Erstes Treffen der HHOSUG

Transkript

1 Erstes Treffen der HHOSUG

2 Agenda

3 Agenda: Begrüssung/einleitende Worte Die HHOSUG Warum? Was? Wohin? Diskussion Vorträge OpenSolaris Internals Crossbow

4 Begrüssung

5 Die HHOSUG

6 Warum?

7 Eine Gruppe zur Vernetzung der an (Open)Solaris interessierten Personen abseits von Sun-Foren

8 Das heisst: Das erste Treffen findet zwar in der Sun GS statt... das muss aber nicht so unbedingt so sein...

9 Nach einigen Gesprächen mit Kollegen und Blogkommentierern dachte ich mir: Zeit ist reif für eine OSUG in Hamburg

10 Die HHOSUG soll nicht auf Hamburg beschränkt sein...

11 ... sondern für die Metropolregion Hamburg und für Leute mit Hamburg-Affinität in Städten ohne OSUG (soll es ja geben)...

12 Was?

13 Was ist es auf jeden Fall nicht...

14 ... eine Sun Marketing Veranstaltung

15 Deswegen habe ich auch kein Marketing- oder Vertriebsfunding für Fressalien beantragt :)

16 ... es soll auch keine one-man Show werden.

17 ... nicht noch eine Gelegenheit Standardpräsentationen auf Kunden runterregnen zu lassen.

18 Was ist es dann?

19 Insbesondere das was Ihr daraus macht!

20 Wohin?

21 Was fangen wir also mit der HHOSUG an?

22 Ein paar Ideen: regelmässige technische Vorträge Informationskanal zwischen den Leuten via Mailingliste ein Kanal von Sun in die Anwenderschaft ein Kanal der Anwenderschaft in Sun hinein

23 Fragen: Wie häufig treffen? Tutorials im Rahmen der HHOSUG? Eher Netzwerkfokus oder Informationsfokus? Was sind Eure Vorschläge für die HHOSUG? Freiwillige für Vorträge?

24 Diskussion

25 Vorträge

26 OpenSolaris Internals

27 So allgemein...

28 qualitätsgesichert redistributable bis zu 18 Monate Support auf eine Version neuste Features zuerst in Opensolaris verfügbar nicht jedes Feature wird in Solaris 10 integriert Solaris 10 und Nachfolger sind die long term support Varianten

29

30 Gold- oder Platin-Support auf HW = OpenSolaris Essential Premium/Standard auf Solaris = OpenSolaris Essential Level

31 Timeslider

32

33

34

35

36

37 Packages

38

39

40 Repository Requires contract? Prefered authority pkg.opensolaris.org/release No support contract required opensolaris.org pkg.sun.com/opensolaris/support Requires a support contract, which provides a Sun Online Account opensolaris.org pkgs.sun.com/opensolaris/extra Does not require a support contract, but you are required to accept specific license terms extra.opensolaris.org

41 Keys/Certificates einspielen?

42 $ pfexec pkg set-authority -O \ extra.opensolaris.org $ pfexec pkg set-authority -k key_file -c cert_file opensolaris.org

43 Network Automagic

44 Hinweis: Die Konfig findet sich unter /etc/nwam/llp

45 COMSTAR

46

47 Desktoperweiterungen

48

49

50

51

52 Crossbow

53 Die Technik hinter Crossbow

54 Crossbow ist vordergründig betrachtet eine Methode zur Virtualisierung von Netzwerkkarten

55 Zones Zone 1 Virtual Zone 2 Virtual Zone 1 HTTP Ring Zone 1 Virtual Stack Zone 1 HTTPS Ring Default Flow Zone 2 Virtual Stack All Traffic VNIC 1 VNIC 2 Zone 1 HTTP Ring Zone 1 HTTPS Ring Default Flow Zone 2 All Traffic Ring Flow Classifier Network Interface Cards

56 Die übergreifende Fragestellung die Crossbow lösen will ist: Wie verteile ich die Last des TCP/IP-Stacks auf möglichst viele Prozessoren

57

58 Zones Zone 1 Virtual Zone 2 Virtual Zone 1 HTTP Ring Zone 1 Virtual Stack Zone 1 HTTPS Ring Default Flow Zone 2 Virtual Stack All Traffic VNIC 1 VNIC 2 Zone 1 HTTP Ring Zone 1 HTTPS Ring Default Flow Zone 2 All Traffic Ring Flow Classifier Network Interface Cards

59 Was ist der Flow Classifier?

60 Im Falle der Neptune Netzwerkkarten von Sun: Ein Stück Hardware, das die Aufteilung des Netzwerktraffics auf die einzelnen Rings übernimmt.

