Accelerate innovation in an age of digital disruption HPE Gen10

Transcription

1 Accelerate innovation in an age of digital disruption HPE Gen10

2

3 SECURITY

4 Security Cyber Security Example 4

5 Security Hacked Firmware 5

6 Security Digital Weapon! In January 2010, inspectors with the International Atomic Energy Agency visiting the Natanz uranium enrichment plant in Iran noticed that centrifuges used to enrich uranium gas were failing at an unprecedented rate. The cause was a complete mystery apparently as much to the Iranian technicians replacing the centrifuges as to the inspectors observing them. Five months later a seemingly unrelated event occurred. A computer security firm in Belarus was called in to troubleshoot a series of computers in Iran that were crashing and rebooting repeatedly. Again, the cause of the problem was a mystery. That is, until the researchers found a handful of malicious files on one of the systems and discovered the world's first digital weapon. 6

7 Security Infected firmware - Permanent Denial of Service (PDoS) 7

8 More vulnerabilities, smarter criminals > 500K 99 days Breach attempts every minute 1 Median time to detect breach 2 Denial of service Malware-infected firmware 1 CNBC, Biggest Cyber Security Threats in 2016 Derek Manky, Fortinet global security strategist 2 Mandiant M-Trends, Trends from the Year s Breaches and Cyber Attacks, 2016.

9 Hardware Authenticate Firmware Authenticate Authenticate System Secure Start ilo and BIOS team up for a Super Hero feature Silicon Root of Trust Option ROMs & OS Bootloader HPE-designed logic in ilo chip validates the ilo firmware Burned into the ilo chip Immutable UEFI BIOS ilo firmware then validates the System ROM Digital signature must match or the ROM is not executed ilo firmware is trusted, now the ROM is trusted (Chain of Trust) ROM then validates Option ROMs and the OS Bootloader via UEFI Secure Boot. ilo 5 FW Option ROMs and OS Bootloader are NOT executed if they fail authentication. ilo 5 ASIC

10 Secure Recovery Recovery = Priceless! Redundancy ROM and ilo have built-in redundancy Recovery Factory Installed Recovery Set on non-volatile storage Recovery Administrator can setup new Recovery Set ilo can automatically recover ilo (ilo Standard feature) ilo can automatically recover ROM (ilo premium feature) ilo can also recover CPLD, IE, ME Run-Time Firmware Authentication Background scans by ilo Event logs, Alerting, Web UI

11 Security The World's Most Secure Industry Standard Servers 1 Innovation in the server hardware industry has traditionally prioritized functionality and accessibility of platform management features with a limited focus on security. Hardware and platform firmware have been an accepted area of weakness, relying on external physical and logical countermeasures to provide security. As advances have been made in application and operating system security, attackers have been increasingly focused on hardware and platform firmware weaknesses as viable attack vectors to gain longterm persistent access. Seeking to address these threats head-on,. Our team conducted time-boxed testing included attacks against physical interfaces, platform firmware, and network interfaces. HPE s commitment to innovation and ongoing testing will serve to continuously improve platform security and maintain its lead position.. HPE s overall forward-leaning security culture touches all phases of the Gen10 platform lifecycle including design, implementation, and maintenance. Jason Shropshire, CTO InfusionPoints 11

12

13 Intelligent System Tuning HPE Exclusive Server Tuning Technology Developed In-Part with Intel Workload Matching Jitter Smoothing Core Boosting Tune BIOS settings with preconfigured server profiles that match your workload Mitigate frequency fluctuations for deterministic performance, reduced latency, and improved workload throughput Enable higher performance across more active processor cores for significant savings 1. Feature Coming Soon 13

14 Gen10 Workload Profiles Simplifying Performance Optimization for Customer Workloads Customers selects from a list of workloads and numerous performance settings are optimized for the workload. General Power Efficient Compute General Peak Frequency Compute General Throughput Compute Virtualization Power Efficient Virtualization Max Performance Low Latency Mission Critical Transactional Database High Performance Compute Decision Support Graphic Processing I/O Throughput Web/E-commerce Extreme Efficient Compute Custom Allows customers to leverage the significant capabilities of HPE s Performance Engineering Team.

