OSPublic KeyInfrastructureDomainName ServerUserInternetFirewall / LoadBalancerProtocol FirewallLoad Balancer with SSLAccelerationCaching Proxy Serverw/ HTTP Load BalancingCollaborationServerCommerceServerWebApplicationServerFirewall / LoadBalancerDomain FirewallWebApplicationServerDirectoryServerSystemsManagementApplicationNodeThe best LANis one withno wiresSystem zSharedFileSystemDatabaseServer15 CMG Canada 2009-04-14IBM Systems

IBM System zDeployment criteriaIBM Systems© 2008 IBM Corporation

IBM System zInfrastructure simplification• Customers leveraging scale up andscale out technologies to simplify andintegrate their on demand operatingenvironment• As one solution option:– Large SMP and Rack Optimized serversintegrated with Linux, Java and Gridtechnologies can enable thistransformationScale OutRack OptimizedApplication ServersTerminalServingCorporate Deep ComputingInfrastructure ClustersCollaboration ServersFile/PrintSSL Appliances ServersWeb ServicesSANE-CommerceApplicationsBackupDataTransactionDataReferenceDataJavaLinuxGridDNS ServersSecurity &Directory ServicesFile/Print ServersScale UpLarge SMPDatabaseServersApplicationServersWeb ServersTransactionServersBusinessDataFirewallServersRoutersSwitchesSSLAppliancesCachingAppliancesSecurity &Directory ServersDNSServersWeb ServersApplicationServersLAN ServersFile/PrintServersDatabaseServersToday’sEnvironment,SimplifiedUI Data17 CMG Canada 2009-04-14IBM Systems

IBM System zIdeal blade implementationsScale OutRack OptimizedApplication Servers E-CommerceTerminal Serving ApplicationsInfrastructure Deep ComputingClustersCollaboration ServersFile/PrintSSL Appliances ServersWeb ServicesScale UpLarge SMPSecurity &Directory ServicesFile/Print ServersDNS ServersDatabaseServersWeb ServersTransactionServersApplicationServersVirtualization• Clustered workloads• Distributedcomputingapplications• Infrastructureapplications• Small database• Processor andmemory intensiveworkloads• Centralized storagesolutions18 CMG Canada 2009-04-14IBM Systems

IBM System zIdeal mainframe implementationsScale OutRack OptimizedApplication Servers E-CommerceTerminal Serving ApplicationsInfrastructure Deep ComputingClustersCollaboration ServersFile/PrintSSL Appliances ServersWeb ServicesScale UpLarge SMPSecurity &Directory ServicesFile/Print ServersDNS ServersDatabaseServersWeb ServersTransactionServersApplicationServersVirtualization• High performancetransactionprocessing• I/O intensiveworkloads• Large databaseserving• High resiliency andsecurity• Unpredictable andhighly variableworkload spikes• Low utilizationinfrastructureapplications• Rapid provisioningand re-provisioning19 CMG Canada 2009-04-14IBM Systems

IBM System zSelecting an application• Performance on System z CPUs is comparable to CPUs on other platformsof similar speed– CPU speed is not the entire story – it’s in the architecture!– Architecture designed for multiple or consolidated workloads– System z has definite advantage with applications that have mixed CPU andI/O• System z and z/VM provide excellent virtualization capabilities– Look for applications that are on lower utilized servers– Development and Test are goodchoices to start• Good planning is essential• IBM can– Perform sizing estimates– Assist with planning and initialinstallation needs20 CMG Canada 2009-04-14IBM Systems

IBM System zWhere to deploy on System z – z/OS or Linux?Technical ConsiderationsLinuxLinuxQuality of ServiceSpeed of deploymentz/OSz/OSOther Considerations• Application availability• Workload Managementfunction and granularity• File sharing across aSysplex• Manageability andscaling characteristics• Availability of skillLinuxz/OSDegree of portability21 CMG Canada 2009-04-14IBM Systems

IBM System zWhere to deploy – System z or “distributed”Technical ConsiderationsOther ConsiderationsSystem zSystem zSystem zSystem zQuality of ServiceSpeed of deploymentInstances 2 - nData IntensityCompute Intensity“distributed”“distributed”“distributed”“distributed”• Application availability– Certification of solution onhardware/software platform• Workload Management• Manageability and scalingcharacteristics– Especially DB2 and WebSphereon z/OS– Proximity of data to application– The best network is an internalnetwork!22 CMG Canada 2009-04-14IBM Systems

