Date post: | 08-Apr-2018 |
Category: |
Documents |
Upload: | aamir-malik |
View: | 223 times |
Download: | 0 times |
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 1/42
POWER7 and AIX 7Randy Swanberg, DE AIX Architecture
Power your planet.Smarter Systems for a Smarter Planet
© 2010 IBM Corporation
October 2010
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 2/42
Topics
Why AIX?AIX Power 7 Support
AIX Technology Highlight – Active Memory Expansion
© 2010 IBM Corporation2
AIX 7 Highlights
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 3/42
IBM’S 10-year march to UNIX leadership
35%
40%
45%UNIX Server Rolling Four Quarter Average Revenue Share
POWER6Live PartitionLive PartitionMobilityMobility
POWER5MicroMicro--PartitioningPartitioning
POWER7Workload OptimizedWorkload Optimized
dot.com bubble burst
global economic
recession
…the largest shift of customer spending in UNIX history
© 2010 IBM Corporation3
15%
20%
25%
30%
Q 1 0
0 Q
3 0 0
Q 1 0
1 Q
3 0 1
Q 1 0
2 Q
3 0 2
Q 1 0
3 Q
3 0 3
Q 1 0
4 Q
3 0 4
Q 1 0
5 Q
3 0 5
Q 1 0
6 Q
3 0 6
Q 1 0
7 Q
3 0 7
Q 1 0
8 Q
3 0 8
Q 1 0
9 Q
3 0 9
Q 1 1
0
HP Sun IBM
POWER4Dynamic LPARsDynamic LPARs
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 4/42
Why AIX is the Premier UNIX® Platform Today
Improved Efficiency through Virtualization
Outstanding Performance
© 2010 IBM Corporation4
Strong, stable, non-disruptive roadmap
Innovation through integrated Development
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 5/42
54% of IT executives and managers say that they require 99.99% or better availability for their applications
Power Systems with AIX deliver 99.997% uptime AIX & Power Systems delivers the best reliability of UNIX, Linux, and Windows
Cor orate Enter rise Downtime
R eliability : The fewest unscheduled outages•Less than one outage per year
© 2010 IBM Corporation5
Source: ITIC 2009 Global Server Hardware & Server OS Reliability Survey Results ,July 7, 2009 Fully paper is available at ibm.com/aix
Open Source Linux
HP UX 11/ HP Integrity
HP UX 11/ PA RISCSun Solaris / SPARC
IBM AIX POWER
Apple MAC
Red Hat EnterpriseWindows Server 2008Windows Server 2003
(Hours per Year)Availability : The least amount of downtime•15 minutes a year•2.3 times better than the closest UNIX competitor•More than 10X better than Windows
S erviceability : The fastest patch time•11 minutes to apply a patch
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 6/42
AIX Provides Leadership Security*
© 2010 IBM Corporation6
AIX Dropped off the list due to low vulnerabilities!
*X-Force report – Mid-year 2010 http://www-935.ibm.com/services/us/iss/xforce/trendreports/
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 7/42
AIX support for POWER7 LaunchFirst ever launch of a new generation of POWER serversthat does not require upgrade to a new AIX Technology Level!
AIX TLs 750, 755(2/2010)
770, 780(3/2010)
PS700,PS701,PS702(6/2010)
710, 720,730, 740,795(9/2010)
AIX 5.3 TL9 SP7 SP7 Not supported Not supported
710, 730
780720,740,750,755
© 2010 IBM Corporation7
AIX 5.3 TL10 SP4 SP4 SP5 SP5AIX 5.3 TL11 SP2 SP2 SP5 SP5
AIX 5.3 TL12 New TL New TL New TL SP1
AIX 6.1 TL2 SP8 SP8 Not supported Not supported
AIX 6.1 TL3 SP5 SP5 SP7 SP7
AIX 6.1 TL4 SP2 SP3 SP7 SP7AIX 6.1 TL5 New TL New TL New TL SP3
AIX 6.1 TL6 New TL New TL New TL New TL
AIX 7.1 New Version New Version New Version New Version
795
, ,
770
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 8/42
AIX P7 Exploitation
P6 MODE ( and P6+ )* P7 MODE Customer Value
2-Thread SMT 4-Thread SMT Throughput performance, processor coreutilization.
