AIX 5.3 Update · AIX 5L 5.3 LPAR Support Hardware Management Console (HMC) Increase physical resource utilization though virtualization of processors, memory, and disk resources

© 2004 IBM Corporation

IBM eServer™

AIX 5.3 Update

PLANS SUBJECT TO CHANGE WITHOUT NOTICE

Tom MathewsAIX Architecture

IBM ^


IBM eServer™

AIX 5L 5.2 Updates1H04 ML3

POWER Blade support High density blade computingIP over Fiber Channel Additional connectivityiSCSI support Supported release of ISCSI for AIX

2H04 ML4POWER5 support Next Generation hardware

(w/o SMT support)JFS2 Performance and RAS Improved scalabilty and reliabilityPOSIX Realtime subset Easier application porting EWLM enabling Cross LPAR/server workload mgmt


IBM ^


IBM eServer™

AIX 5L 5.3 LPAR Support

Hardware Management

Console(HMC)

Hardware Management

Console(HMC)

Increase physical resource utilization though virtualization of processors, memory, and disk resources

POWER Hypervisor

Linux AIX 5.2 AIX5.3

I/OStorage Network

LAN, WAN, ...LAN, WAN, ...

DynamicallyResizable


4 CPUs

8CPUs

6CPUs

I/OStorage Network

I/OStorage Network

Increased number of LPARs• AIX support for 64 “dedicated” partitions


AIX

5.3

6 CPUs

VirtualDisksVirtualDisks

Virtual I/O (disk)• Client partitions can use logical disks

hosted by another partition.




VirtualDisksVirtualDisksVirtualDisks



VirtualDisks



I/OStorage Network

I/OStorage Network

I/OStorage Network

I/OStorage Network

8 CPUs

Hosting PartitionAIX5.3

AIX

5.3

Linu

xA

IX 5

.3Li

nux

AIX

5.3

Micro Partitioned LPARs• A single processor might be shared by up to

10 partitions

• Support for up to 254 SPLPAR partitions

• Requires Power5 and new Power HypervisorAI

X 5

.3Li

nux

AIX

5.3

Linu

xA

IX 5

.3


10 partitions


• Requires Power5 and new Power Hypervisor

Virtual inter-partition Ethernet• Virtual Ethernet - LPARs can communicate

without having to use a physical I/O adapter

• Ethernet Sharing - LPARs can share external network connection

IPSwitch




IPSwitch




IPSwitch

Virtual I/O paths

Increased number of LPARs64 "dedicated" AIX partitions

Micro Partitioned LPARsA single processor might be shared by up to 10 partitionsSupport for up to 254 SPLPARsRequires POWER5 system and POWER5 Hypervisor

Virtual inter-partition EthernetVirtual Ethernet - LPARs can communicate without having to use a physical I/O adapterEthernet Sharing - LPARs can share external network connection

Virtual I/O (disk)Client partitions can use logical disks hosted by another partition

1 CPU 6 CPUs


IBM ^


IBM eServer™


Hardware Management

Console(HMC)

Hardware Management

Console(HMC)


POWER Hypervisor


I/OStorage Network




4 CPUs

8CPUs

6CPUs

I/OStorage Network

I/OStorage Network



AIX

5.3

6 CPUs










VirtualDisks



I/OStorage Network

I/OStorage Network

I/OStorage Network

I/OStorage Network

8 CPUs


AIX

5.3

Linu

xA

IX 5

.3Li

nux

AIX

5.3


10 partitions



X 5

.3Li

nux

AIX

5.3

Linu

xA

IX 5

.3


10 partitions






IPSwitch




IPSwitch




IPSwitch

Virtual I/O paths

1 CPU 6 CPUs

AIX

5.3

Linu

xA

IX 5

.3Li

nux

AIX

5.3

Micro Partitioned LPARs• A single processor might be shared by up to 10 partitions



• Automatic CPU load balancing

AIX

5.3

Linu

xA

IX 5

.3Li

nux

AIX

5.3

Micro Partitioned LPARs• A single processor might be shared by up to 10 partitions



• Automatic CPU load balancing


IBM ^


IBM eServer™


Hardware Management

Console(HMC)

Hardware Management

Console(HMC)


POWER Hypervisor


I/OStorage Network




4 CPUs

8CPUs

6CPUs

I/OStorage Network

I/OStorage Network



AIX

5.3

6 CPUs










VirtualDisks



I/OStorage Network

I/OStorage Network

I/OStorage Network

I/OStorage Network

8 CPUs


AIX

5.3

Linu

xA

IX 5

.3Li

nux

AIX

5.3


10 partitions



X 5

.3Li

nux

AIX

5.3

Linu

xA

IX 5

.3


10 partitions






IPSwitch




IPSwitch




IPSwitch

Virtual I/O paths

1 CPU 6 CPUs

Virtual inter-partition Ethernet• VLAN connection between LPARs –

Gigabit speeds or higher

• Virtual Ethernet “devices” defined by HMC

• Each Virtual Ethernet can be associated with up to 18 VLANs

• Supported by POWER Hypervisor on Power5


IBM ^


IBM eServer™


Hardware Management

Console(HMC)

Hardware Management

Console(HMC)


POWER Hypervisor


I/OStorage Network




4 CPUs

8CPUs

6CPUs

I/OStorage Network

I/OStorage Network



AIX

5.3

6 CPUs










VirtualDisks



I/OStorage Network

I/OStorage Network

I/OStorage Network

I/OStorage Network

8 CPUs


AIX

5.3

Linu

xA

IX 5

.3Li

nux

AIX

5.3


10 partitions



X 5

.3Li

nux

AIX

5.3

Linu

xA

IX 5

.3


10 partitions






IPSwitch




IPSwitch




IPSwitch

Virtual I/O paths

1 CPU 6 CPUs

Ethernet Sharing• Hosting Partition provides Layer 2 switch

to route traffic between internal Virtual Ethernet and external network connection(s)

• Supports TCP/IP, UDB, Netbios, etc.

• Multiple network adapters can be aggregated (ex. 802.3ad Etherchannel) for greater capacity and reliability

• Each adapter supports up to 16 VLANs

EthernetSharing


IBM ^


IBM eServer™


Hardware Management

Console(HMC)

Hardware Management

Console(HMC)


POWER Hypervisor


I/OStorage Network




4 CPUs

8CPUs

6CPUs

I/OStorage Network

I/OStorage Network



AIX

5.3

6 CPUs










VirtualDisks



I/OStorage Network

I/OStorage Network

I/OStorage Network

I/OStorage Network

8 CPUs


AIX

5.3

Linu

xA

IX 5

.3Li

nux

AIX

5.3


10 partitions



X 5

.3Li

nux

AIX

5.3

Linu

xA

IX 5

.3


10 partitions






IPSwitch




IPSwitch




IPSwitch

Virtual I/O paths

1 CPU 6 CPUs

EthernetSharing

Virtual SCSI Disk• Client partitions can use logical disks

hosted by I/O Server partition.

• Client Disk can be an entire physical disk or only a portion (logical volume on server)

• Actual physical storage on server can be disk drives or SAN storage

• Virtual disks “look like” SCSI disks to the client

• Support for AIX 5.3 and Linux clients


IBM ^


IBM eServer™

Policy-based, automatic partition resource tuningDynamically adjust CPU, memory allocation, & SPLPAR virtual processorsSupported by AIX 5.3 and (future) Linux partitions

AIX 5L 5.3 Partition Load Manager

Before resource tuningBefore resource tuning After resource tuningAfter resource tuningCPU CPU CPUCPUCPU CPUCPU CPUCPU

