Oracle Database 12c High Availability For Consolidation and Cloud Deployments

Transcription

1

2 Oracle Database 12c High Availability For Consolidation and Cloud Deployments Wei Hu Vice President of Development High Availability Technologies, Oracle Corporation Vitor Pacheco Associate Director, Data Services Amadeus Data Processing GmbH September 29, 2014

3 Consolidation and Cloud Deployments Challenge and Opportunity Consolidating databases into a private cloud can lower cost and increase agility Challenge: Consolidation into private cloud requires placing many databases into a shared infrastructure to simplify management and control cost. If that platform goes down, so do all of the databases that run on it Opportunity: It is much easier to make a smaller number of platforms highly available... if they are built using the right infrastructure Oracle Database 12c can help you build a highly available platform required for consolidation and private cloud is the ruggedized version of 12c

4 Cloud and High Availability Strategy Achieve Synergy through the Cloud Oracle provides both a complete suite of cloud services, and the infrastructure that are used to build these cloud services Oracle s cloud offerings are robust because of our best-in-class high availability technologies Oracle s high availability technologies are battle-tested by being massively deployed in our cloud offerings You, our customers, benefit when you use our cloud services or the underlying HA technologies Oracle MAA a Cloud-tested architecture

5 Oracle Maximum Availability Architecture Cloud-tested Architecture Production Site RAC Scalability Server HA ASM Local storage protection Flashback Human error correction Enterprise Manager Cloud Control Site Guard, Coordinated Site Failover Application Continuity Application HA Global Data Services Service Failover / Load Balancing Active Replica Active Data Guard Data Protection, DR Query Offload GoldenGate Active-active replication Heterogeneous Edition-based Redefinition, Online Redefinition, Data Guard, GoldenGate Minimal downtime maintenance, upgrades, migrations RMAN, Oracle Secure Backup, Recovery Appliance Backup to disk, tape or cloud

6 Program Agenda Active Data Guard Global Data Services Application Continuity Backup and Recovery Other HA Enhancements MAA at Amadeus 6

7 Replication Required for Best Availability A consolidated database (or private cloud) must be physically replicated across multiple data centers Good news: as you consolidate, it becomes even more cost effective to deploy disaster recovery Fewer databases, fewer data centers, lower operational costs Best fault tolerance is achieved by replicating across long distances But long-distance replication can affect performance 7

8 Speed-of-light and Zero Data Loss Performance Impact of Long Distance Replication Everyone wants to run Data Guard with zero data loss (Maximum Availability Mode), but are worried about performance impact of synchronous communication The longer the distance, the larger the performance impact Commit Ack Commit Network Ack Network Send Primary Standby

9 Compromise by running Data Guard Customers in Async mode Minimal, But Some Data Loss Exposure on Disaster ASYNC Standby Primary

10 Active Data Guard Far Sync Zero Data Loss For Async Deployments Far Sync is a light-weight Oracle instance with a standby control file, standby redo logs, archived redo logs, but no data files Receives redo synchronously from primary, forwards redo asynchronously in real-time to standby Upon failover the asynchronous standby transparently obtains the last committed redo from the Far Sync instance for zero data loss failover A second Far Sync instance can be pre-configured to transmit in reverse direction after failover/switchover

11 Active Data Guard Far Sync Operational Flow Primary SYNC (no data loss) ASYNC Standby Far Sync instance

12 Active Data Guard Far Sync Operational Flow Primary ASYNC Remaining Redo Blocks Zero Data Loss New Standby Primary Far Sync instance No Compromise Between Data Protection and Performance!

