Deplying an Exadata DB System n Oracle Clud Infrastructure ORACLE WHITE PAPER AUGUST 2018
Disclaimer The fllwing is intended t utline ur general prduct directin. It is intended fr infrmatin purpses nly, and may nt be incrprated int any cntract. It is nt a cmmitment t deliver any material, cde, r functinality, and shuld nt be relied upn in making purchasing decisins. The develpment, release, and timing f any features r functinality described fr Oracle s prducts remains at the sle discretin f Oracle. Revisin Histry The fllwing revisins have been made t this white paper since its initial publicatin: Date August 31, 2018 Revisin Initial publicatin Yu can find the mst recent versins f the Oracle Clud Infrastructure white papers at https://clud.racle.cm/iaas/technical-resurces. 2 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Table f Cntents Intrductin 4 Overview f Exadata n Oracle Clud Infrastructure 4 Supprted Database Editin and Versins 5 Access Requirements fr Deplying Exadata 5 Steps t Launch an Exadata DB System n Oracle Clud Infrastructure 5 Step 1: Create a VCN 5 Step 2: Create an Internet Gateway 7 Step 3: Create a Service Gateway 7 Step 4: Create Rute Tables 8 Step 5: Create Security Lists 10 Step 6: Create DHCP Optins 12 Step 7: Create Subnets 13 Step 8: Add Rules t Security Lists 17 Step 9: Launch an Exadata DB System 20 Step 10: Access the Exadata DB System frm the Cnsle 24 Step 11: Cnnect t the Exadata DB System 25 Summary 26 3 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Intrductin This white paper prvides step-by-step guidelines fr deplying an Exadata DB system n Oracle Clud Infrastructure. This paper utlines sme best practices; it is nt intended t be used as a full reference guide fr implementing Exadata. This dcument assumes that yu have a basic understanding f varius cmpnents f Oracle Clud Infrastructure: Fundamentals f Oracle Clud Infrastructure Oracle Clud Infrastructure Netwrking, specifically virtual clud netwrks (VCNs), subnets, security lists, and rute tables Oracle Clud Infrastructure Identity Access Management (IAM) Overview f Exadata n Oracle Clud Infrastructure An Exadata DB system cnsists f a quarter rack, half rack, r full rack f cmpute ndes and strage servers, tied tgether by a high-speed, lw-latency InfiniBand netwrk and intelligent Exadata sftware. Yu can cnfigure autmatic backups, ptimize fr different wrklads, and scale up the system t meet increased demands. The cmpute ndes are each cnfigured with a virtual machine (VM). Yu have rt privilege fr the cmpute nde VMs, s yu can lad and run additinal sftware n them. Hwever, yu d nt have administrative access t the Exadata infrastructure cmpnents, such as the physical cmpute nde hardware, netwrk switches, pwer distributin units (PDUs), integrated lights-ut management (ILOM) interfaces, r the Exadata Strage Servers, which are all administered by Oracle. Yu have full administrative privileges fr yur databases, and yu can cnnect t yur databases by using Oracle Net Services frm utside Oracle Clud Infrastructure. Yu are respnsible fr database administratin tasks such as creating tablespaces and managing database users. Yu can als custmize the default autmated maintenance setup, including backups, and yu have full cntrl f the recvery prcess in the event f a database failure. Oracle Clud Infrastructure ffers tw versins f Exadata, X6 and X7, and each versin cmes with three shapes. Fr details abut these shapes, see the System Cnfiguratin sectin f the Exadata DB Systems tpic in the Database service dcumentatin. Nte: Actual usable strage fr the DATA disk grup depends n the backup ptin that yu chse when yu launch an Exadata DB system. See the Exadata DB system dcumentatin fr details. 