Why You Will Benefit From Thinking About, And Planning For Oracle Solaris 11

Transcription

1 <Insert Picture Here> Why You Will Benefit From Thinking About, And Planning For Oracle Solaris 11 Isaac Rozenfeld Oracle Solaris Product Customer ation Experience 3/11/2011

2 Oracle Solaris 11 Express AGENDA Strategy Oracle Solaris 11 Express Major Features Support Offerings Wrap Up s, Q&A 2

3 What is Oracle Solaris 11 Express? From a release perspective: OpenSolaris Solaris 11 Express Solaris 11 3

4 What is Oracle Solaris 11 Express? From a release perspective: OpenSolaris Solaris 11 Express From a completion perspective: Solaris 11 Almost There Feature Complete Solaris 11 4

5 What is Oracle Solaris 11 Express? From a release perspective: OpenSolaris Solaris 11 Express From a completion perspective: Solaris 11 Almost There Feature Complete Solaris 11 From an audience perspective: ISVs Customers interested in leading edge IT Customers that need Solaris 11 features From the quality perspective Embedded in Sun ZFS 7000 Appliances (for 2 years) OS choice for Exalogic; coming to Exadata 5

6 Solaris 11 Raises the Bar Next Generation of the #1 UNIX Operating System Dramatic reduction in planned downtime Telemetry for proactive and pre-emptive service Designed for network served environments Binary compatibility guaranteed Thousands of New Features: Clustering Flash Infiniband Fast boot and fewer restarts And Lots More

7 Oracle Solaris 11 Express Key Focus Areas Already in Oracle Solaris 10 New in Oracle Solaris 11 7

8 Preserving Business Investments Guaranteed Compatibility Oracle Solaris Binary Application Guarantee Program From 1997 forward Oracle Solaris Source Code Guarantee Program Between SPARC and x86 Oracle Solaris 10 Containers Preserve existing environments Solaris Zone Solaris Zone Solaris 10 Container Solaris Zone Oracle Solaris 11 Oracle SPARC x86 Oracle x86 Application Compatibility Guarantee covers applications that run on Solaris 2.6 or later Source Code Compatibility Guarantee covers applications developed on any Solaris platform See oracle.com/solaris Technical Information for terms and conditions 8

9 Risk-Averse Updating New file system & volume manager, new installer & booter, new packaging system Result: totally enhanced experience pkg update into a new boot environment, while staying up, then fast-reboot Result: when updating from : 99 second turnaround (SMTP) Something goes wrong? Fall back to previous boot environment Ooops! Deleted a directory and back-ups take hours or days to retrieve? # zfs rollback 9

10 Oracle Solaris 11 Key Focus Areas Availability: Greatly reducing planned and unplanned downtime Self checking software packaging tools, network-based software repositories, safe updates with ZFS boot environments and fast reboot Scalability and Performance: Scaling to 1000s of threads, terabytes of main memory, 100s of Gbps Next generation memory management, advanced power management, low latency/high speed interconnect Efficiency: Increasing deployment flexibility for applications Completely virtualized network, storage and server environments, run your existing applications unchanged : Guarding your datacenter with advanced security Secure by default startup,hardware verification of OS, data encryption services, enforced root role 10

11 <Insert Picture Here> Oracle Solaris 11 Express Features 11

12 Feature Categories To Be Covered Zones, Network Network IPS, Boot Environments, ation ZFS, COMSTAR, SMB, NFS 12

13 Packaging New Image Packaging System (IPS) No Patches. All system updates through 1 mechanism, package updates. Automatic package dependency computation and resolution No pre or post install package scripting A source of problems with Solaris 10 patching Package versions define the system Where configuration management is important this dramatically simplifies the problem 13

14 Image Packaging System (IPS) Wonderful new sub-system: see pkg(1), pkg(5) Completely integrated & networked packaging/patching Most important sub-commands: pkg install pkg update pkg search 14

15 Boot Environments Make updates safe, reliable, recoverable Reduce risk Increase availability Different from, and simpler than, Solaris 10 Live Upgrade BE's are free with ZFS Use liberally as an administrative safety net An important element of how Oracle Solaris 11 helps reduce planned and unplanned downtime 15

16 Boot Environments Before BE Creation Disk 1 After BE Creation Disk 1 1 swap Solaris 10 swap root partition Solaris 11 Active Boot Environment / (root) 20 minutes to 1+ hour later Disk 2 Unused Unused Disk Partition Other data After Updating New BE Active Boot Env. Active Boot Environment Disk 2 copy of root partition ~10 seconds later Disk 1 2 Other data Unused Unused ZFS pool ZFS pool 3 swap / (root) Disk 2 New Boot Environment Active Boot Env. New Boot Env. Updated Other data Unused ZFS pool Active Boot Env. New Updated Boot Env. 16

17 Requirements for New er Updates (patches) & upgrades must be fast, reliable, reversible Low initial investment, great scalability for deployment Ease-of-use is a priority for all features Deployment must be well-integrated with best practices, overall user experience Limit install-specific features, knowledge Integrated deployment of Zones is required 17

18 New Automated er (AI) Lower up-front and ongoing costs of deploying Solaris-based software stack Leverages ZFS, SMF, IPS features to provide enhanced features vs. JumpStart Reduces need for third-party or customer-developed extensions Most scripting moved to first-boot SMF services WAN-capable design provides operational flexibility Designed to be manageable and observable installadm(1m) provides one-stop management interface 18

19 Automated er Use Standard Images DHCP Server AI Server Net config AI address 1 Manifests 2 Boot Image Distribution Constructor Manifests Create Customized Images Distribution Constructor USB Images ISO Images Virtual Machines IPS Repository Packages 3 VM VM VM Oracle Solaris 11 Express Environment VM VM 19

20 Solaris 10 Solaris 11 Express SVR4 Packages IPS Packages DVD CD + pkg repository Live Upgrade Boot Environments Upgrade from installer pkg(1), Update Manager JumpStart Automated er(ai) JumpStart Profiles AI manifests Flash No equivalent yet Blueprints for custom DVD's Distribution Constructor 20

21 SMF New Features Property value ordering (95) Template extensions (102) Early manifest import (137) Networking type extensions (141) FMA integration (146) + more... 21

22 Zones New Features rename (24) upgrade (27, 53) move & clone (33) migration (36) configurable privileges (37) ZFS (39) System V resource controls (48) update on attach (82) + more... 22

23 Zones Observability Improved Utilization Monitoring CLI and Ops Center integration Use extended accounting for accuracy Report shared and dedicated resources Utilization against configured limits 23

24 Introducing zonestat(1m) $ zonestat 5... SUMMARY Cpus/Online: 32/ CPU ZONE USED %PART %CAP %SHRU [total] % [system] % kodiak-dp % - 100% global % % kodiak-ab % % kodiak-rie % % Physical: 32.0G ----PHYSICAL----USED PCT %CAP 5660M 17.2% 5086M 15.5% 46.0M 0.14% 4.49% 419M 1.27% 67.0M 0.20% 41.6M 0.12% - Virtual: 47.9G -----VIRTUAL----USED PCT %CAP 9.9G 20.6% 9275M 18.8% 36.2M 0.07% 1.17% 673M 1.37% 115M 0.23% 62.4M 0.12% - 24

25 Introducing zonestat(1m) zonestatd daemon performs monitoring Allows non-root users and non-global zones to see (some of) the information zonestat can monitor: Virtual-memory, physical-memory, locked-memory, poolpsets, lwps, processes, shm-memory, shm-ids, semids, msg-ids Limit output to specific zones Sort by various columns Machine parseable output mode End-of-run reporting for average, high, total usage Drill down by resource type 25

26 Oracle Solaris 11 Zones Solaris 10 Zones not Containers for Solaris 11 Oracle Solaris 10 Containers are the key to compatibility of Solaris 10 apps in Solaris 11 Solaris 10 Zone Solaris 10 Zone Oracle Solaris 10 Solaris 10 Zone Solaris 10 Zone Solaris 11 Zone Solaris 11 Zone Oracle Solaris 11 Express Zones monitoring tool for better visibility into system Delegated zones administration allows giving admin access to zone but not system. 26

27 Networking Major New Features GLDv3 a.k.a. Nemo (12) IP Instances (57) NetWork Auto-Magic a.k.a. NWAM (62/100/134) Nemo unification and vanity naming (83) Enhanced network driver configuration via dladm (83) & a.k.a. Crossbow (105/136/154) ipadm (137) + more... 27

