About IBM Blockchain Platform 2.5.3

ATTENTION!! IBM Blockchain Platform Software Edition is being replaced by IBM Support for Hyperledger Fabric!! IBM Blockchain Platform Software Edition will no longer be supported after April 30, 2023. Customers have been directed to migrate their networks by April 30, 2023. After this date, IBM Blockchain Platform software networks that are not migrated to IBM Support for Hyperledger Fabric will be at risk for potential security vulnerabilities. Migration scripts are provided, and the disruption to your network is minimal. See Migrating to IBM Support for Hyperledger Fabric for details.

IBM® Blockchain Platform 2.5.3 enables a consortium of organizations to easily build and join a blockchain network on-prem, or on any private, public, or hybrid multicloud that uses Kubernetes. Customers can deploy their nodes on the cloud platform of their choice and connect to any IBM Blockchain Platform network, whether it is deployed on your own Kubernetes cluster or with the IBM Blockchain Platform for IBM Cloud. The IBM Blockchain Platform 2.5.3 leverages Hyperledger Fabric v1.4.12 and v2.2.5 and supports deployment on multiple Kubernetes distributions.

IBM Blockchain Platform is based on Hyperledger Fabric v1.4.12 and v2.2.5 and is IBM's commercial distribution of Hyperledger Fabric. A key benefit of the platform is that IBM tests the open source code for security vulnerabilities daily and provides 24x7x365 support with SLAs appropriate for production environments.

What IBM Blockchain Platform 2.5.3 offers

The IBM Blockchain Platform provides a flexible management platform that runs on Kubernetes. The offering includes an award-winning management console that allows you to easily deploy blockchain components, build a multicloud blockchain network, and perform network management and maintenance.

This offering includes two deployment options:

Full platform

Includes the operator, management console, peer, CA, ordering node, and smart contract container images. The IBM Blockchain Platform management console can be used to create all of the fundamental components of a Hyperledger Fabric network: a Certificate Authority (CA), an ordering service, and peers, on your local cluster. You can also use your console to operate a distributed multicloud network by importing nodes that were deployed by using other consoles. For more information about the building blocks of Hyperledger Fabric networks, see the blockchain component overview.

IBM Blockchain images

For experienced Hyperledger Fabric customers, a purchase of IBM Blockchain Platform 2.5.3 includes an entitlement to the peer, CA, ordering node, and smart contract container images that are signed and supported by IBM. These images are based on the open source Hyperledger Fabric code base and contain a number of enhancements. The images are bundled with support from IBM. The IBM Blockchain Platform management console and operator are not among the images that are included in this entitlement. For more information, see IBM Blockchain images for Hyperledger Fabric.

The IBM Blockchain Platform includes the following key features:

BUILD ---- Integrated developer experience

  • Deploy easily. Use Ansible Playbooks or the Red Hat Marketplace to deploy networks quicker than ever before.
  • Easily code your smart contracts in Node.js, Golang, Java, or JavaScript. Use the IBM Blockchain Platform Developer Tools to easily develop smart contracts locally. Leverage SDK integration with the console, and learn from our rich tutorials and samples.
  • Simplified DevOps allows you to move from development to test to production in a single environment by scaling up your Kubernetes resources to add more components.
  • Up-to-date Fabric key features. Choose which version of Hyperledger Fabric you want to use when deploying peers or ordering nodes. Leverage the latest features of Hyperledger Fabric v1.4.12 and v2.2.5:

OPERATE --- Total control of your deployments

  • Host or join a network. Deploy peers that are hosted in your cluster to multiple channels on multiple clouds, or invite other organizations to join your consortium or channels while the organizations manage their nodes independently across infrastructures.

  • Maintain complete control of your identities. Store and manage the keys that are used to administer your nodes. Optionally, use a Hardware Security Module (HSM) to generate and store the private key of your nodes.

  • Run Anywhere. Thanks to the unified codebase of the IBM Blockchain Platform console, it is possible to run your components on any Kubernetes v1.23 - v1.24 container platform on x86_64 or s390x.

  • Unified operation. The IBM Blockchain Platform console allows you to deploy and manage all of your organizations and nodes in one console. You can also add or remove members from a blockchain consortium, create and join channels, and deploy smart contracts from your console.

  • Dynamic signature collection that allows better control over collaborative governance over channel configurations.

  • Elimination of Docker-in-Docker for smart contracts allows smart contract pods to be run more securely, without peers needing privileged access.

  • Manage access of the users who can administer or monitor your nodes.

  • Interact directly with your pods using your Kubernetes service.

  • Direct access to the logs of your nodes from your Kubernetes service. Use any supported third-party service to extract and analyze your logs.

  • Kubernetes service integration. Leverage services such as IBM Log Analysis for logging and Prometheus and IBM Cloud Monitoring for monitoring.

  • Upgrade the Fabric version of your nodes. Nodes running Fabric version 1.4.x can be upgraded to 2.x.

After which, the capabilities of your channels can also be increased to v2.0, allowing full access to the latest Fabric features like the smart contract lifecycle.

GROW --- Scalability and flexibility

  • Choose your compute. You have the flexibility to decide the amount of CPU, memory, and storage you want to provision in your Kubernetes cluster. For more information, see Allocating resources.
  • Scale up and down the resources in your Kubernetes cluster, paying for only what you need. For more information, see Pricing.
  • Disaster recovery and multi-region high availability (HA). This option duplicates your Kubernetes deployment across regions, enabling high availability (HA) of your components and disaster recovery (DR).
  • Connect to other Fabric networks: Join IBM Blockchain Platform peers to any network running Hyperledger Fabric components. Similarly, you can invite Fabric peers to join channels hosted on an ordering service deployed on the IBM Blockchain Platform. Note that you will need to use Hyperledger Fabric APIs or the CLI.

Have questions and want to speak to an IBM Blockchain Platform expert? Schedule a consult now to learn more about how blockchain can transform your business.

Supported Platforms

Reminder: If your IBM Blockchain Platform instance is linked to a cluster running an unsupported IBM Cloud Kubernetes Service version (earlier than v1.23), you must immediately upgrade it to a supported Kubernetes version (v1.23 - v1.24). For the actual steps that are required, see Updating clusters, worker nodes, and cluster components. For the list of IBM Cloud Kubernetes Service supported versions and expiration dates see the release history.

All documentation on supported environments applies to the latest version of the code only. If necessary, refer to the upgrade information. For release-specific details, see release notes.

The IBM Blockchain Platform 2.5.3 can be deployed with the Kubernetes distributions on the following platforms:

Table 1. Supported platforms
Kubernetes distribution Version Hardware Tested configuration
OpenShift Container Platform 4.9, 4.10, 4.11 x86_64 4.9, 4.10, 4.11
OpenShift Container Platform on IBM Cloud 4.9, 4.10, 4.11 x86_64 4.9, 4.10, 4.11
OpenShift Container Platform on LinuxONE 4.9, 4.10, 4.11 s390x 4.9, 4.10, 4.11
Kubernetes *** v1.23 - v1.24 x86_64 v1.23 - v1.24

*** If you want to use IBM Kubernetes Service, we recommend that you check out the IBM Blockchain Platform for IBM Cloud offering unless you specifically require this offering. See Is IBM Blockchain Platform 2.5.3 suitable for you.

IBM Blockchain Platform does not support IBM Cloud Virtual Server for VPC and Virtual Private Cloud (VPC).

If you are running on Azure Kubernetes Service, Amazon Web Services, Rancher, Amazon Elastic Kubernetes Service, or Google Kubernetes Engine, then you need to set up the NGINX Ingress controller and it needs to be running in SSL passthrough mode. For more information, see Considerations when using Kubernetes distributions. If you are using OpenShift with a load balancer that is external to the OpenShift cluster, configuring the external load balancer to use SSL passthrough is required.

Fabric Component Support

Support for Hyperledger Fabric v1.4 is now deprecated, and support for Fabric v1.4 will be removed from IBM Blockchain Platform on March 31, 2023. Users should therefore upgrade to Fabric v2.2 as soon as possible. Your applications may require changes as a result of upgrading to v2.2, so please plan for appropriate testing. Note that Fabric v1.4 has not been supported by the Hyperledger community since April of 2021. In addition, Fabric v1.4 uses Golang v1.14, which is no longer receiving security updates from the Golang community.

The following support levels are provided for Hyperledger Fabric v1.4.12 (Deprecated), v2.2.4, v2.2.5, and Fabric CA v1.5.0 and v1.5.3.

Using IBM Certified Fabric Images, Kubernetes Operator, and Certified Fabric Operations Console are required for support and provide Hyperledger Fabric clients with a verified production setup, simplified management and support, and verified security patches.

