OpenWorld 2016 Zero Data Loss Recovery Appliance

Transcription

1

2 OpenWorld 2016 Zero Data Loss Recovery Appliance Eliminate Data Protec/on Uncertain/es Donna Cooksey SoluGon Specialist, Recovery Appliance Converged Infrastructure September 22, 2016

3 Safe Harbor Statement The following is intended to outline our general product direcgon. It is intended for informagon purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or funcgonality, and should not be relied upon in making purchasing decisions. The development, release, and Gming of any features or funcgonality described for Oracle s products remains at the sole discregon of Oracle. 3

4 Program Agenda TradiGonal Database Data ProtecGon Short- Comings Recovery Appliance Overview Why it s Named the Recovery Appliance Simplified Backup and Recovery Management Summary and Q&A 4

5 Problems with Generic Backup SoluGons Designed for Flat File Backups and NOT Transac/onal Databases Always on Low Results Backup Windows O\en Not Met Data Loss Exposure Unacceptable for CriGcal Databases No Insight Into Recovery Unknown State of Data ProtecGon Minimal Deduplica/on Ra/os Lack of Oracle Database DeduplicaGon Capability Babysi'ng Backups! Appliance Sprawl No Scale- out: Increases ComplexiGes No Alerts on Recovery Alerts Focused on Just Backups Slow Restore Performance Most Only Publish Backup Speeds Overhead and More Overhead Full Backups, Purging, DeduplicaGon, ValidaGon etc 5

6 Key Stakeholders in Lifecycle of Backups Lack Visibility No End- to- End Visibility Leads to Cross- Departmental Finger- poin/ng Where are my backups? Can you restore these files to the staging area? We re out of storage and our backups are failing, can we have more capacity? DBA BLACK BOX Backup Appliances Tape Libraries Backup ApplicaGons BLACK BOX Sys / Storage Admin We stored the files, it s not our fault if you can t recover the database. Yesterday s backup failed, you need to invesggate. We don t have any addigonal storage, we need more lead Gme. 6

7 Restore Failed Due to Backup CorrupGon Internet Publicity Headline <Bank> Back to Normal Today a]er <service provider> System Outage Large US Bank Outage, Fall 2015 Assumed Backups Could be Recovered The bank s US implementa<on of <Applica<on> was corrupted during an opera<ng system change on 22 August by <service provider>. <service provider s> back- up was also corrupted, preven<ng failover and extending the recovery <me... The new system has now run for two days. We also have a new disaster recovery system and it is receiving updates real- <me. We are establishing a third instance and we are backing up the data, so we believe we have a reliable backup in place.. By the end of the weekend, the bank said it had caught up with producing system- generated net asset values for all mutual funds and ETFs for Monday, 31 August and for exchange- traded funds up to the previous Friday. ArGcle: hip:// 7

8 Data Loss Translates to Tangible Business Impact Bank s Stock Price Dropped 17% A]er Outage Bank s Stock Price $43.81 $42.42 $ Aug. 20 Aug. 21 Aug. 24 8

9 Program Agenda TradiGonal Database Data ProtecGon Short- Comings Recovery Appliance Overview Why it s Named the Recovery Appliance Simplified Backup and Recovery Management Summary and Q&A 9

10 Experience the Difference Oracle s Zero Data Loss Recovery Appliance Transforms data protecgon from a one- size- fits- all backup centric approach to a recovery focused strategy in a highly scalable architecture. Recovery Assurance with congnuous data protecgon, real- Gme recovery status for all protected databases and end- to- end Oracle aware validagon Purpose- Built Backup Recovery Appliance delivers: Reduces Recovery Point ObjecGve (RPO) from hours/days to a sub- second Offloads most backup processing from producgon the database servers Reduces storage consumpgon and network traffic with source- side deduplicagon Database ProtecGon- as- a- Service (DPaaS) 10

11 Centralized Data ProtecGon for Oracle Databases Reduces Management Complexi/es Protected Databases Delta Push DBs access and send only changes Minimal impact on producgon Real- Gme redo transport instantly protects ongoing transacgons Recovery Appliance Offloads Tape Backup Protects all DBs in Data Center Petabytes of data Oracle c, any plasorm No expensive DB backup agents Delta Store Stores validated, compressed DB changes on disk Fast restores to any point- in- Gme using deltas Built on Exadata scaling and resilience Enterprise Manager end- to- end control Replicates to Remote Recovery Appliance 11

12 Linear Performance Results with Scale- Out Eliminates Complexi/es of Backup Appliance Sprawl ConnecGvity scales with capacity 10 GigE or InfiniBand Base rack includes 2 compute and 3 storage servers - Incrementally add storage servers up to 18 in full rack - 94TB to 580TB usable capacity Scale- out by both compute and capacity: 18 full racks providing: 10+ PB of usable capacity 100+ PB of Virtual Full Backups Up to 216 TB/hour Backup and Restore 2+PB / hour of Virtual Full Backups 12

13 Increase ApplicaGon Performance by up to 25% Eliminates Most Backup Processing on Servers and Reduces Network Load Performance degrades with backups Performance improves with backups offload Disk / Tape / Dedupe Backup Agents Disk / Tape / Dedupe Backup Agents Backup Opera/ons: Merge, Compress, Validate, Delete, Full/Tape Backups Backup Opera/ons: Merge, Compress, Validate, Delete, Full/Tape Backups Delta Push Database server today Database server with Oracle Recovery Appliance 13

14 Weekly Full / Daily Incrementals vs. Recovery Appliance 1301 Healthcare Company 800 Databases 600 TB Databases 2% Daily Change 2% Daily Redo Generation Weekly SAN I/O (TB) 626 Weekly Backup Time (h) 600 Monthly WAN Transfer (TB) Space (TB) - 30 day recovery window De- Dupe for Performance ZDLRA 14

15 Managing and ProtecGng Oracle Databases Leading US Insurance Company Issues With Legacy Solu/on Lack of immutability of backups DBA has access to both prod and backup Overhead (I/O and CPU)on server cluster impacts other applica/ons: Cloning on same cluster Image copy validagon and merge Long running backups Image copy storage consump/on DBAs spend way too much /me managing BACKUP disk groups Backup immutability Requirements DBA must not be able to DELETE both prod and backup StandardizaGon of backup methodology Backups must complete within 12 hours Recovery Time ObjecGve (RTO) = 24 hours Cloning of backups without impact to prod Simplify storage and backup management Lack of backup visibility across clusters 15

16 Why They Chose the Recovery Appliance Meets Security Audit Goals for an Insurance Company Leading US Insurance Company StandardizaGon of backup methodology (Incremental forever) for all Oracle Databases Ability to Protect Databases from Malicious or Non Malicious Intent (Separa<on of Du<es) ProtecGng Backups from DROP DATABASE INCLUDING BACKUPS Offload backup and cloning processes from producgon servers which effecgvely increases applicagon performance: In legacy environment: RESTORE VALIDATE and CROSSCHECK took hours of CPU Gme on each database host Daily roll- forward of backup and cloning consumed server resources Simplified storage management with alerts, reports and dynamic storage allocagon Saves considerable amount of DBA Gme 16

17 Program Agenda TradiGonal Database Data ProtecGon Short- Comings Recovery Appliance Overview Why it s Named the Recovery Appliance Simplified Backup and Recovery Management Summary and Q&A 17

18 Database Recovery Assurance Only Oracle Can Provide! 1 Autonomic Oracle- aware Valida/on Blocks validated at every touch point and periodically while at rest Self- healing Architecture: AutomaGc repair from mirror 2 Storage Managed Based on Recovery Goals Intelligent allocagon of storage based on user- defined recovery window goals Eliminates storage over- provisioning Extensive monitoring, alergng and reporgng 3 Real- Time Database Recovery Status at your Finger/ps 18

19 Restore Readiness Reassurance Automated Oracle- Aware Valida/on and Redundancy End- to- End Block Valida/on Data validated during backup and restore Data validated during ingest AutomaGc, periodic block validagon of disk backups at rest on the appliance Data validated when copied to tape Data validated during Recovery Appliance ingest and restore on replica Self- Healing Architecture Corrupt block detected! Built- in Redundancy AutomaGc block repair from the mirrored copy Good block to the rescue! Data is striped and mirrored on Recovery Appliance disk Recovery Appliance catalog is triple mirrored Database backups stored with double redundancy Recovery Appliance servers are clustered providing automagc failover eliminagng an single point of failure 19

20 Alerts By Database on Current Data Loss Exposure User- Defined Unprotected Data Window Threshold Threshold may be set in ProtecGon Policy on upper limit of current data loss exposure acceptable If limit reached, user receives an alert Expected Unprotected Data Window Example of Threshold Sekng If Real- Time Redo Transport is Enabled If Real- Time Redo Transport is NOT Enabled < 1 Second 15 Minutes Amount of Gme since last backup Time between backups (e.g. every 4 hours) plus 1 hour Eliminates Need To Babysit Backups! 20

21 $1.7B Distributor of Electronic Components Known Recovery Status, Reduced Risk and Standardized Protec/on Recovery Appliance: Winning Criteria Recovery Appliance - Base Rack + 3 Storage Servers Reducing risk as customer had experienced a 3- day outage Known recovery status by database StandardizaGon across all Oracle database backups Eliminate diverse RMAN scripts AutomaGon and reporgng to simplify management Provide DBAs more control over backup & recovery Oracle ConfidenGal 21

22 Program Agenda TradiGonal Database Data ProtecGon Short- Comings Recovery Appliance Overview Why it s Named the Recovery Appliance Simplified Backup and Recovery Management Summary and Q&A 22

23 Recovery Appliance: End- to- End Data ProtecGon Visibility Policy- based Management: Applica/on- oriented Data Protec/on 2 Well Defined End- to- end Oracle Block Valida/on Oracle Blocks RMAN Backup Set 1 Applica/on- oriented Protec/on Policy Recovery Appliance 3 EM Cloud Control: Integrated Management Copyright 2016, Oracle and/or its affiliates. All rights reserved. 23