*
Compatible Mode ArchitectureLive LPAR Mobility
© 2010 IBM Corporation8
User Writeable AMR
,Application Key use.
VMX (Vector Multimedia Extension / AltiVec) VSX (Vector Scalar Extension) High Performance Computing.
Affinity OFF by Default CPU/Memory Affinity EnhancementsON by Default, HomeNode, 3-tier Memory,MicroPartition Affinity
Improved system performance for systemimages spanning sockets and nodes.
Barrier SynchronizationFixed 128-byte Array; Kernel Extension Access
Enhanced Barrier SynchronizationVariable Sized Array; User Shared Memory
Access
High Performance Computing ParallelProgramming synchronization facility.
64-core/128-thread Scaling 64-core / 256-thread Scaling256-core / 1024-thread Scaling
Performance and Scalability for Large Scale-Up Single System Image Workloads (e.g.OLTP, ERP scale-up, WPAR consolidation).
EnergyScale CPU Idle and Folding with NAP EnergyScale CPU Idle and Folding with NAPand SLEEP
Improved Energy Efficiency
N/A Active Memory Expansion Expand Existing Memory Capacity
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 10/42
P7 Simultaneous Multi-Threading
4 SMT threads – P5 and P6 Supported 2 SMT threads per
core
“IntelliThreads” – Spread work among cores to execute in
single threaded mode – Scheduling to Maximize Thread
Performance (T0 = ST, T0/T1 = SMT2,T0/T1/T2/T3 = SMT4)
LPAR-wide SMT controls
© 2010 IBM Corporation10
– ST, SMT2, SMT4 modes – smtctl command
XRSET - Exclusive RSET – CPU set that only allows attached
threads/processes – STRSET Attribute allows CPUs in RSET
to run ST mode
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 11/42
P7 Utilization Views
On P5 / P6, 1 busy thread made core appear fullyutilized
“useme” SMT thread gets 100%PURR charge, Idle thread gets 0%
© 2010 IBM Corporation11
2-core P5, 1 “useme” threadConsumes 50% of 2 CPUs
Available Capacity of Idle SMT thread inSMT2 Mode not apparent
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 12/42
P7 Utilization Views
P7 Adds Weighting of Idle SMT ThreadsThis view from SMT4 Mode
“useme” SMT thread gets 62% PURRcharge, Idle threads gets 13% each
© 2010 IBM Corporation12
2-core P7, 1 “useme” threadConsumes 31% of 2 CPUs
Shows while in SMT4 Mode that the core has more capacity todo work
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 15/42
POWER7 Storage Keys
POWER7 Extends the Granularity of Storage Key Protection – Up to 32 concurrent isolation domains (extends from 8 on P6, 16 on P6+)
• 7 of those available for User/App Keys (only 2 on P6) – Lightweight protection transitions for Applications (no system calls required)
• User Writeable AMR (Authority Mask Register)• Improved performance for apps exploiting keys
• No API changes, exploitation within system library (libc)AIX 6.1and 7.1 use Keys for Kernel Address Space Isolation/ProtectionApplications can leverage for more granular Data Isolation/ProtectionReference: Storage Protection Keys White paper
ftp://ftp.software.ibm.com/common/ssi/sa/wh/n/psw03013usen/PSW03013USEN.PDF
© 2010 IBM Corporation15
UserCode
UserData
Files
WS DB2KernelCode
KernelData
JFS2 LVM VMM . . . SCSI ENT FC . . . PPath Artic VxFS . . .
ApplicationAddress SpaceAIX Drivers Third Party DriversAIX Kernel
AIX Kernel Address Space
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 16/42
Active Memory Expansion – POWER7 and AIX 6.1/7.1
AMELPAR LPAR LPAR
LPAR LPAR LPAR
LPAR LPAR
LPAR
LPAR LPAR
LPAR
LPAR
LPAR
LPAR
LPAR LPAR LPAR
System PhysicalMemoryEnable more LPAR’s per server
– Existing LPAR’s physical memory sizes can be reduced – Free memory capacity can be used to create more LPAR’s
System PhysicalMemory
• Expand memory capacity through in-memory data compression• AIX compresses/decompresses data based on memory accesses• Memory compression is transparent to applications• Configurable via a new LPAR “memory expansion” attribute on Power7
© 2010 IBM Corporation16
LPAR LPAR
LPAR LPAR
LPAR
LPAR
LPAR LPAR LPAR
LPAR ….
