Re: zFCP and NPIV - limit of 32

[Grzegorz Powiedziuk]

> On Aug 17, 2015, at 4:57 PM, Alan Altmark  wrote:
> 
> On Monday, 08/17/2015 at 03:04 EDT, Grzegorz Powiedziuk 
>  wrote:
>>> On Aug 17, 2015, at 11:10 AM, Alan Altmark  
> wrote:
>>> 
>>> The limit of 32 is on the number of active NPIV subchannels, not the
>>> number of active connections being used by a given NPIV sub channel.
>> 
>> active NPIV subchannels - what exactly does it mean? If NPIV device just 
> sits
>> there in z/VM as ?FREE?  not attached to anything, is it considered to 
> be
>> active NPIV sub channel? I guess it is but I want to make it clear.
>> If yes than I shouldn?t be doing what've asked about and I have my 
> answer.
> 
> An active NPIV subchannel is one that is attached to a guest and is being 
> used, or one that is part of an EDEVICE.

Sweet! 

> 
>> I thought that EQUID is there so the z/vm knows which FCP device it 
> should pick
>> from a target system when machine is being LGR-ed. I am not sure if I
>> understand what you meant with overloading or not overloading. I mean 
> without
>> EQUID it wouldn?t even LGR a virtual machine. Can you elaborate that?
> 
> The EQID allows CP to select an available equivalent device from the 
> target system, where "equivalent" is defined to mean "with the same EQID 
> and device type”.
> 
> Let's assume that you have
> a) Ten (10) FCP paths on system A and B, and each path has 100 
> NPIV-enabled subchannels defined on it, for a total of 1000 NPIV-enabled 
> subchannels.
> b) 100 guests, each using two NPIV-enabled FCP subchannels, for a total of 
> 200 active subchannels.
> c) You are using seven of your ten FCP paths since you are placing no more 
> than 32 active subchannels on each path.
> 
> With me so far?
> 
yes! 

> Now, if you use EQID PURPLE on those 200 subchannels (on both A and B), 
> you will discover that each path on B will fill to its capacity (100) 
> before CP moves onto the next.  That means that if you relocated all 100 
> guests, CP will be using exactly two paths on the target system.
> 
> This behavior is a by-product of the fact that devices with the same EQID 
> are consumed in device address order.  No load balancing is performed.
> 

Oh I see now. 

> Oops.
> 
> So to address this, make sure that the EQID assigned to the subchannels on 
> an FCP path is unique to that path.  This will keep all the PURPLE 
> subchannels on a single chpid, all the RED ones on another, and all the 
> BLUE ones on a third.  (You might consider using an EQID like FCPnnn, 
> where nnn is a sequence number that you assign as you consume FCP paths.
> 

Got it! Thank you so much for spending time on explanation. That definitely 
helps. 
The bottom line is - I can “over provision” (or kind of thin provision) fcp 
channels as long as I keep below 32 attached paths per chpid and make sure that 
I do EQIDs vertically only - separate EQID for every set of paths on two chpids 
 (one on each system). 
 
Best regards
Gregory Powiedziuk 


> Alan Altmark
> 
> Senior Managing z/VM and Linux Consultant
> Lab Services System z Delivery Practice
> IBM Systems & Technology Group
> ibm.com/systems/services/labservices
> office: 607.429.3323
> mobile; 607.321.7556
> alan_altm...@us.ibm.com
> IBM Endicott
> 
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Ubuntu Distribution Announced for LinuxONE(TM) and IBM z Systems

[Ihno Krumreich]

On Mon, Aug 17, 2015 at 02:25:20PM -0600, Mark Post wrote:
> >>> On 8/17/2015 at 08:48 AM, Dave Jones  wrote: 
> > Morning, all.
> > 
> > It appears that we will have Ubuntu Linux joining  RedHat and SuSE in
> > supporting Linux on the mainframe.
> > 
> > http://mainframeinsights.com/ubuntu-distribution-announced-for-linuxone-and-
> > ibm-z-systems
> 
> Interesting.  I wonder if we'll start seeing them at SHARE.
> 

Quote from the IBM Press release:

Canonical and IBM also announced plans to create an Ubuntu distribution for 
LinuxONE and z Systems.

So they have to hurry up!

Ihno

"Never trust a computer you can lift."
--
Ihno Krumreich
i...@suse.de  Projectmanager S/390 & zSeries
Maxfeldstr. 5 +49-911-74053-439
D-90409 Nürnberg  http://www.suse.de
SUSE LINUX GmbH GF: Felix Imendörffer, Jane Smithard, Jennifer Guild,
Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg)

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Interesting information in blog post by Tom Rosamilia, SVP IBM

[John McKown]

I don't remember the information quoted below being said before.

