Percona Live - Dublin 03 ee + cloud

Copyright©2016,Oracleand/oritsaffiliates.Allrightsreserved.|

MySQLEnterprise+MySQLCloudServiceMarkSwarbrick

Copyright©2016,Oracleand/oritsaffiliates.Allrightsreserved.


SafeHarborStatementThefollowingisintendedtooutlineourgeneralproductdirecMon.ItisintendedforinformaMonpurposesonly,andmaynotbeincorporatedintoanycontract.Itisnotacommitmenttodeliveranymaterial,code,orfuncMonality,andshouldnotberelieduponinmakingpurchasingdecisions.Thedevelopment,release,andMmingofanyfeaturesorfuncMonalitydescribedforOracle’sproductsremainsatthesolediscreMonofOracle.

3

Copyright©2016,Oracleand/oritsaffiliates.Allrightsreserved.| ConfidenMal–OracleInternal/Restricted/HighlyRestricted 4

Topics PaaS

• MySQLEnterpriseEdi2onOverview•  TechnicalOverviewofMySQLCloudService•  Summary


ManagementToolsAdvancedFeatures Support

• Scalability• HighAvailability• AuthenMcaMon• Audit• EncrypMon+TDE• Firewall

• Monitoring• Backup• Development• AdministraMon• MigraMon

• TechnicalSupport• ConsultaMveSupport• OracleCerMficaMons

MySQLEnterpriseEdiMonTheHighestLevelsofMySQLPerformance,Security&Up2me

5


MySQLEnterpriseEdiMon•  MySQLEnterpriseFirewall

–  BlockSQLInjecMonAZacks–  IntrusionDetecMon

•  MySQLEnterpriseEncrypMon–  Public/PrivateKeyCryptography–  AsymmetricEncrypMon–  DigitalSignatures,DataValidaMon

•  MySQLEnterpriseAuthenMcaMon–  ExternalAuthenMcaMonModules

•  Microso_AD,LinuxPAMs

•  MySQLEnterpriseAudit–  UserAcMvityAudiMng,RegulatoryCompliance

6

•  MySQLEnterpriseMonitor–  ChangesinDatabaseConfiguraMons,UsersPermissions,DatabaseSchema,Passwords

•  MySQLEnterpriseBackup–  Physicalbackupidealforlargerdatabases–  Verifiesdataasitcopies

•  MySQLThreadPool–  Improvesperformanceonhighconcurrencyworkloads

MoreinformaMonavailableat:hZp://www.mysql.com/products/enterprise/


• Provides20xbeZerscalability

•  PluginimprovessustainedperformanceasuserconnecMonsgrow

MySQLEnterpriseScalability:ThreadPool


MySQLEnterpriseScalability:ThreadPool

PerformanceSecurity

Availability

InternalClients

Connec2onExecu2onThreads

ExternalClients

ThreadPoolThreadGroup1Threads1-4096

ThreadGroup2Threads4097-8193

ThreadGroupNThreads8194-N

ThreadGroup1

ThreadGroup2

ThreadGroupN

• Containsconfigurablenumberofthreadgroups(default=16)– Eachgroupmanagesupto4096re-usablethreads

•  EachconnecMonassignedtothreadgroupviaroundrobin•  ThreadsareprioriMzedandstatementsqueued

– ImprovesscalabilityasconcurrentconnecMonsgrow,protecMonfromDOSaZacks


Security:AMajorConcern

Over430Mnewuniquepiecesofmalwarein2015,up36%frompreviousyear.

OverHalfaBillionPersonalRecordsWereStolenorLostin2015.

ANewZero-DayVulnerabilityWasDiscoveredonAverageEachWeekin2015,a125%increasefrom2014.

Spear-PhishingCampaignsTargeMngEmployeesIncreased55Percentin2015.

Source:InternetSecurityThreatReport2016,Symantec


RegulatoryCompliance:TopTrendsWorldwidein2016

Source:hZps://risk.thomsonreuters.com/content/dam/openweb/documents/pdf/risk/infographic/top-5-compliance-trends-around-globe-2016-infographic.pdf


MySQLEnterpriseEncrypMon• MySQLencrypMonlibraries

– SymmetricencrypMonAES256– Public-key/asymmetriccryptography

• Keymanagement– Generatepublicandprivatekeys– Keyexchangemethods:RSA,DSA,DH

•  Signandverifydata– Cryptographichashingfordigitalsigning,verificaMon,&validaMon


MySQLEnterpriseTransparentDataEncrypMon

EncryptedTablespaceFiles

TablespaceKey

MaliciousOSUser/Hacker

AccessesFilesDirectly

InformaMonAccessBlockedByEncrypMon

MasterKey


MySQLEnterpriseAudit• Out-of-the-boxloggingofconnecMons,logins,andquery•  Simpletofinegrainedpoliciesforfiltering,andlogrotaMon• Dynamicallyenabled,disabled:noserverrestart• XML-basedauditstream

– Senddatatoaremoteserver/auditdatavault•  OracleAuditVault•  Splunk,etc.

Addsregulatorycomplianceto

MySQLapplicaMons(HIPAA,Sarbanes-Oxley,PCI,etc.)


MySQLEnterpriseAuthenMcaMon• PAM(PluggableAuthenMcaMonModules)

– AccessexternalauthenMcaMonmethods– Standardinterface(Unix,LDAP,Kerberos,others)– Proxiedandnon-proxiedusers

•  Windows– AccessnaMveWindowsservices– AuthenMcateusersalreadyloggedintoWindows(WindowsAcMveDirectory)

• PluggableAuthenMcaMonAPI IntegratesMySQLwithexisMngsecurityinfrastructuresandSOPs


MySQLEnterpriseFirewall• RealTimeProtecMon

– QueriesanalyzedandmatchedagainstWhiteList

• BlocksSQLInjecMonAZacks– PosiMveSecurityModel

• BlockSuspiciousTraffic– OutofPolicyTransacMonsdetected&blocked

•  LearnsWhiteList– AutomatedcreaMonofapprovedlistofSQLcommandpaZernsonaperuserbasis

•  Transparent– NochangestoapplicaMonrequired

MySQLEnterpriseFirewallmonitoring


MySQLRouter

•  TransparentclientconnecMonrouMng– Loadbalancing– ApplicaMonconnecMonfailover

•  StatelessdesignofferseasyHAclientrouMng– AlocalRouterbecomespartoftheapplicaMnstack

”MySQLRouterallowsyoutoeasilymigrateyourstandaloneMySQLinstancestona;velydistributedandhighlyavailableInnoDBclusterswithoutaffec;ngexis;ngapplica;ons!”

TransparentaccesstoHAdatabasesforMySQLApplica2ons

AppServerswithMySQLRouter

MySQLInnoDBcluster


•  AcMve/AcMveUpdateAnywhere–  AutomaMcconflictdetecMonandresoluMon–  AutomaMcdistributedrecovery

•  AutomaMcgroupmembershipmanagementandfailuredetecMon–  Noneedforserverfail-over–  ElasMcscaleout/in–  Nosinglepointoffailure–  AutomaMcreconfiguraMon

•  Wellintegrated–  InnoDB–  GTID-basedreplicaMon–  PERFORMANCE_SCHEMA

ApplicaMon

MySQLNodes ReplicaMonPlugin

API

MySQLServer

GroupComms

ReleaseCandidate

MySQLGroupReplicaMonTheBuildingBlockforInnoDBClusters


MySQLEnterpriseBackup•  Online,non-lockingbackupandrecovery

–  CompleteMySQLinstancebackup(dataandconfig)–  ParMalbackupandrestore

•  DirectCloudstoragebackups–  OracleStorageCloud,S3,etc.

•  Incrementalbackups•  Point-in-Mmerecovery•  AdvancedcompressedandencrypMon•  Backuptotape(SBT)•  OpMmisMcbackups•  Cross-Plasorm(Windows,Linux,Unix)


MySQLDBAChecklist1.EnsureyourproducMondatabasesareavailable ✔2.MonitorMySQLperformancethroughouttheday ✔3.VerifythatMySQLreplicaMonisworkingproperly ✔4.Confirmthatbackupshavecompletedsuccessfully ✔5.MonitordiskspacetoensureMySQLwon’trunoutofspace ✔6.RegularlymonitorandidenMfyblockingissues ✔7.Verifytherehavebeennochangestodatabaseschema ✔8.CheckOSmetricsforunusualevents ✔9.CheckforsecurityvulnerabiliMes ✔10.Monitorandanalyzememoryusage ✔

19


MySQLDBAChallenges•  “Thedatabaseisslow.Whatneedstuning?”•  “Whataremymostexpensivequeries?”•  “AreindexesopMmized?”•  “IsreplicaMonlagaproblem?”•  “Didmylastbackupsucceed?”•  “Whenwillmydiskfillup?”•  “WhenwillIneedmorehardwaretoscale-out?”•  “Hasmydatabaseschemachanged?”•  “AretheresecurityvulnerabiliMesthatIneedtobeconcernedabout?”

