SUSE Linux Enterprise Server for SAP Applications RoadmapFrom ERP to Big Data

Peter SchinaglTechnical Architect Global SAP Alliancespeters@suse.com

2

SUSE Linux Enterprise Server for SAP Applications

- Evolution -

SLES

SAP's development platform

Certified SAP specific

packages Priority Support

for SAP

2006SLES for

BAiO Fast Start

Installation Wizard

Available for validated SAP solutions (BAiO)

Hardware bundles

2008SLES for SAP

Enterprise Search

Installation Framework with Cluster Support

ESPOS Available for

validated SAP solutions (ES)

SLES 10 SP3

2010SLES for

SAP Applications

Installation Framework supports generic SAP installations

SLES 11 SP1

2011SLES for

SAP Applications

SAP HA certification

ClamSAP SLES 11 SP2

2012SLES for

SAP Applications

SAP BOne HANA

SLES 11 SP3

20131999

3

Main Use-Case for SLES in SAP Environments

Top 12Price/Performanceare x86_64 CPUs

Source: Realtech

5

X86_64 servers with two and four sockets deliver sufficient performance for 99% of all possible SAP applications

Source: Realtech

6

Reliable, Scalable and Secure Operating SystemSUSE Linux Enterprise Server

High AvailabilitySAP Netweaver & SAP HANA

Faster InstallationSAP Installation Wizard

Page Cache Management

AntivirusClamAV

SAP Specific Update Channel

24x7 PRIORITY SUPPORT for SAP

24x7 PRIORITY SUPPORT for SAP

18 Month Grace PeriodLong-Term Service Pack Support

Simplify Linux for SAP WorkloadsSUSE Linux Enterprise Server for SAP Applications 11

7

The recommended and supported operating system for SAP HANA

SUSE Linux Enterprise Server

8

Example Hardware Evolution

2 Sockets 4 Sockets 8 Sockets2 Cores Up to 8 Cores Up to 15 Cores

No HT HT HT

= 4 CPUs = 32 CPUs = 120 CPUs= 64 HT CPUs = 240 HT CPUs

9

Work with Vendors

10

#1 Platform for SAP HANASUSE Linux Enterprise Server for SAP Applications

Automate SAP HANA System Replication

12

SAP HANA Scenarios

Source: SAP HANA in Data Centers

HWSAP

Business Continuity

HA per Datacenter

Disaster recovery between Datacenter

SAP HANA Host Auto Failover(scale out with standby)

SAP HANA System Replication SAP HANA System Replication

SAP HANA Storage Replication

SAP

HW

SAP

13

Automate SAP HANA System Replication

Service Level Agreement

SAP HANA SystemReplication

SUSE High Availability Solution

14

SAP HANA System ReplicationPowered by SUSE High Availability Solution

resource failover

active / active

node 1 node 2

N M

A B

N M

A B

HANADatabase

HANAmemory-preloadA B

SystemReplication

HANA PR1primary

HANA PR1secondary

15

From Concept to ImplementationSUSE High Availability Solution for SAP HANA

SAP HANAPrimary

SAP HANASecondary

vIP

SAPHana Master/Slave ResourceMaster Slave

SAPHanaTopology Clone ResourceClone Clone

suse01 suse02

Cluster Communication

Fencing

16

What is the Delivery?SUSE Linux Enterprise Server for SAP Applications

The package SAPHanaSR the two resource agents

SAPHanaTopology SAPHana

HAWK setup Wizard (as technical preview)

The package SAPHanaSR-doc the important SetupGuide

Secure SAP HANA OS

18

Securing SAP HANA with SUSE Linux

SUSESecurity Guide

OS SecurityHardening Guidefor SAP HANA

SAP HANASecurity Guide

Operating System genericSAP HANA specific

19

Customized OS Security Hardening for SAP HANA

Security Hardening Settings for HANA

SUSE Firewall for HANA

Minimal OS package selection

SUSE Security Updates

20

Security Hardening SettingsDetailed Example: Prohibit login as root via ssh

DescriptionBy default, the user root is allowed to remotely log in via ssh. This has two disadvantages: First, root logins are logged, but cannot be associated with a particular user. This is especially a disadvantage if more than one system administrator makes changes on the system. Second, a stolen root password allows an attacker to login directly to the system. Instead of logging in as a normal user first, then doing su or a sudo, an attacker just requires the root password. ProcedureEdit /etc/ssh/sshd.conf and set parameter