From:
http://asmarterplanet.com/blog/2015/08/ibms-big-bet-open-source-economy.html


More than a third of our mainframe clients today are running Linux.


--

Schrodinger's backup: The condition of any backup is unknown until a
restore is attempted.

Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be.

He's about as useful as a wax frying pan.

10 to the 12th power microphones = 1 Megaphone

Maranatha! <><
John McKown

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Symantec Endpoint Protection (SEP) for installation on zLinux?

[CHAPLIN, JAMES (CTR)]

Fellow Penguin Mainframers,
Has anyone installed Symantec Endpoint Protection (SEP) on Linux (RHEL or SUSE) 
on the s390x architecture? We have been given a "Security Requirement" that 
this vendor specific software has to be in place, and we cannot even verify 
that they support the s390x architecture. Please share any experience you may 
have with this if your shop has gone down this path and implemented SEP.

James Chaplin, ITIL(r) v3 Foundation
Systems Programmer, MVS, zVM & zLinux
CA Technologies

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Symantec Endpoint Protection (SEP) for installation on zLinux?

[Dave Rivers]

This link professes to describe all the system requirements for all
of the versions of Symantec Endpoint Protection:

  https://support.symantec.com/en_US/article.TECH163829.html#SystemRequirements 


In my casual glance I didn’t see anything about Linux at all… much less 
mainframe Linux,
only Windows and Mac OSX.

- Dave R. -

--
riv...@dignus.comWork: (919) 676-0847
Get your mainframe programming tools at http://www.dignus.com




> On Aug 18, 2015, at 8:34 AM, CHAPLIN, JAMES (CTR)  
> wrote:
> 
> Fellow Penguin Mainframers,
> Has anyone installed Symantec Endpoint Protection (SEP) on Linux (RHEL or 
> SUSE) on the s390x architecture? We have been given a "Security Requirement" 
> that this vendor specific software has to be in place, and we cannot even 
> verify that they support the s390x architecture. Please share any experience 
> you may have with this if your shop has gone down this path and implemented 
> SEP.
> 
> James Chaplin, ITIL(r) v3 Foundation
> Systems Programmer, MVS, zVM & zLinux
> CA Technologies
> 
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
> 


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Symantec Endpoint Protection (SEP) for installation on zLinux?

[Marcy Cortes]

We've been given an exception because it doesn't exist for z.
Not a bad thing imnsho :)



-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of CHAPLIN, 
JAMES (CTR)
Sent: Tuesday, August 18, 2015 5:35 AM
To: LINUX-390@VM.MARIST.EDU
Subject: [LINUX-390] Symantec Endpoint Protection (SEP) for installation on 
zLinux?

Fellow Penguin Mainframers,
Has anyone installed Symantec Endpoint Protection (SEP) on Linux (RHEL or SUSE) 
on the s390x architecture? We have been given a "Security Requirement" that 
this vendor specific software has to be in place, and we cannot even verify 
that they support the s390x architecture. Please share any experience you may 
have with this if your shop has gone down this path and implemented SEP.

James Chaplin, ITIL(r) v3 Foundation
Systems Programmer, MVS, zVM & zLinux
CA Technologies

--
For LINUX-390 subscribe / signoff / archive access instructions, send email to 
lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit http://wiki.linuxvm.org/

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: zFCP and NPIV - limit of 32

[Alan Altmark]

On Tuesday, 08/18/2015 at 08:50 EDT, Grzegorz Powiedziuk 
 wrote:

> Got it! Thank you so much for spending time on explanation. That 
definitely
> helps.

You're welcome.

> The bottom line is - I can ?over provision? (or kind of thin provision) 
fcp
> channels as long as I keep below 32 attached paths per chpid and make 
sure that
> I do EQIDs vertically only - separate EQID for every set of paths on two
> chpids  (one on each system).

That's what I would do.

Then I would open an RFE to ask for CP to handle this automatically.  It 
may be as simple as CP noting the chpid distribution on the source side 
and attempting to match that on the target.  I.e. If guest #1 was using a 
PURPLE FCP on chpid X and guest #2 was using a PURPLE FCP on chpid Y, then 
CP could map them to PURPLE FCP subchannels on chpids X' and Y' on the 
target (if available).  Further, remember the mapping and continue to use 
it.  That way the guests will end up with the same subchannels-per-chpid 
distribution on the target.

This technique also applies to OSA and HiperSockets, where separation is 
enforced (only) at the chpid boundary and you have explicitly chosen 
devices based on their chpid association.  You don't want guests that were 
communicating on the same chpid on system A to suddenly be on separate 
chpids on System B.

Alan Altmark

Senior Managing z/VM and Linux Consultant
Lab Services System z Delivery Practice
IBM Systems & Technology Group
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/