4 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Supprted Database Editin and Versins Exadata DB systems require Enterprise Editin - Extreme Perfrmance. This editin prvides all the features f Oracle Database Enterprise Editin, plus all the database enterprise management packs and all the Enterprise Editin ptins, such as Oracle Database In-Memry and Oracle Real Applicatin Clusters (RAC). Fr a list f the supprted sftware releases, see Supprted Database Editin and Versins in the Database service dcumentatin. Access Requirements fr Deplying Exadata T launch Exadata in Oracle Clud Infrastructure, yu must be given the required access via an IAM plicy. The fllwing is a sample IAM plicy that prvides this access t grup DBAdmins at tenancy level. T reduce the scpe f access t just the database systems in a particular cmpartment, specify that cmpartment instead f the tenancy. Allw grup DBAdmins t manage database-family in tenancy Yu will als require the public key that yu plan t use t cnnect t DB system via SSH. Steps t Launch an Exadata DB System n Oracle Clud Infrastructure This sectin prvides the steps t create the required netwrking cmpnents and launch an Exadata DB system in Oracle Clud Infrastructure. References t the Oracle Clud Infrastructure Netwrking and Database services dcumentatin are prvide fr detailed steps. Step 1: Create a VCN 1. Sign in t the Oracle Clud Infrastructure Cnsle. 2. Create a VCN, fllwing the steps in T create a clud netwrk. Fr this example, enter the fllwing values in the Create Virtual Clud Netwrk dialg bx: Fr Name, enter ExaVCN. Select Create Virtual Clud Netwrk Only. 5 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Fr CIDR Blck, enter 10.0.0.0/16. Nte: We recmmend using ne f the private IP address ranges specified in RFC 1918 (10.0.0.0/8, 172.16/12, and 192.168/16). Hwever, yu can use a publicly rutable range. The VCN s CIDR must nt verlap with yur n-premises netwrk r anther VCN yu peer with. Fr details, see Access t Other VCNs: Peering. Select the Use DNS Hstnames in This VCN check bx. Fr DNS Label, enter exavcn. After the VCN is created, it appears in Cnsle. 6 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Step 2: Create an Internet Gateway An internet gateway is a virtual ruter that cnnects the edge f the clud netwrk with the internet. Traffic that riginates in yur VCN and is destined fr a public IP address utside the VCN ges thrugh the internet gateway. 1. In the Cnsle, click the name f the VCN that yu created. 2. Create an internet gateway, fllwing the steps in T create an internet gateway. Fr this example, in the Create Internet Gateway dialg bx, enter ExaIG fr the name. Step 3: Create a Service Gateway A service gateway lets resurces in yur VCN access public Oracle Clud Infrastructure services such as Object Strage withut using an internet gateway r NAT. Any traffic frm yur VCN that is destined fr ne f the supprted public services uses the instance's private IP address fr ruting, travels ver the Oracle Clud Infrastructure netwrk fabric, and never traverses the internet. Here yu create a service gateway and then use it in yur backup rute table s that Exadata backup can travel t Object Strage ver the Oracle Clud Infrastructure netwrk fabric. 1. In the Cnsle, click the name f the VCN that yu created. 2. Create a service gateway, fllwing the steps in Task 1: Create the service gateway. Fr this example, enter the fllwing values in the Create Service Gateway dialg bx: Fr Name, enter DemSG. 7 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Fr Services, select OCI LHR Object Strage. Step 4: Create Rute Tables Yur clud netwrk uses virtual rute tables t send traffic ut f the VCN (fr example, t the internet r t yur n-premises netwrk). These virtual rute tables have rules that lk and act like traditinal netwrk rute rules that yu might already be familiar with. Each rule specifies a destinatin CIDR blck and the target (the next hp) fr any traffic that matches that CIDR. Fr Exadata, yu create tw rute tables, fr client traffic and backup traffic. 1. In the Cnsle, click the name f the VCN that yu created. 2. Create a rute table fr the client traffic, fllwing the steps in T create a rute table. Fr the client rute table, enter the fllwing values in the Create Rute Table dialg bx: Fr Name, enter Client_RT. In the Rute Rules sectin: Target Type: Internet Gateway Destinatin CIDR Blck: 0.0.0.0/0 Cmpartment Name: The cmpartment where the internet gateway is lcated. Target Internet Gateway: The internet gateway that yu created in Step 2 (in this example, ExaIG). 8 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
3. Create a rute table fr the backup traffic, fllwing the steps in T create a rute table. Fr the backup rute table, enter the fllwing values in the Create Rute Table dialg bx: Fr Name, enter Backup_RT. In the Rute Rules sectin: Target Type: Service Gateway Destinatin Service: OCI LHR Object Strage Cmpartment Name: The cmpartment where the service gateway is lcated. Target Service Gateway: The service gateway that yu created in Step 3 (in this example, DemSG). 9 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Step 5: Create Security Lists A security list prvides a virtual firewall fr an instance, with ingress and egress rules that specify the types f traffic allwed in and ut. Each security list is enfrced at the instance level. Hwever, yu cnfigure yur security lists at the subnet level, which means that all instances in a given subnet are subject t the same set f rules. Each subnet can have a maximum f five security lists attached t it. After a subnet is created, security lists can t be added r deleted. Hwever, yu can always add mre ingress and egress rules t a security list. Exadata n Oracle Clud Infrastructure requires tw separate VCN subnets: a client subnet fr user data and a backup subnet fr backup traffic (instructins fr creating these subnets are in Step 7). In this step, yu create the fllwing nine security lists t be used with the subnets. Althugh yu dn t need all nine security lists right away, we recmmend attaching the maximum number f allwed security lists t a subnet because lists can t be added t a subnet afterwards. NdeTraffic: Fr cmmunicatin between Exadata ndes, and TCP and ICMP traffic acrss the client and backup subnets. This security list is shared with bth the client and backup subnet. 10 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
SSH_Traffic: Fr SSH traffic. SQLNet: Fr SQL Net traffic. Client1: Fr client traffic. Client2: Fr client traffic. DB_Backup1: Backup traffic t Object Strage. DB_Backup2: Backup traffic t Object Strage. Flex1: Flex security list fr future use. Flex2: Flex security list fr future use. Nte: We d nt recmmend using the default security list that is created when yu create the VCN. If yu add rules t the default security list t pen SQLNet traffic, these rules will be applied t every subnet t which the default security list is attached. Create nine empty security lists, using the preceding names fr the lists. In a later sectin, yu will add the ingress and egress rules t the security lists. 1. In the Cnsle, click the name f the VCN that yu created. 2. Create nine security lists, fllwing the steps in T create a new security list. Fr this example, enter the fllwing values in the Create Security List dialg bx: Enter a name fr the security list. See the preceding list fr the names t use. Delete the default entries fr the ingress and egress rules. The fllwing figure shws an example f the values t enter fr the NdeTraffic security list. 11 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Step 6: Create DHCP Optins Yur VCN uses DHCP ptins t autmatically prvide cnfiguratin infrmatin t the instances when they bt up. Each VCN cmes with a default set f DHCP ptins with initial values that yu can change. In this step, yu create a separate DHCP ptin fr Exadata. 1. In the Cnsle, click the name f the VCN that yu created. 2. Create a new set f DHCP ptins, fllwing the steps in T create a new set f DHCP ptins. Fr this example, enter the fllwing values in the Create DHCP Optins dialg bx: Fr Name, enter ExaDHCP. Fr DNS Type, select Internet and VCN Reslver. Yu can leave the Search Dmain bx blank r prvide a value (fr example, raclevcn.cm). 12 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Step 7: Create Subnets A subnet is a subdivisin f a VCN. Each subnet in a VCN exists in a single availability dmain and cnsists f a cntiguus range f IP addresses that d nt verlap with ther subnets in the clud netwrk. Fr mre infrmatin abut VCN and subnets, see Wrking with VCNs and Subnets. Fllw these steps t create the client and backup subnet. 1. In the Cnsle, click the name f the VCN that yu created. 2. In the Resurces sectin, click Subnets. 3. Click Create Subnet. 