announcing oracle secure backup 10.3: fastest, most cost-effective oracle backup
DESCRIPTION
Announcing Oracle Secure Backup 10.3: Fastest, Most Cost-Effective Oracle Backup. Richard McClain Senior Oracle DBA CSX Technology. Donna Cooksey Principal Product Manager. Program Agenda. . Introducing Oracle Secure Backup Oracle Secure Backup Functionality - PowerPoint PPT PresentationTRANSCRIPT
1
Announcing Oracle Secure Backup 10.3: Fastest, Most Cost-Effective Oracle Backup
Donna CookseyPrincipal Product Manager
Richard McClainSenior Oracle DBACSX Technology
3
<Insert Picture Here>
Program Agenda
• Introducing Oracle Secure Backup• Oracle Secure Backup Functionality– Oracle Integrated Solution– Data Protection– Device Utilization– Advanced Media Management
• Summary• Success Story: CSX Technology• Q & A
4
Oracle Secure Backup (OSB) Enterprise Tape Backup Management
Oracle Enterprise Manager
Oracle DatabaseOracle Database
RMAN Integration
Oracle Secure Backup
Tape Library
Virtual Tape
Library (VTL)
Protects Entire IT Environment
•Oracle Database 11g Release 2 to Oracle9i
•25 – 40% faster tape backup
•Heterogeneous file systems (UNIX/ Linux / Windows) and NAS devices
•Built-in Oracle Integration
•Centralized management in distributed environments
•Over 75% less expensive than comparable products
File System DataFile System Data
5
Oracle Secure Backup Centralized Tape Backup Software
LANAdministrative
Server
Clients
Media Server(s)
Virtual Tape Library (VTL)Tape Library
NAS
UNIX / Linux / Windows
Storage
Client / Server Architecture• Data protection for heterogeneous, distributed
servers managed from a central console, Administrative Server
• Media servers may be direct-attached or SAN-attached to tape devices
• OSB communicates directly with the client host to backup mounted file systems and storage
• Oracle database(s) may be located on any client or media server within the backup domain
6
Oracle Secure Backup 10.3 Key New Features
• Advanced tape management– Server-less tape duplication for Virtual Tape Libraries (VTL)– Improved tape vaulting automation and management
• Expanded backup encryption options:– Support LTO-4 tape drive encryption– Seamless key management between host-based or LTO-4 encryption
• IPv6 support• Improved manageability:– Ability to enable / disable user-defined schedules– Device configuration accuracy checks– New monitoring integrations with Enterprise Manager Grid Control– Ability to extend expiration date of tapes– And much, much more…..
Advanced Functionality at NO Extra Cost!
7
IT Data Protection Requirements Oracle Secure Backup
Centralized backup management of heterogeneous, distributed environments with web interface (GUI) or unified command line
Integration with RMAN for Oracle database backup / restore
File system data protection of mixed-platforms and NAS devices
Sharing of tape devices in Storage Area Networks (SAN) among multiple servers
Backup encryption and key management
Automated management of tape duplication and rotation between multiple locations
Leverages advanced capabilities of physical and virtual tape devices for optimal hardware utilization
Ease of management allowing user fine-grained control over the backup domain
Reliable, scalable and affordable
Enterprise Backup RequirementsOracle Secure Backup Delivers…
8
IT Cost Savings… 75%+Migration to Oracle Secure Backup
Imagine how much annual maintenance you’ll save!!!
Oracle Secure Backup is licensed at $3500 per tape drive.