Increase a LPAR’s effective memory capacity
– Active memory expansion can increase the effective memory capacity of a LPAR
– Enabling active memory expansion for a LPAR and keeping
the LPAR’s physical memory size unchanged increases the effective memory available to a workload AME
LPAR’s EffectiveMemory Capacity
Physical MemoryPhysical Memory
LPAR’s EffectiveMemory Capacity
ExpandedMemory Capacity
AME is an AIX based technology that will be offered as a P7 H/W feature
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 17/42
Without Active Memory ExpansionPartition utilization
– Memory: 100 % (18 GB) – CPU: 46% (12 cores in LPAR)
Memory capacity is the bottle-neck – CPU is under-utilized
With Active Memory ExpansionPartition utilization
– Memory: 100% (18 GB ) – CPU: 88% (12 cores in LPAR) Note: Most of the
CPU increase is due to additional throughput
Higher throughput enabled with the sameamount of physical memory
– Gain 37% memory capacity
AIX on POWER7 Advantage:SAP ERP Workload with Active Memory Expansion
© 2010 IBM Corporation17
Note: This is an illustrative scenario based on using a sample workload. This data represents measured results in a controlled labenvironment. Your results may vary.
Max Partition throughput: 99 tps1000 Simulated Users
12-core POWER7 partition
18 GB Memory18 GB true .0 GB expanded
Max Partition Throughput: 166 tps1700 Simulated Users+ 65%
Expanded Memory
12-core POWER7 partition
24.7 GB Memory18 GB true .6.7 GB expanded
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 18/42
AIX V2 & V3Establishment inthe market:
AIX V4.1/4.2SMP Scalability:-
AIX V4.3Higher levels of
scalability:
19861986--19921992 19941994--19961996 19971997--19991999
Flexible Resource
AIX Evolution – Over Twenty years of Progress
AIX/6000
AIX 7Future of UNIX:-256 core/1024 tread
2010201020012001--20022002
AIX 5L V5.3Advanced
Virtualization:
20042004--20052005
AIX 5L V5.1/5.2
20072007
AIX 6Enterprise RAS:-POWER6 support
© 2010 IBM Corporation18
Network Centric Computing
- RISC Support
- UNIX credibility- Open Sys. Stds..- Dynamic Kernel- JFS and LVM- SMIT
AIX V3.2.5
Maturity:- Stability- Quality
.- 4-8 way SMP- Kernel Threads- Client/Server pkg- NFS V3- CDE- UNIX95 branded- NIM- > 2GB filesystems-HACMP Clustering- POSIX 1003.1,1003.2, XPG4- Runtime Linking- Java 1.1.2
- 24-way SMP
- 64-bit HW support- 96 GB memory- UNIX98 branded- TCP/IP V6- IPsec- Web Sys. Mgr.- LDAP Dir. Server.- Workload Mgr- Java JDT/JIT
- Direct I/O- Alt. Disk Install- Exp/Bonus CDs
Distributed Client-Serve r
anagemen :- POWER4+ spt.- Dynamic LPAR- Dynamic CUoD- New 64bit kernel- 512GB mem- JFS2- 16 TB filesystems- UNIX03 branded- Concurrent I/O
- MultiPath I/O- Flex LDAP Client- XSSO PAM spt
e-Business Computing
Open Systems Workstations Uni-processor 4-8 way SMP 24-way SMP 32-way SMP
scalability
-POWER7Exploitation-Domain basedRBAC- AIX ProfileManager-WPARenhancements-AIX 5.2 in a WPAR
-PowerVMvirtualized storage-LVM SSD support-Terabyte segment
On Demand Business
64/256-way SMT
- POWER5 support
- 64-way SMP- SMT- MicroPartitions ™- Virt I/O Server- Partition Load Mgr- NFS Version 4- Adv. Accounting- Scaleable VG- JFS2 Shrink
- SUMA- SW RAS features- POSIX Realtime
Smarter Planet
-Workload Partitions
-Application Mobility-Continuous Avail.-Storage Keys-Dynamic tracing-Software FFDC-Recovery Rtns-Concurrent MX
-Trusted AIX-RBAC
-Encrypting JFS2-AIX Security Expert-Director Console
New Enterprise Data Center
1024-way SMT4
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 19/42
AIX EditionsAIX is available in three different editions:
– AIX Standard Edition
• Suitable for most UNIX workloads • Vertical scalability up to 64 cores (256 with AIX 7)
– AIX Enterprise Edition• AIX plus enterprise management • Includes AIX Standard Edition lus
AIX StandardEdition
AIX EnterpriseEdition
© 2010 IBM Corporation19
Systems Director Enterprise Edition and the Workload Partitions Manager for AIX • Vertical scalability up to 64 cores (256 with AIX 7)
– AIX Express Edition• Lower priced edition targeted a low end servers and
