upcoming: oracle database 12.1 support update for linux on … · 2015-01-26 · oracle 12c...

Upcoming: Oracle Database 12.1 Support Update for Linux on System z

Copyright © 2014 Oracle and/or its affiliates. All rights reserved. |

International zSeries Oracle SIG Webcast Series

The International zSeries Oracle Special Interest Group (SIG) is an organization of companies licensed for Oracle on z/Linux and/or the z/OS operating systems on IBM System z hardware. There are no membership fees or obligations.

Communications are done through Oracle mailings, emails, website www.zSeriesOracleSIG.org and annual user conference.

Please: Visit their website at the www.zSeriesOracleSIG.org

and sign up to be on the mailing list.

2

http://www.zseriesoraclesig.org/





Upcoming Advisor Webcast Schedule

3


• Check out Note ID : 740966.1

• Select your Product Area

• Scan through the list of Current Topics

• Register for the session of your interest

https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1


ATTENTION – AUDIO Options

Option 1: Voice Streaming Audio Broadcast

• No need to dial in on a telephone • Questions can be asked in the WebEx Q&A panel

Option 2: Teleconference (Dial In)

• Requires telephone to dial in • Questions can be asked over the phone or in the

WebEx Chat • Details

– Conference ID: “11561479” – International dial in: +44 (0) 1452 562 665 – US Free call: 1866 230 1938 – List with national toll free numbers is available

in Doc ID: 1148600.1 – View anytime during the conference using

Communicate > Teleconference > Join Teleconference from your WebEx menu

4



Oracle Advisor Webcast Oracle Database 12.1 Support Update for Linux on System z Sandra Skehin,Principal Support Engineer, Oracle David Simpson, Oracle Technical Specialist, IBM November 20, 2014

5


Safe Harbor Statement

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

6


Oracle Advisor Webcast Oracle Database 12.1 Support Update for Linux on System z Sandra Skehin,Principal Support Engineer, Oracle David Simpson, Oracle Technical Specialist, IBM November 20, 2014

7


International zSeries Oracle SIG Webcast Series

The International zSeries Oracle Special Interest Group (SIG) is an organization of companies licensed for Oracle on z/Linux and/or the z/OS operating systems on IBM System z hardware. There are no membership fees or obligations.

Communications are done through Oracle mailings, emails, website www.zSeriesOracleSIG.org and annual user conference.

Please: Visit their website at the www.zSeriesOracleSIG.org

and sign up to be on the mailing list.

8






Objectives

• To provide an update on the current support status for Oracle Datatabase.

• To support the zSeries Oracle SIG in their request for 12c advice.

• To provide guidance on security procedures.

9


Agenda

1

2

3

4

Oracle Database 12c System z Support Status

Oracle Database 12.1.0.2 In Memory Column Store

Oracle Database 12c Security

Performance

10


Oracle Database 12.1 Linux on System z OS Info

Support Status

• 11.2.0.4 Terminal Release

– Premier Support Jan 2015

– (EXS fees waived 1 year)

• 12.1.0.1

– Released Jan 2014

• 12.1.0.2

– Patch 17694377

– 2HCY14

• Opatch 12.1.0.1.5

– Patch 6880880

Redhat 6 Doc ID 1574413.1

• Redhat 6 update 3

– Recommend RH 6.4 or later

• Oracle RPM Checker

– ora-val-rpm-EL6-DB-12.1.0.1-1.s390x.rpm

– Only set ORACLE_BASE

– Disable ASLR

SLES 11 Doc Id 1574414.1

• SLES11 SP3

• Oracle RPM Checker

– ora-val-rpm-S11-DB-12.1.0.1-1.s390x.rpm

– Only set ORACLE_BASE

11


• It’s Fast

– Built using PDF

• New Features – less resources

• EM agent 12.1. enabled

– OEM Cloud Control 12cR3 or 12cR4

• IBM Redbook – Experiences with Oracle Database 12c Release 1 on Linux on System

z SG248159 http://www.redbooks.ibm.com/abstracts/sg248159.html?Open

Linux on System z specifics

12

Oracle Database 12.1 Support Update for Linux on System z

http://www.redbooks.ibm.com/abstracts/sg248159.html?Open


Oracle Database 12.1 Support Update for Linux on System z Key 12.1 New Features

12.1.0.1

• Multitenant Database

– Manage “many as one”

