Re: Anyone with zCX docker hands on?

2023-11-09 Thread Kirk Wolf
On many archs, ChaCha20-Poly1305 is implemented using vector instructions. On z/OS, OpenSSH now supports a SIMD (vector) enhance version. Not quite as good as CPACF with AES+SHA256 however. Kirk Wolf Dovetailed Technologies http:// coztoolkit.com On Thu, Nov 9, 2023, at

Re: Anyone with zCX docker hands on?

2023-11-08 Thread Timothy Sipples
Tony Harminc wrote: >Do the zArch crypto instructions support the crypto operations used by >Wireguard? I see PCKMO supports Curve25519 for key exchange, but I'm not >seeing any of the others. Does the apparent high performance of the >symmetric crypto running on a CP or specialty engine outdo the

Re: Anyone with zCX docker hands on?

2023-11-08 Thread kekronbekron
I'm not an expert in many/most things, and don't have time to look up arbitrary things. Just responded to a statement that 'a tech one doesn't know is automatically hacky' is bizzare. Pretty sure you know how to enlighten yourself. On Thursday, November 9th, 2023 at 11:14, David Crayford

Re: Anyone with zCX docker hands on?

2023-11-08 Thread David Crayford
Seeing as you're the expert here can you provide some links where people are using WireGuard to run a HA cluster in Docker without using Swarm? Like I said, I'm not a WG expert but I'm always happy to be enlightened :) On Thu, Nov 9, 2023 at 1:33 PM kekronbekron <

Re: Anyone with zCX docker hands on?

2023-11-08 Thread kekronbekron
I didn't misunderstand. It's a bit alarming that you'd say something is hacky without knowing anything about it... just because it's something new to you vs something you're familiar with. In your perspective, using wg for docker connectivity is hacky. I don't suppose you looked up how many

Re: Anyone with zCX docker hands on?

2023-11-08 Thread David Crayford
You misunderstood my point. I'm not bashing WireGuard. I'm sure it's a brilliant product and all power to them. My point is that using it to hack a clustering solution seems a bit odd if you have Docker Swarm to create a multi-host network using the overlay protocol. I know nothing about WG, but I

Re: Anyone with zCX docker hands on?

2023-11-08 Thread kekronbekron
It will indeed be a good day for the mainframe ecosystem if wg fully works on Z. I don't know what portion of it works today; will have to try building in linux/s390x. On Thursday, November 9th, 2023 at 10:01, Tony Harminc wrote: > On Wed, 8 Nov 2023 at 21:51, kekronbekron < >

Re: Anyone with zCX docker hands on?

2023-11-08 Thread Tony Harminc
On Wed, 8 Nov 2023 at 21:51, kekronbekron < 02dee3fcae33-dmarc-requ...@listserv.ua.edu> wrote: > > ... instead of hacking together solutions that don’t work? > > Say that with a straight face to the companies building or relying on > WireGuard and see what happens. > Do the zArch crypto

Re: Anyone with zCX docker hands on?

2023-11-08 Thread kekronbekron
> ... instead of hacking together solutions that don’t work? Say that with a straight face to the companies building or relying on WireGuard and see what happens. On Wednesday, November 8th, 2023 at 19:30, David Crayford wrote: > > On 8 Nov 2023, at 9:36 pm, Timothy Sipples

Re: Anyone with zCX docker hands on?

2023-11-08 Thread Jousma, David
with “in-the-box” configuration? Dave Jousma Vice President | Director, Technology Engineering From: IBM Mainframe Discussion List on behalf of David Crayford Date: Wednesday, November 8, 2023 at 9:00 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Anyone with zCX docker hands on? > On 8 Nov 2023, at 9:

Re: Anyone with zCX docker hands on?

2023-11-08 Thread David Crayford
> On 8 Nov 2023, at 9:36 pm, Timothy Sipples wrote: > > Dave Jousma wrote: > >> Thanks Timothy. Yep found all that, have the instance up and working just >> fine > >> it’s the peer to peer networking that is not working. The fine folks at > >> Rocket indicate that their software is

Re: Anyone with zCX docker hands on?

2023-11-08 Thread Timothy Sipples
Dave Jousma wrote: >Thanks Timothy. Yep found all that, have the instance up and working just fine >it’s the peer to peer networking that is not working. The fine folks at >Rocket indicate that their software is picking up the internal container IP, >and not using the Host IP causing the

Re: Anyone with zCX docker hands on?

2023-11-08 Thread David Crayford
On 8/11/2023 8:48 pm, Jousma, David wrote: Thanks Timothy. Yep found all that, have the instance up and working just fine it’s the peer to peer networking that is not working. The fine folks at Rocket indicate that their software is picking up the internal container IP, and not using the Host

Re: Anyone with zCX docker hands on?

2023-11-08 Thread Jousma, David
David Crayford Wrote: If you intend to set up zCX for high availability, it would involve running zCX instances on different LPARs. To achieve this, you'll likely need Docker Swarm for creating a cluster that operates across multiple nodes. While OpenShift (Kubernetes) is a more advanced option,

Re: Anyone with zCX docker hands on?

2023-11-07 Thread Timothy Sipples
Dave Jousma wrote: >Ive successfully stood up Rocket Terminal Emulator(RTE) in a couple >of separate ZCX hosts on z/OS V2.5.I am now trying to get the >clustering feature of RTE to work, but there are specific network >changes in Docker that need to be made to allow separate >containers to

Re: Anyone with zCX docker hands on?

2023-11-07 Thread David Crayford
 PM > To: IBM Mainframe Discussion List > Subject: Re: Anyone with zCX docker hands on? > Matt, It’s vanilla zCX. I have a separate Openshift POC going in other > containers. That’s an animal of its own too. > > Dave Jousma > Vice President | Director, Technology Engineer

Re: Anyone with zCX docker hands on?

2023-11-07 Thread Jousma, David
| Director, Technology Engineering From: Jousma, David Date: Tuesday, November 7, 2023 at 2:05 PM To: IBM Mainframe Discussion List Subject: Re: Anyone with zCX docker hands on? Matt, It’s vanilla zCX. I have a separate Openshift POC going in other containers. That’s an animal of its own too

Re: Anyone with zCX docker hands on?

2023-11-07 Thread Jousma, David
To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Anyone with zCX docker hands on? Is this zCX or are you also using OCP on top? OCP via K8s makes the scaling and network admin easier but its a chargeable feature. Matt Hogstrom matt@  hogstrom. org “It may be cognitive, but, it ain’t intuitive. " — Hog

Re: Anyone with zCX docker hands on?

2023-11-07 Thread Matt Hogstrom
Is this zCX or are you also using OCP on top? OCP via K8s makes the scaling and network admin easier but its a chargeable feature. Matt Hogstrom m...@hogstrom.org “It may be cognitive, but, it ain’t intuitive." — Hogstrom > On Nov 7, 2023, at 12:49 PM, Jousma, David >

Anyone with zCX docker hands on?

2023-11-07 Thread Jousma, David
Anyone in IBM-MAIN doing anything with zCX containers? Ive successfully stood up Rocket Terminal Emulator(RTE) in a couple of separate ZCX hosts on z/OS V2.5.I am now trying to get the clustering feature of RTE to work, but there are specific network changes in Docker that need to be made