consolidation of smaller workloads on larger servers • Includes most of the functionality of AIX Standard Edition • Vertical scalability is limited to 4 cores and 8GB of memory per core in a single partition • Clients can use multiple AIX Express Edition partitions in a single larger server
Clients can mix multiple AIX editions in the same server
AIX ExpressEdition
Note: AIX V5.3 is only available in a Standard Edition
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 20/42
AIX Express can improve the economics of consolidation
Example: Consolidate eight 4-way POWER6 520s into a 24 way POWER7 770
With AIX Express
AIX License + SWMA
List price 24 cores x $1,000Total (list) $24,000
© 2010 IBM Corporation20
Old price with AIX Standard Edition
AIX License + SWMA
List price 24 cores x $1,950Total (list) $46,800
(U.S. prices shown)
,(U.S. prices shown)
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 21/42
Workload-Optimizing Systems
– Vertical scalability for massive workloads with up to 256 cores/1024 threads in a single AIX partition
Virtualization without limits
AIX 7 -- The Future of UNIX
© 2010 IBM Corporation21
– .
Resiliency without downtime – Built in clustering to simplify configuration and management of scale-out
workloads and high availability solutions
Management with Automation – Profile based configuration management eases the management
of pools of AIX systems
*All statements regarding IBM's future direction and intent are subjectto change or withdrawal without notice, and represent goals and objectives only.
Some features require the purchase of additional software components.
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 22/42
AIX Binary Compatibility - GuaranteedAIX has provided Binary Compatibilityacross multiple versions of AIX as amatter of policy
AIX 7 is binary compatible with AIX 6and AIX 5
– Current applications will continue to run – Runs on POWER4™ PPC-970™ POWER5™
© 2010 IBM Corporation22
POWER6, POWER7
Multiple upgrade paths via existingAIX tools
– Alt disk installation, NIM, etc.
Applications created on twenty yearsago can still run today
For full details on AIX Binary Compatibility see http://www-03.ibm.com/systems/power/software/aix/compatibility/guarantee/index.html
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 23/42
AIX Scalability Evolution
256256
10241024ThreadsThreads
© 2010 IBM Corporation23
AIX/6000UniprocessorUniprocessor
2424ThreadsThreads
44--88ThreadsThreads
ThreadsThreads
3232--128128ThreadsThreads
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 24/42
AIX Scaling on P7AIX Release / TL Max Processors / Threads
Supported
P6 Mode P7 ModeAIX 5.3 TL9, TL10, TL11,TL12
64 / 128 N/A
© 2010 IBM Corporation24
AIX 6.1 TL2, TL3 64 / 128 N/A
AIX 6.1 TL4, TL5 64 / 128 64 / 256
AIX 7.1 64 / 128 256 / 1024
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 25/42
IBM Power Systems
AIX 7 Hardware Enablement and SupportTerabyte Segment support
– Designed to improve performance for workloads that use large amounts of memory
AIX kernel memory pinning – AIX 7 memory pinned by default to enhance performance Hardware acceleration for Encrypting Filesystems, IPSec and TrustedExecution
© 2010 IBM Corporation25
– e uce processor wor oa or encryp on
Solid State Disk Support – SSD only VGs – filemon enhancements to identify SSD candidates – Filesystem enhancements for individual File monitoring
– Filesystem scalability enhancements.Shared Memory interface to Barrier Synchronous Register
– Reduce need for kernel extensions for BSR access topas enhancements for Active Memory Expansion
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 26/42
IBM Power Systems
AIX Workload Partitions (WPAR)WPARs can save administratorwork by reducing the number ofAIX instances to patch
WPARs have much lowermemory resourcerequirements: 68 MB vs 1GBfor an LPAR
Virtualized AIX operatingsystem environments within asingle AIX image
Each WPAR shares the singleAIX operating system
Applications and users inside aWPAR cannot affect resources
WorkloadPartition
ApplicationServer
WorkloadPartitionBilling
AIXglobal Instance
WorkloadPartition
ApplicationServer
WorkloadPartitionBilling
AIXglobal Instance
Top reasons to use WPARs What is it?
