Oracle E-Business Suite (EBS) Deployment on Oracle Cloud Infrastructure (OCI) White Paper December 2017 Version 1.0

Transcription

1 Oracle E-Business Suite (EBS) Deplyment n Oracle Clud Infrastructure (OCI) White Paper December 2017 Versin 1.0

2 Table f Cntents Purpse f this Whitepaper... 2 Scpe & Assumptins... 2 Oracle E-Business Suite n Oracle Clud Infrastructure... 3 Deplyment chices fr E-Business n Oracle Clud Infrastructure... 3 EBS deplyment examples... 5 Single nde deplyment f E-Business n Oracle Clud Infrastructure... 6 Multiple ndes n Oracle Clud Infrastructure... 7 Multiple ndes n Oracle Clud Infrastructure with DBCS r ExaCS... 8 Cnclusin:... 9 Appendix: Key Cmpnents f Oracle Clud Infrastructure (OCI) Oracle Clud Identifier (OCID) Clud Resurce On-Premises Cmpute Service Virtual Clud Netwrk (VCN) Subnet Virtual Netwrk Interface Card (VNIC) Dynamic Ruting Gateway (DRG) Internet Gateway (IG) Security Lists Rute Table ORACLE E-BUSINESS SUITE DEPLOYMENT ON ORACLE CLOUD INFRASTRUCTURE (OCI)

3 Purpse f this Whitepaper Oracle E-Business Suite (EBS) can prvide a strategic advantage t yur business with the mst cmprehensive suite f integrated, glbal business applicatins that enable rganizatins t make better decisins, reduce csts, and increase perfrmance. Until nw, mst EBS users have chsen t run it in their wn data centers. The purpse f this dcument is t prvide an understanding f hw EBS can be deplyed in the Oracle Clud Infrastructure (OCI) envirnment, and enable yu t cmbine the traditinal benefits f EBS with the agility, availability, and cst-effectiveness f mdern Infrastructure-as-a-Service. Scpe & Assumptins Yu shuld knw EBS applicatin fundamental design and architecture and have an understanding f the OCI envirnment and cmpnents. By fllwing this dcument, yu will gain knwledge f available implementatin methds fr varius EBS cnfiguratins, and the OCI EBS architecture fr initial develpment and prductin deplyment. This includes all the necessary cmpute instances, strage, security, netwrking and cnnectivity. This is an verview dcument, that is nt t be used as a prductin deplyment reference architecture. This paper is prvided as a high-level reference guide fr deplying Oracle E-Business Suite by either mving an envirnment frm n-premises t the clud r creating a new develpment envirnment n Oracle Clud Infrastructure. This dcument utlines sme f the best practices, and shuld nt be viewed as Full Reference Guide fr E-Business Suite. There are a number f prducts and tpics that are beynd the scpe f this dcument. While nt all tpics are listed, Identity Access Management (IAM) and VPN/IPSec are examples f additinal cmpnents used fr typical EBS deplyments in OCI which we will nt cver in this paper. Readers f this dcument shuld first:» Be familiar with the fundamentals f Oracle Clud Infrastructure» Getting Started Guide» Have a basic understanding f Oracle Clud Infrastructure Cmpute» Oracle Cmpute Service» Have a basic understanding f Oracle Clud Infrastructure Database» Database as a Service» Have a basic understanding f Oracle Clud Infrastructure Netwrking» Oracle Clud Netwrking» Netwrk Lad Balancing» Have a basic understanding f Oracle Clud Infrastructure Strage Services» Blck Strage» Object Strage» Have a basic understanding f Oracle Clud Infrastructure Identity Access Management (OIAM)» Identity Access Management» Have a basic understanding f VPN IPSec tunnel functinality VPN IPSec Tunnels Security

