Re: High Availability zLinux IP address

2011-03-04 Thread Marcy Cortes
We use F5 BigIP load balancers to do this kind of thing.

Marcy

-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Mike 
Wawiorko
Sent: Friday, March 04, 2011 6:05 AM
To: LINUX-390@vm.marist.edu
Subject: [LINUX-390] High Availability zLinux IP address

We are planning a high availability z/VM and z/Linux environment across 4
computer halls at two different sites, each with different IP VLANs and
subnets. A Linux guest and its application may run in a z mainframe in any
one of these four halls.



The Linux guest's Vswitch interface IP address will be different in each
hall and could be any one of four IP addresses.



IP clients will need to connect to the application without knowing where the
guest is running and without knowledge of the Vswitch interface address.



Does anyone have advice on a good solution to achieve this?



One option might be to run the application with a Virtual IP address that is
not in any of the 4 Vswitch subnets. I think this would require a dynamic
routing protocol in the Linux guest, i.e. an OSPF Daemon.



Are there other ways of doing this with, say, load balancers?







Regards,

Mike Wawiorko

Barclays Bank



This e-mail and any attachments are confidential and intended solely for the 
addressee and may also be privileged or exempt from disclosure under applicable 
law. If you are not the addressee, or have received this e-mail in error, 
please notify the sender immediately, delete it from your system and do not 
copy, disclose or otherwise act upon any part of this e-mail or its attachments.

Internet communications are not guaranteed to be secure or virus-free.
The Barclays Group does not accept responsibility for any loss arising from 
unauthorised access to, or interference with, any Internet communications by 
any third party, or from the transmission of any viruses. Replies to this 
e-mail may be monitored by the Barclays Group for operational or business 
reasons.

Any opinion or other information in this e-mail or its attachments that does 
not relate to the business of the Barclays Group is personal to the sender and 
is not given or endorsed by the Barclays Group.

Barclays Bank PLC.Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.

Barclays Bank PLC is authorised and regulated by the Financial Services 
Authority.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Webcast - March 16(17) - Red Hat Enterprise Server Performance Report for Linux on System

2011-03-04 Thread Pamela Christina in sunny and cold Endicott
Cross posted to IBMVM, LINUX390, and IBMMAIN for those who
like to listen to the hour-long webcasts (live or later in replay).

The March webcast has three airings March 16/17, and will
also be recorded for later replay.
http://www.vm.ibm.com/education/lvc/

Title:
Red Hat Enterprise Server Performance Report for Linux on System

Speaker:
Christian Ehrhardt, Linux on System z Performance Analyst, IBM Germany

Register for your choice of live call days and times
Wednesday (Thursday), March 16 (17), 2011
  http://www.vm.ibm.com/education/lvc/
(a replay is planned to be provided shortly thereafter)

Abstract:
This presentation covers the overall status of RHEL6 from a System z
performance focus. The speaker will compare RHEL 6 with RHEL5 and show a
summary and recommendations.

After a brief overview, we will delve into the analysis of various workload
patterns and  provide some background about major improvements and known
drawbacks, including some hints and tips about detection and workaround.


Please direct any questions to Julie Liesenfelt at jul...@us.ibm.com.


Regards,
Pam C

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: High Availability zLinux IP address

2011-03-04 Thread Quay, Jonathan (IHG)
We use both options.  VIPA and Quagga for single instances that are
required to be able to run on any CEC or LPAR in any data center, or
using F5's to front multiple instances.

-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
Mike Wawiorko
Sent: Friday, March 04, 2011 9:05 AM
To: LINUX-390@VM.MARIST.EDU
Subject: High Availability zLinux IP address

We are planning a high availability z/VM and z/Linux environment across
4
computer halls at two different sites, each with different IP VLANs and
subnets. A Linux guest and its application may run in a z mainframe in
any
one of these four halls.



The Linux guest's Vswitch interface IP address will be different in each
hall and could be any one of four IP addresses.



IP clients will need to connect to the application without knowing where
the
guest is running and without knowledge of the Vswitch interface address.



Does anyone have advice on a good solution to achieve this?



One option might be to run the application with a Virtual IP address
that is
not in any of the 4 Vswitch subnets. I think this would require a
dynamic
routing protocol in the Linux guest, i.e. an OSPF Daemon.



Are there other ways of doing this with, say, load balancers?







Regards,

Mike Wawiorko

Barclays Bank



This e-mail and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
e-mail in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this e-mail or its attachments.

Internet communications are not guaranteed to be secure or virus-free.
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons.

Any opinion or other information in this e-mail or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.

Barclays Bank PLC.Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.

Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: PCI Compliance documentation specific to zVM, zLinux implementations?

2011-03-04 Thread Henrik Johansen

'Tom Ambros' wrote:

I'm trying to help my CIS group understand whether this environment is
accepted as PCI compliant, looking for any documentation that specifically
mentions the zVM and zLinux environments and ideally documenting an
implementation.  Can anyone give me a pointer on where to start looking,
so far my searches have not been as effective as I'd like.  Thanks...