– Shared Resources

– Add on Licence

• Over 500 New Features for 12.1

– Oracle® Database New Features Guide 12c Release 1 (12.1) E49322-08

12.1.0.2

• In Memory Column Store

– Goals x 4 • Improve Speed of OLTP

• Speed up “ad-hoc” queries

• Simple to implement

• No changes to existing applications

• Support for FIPS 140-2

13


12.1.0.2: Dual Format Database

• BOTH row and column formats for same table

• Simultaneously active and transactionally consistent

• Analytics & reporting use new in-memory Column format

• OLTP uses proven row format

14

Normal Buffer Cache

New In-Memory Format

SALES SALES

Row Format

Column Format

SALES


Oracle In-Memory Columnar Technology

• Pure in-memory column format

• Not persistent, and no logging

• Quick to change data: fast OLTP

• 2x to 20x compression typical

• Enabled at table or partition

• Just active data in-memory

15

SALES

Pure In-Memory Columnar


Populating : In-Memory Column Store

•New INMEMORY ATTRIBUTE

•Following segment types are eligible

• Tables

• Partitions

• Subpartition

• Materialized views

•Following segment types not eligible

• IOTs

• Hash clusters

• Out of line LOBs

CREATE TABLE customers ……

PARTITION BY LIST

(PARTITION p1 …… INMEMORY,

(PARTITION p2 …… NO INMEMORY);

ALTER TABLE sales INMEMORY;

ALTER TABLE sales NO INMEMORY;

Pure OLTP Features



•Possible to populate only certain columns from a table or partition

•Order in which objects are populated controlled by PRIORITY subclause

• Critical, high, medium, low

• Default – none (populate on first access)

• Does not control the speed of population

ALTER TABLE sales INMEMORY

NO INMEMORY (PROD_ID);

CREATE TABLE orders

(c1 number,

c2 varchar(20),

c3 number)

INMEMORY PRIORITY CRITICAL

NO INMEMORY (c1);



•Different levels

• FOR DML Use on tables or partitions with very active DML activity

• FOR QUERY Default mode for most tables

• FOR CAPACITY For less frequently accessed segments

•Easy to switch levels as part of ILM strategy

CREATE TABLE ORDERS ……

PARTITION BY RANGE ……

(PARTITION p1 ……

INMEMORY NO MEMCOMPRESS

PARTITION p2 ……

INMEMORY MEMCOMPRESS FOR DML,

PARTITION p3 ……

INMEMORY MEMCOMPRESS FOR QUERY,

:

PARTITION p200 ……

INMEMORY MEMCOMPRESS FOR CAPACITY

);


Oracle Compression Advisor And In-Memory

•Easy way to determine memory requirements

•Use DBMS_COMPRESSION

•Applies MEMCOMPRESS to sample set of data from a table

•Returns estimated compression ratio


OLTP is Slowed Down by Analytic Indexes

Insert rate decreases as number of indexes

increases

# of Fully Cached Indexes (Disk Indexes are much slower)

20


Demonstration

21


Top Articles and Community Links

22

• Link to previous zSeries Oracle SIG 12c presentations:- www.zSeriesOracleSIG.org

• MOS Article: 1574412.1 Getting Started with 12c

• https://community.oracle.com/thread/3621739


https://community.oracle.com/thread/3621739

© 2014 IBM Corporation

Linux on System z Oracle SIG Update November 20, 2014

David Simpson - Oracle Technical Specialist, IBM ([email protected])

Sandra Skehin - Principal Support Engineer, Oracle

mailto:[email protected]


Copyright and Trademark Information

For IBM – can be found at http://www.ibm.com/legal/us/en/copytrade.shtml

For Oracle – can be found at http://www.oracle.com/us/legal/index.html

http://www.ibm.com/legal/us/en/copytrade.shtml

http://www.oracle.com/us/legal/index.html


Oracle 12c Security with Linux on System z

Layers of Security is Key!

1) Keep up to date with Oracle and Linux security patches.