9
Oracle Integrated Solution
10
Oracle EM 10g Grid Control Release 5 OSB Domain Management
Grid Control
Manage OSB Environment utilizing EM:
• Define recurring schedules or perform immediate backup operations
• Restore to same or alternate location
• Media management from start to finish:
• Retention, rotation, duplication and reporting
• Browse host files to select all or some for file system backup
• Restore by backup or selected files within the backup
Oracle DatabaseOracle Database
RMAN Integration
Oracle Secure Backup
File System DataFile System Data
OSB Administrative Server
Monitored by EM with EM alerting and notifications
11
Complete Oracle Solution from Disk to TapeBackup and Recovery
File System DataFile System Data
UNIX Linux
Windows NAS
Oracle DatabasesOracle Databases
• Oracle backup and recovery for your entire IT environment• Multiple media options available to meet the most stringent SLAs– Local disk, remote Cloud storage, physical and virtual tape
Oracle Recovery Manager (RMAN) Fast Recovery Area
Tape Backup
Amazon S3Cloud Storage
Oracle Secure Backup (OSB)
Oracle Secure Backup (OSB) Cloud Module
12
Oracle Recovery Manager (RMAN)Oracle-integrated Backup & Recovery Engine
Oracle Enterprise Manager
RMAN
Database
Fast Recovery Area
Tape Drive
Oracle Secure Backup • Intrinsic knowledge of database file
formats and recovery procedures• Block validation• Online block-level recovery• Tablespace/data file recovery• Online, multi-streamed backup• Unused block compression• Native encryption• Data Recovery Advisor (11g)
• Oracle’s Integrated Backup & Recovery solution
• Integrated disk, tape & cloud backup leveraging the Fast Recovery Area and Oracle Secure BackupCloud
13
Amazon S3
Oracle Secure Backup Cloud ModuleOffsite Database Backups in the Cloud
• Oracle Secure Backup Cloud module: Backup databases to Amazon Cloud– Complements local disk and/or tape backup– Eliminates IT management overhead of a disaster recovery site– Backed by Amazon S3 uptime SLAs
• $3,500 per RMAN channel • More information: http://www.oracle.com/technology/tech/cloud
Oracle Secure Backup Cloud
Module
Database Files / Fast Recovery Area
RMAN RMAN
Compression / Encryption
14
Data Protection
15
File System Protection UNIX / Linux / Windows and NAS Devices
File System DataFile System Data
• File system backup / restore management
– EM 10g Grid Control Release 5, OSB web tool or unified command line
• Recurring backup schedule or “Backup Now”
– Full, incremental, and offsite backup levels
• Backup / restore of Network Attached Storage (NAS) devices using Network Data Management Protocol (NDMP)
• Standards-compliant tape format: extended TAR or NDMP dump
• Tree-style catalog browsing for restoration to original or alternate location• Automatic recall of tapes located offsite to perform the restore operation
• Refer to the certification matrix on metalink.oracle.com for list of supported platforms, operating systems and NAS devices
16
Oracle Database ProtectionRMAN and OSB Integration
• Oracle database backup / recovery management– Utilize RMAN or Oracle EM (DB Control or Grid Control) restoring to original or alternate location
• Oracle Secure Backup provides the media management layer for RMAN– Exclusive performance optimizations achieving 25 – 40% faster backup
• Unused block compression • Eliminate backup of committed undo
– Vaulting integrations identifying and recalling offsite tape for restore– Encrypted backups using either OSB encryption (host-based or LTO-4) or RMAN encryption capabilities
• Metadata regarding RMAN backup pieces is maintained within OSB catalog– Volumes may be queried for list of backup pieces contained by volume
• User-defined tape retention methodology for Oracle database backups – Leverage RMAN retention parameters (content-managed tapes)
• RMAN delete obsolete command updates OSB catalog– Expiration time associated with the tape and defined via OSB (time-managed tapes)