4 Oracle E-Business Suite n Oracle Clud Infrastructure Yu can think f running Oracle E-Business Suite n Oracle Clud fr Infrastructure as running exactly the same EBS applicatins that yu run n premises in yur data center tday the same applicatins yu may have custmized n a cmbinatin f Oracle s Infrastructure as a Service (IaaS) and Platfrm as a Service (PaaS). EBS applicatin architecture design chices are: Infrastructure: Oracle Clud Infrastructure is a set f cmplementary clud services that enable yu t build and run a wide range f applicatins and services in a highly-available hsted envirnment. Oracle Clud Infrastructure ffers high-perfrmance cmpute capabilities (as physical hardware instances r virtual machines) and strage capacity in a flexible verlay virtual netwrk that is securely accessible frm yur n-premises netwrk. OCI prvides highly scalable, cmpetitively priced cmpute capacity that yu can use t hst yur EBS applicatin tier and, ptinally, yur database tier. Infrastructure + Platfrm: Oracle Clud Platfrm is a cmprehensive, standards-based, fully integrated cmbinatin f Oracle and pen surce technlgies yu can use t build, deply, migrate, and manage a variety f different applicatin wrklads in the clud at a significantly lwer peratinal cst. The Database Clud Service (DBCS) r Exadata Clud Services (ExaCS) part f PaaS can be used t run yur database tier, enabling yu t prvisin yur chsen database cnfiguratin quickly and easily. Java Clud Service (JCS) can be used fr the web and applicatin middle-tier. JCS prvides the additinal capabilities and benefits f being a PaaS service. Infrastructure + Platfrm + Applicatin Management Suite: Oracle Applicatin Management Suite fr Oracle E-Business Suite leverages Oracle Enterprise Manager as Oracle s n-premises management platfrm, prviding a single pane f glass fr management f Oracle E-Business Suite envirnments n Oracle Clud r at custmer data centers. Oracle Enterprise Manager prvides market-leading autmatin fr mnitring and managing Oracle Clud envirnments, Oracle engineered systems, databases, middleware, and Oracle applicatins. Later in this paper, we prvide sme guidelines yu can use t navigate these chices. Deplyment chices fr E-Business n Oracle Clud Infrastructure When yu subscribe t Oracle s Infrastructure as a Service (IaaS), yu have access t all the cmpute, strage, and netwrk services assciated with it. If necessary, yu can als subscribe t the Oracle Database Clud Service (DBCS) r Exadata Clud Service (ExaCS) and take advantage f the specific features and capabilities f these fferings. There are several methds f deplying EBS n OCI. 1. Single nde, which has all the EBS cmpnents installed in a single cmpute instance and is available frm Oracle Marketplace fr dwnlad. 2. Multiple ndes n Oracle Clud Infrastructure, which means that the applicatin and the database tiers are being deplyed as tw distinct sets f cmpute instances. 3. Multiple ndes n Oracle Clud Infrastructure, making use f PaaS services fr either the applicatin r database tiers. The applicatin tier can take advantage f using either OCI Cmpute r Java Clud Service (JCS). JCS prvides additinal capabilities, such as built-in high availability and sessin cntinuance. The database tier can be either Database Clud Services (DBCS) r Exadata Clud Services (ExaCS). Bth ptins prvide advanced Oracle database ptins, nline cre scaling and high availability. Oracle als ffers an autmated prvisining capability fr EBS called Lift & Shift. The Lift & Shift applicatin can be used t deply either a Visin (dem) EBS instance r take yur n-premises EBS envirnment and deply the same matching envirnment in OCI. Lift & Shift is a cmmn term in the clud industry. With the L&S capability yu have the ptin t select the architecture layut, single nde, multiple nde r multiple nde with either DBCS r ExaCS. Netwrk architecture definitin is cnfigured as well with the additin f VCN, subnets, ruting tables, security lists and lad balancers. Lift & Shift fr Oracle E- Business Suite means t cpy (r clne) an n-premises envirnment t Oracle Clud. The clud cpy can be used fr testing r develpment, and when yu are ready as part f a permanent migratin f yur prductin envirnment t the clud.

