Blog Posts

Blog Posts

Items per page
1 2 3 ... 11 Previous Next

The infosec blogosphere erupted last week on the news that the State  of Pennsylvania's CISO Robert Maley was removed from his post over remarks about a recent  breach at the Pennsylvania DOT that he made during a panel session at  the RSA Conference last week.  Eric Chabrow at GovInfoSecurity.com was  in attendance at the actual panel and blogged about the discussion. He  also  posted an excellent blog that discusses many of the salient issues of  the dismissal.

While I am not privy to all aspects of the incident (and the State  will not comment on the specific reasons for Maley's departure), this  news is troubling for a variety of reasons.

 

First, this incident has the potential to dissuade qualified infosec  professionals from working in the public sector.  The public sector  remains a common target for nefarious individuals and organizations of  all types (examples include the reported attacks on our federal  government IT systems, and even last month's suicide plane crash into an  IRS building in Texas - which shows the extent to which some  individuals will go to express their frustration with the government).   The reality is that we need seasoned infosec professionals in the public  sector, but if these people risk losing their jobs over these types of  disclosures, it will get harder to recruit people into the public sector  and the public IT infrastructure will continue to be at risk.

 

Secondly, this incident demonstrates that for all the progress we  have made in information security in the last 20 years, awareness of  basic infosec principles is still needed.  While Maley's disclosure of a  potential breach and vulnerability caused concerns in some circles,  public disclosure of vulnerabilities is a central principle behind the  design and development of secure systems.  And it is an ongoing  challenge in infosec to weigh the risk/reward of disclosing a yet-to-be  fixed vulnerability.  Yes, it might invite more attacks, but it also  opens the vulnerability to a global knowledge base of seasoned IT  security professionals who can a) Offer input on how to address the  vulnerability and b) Verify that their systems are not susceptible to  this same vulnerability.  There is a reason why cryptographic standards  like AES were subjected to a rigorous public review process; such public  vetting only helps improve the underlying security.

I hope that organizations will continue to come forward to share  their collective IT security experiences without fear of retribution.   There is lot to be gained from such discussions.

 

Leave a comment below. If you don't see the Add a  Comment button, please log in or register.

 

maxim.avatar.aspx.jpeg

 

Merritt Maxim has 10+ years of product mangement and product marketing  experience in the information security industry, including stints at RSA  Security, Netegrity, OpenPages and CA.  In his current role at CA,  Merritt handles product marketing for CA's security compliance  initiatives.  Merritt received his BA from Colgate University and his MBA from the MIT  Sloan School of Management and is the author of "Wireless Security".

81 Views 0 Comments 0 References Permalink Tags: pennsylvania, ciso, breaches, merritt_maxim, security

by David Resnic

 

Do you want to learn how to better support the goals of your business with Data Center Automation? Whether you are just starting to leverage automation, moving quickly toward virtualization, or building an internal cloud, check out our new On-Demand Webcast featuring Glenn O'Donnell, senior analyst, Forrester Research, and Richard Anderson, senior principal consultant, CA. The Webcast explains how automation and virtualization can help you address operational considerations today and in the future. You will learn the four key steps you can take today to advance your data center operational maturity in order to increase efficiency, lower your costs, and bring greater value to the business while preparing for future innovation.

 

Some highlights of the discussion include:

  • Introduction of the Automation Maturity Model
  • Overview of IT challenges faced today and the role of virtualization and cloud computing moving forward
  • Key steps companies can take today and pitfalls to avoid

 

To watch the Webcast, please visit https://www.ca.com/us/register/activity.aspx?cid=86203.

 

resnic.avatar.aspx.jpg

 

David Resnic is senior principal of communications at CA, working with the Virtualization and Service Automation teams. He has more than 18 years of B2B and B2C public relations experience, working with dozens of companies such as Arsenal Digital Solutions, E Ink, Hasbro, MobileAccess, and Spalding Sports Worldwide. David earned a B.A. in Political Science from Washington University in St. Louis. In addition to rooting for the Boston Red Sox and New England Patriots, he enjoys playing golf, skiing and running.

47 Views 0 Comments 0 References Permalink Tags: automation, virtualization, cloud, internal_clouds, private_clouds, service_quality

Index design is one of the most important items or maybe the most important item in database design. Sometimes it is better to enhance the database with more indexes instead of trying to fix the application SQL. Tuning SQL is always good but tuning many SQL statements takes too much time. When time is tight most of the problem application SQLs can be instantaneously fixed through better indexes.


DB2 Version 9 indexes have several new options that help performance. First is the enhancement that I have written about before in the blog (Expression Performance) is Index on Expression. The Index on Expression enhancement alone can make a huge performance impact by tailoring the index to the application WHERE clause predicates. This customization of an index design can be a huge performance improvement for many applications, especially applications using DATE, TIME and other SQL functions within the SQL.


Next, is Index Compression which cuts disk requirements for the index structure dramatically. Most of the time compression can yield over a 50% savings and sometimes over 80%. This is especially important for large BI/DW databases indexes that can sometimes be terabytes before compression.


