Configuring network access between Db2 Data Gate and IBM Z®
Synchronizing data requires a secure TCP/IP network connection between the Db2 for z/OS® source system and the Db2 Data Gate instance on IBM® Cloud Pak for Data. Network bandwidth and speed impacts overall performance.
For optimal performance, at least a 10 Gigabit Ethernet connection is suggested between the Z System and the IBM Cloud Pak for Data system.
- To update information in Db2 configuration tables
- As the listening port for Db2 Data Gate to read the Db2 Data Gate log
A remote connection must be permitted on every Db2 member that Db2 Data Gate connects to on a z/OS LPAR.
Db2 Data Gate reads Db2 for z/OS log records through a REST interface. The connection used for data transfer must be encrypted using SSL. Db2 for z/OS supports encrypted connections through the SECPORT parameter and AT-TLS to support encryption on the SECPORT.
- TCP/IP must specify a TTLS policy
- Policy agent (PAGENT)
- ICSF (IBM Encryption Facility for z/OS)
- RACF® - to generate a server certificate and install to the keyring store