© 2010 IBM Corporation26
WPAR takes seconds to createand LPARs minutes
Application mobility muchsimpler to organize than LPM
Lots of WPARs on one AIX is
simpler to monitor and controlthan monitoring across manyLPARs.
Rapid cloning is easy and letsyou use "disposable images" -simple to create, experimentand throw away
outside the WPAR
Each WPAR can have aregulated share of processor,memory and other resources
Two types of WPAR
- System WPARs have separatesecurity and appear like acompletely separate OS
- Application WPARs aremanageability wrappers arounda single application
WorkloadPartition
WebServer
WorkloadPartition
TestWorkloadPartition
BI
NetworksDisk or NFS storage
WorkloadPartition
WebServer
WorkloadPartition
TestWorkloadPartition
BI
NetworksDisk or NFS storage
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 27/42
AIX 5.2 WPARs for AIX 7
Customer Value – Minimize effort to consolidate old environments on
new, more efficient hardware
– Allows clients who must stay on AIX V5.2 to move up to POWER7
– Enables advanced capabilities such as SMT4, Live
New offering that enables consolidation of existing AIX 5.2 environments inside of an AIX 7 Workload Partition on POWER7
AIX 5.2 VersionedEnvironment
AIX 7 Native Environment
/usr /opt
/usr /opt /usr
/opt
mks sb
© 2010 IBM Corporation27
pp ca on o y an ve ar on o y.
Features – Allows a legacy AIX 5.2 environment to be run inside
a WPAR on POWER7 systems with AIX 7
– Simply back up existing environment and restore inside of an AIX 7 WPAR
– This offering will also provide how-to and limited defect support for the AIX 5.2 operating system
– Managed via IBM Systems Director WorkloadPartitions Manager
*All statements regarding IBM's future direction and intent are subjectto change or withdrawal without notice, and represent goals and objectives only.
Some features require the purchase of additional software components.
AIX 5.2 WPARs for AIX 7 will be a separately charged product built on AIX 7 AIX 5.2 WPARs for AIX 7 will be a separately charged product built on AIX 7
POWER7
5.2 syscall compatibility layer AIX 7 native syscalls
A//var/tmp/home
B//var/tmp/home
D//var/tmp/home
C//var/tmp/home
AIX 7 Kernel
backup
fromAIX 5.2legacysystem
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 28/42
IBM Power Systems
WPAR EnhancementsExport of Fibre channel adapters to WPARs
– NPIV-like, but can work on any Fibre Channel adapter
– Adds support for Fibre Channel tape
Kernel Extensions for WPARs
© 2010 IBM Corporation28
– – Extensions can be only for one WPAR or for entire system
Support for VIOS disks in WPARs (also in AIX 6.1 TL6)
– Long requested feature
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 29/42
Cluster Aware AIX
Easily create clusters of AIX instances for scale-out computing or high availability
Designed to:
– Significantly simplify cluster configuration, construction, and maintenance
–
Designed to simplify construction and management of clusters of AIX systems for scale-out computing and high availability
© 2010 IBM Corporation29
– Capabilities such as common device naming help simplify administration
– Built in event management and monitoring
A foundation for future AIX capabilities and PowerHA SystemMirror V7
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 30/42
Cluster Aware AIX ExploitersPowerHA
System MirrorTSA Power LPARManagement
IBMStorage HPC
DB2 IBMDirector
VIOS
Monitoring
Group Services
Cluster Admin
Resource Mgr Services
Bundled Resource Managers
Messaging
Legacy RSCT
RSCT Consumers
Monitoring
Group Services
Cluster Admin
Resource Mgr Services
Bundled Resource Managers
Messaging
RSCT With Cluster Aware AIX
© 2010 IBM Corporation30
Legacy AIX
ClusterMonitoring Cluster CFGRepositoryClusterMessaging ClusterMonitoring Cluster CFGRepositoryClusterMessaging
Cluster Aware AIX
ClusterRepository
ClusterMessaging
ClusterMonitoring
ClusterEvents
CAA APIs and UIs
Redesigned Layers Integrated to CAA Capabilities
RSCT and Cluster Aware AIX together provide the foundation of strategic Power Systems SW
RSCT-CAA integration enables compatibility with a diverse set of dependent IBM products
RSCT integration with CAA extends simplified cluster management along with optimized and robustcluster monitoring, failure detection, and recovery to RSCT exploiters on Power / AIX
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 31/42
PowerHA SystemMirror 7.1 Standard Edition represents thenext generation of solutions for High Availability.
