OOW16 - Oracle E-Business Suite Information Discovery: Your Journey to the Cloud [CON6673]

transcript

EBS Information Discovery Journey to Cloud

Muhannad Obeidat, Senior Director EBS Applications Development, Oracle muhannad.obeidat@oracle.com September, 2016

Safe Harbor Statement

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

Agenda

Overview of Compute Cloud

EBS Information Discovery Cloud Footprint

Cloud Image Details - Technical

What’s Next

What’s In It for Me

Additional Resources

Overview of Compute Cloud

Software-as-a-Service

Platform-as-a-Service

Infrastructure-as-a-Service

Data-as-a-Service

Oracle Cloud

Complete Infrastructure for Enterprise Workloads

Oracle Cloud Infrastructure

Compute Elastic Compute

Network Software-Defined

Storage Elastic Storage

Object Storage

Archival Storage

File & DB Backup

Oracle Cloud Storage Services

Bulk Data Transfer Service Cloud NAS

VPN Elastic Load Balancer

Oracle Cloud Connect

Oracle Cloud Network Services

Network Bonding

Oracle Cloud Direct Connect

Cloud Exchange

Enterprise Data Center

Branch Office

MPLS Network

Enterprise Data Center

Branch Office

Bare Metal

Elastic Compute

Dedicated Compute

Oracle Cloud Compute Services

Engineered Systems IaaS

Docker Service

Multiple OS

Multiple Hypervisors

Docker Containers

Compute

Bare Metal Elastic Compute

Configure … Deploy … Orchestrate … Operate

Oracle Cloud Marketplace • Public Marketplace

– For Partners, ISVs, Developers to publish artifacts

– Common Service Catalog for discovery with automated deployment to IaaS & PaaS

• Compute Service Catalog

– Common Service Catalog for Oracle Elastic Compute ready Services

• Docker Registry

– Service Catalog for Oracle Docker Service

• PaaS Applications

– Service Catalog for Oracle PaaS Services – Java, DBMS, Application Container

• Private Marketplace

– For Corporate Customers to define their own Private Service Catalogs & Images

Compute

Service Catalog

EBS Information Discovery Cloud Footprint

ALM & Service

ERP HCM

Quoting Order Management iStore Inventory

Installed Base Process Mfg Discrete Mfg Cost Management Quality

Incentive Comp

iRecruitment

Learning Mgmt

Field Service TeleService Depot Repair CMRO EAM

Warehouse Mgmt

Contracts Renewal Command Center

iProcurement Channel Revenue

Financials Advanced Project Planning and Control

Workforce Explorer

Oracle E-Business Suite Information Discovery Footprint

Project Procurement

Outsourced Manufacturing

Procurement Command

Center

EBS APPLICATIONS EBS INFORMATION DISCOVERY

EBS DATABASE

Enabling Information Driven Business

Now on OPC

Taking Advantage of the Cloud

Overview

Get App from Marketplace

Choose Instance Details

Instantiate Machine

Startup Services Integrate with

Shared SSH Keys with EBS – No Private Key Stored on Cloud

Default Deployment Option

Cloud EBS Instances EBS Administrator

EBS Middle Tier

EBS Information Discovery

Customer On-Premise

ORACLE Cloud

Create Instance From Cloud Marketplace

• SSH to machine using OPC user

– OPC user created automatically in instance with proper authorization to access machine

– Shared Public Key with EBS OPC instance

• Run integration steps with EBS

• Startup all services

Accessing OPC Machine

Setup and Integration with EBS

• EBS Integration Process

– DBC file creation and copy

– endeca.conf generation and copy

– Profile option value set

– portal-ext.properties EBS pointers

– autoconfig

– etc…

Cloud Deployment Options

Default Option – EBS and ID on OPC

Setup and Integration with EBS

Cloud EBS Instances EBS Administrator

EBS Middle Tier

Customer On-Premise

ORACLE Cloud

A Word About Security

• To enable unrestricted communication among some of your instances, create a Security List and add the instances to it

• Security rules allow access between instances outside of security list

• Each Security Rule defines a specific source, a destination, and a protocol-port

– Example, allow SSH access over port 22 from a set of external hosts

A Word About Security

• A Security Application is a protocol-port mapping that you can use in security rules.

• Examples:

– Instances in security-list-a can send traffic to instances in security-list-b over any protocol as defined by security-rule-a

– Instances in security-list-a can receive HTTPS traffic from any host on the public internet as defined by security-rule-b

Configuring Access to EBS Information Discovery

• Create Security List, For-EBS-Info-Discovery-services

• Add your instance to security list above

• Create Security Application, tcp_7006, to allow http access on port 7006

For-EBS-Info-Discovery Services

Policy Inbound: deny

Outbound: permit

Security application: tcp_7006

Security rule b

Security rule c

Security IP List

/oracle/public/internet

Security IP List

/oracle/public/internet

Security application: http access

Security rule f

Endeca Node

For-EBS Services

Policy Inbound: deny

Outbound: permit

EBS Node

Security rule d DB access

Security rule e 7004 access

Security rule a

Information Discovery in the Cloud with EBS On Premise

Hybrid Deployment – VPN Connectivity

EBS on Premise EBS

Information Discovery

VPN Connectivity

ORACLE Cloud Customer

Datacenter

Roadmap

Oracle Compute Instance

Oracle PaaS Instance

Corente Gateway

GRE Tunnel

User Instance

Corente Gateway

Admin who will access App Net Manager

Oracle Cloud Platform On-premise data center

Secure VPN Tunnel

Oracle Corente Site-to-Site VPN architecture

Hybrid Deployment – VPN Connectivity

Information Discovery Cloud Instance

Corente Gateway

User Instance

Corente Gateway

Oracle Cloud Platform On-premise data center

Secure VPN Tunnel

B can reach A with address 172.16.0.2

SECURE CONNECTION

OPC IP 10.196.246.78

VPN IP (gre1) 172.16.0.2

IP 10.0.2.2

A can reach B with address 10.0.2.2

Information Discovery in the Cloud with EBS On Premise

Hybrid Deployment – SSH Tunnel – Proof of Concept

EBS on Premise EBS

Information Discovery

SSH Tunnel

ORACLE Cloud Customer

Datacenter

• What is an SSH Tunnel

– Port forwarding via SSH (SSH tunneling) creates a secure connection between a local computer and a remote machine through which services can be relayed.

