oracle maximum availability architecture

27
1

Upload: marketingarrowecscz

Post on 14-Apr-2017

401 views

Category:

Technology


2 download

TRANSCRIPT

Page 1: Oracle Maximum Availability Architecture

1

Page 2: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Maximum Availability Architecture HA and Data Protection On-Premises and in the Cloud

Patrik Plachý Senior Consultant Oracle CEE Technology Sales Consulting

Page 3: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Safe Harbor Statement

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

3

Page 4: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Program Agenda

Oracle MAA - Overview

Oracle MAA Reference Architectures

Hybrid Cloud

1

2

3

4

Page 5: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle Maximum Availability Architecture (MAA)

• Service-level oriented

• Prevent business outages

• Protect Oracle data

5

High Availability and Data Protection

Production Copy

Database Replication

Page 6: Oracle Maximum Availability Architecture

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal 6 6 Copyright © 2016 Oracle and/or its affiliates. All rights reserved. |

Oracle MAA – Customer Proven

Page 7: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 7

Oracle MAA and the Cloud

Common Platform – On Premises, Cloud, and Hybrid Cloud

On Premises On Cloud

Oracle Database

Designed to Address the Complete Range of Business Requirements

Page 8: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Program Agenda

Oracle MAA - Overview

Oracle MAA Reference Architectures

Hybrid Cloud

1

2

3

8

Page 9: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Reference Architectures – Level Set

• Developed and validated by Oracle

• Capabilities carry forward as you progress from one architecture to the next

• Achieving stated service levels requires:

– Utilization of prescribed HA capabilities

– Utilization of prescribed configuration and operational best practices

– Due diligence during pre-production testing

9

Page 10: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Align Oracle Capabilities with Customer Service Level Requirements

Prod/Departmental

Business Critical

Dev, Test, Prod

Mission Critical

Automated restart, restore from backup

Bronze +

Active / Active database clustering

10

Oracle MAA Reference Architectures

Silver +

Physical replication, zero data loss, fast failover

Gold +

Advanced capabilities that make outages transparent to users

GOLD

BRONZE SILVER

PLATINUM

http://www.oracle.com/technetwork/database/availability/maa-reference-architectures-2244929.pdf

Page 11: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Bronze Reference Architecture

Oracle Database Cloud Service*

On-Premises Product/Option

Enterprise Oracle Database Backup Cloud

Oracle Database Enterprise Edition

Enterprise Manager Express

Summary • Single instance database with auto-restart

• Restore from backup to resume service following unrecoverable outages

Requirements • All that is required for Bronze is a separate location to store backup data. This

may be as simple as a network file share, a tape library, or an offsite backup.

• Local and remote backup copies are recommended for fastest recovery and

protection against site failures

Bro

nze

Primary Data Center Failover Data Center

single

instance

database

*minimum required

database

files

local

backup

replicated

backup

11

Page 12: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 12

Bronze Capabilities Matrix

Event Downtime Data Loss Potential

Disk failure Zero Zero

Machine and recoverable database instance failures Minutes Zero

Data corruption and unrecoverable database outages Hours Since last backup

Site outages Hours to days Since last backup

Database reorg, file move, eligible one-off patches Zero Zero

Hardware and software maintenance and patching Minutes Zero

Database upgrades (patch-sets and full releases) Minutes to hour Zero

Application upgrades (modify database objects) Hours Zero

Page 13: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Active database instance used for HA

• Active-Active cluster provides best HA for machine and database instance outages and hardware/software maintenance and patching

Replicated copy of database used for HA

• Best HA and protection against data corruptions, database and availability domain outages, and database upgrades

Silver Reference Architecture – Choice of Patterns

Primary Data Center Failover Data Center Failover Data Center

Availability

Domain Availability

Domain

Primary Data Center

13

Oracle RAC Data Guard

Page 14: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Silver: Active-Active Cluster

Oracle Database Cloud Service*

On-Premises Product/Option

EE Extreme Performance or Exadata Service Oracle Database Backup Cloud

Oracle Database EE

Oracle RAC

Enterprise Manager

Lifecycle Mgmt Pack

Cloud Mgmt Pack

Diagnostics Pack

Tuning Pack

Silver

Summary:

