Review: Red Hat Enterprise Linux v.4
Sunday, May 22nd, 2005The latest release of Red Hat’s top-of-the-line enterprise Linux solution, Red Hat Enterprise Linux v.4 (RHEL4) brings increased stability, scalability, and security for medium to large-scale commercial deployment environments. Major enhancements in RHEL4 include, the 2.6 kernel, SELinux integration, improved auditing abilities, storage subsystem performance, autofs4, NFSv4, standards compliance (EAL 4+), upward compatibility for RHEL 2.1/3 applications, and numerous desktop improvements.
Installation
The installation package includes five CDs, compared to six in RHEL 3. The fifth CD is only required for additional application installations. A full install (CDs 1-4) of RHEL4 AS (advanced server) went smoothly and took approximately 65 minutes. A generic PC with 1.5Gb RAM, a 1.5Ghz AMD processor and 250Gb IDE disk was used for the installation. RHEL4 was able to detect the Adaptec 2400A RAID controller and mount an existing RAID5 partition without any further configuration.
Enhancements
2.6 Kernel
Red Hat adopted the Linux 2.6 kernel for RHEL4 only after the code had undergone numerous update cycles within the kernel development project, as well as rigorous testing in versions 2 and 3 of Red Hat’s community-supported distribution, Fedora Core.
The 2.6 kernel brings several major technical advances into RHEL4. First, a new I/O scheduler features four different options (NOOP, completely fair queueing (CFQ), deadline, anticipatory) to optimize system performance for different application workloads. These options can be selected at boot time by passing an argument to the kernel. Second, a new process scheduler provides improved scalability in multiprocessor/multicore and hyper-threaded CPU systems, yielding greater performance gains for threaded applications. Also, concurrent data access by multiple sources is much more efficient. Finally, support for upto 32 x86 processors is now possible, a great improvement over RHEL 3, which could only support 8 processors.
Security
One of the most significant security features in RHEL4 is the inclusion of Security-Enhanced Linux (SELinux). SELinux provides a Mandatory Access Control (MAC) environment, where the kernel grants/revokes permission for actions performed by an application, based on a set of policy rules. This approach prevents damage to the entire system due to a single compromised application.
The new auditing feature (”audit”) provides a generalized way to audit both SELinux and nonSELinux events via user-space processes. Auditing system calls is possible (although turned off by default) by loading rules that describe what information should be logged. A basic set of reporting tools is included, easing management of audit logs.
Storage
RHEL4’s default filesystem ext3, offers increased performance. First, space pre-allocation results in faster reads/writes. Second, hash trees are used to implement large directories, for fast directory lookups. Third, dynamic expansion of mounted filesystems is now supported. Finally, improved locking techniques offer better performance on SMP systems.
RHEL4 includes an updated LVM2 (Logical Volume Manager 2) which offers improved support for large storage subsystems. LVM allows unification of multiple storage devices for ease of management. This approach offers maximum flexibility, as storage allocation matches application needs by abstracting the underlying physical storage. LVM2 brings greater stability with a redesigned, more robust implementation featuring transactional metadata updates, read/write snapshots, and improved storage management tools. The Anaconda installation tool now supports configuration of logical volumes during initial installation.
Conclusion
Red Hat Enterprise Linux v.4 delivers a robust scalable open-source platform well suited for a wide range of mission-critical services. The Linux 2.6 kernel offers increased scalability on large SMP systems, more so than previous versions of RHEL. With the latest productivity applications for Linux, RHEL4 is also a strong contender for the corporate desktop. Looking ahead to future releases, better management tools for SELinux policy rules and SELinux documentation, would ease administration of large deployments.