IBM System zLinux on System z workloads• Linux on System z is mainstream– Huge momentum and growth– Abundant Linux skills• Linux on System z is enterprise class– Enterprise standard quality of service– Co-location of applications with z/OSdelivers tremendous value• Broad set of solutions– Almost 2,500 applications availableWeb ServerWeb App ServerData ServingDevelopment SystemFirewall ServereCommerceBusiness IntelligenceNetwork ServerCore Enterprise AppeMail ServerWorkgroup SystemScientific / TechnicalOther1H 20072H 20071H 20080% 10% 20% 30% 40% 50% 60% 70%IBM Survey of 700 Customers – 418 respondents“What applications have you deployed or are planning to deploy in the next year on System z?”23 CMG Canada 2009-04-14IBM Systems

IBM System zSystem z10 BC lowers acquisition costsWhy pay up to 50% more?• Plus the legendary System z advantage– Lower operational cost:Complexity, Management, Labor, …– Legendary security for your critical data– Leading scalability for a changing world– Availability of service for a demandingmarketplace– Outstanding ServiceSystem z10 BC additional IFLLower cost than Dell and HP IntelOracle DB + WebSphere ND Workload3-Year Total Acquisition Cost (TCA)1.53 X1.31 XSoftware MaintSoftwareHardware MaintHardware1.00 XThe pricing advantage of the latesttechnology: Consolidate x86 softwarelicenses at up to a 28 to 1 ratioAll performance information was determined in a controlledenvironment. Actual results may vary.8 HP Itanium Cores 8 Dell x86 Cores 1 z10 BC IFLHPVirtualizationHP ItaniumDual CoreserversVMwareVirtualizationDell PowerEdge QuadCore serversIBM z/VMVirtualizationIBM z10 BCEnterpriseQuad Core24 CMG Canada 2009-04-14IBM Systems

IBM System zLinux on IBM System zTake back control of your IT infrastructure• Unify the infrastructure– IT optimization and server consolidation based on virtualizationtechnology and Linux– Linux can help to simplify systems management with today'sheterogeneous IT environment• Leverage the mainframe data serving strengths– Deploy in less time, accessing core data on z/OS– Reduced networking complexity and improved security network“inside the box”• A secure and flexible business environment– Linux open standards support for easier application integration– Unparalleled scale up / scale out capabilities– Virtual growth instead of physical expansion on x86 or RISC servers• Leverage strengths across the infrastructure– Superior performance, simplified management, security-rich environment– High-performance security-rich processing with Crypto2 cryptographic coprocessors– Backup and restore processes25 CMG Canada 2009-04-14IBM Systems

IBM System zSecurity and AuditIBM Systems© 2008 IBM Corporation

IBM System zz/VM Security Server – RACFHelping to address security and compliance* guidelines• z/VM system integrity – IBM’s long term commitment to protectingkey z/VM system resources– Intended to prevent unauthorized application programs, subsystems,and users from gaining access, circumventing, disabling, altering, orobtaining control of key z/VM system processes and resources unlessallowed by the installation• Consistent, comprehensive logging– RACF performs centralized authentication, access control, and audit– Tivoli Compliance InSight Manager log continuity reporting helpsvalidate that logs have been collected – addressing a core compliancerequirement• Tivoli zSecure Manager for RACF z/VM provides administratorswith tools to help unleash the potential of your mainframe system* It is the customer's responsibility to identify, interpret, and comply with laws or regulatory requirements that affect its business.IBM does not represent that its products or services will ensure that the customer is in compliance with the law.27 CMG Canada 2009-04-14IBM Systems

IBM System zTivoli Directory Server for z/VM• Integrated in the base of z/VM V5.3 – provides sophisticated LDAPservices for z/VM– Extended operation to support group access checking in addition touser access checking– Improved compatibility for z/VM• Integrate with distributed Tivoli products for centralizedauthentication and user managementz/VM Users, groups,resourcesz/VM and Linux ® for System zDistributed systemsRACFTivoliDirectoryServerTivoli DirectoryIntegrator28 CMG Canada 2009-04-14IBM Systems

