DOUG Dag 16. September 2015 · 9/16/2015 · Label Security, Database Vault, OLAP,...

BASEL BERN BRUGG DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. GENEVA

HAMBURG COPENHAGEN LAUSANNE MUNICH STUTTGART VIENNA ZURICH

DOUG Dag 16. September 2015Skyen som en naturlig del af din Database-infrastruktur

Lars Bo VantingSenior Consultant, Trivadis Danmark A/S

About Me

DOUG Day – Cloud DB Infrastructure2 16-09-2015

Lars Bo Vanting, Senior Consultant

In IT-industri since 1989, Oracle DBA since 1992

Working as Oracle Infrastructure Architect & DBA @ Trivadis Danmark A/S

Areas of special interest:

- Oracle Grid Infrastructure & Maximum Availability Architecture (MAA)

- Oracle Engineered Systems, ODA

- Cloud

- Oracle Enterprise Manager

Co-authored „Oracle Enterprise Manager 101“ (Oracle Press)

Honorary Oracle Certified Master

About Trivadis

DOUG Day – Cloud DB Infrastructure3 16.09.2015

Trivadis is a market leader in IT consulting, system integration, solution engineering

and the provision of IT services focusing on and technologies

in Switzerland, Germany, Austria and Denmark. We offer our services in the following

strategic business fields:

Trivadis Managed Services can handle the interactive operation of your IT systems.

O P E R A T I O N

COPENHAGEN

MUNICH

LAUSANNE

BERN

ZURICH

BRUGG

GENEVA

HAMBURG

DÜSSELDORF

FRANKFURT

STUTTGART

FREIBURG

BASLE

VIENNA

With more than 600 specialists and IT experts

DOUG Day – Cloud DB Infrastructure4 16.09.2015

14 Trivadis branches and more than

600 employees

200 Service Level Agreements

200 employees in SLA business

Over 4,000 training participants

Research and development budget:

CHF 5.0 / EUR 4.0 million

Financially self-supporting and

sustainably profitable

Experience from more than 1,900

projects per year at over 800

customers

Agenda


1. Cloud Offerings & Possibilities

Private Cloud & Oracle-on-Oracle

Oracle Cloud Services

Oracle on other Cloud Providers (AWS & Azure)

Possibilities for Oracle databases in the Cloud

2. Working with the Oracle Cloud

Setup Oracle DBaaS

Connecting to your DBaaS

Cloning your databases to the Cloud

Connecting your EM12c to the Cloud

3. Summary

Conclusion, further information, Q&A


Cloud

Offerings & Possibilities

Cloud Offerings & Possibilities – Scope


Focus on

– PaaS/DBaaS

– IaaS (Compute & Storage)

– Cloud Backup Services

From an Oracle RDBMS point-of-view

Private vs Public Cloud


In 2014 the PaaS in the Private Cloud was the fastest growing area according to

Computerworld, GigaOM and VC North Bridge researches

– Fear of “loosing control”

– Security issues

– Oracle itself not quite ready in all cloud areas, e.g. no PaaS/DBaaS

Oracle has now joined the PaaS/DBaaS Public Cloud market

– Agility increased

Hybrid Cloud probably relevant for many customers in the future

Oracle On Oracle & Private Cloud Building Blocks


The Oracle Red Stack

Oracle On Oracle & Private Cloud Building Blocks


PCA (former VCA) SPARC SuperCluster Exadata ODA

Database Machine

Oracle On Oracle & Building Your Private Cloud


Cloud Operations Key Elements Private Cloud Life-Cycle

Management with EM12c

Public Cloud Risk Assesment


Evaluate your Business for Public Cloud readiness:

– You remain responsible for your

Compliance regulations

– Contracts & Agreements

– Certifications &

Industry Standards

– Data Theft/Leakage

– Loss of Access

– Service interruption

– …

Scro

ll Do

wn

Oracle Cloud Services – Entry Point


cloud.oracle.com



4 Oracle Cloud Services:

– Not a “database”, pure content/data

– Applications (Cloud ERP, CRM, HR…)

– Database (DBaaS)

Metered (per hour)

Non-metered (per month)

Requires storage IaaS

– Infrastructure

STORAGE (pretty cheap, $27/$33/$50 per TB per month, Archive Storage $1!)