13 Active Data Guard Far Sync Benefits Best data protection, least performance impact Low cost and complexity Best way to implement a near DR + Far DR model Every Data Guard ASYNC configuration can benefit from using this Ability to do a no data loss failover improves your availability since you will be able to failover immediately on any issues Benefits both types of DR cloud deployments Centralized on-premise DR Service and DR in the public cloud In both cases, the DR center will likely be far from all the primary data centers

14 Active Data Guard Fast Sync Reduced Primary Database Impact for Maximum Availability SYNC Commit Commit Acknowledge Primary LGWR Redo Logs NSS RFS Standby Redo Logs Standby Fast Sync Remote site acknowledges received redo before writing it to standby redo logs Reduces latency of commit on primary Better DR increased SYNC distance FAST SYNC Commit Commit Acknowledge Primary LGWR Redo Logs NSS Acknowledge returned on receipt RFS Standby Redo Logs Standby If network round-trip latency is less than time for local online redo log write, synchronous transport will not impact primary database performance Fast Sync is supported with Fast-Start Failover and/or Far Sync

15 Data Guard Other New Features in Oracle Database 12c Rolling Upgrade With Active Data Guard Automate complexity through simple PL/SQL Package: DBMS_ROLLING ( onwards), with simple Init, Build, Start, Switchover, Finish procedures Additional Data Type Support: XML OR, Binary XML, Spatial, Image, Oracle Text, DICOM, ADTs (simple types, varrays), DML on Global Temporary Tables Temporary undo is not logged in redo logs Enables DML on global temporary tables on Active Data Guard: more reporting support Set by default on Active Data Guard standby Validate Role Change Readiness Ensure Data Guard configuration ready for switchover with automated health checks verify no log gaps, perform log switch, detects any inconsistencies, ensures online log files cleared on standby, Unique Sequences Primary allocates a unique range of sequence numbers to each Standby Enables more flexible reporting choices for Active Data Guard

16 EM Database Rolling Upgrade Assistant Automation for Active Data Guard Rolling Upgrades 16

17 Data Guard Failover and Switchover Times It Just Works Better Seconds to Failover Failover Single Instance Mount Single Instance with Active Data Guard RAC Mount 18 n/a 25 n/a Switchover n/a 55 n/a RAC with Active Data Guard 17

18 Oracle Database Cloud Service RMAN, Data Guard, and Active Data Guard Customer Tenant On Premise Compute Cluster Compute GlassFish REST Listener Cloud Utilities R/W Compute Storage Primary RDBMS OVM /u04 /u03 /u02 /u01 Redo Log Shipping Compute Cluster Compute GlassFish REST Listener Cloud Utilities R/O Standby RDBMS OVM /u04 /u03 /u02 /u01 Available today: RMAN backup and recovery Coming soon: local Data Guard and Active Data Guard standby databases Planned in calendar year 2015: Active Data Guard for remote DR Off-load RMAN backup to standby using fast incremental backups Database rolling upgrades and standby-first patching using physical standby 12c Global Data Services to load balance and manage services across replicated databases Active Data Guard Far Sync -- zero data loss protection at ANY Distance

19 Disaster Recovery Automation with Oracle Site Guard Being Deployed with Oracle SaaS Site A Web Tier Oracle Site Guard Enterprise Manager Cloud Control Site B Web Tier Automates entire stack switchover or failover between sites Web, application, database and storage Web Host1 Web Host2 Web Host1 Web Host2 Data Guard and storage replication Manages start order dependencies App Tier App Host1 DB Tier DB Host1 App Host2 DB Host2 A ZFS Storage Appliance Storage Replication ZFS Storage Appliance Data Guard/ Active Data Guard Transport App Tier A App Host1 DB Tier DB Host1 App Host2 DB Host2 Validated with: Oracle Databases Oracle Fusion Middleware Oracle Fusion App deployments Extensible for 3rd party components (IBM WebSphere, SAP etc.) Part of the effort to industrialize HA/DR for managing a fleet of application deployments

20 Program Agenda Active Data Guard Global Data Services Application Continuity Backup and Recovery Other HA Enhancements MAA at Amadeus 20

21 Database Service in Cloud and Consolidation Location Transparency and Handling Database Outages Fundamental requirement of consolidation and cloud deployment is to isolate applications from where the database service is physically offered Applications connect to a logical database service Service can be offered by instances in a RAC database, replicated databases, local or remote data centers, in a PDB or dedicated database The set of physical database that offers a service can change due to failures, load, and configuration changes Service can be moved around (e.g., migrate a database from a dedicated server onto a consolidated platform in another data center) When a service fails, the application should be transparently directed to a new instance of this service, whether it is running locally or in another data center Oracle Database 12c provides this using Global Data Services 21

22 Global Data Services Service Failover and Load Balancing for Replicated Databases Global Data Services Before Oracle 12c, a Database Service was designed to run within a single RAC database Oracle 12c introduces Global Database Services that can run across multiple RAC and non-rac databases Provides RAC-style service failover and load balancing across multiple databases within and across data centers Supports Data Guard, GoldenGate, and non-rac databases Takes into account network latency, replication lag, and service placement policies Achieves higher availability, improved manageability and maximize performance

23 Global Data Services Active Data Guard Example Reporting Services Call Center Services Active Data Guard Global Services running across primary and standby Reporting Service: read-only service available on primary and standby Call Center Service: read-write service running on primary database Clients connecting to the Reporting Service are routed to either primary or standby database Based on location, response time, data, acceptable data lag Reports will automatically run on least loaded server If preferred database not available, will route connections to another database Global service migration Automatically migrates services based on failover/switchover. Will automatically start services on the most appropriate replica according to policies configured by the administrator Works similarly with GoldenGate including support for GoldenGate configurations using active-active replication

24 Global Data Services Summary of Benefits Global Data Services Key Benefits Provides the location transparency that allows you to consolidate and/or move databases into a cloud Allows your applications to more easily use Active Data Guard and GoldenGate for processing Improves resource utilization, agility, and manageability for Active Data Guard and GoldenGate deployments

25 Program Agenda Active Data Guard Global Data Services Application Continuity Backup and Recovery Other HA Enhancements MAA at Amadeus 25

26 Application Continuity Mask Unplanned and Planned Failures In-flight works continues Replays in-flight work on recoverable errors Masks hardware, software, network, and storage failures and planned maintenance Supports JDBC-Thin, Universal Connection Pool (UCP), WebLogic Server Oracle adds support for IBM Websphere, Apache Tomcat (using native PooledConnection interface), and other midtiers when using UCP Included with RAC, RAC One, & Active Data Guard Database Request Replayed End User Application Servers Database Servers Copyright 2014, Oracle and/or its affiliates. All rights reserved. 26

27 Transaction Guard Preserve and Retrieves Known Commit Outcome Known outcome after failure Tracks outcome of the last transaction Without Transaction Guard, retry can cause logical corruption Transaction Guard allows applications to deal correctly with failures Application Continuity uses Transaction Guard Also available for applications that do not use Application Continuity End User Application Servers Database Servers Copyright 2014, Oracle and/or its affiliates. All rights reserved. 27

28 Improvements to Services and Planned Maintenance Continuous Connections. Oracle clients delay retries while a service is failing over to eliminate connect failures for RAC and Data Guard. In client, backported to Graceful relocation of sessions away from node during maintenance. Supports Oracle connection pools in conjunction with RAC (10g and later) and with Oracle 12c Global Data Services (Data Guard, GoldenGate, RAC and non-rac databases) FAN (Fast Application Notification) notifies clients when a database service fails or moves (network, maintenance, hangs, joins). This allows clients to rapidly react. Auto-configuration for FAN out-of-the-box Global Data Services supports FAN on Active Data Guard, GoldenGate, RAC, single instance Cloud-tested: Oracle Database just works better 28