4. In the Create Subnet dialg bx, enter the fllwing values t create the client subnet: Enter a name fr the subnet (in this example, Client_Subnet_AD1). Chse the availability dmain where yu plan t launch the Exadata DB system. Enter the CIDR blck fr the subnet (in this example, 10.0.3.0/24). Chse the rute table that yu created fr the client traffic (in this example, Client_RT). 13 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Fr Subnet Access, select Public Subnet. Nte: Fr a prductin envirnment, yu wuld select Private Subnet. Ensure that the DNS Reslutin check bx is selected. Leave the default value fr DNS Label. Fr DHCP Optins, select the DHCP ptins that yu created in Step 6 (fr example, ExaDHCP). Select the fllwing five security lists: NdeTraffic Client1 Client2 SQLNet Flex1 14 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
5. Click Create. 6. Repeat steps 3 5 t create the backup subnet, entering the fllwing values in the Create Subnet dialg bx: Enter a name fr the subnet (in this example, Backup_Subnet_AD1). Chse the availability dmain where yu plan t launch the Exadata DB system. Enter the CIDR Blck fr the subnet (in this example, 10.0.4.0/24). Chse the rute table that yu created fr the backup traffic (in this example, Backup_RT). Fr Subnet Access, select Public Subnet. Nte: Fr a prductin envirnment, yu wuld select Private Subnet. Ensure that the DNS Reslutin check bx is selected. Leave the default value fr DNS Label. Fr DHCP Optins, select the DHCP ptins that yu created in Step 6 (fr example, ExaDHCP). 15 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Select the fllwing five security lists: NdeTraffic DB_Backup1 DB_Backup2 SSH_Traffic Flex2 16 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Step 8: Add Rules t Security Lists Nw that yu have the IP CIDR fr bth the client and backup subnets, update yur security lists and add apprpriate ingress and egress rules t allw traffic. 1. In the Cnsle, click the name f the VCN that yu created. 2. In the Resurces sectin, click Security Lists. 3. Click the NdeTraffic security list. 4. Click Edit All Rules. 5. Add the fllwing ingress rules t allw TCP and ICMP traffic t flw between bth the subnets: CIDR 10.0.3.0/24 TCP ALL ALL CIDR 10.0.3.0/24 ICMP ALL ALL CIDR 10.0.4.0/24 TCP ALL ALL CIDR 10.0.4.0/24 ICMP ALL ALL 17 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
6. Add the fllwing egress rules: CIDR 10.0.3.0/24 TCP ALL ALL CIDR 10.0.3.0/24 ICMP ALL ALL CIDR 10.0.4.0/24 TCP ALL ALL CIDR 10.0.4.0/24 ICMP ALL ALL 18 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
7. Click Save Security List Rules. 8. Click the SSH_Traffic security list. 9. Click Edit All Rules. 10. Add the fllwing ingress rule values: CIDR 0.0.0.0/0 TCP 22 22 11. Click Save Security List Rules. 19 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
12. Click the SQLNet security list. 13. Click Edit All Rules. 14. Add the fllwing ingress rule values: CIDR 0.0.0.0/0 TCP 22 22 15. Click Save Security List Rules. Nte: Add ingress and egress security rules as allwed by yur cmpany s security plicies. These examples use 0.0.0.0/0 fr dem purpses nly. Step 9: Launch an Exadata DB System Nw that yu have created all the netwrking cmpnents that are required t launch an Exadata DB system, launch the system. 1. In the Cnsle, pen the navigatin menu. Under Database, click Bare Metal, VM, and Exadata. 2. Chse yur cmpartment. 3. Click Launch DB System. 4. In the Launch DB System dialg bx, enter the fllwing values. Fr mre infrmatin abut the fields in this dialg bx, see T launch an Exadata DB system. Enter a display name fr the Exadata DB system (fr example, DemExaCS). 20 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Chse the availability dmain where the Exadata DB system will reside. Fr Shape Type, select Bare Metal Machine. Select the shape (fr example, Exadata.Quarter1.84). Enter a cluster name (fr example, ExaCluster). Enter a CPU cre cunt (fr example, 22). Select a license type. Select t uplad r paste SSH keys (public keys). Select a data strage percentage (fr example, 80%). Fr Virtual Clud Netwrk, select the VCN that yu created (fr example, ExaVCN). Fr Client Subnet, select the client subnet that yu created (fr example, Client_Subnet_AD1). Fr Backup Subnet, select the backup subnet that yu created (fr example, Backup_Subnet_AD1). Enter a hstname prefix (fr example, exande). 21 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Enter a database name (fr example, exadb). Select a database versin (fr example, 18.0.0.0). If yu selected Oracle Database versin 12 r later, enter a PDB name (fr example, pdb1). Enter and then cnfirm a database admin passwrd. Select a database wrklad (OLTP r DSS). 22 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
