IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Delivered
Workspace IBM i
Categories IFS (Integrated File System) and Servers
Created by Guest
Created on Jul 13, 2016

RELATED IDEAS

Host server jobs

Qualys vulnerability scan is run against iseries environment on a weekly basis. the purpose of running this scan is to fix any issues in the iseries.
When these scans are run on a weekly basis it causes elevated CPU utilization and since these scans run for a period of 1-2 hrs it causes high level of CPU utilization.

The simple fact is that SSL connections are costly from a CPU perspective. Opening 600 connections during scan is causing high level of CPU Utilization. The host server jobs are doing what we expect.....processing the bad SSL connections but the processing is casuing very high level of CPU Utilization. . These scans are also run across HP /AIX / Linux systems but does not cause high level of CPU Utilization as in iseries.

There were some 3rd party vendor jobs that were also causing high level of CPU Util and they have been fixed by the vendor via a PTF.

The TCP traces have been done and results have been sent to IBM.


Use Case:

Scans which are done on a weekly basis You can see on the attachment that when scans are done around 1330 there is a high level of CPU Utilization for more than an hour. We have tested and captured traces without Host server ports excluded in scan and have seen the results .

A redesign of host server code would make it efficient so that it processes ssl (good / bad) connections in a more efficient manner and in a manner which does not result in CPU spikes and in a manner which is consistent with other tcp servers on the system i.


Idea priority Urgent
  • Guest
    Reply
    |     May 3, 2022
    This is provided in IBM i 7.5.
    Host server jobs have been updated for TLS to make it as efficient as possible and to reduce CPU utilization.
  • Guest
    Reply
    |     May 5, 2020

    We continue to investigate reducing the CPU for secure socket connections.

  • Guest
    Reply
    |     Jul 11, 2017

    The CAAC has reviewed this requirement and recommends that IBM view this as a medium priority requirement that should be addressed.

    Background: The COMMON Americas Advisory Council (CAAC) members have a broad range of experience in working with small and medium-sized IBM i customers. CAAC has a key role in working with IBM i development to help assess the value and impact of individual RFEs on the broader IBM i community, and has therefore reviewed your RFE.

    For more information about CAAC, see www.common.org/caac

    For more details about CAAC's role with RFEs, see http://www.ibmsystemsmag.com/Blogs/i-Can/May-2017/COMMON-Americas-Advisory-Council-%28CAAC%29-and-RFEs/


    Dawn May - CAAC Program Manager

  • Guest
    Reply
    |     Jan 13, 2017

    Thank you for submitting this request. We are investigating what changes may be needed to alleviate this CPU utilization.

  • Guest
    Reply
    |     Jul 15, 2016

    Due to processing by IBM, this request was reassigned to have the following updated attributes:
    Brand - Servers and Systems Software
    Product family - Power Systems
    Product - IBM i
    Component - IFS (Integrated File System) and Servers
    Operating system - IBM i
    Source - Other

    For recording keeping, the previous attributes were:
    Brand - Servers and Systems Software
    Product family - Power Systems
    Product - IBM i
    Component - Core OS
    Operating system - IBM i
    Source - Other

  • Guest
    Reply
    |     Jul 14, 2016

    Creating a new RFE based on Community RFE #91438 in product IBM i.

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.