Next, index page sizes can be set to a larger page size that helps reduce the overall number of pages and the number of page splits within the index structure. Minimizing page splits helps avoid contention, helps cache all the index entries and keeps index value entries near each other on the same index page.


Another improvement for indexes that have ascending/descending keys is the new key randomization feature. Using the RANDOM option during the CREATE or ALTER of the index causes the index entries to be stored at random places in the index tree. This random inserting cuts down on index contention and is especially important for robust data sharing systems that are inserting many ascending/descending index keys.


So next time an application has SQL problems take a look at improving or defining a new index on the database. You might improve a huge number of applications instead of only a single application program and have time left to focus on other issues.


117 Views 0 Comments 0 References Permalink Tags: dave_beulke, db2_9, performance, index, index_design, database_design

In the summer of 2008, I posted a blog entry on page-fixing DB2 buffer pools, a feature introduced with DB2 for z/OS Version 8. A recent discussion I had with a client about buffer pool page-fixing brought to light two aspects of this performance tuning option that, I believe, are overlooked by some DB2 users. In this post I'll describe how you can make a quick initial assessment as to whether or not the memory resource of a mainframe system is sufficient to support buffer pool page-fixing, and I'll follow that with a look at the "bonus" performance impact that can be realized by buffer pool page-fixing in a DB2 data sharing environment.

Gauging the server memory situation. As pointed out in the aforementioned 2008 blog entry on the topic, page-fixing a buffer pool can reduce CPU consumption by eliminating the requests that DB2 would otherwise have to make of z/OS to fix in memory -- and to subsequently release -- a buffer for every read of a page from, or write of a page to, the disk subsystem. These page fix/page release operations are individually inexpensive, but the cumulative CPU cost can be significant when the I/Os associated with a pool number in the hundreds (or thousands) per second. The prospect of removing that portion of a DB2 workload's CPU utilization may have you thinking, "Why not?" Well, there's a reason why PGFIX(NO) is the default setting for a DB2 buffer pool, and it has to do with utilization of a mainframe server's (or z/OS LPAR's) memory resource.

With PGFIX(NO), the real storage page frames occupied by DB2 buffers are candidates for being stolen by z/OS, should the need arise. If something has to be read into memory from disk, and there is no available page frame to accommodate that read-in, z/OS will make one available by moving its contents to a page data set on auxiliary storage (if that relocated page is subsequently referenced by a process, it will be brought back into server memory from auxiliary storage -- this is known as demand paging). z/OS steals page frames according to a least-recently-used algorithm: the longer a page frame goes without being referenced, the closer it moves to the front of the steak queue. If a DB2 buffer goes a long time without being referenced, it could be paged out to auxiliary storage.

So, page-fixing a buffer pool in memory would preclude z/OS from considering the associated real storage page frames as candidates for stealing. The important question, then, is this: would some of those pages be stolen by z/OS if they weren't fixed in memory from the get-go? If so, then page-fixing that pool's buffers might not be such a great idea: in taking away some page frames that z/OS might otherwise steal, buffer pool page fixing could cause page-steal activity to increase for other subsystems and application processes in the z/OS LPAR. Not good.

Fortunately, there's a pretty easy way to get a feel for this: using either your DB2 monitor (an online display or a statistics report) or the output of the DB2 command -DISPLAY BUFFERPOOL DETAIL, look for fields labeled "PAGE-INS REQUIRED FOR READ" and "PAGE-INS REQUIRED FOR WRITE" (or something similar to that). What these fields mean: a page-in is required for a read if DB2 wants to read a page from disk into a particular buffer, and that buffer has been paged out to auxiliary storage (i.e., the page frame occupied by the buffer was stolen by z/OS). Similarly, a page-in is required for a write if DB2 needs to write the contents of a buffer to disk and the buffer is in auxiliary storage.

If, for a pool, the PAGE-INS REQUIRED FOR READ and PAGE-INS REQUIRED FOR WRITE fields both contain zeros, it is likely that the pool, from a memory perspective, is "V=R" anyway (that is to say, the amount of real storage occupied by the pool is probably very close to, if not the same as, its size in terms of virtual storage). In that case, going with PGFIX(YES) should deliver CPU savings without increasing pressure on the server memory resource, since the page frames being stolen are probably not those that are occupied by that pool's buffers. If you want an added measure of assurance on this score, issue a -DISPLAY BUFFERPOOL DETAIL(*) command. The (*) following the DETAIL keyword tells DB2 that you want statistics for the pool since the time it was last allocated. That might have been days, or even weeks, ago (the command output will tell you this), and if you see that the "PAGE-INS REQ" fields in the read and write parts of the command output contain zeros for that long period of time, it's a REALLY good bet that the pool's occupation of real storage won't increase appreciably if you go with PGFIX(YES). For even MORE assurance that the memory resource of the z/OS LPAR in which DB2 is running is not under a lot of pressure, check the "PAGE-INS REQUIRED" numbers for the lower-activity pools (those with fewer GETPAGE requests than others). If even these show zeros, you should be in really good shape, memory-wise.