61 Im Falle anderer Netzwerkkarten übernimmt das der Netzwerkstack...

62 Das funktioniert direkt nur für GLDv3-Treiber (NEMO) Für alle anderen NEMO SoftMAC

63 Simulation eines Netzwerkes

64

65 # dladm create-etherstub etherstub0 # dladm create-etherstub etherstub1

66 # dladm create-etherstub etherstub0 # dladm create-vnic -l etherstub0 vnic1 # dladm create-vnic -l etherstub1 vnic3

67 # dladm showlink LINK CLASS MTU STATE OVER ni0 phys 1500 unknown -- etherstub0 etherstub 9000 unknown -- etherstub1 etherstub 9000 unknown -- vnic1 vnic 9000 up etherstub0 vnic2 vnic 9000 up etherstub0 vnic3 vnic 9000 up etherstub1

68 # zfs create rpool/zones # zfs set compression=on rpool/zones # zfs set mountpoint=/zones rpool/zones

69 create -b set zonepath=/zones/template set ip-type=exclusive set autoboot=false add inherit-pkg-dir set dir=/lib end add inherit-pkg-dir set dir=/platform end add inherit-pkg-dir set dir=/sbin end add inherit-pkg-dir set dir=/usr end add inherit-pkg-dir set dir=/opt end commit

70 # zonecfg -z template -f template # zoneadm -z template install A ZFS file system has been created for this zone. Preparing to install zone <template2>. Creating list of files to copy from the global zone. Copying <3488> files to the zone. Initializing zone product registry. Determining zone package initialization order. Preparing to initialize <1507> packages on the zone. Initialized <1507> packages on zone. Zone <template2> is initialized. The file </zones/template2/root/var/sadm/system/logs/ install_log> contains a log of the zone installation. #

71 create -b set zonepath=/zones/servera set ip-type=exclusive set autoboot=false add inherit-pkg-dir set dir=/lib end add inherit-pkg-dir set dir=/platform end add inherit-pkg-dir set dir=/sbin end add inherit-pkg-dir set dir=/usr end add inherit-pkg-dir set dir=/opt end add net set physical=vnic2 end commit

72 create -b set zonepath=/zones/serverb set ip-type=exclusive set autoboot=false add inherit-pkg-dir set dir=/lib end add inherit-pkg-dir set dir=/platform end add inherit-pkg-dir set dir=/sbin end add inherit-pkg-dir set dir=/usr end add inherit-pkg-dir set dir=/opt end add net set physical=vnic4 end commit

73 create -b set zonepath=/zones/router set ip-type=exclusive set autoboot=false add inherit-pkg-dir [...] add net set physical=vnic5 end add net set physical=vnic1 end add net set physical=vnic3 end commit

74 system_locale=c terminal=vt100 name_service=none network_interface=vnic5 {primary hostname=router1 ip_address= netmask= protocol_ipv6=no default_route= } network_interface=vnic1 {hostname=router1-a ip_address= netmask= protocol_ipv6=no default_route=none} network_interface=vnic3 {hostname=router1-b ip_address= netmask= protocol_ipv6=no default_route=none} nfs4_domain=dynamic root_password=cmul.hsjtwj.i security_policy=none timeserver=localhost timezone=us/central

75 system_locale=c terminal=vt100 name_service=none network_interface=vnic2 {primary hostname=server1 ip_address= netmask= protocol_ipv6=no default_route=none} nfs4_domain=dynamic root_password=cmul.hsjtwj.i security_policy=none timeserver=localhost timezone=us/central

76 system_locale=c terminal=vt100 name_service=none network_interface=vnic4 {primary hostname=server2 ip_address= netmask= protocol_ipv6=no default_route=none} nfs4_domain=dynamic root_password=cmul.hsjtwj.i security_policy=none timeserver=localhost timezone=us/central

77 # zonecfg -z router -f router # zoneadm -z router clone template Cloning snapshot rpool/zones/template@sunwzone3 Instead of copying, a ZFS clone has been created for this zone. # cp router_sysidcfg /zones/router/root/etc/sysidcfg # cp site.xml /zones/router/root/var/svc/profile # zoneadm -z router boot # zonecfg -z servera -f servera # zoneadm -z servera clone template Cloning snapshot rpool/zones/template@sunwzone3 Instead of copying, a ZFS clone has been created for this zone. # cp servera_sysidcfg /zones/servera/root/etc/sysidcfg # cp site.xml /zones/servera/root/var/svc/profile # zoneadm -z servera boot # zonecfg -z serverb -f serverb # zoneadm -z serverb clone template Cloning snapshot rpool/zones/template@sunwzone3 Instead of copying, a ZFS clone has been created for this zone. # cp serverb_sysidcfg /zones/serverb/root/etc/sysidcfg # cp site.xml /zones/serverb/root/var/svc/profile # zoneadm -z serverb boot

78 # zoneadm list -v ID NAME STATUS PATH BRAND IP 0 global running / native shared 13 router running /zones/router native excl 15 servera running /zones/servera native excl 19 serverb running /zones/serverb native excl

79 # ifconfig vnic2 plumb vnic2 is used by non-globalzone: servera

80 # routeadm -e ipv4-forwarding # routeadm -e ipv4-routing # routeadm -u # routeadm Configuration Current Current Option Configuration System State IPv4 routing enabled enabled IPv6 routing disabled disabled IPv4 forwarding enabled enabled IPv6 forwarding disabled disabled Routing services "route:default ripng:default" Routing daemons: STATE disabled disabled disabled disabled disabled disabled disabled disabled disabled online disabled disabled online FMRI svc:/network/routing/zebra:quagga svc:/network/routing/rip:quagga svc:/network/routing/ripng:default svc:/network/routing/ripng:quagga svc:/network/routing/ospf:quagga svc:/network/routing/ospf6:quagga svc:/network/routing/bgp:quagga svc:/network/routing/isis:quagga svc:/network/routing/rdisc:default svc:/network/routing/route:default svc:/network/routing/legacy-routing:ipv4 svc:/network/routing/legacy-routing:ipv6 svc:/network/routing/ndp:default

81 # netstat -nr Routing Table: IPv4 Destination Gateway Flags Ref Use Interface default UG 1 0 vnic U 1 0 vnic UH 1 49 lo0

82 # ping is alive # traceroute traceroute to ( ), 30 hops max, 40 byte packets ( ) ms ms ms ( ) ms ms ms #

83

84 # dladm create-etherstub etherstub10 # dladm create-vnic -l etherstub1 routerb1 # dladm create-vnic -l etherstub10 routerb10 # dladm create-vnic -l etherstub10 serverc1 # dladm create-vnic -l etherstub1 routerc1 # dladm create-vnic -l etherstub10 routerc2

85 create -b set zonepath=/zones/routerb set ip-type=exclusive set autoboot=false [...] end add net set physical=routerb1 end add net set physical=routerb10 end commit

86 system_locale=c terminal=vt100 name_service=none network_interface=routerb1 {primary hostname=routerb ip_address= netmask= protocol_ipv6=no default_route=none} network_interface=routerb10 {hostname=routerb-a ip_address= netmask= protocol_ipv6=no default_route=none} nfs4_domain=dynamic root_password=cmul.hsjtwj.i security_policy=none timeserver=localhost timezone=us/central # zonecfg -z routerb -f routerb # zoneadm -z routerb clone template Cloning snapshot rpool/zones/template@sunwzone4 Instead of copying, a ZFS clone has been created for this zone. # cp routerb_sysidcfg /zones/routerb/root/etc/sysidcfg # cp site.xml /zones/routerb/root/var/svc/profile/ # zoneadm -z routerb boot

