CCopteron

www.
redhat.
comOVERVIEWIn2002,itmarkedthearrivalofLinuxintheenterprise.
In2003,itmatchedUNIXforreliabilityandsurpasseditinvalue.
TodayRedHatEnterpriseLinux,withtheintroductionofversion4,hasthereliability,performance,andsecuritytosignaltheendoftheproprietaryplatformintheenterprise.
RedHatEnterpriseLinuxdeliversthefullvalueofopensource.
HowThroughacommoncodebasefromdesktoptodatacenter,asubscriptionmodelthatdeliversconstantvalue,andadevelopmentmodelthatpreventsvendorlock-inandfostersinnovation.
That'swhyastudybyCIOInsightrankedRedHatthebestcompanyintheITindustryatdeliveringvaluetocustomers—#1atloweringITcosts,#1atmeetingROIexpectations,and#1atoverallvalue.
Theevolutionofstandards-basedcomputingplatformshasreachedadeningmilestone.
AstheplatformofchoiceforeverymajorOEMandISV,EnterpriseLinux4willacceleratetherapidspreadofLinuxalreadyunderway.
RedHatEnterpriseLinux4providesbenetsinfourkeyareas:AstableandmatureinfrastructurebasedontheLinux2.
6kernelTechnologiestomeettoday'ssecurityandcompliancedemandsProductivityimprovementsfromthedesktoptothecoreofthedatacenterExceptionalperformanceandscalabilityforboth32-and64-bitworkloadsASTABLEANDMATUREINFRASTRUCTUREBASEDONTHELINUX2.
6KERNELBasedontheLinux2.
6kernel,RedHatEnterpriseLinux4representsthemoststableandmaturecommercialLinuxavailable.
RedHatprovedtheenterprise-classreadinessofmuchofthe2.
6kerneltechnologyintheEnterpriseLinux3release.
Asaresult,RedHatEnterpriseLinux4includesmaturetechnologydeployedsuccessfullybymanyRedHatcustomersandincorporatesanumberofkeyimprovements,basedonRedHat'sengineeringeortsandcollaborationwiththeopensourcedevelopercommunity.
TECHNOLOGIESTOMEETTODAY'SSECURITYANDCOMPLIANCEDEMANDSSELinuxRedHatEnterpriseLinux4isthepreferredplatformforthemostdemandingsecurityorganizationsintheworld.
SecurityEnhancedLinuxisacompletelynewsubsysteminEnterpriseLinuxandprovidesasuperiorsecurityframeworktowhatisavailableintraditionalcommercialIToperatingenvironments.
SELinux,developedwiththeU.
S.
NationalSecurityAgency,implementspolicy-basedmandatoryaccesscontrolstoachievemorene-grainedsecuritymeasuresandgreaterexibilitycomparedtodiscretionaryaccesscontrolmechanisms.
Privilegesandpoliciesforeachservicearespeciedratherthanrelyingonthesimpleparadigmofusers,groups,andasinglecentralizedsuperuseraccount.
RedHatEnterpriseLinux4hasintegratedSELinuxwithadozencommonInternetfacingservicesincludingBIND,NetworkTimeProtocol(NTP),andApachesothatthebenetscanbeleveragedeasilyandwidely.
OrganizationswithextremesecuritydemandscanchoosetoimplementmorecomprehensiveSELinuxcapabilitiesacrossmoreapplicationsandevenimposeastrictSELinuxpolicyacrosseveryserviceprovided.
REDHATENTERPRISELINUX4Thedeningmilestoneintheevolutionoftheenterpriseplatformwww.
redhat.
comREDHATENTERPRISELINUXEnhancedauditingframeworkRedHatEnterpriseLinux4incorporatesthenewstandardauditingframeworkforLinuxsystems.
Thisframeworkoersconsiderableexibilitysothatsystemcallsandtheirargumentscanbelteredbyuser,group,process,anddevicewithavarietyofoptions.
Thisrigorousapproachmakesrobusteventmonitoringanddetectionsolutionspossible.