With all this said, keep a couple of things in mind. First, even though your "PAGE-INS REQUIRED" numbers may give you a high degree of confidence that going to PGFIX(YES) for a buffer pool would be a good idea, make sure to coordinate this action with your z/OS systems programmer. That person has responsibility for seeing that z/OS system resources (such as server memory) are effectively managed and utilized, and you need to make sure that the two of you are on the same page (no pun intended) regarding buffer pool page-fixing. If you've done your homework, and you let the z/OS systems programmer do his (or her) homework (such as looking at z/OS monitor-generated system paging statistics), getting to agreement should not be a problem. Second, be selective in your use of the PGFIX(YES) buffer pool option. The greater the amount of I/O activity for a pool, the greater the benefit of PGFIX(YES). I'd recommend considering page-fixing for pools for which the rate of disk I/O activity is at least in the high double digits (writes plus reads) per second (and be sure to include prefetch reads when calculating the rate of disk I/O operations for a buffer pool). By staying with PGFIX(NO) for your lower-activity pools, you ensure that DB2 will make some buffer pool-associated page frames available to z/OS for page-out, should something cause the LPAR's memory resource to come under significant pressure.

And for you data sharing users... Just a couple of weeks ago, someone told me that he was under the impression that page-fixing buffer pools would have a negative performance impact in a DB2 data sharing environment. NOT SO. Assuming (as mentioned above) that your server memory resource is sufficient to accommodate page-fixing for one or more of your buffer pools, the resulting CPU efficiency benefit should be MORE pronounced for in a data sharing group versus a standalone DB2 system. How so? Simple: the buffer pool page fix/page release activity that occurs for DB2 reads to, and writes from, the disk subsystem with PGFIX(NO) in effect also occurs for writes of pages to, and reads of pages from, coupling facility group buffer pools. Like disk I/Os, page read and write actions involving a group buffer pool can number in the thousands per second. PGFIX(YES) eliminates the overhead of page fix/page release requests for disk I/Os AND for group buffer pool page reads and writes. So, if you're running DB2 in a data sharing configuration, you have another incentive to check out the page-fix option for your high-use buffer pools.

113 Views 0 Comments 0 References Permalink Tags: robert_catterall, data_sharing, buffer_pool, z/os, db2
119 Views 0 Comments 0 References Permalink Tags: mainframe, it, z/os, cloud, application, i/o, ibm, system_z, linux, research

It seems that last week’s blog struck a chord with many readers. Many people commented on how their management is increasingly out of touch with the mainframe. Also, comments also stated that the System Z environment is really processing almost all of the transactions in their company and how all the Windows platform systems continue to have scalability issues.


These comments are great, please keep them coming because it only reinforces the success story of the mainframe System Z. Although the mainframe revenue for IBM suffered in 2009 because of its upgrade cycle, the introduction of the new z10 System platform continues to be the best open system. Yes that is correct, the mainframe is the most open system available because it runs all types of workloads, of course the legacy standards of Assembler, COBOL, PL1 etc. but also C++, C#, java, PHP and the rest of the languages that run on UNIX and Windows boxes.


Also, some people are starting to run “virtualized” windows on the mainframe environments. PCWORLD highlighted this capability early last year (http://bit.ly/25OhnD) and with the System Z speed, scalability and network the mainframe continues to be the best solution for all types of workloads. A nice short demo of z/Vos is on YouTube http://www.youtube.com/watch?v=I_Bnx84hcDA along with many other videos that you can show to your iPhone obsessed boss that consolidating those hundreds of MS SQL Server instances is also possible.


The story of virtualization continues to drive UNIX consolidation to the mainframe. Just last year Allianz consolidated 60 servers into a single mainframe saving substantial operating, licensing and energy costs while improving scalability. This story detailed in this ComputerWorld article (http://bit.ly/9Yg9H7) is being repeated at many companies as the mainframe IFL, zIIP and zAAP specialty engines continue to bring processing power at PC or minimized prices. This consolidation activity has a very short term return on investment as these efforts pay for themselves usually in the first year and reduce power consumption dramatically making it a “green” saving the planet project.


So next time the hundreds of windows or UNIX server configurations need an OS, database or other software upgrade make sure to mention how System Z is saving other companies time and operating costs and overall costs through consolidating these environments to the best cost alternative the mainframe System Z.

177 Views 0 Comments 0 References Permalink Tags: dave_beulke, system_z, virtualization, iphone

Within the recent IBM Z Summit road show, there were several presentations detailing the mainframe platform advantages over UNIX and Windows platforms such as the lowest total cost of ownership, the best availability and unparalleled scalability. These presentations cut through the rumors with detailed facts and figures of the different platform configurations. Download these presentations and distribute them to your management for a little reminder why the mainframe continues to be the best platform for your enterprise applications.


The Windows and UNIX platforms proponents always discount and minimize the total cost of ownership, availability and scalability topics. It is our duty to periodically remind management of the extra costs of these UNIX and Windows systems with their huge power consumption costs, software license fees, and software maintenance costs of working with several hundred or thousands of disparate systems. The mainframe quietly continues to process the majority of the transactions at the Fortune 500 companies and everyone, especially younger management types that think that the world can run on an iPhone, needs to understand that the System Z infrastructure is the best backbone for any company.


