Post on 14-Apr-2017
1
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Oracle Maximum Availability Architecture HA and Data Protection On-Premises and in the Cloud
Patrik Plachý Senior Consultant Oracle CEE Technology Sales Consulting
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Safe Harbor Statement
The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.
3
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Oracle MAA - Overview
Oracle MAA Reference Architectures
Hybrid Cloud
1
2
3
4
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Oracle Maximum Availability Architecture (MAA)
• Service-level oriented
• Prevent business outages
• Protect Oracle data
5
High Availability and Data Protection
Production Copy
Database Replication
Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 6 6 Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |
Oracle MAA – Customer Proven
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 7
Oracle MAA and the Cloud
Common Platform – On Premises, Cloud, and Hybrid Cloud
On Premises On Cloud
Oracle Database
Designed to Address the Complete Range of Business Requirements
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Oracle MAA - Overview
Oracle MAA Reference Architectures
Hybrid Cloud
1
2
3
8
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Reference Architectures – Level Set
• Developed and validated by Oracle
• Capabilities carry forward as you progress from one architecture to the next
• Achieving stated service levels requires:
– Utilization of prescribed HA capabilities
– Utilization of prescribed configuration and operational best practices
– Due diligence during pre-production testing
9
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Align Oracle Capabilities with Customer Service Level Requirements
Prod/Departmental
Business Critical
Dev, Test, Prod
Mission Critical
Automated restart, restore from backup
Bronze +
Active / Active database clustering
10
Oracle MAA Reference Architectures
Silver +
Physical replication, zero data loss, fast failover
Gold +
Advanced capabilities that make outages transparent to users
GOLD
BRONZE SILVER
PLATINUM
http://www.oracle.com/technetwork/database/availability/maa-reference-architectures-2244929.pdf
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Bronze Reference Architecture
Oracle Database Cloud Service*
On-Premises Product/Option
Enterprise Oracle Database Backup Cloud
Oracle Database Enterprise Edition
Enterprise Manager Express
Summary • Single instance database with auto-restart
• Restore from backup to resume service following unrecoverable outages
Requirements • All that is required for Bronze is a separate location to store backup data. This
may be as simple as a network file share, a tape library, or an offsite backup.
• Local and remote backup copies are recommended for fastest recovery and
protection against site failures
Bro
nze
Primary Data Center Failover Data Center
single
instance
database
*minimum required
database
files
local
backup
replicated
backup
11
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 12
Bronze Capabilities Matrix
Event Downtime Data Loss Potential
Disk failure Zero Zero
Machine and recoverable database instance failures Minutes Zero
Data corruption and unrecoverable database outages Hours Since last backup
Site outages Hours to days Since last backup
Database reorg, file move, eligible one-off patches Zero Zero
Hardware and software maintenance and patching Minutes Zero
Database upgrades (patch-sets and full releases) Minutes to hour Zero
Application upgrades (modify database objects) Hours Zero
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Active database instance used for HA
• Active-Active cluster provides best HA for machine and database instance outages and hardware/software maintenance and patching
Replicated copy of database used for HA
• Best HA and protection against data corruptions, database and availability domain outages, and database upgrades
Silver Reference Architecture – Choice of Patterns
Primary Data Center Failover Data Center Failover Data Center
Availability
Domain Availability
Domain
Primary Data Center
13
Oracle RAC Data Guard
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Silver: Active-Active Cluster
Oracle Database Cloud Service*
On-Premises Product/Option
EE Extreme Performance or Exadata Service Oracle Database Backup Cloud
Oracle Database EE
Oracle RAC
Enterprise Manager
Lifecycle Mgmt Pack
Cloud Mgmt Pack
Diagnostics Pack
Tuning Pack
Silver
Summary:
Oracle RAC
Bronze +
• Active-active RAC cluster - HA for machine or database instance outages
• Auto service failover to second machine, zero downtime required for restart
• Zero downtime rolling maintenance across database instances
• All database instances open read-write to scale workload
• RAC One-Node is an option for active-passive HA if scalability is not required
Requirements • This tier adds to infrastructure requirements to support Oracle RAC: inter-node
communication, shared storage and multi-node compute
Silv
er
Clu
ste
r
*minimum required
Primary Data Center Failover Data Center
multi
instance
database
database
files
local
backup
replicated
backup
14
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Silver: Replication
Silver
Summary:
Data Guard
Bronze +
• Database replication (Data Guard) synchronizes a local HA copy in a separate
availability domain for maximum fault isolation: Independent data validation,
corruption protection, separate power, cooling, network, server, and storage.
