aix presentation - niceone

8/4/2019 AIX Presentation - NiceOne

1/67

2010 IBM Corporation

2008 IBMCorporation

AIX:The Future of UNIX

Brought to you by

Essex Technology Group, Inc.

201 West Passaic Street

Rochelle Park NJ 07662

www.essextec.com


2/67


IBM Power Systems

2

As the world gets smarter, infrastructure demands will grow

Smarttraffic

systems

Smart watermanagement

Smartenergygrids

Smarthealthcare

Smartfood

systems

Intelligentoil fieldtechnologies

Smartregions

Smartweather

Smartcountries

Smartsupply

chains

Smartcities

Smart retail


3/67


IBM Power Systems

3

Consolidating with AIX on Power Systemsenables clients to

Server consolidation improves service to clients bydelivering flexible performance, dynamic provisioningand enabling clients to avoid disruption

Server consolidation with shared resources enables highsystem utilization, which lowers the cost of ownershipby reducing networking, energy, floor space, andsoftware costs.

REDUCE COST

IMPROVE SERVICE

MANAGE RISK

Server consolidation manages IT risk by improvingsecurity, increasing business resiliency andsimplifying operations.

AIX, Power Systems and PowerVM are designed to delivereffective consolidation in the most demanding data centers


4/67


IBM Power Systems

4

Winn-DixieStrengthening the infrastructure with an IBM consolidation solution

Business challenge:Winn-Dixie, a Jacksonville, Florida-based grocery chain based withmore than 600 retail locations throughout the southeastern U.S.,needed a cost-effective and easily managed solution to replace itsaging distributed IT infrastructure and quickly enable disasterrecovery.

Solution:The solution consolidated more than 600 stand-alone servers atindividual grocery stores into a centralized data center at WinnDixie headquarters using IBM AIX and IBM PowerVM

virtualization technologies to support 16 stores on a singleIBM BladeCenter JS22 blade server, mirrored to a nearby facilityas well as to a remote disaster recovery location.

Benefits:

Redirected $5 million capital cost savings to storeremodelling

Improved application performance by 5 to 10 times, enablingbetter service

Reduced disaster recovery time from days to hours

We thought the IBM

solution gave us the most

flexibility not only for now,

but going forward. It

accommodated our existing

application portfolio while

providing a very rich

upgrade path in ourinfrastructure.

Barry Kirk, director ofarchitecture, Winn-Dixie

Solution components:

IBM BladeCenter JS22blades in IBM BladeCenter H

IBM PowerVM

IBM AIX

POP03046-USEN-00


5/67


IBM Power Systems

5

Baylor College of Medicine improves performance andsets the stage for an SAP upgrade with IBM serversBusiness challenge:

When Baylor College of Medicine (Baylor) decided to build a newhospital, it also planned to upgrade its existing data center inorder to ease space constraints and replace end-of-life Sunservers. It needed a smooth migration that would provideuninterrupted access to its SAP ERP system and other supportingsystems.

Solution:Baylor engaged IBM Premier Business Partner Mark III and broughtin the IBM Migration Factory team to provide the transition ofworkloads from 32 legacy Sun servers onto three IBM Power 570servers, running the IBM AIXoperating system. IBM MigrationFactory performed the server consolidation and migration ofBaylors software applications from the old Sun hardware platform

to the new IBM platform.

Benefits:

Achieves a 60 percent reduction in rack space footprint andbetter than 40 percent savings in both cooling and power

Improves overall performance by 30 percent

Improves payroll processing time by 213 percent

Nobody else had as

eloquent and simple a

design as IBM did. They

also offered very cost-

effective solutions.

Al Reineking,executive director of IT operations

and technical services, BaylorCollege of Medicine

Solution components:

SAP ERP

IBM Migration Factory

IBM Power 570


6/67


IBM Power Systems

6

The Coca-Cola Bottling Company of EgyptIBM enables growth with powerful, scalable solutions

Business Challenge:

The Coca-Cola Bottling Company of Egypts hardwareinfrastructure hosted their enterprise resource planningsystem, Oracle E-Business Suite. As they grew and addedmodules, server performance failed to meet business needs.They needed to implement a high performance, scalableinfrastructure, including a centralized storage system.

Solution:

The company implemented two IBM Power 570 servers one each for the main site and the remote site both runningIBM AIX. They implemented IBM PowerVM DynamicLogical Partitioning and Micro-Partitioning to minimize serveradministration and to minimize the number of processorsneeded. They also implemented IBM SystemStorage DS4800.

Benefits:

Improves performance while reducing the number ofprocessors from 16 to 7

Reduces risk and reduces the number of servers neededfor disaster recovery

Increases server utilization by 35 percent and supports

71 percent more users

Our new IBM

infrastructure provides us

with improved performance,

availability

and scalability to manageour growth.

The Coca-Cola BottlingCompany of Egypt

Solution Components:

IBM Power 570

IBM AIX

IBM PowerVM DynamicLogical Partitioning and MicroPartitioning

IBM System Storage DS4800

MUP03005-USEN-00


7/67 2010 IBM Corporation

IBM Power Systems

7

University of Pittsburgh Medical Center (UPMC)Rewriting the rules on IT investment to facilitate tomorrows healthcare innovations

Business Challenge

UPMC, Pennsylvanias largest integrated healthcare deliverynetwork, sought to lower the cost and complexity of IT infrastructure

to enable the continued investment in next-generation clinical

systems and to lay the foundation for the best possible patient care.

Solution

Now in the middle of a landmark, 8-year strategic partnership with

IBM, UPMC is transforming its systems through consolidation,standardization and virtualization. Relying on IBM products andservices, the mid-stream effort has already resulted in the reduction of

hundreds of servers across the UPMC network and achieved more

than a quantum improvement in resource efficiency. It has

fundamentally changed the

link between processing and resource needs enabling it to meet an

ambitious clinical agenda with a far lower rate of IT investment growth.