EAL4+CerticationInAugust2004RedHatEnterpriseLinux3achievedControlledAccessProtectionProlecomplianceundertheCommonCriteriaforInformationSecurityEvaluation(CC),commonlyreferredtoasCAPP/EAL3+.
RedHatcontinuestopursuehigherlevelsofassurancebysubmittingRedHatEnterpriseLinux4forEAL4+compliance.
EAL4+assuresorganizationsthatRedHatEnterpriseLinuxhasbeendesigned,reviewed,andtestedtostandardsecurityengineeringpractices.
FormoreinformationaboutRedHatcerticationsandroadmap,visithttp://www.
redhat.
com/solutions/industries/government/commoncriteria.
PRODUCTIVITYIMPROVEMENTSFROMTHEDESKTOPTOTHECOREOFTHEDATACENTERClientapplicationsRedHatEnterpriseLinux4includescoredesktopapplicationssuchas:Firefox,thenewwebbrowserthatistakingtheworldbystormOpenOce,ahigh-productivity,multi-platform,opensourceocesuiteEvolution,themostpopularemailandcalendaringsolutionforLinuxInaddition,popularmediaapplicationssuchasRealPlayerandAcrobatReaderareincluded.
CitrixandtheopensourceRdesktopapplicationallowuserstoconnecttoaWindowsterminalservertoachieveheterogeneousremotedesktopsolutions.
RedHatnowdeliverssupportfor15languages,aswellasthemostadvancedinputmethodtechnologytohandleawidevarietyofcharacterformatsforinternationaldeployments.
GNOME2.
8TheGNOME2.
8desktopsuiteanddevelopmentplatformdeliversanumberofenhancementsincluding:UsabilityimprovementsforusersandadministratorsofclientandservercapabilitiesAutomaticdetectionoflocalserversandremovabledevicessuchasUSBdevicesFasterinteractiveresponseHardwaresupportRedHatEnterpriseLinux4includesanewHardwareAbstractionLayerthatprovidesrobustplug-and-playhardwaresupport.
SupportforawidevarietyofnewperipheralshasbeenincorporatedintoRedHatEnterpriseLinux4.
TheAdvancedCongurationandPowerInterface(ACPI2.
0)enablesmorerigorouspowermanagementanddevicesupport.
WithACPInewhardwareiseasilyrecognizedsothatinstallationismuchsimpler.
ACPIalsoprovidespowermanagementfeaturesthatbenetdenseserverdeploymentsorlaptopenvironments.
InteroperabilitySamba–RedHatEnterpriseLinux4includesSamba3.
0forinteroperabilitywithWindowslesharingandprintingusingtheSMB/CIFSstandards.
TheGNOMEdesktopenvironmentautomaticallydiscoversavailableWindowslesharesandprintservicesonthelocalareanetwork.
RedHatEnterpriseLinux4alsoprovidestheabilitytointegratewithActiveDirectoryinfrastructures.
ActiveDirectoryauthenticationandaMicrosoftExchangeconnectorhavebeenintegratedintoRedHatEnterpriseLinux4.
RedHatEnterpriseLinux4isanidealplatformforanyoneus-ingNIS,kerberos,NFS,SMB/CIFS,orLDAPacrossaheterogeneousenvironment.
REDHATENTERPRISELINUX4—THEFIRSTCOMMERCIALPRODUCTTODELIVERSELINUX—ISTHEPLATFORMOFCHOICEFORTHEMOSTSECUREORGANIZATIONSINTHEWORLD.
REDHATENTERPRISELINUXISTHEIDEALPLATFORMFOR64-BITCOMPUTING.
WHENYOU'REREADY,CHANGEA32-BITSYSTEMTO64-BITASPARTOFYOURSUBSCRIPTION.
WITHONECLICKINREDHATNETWORK,YOUGETTWICETHEPOWER.
ProvisioningthroughRedHatNetworkRedHat'ssystemmanagementsolutionRedHatNetwork(RHN)providesenterprise-classtechnologiesfordeployingandmanagingLinuxsystems.
Capabilitiesforprovisioninganddeploymenthavebeenavailablesinceearly2004andarebeingusedwidelytoeliminatetheadministrationburdenwithlargeinstallations.
ThesetechnologiescanbeusedwithallreleasesofRedHatEnterpriseLinuxbuthavebeenenhancedforintegrationwiththeRedHatEnterpriseLinux4release.
EXCEPTIONALPERFORMANCEANDSCALABILITYRedHatEnterpriseLinux4improvesperformanceandscalabilitywiththefollowingfeatures:Ext3lesystemandLogicalVolumeManager2(LVM2)Ext3,thejournaledlesystemusedinthevastmajorityofcommercialLinuxdeployments,isthedefaultlesysteminRedHatEnterpriseLinux.
MajorenhancementsmadeinRedHatEnterpriseLinux4basedonthenewblockreservationcapabilityimprovebothreadandwriteI/Operformance.
Thisenhancementbenetsworkloadsthatfrequentlyaccesslargelessuchasdatabases.
OtherExt3improvementsincludeanewhash-treealgorithmthatenablesfasterleaccessesinlargedirectoriesandmoreecientsynchronizationandlockingtoincreaseSMPperformance.
RedHatEnterpriseLinux4alsoincludesLVM2,anewversionofthelogicalvolumemanager,whichallowsonlinegrowthoflesystemsforeasiermanagementofstorageresources.
VirtualmemorysubsystemImprovementsinthevirtualmemorysubsystemhavebeenincorporatedintoRedHatEnterpriseLinux4tobetteraddressmission-criticalworkloadswithlargememorycongurations,suchasdatabasedeployments.
Defaultparametershavebeenrenedsothatvirtualmemoryperformanceismoredeterministicasmemoryuseincreases.
Newfeaturesalsoallowthekerneltomapthroughdatastructuresmoreecientlyandreducepaging.
I/OsubsystemRedHatEnterpriseLinux4providesanewblockI/OlayerthatimprovesI/Operformanceandscalability.
ThisnewmoreecientimplementationrequireslessoverheadforI/Ooperationsandyieldsperformancegainsthatareparticularlynoticeablewithapplicationsthatwritelargeles.
Inaddition,thenewsub-systemallowslargerdiskpartitionstobeused.
RedHatEnterpriseLinux4includesfourI/Oscheduleroptionstooptimizesystemperformance:CompleteFairQueue(CFQ)scheduler–managesI/Orequestsandbandwidthperprocess,providingsolidperformanceacrossworkloadsthatrequirelow-latencyandhigh-throughputdemands.
Deadlinescheduler–implementsaperrequestmodelidealforapplicationslikedatabasesthatrequirefrequentdiskaccess.
Anticipatoryscheduler–addsheuristicstothedeadlineschedulertoreorderI/Oaccessesandincreasethroughput.
No-opscheduler–performsnoreorderingofI/Oaccesses.
Optimalforuseinavirtualizedenvironmentwhereanunderlyingschedulerisassumedtobepresent.
ProcessorschedulerforhyperthreadedandmulticoredevicesPreviousreleasesofRedHatEnterpriseLinuxprovidedsupportforhyperthreadedCPUs.
RedHatEnterpriseLinux4providesamorerenedgenericlogicalprocessortaskschedulerthataccommodatesbothhyperthreadedand/ormulticoretechnologies.
Hyperthreadingenablesapplicationstonishtasksmorequicklybyexecutingmultiplethreadsinparallelonasingleprocessor.
Multicorecapabilitiesachieveasimilarresultacrossmultipleprocessingunitsinasinglephysicaldevice.
www.
redhat.
com2005RedHat,Inc.
Allrightsreserved.
"RedHat"andthe"Shadowman"logoareregisteredtrademarksofRedHat,Inc.
intheUSandothercountries.
LinuxisaregisteredtrademarkofLinusTorvalds.
Allothertrademarksreferencedhereinarethetrademarksoftheirrespectiveowners.
INS76971US,01/05AutoFSv.
4Theautomounterenablesscalable,exibledeploymentofnetworklesystemsacrossyourenterprise.
