Test environment
The test environment consisted of an IBM System z server and an IBM System x server.
Figure 1 shows the setup of the webApp.secure environment.
The System z™ contained a z/VM® LPAR with four guests and a z/OS® LPAR. Each functional component, like the firewalls, the webApp.secure server, and the Apache Web server, were implemented as separate Linux® systems running as z/VM guests.
The network was split into three parts:
- The System x™ and the System z servers were connected in the unsecured external zone. The System x server contained the webApp.secure workload generator, which drove the clients and generated the workload.
- The DMZ contained one guest with the webApp.secure Proxy Server protected from the external zone with a firewall (Firewall 2) and the Apache Web server. See Firewall 2 for the firewall rules we used.
- The trusted internal zone was protected with another guest with a more restrictive firewall (Firewall 1) and contained the z/OS WebSphere® Application Server. See Firewall 1 for the firewall rules we used.
- The z/OS LPAR was connected to the z/VM LPAR through a HiperSockets™ connection and contained the WebSphere Application Server.
- The guest network zones on z/VM were configured as HiperSockets guest LANs.