• Automatic database failover and automatic application failover to the HA copy
• Zero data loss using synchronous replication
Requirements • This alternative adds a duplicated and separate environment to support the
synchronized copy used for HA.
• Additional configuration required for automatic database failover
Silv
er
Re
plic
atio
n
*minimum required
Primary Data Center Failover Data Center
local
backup
replicated
backup
Availability Domain Availability Domain
15
Oracle Database Cloud Service*
On-Premises Product/Option
Enterprise Oracle Database Backup Cloud
Oracle Database Enterprise Edition
Enterprise Manager Express
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 16
Silver Capabilities Matrix
Event Downtime Cluster Replication
Data Loss Potential Cluster Replication
Disk failure Zero Zero Zero Zero
Machine and recoverable database instance failures Zero to seconds Seconds Zero Zero
Data corruption, unrecoverable database outages, availability domain outages (power, network, etc)
Hours Seconds Since last backup
Zero
Site outages Hours
to days Hours
to days Since last backup
Since last backup
Database reorg, file move, eligible one-off patches Zero Zero Zero Zero
Hardware and software maintenance and patching Zero Seconds Zero Zero
Database upgrades (patch-sets and full releases) Minutes to hour Seconds Zero Zero
Application upgrades (modify database objects) Hours Hours Zero Zero
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Gold Reference Architecture
Oracle Database Cloud Service*
On-Premises Product/Option
EE Extreme Performance or Exadata Service Oracle Database Backup Cloud
Oracle Database EE
Oracle RAC
Active Data Guard
Enterprise Manager
Lifecycle Mgmt Pack
Cloud Mgmt Pack
Diagnostics Pack
Tuning Pack
Gold
Summary
Silver +
• Remote database replication using Active Data Guard eliminates S.P.O.F. for
HA from data corruptions, cluster and site outages
• Fast database failover (manual or automatic) - no downtime required for restart
• Low-downtime database rolling upgrades
• Read-only workloads are offloaded to the remote copy – all systems active
Requirements • The remote copy is completely isolated from outages impacting the primary
system: independent Oracle data validation, separate power, cooling, network,
server, storage, building, geography, etc. Remote system may have less
capacity during normal runtime and scale up to multi-instance after failover.
Gold
*minimum required
Primary Data Center Failover Data Center
multi
instance
database
database
files local
backup
local
backup
17
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 18
Gold Capabilities Matrix
Event Downtime Data Loss Potential
Disk failure Zero Zero
Machine and recoverable database instance failures Zero to seconds Zero
Data corruption and unrecoverable database outages Seconds to minutes Zero to seconds*
Site outages Seconds to minutes Zero to seconds*
Database reorg, file move, eligible one-off patches Zero Zero
Hardware and software maintenance and patching Zero Zero
Database upgrades (patch-sets and full releases) Seconds to minutes Zero
Application upgrades (modify database objects) Hours Zero
*Data Guard synchronous (zero) or asynchronous (seconds)
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Platinum Reference Architecture
Oracle Database Cloud Service*
On-Premises Product/Option
EE Extreme Performance or Exadata Service GoldenGate Cloud Service Oracle Database Backup Cloud
Oracle Database EE
Oracle RAC
Active Data Guard
Oracle GoldenGate
Enterprise Manager
Lifecycle Mgmt Pack
Cloud Mgmt Pack
Diagnostics Pack
Tuning Pack
Platinum
Summary
Gold +
• Data Guard replication synchronizes local (HA) and remote (DR) copies
• HA copy is deployed in a separate availability domain for maximum isolation
• Application tier in primary datacenter automatically fails over to the local HA
copy of the production database following unplanned cluster outage or
database rolling maintenance.
• Oracle GoldenGate and Edition-Based Redefinition for zero downtime upgrades
Requirements • Three complete, duplicated, separate infrastructures are required. Local HA
copy is all but geographically isolated from primary. DR copy is geographically
isolated. Advanced capabilities make local outages and all maintenance
transparent to applications. Only site outages require failover to remote copy.
Pla
tinu
m
*minimum required
Failover Data Center
local
backup
local
backup
Availability Domain Availability Domain
19
Primary Data Center
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 20
Platinum Capabilities Matrix
Event Downtime Data Loss Potential
Disk failure Zero Zero
Machine and recoverable database instance failures Zero to seconds Zero
Data corruption and unrecoverable database outages, availability domain outages (power, network, etc)
Seconds Zero
Site outages Seconds Zero
Database reorg, file move, eligible one-off patches Zero Zero
Hardware and software maintenance and patching Zero Zero
Database upgrades (patch-sets and full releases) Zero to seconds Zero
Application upgrades (modify database objects) Zero to seconds Zero
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Oracle MAA Bill of Materials
Product/Features Bronze Silver
Cluster Silver
Replication Gold Platinum
Virtual machine auto-restart, disk mirroring, remote replication of backups x x x x x
Oracle EE, data encryption, physical and logical data validation, RMAN, Oracle Restart, online redef/reorg, online patching, single tenant CDB, Enterprise Manager
x x x x x
Oracle RAC, session pool draining for planned maintenance, RAC rolling patching. UCP and FAN to automate failover of app tier connections after instance failover. RAC One Node if service level requirements are satisfied by active-passive warm failover cluster.
x x x
Data Guard synchronous replication and Fast-Start Failover to local HA copy. UCP and FAN to automate failover of app tier connections after DB failover. Lost-write validation. Network encryption. Database rolling upgrade. Backups offloaded to standby.
x x
Active Data Guard asynchronous replication to remote copy (or Far Sync if zero data loss DR is required), database rolling upgrade, lost-write detection and auto block repair on both primary and standbys, fast backups (block-change tracking file) offloaded to standbys. Network encryption.
x x
Application Continuity used with RAC instance failover and with Data Guard Fast-Start Failover to local HA copy. Real-time Cascade. GoldenGate bi-directional replication for zero downtime maintenance, Edition-Based Redefinition for application upgrades
x
21
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Program Agenda
Oracle MAA - Overview
Oracle MAA Reference Architectures
Hybrid Cloud
1
2
3
22
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
Offsite Cloud Storage for Oracle Database Backups
Backup to the Cloud Instant offsite storage
Cost effective
On-demand scalability
End-to-end security
Encryption
Compression
3-Way protection
24x7 data availability
Oracle Database Backup Service
On-Premises Databases Oracle 10.2 and above
23
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |
For Oracle Database using Data Guard and Active Data Guard
Disaster Recovery to the Cloud
Elastic - Instant DR
Fast failover to running copy
Use DR copy for reporting
Clone test/dev databases
Offload cloud backups
Simple physical replication
Zero data loss using Far Sync On-Premises Databases Oracle 11.2 and above
24
Data Guard/Active Data Guard Standby Database
Test/Dev
Reporting
www.oracle.com/technetwork/database/availability/dr-to-oracle-cloud-2615770.pdf
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 26
Addressing Enterprise Database Requirements
Common Platform – On Premises, Cloud, and Hybrid Cloud
On Premises On Cloud
Oracle Database
Oracle Maximum Availability Architecture and Oracle Cloud
Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 27
28