Oracle DatabaseOracle Database
RMAN Integration
OSB Differentiator
17
Backup Encryption and Key Management Host-based and Hardware Encryption Options
OSB Host-based Encryption:• Encryption performed on the
host• AES126, AES192 or AES256
algorithms
Seamless Encryption Key ManagementLTO-4 Tape Drive Encryption:
• Encryption performed by the LTO-4 tape drive
• AES256 algorithm• Backups from NAS hosts
may be encrypted
New In OSB 10.3
• Encryption policies defined at global or host level
• Encryption keys stored centrally on OSB Administrative Server
• Encrypted backup are automatically decrypted during restoration within the same backup domain
18
Backup Encryption To TapePolicy-Based Key Management
• OSB encrypted backups will utilize host encryption settings except:– “Transient” backup encryption
explicitly defined during “Backup Now” operation
• OSB backup encryption configured:– Scheduled or “Backup Now” file
system backup – RMAN backup using
OB_ENCRYPTION parameter• If RMAN encrypts the backup it will
not be re-encrypted using OSB encryption Encryption
Key Policies
Backup Encryption
Policies
19
Device Utilization
20
Broad Tape Device Support Physical and Virtual Devices
• Support for over 200 new and legacy devices• SCSI, Fibre, SAS and iSCSI connectivity
Partners:
ADIC Copan Systems Data Domain
Dell EMC FalconStor
HP IBM Overland Storage
Quantum Qualstar Sepaton
Sony Spectra Logic Sun / StorageTek
21
Automated Tape Duplication
Traditional Tape Duplication
Media Server
Administrative Server
VTL
Physical Tape Library
Duplicated backup data
Metadata, control messages
Server-less Tape Duplication
Media Server
VTL
Physical Tape Library
New In OSB 10.3
Server-less Tape Duplication
• Increased duplication performance• Eliminates data movement
through media server• OSB catalog updated with
metadata of duplicate tape• VTL must support NDMP
tape copy functionality
22
Device Configuration - AccuracyVerify Utility and Policy
• OSB vfylibs command verifies accuracy of configuration
• Device policy, checkserialnumbers, identifies drive changes alerting possible mis-configuration
____________________________________________________________________________________
____________________________________________________________________________________________________________
DTE1
DTE2
DTE3
Tape Library
Storage Elements
Media Server
New In OSB 10.3
Attach points
•Vfylibs utility should be run after any device updates
• Serial number checking policy proactively queries for device changes
“Houston, we have a problem”
23
Advanced Media Management
24
The Life of Backup TapesMedia Lifecycle Management – Typical Scenario
Typical Media Requirements
• Backup to same tape(s) for up to 1 week then close tape(s) so it can’t be further appended
• Once tapes are closed to further update; duplicate them for on and offsite storage requirements
• Retention for on and offsite set of tapes:– Onsite tapes retained for 2 months
• Retain within the tape library for 1 week, then move to storage cabinet for 7 weeks
– Offsite tapes sent to alternate location to be stored for 3 years– Once tape retention period expires, return to a tape device for reuse
• For restoration needs:– Use available onsite tapes during 2 month retain time; afterwards,
recall tapes from offsite location for restoration
25
Media Management:Retention, Duplication and Vaulting
• Tapes managed from first write to reuse based on user-defined media families, duplication and rotation policies
26
Tape ManagementAs Easy as 1,2,3,4,5….
Define tape pools, storage locations, policies and schedules:
Media Family(s)
11
Association: Map policy(s) to media family
44
Schedules: Vaulting, duplication
-NEW vaulting schedule granularity by media family and/or location in OSB 10.3
55
Policies: Vaulting, Duplication
33
Storage* Location(s)
22
*OSB automatically defines active locations(tape devices) for all configured devices.