COMPUTE (future)

DaaS

SaaS

PaaS

IaaS

Oracle Cloud Services - My Services


My Services is your starting point in the Oracle Cloud

(Datacenter is located in Chicago)

Oracle Cloud Services – Data Centers


• 19 State of the Art ‘Tier IV Class’ Facilities

• Baseline 99.999% Availability of Power/Cooling

• 24x7 Active Monitoring and Support

• Carrier Neutral – Best in Class Peering

Source: oracle.com

Oracle Cloud Services – DBaaS Managed vs Unmanaged


Oracle Database Cloud ServiceOracle Database software pre-installed on Oracle Cloud Virtual Machine.

Additional cloud tooling is available for backup, recovery and patching,

Enterprise Manager (11g&12c), PDBaaS, Application Express etc.

Oracle Database Cloud Service - Virtual ImageOracle Database software pre-installed on an Oracle Cloud Virtual Machine. No additional cloud

tooling is available. Database can be created by DBCA.

Hourly

Pay for the number of hours used

(minimum 1 hour)

Monthly

Pay one monthly fee, irrespective of the

number of hours used

Payment Model

Oracle Cloud Services - Tools


Oracle provides GUI tools like

– DBaaS Monitoring Console

– APEX

– EM Express 12c

– PDB Self-Service Provisioning

These tools are not available on Virtual Image

Cloud Database Backup Service is used by both managed and unmanaged setup

Oracle Cloud Services – Compute Shapes General/HiMem


Shape Processor Memory

OC3 1 OCPU 7.5 GB RAM

OC4 2 OCPU 15 GB RAM



OC1M 1 OCPU 15 GB RAM




1 OCPU equvivalent to 1 physical core with HT enabled = 2 HW threads

(Intel Xeon CPU E5-2690 v2 @ 3.00GHz)

Oracle Cloud Services – Pricing DBaaS


Product (per OCPU) General Purpose Compute High-Memory Compute

Per Month Per Hour Per Month Per Hour

Standard Edition

Service$600 $1.008 $700 $1.176

Enterprise Edition

Service$3000 $5.040 $3100 $5.208

High Performance

Service$4000 $6.720 $4100 $6.888

Extreme

Performance

Service

$5000 $8.401 $5100 $8.569

Oracle Cloud Services – 4 Editions


Standard Edition Service (currently only available for 11g)

Enterprise Edition Service

High Performance Service

– Multitenant, Partitioning, Real Application Testing, Advanced Compression, Advanced Security,

Label Security, Database Vault, OLAP, Advanced Analytics, Spatial and Graph, Diagnostics

Pack, Tuning Pack, Database Lifecycle Management Pack, Data Masking & Subsetting Pack

and Cloud Management Pack for Oracle Database.

Extreme Performance Service

– In-Memory Database, Active Data Guard, Multitenant, Partitioning, Real Application Testing,

Advanced Compression, Advanced Security, Label Security, Database Vault, OLAP, Advanced

Analytics, Spatial and Graph, Diagnostics Pack, Tuning Pack, Database Lifecycle

Management Pack, Data Masking & Subsetting Pack and Cloud Management Pack for Oracle

Database.



Transactions

– Unmetered: No TX limitation

– Metered: based on actual usage (1st GB/month free), burning cloud credits

(buy cloud credits upfront based on “rate-card” specification)

BYOL not possible with Oracle Paas/DBaaS

RAC/RAC1 will be supported in the future

No real VPN available (yet), but restriction on IP addresses possible

– IPSec solution planned for future

Go ahead and try it out yourself!

