Introduction-------------Solaris 11.3 introduces an intelligent version of process private reader-writer locks(rwlocks) that is aware of the underlying NUMA...
Introduction-------------Solaris 11.3 introduces an intelligent version of process private reader-writer locks(rwlocks) that is aware of the underlying NUMA architecture. This awareness can beused to extract better performance from the reader-writer locks. This is accomplishedby using a technique called lock cohorting. This blog post describes how to use thenew rwlocks.Interface Changes------------------To ensure compatibility and ease of adaptation, the only change to the...
Introduction-------------Solaris 11.3 introduces an intelligent version of process private reader-writer locks(rwlocks) that is aware of the underlying NUMA architecture. This awareness can beused to...
Solaris Kernel Zones Verified BootIntroductionOracle Solaris 11.3 introduces Kernel Zones Verified Boot.To review, both Solaris Verified Boot and Kernel Zones...
Solaris Kernel Zones Verified BootIntroductionOracle Solaris 11.3 introduces Kernel Zones Verified Boot.To review, both Solaris Verified Boot and Kernel Zones were introduced in Solaris 11.2.Solaris Verified Boot verifies the RSA digital signatures of Solaris kernel modules before execution. For more information, see my blog onSolaris Verified BootSolaris Kernel Zones partitions Solaris into multiple virtual computers each running their own independent Solaris kernelSolaris...
Solaris Kernel Zones Verified BootIntroductionOracle Solaris 11.3 introduces Kernel Zones Verified Boot.To review, both Solaris Verified Boot and Kernel Zones were introduced in Solaris 11.2.Solaris...
In Solaris 11.3, we've expanded the security extensions framework to give you more tools to defend your installations. In addition to Address Space Layout...
In Solaris 11.3, we've expanded the security extensions framework to give you more tools to defend your installations. In addition to Address Space Layout Randomization (ASLR), we now offer tools to set a non-executable stack (NXSTACK) and a non-executable heap (NXHEAP). We've also improved the sxadm(1M) utility to make it easier to manage security extension configurations. NXSTACK When NXSTACK is enabled, the process stack memory segment is marked non-executable. This...
In Solaris 11.3, we've expanded the security extensions framework to give you more tools to defend your installations. In addition to Address Space Layout Randomization (ASLR), we now offer tools...
As with Solaris 11.2, Solaris 11.3 delivers two versions of OpenSSL: the non-FIPS 140 version (default) and the FIPS 140 version. They are both based on...
As with Solaris 11.2, Solaris 11.3 delivers two versions of OpenSSL: the non-FIPS 140 version (default) and the FIPS 140 version. They are both based on OpenSSL 1.0.1o (as of July 7th, 2015). There are no major features added to Solaris 11.3 OpenSSL; however, there are a couple of things that I would like to note. EOL SSLv2 Support SSLv2 protocol has been known to have issues for a while. Therefore, we have decided it's about time to remove SSLv2 support from Solaris...
As with Solaris 11.2, Solaris 11.3 delivers two versions of OpenSSL: the non-FIPS 140 version (default) and the FIPS 140 version. They are both based on OpenSSL 1.0.1o (as of July 7th, 2015). There...
New in Solaris 11.3 is a kernel memory allocation subsystem called the kernel object manager, or KOM. The first consumer of this subsystem is the ZFS ARC. Prior...
New in Solaris 11.3 is a kernel memory allocation subsystem called the kernel object manager, or KOM. The first consumer of this subsystem is the ZFS ARC. Prior to Solaris 11.3, the ZFS ARC allocated its memory from the kernel heap space using kmem caches. This has several drawbacks: first, internal fragmentation can result in memory used by the ARC not being reclaimed by the system. This problem is particularly acute if large pages are being used, since the buffer size is...
New in Solaris 11.3 is a kernel memory allocation subsystem called the kernel object manager, or KOM. The first consumer of this subsystem is the ZFS ARC. Prior to Solaris 11.3, the ZFS ARC allocated...
As organisations look for increased agility in their IT operations, many are turning towards more cloud like environments with shared compute, network and...
As organisations look for increased agility in their IT operations, many are turning towards more cloud like environments with shared compute, network and storage, and the ability for self-service users to quickly provision new virtualised environments on demand. With this increased virtualization sprawl, it's imperative to have a set of tools to allow administrators to effectively manage these environments, ensure they remain highly available, secure and observable.There's...
As organisations look for increased agility in their IT operations, many are turning towards more cloud like environments with shared compute, network and storage, and the ability for...
We've done it again! Oracle Solaris 11.3 beta has been released today! The beta program is a great opportunity to download the latest release, try it out, and...
We've done it again! Oracle Solaris 11.3 beta has been released today! The beta program is a great opportunity to download the latest release, try it out, and give us some feedback.We've crammed in hundreds of new features into this release including some of my favourites: an updated OpenStack distribution (Juno), live migration support for Oracle Solaris Kernel Zones and hosting them over NFS using shared storage, bigger compression ratios with LZ4 support in the ZFS file...
We've done it again! Oracle Solaris 11.3 beta has been released today! The beta program is a great opportunity to download the latest release, try it out, and give us some feedback.We've crammed in...
Secure Live Migration with Oracle Solaris Kernel Zones Hopefully you have heard about the Oracle Solaris 11.3 Beta release but if not you can learn more here....
Secure Live Migration with Oracle Solaris Kernel Zones Hopefully you have heard about the Oracle Solaris 11.3 Beta release but if not you can learn more here. One of the key features of the Oracle Solaris 11.3 Beta release is the introduction of Secure Live Migration for Kernel Zones. This feature brings with it a couple of things of note. First the obvious part - with live migration system administrators can limit the number and types of outages to applications and end...
Secure Live Migration with Oracle Solaris Kernel Zones Hopefully you have heard about the Oracle Solaris 11.3 Beta release but if not you can learn more here. One of the key features of the...
New Oracle Solaris Zones features In case you missed it, and how could you, the Oracle Solaris 11.3 Beta was made available today. You can find the details...
New Oracle Solaris Zones features In case you missed it, and how could you, the Oracle Solaris 11.3 Beta was made available today. You can find the details here. As always the Oracle Solaris Virtualization team has been very busy and there is a great list of things that they have delivered. Here are a few highlights: Secure Live Migration: Kernel Zones can now be moved around the datacenter without causing an outage. End users can be unaffected and moved onto other systems...
New Oracle Solaris Zones features In case you missed it, and how could you, the Oracle Solaris 11.3 Beta was made available today. You can find the details here. As always the Oracle...