27
Managing Tape Vaulting
• Vaulting scan generates a media movement job– “Vault Now”, one-off scan outside of regular schedule – New in OSB 10.3– Based on triggers associated with Vaulting Scan Schedules
• Media Movement job includes all tapes eligible for rotation per policy– This job can run automatically or have pending status until run by user– Each media movement job has associated pick and distribution report
• Vaulted tapes have “in transit” location status until user confirms arrival at vault location – New in OSB 10.3• Reporting– Pick and distribution reports– Location, schedule, exception and missing reports
28
Automated Tape Duplication
• Tape duplication may occur per policy or on one-off, on-demand basis– Migrate option copies the tape then deletes the original
• Commonly used to reclaim space on VTL for backup jobs• Seamlessly restore from original or duplicate tape– OSB will automatically choose tape in closest physical proximity
• Original and duplicate tapes uniquely identified within OSB catalog• Duplicate tapes may have the same or different retention and rotation schedule
Original : “X”Media Family
Duplicate – “X” Media Family
Duplicate – “Y” Media Family
29
Policy-Based Media Management…In Action
• Tapes duplicated to another media family may have different retention and rotation schedule than original tape
2-Month Retention For Original Tapes
3-Year Retention For Duplicated Tapes
30
OSB Summary Features & Benefits
31
Feature Benefit
Centralized backup management Centralizes backup operations of distributed servers to one or more tape devices using common management console across spectrum of servers
Built-in RMAN integration Delivers the fastest, most efficient Oracle database backup to tape at no additional licensing cost
File system data protection Protects entire IT environment
Dynamic Tape Drive Sharing Improves tape drive utilization in Storage Area Networks (SAN)
Backup encryption and key management
1) Protects backup data even if tapes are lost
2) Leverages native, host-based or LTO-4 drive encryption
Tape Vaulting: OnDemand or per schedule
1) Automates tape rotation for disaster recovery and long-term storage requirements
2) Reports list location of tapes for ease of management
Tape Duplication: OnDemand or per schedule
1) Creates safety net having multiple copies
2) Duplicates tapes per user directive to have same or different retention and vaulting policy then that of the original tape
Migration from Virtual Tape Library (VTL) to tape using NDMP direct copy
Leverages disk appliance for fast backup/restore then automated migration to tape for long-term storage
Policy Based media management Provides consistency across the backup domain
Unique, low-cost licensing model 1) Saves IT costs and simplifies licensing management
2) Backup unlimited servers and Oracle databases without additional fees
Benefits - Oracle Secure Backup
32
Success Story: CSX Technology
33
HA Sessions, Labs, & Demos by Oracle Development
Sunday, 11 October – Hilton Hotel Imperial Ballroom B
3:45p Online Application Upgrade
Monday, 12 October – Marriott Hotel Golden Gate B1
11:30a Introducing Oracle GoldenGate Products
Monday, 12 October – Moscone South
1:00p Oracle’s HA Vision: What’s New in 11.2, Room 103
4:00p Database 11g: Performance Innovations, Room 103
5:30p Comparing Data Protection Solutions, Room 102
Tuesday, 13 October – Moscone South
11:30a Oracle Streams: Replication Made Easy, Room 308
11:30a Backup & Recovery on the Database Machine, Room 307
11:30a Next-Generation Database Grid Overview, Room 103
1:00p Oracle Data Guard: What’s New in 11.2, Room 104
2:30p Oracle Streams: What's New in 11.2, Room 308
2:30p Backup & Recovery Best Practices, Room 104
2:30p Single-Instance RAC, Room 300
4:00p Enterprise Manager HA Best Practices, Room 303
Tuesday, 13 October – Marriott Hotel Golden Gate B1
11:30a GoldenGate Zero-Downtime Application Upgrades
1:00p GoldenGate Deep Dive: Architecture for Real-Time
Wednesday, 14 October – Moscone South
10:15a Announcing OSB 10.3, Room 300
11:45a Active Data Guard, Room 103
5:00p Exadata Storage & Database Machine, Room 104
Thursday, 15 October – Moscone South
9:00a Empowering Availability for Apps, Room 300
12:00p Exadata Technical Deep Dive, Room 307
1:30p Zero-Downtime DB Maintenance, Room 103
Hands-on Labs Marriott Hotel Golden Gate B2
Monday 11:30a-2:00p Oracle Active Data Guard, Parts I & II
Thursday 9:00a-11:30a Oracle Active Data Guard, Parts I & II
Demos Moscone West DEMOGrounds
Mon & Tue 10:30a - 6:30p; Wed 9:15a - 5:15p
Maximum Availability Architecture (MAA), W-045
Oracle Streams: Replication & Advanced Queuing, W-043
Oracle Active Data Guard, W-048