– Because the connection is encrypted, SSH tunneling is useful for transmitting information that uses an unencrypted protocol

Hybrid Deployment – SSH Tunnel For Proof of Concept

On-Premises EBS DB Server

1521 1521 SSH Tunnel

Local Port

Remote Port

Hybrid Deployment – SSH Tunnel For Proof of Concept

• Local port forwarding

– ssh -o ServerAliveInterval=100 -f -N -L :[local_port]:[opc_machine]:[remote_port] opc@[opc_machine]

• Remote port forwarding

– ssh -o ServerAliveInterval=100 -f -N –R :[remote_port]:localhost:[local_port] opc@[opc_machine]

• Description – Run port in background and enable gateway mode

– Utilize ssh public/private combinations

– Execute from intranet machine(s)

– Keeps connection live by sending packets to avoid network timeouts

Image Creation Insight

Image Content

• VM built using VirtualBox

• Local testing on Mac and Windows

• Server testing on OVM (non-cloud based)

• Follow OPC Custom Image creation process to prepare image file

• Test OPC init and machine setup on Cloud

Hypervisor

Host Operating System

Infrastructure

Oracle Linux 6U7

OPC INT

Oracle VM Template

WLS Dependencies

QuickInstall

Cloud vs Local Image Virtualization

• OPC runs on type 1 hypervisor

Hypervisor

Infrastructure

Info Discovery

Oracle Linux 6U7

OPC INT

Oracle VM Template

WLS Dependencies

QuickInstall

Hypervisor

Host OS

Infrastructure

Info Discovery

Oracle Linux 6U7

OPC INT

Oracle VM Template

WLS Dependencies

QuickInstall

Type 2 hypervisor KVM, Virtual Box

Type 1 hypervisor Vmware, Xen Project, Hyper -V

Overview of Creation Process

Bare OS Linux VM

Install Dependencies &

Resize Run QuickInstall

OPC Init Scripts OPC User Setup VM Cleanup

RAW Image Creation

Image Image Catalog (Object Store)

Bare OS and Dependencies

• Public OEL Template for 6 (latest update)

– Bare OS VM Template from OSDC

– Under 350MB

• Install all dependencies – WLS dependencies

– cURL, wget, gcc, etc…

• Add Partitions for QI

– Create 35GB partition for /u01

Enterprise Linux 6

Run QuickInstall

• Run QuickInstall

– All Steps without EBS integration

– No known EBS integration points

– No post install steps

– Data domains samples not shipped with image

ICX Application

n Application

HCM Application

ICX server connection

HCM server

connection

N server connection

n Data Domain

ICX Data Domain

HCM Data Domain

ICX Graph

n Graph

HCM Graph

EBS Endeca Server

EBS Integration

Server

EBS Studio

OPC Init

• First time boot

– OracleVmTemplate

– Update host info

– Cleanup of WLS connection filters

• Every boot

– opc_init package through init.d

– Setup opc user SSH Keys

• Create OPC user

– Grant access to login to machine

– Disable root access

• Setup opc init package – Grabs ssh public key from cloud

instance metadata service

Creating OPC User

VM Cleanup and Image Creation

• Cleanup

– Shutdown all running services

– Remove all log files

– Update all versions of tokenized files

– Disable root user access

– Set image up for first time boot on next startup

• Image Creation – Convert VirtualBox image to RAW

Packer – Automation for Virtual Box

What’s Next

Integration Automation

Clustering Support

MLS Deployment Option

• Add support for EBS Information Discovery instance

• Control deployment architecture from central Provisioning instance

• Consistent with EBS middle tier provisioning

Chef for Instantiation

Bootstrap EBSID node

Bootstrap EBS node

SSH Chef

Provisioning Chef Server and Workstation

E-Business Node

EBS Information Discovery Node

• Automate integration steps

• Enable Endeca and run autoConfig

• Generates endeca.conf and dbc file (includes copy)

• Execute RBAC scripts and update profile options

• Update Endeca tier configurations

• Updates EidConfig.properties file

• Start services

• Starts XE DB and the listener

• Starts both the admin and managed servers

• Run Post Setup

• JNDI Configuration & Data domain profile creation.

• Clover credentials setup in FND Vault

Chef for Integration with EBS

Bootstrap EBSID node

Bootstrap EBS node

SSH Chef

Provisioning Chef Server and Workstation

E-Business Node

EBS Information Discovery Node

Additional Resources

Additional Resources – Information Discovery on Cloud

• MOS Note

– Oracle E-Business Suite Information Discovery on Oracle Cloud

• Oracle By Example

– Creating a New Oracle E-Business Suite Information Discovery 12.1 V6 Installation in Oracle Cloud

– Creating a New Oracle E-Business Suite Information Discovery 12.2 V6 Installation in Oracle Cloud

OOW16 - Oracle E-Business Suite Information Discovery: Your Journey to the Cloud [CON6673]

Technology