5 E-Business Suite supprts the fllwing platfrms, strage, netwrking and versins n the Oracle Clud Infrastructure: Oracle E-Business Suite Release and higher Oracle E-Business Suite Release E-Business Database Tier Database versins and Enterprise Editin (EE) Database Clud Service (DBCS) Single nde nn clustered with High Perfrmance (HP) Real Applicatin Cluster (RAC) with Extreme Perfrmance (EP) Exadata Clud Service (ExaCS) Exadata Clud Service (ExaCS) with Extreme Perfrmance (EP) All database versins supprt bth Data Guard (DG) and Active Data Guard(ADG) E-Business Applicatin Tier WebLgic releases WLS Standard Editin (SE) WLS Enterprise Editin (EE) WL Suite (WL Suite) WebLgic versins supprted in OCI VMs , , , will supprt EBS deplyments Oracle Java Clud Service (JCS) n OCI , , , will supprt EBS deplyments WebLgic High-Availability WebLgic EE r Suite is required WebLgic Multitenancy WebLgic Server Cntinuus Availability Operating systems supprted in OCI fr EBS: Oracle Linux (6.x, 7.x) Windws Server 2012 R2 Other OS s are available via Bring Yur Own Image (BYOI) Available strage ptins fr EBS n OCI Database strage uses high-perfrmance lcal r netwrk NVMe blck strage Object strage is used as the target fr database backups Apple_Tp requires the use f shared strage, a separate NFS server is required Netwrk architecture with multiple cnfiguratins are available in supprt f the EBS envirnment Lcal DNS Supprts lcal DNS service Supprts use f Dyn services Static private IP Cnfigure bth Applicatin and DB servers with Static IPs LBaaS will have Public IP fr external cnnectivity Lad Balancer LBaaS external Public IPs LBaaS supprts bth Public and Private lad balancing Hybrid Stry fr Cnnectivity & Migratin

6 VPN Cnnectivity VPN IPSec Tunneling MPLS / Fast Cnnect Security and cmpliance recmmendatins The use f Security Lists is recmmended fr EBS as there are many prtcls and prts that are used. When using Lift & Shift, all f the Security Lists (SL) that are created during the prcess are dependent n yur initial netwrk entries. The reasn L&S creates multiple SL s is due t the large number f prts and prtcls required and these are dependent n which tier/cmpnent is attached. This is why during the cnfiguratin yu create an App Tier SL, DB Tier SL and a Lad Balancer SL. The prcess is repeated fr the Ruting tables as well. EBS n OCI meets a number f cmpliance specificatins General: SOC1, SOC2, ISO 27001/2 Specific: PCI, HIPAA, NIST EBS n OCI enables a number f available autmated management functins like: EBS backup and restre n Oracle Clud Flexible Clud Service Clning Fast Clning (Cmpute, DBCS, ExaCS) EBS envirnment elasticity (managed server, JVM memry, add/delete nde) Reshape VM (CPU, Memry and Disk) EBS SOAP/REST Services Enablement Cnsle GUI and API driven envirnment management DMZ Cnfiguratin EBS deplyment examples The EBS applicatin can be deplyed in several cnfiguratins, Single nde, Multiple nde r Multiple nde with High Availability and Disaster Recvery. Selecting a deplyment architecture is based n a number f factrs including but nt limited t: perfrmance, user cunts, and r peratin requirements. Business requirements, such as availability and disaster recvery have t be taken int cnsideratin. Whether this is a single glbal view f all accunts r supprts multiple instances and COAs. Each has a cnsideratin int the design and applicatin f the clud architecture.

7 Single nde deplyment f E-Business n Oracle Clud Infrastructure The single nde n IaaS ptin cnsists f an all-in-ne Oracle E-Business Suite Release virtual machine image that includes bth the applicatin tier and the database tier. Available n Oracle Clud Marketplace, this image is updated when required, s yu can quickly prvisin the latest image t explre new features. This ptin is ideal if yu wish t evaluate and test standard Oracle E-Business Suite functinality, and becme familiar with the technlgy cmpnents and ther features. Yu can use a Visin (dem) installatin f Oracle E-Business Suite t evaluate standard functinality, cmpare it with yur wn business prcess flws, and identify any gaps. A Visin installatin can als be used as a sandbx envirnment t try ut setups and prcess flws. Yu can cnfigure a fresh installatin f Oracle E-Business Suite with functinal setups that are specific t yur business, enabling yu t tailr and test prcesses tailred t yur needs. Here is an example f a single nde EBS Visin test envirnment installatin n OCI.

8 Multiple ndes n Oracle Clud Infrastructure The multiple ndes n IaaS ptin allws yu t prvisin ne r mre applicatin tiers, plus a separate database tier, n the Oracle Clud Infrastructure Cmpute. Yu can scale ut the applicatin tier as needed and leverage multiple availability dmains fr high availability (HA). An autmated prvisining tl enables yu t create a new installatin f Oracle E-Business Suite acrss Oracle Clud Infrastructure Cmpute instances. The flexibility f this ptin makes it ideal fr supprting prductin wrklads, as well as develpment, testing and training envirnments in all types f Oracle E-Business Suite installatin: Visin (dem) installatins f Oracle E-Business Suite 12.2 images frm the Oracle Clud Marketplace. Fresh installatins f Oracle E-Business Suite 12.2 images frm the Oracle Clud Marketplace. Clning f n-premises Release 12.2 r instances frm n-premises t Oracle Clud Infrastructure Cmpute instances. Lift & Shift applicatin prvides an expedited capacity fr migratin with reduced risk and shrter a time perid fr prject cmpletin. Release 12.2 r instances frm n-premises t Oracle Clud Infrastructure Cmpute instances. Here is an example f a multi-tier EBS installatin n OCI.

9 Multiple ndes n Oracle Clud Infrastructure with DBCS r ExaCS This ptin is a variant f the multiple nde architecture. It is cmprised f the same cmpnents, but des nt deply the Oracle Database within a cmpute instance n the Oracle Clud Infrastructure Cmpute. Instead, it uses a subscriptin t Oracle s Platfrm as a Service (PaaS) r Exadata Clud Service t prvide the Oracle E-Business Suite database needed. Additinally, the middle-tier can implement Java Clud Services (JCS) fr the web and applicatin tier servers. As seen in the diagram belw, yu can als take advantage f OCI, DBCS, r ExaCS fr disaster recvery (DR) capabilities in this architecture. Yu always have a chice f prvisining these multi-tier instances either frm the Oracle Clud Marketplace (fr dem and fresh installs) r frm n-premises instances (fr clning f existing Release r 12.2 instances). The use f the Lift & Shift applicatin prvides an expedited capacity fr migratin with reduced risk and shrter a time perid fr prject cmpletin. Here is an example f a multi-tier EBS installatin n OCI with PaaS services.

10 Cnclusin: Oracle technlgy lies at the heart f enterprise IT. Many enterprises rely n Oracle Database and sftware like Oracle E- Business Suite t pwer their business. Until recently, it s been hard t mve these wrklads t the clud t take advantage f public clud reliability, elasticity, and cst efficiency. Oracle has a public clud Infrastructure-as-a-Service ffering Oracle Clud Infrastructure and decades f experience prvisining and running Oracle prducts. Our hardware chices, staff expertise, and lng-hned IT prcesses are all best-fbreed fr managing Oracle wrklads, and make Oracle Clud Infrastructure the best place t hst applicatins like E-Business Suite. Migrating yur existing Oracle applicatins such as Oracle E-Business Suite t Oracle Clud Infrastructure helps yu: Manage slutins and applicatins nt infrastructure. Leverage the public clud withut changing prcesses and tling, r retraining staff Fcus n yur cre business, nt n IT E-Business Suite n Oracle Clud Infrastructure is a scalable, reliable, high perfrmance slutin. A number f EBS architecture cnfiguratins are available t match yur current n-premises design. With the EBS Lift & Shift capability, mving frm npremises, peratinal risk has been reduced with imprved success n all migratins. OCI is als very cst-effective fr rapid deplyment and remval f test and QA envirnments. Additinal infrmatin fr EBS n OCI can be fund at the fllwing websites: EBS n OCI EBS OCI Library EBS OCI Blg Getting started with EBS n OCI