15 Frequency What is Jitter? No Turbo Boost Turbo Boost enabled Jitter is the result of processor frequency shifts Enabling Intel s Turbo Boost mode can increase processor frequency dramatically Each time the frequency changes, the processor cores stop to adjust Why Care? Jitter negatively impacts: Latency Deterministic performance Workload throughput (in some cases) Time Base Frequency Frequencies 15

16 Frequency Jitter Smoothing 2.2Ghz processor Jitter Smoothing in Turbo Boost mode Jitter Smoothing reduces frequency shifts while in Intel Turbo Boost mode HPE patent-pending technology Provides more deterministic & reliable performance Increases throughput in select workloads Time Bottom Line Deterministic performance and workload throughput are competitive advantages Jitter Smoothing Base Frequency Turbo Frequencies 16

17 Performance in MIPs on 2.8Ghz/4.0Ghz turbo processor Diagram for Illustration Purposes Only MIPs 6,500 5,500 4,500 3,500 2,500 1, ,280 4,480 Enabling Intel s Turbo Boost mode can increase processor frequency and total MIPs (millions of instructions per second) However, as more cores are activated, this reduces the maximum frequency you can achieve and therefore MIPs increases are not linear Why care? Higher frequencies are a competitive performance advantage * Based on average of 10 clock cycles/instruction 17

18 Performance in MIPS with HPE Core Boosting 1 enabled Diagram for Illustration Purposes Only MIPs 18% Increase Over Turbo 6,240 5,280 4,480 Core Boosting enables higher performance across more processor cores Improve performance by running workloads on more active cores at higher frequencies Works without overclocking (maintain Intel warranty and reliability) Lower licensing costs for core and processor based licensing Bottom Line Core Boosting can improve server performance and lower licensing costs * Based on average of 10 clock cycles/instruction 1. Feature Coming Soon 18

19 HPE Intelligent System Tuning (IST) Requirements* A. Jitter Smoothing: HPE Gen10 Platform w/ilo 5 and ilo Advanced Premium Security Edition or ilo Advanced license B. Workload Profiles: All Gen10 w/ilo 5 C. Core Boosting: HPE Gen10 Platform w/ilo 5 and ilo Advanced Premium Security Edition or ilo Advanced license Select Gen10 Platforms One of the following special HPE processor SKUs a) 8c/155W b) 16c/205W c) 24c/205W Standard High Performance processor heat sink Standard High Performance fans * Power Supplies based on power needs for processors & options (See Power Advisor) 19

20 Intelligent Systems Tuning Battle Card Feature Function Benefit Advantage Value Jitter Smoothing Workload Matching Each change in processor frequency requires a cpu clock cycle to make the change. This introduces latency. Reduces frequency fluctuations while in Intel Turbo Boost Mode. Workload Profile Predetermined custom server profile tuned to specific workloads Workload Optimization Automatically and dynamically balance resource bandwidth (cpu, memory, I/O) Increases workload performance and provides more deterministic & reliable operation outcomes Simplifies server tuning to optimize specific workloads Utilize entire resource bandwidth to mitigate workload bottlenecks and therefore improve performance HPE Platforms will have more deterministic and reliable operations. Elimination of Jitter in Turbo Boost mode will also eliminate wasted clock cycles and therefore may increase workload throughput above maximum turbo frequency. Provides customers with server tuning specific to the workload they want to run HPE ProLiant platforms can outperform competition running similar workloads For high frequency traders, small (micro seconds) latency reduction is directly proportional to millions of dollars in revenue. For all customers, workload throughput performance is a competitive and TCO advantage. Performance improvement of up to 9% over server default settings Customer utilizes fewer compute nodes by optimizing system resources and improving performance. Core Boosting Maintains turbo frequency as more cores become active. Improves performance of compute environment by having more active cores at a given frequency when in Intel s Turbo Boost mode. HPE server platforms will outperform competition with similar Intel CPU SKUs. More workloads on more cores at higher performance than standard Intel bin. Lower licensing costs for core-based application licensing. 20

21 Gen 10 Innovation: UEFI/BIOS

22 New Pre-Boot Environment

23 Gen 10 Innovation: Deployment

24 Gen10 Minutes DL380 Gen9 Boot Time Decreasing deployment time by significantly reducing boot time. 2 Fast memory training Optimized ilo communication Early driver caching 1 0 ~67% Reduction in Boot Time w/ Similar Configurations versus Gen9

25 New Gen10 products 25

26 Extending the world s most secure industry standard server 1 portfolio back by popular demand the world s best selling AMD server 2, the HPE ProLiant DL385 HPE ProLiant DL385 Gen10 Server A new formula for server virtualization AMD EPYC Processor Flexibility, performance and security with a better balance of resources to power the datacenter 1 Based on external firm conducting cyber security penetration testing of a range of server products from a range of manufacturers, May IDC WW Quarterly Server Tracker 2017 Q2 Historical Release, September 12, 2017; Based on Units 26

27 A paradigm shift in computing ushering in a new era for the IT ecosystem Portfolio of servers based on AMD processors HPE ProLiant MicroServer Gen10 The compact server to make your own HPE ProLiant DL385 Gen10 Server A new formula for server virtualization 27

28 Security The compact server to make your own HPE ProLiant MicroServer Gen10 Agility New Gen10 Capabilities Control Unique and serviceable design Compact and stylish designed for small space Easy access to hard drives, memory for simple upgrade Graphic performance 4K resolution display Abundant video output connectivity: 2 DP VGA Build a custom solution just right for you with the unique and stylish HPE ProLiant MicroServer Gen10 Redefine the small business server Customize and be instantly productive: decide the application from ClearOS marketplace Easy to use and fast with point and click 28

29 Security Low cost IT made easy HPE ProLiant MicroServer Gen10 Agility New Gen10 Capabilities Control Unique & Serviceable Design Graphic Performance Redefine the small business server Unique form factor that is compact and great for small spaces Quiet with an acoustic level of 40 decibels 1, about the noise level of a library Simple installation and upgrades with easy access to drives, memory and PCIe slots Up to 48% better performance with Passmark 2008 measurement 2 Dual display ports capable of 4K display resolution 4x denser than 1080p FHD greater clarity, more vibrant and realistic colors 3 Stream media to 3 devices with optional AMD Radeon Pro WX 2100 PCIe graphics card Low acquisition costs ClearOS preload gives customers an out-of-box ready SMB solution for Cloud, Gateway, Network, and Server capability Optional read-intensive SATA SSD for boot device Optimized compute with AMD Opteron X3000 processor and DDR4 memory 1, 2, 3 Substantiation for quantifiable benefits in speaker notes. 29

30 Security Gen10 vs. Gen8 Quick Comparison HPE ProLiant MicroServer Detailed technical specifications found in QuickSpecs document Agility New Gen10 Capabilities Control Specifications Gen8 Gen10 Processor Intel Celeron or Intel Pentium or Intel Xeon E3-1200v2 product family or Intel Core i3 AMD Opteron X Cores or Opteron X cores Processors / cores / speed 1 processor, 2 cores, 2.5GHz 1 processor, 2 and 4 cores, 3.4GHz Memory (type, max, slots) DDR3 UDIMM, 16GB Max with (2) 8GB, 2DIMM slots DDR4 UDIMM, 32GB Max with (2) 16GB, 2DIMM slots Drives Bays (4) LFF SATA, Non-hot plug (4) LFF SATA, Non-hot plug with optional (1) Slim SATA ODD or (1) Slim SFF SATA SSD Network controller 1Gb 332i Ethernet Adapter 2 Ports per controller 1Gb BCM5720 Ethernet Adapter 2 Ports per controller embedded Graphics Integrated Matrox G200 video standard (1280 x 1024 (32 bpp)) or 1920 x 1200 (16 bpp)) Integrated Radeon R5/R6/R7 graphics cores within processor supporting 4K resolution Infrastructure management Power Supply ilo Management Engine, HP ilo Essentials (optional), HP ilo Advanced (optional) (One (1) 150 Watts Non-Hot Plug, Non redundant Power Supply (AMS, APJ and PRC models). One (1) 200 Watts Non-Hot Plug, Non redundant Power Supply (EMEA models) N/A One (1) 200W ATX Non-Hot Plug, Non redundant Power Supply, up to 85% efficient Storage Controller HPE Dynamic Smart Array B120i Controller. applicable to all models Marvell 88SE9230 PCIe to SATA 6Gb/s Controller embedded Warranty (parts, labor, onsite support) 1/0/0 1/1/1 30

31 A new formula for server virtualization HPE ProLiant DL385 Gen10 Server Introducing The DL385 takes full advantage of the available compute to remove bottlenecks in memory and I/O. The DL385 provides the right amount of compute to get the job done efficiently. Up to 64 Cores and 32 DIMMs. Security is top of mind leaving your teams more at ease. The secure and flexible 2P 2U HPE ProLiant DL385 Gen10 Server delivers advanced performance for virtualization and memorycentric workloads. Choose this purpose-built platform for virtualization. 31

32 The new formula for server virtualization HPE ProLiant DL385 Gen10 Key selling points Ideal for Price positioning 1.Security Innovations 2.Flexible Design 3.World-class Performance 4.Proven Industry Leading Services and Ease of Deployment Designed with virtualization in mind. It works for all: On/ Off premise Hybrid General purpose Breakthrough compute. The DL385 efficiency provides the and right scale amount of compute to get the job done efficiently. Memory intensive compute. Remove the bottlenecks of memory and I/O. Designed to be the price performance leader. DL385 Gen10 DL385 Gen10 ILP ($) Entry 8LFF BTO PreConfig SVR $4,539 Entry 8SFF BTO PreConfig SVR $4,569 Base 12LFF BTO PreConfig SVR $6,029 Base 8SFF BTO PreConfig SVR $6,559 Base 24SFF BTO PreConfig SVR $9,549 Perf 8SFF BTO PreConfig SVR $18,169 Hi Perf 24SFF BTO PreConfig SVR $18,959 HPE.com/servers/dl385-gen10 Up to 2 AMD EPYC 7000 series processors, up to 32 Cores (128 Threads) (32) DDR4 2666MT/s, (4.0TB 24+6 SFF / LFF+2SFF max, HDD/SSD, 24 NVMe PCIe SSD and m.2 connector embedded on system board. HPE Dynamic Smart Array S100i for embedded M.2 connectors. Choice of HPE Smart Array Essential or Performance Controllers for performance or additional features Competition Dell R740(XD) Huawei 2288(China) IBM x3650 m5/lenovo ThinkServer RD650 Sugon I620-G10 Cisco UCS C240 M4 Lenovo RD630 *AMD specific competition is unknown at this time. Key competitive advantages 33% more I/O 14% more cores 14% more memory Industry leading security Flexible chassis supporting future upgrades Performance gains with new HPE Smart Array HPE Smart Memory DDR4 2666MT/s *US ILP and subject to change without notice 4x1GbE embedded + Choice of FlexibleLOM + Standup 8 PCIe 3.0 slots (FH/FL) HPE ilo 5, UEFI and legacy boot mode up to 96% Efficiency (Titanium), Flexible Slot PS Standard warranty HPE Secure Encryption, TPM option and chassis intrusion Green text designates new or improved feature over a previous generation product

33 HPE ProLiant DL385 Gen10 to prior Gen 8 compare HPE ProLiant DL385 Gen10 Gen8 Compute Memory DL385 Gen10 Up to (2) AMD EPYC 7000 Series Processor family, (32C), PCIe 3.0, up to 8 available slot(s) + m.2 support embedded HPE Smart Memory (32) DDR4 (8 channels per CPU), up to 2667MT/s (4 TB max) DL385p Gen8 2x AMD Opteron 6300 series Processors DDR3 Up to 768GB (24 DIMM Slots) Persistent Memory Not currently supported Not supported Storage HPE SmartDrives Standard HPE Smart Array S100i Software RAID for M.2 connectors Choice of HPE Smart Array Essential and Performance RAID Controllers for performance or additional features 24+6 SFF / LFF+2SFF max, HDD/SSD, 24 NVMe PCIe SSD and m.2 connector embedded on system board. Embedded SATA Controller Smart Array P420I Modular SAS Controller 8SFF, 16SFF, 24SFF (+2SFF or +3LFF Rear) 4LFF, 12LFF (+2SFF rear or +3LFF Rear) Networking 4x1GbE embedded + Choice of FlexibleLOM + Standup Choice of FlexibleLOM + Standup VGA/Serial/USB Ports/SD Front Display Port Opt, Rear VGA & Optional Serial, 5 USB 3.0, + 2 USB 2.0 optional, Dual Micro-SD Front VGA Opt, Rear VGA & Optional Serial, 5 USB 3.0, + 2 USB 2.0 Optional, 2 Micro-SD GPU Support Single/Double-Wide (5) & Active/Passive up to 10.5 (3) Not Supported Management Converged HPE OneView and HPE ilo Advanced HPE OneView and HPE Insight Control Support HPE Insight Online with enhanced mobile appl HPE OneView and HPE ilo Advanced Embedded HPE ilo 5, SUM, RESTful Interface Tool, UEFI HPE ilo4, HPE SUM Power & Cooling up to 96% eff. (Titanium) w/ Flexible Slot PS Up to 96% eff. (Titanium) w/commonslot FF Industry Compliance ASHRAE A3 & A4, lower idle power, Energy Star Energy Star Power / Location Discovery Services Supported / Unsupported Supported / Optional Chassis Depth (SFF), (LFF) 27.5 (SFF), 29.5 (LFF) Serviceability Easy Install Rails Standard Optional Warranty 3/3/3 3/3/3 Green text designates new or improved feature over a previous generation product

34

35 Authenticate Authenticate Authenticate Unprecedented security for server virtualization Security HPE Silicon Root of Trust System Firmware Option ROMs & OS Boot loader UEFI BIOS ilo 5 Firmware AMD Secure Processor Secure Memory Encryption (SME) Protects data against memory hacks and scrapes Secure Encrypted Virtualization (SEV) Encrypts and isolates virtual machines Hardware (Silicon) ilo 5 Chip 35

36 Choosing between the ProLiant DL servers for virtualization DL cores 4-6TB No High Core count? cores Memory Capacity? 3-4TB Memory and/or VM Encryption? Yes Price performance? Highest DL385 <=56 cores <=3TBs No Higher DL380 36

37 Choosing between the ProLiant DL servers for memory intensive workloads DL580 Yes cores 4-6TB SFF <=20 NVMe SSD No LFF High Software License per Core? No Core count? cores Memory Capacity? 3-4TB Internal Storage? <=30 SFF NVMe SSD <= 19 LFF Price performance? Highest DL385 Yes <=56 cores <=3TBs <=30 SFF <=20 NVMe SSD <=19 LFF Higher DL380 37

38 EPYC Processors Deliver Outstanding Value More Cores, More Memory Capacity, Innovative Security Excellent Memory-Bound HPC workload performance Performance/Dollar leadership / TB $4, / TB $4, / TB $3, GB $10, M TB $13, GB $5, GB $8, M TB $11, GB $7, M TB $10, GB $6, GB $4, M TB $7, GB $3,115 Positioned as per core Performance optimized Positioned as performance/watt optimized AMD SPEC CPU 2006 estimates based on tests conducted by AMD on an Ethanol reference platform configured with 2xEPYC SOCs, 512GB of memory (16x32GB DDR2666, 2R, 1DPC) using the Open64 v4.5.2 compiler, Ubuntu and 1000E BIOS Intel SPEC CPU 2006 results from SPEC.org as of 30Oct2017 using the ICC compiler More information about SPEC CPU 2006 is available at Intel T (Temp/NEBS) and F (OmniPath integrated) SKU s and 8158 and 8156 SKU s not included in comparison as they are not targeted markets for EPYC AMD pricing based on 1KU price and Intel pricing from Intel.com as of 30Oct AMD EPYC

39 EPYC Processor 1 Socket Solutions Deliver Outstanding Value True 1 Socket server with Enterprise Class Features More I/O, More Memory Capacity, Innovative Security Excellent solution for Mainstream, Entry level and Storage Workloads No Compromise 1 Socket AMD EPYC 2 Socket Intel XEON Scalable 7551P TB $2, P / /2666 2TB $1, P / /2666 2TB $ / /2666 2TB $ TB $ TB $2, TB $2, TB $2, TB $1, TB $1, TB $ TB $612 AMD SPEC CPU 2006 estimates based on tests conducted by AMD on an Ethanol reference platform configured with 2xEPYC SOCs, 512GB of memory (16x32GB DDR2666, 2R, 1DPC) using the Open64 v4.5.2 compiler, Ubuntu and 1000E BIOS. 155/170 TDP OPN s tested at 170W and 2666MHz memory speed Intel SPEC CPU 2006 results from SPEC.org as of 30Oct2017 using the ICC compiler More information about SPEC CPU 2006 is available at AMD pricing based on 1KU price; Intel pricing from Intel.com as of 30Oct2017 AMD EPYC processor supports up to 128 PCIe Gen 3 I/O lanes (in both 1 and 2-socket configuration), versus the Intel Xeon SP Series processor supporting a maximum of 48 lanes PCIe Gen 3 per CPU, plus 20 lanes in the I/O chip (max of 68 lanes on 1 socket and 116 lanes on 2 socket). NAP AMD EPYC

40 How HPE expertise can help you Innovation to transform Committed to open Infrastructure Data center Operations Your apps Your tools Your clouds Your partners Expertise to deliver your way On-prem On-demand As-a-Service Accountable, end-to-end support Any app Any hardware Anywhere in the world

41 Thank you

42 Backup 42

43 HPE ecosystem to deliver your right mix Key offerings Key partnerships ProLiant 3PAR Hyper Converged Altoline BladeSystem Moonshot Cloudline OneView Synergy CloudSystem & Converged Systems SGI Apollo Integrity Superdome X Integrity NonStop Telco Solutions #1 in Private Cloud #1 infrastructure in #1 1 Servers1 in Cloud build infrastructure 2 #1 in Total storage 3 #2 in External storage 3 #2 in Integrated platform 4 1. IDC CQ2 16 WW Server Tracker by revenue 2. Synergy CQ2 16 WW Cloud Build Tracker (excl. ODMs) 3. IDC CQ2 16 WW External ESS tracker 4. IDC CQ2 16 WW Converged Systems Tracker 43