PCI is a pain ... perhaps this can point you in the right direction :

www.clipper.com/research/TCG2007094.pdf
www.atsec.com/downloads/presentations/04_Introducing_atsec_PCI.pdf



Thomas Ambros
Operating Systems and Connectivity Engineering
518-436-6433



Email Classification: KeyCorp Public


This communication may contain privileged and/or confidential information. It
is intended solely for the use of the addressee. If you are not the intended
recipient, you are strictly prohibited from disclosing, copying, distributing
or using any of this information. If you received this communication in error,
please contact the sender immediately and destroy the material in its entirety,
whether electronic or hard copy. This communication may contain nonpublic 
personal
information about consumers subject to the restrictions of the
Gramm-Leach-Bliley Act. You may not directly or indirectly reuse or redisclose
such information for any purpose other than to provide the services for which
you are receiving the information.

127 Public Square, Cleveland, OH 44114




If you prefer not to receive future e-mail offers for products or services from 
Key
send an e-mail to mailto:dnereque...@key.com with 'No Promotional E-mails' in 
the
SUBJECT line.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


--
Med venlig hilsen / Best Regards

Henrik Johansen
hen...@myunix.dk

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Spiking server

2011-03-04 Thread Henrik Johansen

'van Sleeuwen, Berry' wrote:

Perhaps you can look at the threads for the application. We have a very
small apache that is configured to have only a few childs and threads
within the web server. Granted, it can't service as much threads
simultaneously but the server doesn't abend due to memory problems. So
the users connecting to the server could experience some more delays
during those peaks but usually the server doesn't crash. It does have a
high vdisk IO rate during those peaks.


Why not fix the actual source off the resource consumption ?

Webservers like ngix or lighthttpd offer more performance in terms of
requests per second at (sometimes substancially) lower resource consumption.

If you are looking for max performance with little resources I can only
recommend ngix ...


Did it indeed crash with all swap space exhausted? In that case, maybe
you can consider adding a swapdisk or enlarge an existing one.

Regards, Berry.


-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
Bauer, Bobby (NIH/CIT) [E]
Sent: donderdag 3 maart 2011 13:45
To: LINUX-390@VM.MARIST.EDU
Subject: Spiking server

We have a Wordpress server that really spikes during certain, know
times of the month, about 45000 hits/hour. Its running on a single z9
IFL with only 4G of memory on the lpar, z/VM 5.4, REHL 6 (yeah, I

know,

more memory, good luck since we are a govt. agency). The user did not
expect this kind of response so we have all been surprised.

We have Supercache in use.

At 1G of memory it crashed yesterday due to lack of memory so we upped
it to 2G and are waiting for the next cycle. It has swap space of:
swapon -s
FilenameTypeSizeUsed
Priority
/dev/dasda2 partition   1023976 0
-1
/dev/dasdb1 partition   194964  0
2
/dev/dasdc1 partition   64976   0
1

dasda2 is real dasd
dasdb1 and c1 are VDISK defined using the swapgen macro from Sine
Nomine

this morning the server looks like this:
free
 total   used   free sharedbuffers
cached
Mem:   20503601323728 726632  0 114588
345964
-/+ buffers/cache: 8631761187184
Swap:  1283916  01283916


So the general question is, are there other steps we can take to help
response time when usage peaks? There are 2 other production servers

on

this lpar. One is very low usage, the other has the potential for the
same kind of activity. There is a test lpar sharing the IFL with 4G of
memory also. I've thought of stealing a G from test and moving it to
production. There are plans to host Wiki's on the production lpar

also.

Any suggestions would be appreciated.

Bobby Bauer
Center for Information Technology
National Institutes of Health
Bethesda, MD 20892-5628
301-594-7474



--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390
or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/



--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/



??D

--
Med venlig hilsen / Best Regards

Henrik Johansen
hen...@myunix.dk

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: TSM server

2011-03-04 Thread Gaylord Toneff

See how much memory is actually being consumed by "ps aux" look for the
%mem. (see the 4th column)
Check system memory and swap "free -m"

Try to allocate just enough memory needed then use VDISK swap space with a
small contingency of real disk swap.

Gaylord Toneff
IBM Global Services
gton...@us.ibm.com

Member, z/Linux Commercial Account Support
Kaiser Permanente Account
Home Office  661 456 2242
Cell 661 618 2825
Kaiser Office 626 564 7473


   
  From:   "Melancon, Ruddy" 
   
  To: LINUX-390@vm.marist.edu  
   
  Date:   03/03/2011 12:41 PM  
   
  Subject:TSM server   
   
  Sent by:Linux on 390 Port   
   





We are in the process of bringing up a Tivoli Storage Manager [TSM] server
using zLinux [SLES11] under zVM [6.2].  We are going to use the IBM7650G
with XIV back end storage to provide Virtual Tape.  The idea is to backup
intel servers directly to tape then replicate to remote DR site.

We have run into problems with memory allocations.  We were using 2GB
memory with 750MB of swap space in vdev.  We started getting sql errors
with the indication that it was a memory or swap space issue.  I have
increased the memory to 3GB and now the image will only allow us to run 11
TSM processes before getting errors.  This will not be good for production.