Oracle Secure Backup, W-044
Oracle Recovery Manager & Flashback, W-046
Oracle GoldenGate, 3709
34
CSX CONFIDENTIAL Draft Version 1.1 3535
Enterprise Backup Architecture
April 22, 2023
Richard McClainSenior Oracle DBA
CSX CONFIDENTIAL Draft Version 1.1 3636
CSX Corporation Overview
• CSX Corporation is a transportation company providing rail, intermodal and rail-to-truck transload services
• Over $11 billion in annual operating revenue, employing 30,000+ employees
• Owns largest rail network in the eastern United States
• One of the nation’s largest coast-to-coast intermodal transportation providers linking customers to railroads via trucks and terminals
• CSX Technology, a CSX Corporation business unit, provides a wide range of information technology applications and support services
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 3737
Oracle Database Infrastructure
• Oracle databases provide the backbone for mission critical train movement, customer service, and data warehouse decision support applications
• Using advanced Oracle Database options and features
• Large number of Oracle databases at Version 10gR2
– 350 Oracle Databases version 10.2.0.4.0 – 120 Production databases with 17TB – 230 Test / Development databases with 15TB
• Hosted primarily on commodity Intel-based servers
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 3838
Challenges - Backup Infrastructure
Business Drivers• Increase tape device resource utilization
• Reduce overall backup footprint by eliminating redundancy
• Eliminate shipping of tapes between data center and business continuity site
• Implement an automated backup infrastructure at our business continuity site for sustained operations
• Reduce backup infrastructure costs
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 3939
Challenges Addressed
Infrastructure Changes
• Utilize a Virtual Tape Library (VTL) as primary backup target versus physical tape device
• Deploy Oracle Secure Backup (OSB) for Oracle database backup/restore
• Leverage RMAN binary compression of backup set
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 4040
Oracle Database Backup Strategy
• Oracle databases are backed up to a Virtual Tape Library (VTL) using Oracle Secure Backup (OSB) and Recovery Manager (RMAN)
• Backup Strategy– Archive log mode for all production databases
– Incremental backups for databases > 200Gb in size
– Nightly full backups for all other production
– RMAN binary compression for all backups
• Metrics– Approx 12 TB backed per week / 1.7TB per day compressed
– Backup compression ratios averages between 4 - 7 times
• Production database backups are replicated by the VTL to business continuity site daily
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 4141
Oracle Secure Backup Domain
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 4242
OSB: Configuration Details
• OSB catalog backed up daily
– Mirrored via hardware to the business continuity site
– Utilize pre-defined OSB-Catalog-MF media family
• OSB media families and tape labeling– One for dev/test and one for production– Pre-label virtual tapes with media family
• Retention policy– Time managed vs content managed
• VTL Capacity – 500 virtual tape slots capacity– 300 dev/test– 200 production
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 4343
Virtual Tape Library Architecture
April 22, 2023
Data Center DR Site
CSX CONFIDENTIAL Draft Version 1.1 4444
Business Continuity Site
• Backup Infrastructure– Similar hardware / network as primary Data Center– VTL dedicated to OSB / 500 tapes / 12 virtual drives– OSB admin/media server / hardware mirrored
• Configure OSB Infrastructure– Update OSB configuration with any device changes– Replicated volumes moved to the OSB VTL slots– Evoke OSB inventory of the VTL library to recognize the
replicated volumes
• Recover server OS and file systems
• Recover Databases using OSB and RMAN
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 4545
Summary – Backup Architecture
• Migrated to Oracle Secure Backup for data protection of Oracle databases to VTL
• Virtual tape library partitioning allows improved device utilization
• Reduced backup footprint
• Automated transition to business continuity site in event of disaster
April 22, 2023
CSX CONFIDENTIAL Draft Version 1.1 4646
Why Oracle Secure Backup?
• Who better to backup up the Oracle database than Oracle?
• DBAs manage Oracle database backup / recovery from end-to-end
• Single technical support contact --- Oracle
• Highly integrated with RMAN for maximum backup performance to tape --- or in our case virtual tape
• Cost effective data protection for our environment
April 22, 2023