Linux on IBM Z. Operational efficiency and trustworthiness. Linux at its best. Highlights. IBM Systems Data Sheet

Transcription

1 Linux on Operational efficiency and trustworthiness Highlights Scalability and flexibility Openness and connectivity Trustworthiness and reliability Pervasive encryption enablement Operational efficiency and economics Linux at its best Linux is mainstream using open-source solutions is a smart way to address IT challenges. Linux on provides an impressive Linux platform, especially for those workloads that require high levels of reliability, security or scalability. Linux on Z is the same Linux that exists on other architectures. However, it is optimized to leverage the strengths and capabilities of, thereby enabling comprehensive data protection to securely connect services. Security, trust, failover, compliance regulations, accessibility and privacy are topics that are evaluated, helping to decide where to run Linux, cost effectiveness is another. Linux on Z is tackling these topics; well known for its operational efficiency, reliability and security, and cost benefits. Linux on Z can be deployed in a logical partition (LPAR), or as a guest of the IBM z/vm and KVM hypervisors. Linux instances with containers can run in the same environments. When investing in Linux and also wanting to leverage the investments in existing IT assets, Linux, co-located next to z/os, z/vse, or z/tpf on the same Z server, offers a great solution. The workloads can benefit from the great performance and the operational efficiency.

2 is designed to provide a highly reliable and efficient Linux infrastructure, with competitive advantages in terms of: pervasive encryption enablement and server security with EAL5+ certification, extreme scalability, high utilization and sharing of resources, high reliability and continuous operations, operational efficiency and business economics. Since Linux is Linux, Linux on Z can run all kind of solutions. IBM offers a comprehensive solution portfolio, offering latest products for cognitive and data management, cloud computing, application development and application serving, integration and messaging, and blockchain technology. New instructions exploited by Java, driving faster user response times. New consolidation savings with increased total capacity in a single footprint with up to 170 processors. Enhanced economies of scale with extended simultaneous multithreading (SMT) processor design to deliver more throughput. Improved performance with Single Instruction Multiple Data (SIMD), perfect for analytics processing. Improved ability to meet SLAs with new processor chip technology re-designed and larger cache. Better availability and more efficient use of critical data with up to 32 TB redundant array of independent memory (RAIM) 1. As well, many vendor solutions are supporting Linux on Z, including SAP, Oracle or Temenos, as well as the open source ecosystem with products such as Ansible, Chef, Docker, ElasticSearch, Go, Hyperledger Fabric, Jenkins, Kubernetes, MongoDB, Node.js, PostgreSQL, Python, Salt or Spark. Most Linux on Z workloads are connected and co-located to z/os, z/vse, or z/tpf workloads on the same server, other deployments use to run a stand-alone Linux system. Co-located workloads benefit from optimized internal performance, resource sharing with high utilization rates, a smaller network infrastructure with fewer points of attack, sharing the same quality of service, and the same arrangements for administration, security, backup and disaster recovery. Linux on IBM z14 Developing a strong Linux platform was a key design point for all IBM z14 (z14) models (M01, M02, M03, M04, M05 and ZR1), as demonstrated with these capabilities: Stronger and faster data protection of data in flight and data at rest pervasive encryption, with enhanced on-chip cryptography and new Crypto Express6S adapter. New FICON Express16S+ feature, designed to boost I/O rates. 2

3 Impressive scalability horizontal and vertical is provided with and its virtualization capabilities. Resources can be assigned dynamically and efficiently between workloads, whenever and wherever they are needed. As well, allows to add resources without disrupting the business. z/vm virtualization technology offers high levels of resource sharing, data-in-memory techniques, outstanding I/O bandwidth and availability. For simple administration of z/vm and the Linux servers, IBM Wave for z/vm provides an intuitive user interface. z/vm is also a supported environment for IBM Dynamic Partition Manager on Linux-only systems. Data center simplicity Linux on Z stands in contrast to the add another server approach ; servers can grow on-demand. One z14 can host up to thousands of Linux servers in a few square meters footprint, demonstrating that virtualization technology can result in fewer components, less management efforts, less software costs in a streamlined infrastructure. While the chip technology is the same for all IBM z14 models, IBM has made a few significant enhancements for the entry model z14 ZR1. The new single frame is designed to fit into a 19-inch form factor, something new for Z, allowing to sit side-by-side with any other platform in a data center. This z14 single frame enables to lower power costs and have a 40 percent smaller footprint than prior entry Z servers. As well, a 16U rack space feature provides the capability helping to build a customized comprehensive solution, since this rack space can be populated with eligible server, HMC, switch or storage elements. KVM open source virtualization enables the use of common Linux administration skills on. KVM is KVM, with the extension that KVM on is optimized for the capabilities. Container technologies allow to run applications isolated, without the need to launch a virtual machine for each application. With Docker available on, it is easy to build, secure and manage a wide range of applications. Automated service management is possible via many functions and products, like the live virtual server migration capabilities provided by the z/vm SSI 2 feature, or the unmatched resource sharing of the. Regarding utilization rates, can run at rates as high as 100 percent for extended periods of time. servers allow for fast internal communication between all workloads. Co-location of data and applications offers efficient data serving with minimal latency, elimination of network handling, and a centralized management allows to handle things such as security identity, process monitoring, or disaster recovery with an all-encompassing solution. 3

4 Simplicity is demonstrated in particular, when your IT environment needs to be expanded. The environment can grow inside the server by adding system resources on the fly. This follows the principle that you can access the resources that you need, when you need them and paying for only the resources that you use. Highly reliable and trustful Even in a single footprint, a server provides high levels of reliability, availability, and serviceability. servers are designed to avoid or recover from failures to minimize business disruptions. High availability is realized through component reliability, redundancy and features that assist in providing fault avoidance and tolerance, as well as permitting concurrent maintenance and repair. For generations, has run at percent uptime. Further strengthening the qualities of service of a Linux on Z environment are solutions such as IBM GDPS and IBM Spectrum Scale. IBM GDPS can provide multiplatform resiliency for clients running z/vm and associated Linux guests. It provides disaster and failure recovery and ensures data consistency across multiple sites. If you run GDPS with z/os, you can benefit from the single point of control by integrating the z/vm based Linux environment. IBM Spectrum Scale, build upon IBM GPFS 3 technology, is designed to provide high availability through advanced clustering technologies, dynamic file system management and data replication. Privacy, availability and failover capabilities can be expected for Linux on Z, unlike with distributed systems or public clouds. Highly Securable With z14, pervasive encryption is enabled for Linux. Pervasive encryption with Linux is transparent to existing applications and targeted to improve the usability and performance of encrypting/decrypting data in-flight and at-rest, leveraging the improved on-processor Central Processor Assist Crypto Functions (CPACF) and the new Crypto Express6S accelerator. Encryption with Linux allows for simple implementation and optimized performance. Clients don t have to change their encryption approach, they simply get consumable data protection for data in-flight and data at-rest. Furthermore, Linux 4 for Z expects to get enhanced security with protected key encryption for data at-rest. The protected key is a wrapped key, similar a secure key, but providing faster encryption operations. It can be useful for encrypting a complete disks (volumes) or selected partitions. To meet regulatory and auditing needs, an external security manager is recommended. IBM Resource Access Control Facility (RACF ) for z/vm is one example, provides a security system that includes access control and auditing functionality, handle resource authorization, privileged command access, and logon controls. Remains to mention that are the world s only servers with the high level EAL5+ hardware security certification. It guarantees that the principal security features are reliably applied, allowing for isolation and protection of the deployed workloads. As well, the isolation capability inside the server offers significant operational simplicity. Business Integration Business integration provides the power to reduce complexities while extending existing IT investments and deploying new solutions more quickly with accelerated time to market. It is characterized by enabling flexibility through the integration of systems, data, applications, and processes across and beyond an enterprise. 4

5 integration capabilities are designed to provide extremely high speed and security-rich connections between applications and data in the same or across physical servers. With API economy, existing assets can be used in new ways, delivering into next generation application services. Standards such as Web Services, or REST ease the creation of new applications, and microservices offer the architectural style to create independently deployable units for agility and scalability. Many Linux on Z clients are investing in next generation applications, connecting them to and thus expanding existing assets. A few examples: Cognitive computing: IBM Watson Explorer, IBM Cognos, IBM SPSS, IBM Db2 Analytics Accelerator for z/os Version 7.1, or Apache Spark are used on Linux, and used for data analysis with Db2 for z/os as well, Data serving: IBM Db2 Warehouse supporting Docker technology, and IBM Db2 are using BLU Acceleration for high-performant and instant insights, as well as databases from vendors and open source, Cloud computing: using IBM Cloud Private for developing and managing on-premises, containerized applications across the enterprise, Mobile computing: using IBM MobileFirst Platform Foundation and the mobile protocol connectivity, Message integration: using IBM Integration Bus or IBM MQ to connect existing applications with services, SAP application serving: using SAP applications on Linux, connected to Db2 for z/os, Web services: using IBM WebSphere for Java application serving, SWIFT for end-to-end development of modern apps, open source technologies, or Node.js to supplement core functionality like CICS with branch applications or ATM systems. As shown in the examples, Linux on Z, integrated with existing assets, allows for an overall business extension, with the benefit that the IT services are hosted and managed in the stable and highly secure platform. Economic Linux infrastructure Running Linux on Z can provide enormous benefits in: Operational efficiency A single server, running up to thousands of virtual Linux servers requiring fewer servers, cables, routers, etc., can mean less effort for systems, maintenance and operational management. High administrator productivity is supported by the capability to add resources into an existing server, to share and reconfigure resources dynamically, and to manage systems via simple tools. Also, running Linux side-by-side with z/os, z/vse or z/tpf, the administrator can benefit from unique arrangements for operation, security, backup and disaster recovery. As we move more systems to our mainframe, we continue to simplify and streamline our IT landscape and reduce support calls, freeing up IT teams to focus on more innovative work. Business continuity Linux on Z provides trusted operations. It can scale up and out to meet spikes in server activity, potentially devastating system crashes. The suite of built-in features can rapidly respond to, or even anticipate, threats to system health, helping to prevent costly downtime. High availability and disaster recovery solutions, such as IBM GDPS solutions or IBM Spectrum Scale, can be used to enhance the server capabilities. For generations, has run at percent uptime. We need data to be accessible even in the event of a catastrophe. For example, if the local authority would urgently need to implement contingency plans and probably evacuate citizens, [they] would need quick, reliable access to their applications to see how many citizens lived in the evacuation zone and whether foreignlanguage interpreters would be needed to aid communication. 5

6 Highly securable Pervasive encryption is enabled with z14, and complex cryptographic algorithms help to reduce risks. Encryption with no impact to SLAs for data in-flight and data at-rest allows for consumable data protection. Access control and auditing functionality is provided with RACF for z/vm, and are the world s only servers with EAL5+ hardware certification it comes with the server, without additional investment. Bottom-line, is the most securable commercial server. Hosting the solution on allows us to reap the benefits of the exceptional levels of security. Utilizing RACF, we can strictly control access to data, recognizing any unauthorized attempts to gain access. Business integration and co-location enables flexibility across the systems, data, applications and processes. It gives the power to reduce complexities, extend IT investments and deploy next gen apps very fast. Co-locating applications and data on with Linux, z/os, z/vse or z/tpf, provides the unique opportunity to tightly connect systems of record and systems of interaction, benefiting in performance and operational efficiency. By running [Linux-based] workloads alongside our core systems on the mainframe, we can ensure that they share the same quality of service and the same arrangements for administration, security, backup and disaster recovery. an efficient and trustful Linux infrastructure. For more information To learn more about Linux on, please contact your IBM representative or IBM Business Partner, or visit: ibm.com/it-infrastructure/z/linux Copyright IBM Corporation 2018 New Orchard Road Armonk, NY U.S.A. Produced in the United States of America April 2018 IBM, the IBM logo, ibm.com,, CICS, Cognos, Db2, GDPS, GPFS, MobileFirst, RACF, Spectrum Scale, SPSS, WebSphere, z14, z/os, z/vm, and z/vse are trademarks or registered trademarks of IBM Corporation in the United States, other countries or both. OpenStack is a trademark of OpenStack LLC. Apache, Apache Spark, Spark, Spark logo, Apache Tomcat, Tomcat, and the Apache Tomcat logo are trademarks of The Apache Software Foundation. Linux is a registered trademark of Linus Torvalds in the United States, other countries or both. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates. Other company, product and service names may be trademarks or service marks of others. Information concerning non-ibm products was obtained from the suppliers of their products or their published announcements. Questions on the capabilities of the non-ibm products should be addressed with the suppliers. IBM hardware products are manufactured from new parts, or new and serviceable used parts. Regardless, our warranty terms apply. IBM may not offer the products, services or features discussed in this document in other countries, and the information may be subject to change without notice. Consult your local IBM business contact for information on the product or services available in your area. All statements regarding IBM s future direction and intent are subject to change or withdrawal without notice and represent goals and objectives only. 1 RAIM is designed to detect and recover from failures 2 z/vm SSI = z/vm Single System Image feature 3 IBM GPFS = IBM General Parallel File-System 4 IBM is working with the open source community and the Linux distribution partners to get the functionality included in the Linux distributions for Please Recycle ZSD01241-USEN-20