5. Click Launch DB System. 23 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Step 10: Access the Exadata DB System frm the Cnsle Yu can access the Exadata DB system frm the Oracle Clud Infrastructure Cnsle and btain the IP addresses f ndes and ther infrmatin. Yu can create mre databases, and stp and rebt ndes. Fr detailed infrmatin, see the Managing Exadata DB Systems. 1. In the Cnsle, pen the navigatin menu. Under Database, click Bare Metal, VM, and Exadata. 2. Chse yur cmpartment. The Exadata DB systems in the cmpartment are listed. 3. Click the name f the system t see mre details. 24 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Step 11: Cnnect t the Exadata DB System Yu can cnnect t the cmpute ndes in an Exadata DB system by using a Secure Shell (SSH) cnnectin. Yu need the full path t the file that cntains the private key assciated with the public key that was used when the system was launched. Yu can cnnect t Exadata ndes by using the public r private IP address f the DB system. Use the private IP address t cnnect t the DB system frm yur n-premises VPN, r frm within the VCN. Use the DB System's public IP address t cnnect t the system frm utside the clud (with n VPN). Yu can find the IP addresses in the Oracle Clud Infrastructure Cnsle n the Database page. T access a cmpute nde, use the fllwing SSH cmmand: $ ssh -i <private_key> pc@<db_system_ip_address> <private key> is the full path and name f the file that cntains the private key assciated with the Exadata DB System that yu want t access. Fllwing is an example: ssh -i ~/.ssh/id_rsa pc@132.145.57.188 Fr mre infrmatin, see Cnnecting t an Exadata DB System. 25 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Summary The Exadata Database Machine is a high-perfrmance engineered slutin designed t prvide users with ptimized functinality pertaining t enterprise-class databases and their assciated wrklads. By fllwing these steps and making sme simple chices, yu can prvisin Exadata n Oracle Clud Infrastructure. Yu can use familiar tls such as RMAN and the database cmmand-line interface t manage databases in the clud the same as in yur wn data center. 26 DEPLOYING AN EXADATA DB SYSTEM ON ORACLE CLOUD INFRASTRUCTURE
Oracle Crpratin, Wrld Headquarters Wrldwide Inquiries 500 Oracle Parkway Phne: +1.650.506.7000 Redwd Shres, CA 94065, USA Fax: +1.650.506.7200 CONNECT WITH US blgs.racle.cm/racle facebk.cm/racle twitter.cm/racle racle.cm Cpyright 2018, Oracle and/r its affiliates. All rights reserved. This dcument is prvided fr infrmatin purpses nly, and the cntents heref are subject t change withut ntice. This dcument is nt warranted t be errr-free, nr subject t any ther warranties r cnditins, whether expressed rally r implied in law, including implied warranties and cnditins f merchantability r fitness fr a particular purpse. We specifically disclaim any liability with respect t this dcument, and n cntractual bligatins are frmed either directly r indirectly by this dcument. This dcument may nt be reprduced r transmitted in any frm r by any means, electrnic r mechanical, fr any purpse, withut ur prir written permissin. Oracle and Java are registered trademarks f Oracle and/r its affiliates. Other names may be trademarks f their respective wners. Intel and Intel Xen are trademarks r registered trademarks f Intel Crpratin. All SPARC trademarks are used under license and are trademarks r registered trademarks f SPARC Internatinal, Inc. AMD, Optern, the AMD lg, and the AMD Optern lg are trademarks r registered trademarks f Advanced Micr Devices. UNIX is a registered trademark f The Open Grup. 0818 Deplying an Exadata DB System n Oracle Clud Infrastructure August 2018 Authr: Nishant Gupta