2) FIPS 140-2 Government Compliances - Statement of

Direction from Oracle’s Advanced Security Team

3) Oracle Encryption (SSL, TDE)

4) Data Redaction new in 12c

25


Oracle October 2014 PSU’s and BASH Security Patches

Critical Patch Update Oct 2014 (contains 154 new security fixes)

– p19121550_121010_Linux-zSer.zip (DB PSU)

– p19392451_121010_Linux-zSer.zip (GI PSU)

– p6880880_121010_Linux-zSer.zip (Opatch)

– p19380115_112040_Linux-zSer.zip (11.2.0.4.4 Grid Patch)

Bash Shell Code Injection Vulnerability

Command to test -> env x='() { :;}; echo vulnerable' bash -c "echo this is a test“

vulnerable

this is a test

Apply bash rpm’s -> bash-3.2-147.22.1.s390x.rpm (SLES 11 SP3)

-> bash-4.1.2-29.el6.s390x.rpm (Red Hat 6.5)

26


Oracle FIPS 140-2 Security Compliance

NIST US Government Organization for Security Compliance certifications

Statement of Direction from Oracle’s Advanced Security Team

Included in 12.1.0.2 release

11.2.0.4 -> Patch 19207156: MES BUNDLE ON TOP OF RDBMS 11.2.0.4.2 needed for 11gR2

Activated with the following Oracle parameter:

– ALTER SYSTEM SET DBFIPS_140 = TRUE;

27

h


Oracle 12c Advanced Security – Encrypting Data

28

SSL - Encrypt traffic between Application

servers and Database Servers

New in 12c Oracle’s Transparent Data Encryption

– TDE now works with U.S. FIPS 140-2 mode

– Managing Oracle Wallets is easier with Storage in

ASM, automatic backup, AES256 wallet

Transparent Data Encryption (TDE) – Encrypt

entire tablesspaces


Utilizing Cryptographic functions with Linux on System z

29

Oracle Advanced Security on System z

–Can leverage hardware crypto module for SSL, https & java traffic network traffic

–TDE is currently only supported to either an ASM or file system.

–Use “icastats” to verify HW accelerator is being utilized when configured.


Oracle 12c Advanced Security – Data Redaction

30

SQL> select * from hr.emp;

EMPNO ENAME SALARY HIRE_DATE EMAIL_ID

---------- -------- ---------- --------- ------------------------------

1 John 0 12-NOV-14 [email protected]

2 Joe 0 10-NOV-14 [email protected]

3 Dave 0 09-NOV-14 [email protected]

SQL> begin

dbms_redact.add_policy

( object_schema=>user,

object_name=>'EMP',

policy_name=>'EMP_REDACT',

column_name=>'SALARY',

function_type=>DBMS_REDACT.FULL,

expression=> q'|sys_context('userenv','current_user')!= 'HR'|' );

end;

Setup a redaction policy on Salary column

SQL>

EMPNO ENAME SALARY HIRE_DATE EMAIL_ID

---------- -------- ---------- --------- ------------------------------

1 John 2010 12-NOV-14 [email protected]

2 Joe 1580 10-NOV-14 [email protected]

3 Dave 1490 09-NOV-14 [email protected]

Support staff can see sensitive data

Sensitive data

masked


Oracle 12c Advanced Security – Data Redaction

12c Data Redaction is transparent for Applications as well!

31


Oracle System z Performance Update

Recent Support Issues:

1) Oracle Data Pump parallelization.

2) Node evictions during dbca creation

32

© 2014 IBM Corporation 33

Oracle DataPump EXPORT lessons learned

Customer environment:

– Oracle 11.2.0.4 Two Node RAC

– 1.4 TB Database size

– Multiple lob tablespaces

– RHEL 6.4

– Database export using datapump with parallel=6

– Exported dump size was around 370 GB

– Exported 19 files of each around 20 GB

– Export job took 34 hours to complete

– Why so many hours???