PermitRootLogin no

ImpactRoot no longer can be used to login remotely, so that users are required to use su or sudo to gain root access when using ssh. Priority: high

21

SUSE Firewall for SAP HANAExample of a Physical Network Diagram

22

Minimal OS Package SelectionComparison Between Package Selections

Amount of installed packages0

200

400

600

800

1000

1200

1400

SLES Standard Installa-tionBase + Minimal + addi-tional packagesBase + Minimal

23

Why Patching?

Security Fixes

Stability Improvements

Bug Fixes

Updated Drivers

Increased Speed

24

Solutions for SAP HANA Summary

Available today ! Simplify Linux for SAP HANA Automate SAP HANA System Replication Secure SAP HANA OS Simplify the management of SAP HANA OS

Setup private cloud for SAP workload (Netweaver) Backup & Recovery for SAP HANA (with SEP)

Outlook for SLES-for-SAP Applications 12

26

Downtime isn't an optionDowntime isn't an option

SUSE Linux Enterprise 12- Main Theme -

27

SUSE Linux Enterprise 12

Increaseuptime

Improve operational efficiency

Accelerateinnovation

The advanced foundation for your success

28

Modules: An Easier Way to Get New Enhancements Easier access to the latest updates

Different lifecycles, ranging from continuous integration to three years

Fully maintained and supported

Included in subscription without additional cost

Five optional modules besides base OS

29

Module Name Content Lifecycle

Web and Scripting Module PHP, Python, Ruby on Rails

3 years, 18 months overlap

Legacy Module Sendmail, old IMAP stack, old Java, etc. 3 years

Public Cloud Module Public cloud initialization code and toolsContinuous integration

Toolchain Module GCC Yearly delivery

Advanced Systems Management Module

cfengine, puppet and the new "machinery" tool

Continuous integration

Modules: A Closer Look

30

Advanced Systems Management Module Machinery

31

SUSE Linux Enterprise Serverfor SAP Applications Automation of Installation Wizard

Allow for fully automatic (pre-configured) installations of OS and SAP workload

Multi Tier Installations using Installation Wizard Automation

Allow for installation of SAP Application and Database on different machines (SAP Netweaver)

Prepare Run n timesModify

Database Central Instance Appl.Server

32

SUSE Linux Enterprise Serverfor SAP Applications 12 Future outlook SAP HA Cluster Out-of-the-box Leverage above features to allow for a SAP HA setup automation based on best practices

Simple Stack Enqueue Replication

DRBD Data Sync HA in Virtual Environments

33

More Informationhttp://www.suse.com/products/sles-for-sap

34

More Informationhttp://www.suse.com/products/sles-for-sap

Thank you.

35

Visit us online to learn more about the SUSE and SAP partnership at

http://www.suse.com/saphttp://www.suse.com/products/sles-for-sap

http://www.suse.com/saphttp://www.suse.com/products/sles-for-sap

Corporate HeadquartersMaxfeldstrasse 590409 NurembergGermany

+49 911 740 53 0 (Worldwide)www.suse.com

Join us on:www.opensuse.org

36

http://www.opensuse.org/

Unpublished Work of SUSE LLC. All Rights Reserved.This work is an unpublished work and contains confidential, proprietary and trade secret information of SUSE LLC. Access to this work is restricted to SUSE employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of SUSE. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability.

General DisclaimerThis document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. SUSE makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for SUSE products remains at the sole discretion of SUSE. Further, SUSE reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All SUSE marks referenced in this presentation are trademarks or reg