29 OLTP Workload During Service Migration UCP : Transaction rate unchanged during service migration UCP prior to TPS :42:14 18:47:02 18:51:49 18:56:37 19:01:24 19:06:16 19:11:04 19:15:53 19:20:41 19:25:31 19:30:18 19:35:07 19:39:54 19:44:41 19:49:32 19:54:20 19:59:07 20:03:55 20:08:42 20:13:30 20:18:18 20:23:06 20:27:53 20:32:42 20:37:46 20:42:34 20:47:21 20:52:08 20:56:56 21:01:44 21:06:31 21:11:18 21:16:07 21:20:54 21:25:42 21:30:29 21:35:18 21:40:06 21:44:53 21:49:40 21:54:28 21:59:17 22:04:04 22:08:52 22:13:39 22:18:28 22:23:15 22:28:08 22:32:55 22:37: UCP TPS :40:56 21:45:39 21:50:22 21:55:05 21:59:49 22:04:32 22:09:15 22:13:58 22:18:41 22:23:24 22:28:07 22:32:50 22:37:33 22:42:17 22:47:00 22:51:43 22:56:26 23:01:09 23:05:52 23:10:35 23:15:18 23:20:01 23:24:45 23:29:28 23:34:11 23:38:54 23:43:37 23:48:20 23:53:03 23:57:46 0:02:29 0:07:13 0:11:56 0:16:39 0:21:22 0:26:05 0:30:48 0:35:31 0:40:14 0:44:57 0:49:40 0:54:24 0:59:07 1:03:50 1:08:33 1:13:16 1:17:59 1:22:42 1:27:25 1:32:08 1:36:52

30 Planned Failover with FAN WebLogic Server Active GridLink and Real Application Clusters DBA Operation Maintenance Result Time to Drain all Sessions RAC rolling PSU apply using opatch No errors to application 5s RAC rolling Instance parameter change No errors to application 7s Data Guard switchover Site maintenance No errors to application 29s Data Guard switchover Site maintenance fallback No errors to application 25s

31 Program Agenda Active Data Guard Global Data Services Application Continuity Backup and Recovery Other HA Enhancements MAA at Amadeus 31

32 Zero Data Loss Recovery Appliance (ZDLRA) Best Way to Backup your Consolidated Database and Private Cloud Zero Data Loss Real-time redo shipping ensures data protection in sub-second time Zero Impact Backups Production only sends deltas. All backup and tape processing offloaded DB Protection as a Service Easily protect all databases using scalable centralized service End-to-End Robustness End-to-end visibility, control, and data validation 32

33 Zero Data Loss Recovery Appliance Extreme Protection for All Oracle Databases Protected Databases Delta Push DBs access and send only changes Minimal impact on production Real-time redo transport for protection till sub-seconds Zero Data Loss Recovery Appliance (ZDLRA) Autonomous Tape Archive Offloads tape backup Tapes utilized all day Tape Library Protects all DBs in Data Center Scales to 1000s of databases Petabytes of data, any DB release No expensive backup agents Delta Store Stores validated, compressed DB changes on disk Fast restores to any point-in-time using deltas Built on Exadata scaling and resilience Single console for end-to-end visibility and control Replicate to Remote ZDLRA or Oracle Cloud 33

34 Data Protection As A Service Facilitates Deployment of Private Cloud-Based IT Shared Services ZDLRA Protection Policies Easy-to-deploy standardized data protection templates, e.g. recovery window, disk retention, etc. Gold Policy, Mission Critical Disk: 45 days Tape: 90 days Silver Policy, Business Critical Disk: 30 days Tape: 45 days Bronze Policy, Test/Dev Disk: 15 days Tape: 30 days Tape Replica Possible to set up Protection Policies also at Replica ZDLRA 34

35 RMAN Fine-grained Table Recovery From Backup RMAN Backups Simple RECOVER TABLE command to recover one or more tables (most recent or older version) from an RMAN backup Eliminates time and complexity associated with manual restore, recover & export Enables fine-grained point-in-time recovery of individual tables instead of the contents of the entire tablespace

36 RMAN Cross-Platform Backup & Restore Simplified Platform Migration Source Database (AIX) Destination Database (Solaris) Backup to Disk/Tape (data files, optional endian conversion, metadata export) Restore Backup (optional endian conversion, metadata import) Simplifies platform migration. Includes from Big-Endian systems (AIX, HP-UX) to Little-Endian systems (Exadata and Intel X86) Minimizes read-only impact with multiple incremental backups Also useful for instantiating standby databases and GoldenGate replicas

37 Oracle Database Backup-as-a-Service Offsite Backups with Simple and Low Cost Cloud Backup Backup on-premise or Cloud Databases to Oracle Database Backup Service hosted in Oracle Public Cloud Data Center DBaaS Oracle Public Cloud Cost effective, scalable cloud storage End-to-end enterprise-grade data encryption, compression and protection Clients: Data is encrypted with keys kept locally at client, optionally compressed, and securely transmitted Cloud: Encrypted data is protected with 3- way mirroring on every write Oracle Public Cloud

38 Program Agenda Active Data Guard Global Data Services Application Continuity Backup and Recovery Other HA Enhancements MAA at Amadeus 38

39 Other HA Enhancements Online Datafile Move Relocate a datafile while users are actively accessing data: ALTER DATABASE MOVE DATAFILE Maintains data availability during storage migration Online Redefinition Enhancements Improved sync_interim_table performance Ability to redefine table with VPD policies Improved resilience of finish_redef_table Better handling of multi-partition redefinition Separation of Duties SYSDG / SYSBACKUP: Data Guard & RMAN specific administrative privileges No access to user data: enforce security standards throughout the enterprise Additional Online Operations Drop index online / Alter index unusable online / Alter index visible / invisible online Drop constraint online / Set unused column online Online move partition: ALTER TABLE MOVE PARTITION ONLINE

40 ASM Overview Oracle Database 11.2 or earlier RAC Cluster Database Instance One to One Mapping of ASM Instances to Servers ASM Instance Node1 Node2 Node3 Node4 Node5 Shared Disk Groups ASM Cluster Pool of Storage Disk Group A Disk Group B ASM Disk Wide File Striping Public 40

41 Introducing Flex ASM Oracle 12.1: Removal of One to One Mapping RAC Cluster Database Instance Databases share ASM instances ASM Instance Node1 Node2 Node3 Node4 Node5 Node1 runs as ASM Client to Node2 Node4 Node2 runs as ASM Client to Node3 Node5 runs as ASM Client to Node4 Shared Disk Groups ASM Cluster Pool of Storage Disk Group A Disk Group B ASM Disk Wide File Striping Public 41

42 Oracle GoldenGate 12c Enhancements Focus Area Oracle Integration Improved Ease of Use Enhancements Support for Oracle Multitenant, Integrated Replicat for automatic dependency-aware apply, integration with Data Guard for auto-restart of GG components after failover Simpler configuration of DDL replication, Coordinated Replicat for all databases to allow for better, simpler scalability Enhanced Security Integration with Oracle Credential Store for database authentication Enhanced Heterogeneity New capabilities for replication for MySQL, SQL Server, Sybase, Teradata, and DB2. Cloud Ready Capture from and delivery to the Cloud, both Cloud to Cloud and on-premises to cloud 42

43 Active Data Guard and GoldenGate Complementary Active Data Guard best for unplanned downtime DR capabilities like: Zero data loss, Far Sync, Fast Start Failover Primary and standbys are physically the same (down to the SCNs) Good for error detection: corruptions, lost writes Good for repair: Automatic Block Repair, using a backup from the standby to recover the primary, and vice versa GoldenGate best for planned downtime GoldenGate replicas are never physically the same Great when you want to perform planned operations like upgrades Critical when you want to replicate among different platforms 43

44 Program Agenda Active Data Guard Global Data Services Application Continuity Backup and Recovery Other HA Enhancements MAA at Amadeus 44

45 Oracle High Availability in Amadeus Mission Critical Applications 2014 Amadeus IT Group SA Vitor Pacheco Moreira Amadeus Data Processing Data Services

46 Amadeus in a few words Amadeus is a technology company dedicated to the global travel industry. We are present in 195 countries with a worldwide team of more than 11,000 people. Our solutions help improve the business performance of travel agencies, corporations, airlines, airports, hotels, railways and more Amadeus IT Group SA Page 46

47 Our customers CORPORATIONS TOUR OPERATORS CONTENT PROVIDERS AIRLINES HOTELS CRUISE GROUND HANDLERS FERRY CARS RAIL AIRPORTS TRAVEL INTERMEDIARIES INSURANCE 2014 Amadeus IT Group SA Page 47