Benefits

$30 million in capital and operating cost reductions

150 percent increase in processing capacity with no increase

in IT support costs

40 percent reduction in IT infrastructure floor space requirements,

freeing up space for revenue generating services67 percent reduction in number of physical servers

Considering that IBM and UPMC

are only midway through this trans-formation project, the results have been

impressive. We have already proven that

standardization, along with aggressive

implementation of virtualization, yields

unprecedented productivity and

efficiency.Paul Sikora, VP of IT Transformation, UPMC

Solution Components IBM BladeCenter

IBM Component Infrastructure Roadmap

IBM Global Technology Services

IBM Healthcare and Life Sciences

IBM Research

IBM STG Services

IBM SWG Services

IBM System p, System x, System z

IBM Tivoli product suite

IBM TotalStorage Enterprise Storage

IBM WebSphere Business Integration

IBM WebSphere Application Server




IBM Power Systems

8

IBM Power Systems Success Stories

Power technologies provide real business value

Annual savings of over $500,000 + accelerated newservices deployment from 1 month to 2 days

Reduced application downtime + increasedflexibility to dynamically scale and

change workload capacity

Fewer processor cores than previousSun servers reduced software and

management costs + PowerVM simplifiedthe effort to deploy or scale new services

Consolidated and virtualized 76 servers to 6reducing complexity and total cost of ownership

of global IT infrastructure
http://www.energen.com/fw/main/home-113.htmlhttp://www.transplace.com/index.htmhttp://www.healthtrans.com/index.html



IBM Power Systems

9

IBMS 10-year march to UNIX leadership

15%

20%

25%

30%

35%

40%

45%

Q100

Q300

Q101

Q301

Q102

Q302

Q103

Q303

Q104

Q304

Q105

Q305

Q106

Q306

Q107

Q307

Q108

Q308

Q109

Q309

Q110

HP Sun IBM

UNIX Server Rolling Four Quarter Average Revenue Share

POWER4Dynamic LPARs

POWER6Live PartitionMobility

POWER5Micro-Partitioning

POWER7Workload OptimizedLeadership

dot.combubbleburst

globaleconomicrecession

the largest shift of customer spending in UNIX history



IBM Power Systems

10

Why AIX is the Premier UNIX Platform Today

Strong, stable, non-disruptive roadmap

Improved Efficiency through Virtualization

Outstanding Performance

Innovation through integrated Development



IBM Power Systems

12

Network CentricComputing

AIX V2 & V3Establishment inthe market:

- RISC Support

- UNIX credibility

- Open Sys. Stds..

- Dynamic Kernel

- JFS and LVM

- SMIT

AIX V3.2.5Maturity:

- Stability

- Quality

AIX V4.1/4.2SMP Scalability:

- POWERPC spt.- 4-8 way SMP- Kernel Threads- Client/Server pkg- NFS V3- CDE- UNIX95 branded- NIM- > 2GB filesystems

-HACMP Clustering- POSIX 1003.1,1003.2, XPG4- Runtime Linking- Java 1.1.2

AIX V4.3Higher levels of

scalability:- 24-way SMP- 64-bit HW support- 96 GB memory- UNIX98 branded- TCP/IP V6- IPsec- Web Sys. Mgr.- LDAP Dir. Server.

- Workload Mgr- Java JDT/JIT- Direct I/O- Alt. Disk Install- Exp/Bonus CDs

DistributedClient-Server

1986-1992 1994-1996 1997-1999

Flexible ResourceManagement:

- POWER4+ spt.- Dynamic LPAR- Dynamic CUoD- New 64bit kernel- 512GB mem- JFS2- 16 TB f ilesystems

- UNIX03 branded- Concurrent I/O- MultiPath I/O- Flex LDAP Client- XSSO PAM spt

e-BusinessComputing

Open Systems

Workstations

AIX Evolution Over Twenty years of Progress

AIX/6000

Uni-processor 4-8 way SMP 24-way SMP 32-way SMP

AIX 7Future of UNIX:-256 core/1024 treadscalability-POWER7Exploitation-Domain basedRBAC- AIX ProfileManager-WPAR

enhancements-AIX 5.2 in a WPAR-PowerVMvirtualized storage-LVM SSD support-Terabyte segment

2010

On DemandBusiness

2001-2002

64/256-way SMT

AIX 5L V5.3Advanced

Virtualization:- POWER5 support- 64-way SMP- SMT- MicroPartitions- Virt I/O Server- Partition Load Mgr- NFS Version 4- Adv. Accounting

- Scaleable VG- JFS2 Shrink- SUMA- SW RAS features- POSIX Realtime

2004-2005

AIX 5L V5.1/5.2

SmarterPlanet

2007

AIX 6Enterprise RAS:-POWER6 support-Workload Partitions-Application Mobility-Continuous Avail.

-Storage Keys-Dynamic tracing-Software FFDC-Recovery Rtns-Concurrent MX

-Trusted AIX-RBAC-Encrypting JFS2-AIX Security Expert-Director Console

New EnterpriseData Center

1024-way SMT4


12/67


IBM Power Systems

13

PowerVM Virtualization Architecture

Networks and network storage

On demand

resources

PowerHypervisor

Serviceprocessor

ProcessorsMemory

Linuxpartitions

Virtual Network

AIXDedicatedpartitions

Expansion slots

Virtual processors Virtual adapters

Local devices & storage

Workload management and provisioning

WPAR

WPAR

WPAR

VirtualI/O

server

Virtualnetwork

&storage

SLICLinuxkernels

AIXShared partitions

AIXkernels

VirtualI/O

server

Virtualnetwork

&storage

IBM i


13/67


IBM Power Systems

14

What is new for August 2010

AIX 7 The Future of UNIX

AIX 5.2 Workload Partitions for AIX 7

A new way to consolidate older workloads on POWER7


14/67


IBM Power Systems

15

Workload-Optimizing Systems

Vertical scalability for massive workloads with up to 256 cores/1024 threadsin a single AIX partition

Virtualization without limits Run AIX 5.2 in a WPAR to simplify consolidation of legacy environments on POWER7

Resiliency without downtime

Built in clustering to simplify configuration and management of scale-outworkloads and high availability solutions

Management with Automation

Profile based configuration management eases the managementof pools of AIX systems

AIX 7 -- The Future of UNIX

*All statements regarding IBM's future direction and intent are subjectto change or withdrawal without notice, and represent goals and objectives

only.Some features require the purchase of additional software components.