11 Appendix: Key Cmpnents f Oracle Clud Infrastructure (OCI) Oracle Clud Identifier (OCID) Oracle Clud Identifier (OCID) is a unique name assigned t every resurce yu prvisin n OCI. This is an aut-generated lng string used by Supprt Engineers t identify yur clud resurce when wrking with any Supprt Tickets. The custmer can t chse a preferred value fr OCID and can t mdify it fr the life f clud resurce. The custmer will als use OCIDs when wrking with REST APIs r SDKs. Clud Resurce Clud resurce refers t anything yu prvisin n the clud platfrm. In OCI terms, it can be a VCN, Cmpute, User, Cmpartment, DBaaS, LBaaS r any ther service cmpnent n the platfrm. On-Premises On-Premises is a widely-used term in Clud Technlgies and it refers t yur traditinal data-center envirnment. It includes any c-lcatin, dedicated flr space, dedicated data-center building r even a desktp running under yur desk. Cmpute Service Oracle Clud Infrastructure Cmpute lets yu prvisin and manage cmpute hsts, knwn as instances. Yu can launch instances as needed t meet yur cmpute and applicatin requirements. After yu launch an instance, yu can access it securely frm yur cmputer, restart it, attach and detach vlumes, and terminate it when yu're dne with it. Any changes made t the instance's lcal drives are lst when yu terminate it. Any saved changes t vlumes attached t the instance are retained. Oracle Clud Infrastructure ffers bth Bare Metal and Virtual Machine instances: Bare Metal - A bare metal cmpute instance gives yu dedicated physical server access fr highest perfrmance and strng islatin. Virtual Machine - A Virtual Machine (VM) is an independent cmputing envirnment that runs n tp f physical bare metal hardware. The virtualizatin makes it pssible t run multiple VMs that are islated frm each ther. VMs are ideal fr running applicatins that d nt require the perfrmance and resurces (CPU, memry, netwrk bandwidth, strage) f an entire physical machine. An Oracle Clud Infrastructure VM cmpute instance runs n the same hardware as a Bare Metal instance, leveraging the same clud-ptimized hardware, firmware, sftware stack, and netwrking infrastructure. Virtual Clud Netwrk (VCN) Virtual Clud Netwrk (VCN) als knwn as Clud Netwrk is a sftware-defined netwrk that yu set up n OCI. Yu can think f VCN as an extensin f yur n-premises netwrk t the clud, with firewall rules and specific types f cmmunicatin gateways. A VCN cvers a single, cntiguus CIDR (range f IP Addresses) blck f yur chice. VCN is a reginal resurce, it means it cvers all the Availability Dmains (ADs) within a regin. Oracle OCI VCN supprts a CIDR range f /16 t /30 and yu can t change the CIDR f a VCN after it s created. The VCN s CIDR must nt verlap with yur n-premises netwrk s wrk with yur n-premises Netwrk Administratr t get an available range f IP addresses (CIDR) that can be used with yur VCN. Subnet A subnet is a subdivisin f clud netwrk (VCN). Subnet is an AD (Availability Dmain) specific resurce and yu must have ne subnet per AD in a regin. A subnet cnsists f a cntiguus range f IP Addresses that d nt verlap with ther Subnets within the same VCN. Yu build a subnet by specifying the CIDR (range f IP Address), Availability Dmain (AD) and a userfriendly name fr the Subnet. Subnets cntain virtual netwrk interface cards (VNIC), which attach t instances. Yu can designate a subnet as private when yu create it, which means VNICs in the subnet can t have public IP address.