87 create -b set zonepath=/zones/routerc set ip-type=exclusive set autoboot=false [...] add net set physical=routerc1 end add net set physical=routerc2 end commit

88 # cat routerc_sysidcfg system_locale=c terminal=vt100 name_service=none network_interface=routerc1 {primary hostname=routerb ip_address= netmask= protocol_ipv6=no default_route=none} network_interface=routerc2 {hostname=routerb-a ip_address= netmask= protocol_ipv6=no default_route=none} nfs4_domain=dynamic root_password=cmul.hsjtwj.i security_policy=none timeserver=localhost timezone=us/central # zonecfg -z routerc -f routerc # zoneadm -z routerc clone template Cloning snapshot rpool/zones/template@sunwzone4 Instead of copying, a ZFS clone has been created for this zone. # cp routerb_sysidcfg /zones/routerc/root/etc/sysidcfg # cp site.xml /zones/routerc/root/var/svc/profile/ # zoneadm -z routerc boot

89 servera# netstat -nr Routing Table: IPv4 Destination Gateway Flags Ref Use Interface default UG 1 0 vnic2 default UG 1 0 vnic U 1 0 vnic UH 1 49 lo0

90 routerb# netstat -nr Routing Table: IPv4 Destination Gateway Flags Ref Use Interface default UG 1 0 routerb UG 1 0 routerb U 1 0 routerb U 1 0 routerb UH 1 23 lo0

91 create -b set zonepath=/zones/serverc set ip-type=exclusive set autoboot=false add inherit-pkg-dir set dir=/lib [...] add net set physical=serverc1 end commit

92 servera# cat /etc/ipf/ipf.conf # ipf.conf pass in quick proto tcp from any to /32 port = 22 block in log from any to /32 root@zone001 ~$ svcadm enable ipfilter root@zone004 ~$ ssh The authenticity of host ' ( )' can't be established. RSA key fingerprint is 2e:fc:c7:36:33:70:db:16:d7:74:35:04:1a:3f: 02:bb. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added ' ' (RSA) to the list of known hosts. Password: root@zone004 ~$ ftp ^C

93 Resourcemanagement auf Basis von Flows

94 #dladm set-linkprop -p maxbw=10mb vnic2

95 # flowadm add-flow -l vnic0 -a transport=tcp,local_port=80 httpflow # flowadm add-flow -l vnic0 -a transport=tcp,local_port=443 httpsflow # flowadm show-flow FLOW LINK IP ADDR PROTO PORT DSFLD httpflow vnic0 -- tcp httpsflow vnic0 -- tcp

96 # flowadm set-flowprop -p maxbw=500m,priority=high httpsflow # flowadm show-flow httpsflow FLOW LINK IP ADDR PROTO PORT DSFLD httpsflow bge0 -- tcp

97 # flowadm show-flowprop https-1 FLOW PROPERTY VALUE DEFAULT POSSIBLE https-1 maxbw https-1 priority HIGH -- LOW,NORMAL,HIGH

98 # flowadm add-flow -l bge0 -a transport=udp -p maxbw=100m, priority=low limit-udp-1

99 CPU-Binding auf Flow-Basis!

100 # flowadm set-flowprop -p cpus=4,5 httpsflow # flowadm set-flowprop -p cpus=6,7 httpflow

101 Netzwerkaccounting auf Basis von Flows

102 # acctadm -e extended -f /var/log/net.log net # acctadm net Network accounting: active Network accounting file: /var/log/net.log Tracked Network resources: extended Untracked Network resources: none

103 # flowadm show-usage -f /var/log/net.log FLOW DURATION IPACKETS RBYTES OPACKETS OBYTES BANDWIDTH flowtcp Kbps flowudp Mbps

104 # flowadm show-usage -d -f /var/log/net.log 02/19/2008

105 # flowadm show-usage -s 02/19/2008,10:39:06 -e 02/19/2008,10:40:06 -f /var/log/ net.log flowtcp FLOW TIME IPACKETS RBYTES OPACKETS OBYTES BANDWIDTH flowtcp 10:39: Kbps flowtcp 10:39: Kbps flowtcp 10:39: bps flowtcp 10:40: bps

106 Vielen Dank für Eure Aufmerksamkeit!