The System Z mainframe is also evolving since it now has all of its specialized processors such as the IFL, zIIP and zAAP specialty processors for reducing overall operational and licensing costs. These specialty processors along with a new System Z smaller configuration offer a single small platform to consolidate any number of UNIX workloads into a single footprint with a smaller greener energy footprint and better licensing configuration.


The presentations detailed benchmarks, licensing fees and labor costs of various mainframe versus UNIX platforms configurations. The figures showed it takes sometimes double the number of processor cores on a UNIX configuration to start to scale out a configuration. Then even more UNIX processors to achieve transaction rates that are still only performing one-fourth of what the mainframe System Z executes. These UNIX systems are also dedicated to the production transaction environment with no thought of supporting testing, QA or failover facilities that have yet to be priced or considered and come standard within the System Z environment.


System Z also continues to grow because of its faster chips. Ask any PC or UNIX platform personnel “what platform has the fastest clock speed processors” and you will quickly find out who keeps up with the industry information. The chip clock speeds of the System Z and other IBM platforms have seen their chip speeds improve like the rest of the PC industry. In fact, the System Z z10 chip operates at 4.4 GHz and comes in a 64-way quad core configuration that can speed up any application performance problem. This is almost twice as fast as the HP Superdome processors and a third faster than the Intel Nehalem chips.


So the mainframe continues to lead the industry. Does your management know the cost savings and performance figures of System Z? Tell them and show them the presentations before someone tries to “replace the mainframe” again with a more troublesome, power hunger, bad performing clustered iPhone configuration.

95 Views 0 Comments 0 References Permalink Tags: dave_beulke, system_z, total_cost_of_ownership, ifl, ziip, zaap

by David Gormley

 

Few would question the value of collaboration to speed time to completion in any number of typical business processes.  New technologies and Web connectivity have fueled the growth of this dynamic marketplace. IDC estimates that SharePoint’s growth was double that of the other tier one Collaborative Content Workspace vendors in 2008 and at this year’s SharePoint Conference, Microsoft claimed over $1.3 billion in SharePoint sales in 2009, with the total number of licenses sold well over 1 billion.  There is no doubt that SharePoint is rapidly gaining acceptance as a valuable collaborative tool in many enterprises.

Two logical needs have developed as a result of this.  First, end users and IT management are both requesting that this high-use application be integrated into the company’s overall SSO/Web access management environment to improve user experience and reduce administration/help desk costs.  Second, end users who are now comfortable using SharePoint for collaboration and content management internally, are pushing IT to enable the same functionality with the contractors, partners and customers that they need to collaborate with.

The security groups in these organizations are faced with a variety of challenges related to the increased use of collaboration. One concern is protecting confidential data, another is secure, automated access and a third is centralized control and reporting. These issues are growing and evolving as collaboration technology proliferates and matures.

CA is helping large organizations deal with these security challenges and manage specific types of content within their SharePoint environment. We will be demonstrating these solutions at the RSA conference next week in San Francisco. Stop by booth #1533 if you are interested in discussing secure collaboration!

 

Leave a comment below. If you don't see the Add a Comment button, please log in or register.
69 Views 0 Comments 0 References Permalink Tags: security, web_access_management, collaboration, sharepoint, david_gormley

by Merritt Maxim

 

The excitement and buzz around cloud computing touts lower costs, simplified deployments, and flexibility as significant business benefits, all of which are well founded.  However, cloud computing delivers another significant benefit for IT vendors, especially for vendors like CA that offer both on-premises and cloud-based applications.  This benefit is the ability to deliver real-time visibility into product usage and activities.

 

One of product management's biggest challenges is understanding which features and components of individual products are being used by individual customers.  This challenge exists when you have just a handful of deployed customers, but it gets considerably harder once customer deployments number in the hundreds (or in the case of many CA Security products, the thousands).  As a former product manager, I can confirm that understanding all the use cases across the entire customer base was always a challenge, especially when it came time to design the new release.  And while the 80/20 rule often holds in enterprise software (80% of customer base rely on 20% of product's features), it is often difficult to know which 20% they are actually using.  Although questions, surveys and open dialogues can assist greatly at gathering this intelligence, the reality is that it is always hard to get the full picture.

 

Cloud computing offers unprecedented visibility into application usage for product managers and development teams unlike.  With this usage data, IT vendors can easily observe which features and capabilities are getting the most use.  This in turn allows for better and faster product development for both the on-premises and cloud-based version of the application.

 

Even if your organization is not ready for cloud-based services, partnering with a vendor who offers both cloud based and on-premises applications is essential.  Working with such a vendor means that you can expect product capabilities that are well aligned with customer's evolving requirements as the vendor leverages that usage intelligence into new product releases.  In this model, cloud computing offers considerable benefits to IT vendors and customers alike.

 

Leave a comment below. If you don't see the Add a Comment button, please log in or register.

