IPv6/VSE Update WAVV 2012 Jeffrey Barnard Barnard Software, Inc. © 2012 by Barnard Software, Inc.

Latest IPv6/VSE Announced at WAVV 2009 GA Build 246 delivered May 2009 GA Build 252 of IPv6/VSE is now available Virtually all 3 rd party vendors (worldwide) now have IPv6/VSE support!

News Flash! IBM licenses IPv6/VSE from BSI 5686-BS1 is IBM IPv6/VSE Announced April 6, 2010 Available May 28, 2010 IPv6/VSE now provides IPv4 too! Announced Oct 5, 2010 Available Nov 26, 2010

IPv4 Addresses Remaining Time is running out Sept 28, days is May 26, 2011 All IPv4 Addresses allocated!

IPv4 Addresses Remaining Time is up Feb 3, 2011 All IPv4 Addresses allocated!

IPv4 Addresses Remaining

Are You Ready? Asia is already out of IPv4 addresses Europe will run out of IPv4 addresses very soon Are you ready? How will this affect your busines operations? How will you communicate with your customers when they are using IPv6?

IPv6/VSE for z/VSE Internet Protocol Version 6 - IPng (IP Next Generation) IPv6 TCP/IP stack (April 2009) IPv4 TCP/IP stack (May 2000) IPv4 and IPv6-Enabled Application Suite SLL support is now available!

IPv6/VSE IPv6 Applications FTP server, FTP client TN3270E server and print drivers NTP server, NTP client System Logger client Batch client Batch LPR Batch Remote Execution Client Batch PING GZIP Data Compression PDF Generation And more …

IPv6/VSE IPv4 Applications FTP server, FTP client TN3270E server and print drivers NTP server, NTP client System Logger client Batch client Batch LPR Batch Remote Execution Client Batch PING GZIP Data Compression PDF Generation And more …

IPv6/VSE IPv4 Support CICS TS Web Services CICS TS Listener z/VSE Connector Client and Server VTAPE DB2 Client and Server 3 rd Party Vendor Applications And Much More... Many Years of Support (TCP/IP-TOOLS – 1996)

IPv6/VSE Support IPv4 VSE/ESA 2.1 and higher z/VSE 3.1 and higher IPv6 z/VSE and higher

Large TCP Windows What is a Large TCP Receive Window? Standard size is 64K Larger windows are 'shifted' Scaled by 2/4/8/16/32/64/etc bits 1MB, 2MB, 4MB, 8MB sizes typical Why? Far fewer TCP window waits

Large TCP Windows z/VSE 4.2 or higher LTWBUF specified z/VSE 5.1 uses 64-bit storage SHIFT 4|5|6|7 specified Application requests large windows // SETPARM LRGBUF=YES Both local and remote TCP/IP stack agree to use large windows

Large TCP Windows Often referred to as 'Window Scaling' Supported by z/VM, z/OS Linux support is automatic Enlarges Window Size as needed MS Windows Automatic if requested by remote host only set the Tcp1323Opts registry value to 1 SO_RCVBUF setsockopt() controls size

Large TCP Windows Performance c application written by IBM Send() data blocks Recv() data blocks Both at the same time Tests bidirectional throughput Platform z/VSE zLinux (VSwitch) 500MB transferred in BOTH directions

Large TCP Windows

Considerations Helps Outbound transfers Helps Inbound transfers (the most) Not all applications are helped Bulk data transfer helped most Interactive helped least (or not at all) Can use a lot of storage! BSTTFTPC (batch FTP), VTAPE, BSTTFTPS (FTP Server), DB2 UDB etc.

Large TCP Windows Fewer TCP Window waits is good Window wait = wait for ACK of data What is the down side? TCP retransmission can be very bad when using large TCP windows 40K vs. 3MB of 'in-flight' data... Usually not an issue on local networks

64-Bit Virtual Support Introduced in z/VSE 5.1 z/OS IARV64 macro used Storage allocated 'above the bar' 64-bit memory objects 'chunks' are multiples of 1MB in size

64-Bit Virtual Support

Stack allocates 'chunks' Used for Large TCP Windows Buffer copy routines modified Now run in 64-bit mode Supporting 24, 31 and 64-bit buffers

64-Bit Socket Storage ASM SOCKET API EZASMI What about HLL EZASOKET API? No 64-bit compilers available now Looking at a full 64-bit API (z/OS BPX4 ?) Vendors, what do you need?