20


MySQLEnterpriseMonitor

21

•  StartmonitoringMySQLin10minutes• Real-MmeMySQLperformanceandavailabilitymonitoring

• Visuallyfind&fixproblemqueries• Diskmonitoringforcapacityplanning• Cloudfriendlyarchitecture

– Noagentsrequired– PolicydrivenconfiguraMon– EasyintegraMonwithDevOpstools


CloudFriendlyArchitecture• MySQL

– PerformanceSchemaprovidesQueryAnalyzerdata– ProvidesallMySQLrelatedmetrics

•  ServiceManager– CollectsallMySQLrelatedmetrics– CollectsallOS/Hostrelatedmetrics

• Repository– Storesallhistoricaldata

• Agent(opMonal)– OnlyrequiredforOS/Hostmetrics

22

MySQLEnterpriseDashboard

ServiceManager

Repository

HTTPS

DataCen

ter

PublicCloud

PrivateClou

d


InstallaMon&ConfiguraMon•  InstalltheServiceManager

– shell>./mysqlmonitor-3.X.X.XXXX-…-installer.bin

• UpandRunningin10minutes– Auto-discoveryofMySQLservers– Advisorsarepre-configured– Advisorsarepre-scheduled

• CustomizaMon– CentralizedconfiguraMondashboard– Advisors– Eventhandling

23


Hardware

Schema Changes Data Growth

Indexes

SQL

90%ofPerformanceProblems

SourceofDatabasePerformanceProblems

24


MySQLPerformanceSchema•  IdenMfyperformanceboZlenecks•  IdenMfyproblemaMcqueries• GetrealMmeinsightintolocks•  SeeexactlywhatishappeningwithinMySQL

• GetrealMmeinsightintoMySQLinternals

• GetrealMmeinsightintoqueryexecuMons

25

mysql>select*fromhost_summary_by_stages;+------+--------------------------------+-------+-----------+-----------+|host|event_name|total|wait_sum|wait_avg|+------+--------------------------------+-------+-----------+-----------+|hal|stage/sql/Openingtables|889|1.97ms|2.22us||hal|stage/sql/Creatingsortindex|4|1.79ms|446.30us||hal|stage/sql/init|10|312.27us|31.23us||hal|stage/sql/checkingpermissions|10|300.62us|30.06us||hal|stage/sql/freeingitems|5|85.89us|17.18us||hal|stage/sql/statistics|5|79.15us|15.83us||hal|stage/sql/preparing|5|69.12us|13.82us||hal|stage/sql/optimizing|5|53.11us|10.62us||hal|stage/sql/Sendingdata|5|44.66us|8.93us||hal|stage/sql/closingtables|5|37.54us|7.51us||hal|stage/sql/Systemlock|5|34.28us|6.86us||hal|stage/sql/queryend|5|24.37us|4.87us||hal|stage/sql/end|5|8.60us|1.72us||hal|stage/sql/Sortingresult|5|8.33us|1.67us||hal|stage/sql/executing|5|5.37us|1.07us||hal|stage/sql/cleaningup|5|4.60us|919.00ns|+------+--------------------------------+-------+-----------+-----------+


PerformanceMonitoring• MonitorMySQLperformance• MonitorOSperformance• Monitorqueryperformance• Adviceonindexusage• Alertsonperformanceproblems

26


EnterpriseQueryAnalyzer• Real-Mmequeryperformance• VisualcorrelaMongraphs•  Find&fixexpensivequeries• DetailedquerystaMsMcs• QueryResponseTimeindex(QRTi)

27

“WiththeMySQLQueryAnalyzer,wewereabletoiden;fyandanalyzeproblema;cSQLcode,andtripleourdatabaseperformance.Moreimportantly,wewereabletoaccomplishthisinthreedays,ratherthantakingweeks.”KeithSouhradaSo_wareDevelopmentEngineerBigFishGames


MySQLEnterpriseMonitor+Backup• Monitorbackupresults• Monitorbackupperformance•  Ensurebackupsareuptodate


MySQLWorkbenchEE• DatabasemigraMons

– FromMicroso_SQLServer,PostgreSQL,SybaseASE,SybaseSQLAnywhere,SQLite,Microso_Access,andmore

• ManagemigraMonprojects•  SourceandtargetselecMon• ObjectmigraMon• DatamigraMon• MySQLversionupgrades

