Architectural Decisions for Linuxone Hypervisors
Total Page:16
File Type:pdf, Size:1020Kb
July 2019 Webcast Virtualization options for Linux on IBM Z & LinuxONE Richard Young Executive IT Specialist Virtualization and Linux IBM Systems Lab Services Wilhelm Mild IBM Executive IT Architect for Mobile, IBM Z and Linux IBM R&D Lab, Germany Agenda ➢ Benefits of virtualization • Available virtualization options • Considerations for virtualization decisions • Virtualization options for LinuxONE & Z • Firmware hypervisors • Software hypervisors • Software Containers • Firmware hypervisor decision guide • Virtualization decision guide • Summary 2 © Copyright IBM Corporation 2018 Why do we virtualize? What are the benefits of virtualization? ▪ Simplification – use of standardized images, virtualized hardware, and automated configuration of virtual infrastructure ▪ Migration – one of the first uses of virtualization, enable coexistence, phased upgrades and migrations. It can also simplify hardware upgrades by make changes transparent. ▪ Efficiency – reduced hardware footprints, better utilization of available hardware resources, and reduced time to delivery. Reuse of deprovisioned or relinquished resources. ▪ Resilience – run new versions and old versions in parallel, avoiding service downtime ▪ Cost savings – having fewer machines translates to lower costs in server hardware, networking, floor space, electricity, administration (perceived) ▪ To accommodate growth – virtualization allows the IT department to be more responsive to business growth, hopefully avoiding interruption 3 © Copyright IBM Corporation 2018 Agenda • Benefits of virtualization ➢ Available virtualization options • Considerations for virtualization decisions • Virtualization options for LinuxONE & Z • Firmware hypervisors • Software hypervisors • Software Containers • Firmware hypervisor decision guide • Virtualization decision guide • Summary 4 © Copyright IBM Corporation 2018 What hypervisors and virtualization are available on Linux on IBM Z & LinuxONE ❑ IBM PR/SM (traditional ) or via DPM (Dynamic Partition Manager) – Firmware based virtualization to securely share and partition hardware resources. DPM providing graphical interface & REST interfaces with simplified management, automation, and dynamic capability. ❑ IBM z/VM – IBM developed, software based mainframe virtualization that can be traced back to the beginning of Virtualization in computing ❑ Linux KVM – Open source software based virtualization. Supports multiple hardware architectures. Kernel based virtual machines started in mid 2000’s. ❑ Containers – System Containers and Application containers. Via Linux cgroups and namespaces, provide isolated and managed environment for applications to run. Containers share a single host kernel. ❑LXD Containers – LXD is a system container manager. Unprivileged containers with a CLI and API. Also has OpenStack integration ❑Docker based Containers - Simplified container with a toolset for Container image build process, an API & CLI, a registry. Clustering added with Swarm. ❑ IBM Secure Service Container (SSC) – Fully encrypted workload in a partition. Traditional system administrator access removed. Limited and encrypted network access. Primarily deployed with (ICP) IBM Cloud Private - (SSC for ICP – a Kubernetes based deployment/orchestration solution) 5 © Copyright IBM Corporation 2019 Agenda • Benefits of virtualization • Available virtualization options ➢ Considerations for virtualization decisions • Virtualization options for LinuxONE & Z • Firmware hypervisors • Software hypervisors • Software Containers • Firmware hypervisor decision guide • Virtualization decision guide • Summary 6 © Copyright IBM Corporation 2018 Considerations for virtualization decisions ❑ Software supported in combination with it ❑ Open vs proprietary ❑ Hardware support – i.e. NVMe, CTC, ISM ❑ Outage avoidance – Live migration/relocation ❑ Current in house standards – Distros ❑ Feature/Function and requirements ❑ Available skill set in house to manage ➢Live relocation requirements x, y ,z ❑ Ability to hire talent with needed skills ❑ Dynamic by design – No outages to change ❑ Learning curve / duration to become ❑ Performance / Scalability fluent/expert – Simplicity vs complexity ❑ Ecosystem – Documentation, training, 3rd ❑ Level of Isolation / security party solutions and support ❑ Certifications & Multitenancy requirements ❑ Cost – Direct / Indirect for additional features ❑Monitoring , Security, Automation, Auditing, rd ❑ Automation capability – Rest APIs or 3 party Time to train tooling – i.e. Kickstart deployment, OpenStack, or Ansible 2019 IBM Systems Technical University 7 © Copyright IBM Corporation 2019 Agenda • Benefits of virtualization • Available virtualization options • Considerations for virtualization decisions ➢ Virtualization options for LinuxONE & IBM Z • Firmware hypervisors • Software hypervisors • Software Containers • Firmware hypervisor decision guide • Virtualization decision guide • Summary 8 © Copyright IBM Corporation 2018 IBM Z and LinuxONE Virtualization Built-in, Shared Everything Architecture IBM® Z & LinuxONE™ Systems Hardware assisted virtualization • Cores are designed to run at near 100% utilization nearly 100% of the time • Provisioning of virtual servers in seconds • High granularity of resource sharing (<1%) 1 LPAR – PR/SM or IBM DPM* – up to 85 Logical Partitions • Upgrade of physical resources without taking the system down • Scalability of up to 1000’s of virtual servers • More with less: more virtual servers per core, sharing of physical resources • Extensive life-cycle management 2+3 KVM and z/VM – 1000s of Virtual Machines • HW-supported isolation, highly secure (EAL5+ or EAL4+ certified) 9 © Copyright IBM Corporation 2018 Architectural Options 1.Firmware hypervisor management ❑Traditional PR/SM ❑IBM Dynamic Partition Manager 2.Optionally, one or more software hypervisor ❑IBM z/VM ❑KVM 3.Optionally, one or more container technology ❑Docker ❑IBM SSC for ICP ❑OKD 10 © Copyright IBM Corporation 2018 IBM LinuxONE Virtualization All Linux images are capable of hosting containers Simplified view of virtualization options on IBM LinuxONE SLES RHEL SLES Ubuntu RHEL Ubuntu SLES SLES Ubuntu RHEL RHEL Ubuntu SLES RHEL Virtual & Ubuntu Virtual2 IBM z/VM IBM z/VM IBM z/VM IBM z/VM CPUs IBM z/VM LPAR8 Virtual CPUs Ubuntu RHEL SLES RHEL SLES SLES Ubuntu RHEL There are typically dozens, Ubuntu RHEL SLES Ubuntu RHEL SLES Ubuntu even hundreds of Linux servers in a KVM or z/VM LPAR. SLES KVM Ubuntu KVM RHEL KVM IBM z/VM Traditional Logical LPAR1 LPAR2 LPAR3 LPAR4 LPAR5 LPAR6 LPAR7 CPUs PR/SM or PR/SM+ Real P1 P2 P3 P4 P5 P6 P7 P8 P9 P10 P11 P12 P13 P14 IBM DPM CPUs* P1 – P12 are Physical cores, also known as Integrated Facility for Linux (IFL) processors) * - Only one shared pool of cores per system 11 © Copyright IBM Corporation 2018 What is IBM Dynamic Partition Manager? • Built on existing PR/SM technology capabilities • Simplified, consumable, enhanced, partition life-cycle and integrated dynamic I/O management capabilities LINUX LINUX LINUX LINUX • Provides the technology foundation that enables APIs for IaaS and secure, private KVM Clouds PR/SM DPM IBM DPM Powerful and easy HMC 12 © Copyright IBM Corporation 2018 Technical Specifications for DPM IBM z14, z13, z13s, IBM LinuxONE Emperor I & II Supported Operating Environments or Rockhopper – Linux/KVM – FCP and FICON – z/VM 6.4 and newer - FCP and FICON – HW for DPM Feature Code #0016 – IBM Secure Service Container Appliances - FCP and – Two dedicated FICON OSA-Express6S 1000BASE-T Ethernet #0426 or OSA-Express5S 1000BASE-T Ethernet #0417 • Support for auto-configuration of devices to simplify Linux installation, where Linux distribution installers exploit function Supported IO Adapters • Secure FTP through HMC for boot and install of operating – FICON Express including 16S+ (Type FCP & FICON) system via FTP – FCP Express32S • Optionally specify VLANs to use on configured OSA – OSA-Express5S, 6S, and 7S adapters – Crypto Express5S and Crypto Express6S No support yet for – zEDC Express • GDPS® Virtual Appliance – RoCE Express and RoCE Express2 • FICON CTC ( Required for z/VM SSI LGR ) – HiperSockets • FICON attached Tape • ISM ( SMC-D ) • Internal NVMe SSDs 13 © Copyright IBM Corporation 2019 Architectural Options 1.Firmware hypervisor management ❑Traditional PR/SM ❑IBM Dynamic Partition Manager 2.Optionally, one or more software hypervisor ❑IBM z/VM ❑KVM 3.Optionally, one or more container technology ❑Docker ❑IBM SSC for ICP ❑OKD 14 © Copyright IBM Corporation 2018 z/VM Virtualization - Overview ➢ Virtualizes CPU, Memory, I/O devices, disks, Networks, Switches with possible overcommitment ➢ Highly effective and granular sharing and resource shifting definition for Linux guests ➢ Cluster for up to four z/VM images or physical systems as members of a Single System Image (SSI) cluster ➢ Live Linux Guest Relocation (LGR) between the nodes of a SSI cluster ➢ Contains LDAP and RACF Security capabilities 15 © Copyright IBM Corporation 2018 Combine LPARs with z/VM CPU Pooling ▪LPAR with 5 Linux CPU / IFLs ▪Create 2 Pools – one with 4-CPU / cores and one with 1-CPU / core ▪Place the four WAS guests in the 4-cores pool and the two DB2 guests in the 1-core pool • Requires 4-core WAS entitlement • Requires 1-core DB2 entitlement WAS WAS WAS WAS DB2 DB2 PVU Entitlements Guest Guest Guest Guest Guest Guest 700 2 vores 2 cores 2 cores 2 cores 1 cores 1 cores 600 500 cores Pool cores Pool 400 WAS 300 DB2 Capacity 4 cores Capacity 1 core 200 100 LPAR with 5 cores 0 5-cores LPAR With cores Pooling ▪Avoids