15/67


IBM Power Systems

16

AIX Binary Compatibility Guarantee


16/67


IBM Power Systems

17

Moving up to AIX 7

AIX 7 runs on your existing hardware Fully exploits POWER7 processor-based systems

Also exploits systems based on POWER4, POWER5, POWER6 processors

AIX 7 runs your existing applications Current applications will continue to run no need to recompile applications *

Even supports 32 bit applications created on AIX versions prior to AIX V5

Binary compatibility guarantee

Upgrade process Prior upgrade tools will support upgrade to AIX 7

Clients can upgrade directly to AIX 7 from AIX 6 and AIX V5

Free upgrade for customers with Software Maintenance Agreements (SWMA)

Upgrades are no charge within the same edition:

AIX 5.3 to AIX 7 Standard edition

AIX 6 Express Edition to AIX 7 Express Edition, etc,

*See general conditions at ibm.com/systems/power/software/aix/compatibility


17/67


IBM Power Systems

18

AIX Scalability Evolution

AIX/6000

Uniprocessor

24

Threads

4-8Threads

256Threads

32-128Threads

1024Threads


18/67


IBM Power Systems

19

AIX 7* Hardware Enablement and Support

Terabyte Segment support

Designed to improve performance for workloads that use large amounts of memory

AIX kernel memory pinning

AIX 7 memory pinned by default to enhance performance

Hardware acceleration for Encrypting Filesystems, IPSec and TrustedExecution

Reduce processor workload for encryption

LVM Solid State Disk Support

SSD only Volume Groups, enhancements tofilemon to identify SSD candiates

Shared Memory interface to Barrier Synchronous Register

Reduce need for kernel extensions for BSR access* These features are also available in AIX 6 Technology Level 6


19/67


IBM Power Systems

20

AIX Workload Partitions (WPAR)

WPARs are designed to saveadministrator work by reducingthe number of AIX instances topatch

WPARs have much lowermemory resource requirements:

68 MB vs 1GB for an LPAR WPAR takes seconds to create

and LPARs minutes

Application mobility muchsimpler to organize than LPM

Lots of WPARs on one AIX issimpler to monitor and controlthan monitoring across manyLPARs.

Rapid cloning is easy and letsyou use "disposable images" -simple to create, experiment andthrow away

Virtualized AIX operating

system environments within asingle AIX image

Each WPAR shares the singleAIX operating system

AIX 7 added the capability to

run AIX 5.2 in a WPAR*

Applications and users inside aWPAR cannot affect resourcesoutside the WPAR*

Each WPAR can have a

regulated share of processor,memory and other resources

Two types of WPAR

- System WPARs have separatesecurity and appear like acompletely separate OS

- Application WPARs are

manageability wrappers around asingle application

Top reasons to use WPARsWhat is it?

* Requires purchase of the AIX 5.2 WPARs for AIX 7

product

NetworksDisk or NFS storage NetworksDisk or NFS storage


20/67


IBM Power Systems

21

AIX Workload Partitions can be used in LPARs

LPARAsia

LPAR LPAREMEA

LPARAmericas

VIOServer

DedicatedProcessorLPAR

Finance

DedicatedProcessorLPAR

Planning

WPAR #1BusinessIntelligence

WPAR #1MFG

WPAR #2Planning

WPAR #1eMail

WPAR #3

Billing

WPAR #2Test

Micro-partition Processor Pool

POWER Hypervisor


21/67


IBM Power Systems

22

WPAR Shared Applications Enables AdministrativeEfficiency

Workload

Partition

App Server#1

WorkloadPartition

Billing

WorkloadPartition

BI

Global filesystems//etc/usr application code/opt application code (or here)/var/tmp/appserver application code (or here)

System WPAR filesystems/ r/w - unique per WPAR/etc r/w - unique per WPAR

/usr r/o from global (typically)/opt r/o from global (typically)/var r/w - unique per WPAR/tmp r/w - unique per WPAR/appserver r/o from global/config r/w uniq per WPAR (example)

Global FS

//etc/usr/opt/var/tmp/appsvr

WPAR FSApp Server 1

WorkloadPartition

App Server

#2 WorkloadPartition

WebServer

Application installed in Global instance and used by multiple WPARs

WPAR FSApp Server 1

//etc/var/tmp/config

//etc/var/tmp/config

NFS

AIXglobal Instance


22/67


IBM Power Systems

23

AIX 7 WPAR Enhancements

Export of Fibre channel adapters to WPARs NPIV-like, but can work on any Fibre Channel adapter

Adds support for Fibre Channel tape

Kernel Extensions for WPARs Trusted kernel extensions may be loaded by the WPAR administrator

Extensions can be only for one WPAR or for entire system

Support for VIOS disks in WPARs VSCSI disks can be exported to a WPAR

This feature also available in AIX 6 Technology Level 6

Run AIX 5.2 inside of a Workload Partition Consolidate older environments on POWER7 processor-based systems

Requires AIX 5.2 WPARs for AIX 7 available separately from AIX 7


23/67


IBM Power Systems

24

Introducing:AIX 5.2 Workload Partitions for AIX 7

A new licensed program product offering that allows customers tosimplify migrating their old, AIX 5.2 workloads to POWER7

Runs on top of AIX 7 and POWER7 processor-based server

Customer value Simplify consolidation of old workloads on new hardware

Reclaim floor space and eliminate hardware support for obsolete servers

Protects customer investment in application stacks

Offering includes phone and fix support for AIX 5.2

Enables advanced capabilities such as SMT4, Live Application Mobility and LivePartition Mobility

Provides a way for AIX 5.2 clients to move up to POWER7


24/67


IBM Power Systems

25

AIX 5.2 WPARs for AIX 7

Client simply backs up existing legacy AIX 5.2environment and restores into an AIX 7 WPAR

Client applications continue to run in AIX 5.2environment with AIX 5.2 libraries

The SWMA for this offering will also provide how-to and limited defect support for the AIX 5.2operating system

POWER7 exploitation: SMT4, VIOS,MicroPartitioning and Mobility

Managed via IBM Systems Director WorkloadPartitions Manager or command line

AIX 5.2 WPARs for AIX 7 will be a separately charged product built on AIX 7

*All statements regarding IBM's future direction and intent are subjectto change or withdrawal without notice, and represent goals and objectives

only.Some features require the purchase of additional software components.