I will increase this to 4 GB memory with 2GB of swap space to see what
happens.

Does anyone have experience and/or recommendations as to the correct
settings for memory allocations?

Ruddy A. Melancon
IT Systems Specialist, Senior
Alabama Department of Transportation
334-353-6323

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

<><>

PCI Compliance documentation specific to zVM, zLinux implementations?

2011-03-04 Thread Tom Ambros
I'm trying to help my CIS group understand whether this environment is
accepted as PCI compliant, looking for any documentation that specifically
mentions the zVM and zLinux environments and ideally documenting an
implementation.  Can anyone give me a pointer on where to start looking,
so far my searches have not been as effective as I'd like.  Thanks...

Thomas Ambros
Operating Systems and Connectivity Engineering
518-436-6433



Email Classification: KeyCorp Public


This communication may contain privileged and/or confidential information. It
is intended solely for the use of the addressee. If you are not the intended
recipient, you are strictly prohibited from disclosing, copying, distributing
or using any of this information. If you received this communication in error,
please contact the sender immediately and destroy the material in its entirety,
whether electronic or hard copy. This communication may contain nonpublic 
personal
information about consumers subject to the restrictions of the
Gramm-Leach-Bliley Act. You may not directly or indirectly reuse or redisclose
such information for any purpose other than to provide the services for which
you are receiving the information.

127 Public Square, Cleveland, OH 44114




If you prefer not to receive future e-mail offers for products or services from 
Key
send an e-mail to mailto:dnereque...@key.com with 'No Promotional E-mails' in 
the
SUBJECT line.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Spiking server

2011-03-04 Thread Rob van der Heij
On Fri, Mar 4, 2011 at 3:53 PM, Shane G  wrote:
> My perspective on this is that swap is there to soak up allocations you
> weren't prepared for.
> Who cares about the cost of (virtual) disk allocation.

Your perspective may not lead to the most cost effective setup.
Virtualization moves the target, and extreme virtualization does it
even more. With low utilized Linux servers on z/VM, we use swap space
to bridge the gap between average requirement and peak requirement. If
you don't do that, you basically don't share memory and end up with
your peak requirement all day.

> As for Rob (who works for someone that sells software monitors) beating up on
> someone who works for the hardware vendor ... ???
> Chill fella ... just chill.

My apologies if the wink did not make it to the other hemisphere. I
obviously understand that someone using 2G disk space for swap will
not affect IBM stock. But if you're running hundreds of Linux virtual
machines, it does add up and increases your cost. I can't tell whether
that affects your operation.

Rob

--
Rob van der Heij
Velocity Software
http://www.velocitysoftware.com/

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Spiking server

2011-03-04 Thread Shane G
My perspective on this is that swap is there to soak up allocations you
weren't prepared for.
Who cares about the cost of (virtual) disk allocation.

As for Rob (who works for someone that sells software monitors) beating up on
someone who works for the hardware vendor ... ???
Chill fella ... just chill.

Chewing up all the (guest) memory, then doing likewise to the z/VM memory
(extended included) can't be good. Especially if it all finally goes "base
over apex" as the OP indicated.
Swap is generally cheap - outages are expensive ...
As are the arse-kicking episodes afterwards.

Shane ...

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


High Availability zLinux IP address

2011-03-04 Thread Mike Wawiorko
We are planning a high availability z/VM and z/Linux environment across 4
computer halls at two different sites, each with different IP VLANs and
subnets. A Linux guest and its application may run in a z mainframe in any
one of these four halls.



The Linux guest's Vswitch interface IP address will be different in each
hall and could be any one of four IP addresses.



IP clients will need to connect to the application without knowing where the
guest is running and without knowledge of the Vswitch interface address.



Does anyone have advice on a good solution to achieve this?



One option might be to run the application with a Virtual IP address that is
not in any of the 4 Vswitch subnets. I think this would require a dynamic
routing protocol in the Linux guest, i.e. an OSPF Daemon.



Are there other ways of doing this with, say, load balancers?







Regards,

Mike Wawiorko

Barclays Bank



This e-mail and any attachments are confidential and intended solely for the 
addressee and may also be privileged or exempt from disclosure under applicable 
law. If you are not the addressee, or have received this e-mail in error, 
please notify the sender immediately, delete it from your system and do not 
copy, disclose or otherwise act upon any part of this e-mail or its attachments.

Internet communications are not guaranteed to be secure or virus-free.
The Barclays Group does not accept responsibility for any loss arising from 
unauthorised access to, or interference with, any Internet communications by 
any third party, or from the transmission of any viruses. Replies to this 
e-mail may be monitored by the Barclays Group for operational or business 
reasons.

Any opinion or other information in this e-mail or its attachments that does 
not relate to the business of the Barclays Group is personal to the sender and 
is not given or endorsed by the Barclays Group.

Barclays Bank PLC.Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.

Barclays Bank PLC is authorised and regulated by the Financial Services 
Authority.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/