 

Merritt Maxim has 10+ years of product mangement and product marketing experience in the information security industry, including stints at RSA Security, Netegrity, OpenPages and CA. In his current role at CA, Merritt handles product marketing for CA's security compliance initiatives. Merritt received his BA from Colgate University and his MBA from the MIT Sloan School of Management and is the author of "Wireless Security".

33 Views 0 Comments 0 References Permalink Tags: cloud_computing, merritt_maxim

by Kobi Korsah

 

I am delighted to report that Gartner Inc. has recently released the greatly anticipated Magic Quadrant for Application Performance Monitoring (APM); in which distinguished analyst and research VP, Will Cappelli, confirms CA as the leader in this hot area of service assurance. According to Gartner "APM now requires coordinated decisions across five distinct dimensions of functionality: end-user experience monitoring; user-defined transaction profiling; application component discovery and modelling; application component deep-dive monitoring; and application performance management database capabilities... and CA supports all five dimensions".

 

It must have been arduous, even tortuous at times, as he engaged a cacophony of jostling vendors to sift fact from fantasy and present a balanced and accurate market assessment based on Gartner's future-APM yardstick. Despite all that Mr. Cappelli rightly restates CA Wily's position as the de Facto standard in APM execution. In other words if you are planning to avoid potentially catastrophic business risk from poorly performing web applications you go to CA Wily. I commend him. I would however add that CA was considered best able to execute 5 years ago and retains that position because of highly targeted innovation that resonates with customer needs; not despite it. For example we have been incredibly focused on helping our customers define, measure, and perhaps most importantly assure exceptional customer experience - providing real benefits at the end of the road. This is the key to retaining the best customers and finding new ones even in a down economy; see the video The Customer Experience: The Ultimate Question Featuring the President and CEO from Intuit and others.

 

As a result we enjoy close and mutually beneficial relationships with over 1200 of the world's leading organisations; all of whom trust us to assure over 5bn transactions a day. Every day. Take for example JN Data A/S, Intesa Sanpaolo group, Starwood Hotels and Resorts. CA continues to innovate in targeted ways to ensure our ability to execute and assure customer's services from end-to-end.


Leave a comment below. If you don't see the Add a Comment button, please log in or register.


Kobi Korsah is the Product Marketing Director for CA Wily Technology in EMEA, responsible for the CA Wily Web Application Performance Management solution. Based at CA’s EMEA headquarters in Ditton Park, he is part of the EMEA marketing group reporting to the EMEA Marketing VP. He is a seasoned technology evangelist with three years experience in Application Performance Management (APM). His previous experience with web technologies includes 15 years consulting and advocacy in content/knowledge management and search engines. Before joining CA Kobi spent six years leading technology evangelism for premier content exploitation vendors Hummingbird Inc. and four years with Autonomy plc; he also developed a knowledge management consulting practice for LB Icon. Kobi started his career at Barclays as a management trainee. He holds an HND in Business Information Technology from London Southbank University.

54 Views 0 Comments 0 References Permalink Tags: wily, cem, introscope, apm, application_performance, customer_experience, web_trasaction, application_performance_management, service_assurance, service_provider, cloud, service_level_agreement, soa, kobi_korsah

by Kobi Korsah

 

Today's world is increasingly dominated by complex web applications; presenting significant challenges with regards to customer interaction. CA, together with customer experience consultants, Foviance, and Glasgow Caledonian University, has just completed a unique neurological experiment examining the reactions and behaviour of consumers as they encounter and interact with poorly performing websites.

 

Using electroencephalography, we monitored the brain waves of 13 participants between the ages of 22 and 42 as they attempted to make regular online purchases such as a computer or an insurance policy as we simulated a poor experience. We also monitored their eye and facial movements as they went through the process so we could chart both neurological and physiological reactions. The results of the experiment show conclusively that poorly performing web applications are a very frustrating problem for all users of web applications, a phenomenon which we have dubbed ‘web stress' http://www.ca.com/gb/content/campaign.aspx?cid=229165. The experiment has proven beyond a shadow of a doubt that web stress is bad for businesses because it results in lost business and loss of reputation.

 

As remote working, play, shopping, banking, and everything in between increasingly help keep the wheels of commerce turning; a good customer experience becomes more important to retain custom, recruit new customers and grow. Consider for a moment online retail which is set to grow to €323 billion in Europe by the end of 2011 - a 25% increase year-on-year since 2007. It is also worth noting that one third of Europe's online population visited an oline banking property in February 2009. As the growth of online retail, and banking, (and all online business) gathers pace, any frustrations that consumers have with poorly performing web applications will hamper a company's ability to stay competitive.

 

This provides a wake-up call for all businesses to ensure that they are providing optimal customer experiences and that the increasingly complex web applications that serve these experiences are always healthy and highly available - an area in which CA Wily Application Performance Management can help.

 

Leave a comment below. If you don't see the Add a Comment button, please log in or register.

