1.4.4 Coupling facility 1.4.5 z/VM-mode 1.4.6 IBM Secure Service Container Parallel sysplex is a synergy between hardware and software. The parallel sysplex is a highly  advanced clustering solution that is designed to enable the aggregate capacity of multiple  z/OS systems to be applied against common workloads. To use this technology, a special LIC  is used, which is called CFCC. To activate the CFCC, a special logical partition must be  defined. Only PUs that are characterized as CPs or Internal Coupling Facilities (ICFs) can be  used for Coupling Facility (CF) partitions. For a production CF workload, it is recommended to  use dedicated processors (ICFs or CPs). The z14 ZR1 supports an LPAR mode, called  z/VM-mode , that is exclusively for running z/VM  as the first-level operating system. The z/VM-mode requires z/VM V6R4 or later, and allows  z/VM to use a wider variety of specialty processors in a single LPAR, which increases  flexibility and simplifying system management. For example, in a z/VM-mode LPAR, z/VM can manage Linux on IBM Z guests that are  running on IFL processors while also managing z/VSE and z/OS guests on CPs. It also  allows z/OS to fully use zIIPs. IBM Secure Service Container (SSC) is an enabling technology for building virtual appliances  (exploiters). It provides the base infrastructure to build and host virtual appliances on IBM Z. SSC can be used to create isolated partitions for protecting data and applications  automatically, which helps keep them safe from insider threats and external cyber criminals.  SSC offers the following benefits: For more information, see Appendix A, “IBM Secure Service Container framework” on  page 409. The z/VSE Network Appliance builds on the z/VSE Linux Fast Path (LFP) function and  provides Internet Protocol network access without requiring a TCP/IP stack in z/VSE.  Compared to a TCP/IP stack in z/VSE, this network appliance can support higher TCP/IP  traffic throughput while reducing the processing resource consumption in z/VSE. The z/VSE Network Appliance is an extension of the z/VSE - z/VM IP Assist (IBM VIAfi)  function provides network access for TCP/IP socket applications that run on z/VSE as a z/VM  guest. With the new z/VSE Network Appliance, this function is available for z/VSE systems  that are running in an LPAR. The z/VSE Network Appliance is provided as a downloadable  package that can then be deployed with the SSC Installer and Loader. The VIA function is available for z/VSE systems that run as z/VM guests. The z/VSE Network  Appliance is available for z/VSE systems that run without z/VM in LPARs. Both functions  provide network access for TCP/IP socket applications that use the LFP without the  requirement of TCP/IP stack on the z/VSE system and installing Linux on IBM Z. GLYPH<SM590000> Streamlines the IBM Z Application experience so it is comparable to installing an  application on a mobile device. GLYPH<SM590000> Deploys an appliance in minutes, instead of days. GLYPH<SM590000> Protect the workload from being accessed by a sysadmin or external attacker. IBM z/VSE Network Appliance Chapter 1. Introducing the new IBM Z family member: IBM z14 Model ZR1  15