DatabaseMigraMonWizardforSQLServer,Sybase,SQLite,SQLAnywhere&PostgreSQL


MySQLWorkbenchEE+Audit•  FastandeasyaccesstoAuditevents

•  Indexedsearches– Eventtype– Useraccount– Daterange– Textmatch


MySQLWorkbenchEE+Backup• Createandmanagebackupjobs

– Createnewbackupjobs– SchedulebackupjobstorunautomaMcally

– Viewcurrentbackupjobs– ViewrecentbackupacMvity

• Restorebackups– Full,parMal,incremental…


MySQLEnterpriseSupport•  Providedbytheexperts,straightfromthesource•  BackedbytheMySQLdevelopers•  World-classsupport,in29languages•  Hotfixes&maintenancereleases•  24x7x365•  Unlimitedincidents•  ConsultaMvesupport•  Globalscaleandreach GetimmediatehelpforanyMySQL

issue,plusexpertadvice


MySQLConsultaMveSupport MaketheMostofyourDeployments

• RemotetroubleshooMng• ReplicaMonreview• ParMMoningreview•  Schemareview• Queryreview• Performancetuning•  ...andmore


WorkDirectlywithMySQLEngineering• AdirectrelaMonshipwiththeMySQLteam•  TheabilitytoparMcipatein:

– Productroadmaps– Productbetas– Customeradvisoryboards

• WorkcloselywithSupportEngineers– Resolveissuesfaster– RequestbugandfeaturerequestescalaMons


MySQLEnterpriseOracleCerMficaMons• OracleEnterpriseManager• OracleLinux&OracleVM• OracleSolaris• OracleSolarisClustering• OracleClusterware• OracleOpenStack

• MyOracleSupport• OracleFusionMiddleware• OracleGoldenGate• OracleAuditVault• OracleDatabaseFirewall• OracleSecureBackup

MySQLintegratesintoyourOracleenvironment


MySQLEnterpriseEdiMonTakeAways

On-Premises:AchievethehighestlevelsofMySQLPerformance,security&upMme

InOracleCloud:AddiMonallyincreasebusinessagility,accelerateinnovaMon&reducecosts

Hybrid:Flexibilitytomoveworkloadsbetweenon-premises&thecloudandtoimplementhybridarchitectures


MySQLCloudService:ProductOverview

ConfidenMal–OracleInternal/Restricted/HighlyRestricted 37

PaaS

Compute

DatabaseAdministra2on

AutomatedProvisioning

PushBuZonPatching

1-ClickInstanceManagement

EnterpriseMonitoring

Backup&Recovery

AutomatedBackup

Point-in-MmeRecovery

On-demandSnapshot

Scalability

ElasMcCompute

ElasMcStorage

EnterpriseThreadPool

ElasMcReplicaMon*

HighAvailability

ReplicaMon

ReplicaMonMonitor

MulM-ADSupport*

Security

NetworkAccessControl

EnterpriseFirewall

EnterpriseAuthenMcaMon

EnterpriseEncrypMon&TDE*

EnterpriseAudit

ManagementAccess

DataAccess

CLI

RESTAPI

OracleCloudConsole

MySQLTools

On-premiseApplicaMons

OraclePremierSupport

OracleInfrastructureCloudServices

MySQLEnterpriseEdiMon


InShort

• OraclePublicCloud• DatabaseasaService(PaaS)• MySQLwiththeannoyingbitsmanagedforyou:

– Backups– Patches– Monitoring– etc.

PaaS


WhatversionofMySQLisit?

• PoweredbyMySQL5.7EnterpriseEdiMon•  Sameso_wareusedincloudasonpremise

– YouwillbeabletomigrateworkloadsinbothdirecMons

• OpMmizedconfiguraMon– Inmy.cnffile– Incomputeandstorage


UndertheHood

40


•  InnoDBIOConfiguraMonopMmized– NumberofIOthreads– O_DIRECT– Redologsizeandbuffer– Plusmore…

•  ThreadPoolEnabledByDefault

•  ScalableAutoIncrement• MemoryopMmizedtocomputeshape– BufferPool

• Plusmore…


OpMmizedConfiguraMonofMySQL


• OracleLinux6– UEK– MySQLtaskpriority– Memlock– ext4Filesytstem

•  StorageispoweredbyZFSAppliances

• OpMmizedforlatency:– BinaryLogs– RedoLogs

• OpMmizedforthroughput:– Datafiles


OpMmizedComputeandStorage


•  FullyManaged:– OnDemand– Scheduled– Incremental

• PoweredbyMySQLEnterpriseBackup

• Default– Weeklyfullbackup– Dailyincrementalbackup– 30dayretenMon(inCloudStorage)– 7dayretenMon(locally)

• AccesstoRawBackupFiles


Backup


UserIniMatedPatching

•  TimemaintenancetoopportuneMme• ClickofaBuZon• Delayupgradeifdesired

– Veryoccasionallypatchesneedtochangebehavior– Securitybeingexample

• AutomaMcbackupbeforepatching• RollbackopMonifrequired


MySQLEnterpriseEdiMon•  MySQLEnterpriseFirewall

–  BlockSQLInjecMonAZacks–  IntrusionDetecMon

•  MySQLEnterpriseEncrypMon–  Public/PrivateKeyCryptography–  AsymmetricEncrypMon–  DigitalSignatures,DataValidaMon

•  MySQLEnterpriseAuthenMcaMon–  ExternalAuthenMcaMonModules

•  Microso_AD,LinuxPAMs

•  MySQLEnterpriseAudit–  UserAcMvityAudiMng,RegulatoryCompliance

46

•  MySQLEnterpriseMonitor–  ChangesinDatabaseConfiguraMons,UsersPermissions,DatabaseSchema,Passwords

•  MySQLEnterpriseBackup–  Physicalbackupidealforlargerdatabases–  Verifiesdataasitcopies

•  MySQLThreadPool–  Improvesperformanceonhighconcurrencyworkloads

MoreinformaMonavailableat:hZp://www.mysql.com/products/enterprise/


MovingDataInandOut

47


OraclePublicCloudExclusiveFeatureSSHAccess

•  LogintoyourMySQLCloudServiceInstance• WorkswellwithMySQLWorkbench

– SSHTunneldirectfromWorkbenchtoCloudService– Port3306doesnotneedtobeexposed


MySQLRootAccess

• ConnectviaCommandLineorWorkbench• PerformAdministraMontasksasMySQLroot:

– Setofflinemode,readonly


ReplicaMon

• Binarylogalreadyenabled– Servicealreadyfullyconfiguredtobeamaster– Binarylogdefaultsto90dayretenMon

• Canreplicateto/fromonpremise– Restrictedonlybyfirewallrules

• CanreplicatetootherinstancesofMySQLCloudService


ScalingUp/Down

52

Open SecureChoice

Complete

Complete

•  Spanningalllayersofthecloud:IaaS,PaaS,SaaS

•  Everylayer…integrated• BasedonourfoundaMonalinfrastructureplasorms

• Reducescomplexity

•  Everycategoryandstakeholder• ConsumpMonmodelsforall

Open

•  Anopen,standards-basedplasorm

•  Supportsallworkloads,applicaMons,languages,opensource,OSplasorms,datatypes

•  Foreveryonetobuildon,customers&partners

•  IntegratedwithOracleappsandtheapplicaMonecosystem

Secure

•  OffersprotecMonforeverylayer•  Physicaldatacenteraccess•  EncrypMonofdataatrest,inmoMon

•  Appaccess;privilegeduserscontrols•  Masking,redacMngsensiMvedata

•  IdenMtymanagement

Choice

• DeploymentopportuniMes–privatecloud,publiccloud,publiccloudonpremises(OCM)&hybridcloud

•  SameenvironmentspreserveexisMngITinvestments,skills

•  MigraMonandadopMonpaths–infrastructure,workloads,apps,integraMons,extensions

•  Broadecosystemofpartners

OracleMySQLCloudServiceSimple,Automated,Integrated&Enterprise-Ready

•  The#1OpenSourceDatabaseinOracleCloud• OnlypubliccloudintegraMngMySQLEnterpriseEdiMon• Rapidly,securelyandcost-effecMvelydevelop&deploymodernMySQL-basedapplicaMons

HighestLevelsofSecurity Scalability&AvailabilityExpertMySQL

TechnicalSupport

Integra2onintoOracleCloudEnvironment

Hybriddeploymentsacrosscloud&on-premises LowerTCO

•  IncreaseBusinessAgility:FocusyourresourcesoninnovaMonandrapidlydelivernewmodernapplicaMons.

•  EnsureSecurity,Performance&Up2me:relyingonthemostcomprehensiveMySQLcloudplasorm–straightfromthesource.

•  ReduceTotalCostofOwnership:SavingoninfrastructureanddatabasemanagementoperaMonscostswhileimprovingupMme.

OracleMySQLCloudService:BusinessBenefits

Percona Live - Dublin 03 ee + cloud

Technology

Transcript of Percona Live - Dublin 03 ee + cloud