POWER7

AIX 5.2 VersionedEnvironment

5.2 syscall compatibility layer

AIX 7 Native Environment

AIX 7 native syscalls

WPARA//var/tmp

/home

WPARB//var/tmp

/home

WPARD//var/tmp

/home

WPARC//var/tmp

/home

AIX 7 Kernel

/usr/opt

/usr/opt /usr

/opt

mksysbbackup

fromAIX 5.2

legacysystem


25/67


IBM Power Systems

26

When to use Workload Partitions

Requirement MicroPartitions Workload Partitions

Hardware enforced Isolation

Minimal number of AIX images

Server Consolidation

Greatest Flexibility

Cross system workload management

Move workload between systems

Most efficient use of hardware resources

Run AIX V5.2 on POWER7


26/67


IBM Power Systems

27

AIX Live Application Mobility

Can make it easier to consolidateworkloads from underutilizedservers

Can provide increased flexibilityto manage workloads by easilymoving the workload to another

system

Facilitates increased reliability byallowing workloads to be movedaway during planned outages

Automated, policy based

relocation can reduceadministrative workload

Provides a way to manageavailability and workload of your ITinfrastructure without significantlyimpacting end users

The capability to relocate arunning Workload Partition fromone system to another withoutrestarting the application

The application running insidethe WPAR resumes running

after the relocation is complete

Works with systems based onPOWER7, POWER6,POWER5 and POWER4processors

Requires the IBM PowerVMWorkload Partitions Manager forAIXproduct, a Systems Directoradvanced manager

Manual or automatic, policybased relocation

How it can help?What is it?

WorkloadPartition

QA

AIX # 2

WorkloadPartition

Data Mining

WorkloadPartition

App Server

WorkloadPartition

Web

AIX # 1

WorkloadPartition

Dev

WorkloadPartitione-mail

PowerVMWorkloadPartitionsManagerfor AIX

Policy

WorkloadPartitionBilling

Shared Storage (SAN or NFS)


27/67


IBM Power Systems

28

PowerVM Live Partition Mobility

Can make it easier to consolidateworkloads from underutilizedservers by facilitating the transferof workloads with almost no enduser impact

Can provide increased flexibility

to manage workloads by easilymoving the workload to anothersystem

Facilitates increased reliability byallowing workloads to be movedaway during planned outages

PowerVM Live Partition Mobilitycan provide for a much moreflexible and responsive ITinfrastructure by reducing the costand risk of rebalancing workloads

A PowerVM Enterprise Editionfeature that allows an entireLogical Partition (LPAR) to berelocated from one system toanother with almost no impactto the end user

The end user effect is a singledelay of two seconds when therelocation is completed

Supported by AIX 7, AIX 6, AIXV5.3 and Linux

PowerVM Live PartitionMobility requires that all I/O bevirtualized through the VirtualI/O server at the time of therelocation


Movement to adifferent serverwith no loss of

service

Virtualized SAN and Net work InfrastructureVirtualized SAN and Networ k Infrastructure

Live Partition Mobility requires the purchase ofthe optional PowerVM Enterprise Edition.


28/67


IBM Power Systems

29

Live Application Mobility

Live Mobility on Power Systems

Movement of theOS and

applications to adifferent serverwith no loss of

service

Virtualized SAN and Network Infrastructure

PowerVM Live Partition Mobility

Move an entire Logical Partition from one system to anotherwhile it is running with almost no impact to end users

Moves the entire LPAR including the operating system

Requires systems based on the POWER6 or POWER7processors, PowerVM Enterprise Edition, and all I/O must bethrough the Virtual I/O Server

Works with partitions running AIX 7, AIX 6, AIX V5.3 and Linux

Live Partition Mobility

AIXLive ApplicationMobility

Move a Workload Partition from one AIX system to another

AIX system while running with almost no impact to end users

Moves only the WPAR, the AIX operating system is notmoved

Requires the PowerVM Workload Partitions Manager, and allWPAR filesystems must be on shared storage

Works on systems based on POWER4 processors and later

Potential BenefitsImproved application availability

Energy savingBetter workload management

IBM P S t


29/67


IBM Power Systems

30

AIX Role Based Access Control (RBAC) with Domains

Can reduce the cost and complexity of securityadministration by allowing secure delegation ofadministrative tasks to non-privileged users

Enables a more secure IT infrastructure byreducing the need for so many privileged

administrators

Assigning roles to programs can reduce theneed for security exposures such as the use ofsetuidfor programs

Allows for new ways to delegate administrationduties between system administrators and non-administrative users

A capability of AIX that allowsprivileged administration tasksto be delegated to non-privileged users

Access to system resourcesare associated with roles that

are assigned to non-privilegedusers

Many roles are predefinedwhich can reduce the effort ofimplementing RBAC

Roles can also be associatedwith programs

Domain access can furtherlimit administrators to only workwith resources for a particularorganization (AIX 7/AIX 6 TL6)


UsersUsers Roles

PRINT

AIX

Resources

AIX

Resources

BACKUP

Company A

DBA

Company A

BACKUPCompany Z

Company Z

Data

DBA

Company Z

Company A

Data

Domain supportProvides more granularityfor multi-tenant IT shops

IBM P S t


30/67


IBM Power Systems

31

AIX Encrypting Filesystem

Enables improved security byreducing unauthorized access todata, even by privileged users

Secure backups reduces theexposure of data compromisedwhen backup media is takenoutside of secure facilities

Automatic management ofprotection keys can reduce theadministrative effort of usingencrypted data

Provides the capability foradditional security for applications

that may have security designexposures

Automatically encrypt data in aJFS2 filesystem

Data can be protected fromaccess by privileged users

Backup in encrypted or clear

formatsAutomated key management -integrated into AIX securityauthentication

Each file encrypted with aunique key

Hardware offload toCryptographic adapter

No keys stored in clear in kernelmemory

A variety of AES, and RSA

cryptography keys supported


Always encrypted on disk

Data in clear in memory.

