REDEFINING THE ENTERPRISE OS RED HAT ENTERPRISE LINUX 7

Transcription

1 REDEFINING THE ENTERPRISE OS RED HAT ENTERPRISE LINUX 7 Rodrigo Freire Sr. Technical Account Manager May

2 Roadmap At A Glance CY2010 CY2011 CY2012 CY2013 CY RHEL 7 RHEL 5 Production RHEL Production 2.8 Production 3 *All dates are approximate and subject to change 2>

3 Application Isolation via Containers

4 CONTAINERS ENABLE CONTINUOUS DELIVERY HOST OS SERVER APP LIBS CONTAINER CONTAINER APP LIBS HOST OS DEVELOPMENT FOCUS SERVER OPERATIONS FOCUS CODE APPLICATIONS LIBRARIES AND OTHER DEPENDENCIES DATA STORE 4 HARDWARE OPERATING SYSTEM NETWORKING MONITORING

5 RHEL 7 Containers Architecture with Docker CLI Containers Cgroups Drivers Containers DOCKER CLI Docker Image SYSTEMD Unit File Namespaces RHEL Kernel Hardware (Intel, AMD) 5 Containers SELinux

6 BENEFITS OF LINUX CONTAINERS 6

7 MORE EFFICIENT INSTALLATION AND DEPLOYMENT 8 SPEED DEPLOYMENT WITH SERVER PROFILES IN-PLACE UPGRADES FROM 6.X TO 7 PRIORITIZE CRITICAL SERVICES AT START-UP EASILY CREATE CUSTOM INSTALL IMAGES SAFELY ROLL-BACK DURING INSTALL DRAMATICALLY SPEED START-UP TIMES

8 Create, Install, Deploy & Manage

9 Custom Install Images using Live Media Creator Easier installation, deployment, and custom image creation/management across large-scale enterprises Spin custom installable images with the help of Live Media Creator Content Sources (Repositories) 10 Custom Image

10 Image Deployment with Anaconda Kickstart Filesystem Image Deployment 11 kickstart liveimg command Same family as url, harddrive, &c Deployment of pre-created filesystem images Supports squashfs compressed images Manual deployment of partitioned disk images for virt usage live images must contain the utilities needed by anaconda to perform the OS installation

11 CENTRALIZED MANAGEMENT AND FASTER BOOT UP 1 Gain centralized management of processes, services, security, and other resources Prioritize critical services and deliver production support while less critical resources are still initializing Systemd is my favorite feature so far. We deal with lots of init scripts currently; I m already seeing great improvements by switching most of them to systemd. 1 IT Architect, Medium Enterprise Media & Entertainment Company Dramatically decrease start up times Compatible with existing scripts (SysV and LSB init scripts) Source: Research by TechValidate: TVID: 6D2-C98-90F 12

12 MANAGEABILITY WITH OPEN LMI 13 Open standards-based management framework for low-level system configuration Unified management tools and system-wide resource management allow users to streamline administration MANAGEMENT SYSTEM PYTHON SCRIPTS LMI SHELL PYTHON CUSTOM APPS JBOSS SHELL SCRIPTS C/C++ JAVA CLI OpenLMI Client Interface Libraries MANAGED SYSTEMS OpenLMI Object Broker NETWORK STORAGE SERVICESSOFTWARE USERS SECURITY OTHER AGENTS SYSTEM MONITOR CONFIG

13 File System Choice

14 CHOICE OF FILE SYSTEMS RED HAT ENTERPRISE LINUX 7 RC Scale file systems to 500TB with new default filesystem XFS Scale to 50TB with ext4 Btrfs also available2 The default XFS filesystem is just great!! 1 Parallel NFS v4 provides improved performance and throughput Type Supported Limit Root Boot IT Specialist, US Federal Government Comments Single-node XFS 500TB Yes Yes System default ext4 50TB Yes Yes Driver allow access to older versions (ext2, ext3). btrfs2 50TB Yes Yes Network/Multi-node GFS nodes Yes No Shared-storage file system Source: Research by TechValidate: TVID: 6D2-C98-90F Available as a Technology Preview 15

15 Storage

16 RHEL 7 Storage Enhancements SSD s Hierarchical/Tiered storage (Device mapper cache) MultiQ block layer design Interconnect support upstream dependent (NVMe, SOP, SAS-3) Linux-IO SCSI Target (LIO) Asynchronous SCSI events Software RAID enhancements 17

17 Storage Management APIs and CLI libstoragemgt manages SAN and NAS liblvm is the API equivalent of LVM user commands Blivet is a new high level storage and file system library that will be used by anaconda and OpenLMI Storage system manager provides an easy to use command line interface Unification of storage management code 18

18 Networking

19 Team Driver Mechanism to aggregate multiple network devices into a single logical interface at the data link layer (L2.) Alternative to the existing Linux Bonding driver that provides many advantages over traditional bonding. 20 Mostly implemented in user space with only the data fast-path implemented in the kernel. Supports IEEE 802.3ad (IEEE 802.1ax) LACP + many proprietary standards. Performance is equal or better than Linux Bonding driver and provides nearly identical functionality including some added improvements.