IBM System zCentralized authentication and user managementz/VMLinuxPAMLinuxPAMLinuxPAMITDS (LDAP)BFSorRACF• Consistency of user ID and passwordsmanagement across the user domain– Centralized, ID and passwords in one place, inRACF– No need for multiple servers each with its ownLDAP and authentication table• RACF reputation for security– Individual distributed authentication tables may betarget or hacking• Auditability of the entire user domainSMF auditSystem zLPARHW CryptoPAM = pluggable authentication modulePAMLinuxPAMLinuxPAMAnything thatuses thestandard Red Hator Novell PAM29 CMG Canada 2009-04-14IBM Systems

IBM System zCentralized auditz/VMLinuxAuditDplug inLinux LinuxAuditD AuditDPlug in Plug inITDS (LDAP)RACFSMF audit• Common Client – auditD with plug-in• Integrated LDAP Server on z/VM ®• LDAP backed by RACF• The Plug-in is specific to IBM Tivoli DirectoryServer (LDAP)– Available today via Open Source– Plug in has to be specific – audit records muchbe translated into a form that ITDS / RACF canuse• See Redbook ® on Enterprise MultiplatformAuditing (SG24-7472)System zLPARLinuxAuditDPlug inLinuxAuditDPlug in30 CMG Canada 2009-04-14IBM Systems

IBM System zBusiness Continuity –High Availability andDisaster RecoveryIBM Systems© 2008 IBM Corporation

IBM System zHigh Availability• HA is provided through a combination of z/VM, Linux on System zand middleware components– The solution you choose will depend on the degree of HA you wantand how fast the HA environment has to respondz/VM LPAR 1WASDmgrRouterFirewall FirewallPrimaryLoadBalancerBackupLoadBalancerHTTPServerHTTPServerFirewall FirewallWASServerWASServerOracleDBServerOracleDBServerSharedDiskz/VM LPAR 232 CMG Canada 2009-04-14IBM Systems

IBM System zHigh Availability with z/VM• z/VM does provide a highly available environment throughfunctions such as VSWITCH plus the RAS characteristics of theSystem z architecture (spare resources)• Today, there is limited clustering support in z/VM– Cross-System Extensions provides for shared spool, shared directory,shared query and messaging – but requires additional licensedfeatures/products to fully implement– Future z/VM releases will provide for a “z/VM Hypervisor Cluster” inthe base product• We recommend two z/VM production partitions with Linux andmiddleware HA resources split between those two partitions33 CMG Canada 2009-04-14IBM Systems

IBM System zHigh Availability with Linux on System z• Linux provides extensive HA support• Linux on System z with z/VM extends this support– Detailed information on this is available in the Redbook “AchievingHigh Availability on Linux for System z with Linux-HA Release 2”SG24-7711-00• Linux-HA provides high availability for the Linux operating system,not for any applications running within it• Products such as Tivoli System Automation for Multiplatformsprovide high availability and automation for enterprise-wideapplications and IT services and can reduce the effort to implementan HA environment34 CMG Canada 2009-04-14IBM Systems

IBM System zHigh Availability for Linux on System z middleware• Most enterprise middleware today provides high availabilitysupport• Oracle DB provides mirroring support with Data Guard to full HAsupport through Oracle RAC– Oracle RAC in an Active/Active environment provides load balancingand HA– Oracle RAC in an Active/Passive environment provides HA• WebSphere servers provide load balancing and HA capabilities• IBM whitepaper “High Availability Architectures For Linux on IBMSystem z” provides detailed information on how to setup thisenvironment35 CMG Canada 2009-04-14IBM Systems

IBM System zDisaster Recovery• DR is simplified for Linux when running in a z/VM environment– Your DR site will be able to provide a z/VM environment– z/VM (and System z) masks the differences between configurationswhich greatly reduces the effort to implement a DR solution– DR using System z and z/VM is much faster to switch to than“distributed” environments36 CMG Canada 2009-04-14IBM Systems

IBM System zOn the webIBM Systems© 2008 IBM Corporation

IBM System zz/VM and Linux on System zhttp://ibm.com/vm/linux/38 CMG Canada 2009-04-14IBM Systems

