Oracle Solaris Simple, Flexible, Fast: Virtualization in 11.3 Duncan Hardie – Principal Product Manager Edward Pilatowicz – Senior Principal Software Engineer Oracle Solaris June 14, 2016

2. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Simple, Flexible, Fast:
Virtualization in 11.3
Duncan Hardie – Principal Product Manager
Edward Pilatowicz – Senior Principal Software Engineer
Oracle Solaris
June 14, 2016

3. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Safe Harbor Statement
The following is intended to outline our general product direction. It is intended for
information purposes only, and may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or functionality, and should not be relied upon
in making purchasing decisions. The development, release, and timing of any features or
functionality described for Oracle’s products remains at the sole discretion of Oracle.
3

4. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. | 4
Solaris Virtualization vs. the Competition
OS and Virtualization – Engineered Together
RHEL Native Zone or Kernel Zone
VMware
HP
Traditional Hypervisors
Separate, isolated, slow
Native Zones, Kernel Zones
Engineered, performant, robust, secure
Oracle Solaris Host OS
Hardware
Deep Integration
Software in Silicon

5. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Oracle Solaris Virtualization Advantages
Read only, locked down
virtualization with
compliance protects
against attacks/errors
Cost Efficient
Cloud Base
Secure
Fully integrated, flexible,
cloud ready solution
significantly reduces
admin overhead
All resources used
efficiently, intimate
sharing for dynamic
workloads, scale up and
scale out
Built in, no additional cost,
no overhead virtualization,
delivers most efficient
infrastructure license use
Optimized

6. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Virtualization Types
6
Flexibility Isolation
LDoms
Hardware
Kernel Kernel
OVM Server for SPARC
FUSION APPLICATIONS DATABASE
Kernel
Native Zone
Hardware
S10 Zone
Kernel
Kernel Zone
Oracle Solaris Zones
FUSION APPLICATIONS DATABASE FUSION APPLICATIONS
LDoms
PDOM
Kernel Kernel
LDoms
PDOM
Physical Domains
FUSION APPLICATIONS DATABASE

7. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
OVM Server for SPARC
Deploy And Move Between Virtualization Types
UNPRECEDENTED
FLEXIBILITY
Unified Archive
• No Virtualization “lock-in”
• Even move back to bare
metal
• Move from Development
to Test to Production with
confidence
Oracle Solaris
Solaris Zone
DATABASE
Oracle Solaris
DATABASE
Oracle Solaris
DATABASE
7

8. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Oracle Solaris
Global Zone
Admin
Oracle Solaris Zones
• Used by almost every Solaris
customer
• Direction: the “cloud space” is
moving towards OS virtualization
• From 11.2 all apps should be
running inside a zone of some kind
8
Solaris Native Zone
DEVELOPMENT
VSWITCH VSWITCH VSWITCH
Solaris Native Zone
PRODUCTION
Solaris Kernel Zone
PRODUCTION
Solaris 10 Zone
LEGACY
net
0
net
1
net
2
net
3
net0 net1 net0 net0 net0
ZBE3
NFS
ZBE1 ZBE2 ZBE3 ZBE4
ZBE1
ZBE2
ZBE4
SAN
SRUCPU CPU CPU CPU
iSCSI
RAD Console

9. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
The Best Virtualization For Cloud
Highest Efficiency
• Avoid the virtualization tax
• Power the application not the
Technology
Instant Resource Sharing
• Best application performance
profile
• Isolate resources only when
necessary
Total Scalability
• No drop off in performance
• Run all types of applications in a
virtual environment
9

10. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Kernel Zones – the Hybrid Hypervisor
• Kernel Zones can be optimized
unlike any other virtualization
technology
• As Solaris is the guest & host there
is the opportunity to optimize
• Optimizing means:
– Better performance
– Less cross hypervisor calls
• All while maintaining the resource
sharing of Solaris Zones
10
Kernel
Hardware
Kernel Zone
Kernel
Traditional Accelerated

11. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Secure Live Migration with Kernel Zones
• Move Kernel Zones without outage
– Live migrate on SPARC and x86
– No downtime host maintenance
– Perform load balancing across
infrastructure
– Forward and backward compatibility
for Live Migration moves
– Oracle Solaris 11.3 or later required
11
Oracle SolarisOracle Solaris
Solaris 11.3 Zone Solaris 11.3 Zone
SAN
iSCSI NFS

12. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. | 12

13. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
• Immutable Zones
– Read only virtualization
– Also possible with global zone and
OVM Server for SPARC guest
– Access via a trusted path
• New - Dynamic Zones setting,
allows creation of zones
– Very useful for Openstack Nova nodes
• Ready made “templates”
13
Read-Only Virtual Machines
Protect the Application Infrastructure
None Flexible Fixed D-Zone Strict
/, /usr, /lb, … Writeable Read Only Read Only Read Only Read Only
/etc Writeable Writeable Read Only Read Only Read Only
/var Writeable Writeable Writeable Writeable Read Only
other Writeable Read Only Read Only Read Only Read Only
Create Zone Yes No No Yes No

14. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
ZOSS for NFS
• More storage types supported
– As of 11.3 put Kernel Zone root on NFS
as well as SAN/iSCSI
– Total storage type flexibility
– Avoid configuration errors
– Massively reduce number of
configuration steps (up to 85% less
commands)
14
NEW
Oracle SolarisOracle Solaris
SAN
iSCSI NFS
Solaris Native Zone
PRODUCTION
Solaris Kernel Zone
PRODUCTION
Solaris Native Zone
PRODUCTION
Solaris Kernel Zone
PRODUCTION

15. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Adjust Without Service Interruptions
• Independent Zone versions with
Kernel Zones
– In place updates on single system
– Simpler to co-ordinate outage windows
• Dynamic resource rebalancing
– Live reconfiguration changes active
instances
– Respond instantly to growth
– Add devices “on the fly”
– Also available for Kernel Zones
15
50%
REDUCTION IN
PLANNED OUTAGES

16. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Live Zone Reconfiguration
Three Ways to Make a Change
16
Permanent Cold
Reconfiguration
Use zonecfg
to make
changes
Reboot zone
Permanent Live
Reconfiguration
Use zonecfg
to make
changes
zoneadm
apply
Temporary Live
Reconfiguration
zonecfg -r

17. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Zone Resource Management Improvements
• Assign Zone CPU resources by
CPUs, Cores, and Sockets
• Applies to Zones and Resource
Pools
• Use psrinfo –t to show
socket/core/cpu layout
• Makes configuring and complying
with license hard partition rules
much easier
• Recognized license boundary
17
Oracle Solaris
Solaris Zone Solaris Zone
CoreCore
Solaris Zone
Core
CoreCore
Socket
Core

18. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
• Docker open platform being
brought to Oracle Solaris Zones
• Oracle joins Open Container
Initiative – create open industry
standards
• Access to enterprise class security,
resource isolation and analytics
Docker for Oracle Solaris Zones
18
OCI
“Integrating Docker with Oracle Solaris Zones will bring a mature and proven container
technology to Docker environments running in enterprise class clouds”
- Nick Stinemates, Vice President of Business Development & Technical Alliances for Docker

19. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Docker and Oracle Solaris Combined – Perfect Partnership
• Familiar Docker Experience
– Fast application dev lifecycle
– Huge ecosystem with proven benefits
• Leverage Oracle Solaris Key Features
– Secure, mature, built-in virtualization
– Secure virtual storage & network
– Zero downtime patching, instant rollback
– Secure remote administration & role-
based access control
– Observability, configuration management
& audit
Security
ZFS
BEs
IPS
RAD
SMF
DTrace
N/work
V12N
SOLARIS
19

20. Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
OpenStack Across Oracle’s Portfolio
Horizon
Centralized Cloud Management
Zones and Kernel
Zones
Nova / Ironic
Self-Service Compute
and Bare Metal
Elastic Virtual Switch
and Open vSwitch
Neutron
Software Defined
Networking
ZFS File System
Cinder / Swift
Cloud Scale Storage
Unified Archives
Heat / Glance
Murano / Trove
Platform as a Service
Built into the Infrastructure
20

21. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 21