Oracle Cloud Services – Other Offerings


Engineered Systems Cloud (dedicated physical hw)

– Exadata Cloud

Dedicated physical HW (starting with 1/8 Exadata Database Machine)

Based on EE Extreme Performance Licenses

Existing licenses (EE/RAC) can give discount or be converted to cloud credits

$5000 per cpu per month, minimum sizing 28 CPUs = $140000

Possible to chose between various network providers

– Big Data Appliance Cloud

Data Upload:

ZFS Storage Appliance delivered by courier service (FedEx)

Other Cloud Providers – Focus on IaaS & PaaS


Several players in the cloud market, particular in IaaS the following are major players

– Amazon Web Services (AWS)

– Microsoft Azure

– Rackspace

– IBM SoftLayer

– HP Helion Managed Cloud

– CloudSigma

– Skyscape Cloud Services

– vCloud Air

– Virtustream

Other Cloud Providers – Azure


Oracle announced partnership with Microsoft (June 2013)

Version Editions Windows 2008 R2 Windows 2012 Oracle Linux 6.4

Database 11.2.0.4.0 EE / SE

Database 12.1.0.1.0 EE / SE

Database 12.1.0.2.0 EE



Customers can run supported Oracle software on Azure

Oracle provides license mobility for running Oracle software on Azure

Available pre-installed, license-included Oracle Database Images on Azure

More images with Oracle Software installed like Java, WebLogic or Oracle Linux are available



All Oracle products certified to run on Windows Server are also

certified to run on Windows Server 2012 Hyper-V

List of Microsoft Windows Server 2012 Hyper-V guest OSs includes:

Windows Server 2012

Windows Server 2008 R2 Service Pack 1

Oracle Linux 6.4 with RHCK (*)

Oracle Linux 6.5 with RHCK

Oracle Linux 6.5 with UEKR3 QU1, QU2 (**)

See MOS Note 1563794.1

European Azure Datacenter/Storage

located in Ireland & Netherlands

(Finland & Austria only Office365)



Virtual Machine Sizes: Basic and Standard

1. Basic Tier does not support features such as auto-scaling and load-balancing

2. The Standard Tier of sizes consists of A series, D series, DS series, and G series

Standard Tier sizes

– D-series VMs provide faster processors, a higher memory-to-core ratio, and a solid-

state drive (SSD) for the temporary disk

– Since 11. December 2014: DS-series VMs can use Premium storage, which

provides high-performance, low-latency storage for I/O intensive workloads

– G-series VMs offer the biggest size and best performance and run on hosts with

Intel Xeon E5 V3 family processors (G-series not available in North Europe)



Some comments related to Oracle on Azure

– Configuration with PowerShell and Azure-CLI

– Standalone Oracle DB, Data Guard and Golden Gate are available

– ASM configuration is possible

– Local SSD storage is only temporary – NO REDUNDANCY

Database Smart Flash Cache might be an option when using OEL images

– Each instance type has a maximum number of disks, DISKS ARE NOT RESIZEABLE

– Try collecting load profiles on existing systems to be used with the

Azure Price Calculator (e.g. disk transactions, network traffic)



Azure Technical Limits & Restrictions

– RAC is currently not supported because Azure currently does not support virtual disk-

sharing in a read/write manner – also UDP multicast is not supported

– I/O limits around 500 IOPS per disk

– BYOL for Oracle is possible, but not with pre-installed images

– Trial Accounts do not include Images with pre-Installed Oracle Database or WebLogic

Software

– Subscription limits: http://azure.microsoft.com/en-us/documentation/articles/azure-subscription-service-limits/

http://azure.microsoft.com/en-us/documentation/articles/azure-subscription-service-limits/



Creating a VM in Azure

– Choose between predefined compute shapes

– An SSH key can (optionally) be used for login to

the VM, otherwise simply username/password

– Virtual Network can be configured for site-to-site

connectivity

– After approx. 5 minutes the VM is ready



Sign-up, get cloud credits and try it out yourself

https://azure.microsoft.com

https://azure.microsoft.com/

Other Cloud Providers – AWS


Major Player (Leader) on IaaS Market

– Established already in 2006

– Oracle Database Amazon Machine Image (AMI)

– Amazon Relational Database Service (Amazon RDS):

MySQL, Oracle, SQL Server, PostgreSQL, or Amazon Aurora database engines

– E.g. document "Installation Companion Oracle Data Guard on Amazon EC2

Configuration Guide" from Deloitte, 2010

– Virtual Private Cloud (VPC) to integrate AWS EC2 with on-premise systems

– BYOL possible with Oracle



Oracle Database Amazon Machine Image (AMI)



Pre-built, certified AMIs for Oracle - Standard Licensing Policies Apply

Full Support from Oracle and AWS

https://aws.amazon.com

https://aws.amazon.com/



AWS Regions

– US East (Northern Virginia)

– US West (Northern California)

– Europe(Dublin)

– Asia Pacific (Singapore)

Source:

http://aws.amazon.com

http://aws.amazon.com/

Other Cloud Providers – Amazon Secure Backup


In 2013 the Amazon Secure Backup was introduced

– Oracle Secure Backup Module

– Backup storage is Amazon S3 storage

Same procedure like the Oracle Module from 2015, same software, small changes in

libraries and parameters – looks like a 1:1 copy of the source code...

Other Cloud Providers – Amazon Secure Backup


Two Editions are available:

1. Oracle Secure Backup Express – Free of charge

– RMAN Integration, only for single instances

– No fibre attached device support

– No encryption, no compression

2. Oracle Secure Backup – 3’500 USD per RMAN channel

– Enryption

– Compression

– Multiple device support

– Enterprise Manager integration

Other Cloud Providers – Comparison to Oracle


Oracle Amazon

Software Java Package Java Package

Internet Connection Required Required

Encryption License In Service included Included with

Oracle Secure Backup*

Compression License In Service included Included with

Oracle Secure Backup*

Price per GB up to 1TB per

Month

$0.0264 per GB $0.0300 per GB

Additional Costs - Secure Backup License

$3500 per Tape/Channel*

* Not available in Secure Backup Express Edition



Create AWS account and try it for free

https://aws.amazon.com

https://azure.microsoft.com/


Possibilities in the Cloud

Possibilities in the Cloud


Development/Test/Education (/Prod) Databases

DR / Standby Database

– Oracle (Active) Data Guard Physical & Logical Standby Database

– 3rd Party standby-database mechanism / TVD-Standby

Backup to the Cloud

– Additional (off-site) backup storage

Oracle DR in the Cloud


Oracle Data Guard

– Physical / Logical Standby

– Active Data Guard for reporting R/O access

replicating data between continents

3rd Party DR mechanism / TVD-Standby

– Standard Edition

E.g. use the Trivadis TVD-ToolBox component TVD-Standby for DR setup

Cold Standby – Prepared Standby Database (not in-sync)

Consider “Async DR” (start/stop DR server to apply) with metered Cloud Service

Restore/Recover to Cloud

Server ready for DB Restore

Pros & Cons for DR in the Cloud


Pro

– Easy and cheap way, if only one data center available

– Pay for actual consumption

– Can be used to provide R/O access to data

in other regions of the world, e.g. Asia or USA, addressing network latency issues

(in 12c consider using the FAR SYNC feature in order to increase protection mode)

Con

– Internet Access has to be available at all times

– You have to trust what the Cloud Provider says (Pricing, Availability etc.)

Oracle Database Backup Service – another DR solution


Encrypted Backupsets

Mirrored Storage (replicated between multiple storage nodes in same region)

24/7 access via Internet

No additional licenses

No additional tools, just use Oracle RMAN as always

Easy to configure

Available for On-Premise and Oracle DBaaS cloud databases

Oracle Database Backup Service - Licensing


Oracle® Database Licensing Information 12c Release 1 (12.1)

Oracle Database Backup Service

Oracle Database Backup Service includes use of two optimizations at no additional cost. These

optimizations are normally available only with the purchase of the Oracle Advanced Security

Option or the Oracle Advanced Compression Option. This Oracle Database Backup Service

special-use licensing includes:

– RMAN backup encryption

– All RMAN backup compression algorithmsTo use additional features of the Oracle Advanced Security Option or the Oracle Advanced

Compression Option, you must license those options separately. In addition, the Oracle

Advanced Security Option must be licensed when performing RMAN encrypted backups

directly to disk.