 

korsah.avatar.aspx.jpegKobi Korsah is the Product Marketing Director for CA Wily Technology in EMEA, responsible for the CA Wily Web Application Performance Management solution. Based at CA’s EMEA headquarters in Ditton Park, he is part of the EMEA marketing group reporting to the EMEA Marketing VP. He is a seasoned technology evangelist with three years experience in Application Performance Management (APM). His previous experience with web technologies includes 15 years consulting and advocacy in content/knowledge management and search engines. Before joining CA Kobi spent six years leading technology evangelism for premier content exploitation vendors Hummingbird Inc. and four years with Autonomy plc; he also developed a knowledge management consulting practice for LB Icon. Kobi started his career at Barclays as a management trainee. He holds an HND in Business Information Technology from London Southbank University.

98 Views 0 Comments 0 References Permalink Tags: wily, cem, introscope, apm, application_performance, customer_experience, web_trasaction, application_performance_management, service_assurance, service_provider, cloud, service_level_agreement, soa, kobi_korsah

I have recently done some work related to DB2 for z/OS data sharing, and that has me wanting to share with you a couple of items of information concerning group buffer pools (coupling facility structures used to cache changed pages of tablespaces and indexes that are targets of inter-DB2 read/write interest). First I'll provide some thoughts on group buffer pool sizing. After that, I'll get into the connection between local buffer pool page-fixing and group buffer pool read and write activity. [Lingo alert: GBP is short for group buffer pool, and "GBP-dependent" basically means that there is inter-DB2 read/write interest in a page set (i.e., a tablespace or or an index or a partition).]

How do you know if bigger is better? A lot of folks know that a group buffer pool should be at least large enough to prevent directory entry reclaims (reclaims are basically "steals" of in-use GBP directory entries to accommodate registration of newly, locally cached pages of GBP-dependent page sets, and you want to avoid them because they result in invalidation of "clean" pages cached in local buffer pools). The key to avoiding directory entry reclaims is to have enough directory entries in a GBP to register all the different pages that could be cached in the GBP and in the associated local buffer pools at any one time (you also want to make sure that there are no GBP write failures due to lack of storage, but there won't be if the GBPs are large enough to prevent directory entry reclaims). For a GBP associated with a 4K buffer pool, and with the default 5:1 ratio of directory entries to data entries, sizing to prevent directory entry reclaims is pretty simple: you add up the size of the local pools and divide that figure by three to get your group buffer pool size; so, if there are two members in a data sharing group, and if BP1 has 6000 buffers on each member, directory entry reclaims will not occur if the size of GBP1 is at least 16,000 KB (the size of BP1 on each of the two DB2 members is 6000 X 4 KB = 24,000 KB, so the GBP1 size should be at least (2 X 24,000 KB) / 3, which is 16,000 KB). Let's say that your GBPs are all large enough to prevent directory entry reclaims (you can check on this via the output of the DB2 command -DISPLAY GROUPBUFFERPOOL GDETAIL). If you have enough memory in your coupling facility LPARs to make them larger still, should you? If you do enlarge them, how do you know if you've done any good?

Start by checking on the success rate for GBP reads caused by buffer invalidations (when a local buffer of DB2 member X holds a table or index page that is changed by a process running on DB2 member Y, the buffer in member X's local pool will be marked invalid and a subsequent request for that page will cause member X to request the current version of the page, first from the GBP and then, in case of a "not found" result, from the disk subsystem). Information about these GBP reads can be found in a DB2 monitor report or online display of GBP information, or in the output of a -DISPLAY GROUPBUFFERPOOL MDETAIL command. In a DB2 monitor report the fields of interest may be labeled as follows (field names can vary slightly from one monitor product to another -- note that "XI" is short for "cross-invalidation," which refers to buffer invalidation operations):

GROUP BP1..........................QUANTITY
---------------------------........--------
SYN.READS(XI)-DATA RETURNED............8000
SYN.READS(XI)-NO DATA RETURN...........2000

In -DISPLAY GROUPBUFFERPOOL MDETAIL output, you'd be looking for this:

DSNB773I - MEMBER DETAIL STATISTICS
.............SYNCHRONOUS READS
...............DUE TO BUFFER INVALIDATION
.................DATA RETURNED..................= 8000
.................DATA NOT RETURNED..............= 2000

The success rate, or "hit rate," for these GBP reads would be:

(reads with data returned) / ((reads with data returned) + (reads with data not returned))

Using the numbers from the example output above, the success rate for GBP reads due to buffer invalidation would be 8000 / (8000 + 2000) = 80%.

Here's why this ratio is useful: buffer invalidations occur when a GBP directory entry pointing to a buffer is reclaimed (not good, as previously mentioned), or when a page cached locally in one DB2 member's buffer pool is changed by a process running on another member of the data sharing group (these invalidations are good, in that they are required for the preservation of data coherency in a data sharing environment). If you don't have any buffer invalidations resulting from directory entry reclaims, invalidations are occurring because of page update activity. Because updated pages of GBP-dependent pages sets are written to the associated GBP as part of commit processing, a DB2 member looking for an updated page in a GBP should have a reasonably good shot at finding it there, if the GBP is large enough to provide a decent page residency time.