1CPU

TestLPAR

RSM Agent

1CPU

TestLPAR

RSM Agent

3 CPU

CRMLPAR

RSM Agent

3 CPU

CRMLPAR

RSM Agent

10 CPU

FinanceLPAR

RSM Agent

10 CPU

FinanceLPAR

RSM Agent

CPU CPU CPUCPU CPU CPU

3 CPU

TestLPAR

RSM Agent

3 CPU

TestLPAR

3 CPU

TestLPAR

RSM Agent

5 CPU

CRMLPAR

RSM Agent

5 CPU

CRMLPAR

5 CPU

CRMLPAR

RSM Agent

6 CPU

FinanceLPAR

RSM Agent

6 CPU

FinanceLPAR

6 CPU

FinanceLPAR

RSM Agent

Unbalancedresourceallocation

Unbalancedresourceallocation

Adjustresourceallocationbased on businesspriority

Adjustresourceallocationbased on businesspriority


IBM ^


IBM eServer™

AIX 5L 5.3 Advanced Accounting

Single OS Image User programs are placed in classes

Classification basis: Application Name and/or User Measure and record resources utilization such as

CPU

Accounting Proj = APrograms

Accounting Proj = BPrograms

AccountingProj = CPrograms

LPAR A / OS Image AAccounting Class = A

Measure resources (such as CPU) utilization for the LPAR in which OS is running

Record resource info into accounting records

LPAR B / OS Image BAccounting Proj = B

Hypervisor

LPAR C /OS Image CAccounting

Proj =C

No Change to middleware or applications are needed

Application-based Accounting

Used to charge back resource usage From different applications within a systemor LPAR

Used to charge back the resources usedby an entire LPAR

LPAR-based Accounting

Provides detailed selectable accounting records at selectable intervalsmultiple record types (i.e. process, file system, system)records to be collected are selectable aggregation option to reduces amount of data collecteddelta accounting records cut at system admin specified intervals

System admin defined projects and project assignment rulesprojects are billable entities like user, department, etc. and are recorded in account recordsprojects can be assigned on the basis of user, group, or application (pathname)users & groups can be assigned project lists and select the effective project

APIs to allow applications and middleware to generating accounting records


IBM ^


IBM eServer™

AIX 5.3 Advanced Accounting Model

Seperate from Unix Accounting UtilitiesUses Pre-allocated and pre-formatted filesPrimarily focused on collecting resource usage data versus reporting capabilities

application accounting

data

system accounting

data

recorder functions and buffers

accounting files

customer or vendor

provided analysis

tools

reports, billing, etc.

middleware accounting

data

acct kproc(asynchronous to

data input)


IBM ^


IBM eServer™

NFS V4 staged supportJFS2 online file system shrinkQuotas for JFS2

Users and/or groupsLimit classes for ease of administration

LVM support for 1024 disk volume group New VG type “scalable”

Scalability enhancements for J2 fsck and logredoIncreased I/O throughput for large block operationsVirtual SCSI host and client support for LPARService Location Protocol (SLP) support for iSCSI“Common Host Bus Adapter" (HBA) API version 2

AIX 5L 5.3 Enterprise Storage Standards-based support for current and emerging storage environments


IBM ^


IBM eServer™

New protocol developed under IETF framework (RFC 3530) Contains mandatory and optional features w/most advanced features optionalKey protocol feature areas are security and geographic sharing

strong authenication and authorizationmulti-domain user identitydelegationelements for data replication and migrationelements for server global name space

Protocol mandates TCPAIX 5.3 NFS V4 product focus

Security featuresKerberos V5 authenication - can also be used with NFS V3Support for NFSv4 ACLs in JFS2Support for foreign domain access via identity mapping

Compatibility with GPFSFor GPFS release later this yearGPFS release will support NFSv4 ACLS

Interoperability with other vendors

AIX 5L 5.3 NFSv4

NFSv4NFSv4NFSv4NFSv4PLANS SUBJECT TO CHANGE WITHOUT NOTICE

IBM ^


IBM eServer™

AIX 5.3 NFS V4 exceptions on manditory protocol features No SPKM or LIPKEY authentication mechanism support

Only Kerberos V5Limitations with UTF-8 aspects

Transmitted filesystem names not guaranteed to be UTF-8underlying filesystem must contain UTF-8 compliant names

Server and client do perform UTF-8 checking on incoming datanon UTF-8 environments may get errorsthis checking can be turned off with the nfso utility

AIX NFS V4 DirectionsDelegationFederated server name spaceClient and server support for data replication and migrationNetwork-based capabilites for data motion between serversNFS over RDMA

AIX 5L 5.3 NFSv4 (cont)

NFSv4NFSv4NFSv4NFSv4PLANS SUBJECT TO CHANGE WITHOUT NOTICE

IBM ^


IBM eServer™

Support for 64-way SMP configurations Internally appears as 128-way with SMT processors

254 Micro Partitions Up to 10 partitions per physical processor

POWER 5 Simultaneous Multithreading (SMT) 2 Logical processors per physical core

JFS2 additional scalabilityInstallation performance improvementsDynamic Large Page pool sizeEnhanced support for large device configurationsLVM support for 1024 disk volume group

New VG type “scalable”

AIX 5L 5.3 Scalability Support for larger SMP server environments and high performance computing workloads


IBM ^


IBM eServer™

2 hardware processor threads per POWER5 physical processor coreEach H/W thread looks like a logical processor to user & appsSeparate registers but some shared H/W resources between sibling H/W threadsOne H/W thread can be prioritized over its sibling

SMT is selectable at the system levelDynamically switchable between SMT and Single Threaded (ST) modeMode switch is a Dynamic Reconfiguration event - online/offline of logical procs

AIX kernel exploits H/W thread prioritiesReduce priority when a thread is doing unproductive kernel work (i.e. lock spins)Boost priority when a thread is holding a contended kernel lockDefault mode is for AIX to dispatch threads in user space with equal user priority

AIX performs H/W thread sensitive schedulingLoad work on primary threads before placing it on secondary threadsIdle secondary threads are snoozed (processor moved to ST mode) for improved thruput

AIX 5L 5.3 Simultaneous Multithreading (SMT) Support


IBM ^


IBM eServer™

Virtual Inter-partition Ethernet supportEthernet Sharing for Virtual Inter-PartitionService Location Protocol (SLP) supportStream Control Transmission Protocol (SCTP) supportIPv6 enhancements: DHCP and advanced sockets APIMultipath IP routing enhancementsImproved path MTU discoveryIPSEC with intervening NAT devices

AIX 5L 5.3 Networking Networking availability, manageability, and performance features


IBM ^


IBM eServer™

AIX 5L Security and Security Certification AIX5.2 Security enhancements

Pluggable Authentication Module (XSSO/PAM) enhancementsClient support for LDAP RFC2307 schemaPublic Key Infrastructure (PKI) and authentication via X.509 certificatestcbck host intrusion detection integration with Tivoli Risk ManagerOpen SSH update (on Bonus Pack)

CertificationsAIX 5.2 CAPP/EAL4+

Certification 11/2002, Updated for AIX5.2 ML1 9/2003

POWER4 LPAR firmware CAPP/EAL4+

Common Criteria certification completed 1/2004No dependency on OS running in the LPARs

AIX5.3 Security Remove 8 character ID, password limitNFSv4 ACLs: kernel, commands, libs, JFS2J2 filesystem ACL inheritancePAM direct authenticationAIX user/group LDAP exploitation of kerberosEnhanced Filtering for Network Security and Intrusion Detection

Planned Future Certifications LSPP/EAL4+ (aka MLS-security) for AIX5.2

POWER4 and POWER5 systems (TOE); targeted end-2004

CAPP/EAL4+ for POWER5 Hypervisor and AIX5.3

targeted evaluation end-2005


IBM ^


IBM eServer™

Better handling of spurious interruptsSingle Process TraceDVD support for system dumpsEnhanced First Failure Data Capture (FFDC)Enhanced Power management scripts SNAP interface to capture application dataConfigurable trace buffer size greater than 10MbytesCore file compression and other enhancementsError log hardeningConcurrent microcode update on POWER5 systemsI/O Drawer Dynamic configuration (vary-on/vary-off) (also in AIX5.2ML2)

AIX 5L 5.3 RAS Enhancement Improved system resilience though data capture, analysis and automated recovery


IBM ^


IBM eServer™

SUMA: Policy-based automated download of fixes from IBM to the customer’s fix distribution centerPolicy can include different type of fixes to retrieve

Specific APARAll Critical fixesFixes associated with a particular filesetI/O Server fixes

(for Micropartitions)All fixesEntire Maintenance LevelSpecific PTFSecurity Fixes

Notification of requestor via emailSMIT or command line interface

AIX 5L 5.3 System Management Service Update Management Assistant (SUMA)


IBM ^


IBM eServer™

NIM EnhancementsNIM communications security

Security replacement for rsh, client server secure portsHighly Available NIM

Highly available NIM – NIM backup masterPost install configuration of Etherchannel and Virtual IP AddressPre and Post migration scripts support

NIM on Linux (NIMoL for POWER and Intel) Subset of functionality, especially to particularly support blade environment

eManager – EFIX management enhancementsSecurity Scrubbing – 'Wipe clean' a drive prior to installWeb-based SM support for Virtualization and Advanced Accounting

AIX 5L 5.3 System Management Tools for managing your systems environment


IBM ^


IBM eServer™

AIX 5L 5.3 Affinity

POSIX Realtime APIsGNOME desktop 2.4Removal of 8 character userid and password limitLinker/Loader compatibility enhancementsdbx enhancementsLDAP server-side authenticationman page formattinggrep, awk, vi line length expansionpasswd-adjunct NIS mapNFS v4CSM integration with IBM Director+= operator for make

Increased productivity for pSeries administrators and developers Facilitates migration and co-existence

VUNIXSystem

®VUNIXSystem

®UNIXSystem

®


IBM ^


IBM eServer™

AIX 5L 5.3 Development Environment

“procmon” process performance monitoring toolDebug malloc enhancements - thread debugLinker/Loader compatibility enhancementsDbx enhancements: disable/enable watchpointsNew malloc algorithmiostat support for AIOkdb enhancementsTrace GUI"Java aware" dbxJava 1.4.2 & 1.4.2.xJava 3D support for Java 1.4.2 & 1.4.2.xAIX development workbench

Included but not officially supported as a standalone application

Software development, debugging, and analysis tools


IBM ^


IBM eServer™

AIX 5L 5.3 Performance Tools

procmon : Process performance monitorConfigurable displayRun kill, renice, performance tools on processes

gprof and xprofiler support for threadsiostat support for Asynchronous I/Osar displays avwait & avserv disk metricsmpstat command to display logical processor statisticslparstat command to display configuration, utilizationlibperfstat support for micro-partitioning and SMTPMAPI: new tools and APIsTrace graphical interface

Java GUI version of trcrptConfigurable display

Software development, debugging, and performance analysis tools


IBM ^


IBM eServer™

AIX 5L 5.3 Commands and LibsMany minor command enhancements

“ps –T” to list all child processes, add “=+” operator to make“nohup” an existing processtimestamped shell histories cron logging controlsrecursive greptar recursion control New date formats,Restricted Korn shells

Man page formatting and enhanced support for html-based man pagesAdd getloadavg system callExpand max line length for grep, awk, vi, ed greater than 8096Fuser updatePerl upgrade from 5.8.0 to 5.8.2

$ ps -T 1PID TTY TIME CMD

1 - 0:00 init4156 - 0:00 |\--shlap5722 - 0:00 |\--rgsr6014 - 0:00 |\--cron7246 - 0:00 |\--syncd7508 - 0:00 |\--errdemon8256 - 0:00 |\--n4bg8514 - 0:00 |\--n4rp9030 - 0:00 |\--nfsSM9932 - 0:00 |\--rpc.lockd

11974 - 0:00 |\--random14044 lft0 0:00 |\--ksh14340 - 0:00 |\--diagd17420 - 0:00 |\--uprintfd18394 - 0:00 \--srcmstr3964 - 0:00 |\--hostmibd4620 - 0:00 |\--rmcd

10388 - 0:00 |\--syslogd10670 - 0:00 |\--IBM.AuditRMd10924 - 0:00 |\--aixmibd11694 - 0:00 |\--rpc.statd12254 - 0:00 |\--writesrv13234 - 0:00 |\--biod13596 - 0:00 |\--qdaemon14326 - 0:00 |\--portmap15102 - 0:00 |\--sendmail15316 - 0:00 |\--inetd13024 - 0:00 | \--telnetd17892 pts/1 0:00 | \--ksh13332 pts/1 0:00 | \--ps15580 - 0:00 |\--snmpmibd15618 - 0:00 |\--IBM.ServiceRMd16302 - 0:00 |\--rpc.lockd17082 - 0:00 |\--IBM.CSMAgentRMd17338 - 0:00 |\--IBM.ERrmd18080 - 0:00 \--snmpdv3ne

ps -T example



IBM eServer™

© International Business Machines Corporation 2003 All Rights Reserved

Backup

IBM ^


IBM eServer™

AIX 5L 5.3 Advanced Accounting Data Records

Common Accounting records: Size of record, Accounting Project, Accounting subproject, Time record created

Single Process statisticsUser IDGroup IDProcess IDProcess strat time (sinece epoch)AIX WLM and EWLM class identifiersProcessed elapsed time (usecs)Combined thread elapsed time (usec)Combined threads CPU time (usec)Disk Pages usedReal pages usedVirtual memory usedBytes of I/O to JFS, JFS2Bytes of I/O to DFS, NFSNetwork bytes local (loopback)Network bytes to other systems

Process and Transaction Accounting records

Aggregated process statisticsStart time in secondsUser IDNumber of processes aggregatedProcessed elapsed time (usecs)Combined thread elapsed time (usec)Combined threads CPU time (usec)Disk Pages usedReal pages usedVirtual memory usedBytes of I/O to JFS, JFS2Bytes of I/O to DFS, NFSNetwork bytes local (loopback)Network bytes to other systems

note: Processes are aggregated by UID and accounting project


IBM ^


IBM eServer™


System CPU & MemoryNumber of CPUsEntitled capacityIdle timeProcess timeInterrupt timeMemory sliceLarge page - totalLarge page - in usePage insPage outsNumber of I/OsNumber of page steals

Filesystem statisticsTotal number of bytes transferredNumber of reads and writesNumber of Open operationsNumber of CreatesNumber of LocksFilesystem type

Physical Disk Activity Statistics

Total disk transfersTotal ReadsTotal WritesBlock size of diskDisk name

System/Partition Accounting Records


IBM ^


IBM eServer™


Lost Data recordingNumber of lost recordsMicroseconds of lost CPU timeTime data loss sterted

Virtual SCSI I/O Client statsServer Partition numberServer Unit IDDevice LUNBytes readBytes written

Virtual SCSI I/O Server stats

Client Partition numberServer Unit IDDevice LUNBytes readBytes written

Network Interface activityNetwork interface nameNumber of I/OsNumber of bytes transferred

System/Partition Accounting Records


IBM ^


IBM eServer™


Aggregated ARM transactionsStart time in secondsUser IDNumber of processes aggregatedProcessed elapsed time (usecs)Combined thread elapsed time (usec)Combined threads CPU time (usec)Disk Pages usedReal pages usedVirtual memory usedBytes of I/O to JFS, JFS2Bytes of I/O to DFS, NFSNetwork bytes local (loopback)Network bytes to other systems

Transaction Accounting Records


IBM ^


IBM eServer™

AIX 5L 5.3 Performance Toolsprocmon

process performancemonitor

Configurable displayRun kill, renice, and performance tools on active processes


IBM ^


IBM eServer™

AIX 5L 5.3 Development Environment

New POSIX Interfaces SupportedBarriersSpin LockClocksThread OptionsMemlockPriority SchedulingMessage PassingSemaphoresTimersAdvisory info

Software development, debugging, and analysis tools

POSIX®POSIX®


Documents

AIX 5.3 Update · AIX 5L 5.3 LPAR Support Hardware Management Console (HMC) Increase physical resource utilization though virtualization of processors, memory, and disk resources