48 Amadeus Global Operations Page 48

49 Architecture overview Open Back End including Departure Control Systems Service oriented Layered Modular Composite services Service self-registration Highly distributed design Hundreds of interconnected servers Travel Agent Sales Provider Sales e-commerce DCS SERVICES INTEGRATOR Protocol adapter APPLICATIONS AND SERVICES FILE SYSTEMS 2014 Amadeus IT Group SA DATABASES Airport Hotel Kiosks AUTHENTICATION Access control app1 app2 app3 app4 BIG DATA Corporations Scalability Scale out: Additional servers bring capacity on demand Scale up: Processing power benefits from evolutions in the semiconductor industry Page 49

50 50 Mission Critical Applications Current DB topology _ CRS services in Active/Passive Role-switch: internal process to free Bad Homburg computing resources London Rolling PSU and one off-patches _ ASM in normal redundancy with Erding failure groups in different fire-cells Volume mirroring leveraged Miami for storage evolution _ Amadeus MW instrumented for recovery Leveraging similar concepts as of TAF and FAN _ Data Guard in Maximum Performance Mode Planned switch over using Data Guard Broker: 2 minutes Exadata for isolation and consolidation Flashback DB enabled in DG:36 hours/900gb flashback in less than 30 minutes Mirror 2 Data Guard Mirror 1 Instance Instance 2 Bangkok Second Data Center (MUC) Data Guard Sydney

51 51 Mission Critical Applications DB futures Isolation and distribution _ Infrastructure enhancements Bad Homburg Minimize the shared components in order London to mitigate impact _ Oracle features RAC in a box for rolling patches Miami Erding Retaining the manageability for patch management ASM and other HA enhancements Improved manageability of our platforms 12c Application Continuity / Transaction Guard To be studied PK 3 AMER Data Guard PK 1 EMEA PK 2 ASIA PAC Bangkok Second Data Center (MUC) Data Guard Sydney

52 Mission Critical Applications DB futures DR in the Cloud _ Oracle features Data Guard 12c Active Data Guard Far Sync Replication Bad Homburg Improved resiliency in cross continent replications London PK 3 AMER 12c Global Data Services Data Erding Guard Simplification of the App-to-DB connectivity settings Improved resilience Miami against failures Workload balancing Monitoring purpose RO workloads Data Guard PK 1 EMEA PK 2 ASIA PAC Bangkok _ and beyond Distribution of Amadeus services in the Cloud DR services to start 52 Own and third party data centers Licensing model under negotiation Data Guard Sydney

53 53 Mission Critical Applications Transform while perform _ Oracle GoldenGate Data Guard Zero (minimum) down-time for upgrades Bad Homburg Bi-directional cross version/endian fundamental London PK 3 feature to allow the fallback AMER Data Erding Reorganization enabler Guard Data dictionary and data objects Miami 12c Improved manageability Data Guard Tuned upgrade use case Integration with Global Data Services Complements Active Data Guard in MAA configuration PK 1 EMEA PK 2 ASIA PAC Bangkok Sydney Data Guard

54 Thank you You can follow us on: AmadeusITGroup 2014 Amadeus IT Group SA amadeus.com/blog amadeus.com

55 Amadeus a Cloud MAA Example Amadeus is a Travel SaaS provider that relies on MAA and Exadata for mission-critical availability Oracle Database 12c allows Amadeus to further improve availability using Active Data Guard Far Sync to globally distribute their databases GoldenGate to perform zero-downtime upgrades Global Data Services to load balance and failover requests across their global data centers Lower operational costs through manageability improvements in ASM and RAC, and more effectively use Active Data Guard for applications 55

56 Database 12c for Consolidation and Cloud Deployments Oracle Database 12c offers high availability (HA) capabilities needed for consolidation and private clouds This allows you to benefit from consolidation and cloud, while improving application availability Oracle Database is the ruggedized version of 12c Cloud-ready and cloud-tested. You get to use the same proven HA technologies that are used in Oracle s public and private clouds, and mission-critical customers like Amadeus

57 Resources OTN HA Portal: Maximum Availability Architecture (MAA): MAA Blogs: Exadata on OTN: Oracle HA Customer Success Stories on OTN:

58 58

59