VMM

J2

Filesystem

CLiC

Crypto Lib

User and GroupKey Stores

Crypto Kernext

Kernel ucred openkey store

Login Authentication Module

Key Store

Mgt Cmds

BOS Cmds

Backup/Restore

Cp, mv, crfs, etc

IBM Power Systems


31/67


IBM Power Systems

32

AIX Security Expert

Can reduce the cost andcomplexity of securityadministration by allowingfederated management of securityprofiles across multiple servers

Enables a more secure IT

infrastructure by reducing theeffort of maintaining systemsecurity

Check functionality can provide

additional security by validatingthat the security profile for each

system matches the actualsecurity settings

Allows for new ways to efficientlymanage security across multipleAIX systems

A centralized securitymanagement tool that cancontrol over 300 securitysettings from a single console

Administrators can start from aLow, Medium, High or

Sarbanes-Oxley securitytemplate and customize settingsto met business requirements

Security settings can beexported and imported as asecurity profile to multiple

systems

Security profiles can be storedin an LDAP directory for ease ofdistribution

AIX Security Expert was firstincluded in AIX V5.3 TL5


IBM Power Systems


32/67


IBM Power Systems

33

AIX & Power Systems Security Certifications

AIX 5200-06 CAPP/EAL4+

Application: 01/11/05Final report: 10/26/05Certificate: 12/14/05

AIX 5L 5200-05 andPitbull LSPP/EAL4+

Application :01/11/05Certificate issued: 05/16/06

AIX 5300-05

LSPP/EAL4+Pitbull product Supports P5, P4Certificate issued: 12/19/06

Pitbull MLS Ported toAIX 5300-03

Pitbull product available tocustomers Dec 31, 05

AIX 5300-04 CAPP/EAL4+Supports P5, P4Certificate issued: 12/19/06

AIX 7100-00)CAPP/RBACPP/LSPP/EAL4+

Supports P7, P6, P5, P4

Legend

AIX V5.2AIX V5.3AIX 6AIX 7 (Planned)VIOSPOWER6

Certification History

AIX 4.2 C2: Apr 24, 1997AIX 4.3 C2: May 6, 19987AIX 5.2 CAPP/EAL4+ : Nov 4, 2002

POWER4 HW CAPP/EAL4+ : Apr 2003AIX 5.2 ML1 CAPP/EAL4+ : Sept 8, 2003AIX 5.2 ML6 CAPP/EAL4+ : Dec 14, 2005AIX 5.2 ML5 and Pitbull LSPP: May 16, 2006AIX 5.3 TL5 and Pitbull LSPP: May 16, 2006AIX 5.2 TL4 & VIOS CAPP/EAL4+: Dec 16, 2006POWER6: Dec, 2007AIX 6: May 26, 2008AIX 7: Planned 2010

*All statements regarding IBM's future direction and intent are subjectto change or withdrawal without notice, and represent goals and objectives only

VIOS EAL4+

Included with AIX 53.00-04CAPP/EAL4+

POWER6 HardwareEAL4+

Dynamic LPAR withMicroPartitioning

AIX 6100-00)CAPP/RBACPP/LSPP/EAL4+

MLS capabilities integratedinto standard AIX product

One certification for 3Protection Profiles

Supports P6, P5, P4

2006 2007 20102005

IBM Power Systems


33/67


IBM Power Systems

34

Cluster Aware AIX

Easily create clusters of AIX instances for scale-out computing or high availability

Designed to:

Significantly simplify cluster configuration, construction, and maintenance

Designed to improve availability by reducing the time to discover failures

Capabilities such as common device naming help simplify administration

Built in event management and monitoring

A foundation for future AIX capabilities and the next generation of PowerHA

SystemMirror and PowerVM

Designed to simplify construction and management of clusters of AIX

systems for scale-out computing and high availability

IBM Power Systems


34/67


IBM Power Systems

35

Cluster Aware AIX Exploiters

Legacy AIX

PowerHASystem Mirror

TSA HMCIBM

StorageHPC

DB2IBM

Director

MonitoringAPI

ClusterMonitoring

Group Services

Cluster AdminUI

Cluster CFGRepository

Resource Mgr Services

Bundled Resource Managers

ClusterMessaging

MessagingAPI

Legacy RSCT

RSCT Consumers

VIOS

MonitoringAPI

ClusterMonitoring

Group Services

Cluster AdminUI

Cluster CFGRepository

Resource Mgr Services

Bundled Resource Managers

ClusterMessaging

MessagingAPI

RSCT With Cluster Aware AIX

Cluster Aware AIX

Cluster

Repository

Cluster

Messaging

Cluster

Monitoring

Cluster

Events

CAA APIs and UIs

Redesigned Layers Integrated to CAA Capabilities

RSCT and Cluster Aware AIX together provide the foundation of strategic Power Systems SW

RSCT-CAA integration enables compatibility with a diverse set of dependent IBM products

RSCT integration with CAA extends simplified cluster management along with optimized and robust cluster monitoring,failure detection, and recovery to RSCT exploiters on Power / AIX

IBM Power Systems


35/67


IBM Power Systems

36

AIX Non-intrusive Reliability Features

Designed to increase availabilityby reducing problemdetermination time and effort

Can reduce the impact ofproblems by minimizing theintrusiveness of problemdetermination compared totraditional methods

These new service featuresprovide an infrastructure that canfundamentally change the OSproblem determination process for

the better

A number of new reliability,availability and serviceabilityfeatures that are designed toimprove system and applicationreliability

New features include:

Live Dump Firmware Assisted Dump Enhanced First Failure

Data Capture (FFDC) forAIX

Enhanced features: Lightweight malloc debug Lightweight memory trace Consistency checkers Component trace


IBM Power Systems


36/67


IBM Power Systems

37

AIX Storage Keys

Can provide for higher AIXavailability by reducing thenumber of unplanned outages dueto intermittent memory overlay

