SSL PERFORMANCE AND SCALABILITY ENHANCEMENTS - TCPIP MODULE UPDATES


 
 APAR Identifier ...... PK75662      Last Changed ........ 11/11/04
 SSL PERFORMANCE AND SCALABILITY ENHANCEMENTS - TCPIP MODULE
 UPDATES
 
 Symptom ...... NF NEW FUNCTION      Status ........... CLOSED  UR1
 Severity ................... 4      Date Closed ......... 10/08/13
 Component .......... 5735FAL00      Duplicate of ........
 Reported Release ......... 540      Fixed Release ............ 999
 Component Name TCP/IP V2 FOR V      Special Notice       ATTENTION
 Current Target Date ..              Flags
 SCP ...................                            NEW FUNCTION
 Platform ............
 
 Status Detail: SHIPMENT - Packaged solution is available for
                           shipment.
 
 PE PTF List:
 
 PTF List:
 Release 540   : UK59535 available 10/08/18 (1102 )
 Release 610   : UK59536 available 10/08/18 (1101 )
 
 Parent APAR:
 Child APAR list:
 
 ERROR DESCRIPTION:
 TCP/IP server updates for SSL performance and scalability
 enhancements.
 
 LOCAL FIX:
 Not Applicable.
 
 PROBLEM SUMMARY:
 ****************************************************************
 * USERS AFFECTED: All users of the z/VM SSL server.            *
 ****************************************************************
 * PROBLEM DESCRIPTION:                                         *
 ****************************************************************
 * RECOMMENDATION: APPLY PTF                                    *
 ****************************************************************
 
 PROBLEM CONCLUSION:
 
 TEMPORARY FIX:
 
 COMMENTS:
 With this APAR and its associated requisites (listed below),
 TCP/IP for z/VM provides significant performance and
 scalability enhancements for the CMS-based SSL server,
 introduced with z/VM version 5 release 4.
 
 This APAR provides an updated TCP/IP server module (TCPIP) that
 incorporates changes to accommodate various scalability and
 performance changes introduced within the SSL server module and
 the TCP/IP infrastructure, as updated by APARs PK97438 and
 PK97437 respectively.
 
 Detailed information about these enhancements, their use, and
 system and configuration changes required to install these
 updates, can be found at this z/VM web site URL:
 
   http://www.vm.ibm.com/related/tcpip/vmsslinf.html
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 IMPORTANT NOTES:
 ----------------
 
 1) The following APARs must also be applied in conjunction with
    this APAR:
 
    TCP/IP APARs:
    APAR     Description
    -------  ---------------------------------------------------
    PK97437  SSL Server Performance and Scalability Enhancements
             - Packaging Updates
    PK97438  SSL Server Performance and Scalability Enhancements
             - SSLSERV Module Updates
 
    CMS APARs:
    APAR     Description
    -------  ---------------------------------------------------
    VM64740: Fix ABENDs in CMS Queue Management in a DCSS and
             add STFL to CMS Initialization
 
 2) CP directory updates that define additional TCP/IP user IDs
    are *REQUIRED* before the service updates associated with
    this and the above-listed APARs are placed into production
    on a z/VM system (that is *before* the PUT2PROD or TCP2PROD
    commands are used).
 
 3) DTCPARMS and other TCP/IP configuration file changes are
    *REQUIRED* before the service updates associated with this
    and the above-listed APARs are placed into production on a
    z/VM system (that is *before* the PUT2PROD or TCP2PROD
    commands are used).
 
 4) If the SSL server is not configured for use by an
    installation, the changes cited in (2) and (3) above
    are not required.
 
 NOTE!:  If the SSL server *IS* configured for use and the
         necessary changes are not implemented, the SSL server
         will not properly initialize and will not function.
 
 Symptoms indicative of a lack of the required changes will be
 reflected in the SSL and TCP/IP server consoles, represented by
 these examples.  Note that messages different from those shown
 here might be produced, based on the system configuration that
 is in place:
 
 ---------------------------------------------------------------
 SSL Server:
 
  ...
  DTCRUN1005E Required tag :DCSS_Parms. was not found in
              file(s): <nodeID> DTCPARMS D1, IBM DTCPARMS D1
  DTCRUN1099E Server not started - correct problem and retry
  ...
 
  --OR--
 
  ...
  DTCRUN1041E A server of class SSL_DCSS_AGENT is not defined
              for SSLSERV in files: <nodeID> DTCPARMS D1, IBM
              DTCPARMS D1
  DTCRUN1099E Server not started - correct problem and retry
  ...
 
 ---------------------------------------------------------------
 TCP/IP Server:
 
  ...
  DTCRUN1038I Server is not configured to support secure
              connections
  ...
  DTCPAR219I SSLServerID: SSLSERV; Timeout: 30
  ...
  DTCIPI056I TCP/IP is configured to not allow an SSL server.
             The SSLSERVERID statement is ignored.
  ...
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 The z/VM 5.4.0 publications (cited below) are affected by
 these enhancements:
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Planning and Customization
 Order Number         SC24-6125
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP User's Guide
 Order Number         SC24-6127
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Messages and Codes
 Order Number         GC24-6124
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Diagnosis Guide
 Order Number         GC24-6123
 
 ---------------------------------------------------------------
 Publication Title:   z/VM: Performance
 Order Number         SC24-6109
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 Topical and specific content updates for these publications
 can be found at this z/VM web site URL:
 
   http://www.vm.ibm.com/related/tcpip/vmsslinf.html
 
 MODULES/MACROS:   ALLMACRO CMCLIEN  CMCOMM   CMERUPT  CMNETST
 CMPRCOM  CMSOCK   COMMTXT  CONVXLAT FPNOTIF  FPSOCKRE FPTCPREQ
 FPTCPUP  FTP      FTPROCS  FTSCMD   F6TCPREQ F6TCPUP  GLDSRV31
 MAKESITE MPROUTE  MSCOMM   MSCOMMON MSCONVXL MSFTP    MSFTPC
 MSMAKESI MSNETSTA MSOBEY   MSSAMP   MSSMTP   MSSMTR   MSTCP
 MSTEL    MSTESTSI MSTFTP   MSTRACE  NETSTAT  OBEYFILE PSAMPLE
 SCEXIT   SMTP     SMTPCMDS SMTPQUEU SMTPRES  SMTPRSCS SRVRFTP
 TCACB    TCBASEX  TCBASTY  TCCCB    TCCONSI  TCDIP98  TCFPSM
 TCFR182  TCIPDOW  TCIUCAPI TCMIB    TCMIBREC TCMON    TCNOTIF
 TCPARSE  TCPBLALL TCPDOWN  TCPEQUAT TCPIP    TCPIPIN  TCPREQU
 TCPRINT  TCPSSL   TCPUP    TCQDIO   TCQUEUE  TCROUND  TCSHUT
 TCSOCKRE TCSSLSRV TCTCB    TCTOATM  TCTOCTC  TCUDPRE  TCUTIL
 TCVAR    TCVMSUB  TELNET   TESTSITE TFTP     TNSTMAS  TRACERTE
 T6PREQU  T6SOCKRE T6UDPRE
 
 SRLS:      SC24612505 SC24612704 GC24612404 GC24612303
 SC24610906
 
 RTN CODES:
 
 CIRCUMVENTION:
 
 MESSAGE TO SUBMITTER: