Oracle Solaris Studio July, 2014
Total Page:16
File Type:pdf, Size:1020Kb
How to Increase Applicaon Security & Reliability with SoGware in Silicon Technology Angelo Rajuderai, SPARC Technology Lead, Oracle SysteMs Partners Ikroop Dhillon, Principal Product Manager, Oracle Solaris Studio July, 2014 Please Stand By. This session will begin promptly at the me indicated on the agenda. Thank You. Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 1 Safe Harbor StateMent The following is intended to outline our general product direcAon. It is intended for inforMaon purposes only, and May not be incorporated into any contract. It is not a coMMitment to deliver any Material, code, or funcAonality, and should not be relied upon in Making purchasing decisions. The developMent, release, and AMing of any features or funcAonality described for Oracle’s products reMains at the sole discreAon of Oracle. Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 2 Agenda 1 Hardware and SoGware Engineered to work together 2 SoGware in Silicon Overview 3 Security with Applicaon Data Integrity 4 Oracle Solaris Studio DevelopMent Tools 5 Q + A Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 3 The Unique Oracle Advantage Hardware and Software Engineered to Work Together One Engineering Team vs Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Application Accelerators In SPARC T5 The Integrated Stack Advantage One Engineering Team Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Partners Benefit froM Innovaon & Integraon All Software Benefit System Software Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle SPARC No Change in ABI Your exisng apps just run beer .. Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | The M7 Chip Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | • 32 SPARC Cores M7 Processor • Fourth Generaon CMT Core (S4) • Dynamically Threaded, 1 to 8 Threads Per Core • New Cache Organizaons • Shared Level 2 Data and InstrucAon Caches COREExtreMe CORE CORE CORE CLUSTER CLUSTER CLUSTER CLUSTER • 64MB Shared & ParAAoned Level 3 Cache PerforMance • DDR4 DRAM • Up to 2TB Physical MeMory per Processor INTERCONNECT INTERCONNECT • 2X-3X MeMory Bandwidth over Prior Generaons MEMORY CONTROL CONTROL MEMORY ACCELERATORS ACCELERATORS COHERENCE, SMP & I/O & I/O COHERENCE, SMP • PCIe Gen3 Support L3$ & ON-CHIP ACCELERATORS ACCELERATORS NETWORK • MEMORY CONTROL CONTROL MEMORY Applicaon Acceleraon • Real-AMe Applicaon Data Integrity • Concurrent MeMory Migraon and VA Masking CORE CORE CORE CORE • DB Query Offload Engines CLUSTER CLUSTER CLUSTER CLUSTER INTERCONNECT INTERCONNECT • SMP Scalability froM 1 to 32 Processors COHERENCE, SMP & I/O & I/O COHERENCE, SMP • Coherent MeMory Clusters • Technology: 20nM, 13ML Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 5 M7 Processor PerforMance Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 12 “… the UlAMate SoGware OpAMizaon is Hardware… John Fowler Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | SoGware Acceleraon Integrated into Hardware Over all Strategy to Move SoGware features into Hardware Database Query Application DB 12c Acceleration JVM OpAMizaon Acceleration Hardware • In MeMory •CoMpletely in OpAMizaon Moved to •Move SoGware opAMizaon to •Large MeMory hardware hardware •SoGware systeMs opAMizaon only HW SW Current • Work on • Comp DB tesAng Oracle Compress • MeMor TradiAonal Studio Hardware based ed data res- tools Tools sion y • low • Wire Bandwi • 200X • Reduced overhead Real time • Perf overhead overhead Data speed dth Application Uncompr Data Integrity Decompression Penalt LiMited ess y Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal Hardware SoGware & Silicon Engineered to Work Together Soware in Silicon Performance Reliability/Security DB In-MeMory Applicaon Data Acceleraon Engines Integrity Capacity Revolu8on, Compression Engines Not Evoluon! Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | List of SoGware in Silicon Features • Applicaon Data Integrity • Virtual Address (VA) Masking • Database Query Accelerator Engine • Fine Grain MeMory Migraon • On-Chip Uncompression Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal SoGware in Silicon Cloud Third Party developers can benefit froM the SoGware in Silicon • SoGware in Silicon Cloud available TODAY! • Access to M7 Hardware • Secure environMent to develop, build and test your applicaon with SoGware in Silicon features • Open to ISV Partners and CustoMer • Developer tools and IPS pkg repository included • “How to” Guides and technical support included • Need to sign