So, if you make a GBP bigger and you see that the hit ratio for GBP reads due to invalid buffer has gone up for the member DB2 subsystems, you've probably helped yourself out, performance-wise, because GBP checks for current versions of updated pages are more often resulting in "page found" situations. Getting a page from disk is fast, but getting it from the GBP is 2 orders of magnitude faster (3 orders of magnitude if you have to get the page from spinning disk versus disk controller cache).

By the way, the hit ratio for GBP reads due to "page not in buffer pool" (labeled as such in -DISPLAY GROUPBUFFERPOOL MDETAIL output, and as something like SYN.READS(NF) in a DB2 monitor report or display) is not so useful in terms of gauging the effect of a GBP size increase. These numbers reflect GBP reads that occur when DB2 member is looking in the GBP for a page it needs and which it doesn't have in a local buffer pool. This has to be done prior to requesting the page from disk if the target page set is GBP-dependent, but a GBP "hit" for such a read is, generally speaking, not very likely.

One more thing: if you make a GBP bigger and you are duplexing your GBPs (and I hope that you are), be sure to enlarge the secondary GBP along with the primary GBP. If you aren't duplexing your GBPs (and why is that?), make sure that all your structures can still fit in one CF LPAR (in a two-CF configuration) after the target GBP has been made larger.

Buffer pool page-fixing: good for more than disk I/Os. Buffer pool page-fixing, introduced with DB2 for z/OS V8, is one of my favorite recent DB2 enhancements (I blogged about it in an entry posted in 2008). People tend to think of the performance benefit of buffer pool page-fixing as it relates to disk I/O activity. That benefit is definitely there, but so is the benefit -- and this is what lots of people don't think about -- associated with GBP read and write activity. See, every time DB2 writes a page to a GBP or reads a page from a GBP, the local buffer involved in the operation must be fixed in server memory (aka central storage). If the buffer is in a pool for which PGFIX(YES) has been specified, that's already been done; otherwise, DB2 will have to tell z/OS to fix the buffer in memory during the GBP read or write operation and then release the buffer afterwards. A single "fix" or "un-fix" request is inexpensive, CPU-wise, but there can be hundreds of page reads and writes per second for a GBP, and the cumulative cost of all that buffer fixing and un-fixing can end up being rather significant. So, if you are running DB2 in data sharing mode and you aren't yet taking advantage of buffer pool page-fixing, now you have another reason to give it serious consideration.

129 Views 0 Comments 0 References Permalink Tags: group_buffer_pool, buffer_pool, robert_catterall, db2, z/os

by Kobi Korsah

 

I just read a really interesting piece on The Future of Online Customer Experience.

 

I was particularly intrigued by this as I am currently involved in some scientific research to chart the effects of Web Stress as they affect consumer attitudes to online transactions. The results of the experiments (which will be published on the 24th of February) are most illuminating. But this article has prompted me to blog about the paths via which consumers engage rapidly evolving, and reemphasising the point that the cost of not knowing how any interactions via these sophisticated multi-touch experiences perform is a clear, ever-present and growing risk to online purveyors of goods and services. Every provider of stuff wants to deliver a fresh experience that captivates customers and keeps them coming back for more. As the trends outlined here unfold and consumers increasingly control what they get and the form that they get it in, an extraordinary insight into customer experiences will be ever more important - but harder still to achieve. It is also worth remembering that the underlying technologies and environments that deliver the stuff that consumers will be able to pull from different sources and combine to create that unique experience; are also rapidly evolving. In a different survey conducted with IDG in 2008 we asked 400 CIOs across the globe a number of probing questions about the customer experience - one key insight is captured below.

 

 

As organisations surf the tide of consumer choice across multiple channels in their quest to win new custom and grow; they must contend with ever more discerning but less loyal customers. This further accentuates the value of delivering great customer experiences. To combat the challenging forces at work in today's buyers-market they are adopting sophisticated business retention and attraction strategies to increase wallet-share. They are also deploying innovative technologies across both physical and virtual channels to assure uninterrupted, efficient, speedy services that exceed customers' expectations; so they need to assure that these increasingly complex technologies underpinning services do not themselves pose a business threat. So again I say - do you feel lucky? Or would you rather be intimately aware of how customer interactions with your services are behaving and why; so you can consistently deliver an optimal experience across all channels today and tomorrow? You can explore this point of view further here.

 

Leave a comment below. If you don't see the Add a Comment button, please log in or register.

korsah.avatar.aspx.jpegKobi Korsah is the Product Marketing Director for CA Wily Technology in EMEA, responsible for the CA Wily Web Application Performance Management solution. Based at CA’s EMEA headquarters in Ditton Park, he is part of the EMEA marketing group reporting to the EMEA Marketing VP. He is a seasoned technology evangelist with three years experience in Application Performance Management (APM). His previous experience with web technologies includes 15 years consulting and advocacy in content/knowledge management and search engines. Before joining CA Kobi spent six years leading technology evangelism for premier content exploitation vendors Hummingbird Inc. and four years with Autonomy plc; he also developed a knowledge management consulting practice for LB Icon. Kobi started his career at Barclays as a management trainee. He holds an HND in Business Information Technology from London Southbank University.