Oracle Database Backup Service – DBaaS Provisioning


During the DBaaS instance provisioning you can choose if you want to use backup

storage in the cloud

If Cloud Storage is selected, a backup job will be configured in crontab which runs

per default at 1:01 AM

It is possible to configure the Oracle Database Backup Service manually (as

additional service)

01 01 * * * root /var/opt/oracle/bkup_api/bkup_api bkup_start

Oracle Database Backup Service – Upload of Backupsets


RMAN streams backup data (backupset pieces) via https into the cloud

Chunk size is 20MB

Failed transmissions are retried automatically

– A heart beat file controls the backup/restore/delete operations

Oracle Database Backup Service – RMAN Restore Validate


Oracle Database Backup Service – DBAAS CLI commands


bash-4.1# dbaascli orec --args -list

DBAAS CLI version 1.0.0

Executing command orec --args -list

..

Logfile is /var/opt/oracle/log/orec/orec_2015-09-08_08:04:33.log

Config file is /var/opt/oracle/orec/orec.cfg

..

Getting list backups...

Backup Tag Completion Date Config Files Location

---------------------- ----------------------- ------------------------

TAG20150820T113005 08/20/2015 11:30:05

TAG20150821T012037 08/21/2015 01:20:37

TAG20150821T012131 08/21/2015 01:21:31

As an alternative to RMAN, the you can use the command line tool DBAASCLI, e.g.

list existing RMAN backupsets:

Oracle Database Backup Service – Usage Details



Working with the

Oracle Cloud Database

Oracle Cloud Services – 5 steps to DBaaS (1/5)










Time to create: ~40 Minutes

Oracle Cloud Services – Cloud Database ready to use


Per default only Port 22/SSH is open for public access via key

Other ports like 1521 etc. have to be opened manually in the network firewall

configuration menu

Oracle Cloud Services – Cloud Database Services Tools


Oracle Cloud Services – DBaaS Monitor Console


Oracle Cloud Services – DBaaS Monitor/RDBMS Listener


Oracle Cloud Services – DBaaS Monitor/Processes


Oracle Cloud Services – EM Database Express


Oracle Cloud Services – APEX



Connecting EM12c

To The Cloud

EM12c for the Oracle Cloud


From EM12c R5

– Integration with the Oracle cloud / cloud.oracle.com

– On-premise databases and cloud databases are now managed in one tool

Designate existing local Management Agent to be Hybrid Cloud Gateway Agent

– E.g. use the MA on the EM12c OMS server

– Provides SSH-based communication channel between the Oracle Cloud virtual hosts

and the on-premise OMS

EM12c Hybrid Cloud Agent – High-Availability




Steps to add a cloud database to your on-premise EM12c:

1. Create a SSH key

2. Create a DBaaS instance on cloud.oracle.com

3. Configure a local Linux agent as Hybrid Cloud Gateway Agent

4. Create an EM12c credential for SSH login

5. Deploy EM12c Management Agent on the cloud host (well-known push method)

6. Discover and add the new (cloud-based) targets



Configure Hybrid Cloud Agent Gateway

– Designate an existing Management Agent to act as a Hybrid Cloud Gateway (EMCLI)

or

– For a (new) Hybrid Cloud Agent use the Add Host Targets Wizard (EM12c GUI)

More info: http://docs.oracle.com/cd/E24628_01/doc.121/e24473/hybrid-cloud.htm#EMADM15149

http://docs.oracle.com/cd/E24628_01/doc.121/e24473/hybrid-cloud.htm#EMADM15149



Create an EM12c Named Credential for SSH Login:



Deploy Management Agent on the Cloud Host:

– Install EM12c Agent via Push Method on the DBaaS Machine

– The installation of the agent is simple, similar to local/on-premise installations.

The only two differences are:

a) use the SSH credential

b) choose the Hybrid Cloud Gateway Agent

– Setup Add Target Add Targets Manually Add Host Targets Add Host …

During tests we ran into errors resolving the cloud hostname via /etc/hosts file.

We were able to install the agent, but not to configure the databases.

Solution was to use the IP address instead of the hostname.

EM12c for the Oracle Cloud – Add Host Target (Cloud)


EM12c for the Oracle Cloud – Database targets (Cloud)



Other Operations

In the Oracle Cloud

Oracle Cloud Services – Clone on-premise DB to Cloud


From SQL Developer

– A SSH tunnel is required to push a local Pluggable Database to the Oracle cloud

– PDB will be unplugged, files will be transferred to the cloud, directories are created

Oracle Cloud Services – Clone on-premise DB to Cloud


From EM12c R5

– Three steps:

1. Select your PDB

2. Start Cloning from EM menu “Cloning”

3. Verify new PDB

– Notice:

/tmp is used for staging compressed datafiles

If /tmp directory is too small, the clone process fails

Oracle Cloud Services – DBaaS Automatic Patching


Patches will be applied by Oracle - not available for virtual images (non-managed)



In the background a new ORACLE_BASE will be installed and the database patched

(datapatch.pl)

The old ORACLE_HOME directory is saved in a directory called app.ORG and still

available

oracle@TrivadisHiPerf:/u01/ [TVDHPERF] ll

total 36

drwxr-xr-x 6 oracle oinstall 4096 Aug 17 09:41 .

dr-xr-xr-x. 31 root root 4096 Aug 15 01:22 ..

drwxr-xr-x 4 oracle oinstall 4096 Jan 16 2015 app

drwxr-xr-x 4 oracle oinstall 4096 Jan 16 2015 app.ORG

drwx------ 2 oracle oinstall 16384 Aug 14 18:14 lost+found

drwxr-x--- 3 oracle oinstall 4096 Aug 17 08:54 psu.28512



Automatic patching breaks the EM12c Management Agent

Possible Solutions:

1. Add a separate disk volume, install agent / tools here and re-register the agent in

the local inventory

2. Agent decommission and re-deployment

Oracle Cloud Services – REST API Commands available


Instances can be created, restarted, scaled etc. by REST API commands

Example command for a instance restart in curlcurl --include --request POST --cacert ~/cacert.pem

--user [email protected]:<PASSWORD>

--header "X-ID-TENANT-NAME:chtrivadisXYZ"

--header "Content-Type:application/json"

--data '{ "lifecycleState" : "Restart" }'

https://dbaas.oraclecloud.com/paas/service/dbcs/api/v1.1/instances/chtrivadisXYZ/TrivadisExPerf


Summary

Summary


1. Oracle is (finally) ready with usable DBaaS/PaaS & IaaS

PaaS Trial is available (Late Summer 2015) – go ahead and try it out!

Seamless integration with on-premise EM12c is easy to setup and works very good

Database Backup Services provides a cheap off-site backup storage, easy to setup

Oracle DBaaS/PaaS usable e.g. for Test, Development and Education environments

Probably not ready for productive database environments (yet)...

2. AWS and Azure

BYOL possible, which is not possible with Oracle Cloud Services

Improved VPN features (Oracle are planning to add IPSec feature in future)

Both vendores are quite mature in areas IaaS/PaaS

3. Choosing your (Public) Cloud provider depending on

Usage of existing licenses (BYOL)

Pricing, Functionality, Scalability, Reliability, Security etc.


More Information

www.trivadis.dk

http://www.trivadis.com/en/articles-presentations

http://www.martinberger.com/

cloud.oracle.com

http://docs.oracle.com/cloud/latest/dbcs_dbaas/index.html

http://docs.oracle.com/cd/E24628_01/doc.121/e24473/hybrid-cloud.htm#EMADM15141

http://www.trivadis.dk/

http://www.trivadis.com/en/infrastructure-toolbox


http://docs.oracle.com/cloud/latest/dbcs_dbaas/index.html


Trivadis - IT Infrastructure Optimization at a glance


Questions & AnswersLars Bo Vanting

Senior Consultant

Tel. +45 6029 5002

[email protected]

Please visit our quartely Trivadis TechTalks

and subscribe to our Newsletter

16-09-2015 DOUG Day – Cloud DB Infrastructure86

mailto:[email protected]

Date post:	22-May-2020
Category:	Documents
Upload:	others
View:	3 times
Download:	0 times

DOUG Dag 16. September 2015 · 9/16/2015 · Label Security, Database Vault, OLAP,...

Documents