✓ Based on Cluster Aware AIX for kernel based HA technology✓ Systems Director based management for simple, centralized cluster administration✓ Smart Assists for out the box HA deployment of SAP and other popular applications
PowerHA SystemMirror (formerly HACMP)
© 2010 IBM Corporation31
✓ Advanced resource group policies for automated recovery sequencing✓ Available for AIX 7.1 and AIX 6.1 Technology Level 6
PowerHA SystemMirror 7.1 Enterprise Edition expandsstorage options for multi-site HA/DR
✓ IBM DS8000® Metro Mirror, SVC Metro Mirror & Global Mirror✓ IBM DS8700® Global Mirror✓ EMC SRDF✓ Hitachi Truecopy
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 32/42
AIX 7 Profile Manager (Formerly AIX Runtime Expert)
Simplified configuration using the AIX Profile Manager
Systems Director plug-in that is designed to simplify consistent AIX configuration across multiple systems
Traditional server configuration
OS Configuration and Tuning
Environment VariablesBoot LV Settings
CLI Utilities
XML Profiles
Env var XYZ=“Yes”AIX security profile
© 2010 IBM Corporation32
System NSystem A System N System C
SetExtract Compare
Configuration Files
Apply and maintain approachesScripts, ftp, rsh, ssh, documentation,3rd party tools, mksysb, etc.
System A System NSystem BSystem A System NSystem B
.tuneable N
Env var XYZ=“Yes”AIX security profiletuneable N
Env var XYZ=“Yes”AIX security profiletuneable N
Env var XYZ=“Yes”AIX security profiletuneable N
System Administrator System Administrator
Systems N
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 34/42
AIX Role Based Access Control (RBAC) with Domains
Can reduce the cost and complexity of securityadministration by allowing secure delegation ofadministrative tasks to non-privileged users
Enables a more secure IT infrastructure byreducing the need for so many privilegedadministrators
A capability of AIX that allowsprivileged administration tasks tobe delegated to non-privileged
usersAccess to system resources are
associated with roles that areassigned to non-privileged users
How it can help? What is it?