Oracle RAC

Bronze +

• Active-active RAC cluster - HA for machine or database instance outages

• Auto service failover to second machine, zero downtime required for restart

• Zero downtime rolling maintenance across database instances

• All database instances open read-write to scale workload

• RAC One-Node is an option for active-passive HA if scalability is not required

Requirements • This tier adds to infrastructure requirements to support Oracle RAC: inter-node

communication, shared storage and multi-node compute

Silv

er

Clu

ste

r

*minimum required

Primary Data Center Failover Data Center

multi

instance

database

database

files

local

backup

replicated

backup

14

Page 15: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Silver: Replication

Silver

Summary:

Data Guard

Bronze +

• Database replication (Data Guard) synchronizes a local HA copy in a separate

availability domain for maximum fault isolation: Independent data validation,

corruption protection, separate power, cooling, network, server, and storage.

• Automatic database failover and automatic application failover to the HA copy

• Zero data loss using synchronous replication

Requirements • This alternative adds a duplicated and separate environment to support the

synchronized copy used for HA.

• Additional configuration required for automatic database failover

Silv

er

Re

plic

atio

n

*minimum required

Primary Data Center Failover Data Center

local

backup

replicated

backup

Availability Domain Availability Domain

15

Oracle Database Cloud Service*

On-Premises Product/Option

Enterprise Oracle Database Backup Cloud

Oracle Database Enterprise Edition

Enterprise Manager Express

Page 16: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 16

Silver Capabilities Matrix

Event Downtime Cluster Replication

Data Loss Potential Cluster Replication

Disk failure Zero Zero Zero Zero

Machine and recoverable database instance failures Zero to seconds Seconds Zero Zero

Data corruption, unrecoverable database outages, availability domain outages (power, network, etc)

Hours Seconds Since last backup

Zero

Site outages Hours

to days Hours

to days Since last backup

Since last backup

Database reorg, file move, eligible one-off patches Zero Zero Zero Zero

Hardware and software maintenance and patching Zero Seconds Zero Zero

Database upgrades (patch-sets and full releases) Minutes to hour Seconds Zero Zero

Application upgrades (modify database objects) Hours Hours Zero Zero

Page 17: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Gold Reference Architecture

Oracle Database Cloud Service*

On-Premises Product/Option

EE Extreme Performance or Exadata Service Oracle Database Backup Cloud

Oracle Database EE

Oracle RAC

Active Data Guard

Enterprise Manager

Lifecycle Mgmt Pack

Cloud Mgmt Pack

Diagnostics Pack

Tuning Pack

Gold

Summary

Silver +

• Remote database replication using Active Data Guard eliminates S.P.O.F. for

HA from data corruptions, cluster and site outages

• Fast database failover (manual or automatic) - no downtime required for restart

• Low-downtime database rolling upgrades

• Read-only workloads are offloaded to the remote copy – all systems active

Requirements • The remote copy is completely isolated from outages impacting the primary

system: independent Oracle data validation, separate power, cooling, network,

server, storage, building, geography, etc. Remote system may have less

capacity during normal runtime and scale up to multi-instance after failover.

Gold

*minimum required

Primary Data Center Failover Data Center

multi

instance

database

database

files local

backup

local

backup

17

Page 18: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 18

Gold Capabilities Matrix

Event Downtime Data Loss Potential

Disk failure Zero Zero

Machine and recoverable database instance failures Zero to seconds Zero

Data corruption and unrecoverable database outages Seconds to minutes Zero to seconds*

Site outages Seconds to minutes Zero to seconds*

Database reorg, file move, eligible one-off patches Zero Zero

Hardware and software maintenance and patching Zero Zero

Database upgrades (patch-sets and full releases) Seconds to minutes Zero

Application upgrades (modify database objects) Hours Zero

*Data Guard synchronous (zero) or asynchronous (seconds)

Page 19: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Platinum Reference Architecture

Oracle Database Cloud Service*

On-Premises Product/Option

EE Extreme Performance or Exadata Service GoldenGate Cloud Service Oracle Database Backup Cloud

Oracle Database EE

Oracle RAC

Active Data Guard

Oracle GoldenGate

Enterprise Manager

Lifecycle Mgmt Pack

Cloud Mgmt Pack

Diagnostics Pack

Tuning Pack

Platinum

Summary

Gold +

• Data Guard replication synchronizes local (HA) and remote (DR) copies

• HA copy is deployed in a separate availability domain for maximum isolation

• Application tier in primary datacenter automatically fails over to the local HA

copy of the production database following unplanned cluster outage or

database rolling maintenance.

