Re:IBM z14 Microprocessor and System Control Design
by Nokinside on Tuesday November 20, 2018 @10:42AM
(#18494617)
For IO intensive transaction processing with high security and low downtime requirements these systems are quite sweet.
IBM sells it with moniker "Pervasive Encryption" but if you look under the hood, it is actually impressive and very detailed.
Build in security at the hardware level. Especially the Crypto Express6S card. There is hardware acceleration for everything cryptography (including SHA-3 and SHAKE), tamper sensing, true random number generation. Encrypted paging in z/vm, etc. SSL/TLS can run fast. Security auditing is not an afterthought.
Of course you can add all this in special cards for x86 server racks but the cost is probably the same with lower IO throughput and less integration. Getting the same uptime in production would be significantly more expensive if not impossible.
IBM sells it with moniker "Pervasive Encryption" but if you look under the hood, it is actually impressive and very detailed.
Build in security at the hardware level. Especially the Crypto Express6S card. There is hardware acceleration for everything cryptography (including SHA-3 and SHAKE), tamper sensing, true random number generation. Encrypted paging in z/vm, etc. SSL/TLS can run fast. Security auditing is not an afterthought.
Of course you can add all this in special cards for x86 server racks but the cost is probably the same with lower IO throughput and less integration. Getting the same uptime in production would be significantly more expensive if not impossible.