Users Users Roles
AIX Resources
AIX Resources
DBACompany A
DBACompany Z
Company AData
© 2010 IBM Corporation34
ss gn ng ro es to programs can re uce t eneed for security exposures such as the use ofsetuid for programs
Allows for new ways to delegate administrationduties between system administrators and non-administrative users
Many roles are predefinedwhich can reduce the effort ofimplementing RBAC
Roles can also be associatedwith programs
Domain access can further limitadministrators to only work withresources for a particularorganization (AIX 7)
BACKUP Company A
BACKUP Company Z
Company Z Data
Domain supportProvides more granularityfor multi-tenant IT shops
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 35/42
AIX & Power Systems Security Certifications
AIX 5200-06 CAPP/EAL4+Application: 01/11/05Final report: 10/26/05Certificate: 12/14/05
AIX 5L 5200-05 andPitbull LSPP/EAL4+
Application :01/11/05Certificate issued: 05/16/06
AIX 5300-05LSPP/EAL4+
Pitbull product Supports P5, P4Certificate issued: 12/19/06
Pitbull MLS Ported toAIX 5300-03
Pitbull product available tocustomers Dec 31, 05
AIX 7100-00)CAPP/RBACPP/LSPP/EAL4+
Supports P7, P6, P5, P4
AIX 6100-00)CAPP/RBACPP/LSPP/EAL4+
MLS capabilities integratedinto standard AIX product
One certification for 3Protection Profiles
2006 2007 20102005
© 2010 IBM Corporation35
AIX 5300-04 CAPP/EAL4+Supports P5, P4Certificate issued: 12/19/06
Legend AIX V5.2AIX V5.3AIX 6AIX 7 (Planned)VIOSPOWER6
Certification History AIX 4.2 C2 : Apr 24, 1997AIX 4.3 C2 : May 6, 19987AIX 5.2 CAPP/EAL4+ : Nov 4, 2002POWER4 HW CAPP/EAL4+ : Apr 2003AIX 5.2 ML1 CAPP/EAL4+ : Sept 8, 2003
AIX 5.2 ML6 CAPP/EAL4+ : Dec 14, 2005AIX 5.2 ML5 and Pitbull LSPP : May 16, 2006AIX 5.3 TL5 and Pitbull LSPP : May 16, 2006AIX 5.2 TL4 & VIOS CAPP/EAL4+ : Dec 16, 2006POWER6: Dec, 2007AIX 6: May 26, 2008
VIOS EAL4+Included with AIX 53.00-04
CAPP/EAL4+
POWER6 HardwareEAL4+
Dynamic LPAR withMicroPartitioning
, ,
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 36/42
Why should clients move up to AIX 7 or AIX 6More performance on POWER7 – AIX 7 and AIX 6 can provide substantially more performance on POWER7 than AIX V5.3 – AIX 7 supports massive workloads with up to 256 cores / 1024 threads
Access to new features – Capabilities like WPARs, Role Based Access Control, AIX Profile Manager are designed to improve
security and administrative efficiency
AIX V5.3 is nearing End of Life – End of Marketing announced effective April 2011
© 2010 IBM Corporation36
AIX 7 will support running AIX 5.2 in a WPAR – Excellent way to consolidate old workloads running on less efficient hardware
It’s FREE! – Customers with software maintenance agreements (SWMA) can upgrade for no additional charge
within an Edition: AIX 5.3 to AIX 7 Standard edition,AIX 6 Express Edition to AIX 7 Express Edition, etc,
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 37/42
Power your planet.Smarter systems for a Smarter Planet.
BACK-UP CHARTS
© 2010 IBM Corporation37
8/6/2019 Power7 and Aix7
http://slidepdf.com/reader/full/power7-and-aix7 42/42
Notes on performance estimatesrPerf for AIX
rPerf (Relative Performance) is an estimate of commercial processing performance relative to other IBM UNIX systems. It is derived from anIBM analytical model which uses characteristics from IBM internal workloads, TPC and SPEC benchmarks. The rPerf model is notintended to represent any specific public benchmark results and should not be reasonably used in that way. The model simulates some ofthe system operations such as CPU, cache and memory. However, the model does not simulate disk or network I/O operations.
rPerf estimates are calculated based on systems with the latest levels of AIX and other pertinent software at the time of systemannouncement. Actual performance will vary based on application and configuration specifics. The IBM eServer pSeries 640 is thebaseline reference system and has a value of 1.0. Although rPerf may be used to approximate relative IBM UNIX commercial processingperformance, actual system performance may vary and is dependent upon many factors including system hardware configuration andsoftware design and configuration. Note that the rPerf methodology used for the POWER6 systems is identical to that used for thePOWER5 systems. Variations in incremental system performance may be observed in commercial workloads due to changes in theunderlying system architecture.
All performance estimates are provided "AS IS" and no warranties or guarantees are expressed or implied by IBM. Buyers should consultother sources of information, including system benchmarks, and application sizing guides to evaluate the performance of a system they areconsidering buying. For additional information about rPerf, contact your local IBM office or IBM authorized reseller.
© 2010 IBM Corporation42
Revised April 2, 2007
========================================================================
CPW for IBM i
Commercial Processing Workload (CPW) is a relative measure of performance of processors running the IBM i operating system.Performance in customer environments may vary. The value is based on maximum configurations. More performance information isavailable in the Performance Capabilities Reference at: www.ibm.com/systems/i/solutions/perfmgmt/resource.html