28 Networking Minor New Features Lots of wireless drivers (29 & later) IP Duplicate Address Detection (47) IPsec Tunnel Reform (53) Multicast DNS and Service Discovery (72) Automated building of sendmail configuration files (90) IP Observability Devices (103) Low Latency Socket Framework (106) IPMP Rearchitecture (107) IP Tunneling (125) Single-root I/O (155) 28

29 Network Provide a fully virtualizable network environment More effective sharing of networking resources Divide physical link into multiple virtual ones Aggregate multiple links into larger virtual one Increase the scope for server consolidation projects. Don't just consolidate servers, consolidate network topologies (network-in-a-box) 29

30 Network 100 Mb 100Mb 100 Mb 100 Mb 100Mb 100Mb 100 Mb 100 Mb 100 Mb 400 Mb 100 Mb 400 Mb 30

31 Network The Plumbing provides the virtualization interconnects Virtual NIC Virtual Switch VLAN support Solaris Networking Components provide the flexibility to build complex network topologies within a system Router (Quagga) Load Balancer (new) Firewall (IP Filter) 31

32 Network Memory cap Swap cap CPU cap Shares Memory Compelling addition to Solaris 10 capabilities CPU Net g n i k wor CPU cap Priorities Bandwidth cap Allow organizations to meet service level goals 32

33 Network Prior to starting network backup Network backup soaking up so much net bandwidth it impacts other communication After limiting bandwidth used by backup, other traffic no longer suffers 33

34 Network Enable enforcing organizational service delivery policies Bandwidth CPU resources Traffic Filtering for types of traffic allow fine tuning the resource controls IP addr Port Protocol 34

35 Mission hardened for over 2 years as OS for Sun ZFS Storage Appliances. ZFS Only boot environment Dedup, Encryption both new Common Multiprotocol SCSI Target (COMSTAR) NFS CIFS ZFS ZFS ZFS Converts Solaris hosts into SCSI targets with a number of supported transport protocols (iscsi, FC, InfiniBand) COMSTAR Zvol Storage Pool Fully integrated CIFS Complete Windows file sharing interoperability (pairs with Active Directory integration) NFS 35

36 ZFS Initial integration (27) FMA (36) Zones (39) Hot Spares & Clone Promotion (42) Bootable datasets (62) Hotplug (68) L2ARC (78) Boot support (88) Deduplication (128) Crypto (149) + more... 36

37 ZFS Deduplication Deduplication Fully integrated into ZFS, not a for-fee addition Manage more data while using less resources Enable on dataset level Characterization: Realtime In line Block based 37

38 ZFS Encryption ZFS: Create a reliable, scalable, easy to manage storage system from inherently unreliable components ZFS with Encryption: Create a secured, reliable, scalable, easy to manage storage system from... Dataset encryption property set at create time Different encryption possible within each data set of pool What is encrypted: All data, directory structure, ZVOL data, and all of those in a snapshot or clone 38

39 Root is a role Better accountability User assumes root role so can disable direct root login Trusted Platform Module (TPM) Provides hardware verification of OS at boot-time ZFS Cryptography Cryptographic protection of data on a per-pool basis Uses Solaris Cryptographic Framework to provide acceleration through on-board crypto, of both SPARC and x86 processors 39

40 New Features Trusted Extensions (37) Secure-by-default (42) IPsec Tunnel Reform (53) Packet capture (125) ZFS Crypto (149) + more... 40

41 Hardware Platforms & Performance SPARC sun4v (13) T3 processors (131) Intel Nehalem & Westmere processors (97) Fast reboot (x86: 100, by default: 112, SPARC: 136) Fast crash dump (127) + more... 41

42 Miscellaneous New Features MACHINE_THAT_GOES_PING (33) Alternate home directory for root user (87) Next Generation Audio (115) modernization updates (136) bash now default root shell ksh (and /bin/sh) now ksh93 patch now GNU vi now vim 42

43 <Insert Picture Here> Oracle Solaris 11 Express Support 43

44 Oracle Solaris 11 Express Support Oracle Solaris 11 Express is included in: Oracle Premier Support for Oracle Systems Oracle Premier Support for Operating Systems Oracle Solaris Premier Support Subscription for non-oracle x86 systems 44

45 Key Takeaways First look at what will be the next major Solaris release- Oracle Solaris 11 Feature Highlights include Network and Network Enterprise storage-class storage implementations in a general purpose OS New ZFS features, Dedup and Encryption New Packaging System addresses pain of patching Oracle Solaris support programs include supporting Oracle Solaris 11 Express 45