DB2

No, it's not. You can use commodity components.

@ibm_db2 This will help the fence-sitters adopt

H/w support always expanding. Generic support for Power & Intel servers, most storage out there, and switches.

Using TCP/IP is a nice option to get to know pureScale and play with it. I can now have a pureScale sandbox!

Indeed. In doing so, users can enjoy the benefits of pureScale at various price points.

@ember_crooks Having an opportunity to play with pureScale is key!

Yeah, lot's of new options for implementing pureScale... virtualization, TCP/IP interconnect, non-IBM hardware.

And with TCP/IP interconnect, its really so easy to start using pureScale and reap the immense benefits it provides - for continuous availability and scalabilty

@ibm_db2 I predict that all these pureScale changes will result in renewed interest and much faster adoption, since it is the most reliable, scalable and available Database offering out there ....

No, it’s the same for all workloads. Very little configuration. Specify as part of CREATE DATABASE whether it’s encrypted or not. That’s it! It’s invisible.

Encryption is totally transparent to your applications and schemas. With DB2 native encryption, your apps and schemas don't need to change. Makes no difference whether they're operational reporting vs. transactional datasets.

Check out the security architect's blog / primer, where he covers this topic in a good and technical blog: http://bit.ly/WRencr...

Is key rotation easy? Does it impose an outage or additional load?

@ibm_db2 Glad to see Native Encryption is FIPS 140-2 compliant along with NIST-SP 800-131 compliant, will make adoption easier

@ember_crooks Did you see this blog: http://blog.4loeser....

@ember_crooks You rotate your database master key by calling the new ADMIN_ROTATE_MASTER_KEY procedure. Decrypts your database encryption key with the old master key and then re-encrypts it with the new master key.

See Walid's native encryption primer for details.

Yes, but what about changing the DEK? Can it be changed? Those sources only mention changing the MK.

@KSchlamb Here's the link to Walid's encryption primer: http://www.ibmbluhub...

@ember_crooks Changing DEK means reading all data and rewriting it. Should be rare. But if needed then backup/restore into new database with new key. Best practice is master key rotation.

With DB2 native data encryption, your data in DB2 can be kept completely encrypted. Not just while it's in motion, but also at rest.

Many industries have requirements around protecting sensitive data and DB2 native encryption is great for this. Protects data at rest and in database backups. And very easy to use.

native encryption is transparent to users' applications and schemas.

This encryption is native to DB2, i.e. no need for additional tools. It supports row as well as column oriented tables and is fully transparent to applications.

Key management is secure and transparent.

DB2 native encryption encrypts both your online data and your backup images.

Simple as specifying ENCRYPT on your CREATE DATABASE command.

DB2 native encryption employs certified nad compliant cryptography, and exploits hardware acceleration for cryptographic operations.

You cannot be too secure when it comes to data. Just read the headlines. This is new, transparent security for data at rest. Encryption for data in motion has been in place in DB2 for some time. So now -- both data at rest and in motion.

DB2 native encryption supports encrypting your entire DB2 database.

Encryption is super important. After Snowdon, everyone is nervous about data security. For many companies this is no longer optional. Now in BLU it is natively supported. Data is encrypted at rest, and over the wire.

You can encrypt online databases, convert unencrypted databases to encrypted and encypted all backups with this new capability.

In our cloud based data warehouse, dashDB which uses BLU Acceleration, on Bluemix, encryption is the default - with very minimal performance overhead. IBM is taking data security very seriously.

Can we find performance comparisons between native encryption vs no native encryption?. I remember Pepsico (Texas, US) tried to used an encryption third-party sfw (forgot the name) and they quit using it because of the performance.

Very easy! pureScale is just a deployment model of DB2 so transferrable skills and immediate productivity for DBAs and app developers.

pureScale is the best clustering technology in distributed environment because it's transparent to the application, and has linear scalability.

Some new concepts in pS, like CFs, cluster mgmt with RSCT/TSA, and storage mgmt with GPFS, but lots exactly the same as in “regular” DB2 env.

@KSchlamb @ibm_db2 I'm a command line type, but I must say pureScale ease of use is great!

Same SQL, admin commands, backup/recovery, security, etc. Even DB2 interfaces provided for integrated RSCT/TSA/GPFS, so very minimal new skills required for them.

@kschlamb had an excellent presentation on this at #IDUG Prague 2014

@iqbalgoralwalla Thanks Iqbal. Love going to IDUG... I present, but I learn a massive amount as well. Great conferences.

We'll see if we can turn Kelly's presentation into a slideshare or a webinar so more people benefit.

@ibm_db2 pureScale support to TCP/I and Windows will be a game changer and make adoption easier and faster in myu opinion, looking forward to implementing it!

Excellent idea!

@amit505 :)

My favorite question. :) Lots new in Cancun (FP4) last year (TCP/IP interconnect, VMware, admin improvements). FP5 has automatic CF memory management.

Broader infrastructure choices now for pureScale redefines the economics of continuous availability.

New Business Application Continuity offering announced Tuesday. 2 member pureScale cluster with apps on one member, admin work on other...

BAC is active/active clustering with active/passive pricing. Continuous availability at a low cost. Blogged about it here: https://ibm.biz/BdEC...

Additional options for using commodity network hardware.

continuous availability at various price points.

@KSchlamb @ibm_db2 Hmm....I'm very interested.... see lots of potential

Ability for DB2 PureScale to leverage TCP/IP helps deliver HA and DR more cost effectively for wider set of use cases.

CP/IP interconnect allows for quick adoption of pureScale - ideal for customers whose primary SLA objective is continuous availability

DB2 PureScale cna be run in more virtualized deployment environments to accelerate testing and QA or to accelerate delivery of a production environment with moderate workload requirements.

Support for spatial data in a PureScale environment has been added for app with embedded spatial features.

In fact, currently working on a POC with a customer using TCP/IP as the interconnect

@LynnCChou - can you tell me more about the benefits of the various price points?

by using commodity components or what you already have, you can decrease the cost of solution a great deal.