ThislatestversionoftheLinuxautomounterachievesanewlevelofperformanceandstabilityformountinglesystemswhilerunningmission-criticalworkloads.
RedHatEnterpriseLinuxoersbetternetworkresponseunderhighloadswiththeNewAPI(NAPI).
TheNewAPIavoidscongestionbytakingadvantageofpollingasnetworkloadincreasesandreturningtoaninterruptmechanismastheloaddecreases.
ThisisparticularlyusefulforsystemswithGigabitEthernetlinks.
GCC3.
4RedHatEnterpriseLinux4isbuiltusingthelatestversionoftheindustry-standardGNUCompilerCollectiontoolchain.
AnumberofenhancementsareprovidedinGCC3.
4forISVdevelopersandthosedeployingapplications.
Portabilityiseasedsignicantlyduetogreaterstandardscompliance.
Thetoolchainalsoprovidescapabilitiesfor32-bitapplicationstorunon64-bitsystemsandyieldsbetteroveralloptimization,particularlyon64-bitarchitectures.
Fortran95supporthasbeenincorporatedtoGCC3.
4aswell.
RedHatEnterpriseLinux4includescompatibilitylibrariesthatenableapplicationsthatwerepreviouslycertiedontheversions2.
1and3torunwithoutrecompilation.
Third-partyapplicationscanbecertiedonversion4usingtheexistingbinaryexecutablewiththecompatibilitylibrariesorusingarecompiledbinarythatwillbenetfromthenewcapabilitiesintherelease.
SYSTEMCAPACITYLIMITSRedHatiscontinuallytestingandqualifyingRedHatEnterpriseLinuxonavarietyofsystems.
Pleaserefertohttp://www.
redhat.
com/software/rhel/congurationforthelatestinformationonsupportedsystemcongurationdetailslikethenumberofCPUsortheamountofmemorysupportedforeachRedHatEnterpriseLinuxrelease.
REDHATSALESANDGENERALINQUIRIESUSA/Canada1-888-RED-HAT11-866-273-3428x44555sales@redhat.
comWorldwideoces+1-919-754-3700visitwww.
redhat.
com/about/corporate/wwocesSMPandNUMAAnumberofscalabilityenhancementshavebeenincorporatedintoRedHatEnterpriseLinux4thatimproveperformanceforapplicationsusingthreads.
Thesebenetsapplyregardlessofwhetherhyperthreadingisusedandwhattypeofmachineisdeployed—uniprocessor,SymmetricMultiProcessor(SMP),orNon-UniformMemoryArchitecture(NUMA)machines.
Algorithmshavebeenstreamlinedsothatkerneldatastructurescanbeaccessedmoreecientlywhentheyarereadandupdatedbymultiplesources.
Non-UniformMemoryArchitecture(NUMA)supportprovidesgreaterperformanceonmultiprocessorsystemswherememoryispartitionedbetweenCPUsorgroupsofCPUs.
ThisisparticularlyapplicableinhighCPUcountsystemsbutalsoprovidesgainsfor2-wayOpteronandItaniumprocessor-basedsystems.
NUMAtechnologyallocatesmemoryforprocessesmoreecientlyandaNUMAAPIprovidestightercouplingsothatapplicationscaninformtheOSwherememoryshouldbeallocated.
Thisreducesbothlatencyandcontentionforresourcestoimproveoverallapplicationperformance.
PCIExpressSupportforthePCIExpressinterconnectstandardenablesfasterI/OandenablesmoreecientSMPmachines.
NetworkingcomponentsRedHatEnterpriseLinux4providessupportforNFSv.
4,thenewestversionoftheNFS(NetworkFileSystem)protocol.
TheabilitytoshareandmountotherlesystemsthroughtheNFSprotocolisoneofthemostcriticalcapabilitiesinanyLinuxsystem.
NFSv.
4improvesnetworkperformancethroughmorerenedlelockingandbydelegatingleoperationstoaclientwhenaleisbeingaccessedsolelybythatclient.
NFSv.
4alsoprovidesbettersupportforACLs(AccessControlLists)andothersecurityfeatures.