24 A True Appliance for Ease of Use Reduces Complexity of Requiring Specialists to Manage the Appliance All inclusive configuragon and appliance management eliminates the need for specialized skill set to manage the appliance No explicit DBA, storage, networking or server expergse required to manage the appliance Recovery Appliance includes: Pre- configuragon of disk groups, alergng, out- of- the- box reports, Oracle Secure Backup (opgonal) and more Servers, storage, catalog all managed by the appliance and upgraded as appropriate during regular quarterly patch releases Capacity dynamically allocated to best meet user- defined recovery windows 24

25 One Size Fits All Can Simplify Some things Data Protec/on of Cri/cal Data Is Not One of Them "One size fits all is a product that fits in all instances Compromised approach with Jack of All Trades, Master of None Appropriate for non- crigcal situagons or items Why it compromises Oracle Database Data ProtecGon: Focus on backup versus restore and recovery Unknown recovery status; must assume backup can be recovered Manual processes to test / validate a sampling of backups Lack of end- to- end visibility with key stakeholders Diverse backup strategies resulgng in storage silo s and over- provisioning 25

26 Database ProtecGon- as- a- Service (DPaaS) Standardized Backup Strategy by Tier of Database Business SLAs categorized: - One policy per database Ger - Databases managed as a group: - Replicate - Schedule copy to tape by policy or database Autonomous Management of all Backup Assets 26

27 Out- of- the- Box Reports Recovery, Capacity and Performance Protected Database Details Recovery Window Summary Recovery status by protecgon policy Top 10 Protected Databases by Data Transfer Capacity Planning Reports: Summary Details 27

28 Advantages for IT Recovery Appliance s Database Protec/on- as- a- Service Backup management known to be an unrewarding yet necessary task End- users complain about overhead, performance etc and never say thank you Usually only NEGATIVE aiengon backups can t be restored and recovered Get POSITIVE aiengon with Database ProtecGon- as- a- Service showing value to Lines of Business (LOB) Policy- based management and corresponding reports provide immediate value Send daily or weekly reports to LOB, CIO by database and/or as a whole: Current Recovery Status by database and protecgon policy Capacity usage by database and as a whole as well as space needed to meet recovery SLA 28

29 Oracle Database Backup and Restore Process US Financial Services Company Oracle Database Environment Backup and Restore Process About 500 Oracle Databases Most at version 11gR2 Have both RAC and non- RAC databases New revenue generagng applicagon leverages ASM / RMAN This is first database where RMAN is used Backup retengon period of 35 days Snapshots used to avoid overhead on database servers due to backups Snap and Mount backup strategy: Put database in hot backup mode, take a snap then mount the snap to a NetBackup media server Snap then backed up to Data Domain VTL Every backup / snap writes the whole database server file system to Data Domain Restore process: Infrastructure team restores the snap to a staging area DBA then restores / recovers needed files Primary Goal Get Away From this Snap and Mount Strategy 29

30 Why they Chose the Recovery Appliance Simplified management with an incremental forever strategy with full virtual restore Reduces complexity by eliminagng manual error prone backup / restore Before - three groups (UNIX, Storage and Database admins) had to coordinate mounts and restores Even more complicated if restore was between data centers Now - backups can be restored from the Recovery Appliance replica without user intervengon Reduced backup data sent over the WAN to DR site Recovery Appliance only sends changed blocks Legacy approach sent the engre database server file system over the WAN Reduced risk Known recovery status of backups with real- Gme recovery status End- to- end Oracle- aware backup validagon US Financial Services Company Infrastructure Team Drove the Review and Selec/on of the Recovery Appliance 30

31 Program Agenda TradiGonal Database Data ProtecGon Short- Comings Recovery Appliance Overview Why it s Named the Recovery Appliance Database ProtecGon- as- a- Service (DPaas) Summary and Q&A 31

32 Embraced by Industry Analysts The Recovery Appliance delivers DPaaS, accelerates database performance and enables companies to recover to levels of extreme granularity. The Recovery Appliance represents the most integrated, end- to- end backup and recovery system designed specifically for Oracle database that we ve seen to date. The Recovery Appliance is almost too good to be true in that it makes fully protec/ng any Oracle Database or thousands of Oracle Databases dead simple. With its modern design and extensive co- engineering with the Oracle Database and RMAN, Oracle s Recovery Appliance provides much- needed data protec/on assurance for any business, small or large. In contrast EMC Data Domain is an underperforming backup appliance with limited scalability and availability. 32

33 Top 10 Reasons You Need the Recovery Appliance Immediate Return on Investment (ROI) Data Loss Exposure Eliminated Real- Time Recovery Status For All Protected Databases Recovery Assurance For Oracle Databases Offload of Backup Processes From DB Servers End- to- End Visibility Across Backup Lifecycle Data ProtecGon- as - a- Service DPaaS Incremental Forever Strategy with Full Virtual Restore Linear Performance With Cloud- Scale ProtecGon Single Technical Support Resource Oracle PlaGnum Support Services 33

34 34

35