• Oracle GoldenGate and Edition-Based Redefinition for zero downtime upgrades

Requirements • Three complete, duplicated, separate infrastructures are required. Local HA

copy is all but geographically isolated from primary. DR copy is geographically

isolated. Advanced capabilities make local outages and all maintenance

transparent to applications. Only site outages require failover to remote copy.

Pla

tinu

m

*minimum required

Failover Data Center

local

backup

local

backup

Availability Domain Availability Domain

19

Primary Data Center

Page 20: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 20

Platinum Capabilities Matrix

Event Downtime Data Loss Potential

Disk failure Zero Zero

Machine and recoverable database instance failures Zero to seconds Zero

Data corruption and unrecoverable database outages, availability domain outages (power, network, etc)

Seconds Zero

Site outages Seconds Zero

Database reorg, file move, eligible one-off patches Zero Zero

Hardware and software maintenance and patching Zero Zero

Database upgrades (patch-sets and full releases) Zero to seconds Zero

Application upgrades (modify database objects) Zero to seconds Zero

Page 21: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Oracle MAA Bill of Materials

Product/Features Bronze Silver

Cluster Silver

Replication Gold Platinum

Virtual machine auto-restart, disk mirroring, remote replication of backups x x x x x

Oracle EE, data encryption, physical and logical data validation, RMAN, Oracle Restart, online redef/reorg, online patching, single tenant CDB, Enterprise Manager

x x x x x

Oracle RAC, session pool draining for planned maintenance, RAC rolling patching. UCP and FAN to automate failover of app tier connections after instance failover. RAC One Node if service level requirements are satisfied by active-passive warm failover cluster.

x x x

Data Guard synchronous replication and Fast-Start Failover to local HA copy. UCP and FAN to automate failover of app tier connections after DB failover. Lost-write validation. Network encryption. Database rolling upgrade. Backups offloaded to standby.

x x

Active Data Guard asynchronous replication to remote copy (or Far Sync if zero data loss DR is required), database rolling upgrade, lost-write detection and auto block repair on both primary and standbys, fast backups (block-change tracking file) offloaded to standbys. Network encryption.

x x

Application Continuity used with RAC instance failover and with Data Guard Fast-Start Failover to local HA copy. Real-time Cascade. GoldenGate bi-directional replication for zero downtime maintenance, Edition-Based Redefinition for application upgrades

x

21

Page 22: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Program Agenda

Oracle MAA - Overview

Oracle MAA Reference Architectures

Hybrid Cloud

1

2

3

22

Page 23: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

Offsite Cloud Storage for Oracle Database Backups

Backup to the Cloud Instant offsite storage

Cost effective

On-demand scalability

End-to-end security

Encryption

Compression

3-Way protection

24x7 data availability

Oracle Database Backup Service

On-Premises Databases Oracle 10.2 and above

23

Page 24: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

For Oracle Database using Data Guard and Active Data Guard

Disaster Recovery to the Cloud

Elastic - Instant DR

Fast failover to running copy

Use DR copy for reporting

Clone test/dev databases

Offload cloud backups

Simple physical replication

Zero data loss using Far Sync On-Premises Databases Oracle 11.2 and above

24

Data Guard/Active Data Guard Standby Database

Test/Dev

Reporting

www.oracle.com/technetwork/database/availability/dr-to-oracle-cloud-2615770.pdf

Page 25: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 26

Addressing Enterprise Database Requirements

Common Platform – On Premises, Cloud, and Hybrid Cloud

On Premises On Cloud

Oracle Database

Oracle Maximum Availability Architecture and Oracle Cloud

Page 26: Oracle Maximum Availability Architecture

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | 27

Page 27: Oracle Maximum Availability Architecture

28