Beta Legal AgreeMent Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal – Restricted 20 Safe Harbor StateMent The following is intended to outline our general product direcAon. It is intended for inforMaon purposes only, and May not be incorporated into any contract. It is not a coMMitment to deliver any Material, code, or funcAonality, and should not be relied upon in Making purchasing decisions. The developMent, release, and AMing of any features or funcAonality described for Oracle’s products reMains at the sole discreAon of Oracle. hpps://SWiSDev.Oracle.COM/ Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal – Internal/Restricted/Highly Restricted 16 MeMory CorrupAon – The ProbleM • Applicaons vulnerable to MeMory corrupAon caused by soGware error. • Major source of database and OS corrupAons and crashes • Databases and OS(s) have tens of Millions of lines of code, developed by distributed teams of thousands of developers, so errors introduced by a subsysteM could adversely affect one or More subsysteMs. • Buffer overflows are a Major source of security exploits • In-MeMory database increases exposure – terabytes of criAcal data in-meMory • MeMory corrupAon bugs are extreMely hard to find • VicAM thread finds corrupted data long aer corrupAon happens. Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal “… this is the Most iMportant thing we have done in Silicon in May be ever…” … because even sMart programMers Make Mistakes” Larry Ellison Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Applicaon Data Integrity • Near Real-AMe Data Integrity M7 M7 Core Pipeline ExecuAon MeMory & Caches Checking in Dev, Test & ProducAon version 64Bytes ld … • Version Metadata Associated with version 64Bytes st … version address version 64Bytes 64Byte Aligned MeMory Data version 64Bytes • Metadata Stored in MeMory, Maintained version 64Bytes Version MiscoMpare Throughout the Cache Hierarchy and All version 64Bytes Interconnects version 64Bytes version 64Bytes ld … • MeMory Version Metadata Checked st … version address Version MeMory Against Reference Version by Core Load/ Metadata Data Reference Store Units Versions • HW ImpleMentaon, Very Low Overhead Safeguards Against Invalid/Stale References and • Enables Applicaons to Inspect Buffer Overruns for Solaris and DB Clients FaulAng References, Diagnose and Take Appropriate Recovery AcAons Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal 13 Dramac ReducAon in over head with ADI Test Case: gcc compile Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal 20 Safe Harbor StateMent The following is intended to outline our general product direcAon. It is intended for inforMaon purposes only, and May not be incorporated into any contract. It is not a coMMitment to deliver any Material, code, or funcAonality, and should not be relied upon in Making purchasing decisions. The developMent, release, and AMing of any features or funcAonality described for Oracle’s products reMains at the sole discreAon of Oracle. Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal – Internal/Restricted/Highly Restricted 21 Heartbleed - Impacted Websites using OpenSSL Heartbeat request sent Vicm responds with to vic8m requested payload size (64K bytes) Type Payload_size Payload Type Payload_size Payload HB_REQUEST 65535 Hello HB_RESPONSE 65535 Hello ………. …………………. Payload_size does not match Payload Unauthorized data returned to requestor Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 22 How can you use the ADI APIs • Oracle’s SoGware enhanced with ADI – Ex. Oracle DB uses ADI in SGA. • Solaris Malloc() enhanced with ADI - libadiMalloc – LD_PRELOAD able with no applicaon change • Solaris ADI API – Add ADI to applicaons – Libraries in libc in Solaris 11.2 • Studio Discover tool with ADI – Find and fix bugs during developMent – Available on Studio 12.4 All of the above available on the SWiSDev cloud Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal Oracle Solaris Studio Ikroop Dhillon, Principal Product Manager Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 24 Oracle Solaris Studio Security Producvity Performance Integraon Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | Oracle ConfidenAal – Internal/Restricted/Highly Restricted 25 MulA-language Applicaon IDE DevelopMent AnalyAcs COMPLETE TOOLSUITE Copyright © 2014 Oracle and/or its affiliates. All rights reserved. | 26 CoMplete & CoMprehensive Toolsuite Mul8-language Development Applica8on Analy8cs C, C++ Compilers Code Analyzer Fortran Compiler Performance Analyzer Debugger Thread Analyzer Performance