Getting a Feel for Solaris 10

Solaris has always had the edge over Linux when it comes to scalability; SunOS had its roots in big iron. As a FreeBSD user first and a Linux user second (and a Windows user a distant third), a lot of things felt very familiar inside Solaris 10. Sun's Java Desktop System, JDS, is immediately recognizable as a SUSE derivative. We won't touch on JDS too much in the next couple pages, but instead focus on the underlying kernel and some Solaris's more interesting and original features.

As we mentioned earlier, scalability is a big issue but if anyone can tackle that obstacle, it's Sun. Sun spent a lot of time getting Solaris 10 ready for x86, and as you will see in our benchmarks section, the "Slowlaris" moniker might be dead. Solaris 10 features a new scheduler that allows per-CPU optimizations as well as faster string functions, SSE2 support and new x86_64 specific libc system calls. Granted, we would like to see some SSE3 optimizations as well, but these features sound pretty good for now.

One of the neatest, unexpected features in Solaris 10 was Zones; also known as N1 Grid Containers. Zones behave very similar to UserMode Linux (UML); each Zone is a virtual instance of Solaris 10 with it's own IP address and user land. However, Zones are different because each virtual OS shares the base kernel. This is a huge performance boost for the virtual operating system because each instance is not constantly waiting for resources like in UML; they can just demand them when necessary. Zones can be configured to only utilize a specified amount of resources as well. Of course the downfall to this is if a single Zone is compromised, the whole system is effectively compromised. Fortunately, compromising a Solaris 10 system is not an easy task either; additional Process Rights Management and User Rights Management are prevalent in Solaris 10.

David Comay from Sun writes:

    One of the design goals of Zones was to ensure that if a single zone *was* compromised that the whole system would *not* also be compromised. We believe that we achieved that to a very large extent in Solaris 10. From an isolation perspective, the primary weakness is that there is a single kernel and if a user program somehow trips over a kernel bug and causes the system to panic, then of course, that affects the whole system. But from a security perspective, someone who is a privileged user (namely, root) in a zone can only cause damage to that zone and *not* the system as a whole. The virtualization that Zones provides ensures that they're not able to see, affect or modifyprocesses and their data running in other zones on the system.

Dynamic Tracing (DTrace) was another heavily hyped feature of Solaris 10, and rightfully so. DTrace, and it's scripting language D, allow an administrator or a developer to observe and debug problems in a production system with very little overhead. The problem with traditionally debugging tools like gdb, truss, pstack and ptrace is several fold:

  • We need to either monitor everything on the system, or only very specific processes - it would be impossible to trace every process on the system
  • We can only view a core dump of a snapshot in time - often times administrators and developers have transient problems
  • Usually, a program like gdb needs to halt or stop the system - in a production server this isn't acceptable
  • A poor debugging routine can actually be more detrimental than helpful - debugging a system incorrectly can actually bring it down, which is totally unacceptable at times

DTrace can effectively do the same as truss, pstack or ptrace but it can also be used on a production system without completely crippling it via "Probes" that are inserted all over the OS. Sun's DTrace introduction conference explains some of DTrace's functionality in a 40 minute session for those really interested in all of it's features. It's kind of like installing 30,000 debug statements all over the kernel, and allowing the admin to collect data from these probes whenever they would like via DTrace.

Solaris is really a developer's dream. During the V40z's brief stay in our labs, we actually used the machine extensively for development of our RTPE software platform; partially because the V40z is 10 times more powerful than our entire RTPE cluster, but partially because of DTrace, MDB and libumem. Using some of the examples from the DTrace introduction above, we were able to use the analyzer to isolate instances where some of our RTPE bots were getting preempted for supposedly no reason at all. Kudos to that team at Sun!

Just a few weeks ago Sun opened Solaris 10 to all with OpenSolaris; Sun's partially open sourced version of Solaris under the CDDL license. OpenSolaris now provides much of the OS core for modification, but not the entire OS just yet. According to the OpenSolaris roadmap, crypto and storage drivers should be available soon, which would be a great step forward for the entire FOSS community.

New Changes to the V40z But... (Solaris 10 Cont.)
POST A COMMENT

47 Comments

View All Comments

  • nottlv - Tuesday, July 05, 2005 - link

    #46; the 8 way record claim was for a 64-bit JVM. The PowerPC result you reference was for a 32-bit JVM. specjbb stresses the memory architecture heavily (there's no I/O); the submitted result from IBM include a machine with 64GB of RAM, while the Sun Opteron box had 16GB, and they are running different JVM versions. If you look at the lower numbered runs you'll notice they're pretty close (the Opteron being slightly ahead), but that it hits it's wall much earlier due to significantly less RAM. Reply
  • jjames5 - Tuesday, July 05, 2005 - link

    8 way jbb2000 world record - right!

    This result is a year old and still bests the sun with over 50%:

    http://www.spec.org/jbb2000/results/res2004q3/jbb2...
    Reply
  • nserra - Friday, July 01, 2005 - link

    #34 That is plain stupid, it isnt from been taken out that it will protect him (if thats the true), or the microsoft guys cant read forums where the article have been already posted.

    Microsoft only have to look for who usually talk with anand.

    Reply
  • Opteron - Friday, July 01, 2005 - link

    Forget my last comment...


    ps. i missed 4 way Xeon and Itanium systems :D
    Reply
  • Opteron - Friday, July 01, 2005 - link

    There is miscalculations about percentages, those are calculated wrong.

    In http://images.anandtech.com/graphs/sun%20fire%20v4...

    comment is:
    " We see a 43% performance increase over the quad Opteron 250 V40z; certainly impressive but we would like to see more."

    But actually it's almost 64% since there is no point in comparing 5 threads vs 5 in a 8core system..
    Reply
  • Googer - Friday, July 01, 2005 - link

    Where did the article go? Reply
  • KristopherKubicki - Thursday, June 30, 2005 - link

    Den: Very true but recall that our previous test was done on Opteron 850s instead of Opteron 852s. The 852 performs a bit better than th 850.

    opus13i: We have been stuckin MI redtape land for some time. It wouldn't make sense to change the benchmark at this point either because our previous tests used the 32-bit single core solution. Since they don't seem to have much desire to provide us with the correct license we will probably drop that benchmark in favor of something a little more versatile.

    Kristopher

    Kristopher
    Reply
  • jkostans - Thursday, June 30, 2005 - link

    I dont care who made the hardware, its a hell of a machine. I wish Intel had to rely on inovation and good products to survive like AMD does. Intel really doesn't have many products capable of out performing AMDs equivalent anymore. Reply
  • opus13i - Thursday, June 30, 2005 - link

    ugh.

    Did you even bother to check with mental images? With a simple phone call you could have had the proper licensing in place for 8 cores, as well as every possible variation of 64bit possible.

    "We include Mental Ray and Shake as a point of reference, although both applications are strictly 32-bit at this time. Mental Ray is further hindered by the fact that the version we have is not SMP-aware."

    way to go detective, i dont suppose you actually looked at teh specifications did you?

    http://www.mentalimages.com/2_1_2_configurations/i...

    no 64 bit indeed.



    Reply
  • Xunilla - Thursday, June 30, 2005 - link


    You folks are giving Sun a bit too much credit on the hardware portion of this review. In reality, the system OEM is a company called Newisys, a subsidiary of Sanmina-SCI.
    Reply

Log in

Don't have an account? Sign up now