Table 2. Fabric component support
Fabric Component Support Level
IBM Certified Fabric images deployed using Kubernetes Operator and managed via the Certified Fabric Operations Console image. All Certified Fabric images include IBM fix support for supported Hyperledger Fabric versions.
Supported Environments Recent Kubernetes and OpenShift versions on IBM Cloud, third-party Cloud or local installations.
Hyperledger Fabric without IBM Certified Images, Kubernetes Operator or Certified Fabric Operations Console image. Not included in support - community support only
Hyperledger Fabric Labs Support Fabric Operations Console via Certified Image and deployed by Kubernetes Operator is supported.
Hyperledger Fabric Open Source Projects - IBM Blockchain GitHub Open source projects are not included in support, with the exception of Ansible. All other open source projects are community support only.
Hyperledger Fabric SDK and CLI Basic connectivity diagnostics is supported. Code support and SDK API usage and tuning are not included in support - community support only.
Hyperledger Fabric Chaincode Basic chaincode diagnostics is supported. Code support and tuning are not included in support - community support only.
Deployment Architecture and Design Basic deployment and management of highly available peer, orderer, and Certificate Authority nodes via the Console are supported. Detailed Deployment Architecture and Design are not included in support - see deployment options for more information.
Solution Architecture and Design Deploying and managing smart contracts via the Console are supported. Solution Architecture and Design are not included in support.
Performance Tuning Resource allocation via the Console is supported. Detailed performance analysis and tuning of the environment or application code are not included in support - see the documentation on creating highly available applications and using indexes with CouchDB.
Certificate Renewal Automatic and Manual Certificate renewal via the Certified Console image is supported. The user is responsible for keeping track of identities and performing manual certificate renewal. Using IBM Secrets Manager is recommended for keeping track of identities and certificates.

License and pricing

Your IBM Blockchain Platform 2.5.3 entitlement includes both the full platform and the IBM Blockchain images.

The entitlement does not include a Kubernetes distribution. You must procure that separately.

After you purchase an entitlement, you can access your My IBM dashboard to obtain your entitlement key for the offering. This key is required to deploy the release. When you choose this option, you are responsible for provisioning your own Kubernetes cluster.

For more information, see Pricing.

Considerations and limitations

  • This offering does not include an entitlement to Red Hat OpenShift.
  • You are responsible for the management of health monitoring, logging, and resource usage of your blockchain components.
  • Users of this offering must manage their own security and infrastructure. The IBM Blockchain Platform does not provision or provide those services.
  • Persistent storage is required. Host-local storage volumes are not supported.
  • You must have the cluster admin role in order to deploy the product.
  • The console creates nodes based on the Hyperledger Fabric v1.4.12 and v2.2.5 node images.
  • You can deploy only one IBM Blockchain Platform console per Kubernetes namespace or OpenShift project. If you plan to create multiple blockchain networks, for example to create different environments for development, staging, and production, you should create a unique project or namespace for each environment.
  • You cannot upgrade a deployed network from IBM Blockchain Platform for Multicloud to IBM Blockchain Platform v2.5.3.
  • IBM Blockchain Platform is not supported on OpenShift Online.
  • OpenShift customers can preview the IBM Blockchain Platform at no charge for 30 days when you select the free trial version available from the Red Hat Marketplace.

Installing IBM Blockchain Platform 2.5.3

The IBM Blockchain Platform 2.5.3 uses a Kubernetes Operator to install the IBM Blockchain Platform console on your cluster and manage the deployment of your nodes. When you purchase the IBM Blockchain Platform license from Passport Advantage Online, you receive a token that provides access to IBM Entitlement registry. You can use your token with the commands and files that are provided in the installation guide to automatically download the Docker images and start the operator and console on your cluster. When you are ready to get started, see Deploy IBM Blockchain Platform 2.5.3 on the OpenShift Container Platform. If you are deploying the platform on other Kubernetes distributions, see Deploy IBM Blockchain Platform 2.5.3 on Kubernetes.

Installing behind a firewall

It is also possible to install and deploy the IBM Blockchain Platform behind a firewall, without having access to the public internet. For more information, see Deploying IBM Blockchain Platform 2.5.3 on the OpenShift Container Platform behind a firewall. Otherwise, for other Kubernetes distributions see Deploying IBM Blockchain Platform 2.5.3 on Kubernetes behind a firewall.

Looking for a way to script the deployment of the service? Check out the Ansible playbooks, a powerful tool for scripting the deployment of components in your blockchain network.

Security Considerations

Because these components are deployed on your own infrastructure, you are responsible for managing their security. This includes important areas of security, such as Identity and Access Management, key management, and data encryption. Review the following topic on Security for the list of considerations.

Getting support

For more information about how to get support on IBM Blockchain Platform, in addition to free blockchain developer resources and support forums that you can use to troubleshoot problems, see Getting support.

Next steps

When you are ready to learn how to deploy an instance of the IBM Blockchain Platform to your Kubernetes cluster see Getting started with IBM Blockchain Platform v2.5.3.