20 Other Network Features and Improvements Network Namespaces Network Priority Control Group (cgroup) Numerous performance and latency improvements including Fast Open, Tail Loss Probe (TLP) Algorithm, Early Retransmit (ER), Proportional Rate Reduction (PRR) and low latency sockets using Busy Poll /8 routing 21 New dynamic firewall service providing greater flexibility over iptables by eliminating service disruptions during rule updates, abstraction, and support for different network trust zones. TCP Provides an interface to allow an administrator to dynamically set the priority of network traffic generated by various applications. Firewalld Lightweight container-based virtualization allowing virtual network stacks to be associated with a process group. Essentially, another copy of the network stack. Useful for private blocks-depleted networks, providing local tenant systems a local network without the risk of clashing network blocks.

21 Optimal Performance and Monitoring

22 OPTIMAL PERFORMANCE VIA PROFILES Optimal performance management via enhanced performance tuning at install, simplified instrumentation and tuning features, and performance monitoring tooling PERFORMANCE CO-PILOT (PCP) 23 THERMOSTAT (FOR JVMs)

23 Profiling and Monitoring - Tuna Tool for fine grained control Display applications / processes Displays CPU enumeration Socket (useful for NUMA tuning) Dynamic control of tuning 24 Process affinity Parent & threads Scheduling policy Device IRQ priorities, etc

24 Performance -Tuned Re-written for maintainability and extensibility. 25 Optional hook/callout capability Adds concept of Inheritance (just like httpd.conf) Configuration is now consolidated a single tuned.conf file Profiles updated for RHEL7 features and characteristic

25 Performance - numabalance Simplify and automate numa management numabalance scheduler 26 Tries to move/keep tasks and their memory NUMA-local Enable / Disable / Tracing sysctl kernel.numa_balancing=0/1 perf list grep numa

26 Windows Interoperability

27 WINDOWS INTEROPERABILITY VIA DIRECT INTEGRATION MICROSOFT ACTIVE DIRECTORY Windows Domain interoperability is what I am looking forward to. We have a large Windows domain with 10k Windows workstations and 1300 Windows servers. Being able to authenticate and interact with Active Directory is a very high priority for us. 1 Lynn Dixon, System Administrator, Mohawk Industries SSSD RHEL 1 Source: Research by TechValidate: 28

28 WINDOWS INTEROPERABILITY VIA INDIRECT INTEGRATION MICROSOFT ACTIVE DIRECTORY IDENTITY MANAGEMENT ALLOWS FOR EASIER CENTRALIZED NATIVE LINUX MANAGEMENT OF MULTIPLE LINUX CLIENTS TRUST SSSD RHEL 1 Source: Research by TechValidate: 29

29 STABLE AND EFFICIENT FLEXIBLE RED HAT ENTERPRISE LINUX 7 HIGHLIGHTS LIGHTWEIGHT APPLICATION ISOLATION (LINUX CONTAINERS) WINDOWS INTEROPERABILITY SCALABLE FILE SYSTEMS OPTIMAL PERFORMANCE VIA PROFILES STREAMLINED INSTALLATION AND DEPLOYMENT SYSTEM MANAGEMENT VIA OPENLMI CERTAINTY OF MISSION-CRITICAL RELIABILITY AND MILITARY-GRADE SECURITY 30

30 RED HAT ENTERPRISE LINUX 7 RETHINK YOUR ENTERPRISE OS FLEXIBILITY to quickly adapt to demands for business agility CERTAINTY of mission-critical reliability and military-grade security STABILITY to efficiently meet current challenges of datacenter virtualization and cloud 90% OF FORTUNE 500 COMPANIES TRUST RED HAT ENTERPRISE LINUX FOR THEIR CRITICAL BUSINESS INFRASTRUCTURE. 31

31 THANK YOU! Rodrigo Freire