29 Views 0 Comments 0 References Permalink Tags: wily, cem, apm, application_performance, customer_experience_transactions, crm, application_performance_management, service_assurance, cloud, transaction, services, applications, kobi_korsah

by Matthew Gardiner

 

At this year's RSA 2010 Conference the Kantara Initiative is celebrating its first birthday with a day-long workshop entitled Technology, Policy, and Compliance for Identity Services in 2010 & BeyondIt was just a year ago at the RSA Conference 2009 that a number of organizations publicly announced their intention to found this identity focused industry consortium.  Soon after, in June of 2009, the Kantara Initiative was officially born.  This prompted my first blog about the organization.

 

In many ways this workshop shows both the progress of and the need for Kantara.  As the identity industry has matured and broadened so must the collaboration around the issues of technology, policy, privacy, and compliance.  No longer is identity an exclusively large enterprise issue.  Like with other technologies, what is for the consumer and what is for the enterprise are blurring and colliding.  Just look at the participating organizations for the workshop, in addition to identity and security vendor mainstays such as CA and Oracle, you have well known organizations that at first blush might not be considered identity-centric organizations, such as PayPal, NTT, Google, NIH and others.  This workshop really represents a microcosm of the broader identity marketplace -- all in one convenient room at the Moscone Center.

 

In my session, Identity as Security Glue for the Cloud, I will be presenting with Chris Sharp of MEDecision.  Without tipping my hand too much, I plan to review the models of cloud computing (SaaS, PaaS, IaaS) and how categories of identity and access management and related standards play a central role in how security must be managed both for and in the cloud.  As a live example, Chris will discuss his healthcare related service and how he is using standards-based identity services to keep operations running smoothly.

 

If you are coming to the RSA Conference I encourage you to register for this Kantara workshop and take part in the celebration.

 

Leave a comment below. If you don't see the Add a Comment button, please log in or register.

gardiner.avatar.aspx.jpg


Matthew Gardiner is a Director working under the Security and Compliance business unit at CA, Inc., and is a recognized industry leader in the security management & IAM markets worldwide. He is published and interviewed regularly in leading industry media on a wide range of IAM and security-related topics. He is a member of the Liberty Alliance and the Kantara Initiative Board of Trustees. Matthew has a BSEE from the University of Pennsylvania and an SM in Management from MIT's Sloan School of Management.
29 Views 0 Comments 0 References Permalink Tags: kantara_initiative, identity_and_access_managment, rsa_conference, matthew_gardiner

by Yves Le Roux

 

On February 11, 2010, the European Parliament refused to give its consent to the EU's (European Union) interim agreement on banking data transfers to the USA via the SWIFT network, amid concerns for privacy, proportionality and reciprocity. This move renders the text signed between the US and the 27 EU Member states legally void. The parliament's president, Jerzy Buzek, said the assembly wants more safeguards for civil liberties and believes human rights have been compromised in the name of security. Underscoring the importance of the agreement to the United States, Secretary of State Hillary Rodham Clinton and Treasury Secretary Timothy F. Geithner had promised to cooperate with the Parliament in negotiating the long-term accord.

 

This is a typical conflict of European data privacy laws vs.US counter-terrorism laws.

 

On one hand, the United States Department of the Treasury wants access to financial payment messaging data stored in the territory of the European Union for preventing and combating terrorism and its financing. On the other hand, this access is considered as a departure from European law and practice in how law enforcement agencies would acquire individuals' financial records for law enforcement activities, namely individual court-approved warrants or subpoenas to examine specific transactions instead of relying on broad administrative subpoenas for millions of records.

 

SWIFT is a member-owned cooperative that provides the communications platform, products and services to connect over 8,600 banking organisations, securities institutions and corporate customers in more than 208 countries. SWIFT is responsible for routing about $6 trillion daily among banks, brokerage houses, stock exchanges and other institutions.

 

As a result, SWIFT is caught in the middle of a conflict between E.U. data privacy laws and US counter-terrorism laws. This may happen to other multi-national companies and may be solved at the national level only.

 

What are your views around this conflict of laws?

 

Leave a comment below. If you don't see the Add a Comment button, please log in or register.

leroux.avatar.aspx.jpg

Yves Le Roux boasts nearly four decades of experience in information and network security, standardization, compliance and risk. Currently, he is CA’s GRC expert in EMEA, based in France, where he works with customers to develop strategic GRC programs and solutions. Yves is an active member of several international organizations and advisory boards, including the European Network and Information Security Agency (ENISA), Permanent Stakeholders’ Group (PSG), the ISACA Security Management Committee, as well as the (ISC)2® European Advisory Board (EAB), the (ISC)2® CBK Review Committee, and the (ISC)2® Journal Editorial Board. He is also an (ISC)2® authorized Instructor for the CISSP CBK Review Seminar. In his spare time, as a typical Frenchman, Yves enjoys cooking and wine-tasting, but doesn’t wear a “beret.” Due to his origin, he loves the Breton folk music played by Alan Stivell or Tri Yann.
56 Views 0 Comments 0 References Permalink Tags: eu_data_protection_directive, data_privacy, swift, counterterrorism
RSS feed of this list 1 2 3 ... 11 Previous Next