12 A subnet is assciated with Security Lists, Rute tables and DHCP ptins t cntrl what traffic is allwed t flw in which directin (DRG r IG fr public/private traffic). Yu can t change Security Lists/Rute Table attachment nce a subnet is built, hwever yu can change the rules f Security Lists and Rute Tables. Virtual Netwrk Interface Card (VNIC) A Virtual Netwrk Interface card (VNIC) resides in a Subnet and gets attached t an instance t enable cnnectins t the Subnet s VCN. Each instance has a default primary VNIC that is created during instance launch and can t be remved. Yu can add Secndary VNICs t an existing instance (in the same AD as the primary AD) if needed. Dynamic Ruting Gateway (DRG) Dynamic Ruting Gateway (DRG) is a virtual ruter that prvides a path fr private traffic between OCI clud netwrk (VCN) and n-premises (data-center) netwrk. DRG is a standalne resurce n OCI and is designed t give yu full flexibility t attach/detach t different VCN as per the business needs. A DRG is required fr bth VPN IPSec Tunnels and Fast Cnnect virtual circuits. A netwrk administratr might think f the DRG as the VPN headend n their OCI Services. Internet Gateway (IG) Internet Gateway (IG) is an ptinal virtual ruter that yu can add t an VCN fr internet cnnectivity. It prvides internet access t yur VCN and is cntrlled by the Rute Tables and Security List cnfiguratin n the Subnet Level. In additin t IG, yu must have the fllwing t access the internet frm the cmpute instance: a) Ruting rule in Rute Table that pints t the IG b) Apprpriate prt pen in the Security List, e.g. Prt 80/443 must be pened fr Web Server Traffic. NOTE: Having an Internet Gateway alne DOES NOT expse yur subnet t the internet unless yu satisfy bth cnditins abve. Security Lists Security Lists are a virtual firewall fr yur VCN n OCI infrastructure. Each security list cnsists f ingress and egress rules that specify the destinatin (CIDR) and type f traffic (Prtcl and prt) allwed in and ut f instances within a subnet. A Security List is attached t a subnet and yu can change the traffic type/destinatin dynamically. Fr example, a rule in Security Lists with surce CIDR /24 with destinatin prt 22 f TCP prtcl will allw all ingress traffic frm IP addresses ( /24) n t OCI instances n prt 22 fr ssh cnnectin. Rute Table Rute Tables are virtual rute tables where yu cnfigure private and public traffic using DRG r IG. The rute table rules prvide mapping fr the traffic frm subnets via gateways t a destinatin utside VCN, e. g., private traffic flws using DRG and public traffic flws using IG. Yu can build multiple rute tables within a VCN r use the default rute table. A rute table must be assigned t a subnet within a VCN, s a default rute table is used when yu create a subnet withut specifying a rute table. Yu can have ne dedicated rute table per subnet t keep it easy fr subnet management. Yu can t change a subnet t use anther rute table nce a subnet is created, hwever, yu can change the rute table rules at any time.

13 EBS Deplyment n Oracle Clud Infrastructure (OCI) Cpyright 2017, Oracle and/r its affiliates. All rights reserved. This dcument is prvided fr infrmatin purpses nly, and the cntents heref are subject t change withut ntice. This dcument is nt warranted t be errr-free, nr subject t any ther warranties r cnditins, whether expressed rally r implied in law, including implied warranties and cnditins f merchantability r fitness fr a particular purpse. We specifically disclaim any liability with respect t this dcument, and n cntractual bligatins are frmed either directly r indirectly by this dcument. This dcument may nt be reprduced r transmitted in any frm r by any means, electrnic r mechanical, fr any purpse, withut ur prir written permissin. Oracle and Java are registered trademarks f Oracle and/r its affiliates. Other names may be trademarks f their respective wners. Intel and Intel Xen are trademarks r registered trademarks f Intel Crpratin. All SPARC trademarks are used under license and are trademarks r registered trademarks f SPARC Internatinal, Inc. AMD, Optern, the AMD lg, and the AMD Optern lg are trademarks r registered trademarks f Advanced Micr Devices. UNIX is a registered trademark f The Open Grup EBS Deplyment n Oracle Clud Infrastructure December 2017 Authr: David Fster (dave.c.fster@racle.cm) Principal Slutins Architect Oracle Crpratin, Wrld Headquarters Wrldwide Inquiries 500 Oracle Parkway Phne: Redwd Shres, CA 94065, USA Fax: