partner webcast – oracle database 12c: maximum availability for consolidation and cloud

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |

Introduction to Oracle Maximum Availability Architecture An Overview

Okcan Yasin saygılı IMC Consultant 24.02.2015 [email protected]


Program Agenda

High Availability Business Challenge

Oracle Maximum Availability Architecture (MAA)

Key HA Features for Oracle Database

Customer Deployments

1

2

3

3

4


Improve service while increasing return on investment

HA Business Challenges

Eliminate risk of downtime and data loss

4


Generic volume manager & file system…

Generic backup software

Generic cold failover cluster

Failover Server Production Server

Identical storage

Idle DR

Storage mirroring

Traditional High Availability Cold Start = High Risk Idle Assets = High Cost

5


Examples where Traditional Architecture Failed

U.S. State Government – more info

– SAN memory failure, problem mirrored to standby SAN.

5-day outage

Global Specialty Retailer – more info

– Disk failure, followed by mirrored disk failure. Restore from local backup failed. Restore using copy at DR site also failed.

8-day outage

5-day outage

European Cloud Infrastructure Provider – more info

– Storage array failed, unable to read tape backups used for DR

6

http://www.computerworld.com/s/article/9182719/Update_Virginia_s_IT_outage_continues_3_agencies_still_affected

http://www.computerworld.com/s/article/9182159/American_Eagle_Outfitters_learns_a_painful_service_provider_lesson

http://www.channelregister.co.uk/2012/01/16/tieto_vnx5700/


Enterprises Need a Better Approach to HA

Requirement Solution Profile

Protect from outages Any type, anywhere

Reduce recovery time Zero, seconds or minutes

Prevent data loss Zero or seconds

Minimize risk Continuous validation, test whenever

Eliminate complexity Simpler, pre-integrated

Increase ROI Reduce cost, utilize all assets

7


Program Agenda





1

2

3

8

4


What is Maximum Availability Architecture?

• Database-aware HA architecture for any platform or application

• Prescribed HA best practices benefiting from a community effect

• Integrated with Oracle Engineered Systems

9

24 X 7


Design Principles

Oracle MAA Data Protection and Availability

Data Protection at Every Level

Strong Fault Isolation: Real-Time Validation

Real-time HA/DR: All Components Active

10


Edition-based Redefinition, Online Redefinition, Data Guard, GoldenGate – Minimal downtime maintenance, upgrades, migrations

Active Data Guard – Data Protection, DR – Query Offload

GoldenGate – Active-active replication – Heterogeneous

Active Replica

RMAN, Oracle Secure Backup, Zero Data Loss Recovery Appliance

– Backup to disk, tape or cloud

Enterprise Manager Cloud Control – Site Guard,Coordinated Site Failover

Application Continuity – Application HA

Global Data Services – Service Failover / Load Balancing

RAC – Scalability – Server HA

ASM – Local storage

protection

Production Site

Flashback – Human error

correction


11


Edition-based Redefinition, Online Redefinition, Data Guard, GoldenGate – Minimal downtime maintenance, upgrades, migrations

Active Data Guard – Data Protection, DR – Query Offload

GoldenGate – Active-active replication – Heterogeneous

Active Replica

RMAN, Oracle Secure Backup, Zero Data Loss Recovery Appliance

– Backup to disk, tape or cloud

Enterprise Manager Cloud Control – Site Guard,Coordinated Site Failover

Application Continuity – Application HA

Global Data Services – Service Failover / Load Balancing

RAC – Scalability – Server HA

ASM – Local storage

protection

Production Site

Flashback – Human error

correction


12


Availability Service Levels for Unplanned and Planned Outages

Oracle MAA Availability Tiers

BRONZE

SILVER

GOLD • Comprehensive HA and Disaster Protection • Recovery in seconds with zero or near-zero data loss

• High Availability (HA) for Recoverable Local Outages • Backups plus redo for Oracle data protection

• Basic Service Restart • Backups plus redo for Oracle data protection

PLATINUM • Zero Outage for Platinum Ready Applications • Zero data loss

13


Program Agenda





1

2

3

14

4


Security & Compliance

Big Data & Data Warehousing

Consolidation

Database as a Service

Application Development

High Availability

In-Memory

Performance & Scalability

Data Optimization

Available on all Platforms

15


MAA and Oracle Multitenant

Area Capability

Backups • Backup and restore at a CDB level or a PDB level

Clusters • CDB is the Oracle instance, PDBs are exposed as database services

Replication • CDB is a single database to replicate and failover using physical replication • Alternatively, use logical replication to replicate individual PDBs

Planned Maintenance • CDB is a single database to patch or upgrade • Alternatively, perform maintenance at a PDB level using unplug/plug

16

Simplicity and Flexibility – Across all Reference Architectures


The Foundation of Cloud Deployments

Oracle MAA Reference Architectures

BRONZE

SILVER

GOLD

PLATINUM

Restart

Replication

Backups + Redo

Platinum-Ready Apps

Clusters

Backups

Clusters

Clusters + Replication

17


Basic Service Restart and Restore from Backup

Bronze Reference Architecture

BRONZE Restart

Backups

• Key HA Components – Efficient database consolidation

– Automatic restart

– Database-integrated corruption protection

18

– Flashback and Recovery Manager

– Self-service provisioning and life-cycle management

– Zero Data Loss Recovery Appliance


Physical Data Protection

Data Corruption Protection

ASM Mirroring

Human Error Correction

Flashback Technologies: Drop, Query, Transaction, Table,

and Database

Planned Maintenance

Online Redefinition

Online Reorganization

Online File Move

Online Patching

Fast Backup & Recovery

Recovery Manager (RMAN)

Fast Recovery Area

Single Instance Oracle Database HA Features

19


MAA: Data Corruption Protection for Oracle Databases

• DB_BLOCK_CHECKSUM, DB_BLOCK_CHECKING

– Validate checksum on read and update

– Prevents corrupted block to be written to disk

– Recover using good data block and redo

• Automatic Storage Management

– Data Corruption or I/O error triggers repair

– Reads extent copies for good copy

– Good writes can correct existing corruptions

• Exadata Corruption Detection and Automatic Disk Scrub and Repair

– Prevents physical corruption during writes (OS to storage)

– Inspects and repairs hard disk corruption that resides on storage

– Integrated with ASM to repair using good extent copy

20

Validation, Detection and Repair in Memory, During I/O and on Disk


ASM supports ALL data

• database files,

• filesystems,

•Clusterware files (OCR, Voting Disk)

Built-in mirroring protects from disk failures

Auto-repair of corrupt blocks using a valid mirror copy

21

Automatic Storage Management (ASM)


Flashback Technologies

• Fast point-in-time recovery (PITR) without expensive restore operation

• Error investigation

– View data as of previous point in time

• Error correction

– Back-out a transaction

– Incorrect table updates

– Rewind the entire database

• Use cases: Rolling upgrades, Snapshot Standby

Rewind Button for Oracle Databases

@T2 Col-1 Col-.. Col-n

Row-1 tom 1234 vp

Row-2 ben 8834 vp

Row-3 charlie 9837 vp

Row-n tom 8793 vp

@T1 Col-1 Col-.. Col-n

Row-1 abby 1234 officer

Row-2 ben 8834 mgr

Row-3 Charlie 9837 officer

Row-n tom 8793 vp Wrong Update

Flashback Table

DB @ T1 DB @ T2

Batch Update

Flashback Database

Wrong Update

22


Database Integrated Backup and Recovery

Oracle Recovery Manager: RMAN

• Unique knowledge of database file formats and recovery procedures

– Oracle block validation

– Online block-level recovery

– Native encryption, compression

– Table/partition-level recovery

– Oracle Multitenant support

• Tape and cloud backups

• Unified Management

RMAN

Data Files

Fast Recovery Area (FRA)

23

Cloud

Tape

Disk Tape


1 0 1

0 1 0 1 0

1 1 1 0 1 0 0 1

1 0 1 1 0 1 1 1 1 0

0 0 1 0 1 0 0 0 0

1 0 0 1 1 0 1

1 0 1 0

0 1

Fine-grained Table Recovery From Backup

• Simple RECOVER TABLE command to recover one or more tables (most recent or older version) from an RMAN backup

• Eliminates time and complexity associated with manual restore, recover & export

– Enables fine-grained point-in-time recovery of individual tables instead of the contents of the entire tablespace

RMAN Backups

24


1 1 1 0 1

1 0 1 1 0 1 1 1 1 0 1

0 0 1 0 1 0 0 0 0 1

1 0 0 1

1 1 1 0 1

1 0 1 1 0

1 1 1 1 0 1

0 0

1 0 1 0

0 0

0 1

1 0 0

1

Simplified Platform Migration

Cross-Platform Backup & Restore

• Simplifies procedure for platform migration

• Minimize read-only impact with multiple incremental backups

Source Database (AIX)

Backup to Disk/Tape

(data files, optional endian conversion, metadata export)

Restore Backup (optional endian

conversion, metadata import)

Destination Database (Solaris)

25


Zero Data Loss Recovery Appliance: Sub-second RPO

26

Delta Store – virtual full backups

• Stores validated, compressed changes on disk • Fast restores to any point-in-time using deltas •Built on Exadata scaling and resilience •Enterprise Manager end-to-end control

Recovery Appliance

Delta Push

•Access and send only changes •Minimal impact on production •Data Guard real-time redo ship

instantly protects new transactions

Protected Databases

Protects all Oracle Databases

•Petabytes of data •Oracle 10.2-12c, any platform •No expensive backup agents

Offloads Tape

Backup

Replicates to a remote Recovery

Appliance for disaster recovery

Unified Management

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 27

Recovery Appliance: Unique Benefits for Business and I.T.

Minimal Impact Backups

Production databases only send changes. All backup and tape processing offloaded

Eliminate Data Loss

Real-time redo shipping provides instant protection of new transactions

Cloud-Scale Protection

Easily protect all databases in the data center using massively scalable service

Database Level Recoverability

End-to-end reliability, visibility, and control of databases, not disjoint files


HA for Recoverable Local Outages

Silver Reference Architecture

• Key HA Components

– Oracle Database clusters: Oracle RAC and RAC One Node

– Integrated application failover

– Recovery Appliance Real-Time Redo Transport

SILVER Backups + Redo

Clusters

28


Oracle RAC One Node

• Fast instance failover

– Automatic failover of the Oracle instance

– Warm start - volumes already mounted, Oracle HA services and listener are always running

• Fast application failover

– Applications are notified and automatically failover to the new instance

• Zero-downtime planned maintenance

– Two instances are active during maintenance

– User-transparent draining of connections during service starts and stops

Best HA for single-instance Oracle Database

Oracle Instance

Oracle Database

Reads/Writes

App Server

Reads/Writes


Oracle Real Application Clusters (Oracle RAC)

• Enables shared access by two or more database instances to a single Oracle Database

• Very Scalable

– All instances active

– Add capacity online

– Ideal for database consolidation

• Highly Available

– Auto-failover of services to an already running instance

– Outage is transparent to user, in-flight transactions succeed

• Application Continuity with Oracle Database 12c

– Zero downtime rolling maintenance

30

Active-active clustering for enhanced HA and scalability

Instances

Database

Reads/Writes

App Server

Reads/Writes


Gold Reference Architecture HA for All Outages: Server, Database, Cluster, Site & Region

GOLD Replication

Clusters

• Key Features – Database-aware replication

– Integrated application failover

– Automated site failover

31


Included with Oracle Database Enterprise Edition

Data Guard: Real-time Data Protection and Availability

Primary Data Center DR Data Center

Enterprise Manager Cloud Control

32

SYNC / ASYNC

Fast Failover (manual or automatic)

SYNC / ASYNC


An Option License for Oracle Database Enterprise Edition

Active Data Guard: Advanced Capabilities

Zero data loss at any distance

Primary Data Center DR Data Center

Automatic block repair

33

Standby database open read-only for subscriber

inquiries, catalog lookup, pricing information, order

status, reporting, etc.

Fast incremental backups to a Recovery Appliance

SYNC / ASYNC

Enterprise Manager Cloud Control

Fast Failover (manual or automatic)


MAA Configuration Options Local Disaster Recovery with Zero Data Loss

• Second system deployed for local DR (within 200 miles or <5ms RTT*)

– Synchronous redo transport, Data Guard Maximum Availability

– Active Data Guard: offload read-only reporting

Primary Local Standby

SYNC

*Performance testing required, the impact of synchronous replication will vary by application

34


MAA Configuration Options Remote Disaster Recovery with Maximum Performance

• Second system deployed for remote DR

– Asynchronous redo transport, Data Guard Maximum Performance

– Active Data Guard: offload read-only reporting

Primary Remote Standby

Asynchronous Transport

35


MAA Configuration Options Multi-Standby: Local HA Failover plus Geographic Protection

• Dual standby configuration

– Local standby is primary failover target for HA with zero data loss

– Remote standby is failover of last resort

– Both can be used to offload read-only workload, backups, rolling upgrades, test

Primary Remote Standby

Asynchronous

Local Standby

SYNC

36


General Process for Data Guard Database Rolling Maintenance

Reduce Planned Downtime

Database A Database B

Original version

New version

Install new version in separate Oracle homes and defer transport

Synchronize

Synchronize STBY

Upgrade or perform other maintenance on B then synchronize with production

SWITCHOVER

Switch production to B, outage limited to the time needed to switch roles STBY

Synchronize Upgrade A via redo stream

and synchronize STBY

37


Flexible Logical Replication

Oracle GoldenGate

• Target database is a logical copy of the source and is open read-write

• Comprehensive support for heterogeneous environments

• Asynchronous replication for near-zero data loss protection

Source & Target Oracle & Non-Oracle Database(s)

Target & Source Oracle & Non-Oracle Database(s)

Capture Trail

Files Pump Delivery

LAN / WAN / Internet

Over TCP/IP

Trail

Files

38


GoldenGate: Heterogeneous Replication

Databases O/S and Platforms

Oracle GoldenGate Capture and Delivery: Oracle DB2 Microsoft SQL Server Sybase ASE Teradata Enscribe SQL/MP SQL/MX MySQL v5.5 JMS message queues

Oracle GoldenGate Delivery: All listed above, plus: TimesTen, Postgres Netezza, Greenplum, HP Neoview ETL products

Linux

Oracle Solaris 11

Windows 2000, 2003, XP

HP NonStop

HP-UX

IBM AIX v7.1

IBM z Series

zLinux

IBM i Series

39


Oracle GoldenGate Flexible Deployment Models Unidirectional • Query Offloading • Near-zero Downtime Maintenance and Migrations

Bi-Directional • Active-Active for HA • Zero Downtime Maintenance and Migrations

Peer-to-Peer • Load Balancing • Multi-Master

Broadcast Data Distribution

Integration/Consolidation Data Warehouse

BPM

BAM

CEP

Data Distribution via Messaging

40


Logical vs. Physical Replication?

• Logical replication is more flexible for an increased number of use-cases

– Heterogeneous replication

– Full-featured replication solution: subsets, transformations, many-to-one replication, etc

– Logical replica open read-write enables flexible options for planned maintenance and reporting

– Fast fall-back to prior version (can replicate from higher to lower Oracle release)

• However there are trade-offs for disaster recovery compared to physical replication

– More effort to configure and operate

– Inherently an asynchronous process, no concept of zero data loss protection

– Some data type restrictions and performance implications for high volume workloads

– Each replica has same data, but each is a different database (backups not interchangeable)

– Does not have all of the data validation and auto-repair features of Active Data Guard

41


Active Data Guard and GoldenGate: Strong Suits Complimentary Solutions often used Together in Gold Reference Architectures

Active Data Guard: Disaster Recovery and Data Protection

High-performance, simple, drop-in physical replication for HA and DR

Zero data loss, unique data corruption protection, switchover / failover, offload read-only workloads

Disaster recovery for all data types, applications and workloads

GoldenGate: Flexible HA, Maintenance and Migrations, Real-Time Data Integration

Logical replication for advanced replication requirements, target open read-write

Enable minimal/zero downtime upgrades and application migration using 2nd database copy

Heterogeneous platforms, bi-directional replication, transformations, subsetting, multiple topologies

42


Oracle Site Guard

• Automate site switchover/failover

– Reliably manages start-order dependencies

• Validated with:

– Oracle Fusion Middleware

– Oracle Databases

– Oracle Fusion Application deployments

• Supports both Data Guard and storage replication

• Extensible to integrate with non-Oracle components

Automated Site Failover for Oracle Stack – Database and Applications


Zero Application Outage and Zero Data Loss

Platinum Reference Architecture

PLATINUM Platinum-Ready Apps

Clusters and Replication

• Key Features – Zero data loss at any distance

– Mask outages from end-users

– Zero downtime maintenance and migrations

– Global service management for replicated databases

44


Primary Database Far Sync Instance

Active Standby Database • Oracle control file and log files • No database files • No media recovery • Offload transport compression • Supports up to thirty remote

destinations

• Zero data loss failover target • DR and reporting instance • Open read-only • Continuous Oracle validation • Manual or automatic failover

SYNC Limited distance

ASYNC Any distance

transport compression over WAN

Active Data Guard Far Sync Zero Data Loss Protection at Any Distance

• Production copy

Zero Data Loss Failover

45


Application Continuity

• Replay in-flight work on recoverable errors

• Mask many hardware, software, network, storage errors and outages

• Improve end-user experience and productivity without requiring custom application development

• Included in Oracle Database 12c with Oracle RAC, RAC One Node and Active Data Guard

Mask Unplanned/Planned Outages

Application Server

Database Servers

46

1. Database Request

5. Response

3. Errors, Timeouts

2. DB Calls 4. Application Continuity


Mask Outages from the End-User


Application Servers

Database Servers

End User

Network Switches

User performs a web checkout from an e-commerce site

1

2

User transaction arrives at application infrastructure and makes its way through the app-server tier and results in a database transaction being created.

The infrastructure hosting the database fails just before the transaction is committed to the database.

If transaction needs to be replayed, “Application Continuity” submits in-flight work to a surviving node in the cluster and performs a commit, transparently to the application

JDBC driver detects the failure and checks with an available node in the cluster, using “Transaction Guard”, whether the transaction committed or needs to be replayed.

The user receives confirmation that the website order has been successfully completed.

1

2

3

3

4

4

5

5

6

6

47


Bi-Directional Logical Replication for Zero Planned Downtime

Oracle GoldenGate

• Zero-downtime maintenance and migrations

• Active-Active high availability

• Heterogeneous replication, data distribution and integration

Source & Target Oracle & Non-Oracle Database(s)

Target & Source Oracle & Non-Oracle Database(s) Bi-directional

LAN / WAN / Internet

Over TCP/IP

48


Global Data Services

• Before Oracle 12c, a Database Service was designed to run within a single RAC database

• Oracle 12c introduces Global Database Services that can run across multiple RAC and non-RAC databases

– Provides RAC-style service failover, workload routing and balancing across multiple replicas

– Supports Data Guard, GoldenGate

– Takes into account network latency, replication lag, and service placement policies

• Maximizes application availability & performance and enhances ROI of replicas

• Included with Active Data Guard and Oracle GoldenGate

Workload Routing, Balancing & Service Failover for Replicated Databases

Oracle GoldenGate

Primary Active Standby

Active Data Guard or Oracle GoldenGate

Site A Site B

Global Data Services Global Service

Failover

Load Balancing

51

SALES GDS POOL (OE_service)

HR GDS POOL (payroll_service)

Master Master



• Before Oracle 12c, a Database Service was designed to run within a single RAC database

• Oracle 12c introduces Global Database Services that can run across multiple RAC and non-RAC databases

– Provides RAC-style service failover and load balancing across multiple databases within and across data centers

– Supports Data Guard, GoldenGate, and non-RAC databases

– Takes into account network latency, replication lag, and service placement policies

• Achieves higher availability, improved manageability and maximize performance

Service Failover and Load Balancing for Replicated Databases


52


Exadata X5 Oracle Exadata is software and hardware engineered together to provide the highest-performing and most-available platform for running Oracle Database. Its architecture features a scale-out design with industry-standard servers and intelligent storage, including state-of-the-art flash technology, and a high-speed InfiniBand internal fabric. Elastic configurations enable systems tailored to specific database workloads.

Oracle EXADATA X5 Available Now !!!


Role-Based Dynamic Database Services

– Ensures appropriate services start after database failover

Fast Application Notification (FAN)

– Applications immediately drop their connection instead of waiting for TCP timeout

Fast Connection Failover (FCF)

– Applications automatically retry and establish new connection using a connect string that has addresses for both primary and standby


– In-flight transactions are automatically replayed after failover to mask impact of an outage from the end-user

Integrated Application Failover - Components

54


Program Agenda





1

2

3

55

4


MAA At World Class

Customers

*http://www.oracle.com/technetwork/database/features/availability/ow-papers-089200.html

MAA Customer MAA Implementation Theme

PayPal Oracle Database 12c MAA for Mission-Critical Web App

Wells Fargo Active Data Guard at one of World’s Largest Banks

Fidelity Robust Data Protection with Exadata

Symantec Enabling Consolidation & High Availability with Exadata

Sanger Oracle Database 12c Multitenant & MAA Best Practices

Amway Deploying Oracle Database 12c Global Data Services

Boeing Oracle Database 12c Flex Cluster & Flex ASM

Thomson Reuters MAA Design Patterns in Action

Paychex Achieving the Best RPO & RTO with MAA & Exadata

State Street RMAN: Foundation for Exadata Backup & Recovery

US Cellular Eliminate Performance Bottlenecks with Exadata Flash

CCI Consolidation & Performance with Exadata

WestJet Siebel + MAA with Exadata

Sherwin-Williams Oracle E-Business Suite + MAA with Exadata

State of Texas Journey to Database As A Service

oracle.com/technetwork/database/features/availability/ha-casestudies-098033.html

http://www.oracle.com/technetwork/database/features/availability/ha-casestudies-098033.html








PayPal:

Internet Scale Availability with MAA

http://www.oracle.com/technetwork/database/availability/paypal-2030126.pdf

57




Largest OLTP database

• Fast paced VLDB OLTP environment on Oracle

• Continuously growing

• Stringent uptime requirements

• We rely on MAA for our high availability architecture

PayPal's Critical Application Architecture

GoldenGate Real-time Data Integration *

Mission-critical

Databases

Primary Data Center

DR Data Center

Data Guard ASYNC Redo Transport

ETL

Targets Production Databases • 2 X Exadata X2-8

• 2 X Full Storage Expansion

Active Data Guard Standby • Offload queries and reads

• Corruption Protection

• Symmetric System

WAN, 650+ miles (30ms)

Test/Dev

Production and Standby Clusters = 8 Exadata Racks

3 identical Architectures = 24 Exadata Racks + Test/Dev Resources supporting our Critical Applications.


Maximum Availability Architecture (MAA)

• Oracle-optimized

• Continuous service

• Never lose data

Summary

www.oracle.com/goto/maa

60


Additional Resources

https://blogs.oracle.com/MAA/

www.oracle.com/goto/maa

www.oracle.com/goto/ha

Customer References & Case Studies

https://blogs.oracle.com/MAA/

http://www.oracle.com/goto/maa

http://www.oracle.com/goto/ha



Q&A

62

Okcan Yasin Saygılı Oracle ISV Migration Center Consultant [email protected] ISV Migration Center blog: http://blogs.oracle.com/imc ISV Migration Center email: [email protected]

http://blogs.oracle.com/imc

mailto:[email protected]


• Oracle.com Partner Hub oracle.com/partners/goto/hub-ecemea

• Migration Center Team Blog blogs.oracle.com/imc

feeds.feedburner.com/oracleIMC

• Partner Webcast Recordings youtube.com/OracleIMCteam

• Partner Webcast Presentations slideshare.net/Oracle_IMC_team

• [email protected]

Oracle Partner Hub ISV Migration Center • twitter.com/OracleIMC

• plus.google.com/+OracleIMC

• facebook.com/OracleIMC

• linkedin.com/groups/Oracle-Partner-Hub-Migration-Center-4535240

http://oracle.com/partners/goto/hub-ecemea






http://www.slideshare.net/oracle_imc_team






http://twitter.com/oracleimc

https://plus.google.com/108612216492389783792

https://www.facebook.com/OPN.PartnerHub.Migration.Center

http://linkedin.com/groups/Oracle-Partner-Hub-Migration-Center-4535240













http://twitter.com/oracleimc

https://www.facebook.com/oracleimc

https://plus.google.com/108612216492389783792

https://www.youtube.com/OracleIMCTeam

partner webcast – oracle database 12c: maximum availability for consolidation and cloud

Technology

oracle andor

oracle secure backup

availability data protection

databaseaware ha architecture

traditional architecture

high cost

dr site

components active