64-BIT ASM SOCKET Storage 64-Bit virtual storage socket buffers Supported only for SOCKET SEND,TCP SOCKET RECEIVE,TCP High bit of buffer address X'80' is address of 64-bit buffer address Max SEND length is 2GB-1 bytes Max RECEIVE length is 8MB

64-BIT ASM SOCKET Storage

64-Bit EZASMI Socket Storage 64-Bit virtual storage socket buffers Supported only for SEND, SENDTO, WRITE RECV, RECVFROM, READ 64-Bit address is 2 fullwords ALET= specifies high word BUF= specifies low word

64-Bit EZASMI Socket Storage

Layer 2 Support Requires z/VSE 5.1 Available for IPv4 and IPv6 DEVICE statement specifies 'LAYER2' Optional user defined MAC address Layer 2 required for z/VM IPv6 Vswitch Layer 2 required for z/VM IPv6 VLAN

VLAN Support Requires z/VSE 5.1 Available for IPv4 and IPv6 Both Layer 2 and Layer 3 supported

VLAN Support DEVICE Specifies LAYER2 for z/VM IPv6 VSwitch LINK Specifies VLAN ID and Priority GLOBAL parameter is special feature of OSA Express and Hipersockets interfaces

EZA Extension – OCEXIT Support OCEXIT (Console MSG) has no HLL support Needed for servers to initiate shutdown EZA extension provides support using SELECT logic As simple as opening up an additional READ socket A MSG command issued from the console presents a read-ready condition WRITEs display data upon the console (WTO) Can also be used by non-IP programs but requires an active stack partition to satisfy the INITAPI requirements Available via EZASOKET, EZASMI, LE/C and REXX

EZA Extension OCEXIT Support SOCKET MOVE EZA-UNIX TO EZA-AF CONNECT MOVE EZA-UNIX to EZA-NAMEUX-FAMILY MOVE 'OPERATOR:MSG' TO EZA-NAMEUX- PATH SELECT for READ Restrictions: Same as OCEXIT macro: Batch, main-task only

Statement of Direction GSE Oct 2011 BSI plans to add support for SSL and IPSec in a future Build of IPv6/VSE

IPv6/VSE SSL Support Available in GA Build 252 GSK API provided EZASMI, EZASOKET, LE/C support BSTTPRXY SSL Proxy Server

IPv6/VSE SSL Support Based on IJBSSL from IBM Port of OpenSSL IJBSSL introduced with z/VSE 5.1 C/VSE application Will run on any version of z/VSE Provides software SSL Supports CPACF and Crypto Express

IPv6/VSE SSL Restrictions IJBSSL API currently uses LE/C Requires application be LE Only batch LE applications can use GSK() API. CICS not supported. These restrictions will be removed All applications are supported by the BSTTPRXY SSL Proxy Server

SSL Proxy Server BSTTPRXY z/VSE Proxy Server Accepts clear text, SSL connections IPv4 or IPv6 Proxy to clear text, SSL connection IPv4 or IPv6 SSL Proxy server 6to4 and 4to6 Proxy server

BSI Preview

IPsec Manual definitions, Pre-Shared Keys IPSEC QUERY IPSEC CONFIG|START|STOP What about automatic configuration?

BSI Preview IPsec-tools port to z/VSE Racoon IKE Commonly used by Linux systems ESP packets NATT packets ESP packets embedded in UDP Helps with firewall traversal

IPv6/VSE Update Barnard Software, Inc. The Barnard Software, Inc. Blog... Thoughts, hints and tips for using BSI products and z/VSE

BSI Blog

Win an iPad (G3) Come to our booth! Fill out a raffle ticket Drawing on Monday Time 2:30 PM Must be present to win!!

IPv6/VSE Update Thank you! WAVV 2012 Jeffrey Barnard Barnard Software, Inc. © 2012 by Barnard Software, Inc.