Enables complex applications

that use large amounts of memoryto protect core functions frommemory overlay

This new capability can reducethe likelihood of an entire class ofintermittent application and AIX

problems

Exploitation of a POWER7 andPOWER6 processors hardwarefeature to provide additionalisolation of kernel andapplication data

Storage keys can prevent

invalid changes to memorycause by programming errors

Application use of storage keysis enabled in AIX V5.3

AIX Kernel exploitation ofPOWER6 storage keys isincluded in AIX 7 and AIX 6


UserCode

UserData

Files

WS DB2

KernelCode

KernelData

JFS2 LVM VMM . . . SCSI ENT FC

ApplicationAddress Space

AIX DriversAIX Kernel

UNIX Kernel Address Space

UserCode

UserData

Files

WS DB2

KernelCode

KernelData




UNIX Kernel Address Space

UserCode

UserData

Files

WS DB2

KernelCode

KernelData




AIX Kernel Address Space

UserCode

UserData

Files

WS DB2

KernelCode

KernelData




AIX Kernel Address SpaceAfter POWER6 Storage Keys

Before POWER6 Storage Keys

IBM Power Systems


37/67


IBM Power Systems

38

AIX probevueDynamic Tracing

Enables the possibility todramatically reduce the amount oftime and effort to debug and tuneapplications

Can reduce the performance

impact to the system compared tousing traditional tracing methods

Dynamic tracing offers an entirelydifferent way for developers andsystem administrators totroubleshoot application problems

The capability to dynamicallyextract information about aprogram as it is running

Trace points can be added orremoved dynamically withoutrecompiling or restarting the

application

Includes a new language, vue,to define the desired actionwhen a probe point is reached

Support for C, C++, FORTRANand Java language programs


FormattedI/O

User Kernel

Probe Location

User Process CodeSome thread

hits probe point(1)

Branches to probecode (2)

Probecode

(3)Returns toprobe point(4)

Threadcontinues

execution(5)

Trace Consumer

Trace Fileor

Trace Output

Trace Buffers

E-code

IBM Power Systems


38/67


ys s

39

PowerVM Workload Partitions Manager for AIX

Can make it easier to consolidateworkloads from underutilizedservers by providing a single pointof management for all WPARs andenablement for Live ApplicationMobility

Can reduce cost and complexitythrough centralized managementof WPARs

Enables increased flexibility byallowing administrators to quicklycreate, clone or delete Workload

Partitions from one system toanother

Supports systems based onPOWER4 or later processors

Policy based relocation andfederated management of WPARs

provides new ways to manageyour IT infrastructure

A product that federatesmanagement of WPARs acrossmultiple systems

WPARs can be created,cloned, stopped, started andmonitored from a single location

Includes enablement for LiveApplication Mobility

The WPAR Manager is aadvanced manager plug-in tothe IBM Systems Director

The WPAR Manager isavailable as a component in theAIX Enterprise Edition or as aseparate product


WPAR AgentAIX

System/Application WPARs

WPAR AgentAIX


WPAR AgentAIX


WPAR AgentAIX


WPAR AgentAIX


WPAR AgentAIX


IBMWorkloadPartitionsManagerfor AIX

Browser

IBM Power Systems


39/67


y

40

AIX Systems Director Console for AIX (pConsole)

Can reduce the amount of effortand cost associated withmanaging the AIX OS

Web access to administrativetasks can simplify systemsmanagement

Consistent user interface withIBM Systems Director and theWPAR Manager can reduceretraining and other administrativecosts

The combination of Web accessto administration tools and theability to execute administrativetasks on multiple systems canchange the way you manage theAIX OS

A Web based managementtool that provides easy accessto common systemadministration tasks

Administrators can accessSystems Management Interface

Tool (SMIT) menus from abrowser

Graphical user interface is fastand fully integrated with IBMSystems Director

All necessary components forthe Console are included in AIX

The Distributed CommandExecution Manager (DCEM)feature of the Console allows anadministrative task to run onmultiple systems at once


IBM Power Systems


40/67


y

41

AIX Automatic Variable Page Size

Can improve overall systemperformance which could improvethe amount of work done per Wattof energy

Automated page size tuning canreduce the amount of effort and

cost associated with managing akey aspect of performance tuning

Since this feature is turned on

by default, it improves your abilityto get the most out of yoursystems based on POWER6

processors

This self tuning aspect of AIX

can improve performance whilereducing administrative workload

AIX exploitation of POWER6 orlater hardware that supportsvariable page size

AIX will automatically selectoptimal page size to providebetter performance

Kernel will choose between 4Kand 64K pages, including a mixwithin a memory region

Supports process data, heap,stack, shared memory,anonymous mmap() memory

Enabled by default withadministrative controls to turnoff or change aggressiveness toupsize

Required AIX 7 or AIX 6 and

POWER6 or later processorbased systems


IBM Power Systems


41/67

2010 IBM Corporation42

System N

AIX 7 Profile Manager (Formerly AIX Runtime Expert)

System A System N System C

SetExtract Compare

Simplified configuration using the AIX Profile Manager

Systems Director plug-in that is designed to simplify consistent AIXconfiguration across multiple systems

Traditional server configuration

OS Configuration and Tuning

Environment Variables

Configuration Files

Boot LV Settings

CLI Utilities

Apply and maintain approachesScripts, ftp, rsh, ssh, documentation,3rd party tools, mksysb, etc.

System A System NSystem BSystem A System NSystem B

XML Profiles

Env var XYZ=Yes

AIX security profile

.tuneable N

Env var XYZ=YesAIX security profiletuneableN



System Administrator

Systems N


42/67

IBM Power Systems


43/67


AIX is available in three different editions: AIX Standard Edition

Suitable for most UNIX workloads Vertical scalability up to 256 cores (AIX 7)

64 cores (AIX 6)

AIX Enterprise Edition AIX plus enterprise management

Includes AIX Standard Edition plus

Systems Director Enterprise Edition and

the Workload Partitions Manager for AIX

Vertical scalability up to 256 cores (AIX 7)64 cores (AIX 6)

AIX Express Edition

Lower priced edition targeted a low end servers andconsolidation of smaller workloads on larger servers

Includes most of the functionality of AIX Standard Edition

Vertical scalability is limited to 4 cores and 8GB of memory per core in a singlepartition

Clients can use multiple AIX Express Edition partitions in a single larger server

Clients can mix multiple AIX editions in the same server

AIX Editions

AIX StandardEdition

AIX EnterpriseEdition

AIX ExpressEdition

Note: AIX V5.3 is only available in a Standard Edition

IBM Power Systems


44/67


AIX Enterprise Edition

AIX Enterprise Edition includes:

AIX 7 or AIX 6 Standard Edition plus

WPAR Manager

Systems Director Enterprise Edition

IBM System Director

Active Energy Manager

VMControl (including Image Management & System Pools)

Network Control

Transition Manager for HP SIM

Service and Support Manager

IBM Tivoli Monitoring

Tivoli Application Dependency Discovery Manager (TADDM)

AIX Enterprise Edition is a single offering that brings together AIX with key

service management capabilities that are designed to: Improve availability through access to relevant real-time information and predictive

monitoring to avoid future problems

Enhance operational efficiency through visualization of resources and centralizeddeployment and management of virtualized AIX environments

Provide accurate assessment of system resource usage

IBM Power Systems


45/67


AIX Enterprise Edition Key Features Live Application Mobility

Relocate Workload Partitions between systems with almost no client impact

Energy Management Collecting and report current and historical usage, and controlling energy usage

Virtual Server Management Create and manage virtual machines, manage virtual machine relocation, and managing virtual workloads

in system pools

Manage WPARs across multiple systems Centralize the creation, replication, and starting of WPARs across multiple systems

Automatically discover IT components and their relationships Ideal for managing dynamic virtualized environments

Monitor virtualized resources Efficient management begins with comprehensive performance information

Predictive monitoring and capacity management Leverage real time monitoring in data warehouse to provide advanced analytics for capacity planning and

proactive monitoring

Provides a visual representation of the components Assists understanding of complex application dependencies

Network Management Discover, monitor, and manage multi-vendor network devices and automate network management tasks

Monitor utilization and configuration changes Useful for problem determination and failure analysis

IBM Power Systems AIX Enterprise Edition


46/67


Simplified WPAR Management

p



47/67


Clients get business-level views and managementof service availability

Consolidated monitoring of physical and virtual resources

IBM Tivoli Monitoring

Designed to improve mean-time-to-

recovery by relating virtual to physicalresources

Data warehouse provides Side-by-side

real-time and historical data to assist

problem determination and planning

Out-of-the-box reporting allowsclients to quickly provide executive

level reports and identify resource

bottlenecks

p



48/67


Power Systems Monitoring - VIOS View

Shows hownetworkinterfaces aremapped toLPARS

Network and Disk Mapping and Utilization Information



49/67


Overall Frame Utilization



50/67


WPAR Workspace

NOTE: Right button click on Linkicon to access menu ofsupplemental WPAR WSs



51/67


Use existing ITM agents and data that are stored in theTivoli Data Warehouse

Create new metrics based on combining existing date

Predictive trending and forecast reports

Pre-configured reports

Extensible

ScenariosWhat will my resources look like

tomorrow, next week and next month?What IT resources should I worry

about?Will I have enough capacity to get me

through Monday?

What It Does

Provide capacity monitoring through the data collected by Tivoli Monitoring Automates Performance analysis and reporting Enables prediction of application bottlenecks and creation of alerts for potential service threats.

Advanced Performance Analytics



52/67


Predictive Trending Predictive trending on key performance

indicators

Linear trending model Configurable

Simple, open and predictable

New Tivoli Monitoring attributes for use incharts and situations

Trend strength, trend direction

Time to threshold, value in 7 days, 30 days and90 days

Use trend information in situations I predict I have 2 weeks before I hit 95% Disk

Utilization and I am 70% confident and its getting

worse

Leverages Tivoli Enterprise Portal

Overlays to represent Trends

Icons in Tables

Time

CPU

Predicted trend

Threshold PredictedCPU Violation

Actual Monitor Data



53/67


Application discovery complements platformcomponent asset data

Better management through better information

Discovers the system and application

data center resources

Discovers the relationships and

dependencies between the system and

application resources

Visually depict the dependencies between

Data Center between the application andsystem resources

Discovers and tracks changes to data

center resources

IBM Tivoli Application Dependency Discovery Manager (TADDM)

IBM Power Systems



54/67


Reduce the time to deploy workloads using virtual images

Discover and manage heterogeneous AIX image repositories

Import, capture and catalog virtual images from existing systems

Dynamically provision virtual server, storage and network resources

DeployVirtual

Machines

Open Virtualization Format (OVF)CaptureVirtual

Machines

ImageRepository

SoftwareSoftwareapplicationapplicationSoftwareSoftwareapplicationapplication

OperatingOperatingSystemSystem


MetadataMetadataMetadataMetadata

SoftwareSoftwareapplicationapplicationSoftwareSoftwareapplicationapplication



MetadataMetadataMetadataMetadata

Virtual image

IBM Power Systems



55/67

2010 IBM Corporation56564/13/2012

Balance resources with Live Partition Mobility

Dynamically adjust virtual machines resource allocations.

- Allowing unallocated resources to be used by a virtual machine.

- Allowing resource allocation adjustments to be made between virtual machine.

Virtual server mobility between host systems.- Allocate resources on the target host.

- Move the virtual machine in-memory state to target host.

-

De-allocating resources on the source host.

Virtualization

Compute Memory

Virtual MachineVirtual MachineVirtual Machine

Virtualization

Compute MemoryIO / Network

Virtual Machine Virtual MachineVirtual Machine

IO / Network

SW

OS

SW

OS

SW

OS

SW

OS

SW

OS

SW

OS

SW

OS

SW

OS

SW

OSSW

OS

SW

OS

SW

OS

SW

OS

SW

OS

SW

OS

IBM Power Systems



56/67


Dynamic virtual server placement of workloads

Automates virtual image mobility for optimal utilization and resilience

Optimizes virtual assets for performance, availability and energy use

Integrates server, storage and network virtualization

System pools enable automated mobility for higherworkload availability

Compute Network StorageMemoryCompute Network StorageMemoryCompute Network StorageMemory

Virtualization

Compute Network StorageMemory

Virtualization

Compute Network StorageMemoryCompute Network StorageMemory

IT Resources Virtual Images System Pools

Mobility

Optimized for Availability Performance

Energy



57/67


Electrical energy and thermal trendingReport electrical power at therack and server level

Manage thermal energy at therack and server level

Analyze trends in energy use

Performance per watt display

Calculate energy costs fortargeted resources

Trend electrical power use overtime

Trend temperature over time

Note: Energy monitoring and control capabilities

vary by system.