IBM System zLinux on System zhttp://ibm.com/systems/z/linux/39 CMG Canada 2009-04-14IBM Systems

IBM System zRedbooks for Linuxhttp://ibm.com/redbooks/linux40 CMG Canada 2009-04-14IBM Systems

IBM System zLinux at IBMhttp://ibm.com/linux/41 CMG Canada 2009-04-14IBM Systems

IBM System zIBM Middleware for Linuxhttp://ibm.com/software/linux/42 CMG Canada 2009-04-14IBM Systems

IBM System zIBM Software Available for Linuxhttp://ibm.com/linux/matrix/43 CMG Canada 2009-04-14IBM Systems

IBM System zIBM developerWorks for Linuxhttp://ibm.com/deverloperworks/linux/121 Tutorials44 CMG Canada 2009-04-14IBM Systems

IBM System zInternet list server discussions• IBMVM discusses z/VM– To subscribe, send a note to listserv@listserv.uark.edu. In the body ofthe note, write only the following line:• SUBSCRIBE IBMVM firstname lastname– View and search the current list and archives:• http://listserv.uark.edu/archives/ibmvm.html• LINUX-390 discusses Linux on System z– To subscribe, send a note to listserv@vm.marist.edu. In the body ofthe note, write only the following line:• SUBSCRIBE LINUX-390 firstname lastname– View and search the current list and archives:• http://www.marist.edu/htbin/wlvindex?linux-39045 CMG Canada 2009-04-14IBM Systems

IBM System zAdditional web sites• z/VM resources for Linux on IBM System z– http://ibm.com/vm/linux• General z/VM tuning tips– http://ibm.com/vm/perf/tips• Novell SUSE Linux Enterprise– http://novell.com/mainframe/– http://novell.com/linux/mainframe/• Novell SLES Starter System for System z– http://novell.com/partners/ibm/mainframe/starterpack.html• Red Hat Enterprise Linux– http://redhat.com/rhel/server/mainframe/46 CMG Canada 2009-04-14IBM Systems

IBM System zThank you• Jim Elliott– Consulting Sales Specialist – System z– Systems and Technology Group– IBM Canada Ltd.– jim_elliott@ca.ibm.com• http://ibm.com/systems/z• http://ibm.com/vm/devpages/jelliott47 CMG Canada 2009-04-14IBM Systems

IBM System zNotices• © Copyright IBM Corporation 2000, 2009. All rights reserved.• This document contains words and/or phrases that are trademarks or registered trademarks of the InternationalBusiness Machines Corporation in the United States and/or other countries. For information on IBM trademarks goto http://www.ibm.com/legal/copytrade.shtml.• The following are trademarks or registered trademarks of other companies.– Java and all Java-related trademarks and logos are trademarks of Sun Microsystems, Inc., in the United States and othercountries.– UNIX is a registered trademark of The Open Group in the United States and other countries.– Microsoft, Windows and Windows NT are registered trademarks of Microsoft Corporation.– Red Hat, the Red Hat "Shadow Man" logo, and all Red Hat-based trademarks and logos are trademarks or registeredtrademarks of Red Hat, Inc., in the United States and other countries.– Linux is a trademark of Linus Torvalds in the United States, other countries, or both.– All other products may be trademarks or registered trademarks of their respective companies.• Notes:– This publication was produced in Canada. IBM may not offer the products, services or features discussed in thisdocument in other countries, and the information may be subject to change without notice. Consult your local IBMbusiness contact for information on the product or services available in your area.– All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and representgoals and objectives only.– Information about non-IBM products is obtained from the manufacturers of those products or their publishedannouncements. IBM has not tested those products and cannot confirm the performance, compatibility, or any otherclaims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to thesuppliers of those products.– Prices subject to change without notice. Contact your IBM representative or Business Partner for the most current pricingin your geography.• Permission is hereby granted to CMG to publish an exact copy of this paper in the CMG proceedings. IBM retainsthe title to the copyright in this paper as well as title to the copyright in all underlying works. IBM retains the right tomake derivative works and to republish and distribute this paper to whomever it chooses in any way it chooses.48 CMG Canada 2009-04-14IBM Systems