Actions performed:

Changed the export file location from nfs location to local lvm file system (34 hours to 31 hours)

Changed storage from SAN/FCP to ECKD (31 to 29 hours)

Opened Oracle SR

– Enabled 10046 trace

– Parallel Capabilities of Oracle Data Pump ( Doc ID 365459.1 )

– Applied patch Patch 16038089


Conclusions:

After analyzing trace file outputs it was determined:

– The Datapump PARALLEL parameter needed to be tuned.

– Changed PARALLEL=8 and the export job completed in 5 hours!!!

In doing export process tune the parallelism according to number of files created, number of

virtual CPUs and the cpu utilization of the Linux guest.

https://support.oracle.com/epmos/faces/DocumentDisplay?id=365459.1


Node Evictions During DBCA

Environment:

– Oracle 12c, four node RAC (16GB Linux guests each).

– Sporadic node evictions observed when RAC dbca was ran.

– Why the node Evictions?


Actions performed:

Team suspected memory issue -> increased virtual Linux guest sizes from 16GB -> 32GB

ocssd.trc files showed: CSSD:3840645392: clssnmPollingThread: node xxxx (2) at 90% heartbeat

fatal, removal in 2.542 seconds

Engaged IBM / Oracle System z support teams

– VM paging space was observed in the 90-100% range.


Resolution:

Added additional page space on z/VM. This helped reduce usage as well as give more paths to

the paging subsystem.

Reduced virtual memory of Linux guests to what was needed.

Shutdown and logged off any non essential Linux systems to help reduce page space.

Web based z/VM monitoring setup for the DBA’s to monitor paging.

Re-enforced plans for a z/VM 5.4 -> 6.3 upgrade with improved memory management features.


Summary What we covered today

• 12c New Features and pre-requisites.

• Update on the current support Status for Oracle Database.

• Guidance on security procedures.

37

© 2014 IBM Corporation 38 38

International zSeries Oracle SIG Overview

The International zSeries Oracle Special Interest Group (SIG) is an organization of companies

and individuals licensed for Oracle on IBM System z Series hardware.

Mike Zechman – User Group SIG President

No membership fees or obligations to become a member.

Visit SIG website at the www.zSeriesOracleSIG.org and sign up for the mailing list.

Planning next SIG user conference (28th Annual) as well as future webinars.

Topics of interest ? Want to present? Conference Preference? send us an email -

[email protected]

Next Conference When: Next Conference Location:

Late April or Early May 2015 ?? New York or Washington DC ??





Q & A

39

• To ask a question on the phone line, select *1 on your phone.

• To ask a question online, use the Q&A area at the top.

• Your question will be read aloud in the order received.

• Question can also be asked on the My Oracle Support Communities


Question and Answer Instructions

Q&A panel

type your question here 1

Ask: ALL PANELLIST leave default! 2

Send your question 3


Oracle Advisor Webcast Program Locating Current Schedule & Archived Recordings

• From Note ID : 740966.1 drill down to your area of interest

• Select your Product Area

41



Oracle Advisor Webcast Program Locating Current Schedule & Archived Recordings For DB

Note:

• Click column headings to sort

• Hover on Webcast Title for more information

• Recordings available within 48 hours

• Advisor Webcast Questions on a webcast or ask questions via the Questions? link

42


Learn More Available References and Resources to Get Proactive

43

• My Oracle Support Essentials Webcast Series https://support. oracle.com | Doc ID: 553747.1

• My Oracle Support Blog https://blogs.oracle.com/supportportal/

• Get Proactive in My Oracle Support https://support. oracle.com | Doc ID: 432.1

• Ask the Get Proactive Team [email protected]

https://support.us.oracle.com/



https://blogs.oracle.com/supportportal/







Accessing My Oracle Support Community 1. Via My Oracle Support -> Community Tab

2. Directly – https://communities.oracle.com

44

https://support.oracle.com/

https://community.oracle.com/


Where Can I Get Slides and Recording From This Session? 1. PDF link and recording link from Doc ID 740966.1 (within 48 hours) 2. Oracle Database > Rdb on Open VMS, IBM zSeries and Oracle on OpenVMS

> Content Tab > Documents (within 24 hours)

45



Session Related Community Links

46

• “The following thread will have a copy of the presentation and can be used for additional questions or discussions on this topic.”

• https://community.oracle.com/thread/3621739


THANK YOU

47