Energy costcalculator

IBM Power Systems



58/67


Platform Management

Integrated network management and monitoring

StorageServerNetwork

Service Management

Unified view of servers, storage,and network devices

Basic lifecycle management ofnetwork switches

Network device topology collectionand visualization

Integrated single sign on launch ofvendor - based devicemanagement tools

Converged Ethernet networkdevice support (FCoCEE) vianative support and vendor tools

IT environment

IBM Power Systems


59/67



Provides the foundation for Enterprise Service Management in an easy toorder solution at an attractive price

Designed to improve operational efficiency of managing a PowerVM

virtualized environment

Includes IBM Systems Director Enterprise Edition for comprehensiveplatform and service management

IBM Power Systems

AIX Express Edition


60/67


AIX StandardEdition

AIX StandardEdition



AIX ExpressEdition

AIX ExpressEdition

Capability

AIX Express Edition

AN edition of AIX priced for smaller workloads AIX 6 and 7 feature Express Edition

AIX 5.3 is only available in a Standard Edition

Intended for two deployment situations1. Entry price on entry servers and blades

2. Consolidation of smaller workloads on enterprise servers

AIX Express Edition terms are designed for small workloads Vertical scalability limited to 4 core maximum partition size

8 GB memory per core maximum

Flexibility to optimize formultiple workloads Run any combination

of AIX Editions on a server

IBM Power Systems AIX Express Edition


61/67


AIX Express Edition can improve the economics of consolidation

Example: Consolidate eight 4-way POWER6 520s into a 24 way POWER7 770

Old price with AIX

Standard Edition

AIX License + SWMA

List price 24 cores x $1,950

Total (list) $46,800

(U.S. prices shown)

With AIX Express

AIX License + SWMA

List price 24 cores x $1,000

Total (list) $24,000

Savings of $22,800(U.S. prices shown)

IBM Power Systems AIX Express Edition


62/67


IBM License Metric Tool

Common IBM monitoring tool forSWG, Power Systems & SystemsDirector software products

Provides a data center view of IBMsoftware licenses

Simplifies customer license tracking,compliance & audit reporting

ILMT does NOT report back to IBM

Tool Provides*:

Software inventory

Web-based administration

Standard & custom license reports

Audit reportsRequired for clients using AIX Express Edition on Medium and Large servers

*Implementation of some features will be staged over time

IBM Power Systems


63/67


AIX 7 Hardware Support

Systems based on POWER4, PowerPC 970, POWER5, POWER6 and

POWER7 processors are supported

32 and 64-bit applications will continue to run unchanged on AIX 7

64-bit kernel only

*Complete details on AIX binary compatibility can be found at http://www.ibm.com/servers/aix/os/compatibility/

IBM Power Systems


64/67


AIX support for POWER7

AIX supports Power 750, 770, and 780 withPOWER7 processors offering moreperformance, energy efficiency and scalability

Initial AIX Levels supported AIX 6 Technology Level 4 SP2 (POWER 750/755) (GA 2/12)

AIX 6 Technology Level 4 SP3 (POWER 770/780) (GA 3/5)

AIX 5.3 Technology Level 11 SP3 (GA 3/5)

April AIX Technology Levels

AIX 6 Technology Level 5 (PS700, PS701, PS702) AIX 5.3 Technology Level 12 (PS700, PS701, PS702)

Prior Technology levels AIX 6 Technology Levels 2 and 3

AIX 5.3 Technology Levels 9 and 10

Plans subject to change without notice

IBM Power Systems


65/67


POWER7 Platform SupportMove up to POWER7 on your current AIX Technology Level!

POWER7 based Systems provide two modes for each LPAR POWER7 mode

Fully exploit unique POWER7 capabilities

AIX 6.1 TL4 SP2 (Power 750/755), SP3 (Power 770/780) and later

AIX 7

POWER6 & POWER6+ modes Allows Live Partition Mobility to POWER6 systems

AIX 5.3 and AIX 6.1 TL2 & TL3

POWER7 Features exploited by AIX- Energy Management (available in all modes)

Per-Partition energy management

- POWER7 Mode 4 thread Simultaneous Multithreading (SMT)

1024 Threads / 256 cores partition size (AIX 7 only) Double precision Vector Scalar Extension (VSX)

32 Storage Protection Keys (8 for applications)

Core

L3

MC0 MC1PowerBus

GX

EI3 (Elastic Interface) I/O

EI3 (Elastic Interface) I/O

Memor

yI/O

MemoryI/O

MemoryI/O

MemoryI/O

GX

L2

Cores: 8

L2: On Chip

L3: On Chip

Technology: 45nm

Transistors: >1B

Size: 567 mm2


66/67

IBM Power Systems


67/67

Why should you move up to AIX 7 or AIX 6?

More performance on POWER7 AIX 7 and AIX 6 can provide substantially more performance on POWER7 than AIX V5.3

AIX 7 supports massive workloads with up to 256 cores / 1024 threads

Access to new features Capabilities like WPARs, Role Based Access Control, AIX Profile Manager are designed to

improve security and administrative efficiency

AIX V5.3 is nearing End of Life End of Marketing announced effective April 2011

AIX 7 will support running AIX 5.2 in a WPAR Excellent way to consolidate old workloads running on less efficient hardware

Its FREE! Customers with software maintenance agreements (SWMA) can upgrade for no additional charge

within an Edition:

AIX 5.3 to AIX 7 Standard edition

AIX 6 Express Edition to AIX 7 Express Edition, etc,

aix presentation - niceone

Documents