Upcoming: Oracle Database 12.1 Support Update for Linux on System z

Transcription

1 Upcoming: Oracle Database 12.1 Support Update for Linux on System z

2 International zseries Oracle SIG Webcast Series The International zseries Oracle Special Interest Group (SIG) is an organization of companies licensed for Oracle on z/linux and/or the z/os operating systems on IBM System z hardware. There are no membership fees or obligations. Communications are done through Oracle mailings, s, website and annual user conference. Please: Visit their website at the and sign up to be on the mailing list. 2

3 Upcoming Advisor Webcast Schedule Check out Note ID : Select your Product Area Scan through the list of Current Topics Register for the session of your interest Upcoming: Oracle Database 12.1 Support Update for Linux on System z 3

4 ATTENTION AUDIO Options Option 1: Voice Streaming Audio Broadcast No need to dial in on a telephone Questions can be asked in the WebEx Q&A panel Option 2: Teleconference (Dial In) Requires telephone to dial in Questions can be asked over the phone or in the WebEx Chat Details Conference ID: International dial in: +44 (0) US Free call: List with national toll free numbers is available in Doc ID: View anytime during the conference using Communicate > Teleconference > Join Teleconference from your WebEx menu Upcoming: Oracle Database 12.1 Support Update for Linux on System z 4

5 Oracle Advisor Webcast Oracle Database 12.1 Support Update for Linux on System z Sandra Skehin,Principal Support Engineer, Oracle David Simpson, Oracle Technical Specialist, IBM November 20,

6 Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle. 6

7 Oracle Advisor Webcast Oracle Database 12.1 Support Update for Linux on System z Sandra Skehin,Principal Support Engineer, Oracle David Simpson, Oracle Technical Specialist, IBM November 20,

8 International zseries Oracle SIG Webcast Series The International zseries Oracle Special Interest Group (SIG) is an organization of companies licensed for Oracle on z/linux and/or the z/os operating systems on IBM System z hardware. There are no membership fees or obligations. Communications are done through Oracle mailings, s, website and annual user conference. Please: Visit their website at the and sign up to be on the mailing list. 8

9 Objectives To provide an update on the current support status for Oracle Datatabase. To support the zseries Oracle SIG in their request for 12c advice. To provide guidance on security procedures. 9

10 Agenda Oracle Database 12c System z Support Status Oracle Database In Memory Column Store Oracle Database 12c Security Performance 10

11 Oracle Database 12.1 Linux on System z OS Info Support Status Terminal Release Premier Support Jan 2015 (EXS fees waived 1 year) Released Jan Patch HCY14 Opatch Patch Redhat 6 Doc ID Redhat 6 update 3 Recommend RH 6.4 or later Oracle RPM Checker ora-val-rpm-el6-db s390x.rpm Only set ORACLE_BASE Disable ASLR SLES 11 Doc Id SLES11 SP3 Oracle RPM Checker ora-val-rpm-s11-db s390x.rpm Only set ORACLE_BASE 11

12 Oracle Database 12.1 Support Update for Linux on System z Linux on System z specifics It s Fast Built using PDF New Features less resources EM agent enabled OEM Cloud Control 12cR3 or 12cR4 IBM Redbook Experiences with Oracle Database 12c Release 1 on Linux on System z SG

13 Oracle Database 12.1 Support Update for Linux on System z Key 12.1 New Features Multitenant Database Manage many as one Shared Resources Add on Licence Over 500 New Features for 12.1 Oracle Database New Features Guide 12c Release 1 (12.1) E In Memory Column Store Goals x 4 Improve Speed of OLTP Speed up ad-hoc queries Simple to implement No changes to existing applications Support for FIPS

14 : Dual Format Database Normal Buffer Cache SALES Row Format New In-Memory Format SALES Column Format BOTH row and column formats for same table Simultaneously active and transactionally consistent Analytics & reporting use new in-memory Column format OLTP uses proven row format SALES 14

15 Oracle In-Memory Columnar Technology Pure In-Memory Columnar SALES Pure in-memory column format Not persistent, and no logging Quick to change data: fast OLTP 2x to 20x compression typical Enabled at table or partition Just active data in-memory 15

16 Populating : In-Memory Column Store ALTER TABLE sales INMEMORY; ALTER TABLE sales NO INMEMORY; CREATE TABLE customers PARTITION BY LIST (PARTITION p1 INMEMORY, (PARTITION p2 NO INMEMORY); New INMEMORY ATTRIBUTE Following segment types are eligible Tables Partitions Subpartition Materialized views Following segment types not eligible IOTs Hash clusters Out of line LOBs Pure OLTP Features

17 Populating : In-Memory Column Store ALTER TABLE sales INMEMORY NO INMEMORY (PROD_ID); CREATE TABLE orders (c1 number, c2 varchar(20), c3 number) INMEMORY PRIORITY CRITICAL NO INMEMORY (c1); Possible to populate only certain columns from a table or partition Order in which objects are populated controlled by PRIORITY subclause Critical, high, medium, low Default none (populate on first access) Does not control the speed of population

18 Populating : In-Memory Column Store CREATE TABLE ORDERS PARTITION BY RANGE (PARTITION p1 INMEMORY NO MEMCOMPRESS PARTITION p2 INMEMORY MEMCOMPRESS FOR DML, PARTITION p3 INMEMORY MEMCOMPRESS FOR QUERY, : PARTITION p200 INMEMORY MEMCOMPRESS FOR CAPACITY ); Different levels FOR DML Use on tables or partitions with very active DML activity FOR QUERY Default mode for most tables FOR CAPACITY For less frequently accessed segments Easy to switch levels as part of ILM strategy

19 Oracle Compression Advisor And In-Memory Easy way to determine memory requirements Use DBMS_COMPRESSION Applies MEMCOMPRESS to sample set of data from a table Returns estimated compression ratio

20 OLTP is Slowed Down by Analytic Indexes Insert rate decreases as number of indexes increases # of Fully Cached Indexes (Disk Indexes are much slower) 20

21 Demonstration 21

22 Top Articles and Community Links Link to previous zseries Oracle SIG 12c presentations:- MOS Article: Getting Started with 12c 22

23 Linux on System z Oracle SIG Update November 20, 2014 David Simpson - Oracle Technical Specialist, IBM (simpson.dave@us.ibm.com) Sandra Skehin - Principal Support Engineer, Oracle 2014 IBM Corporation

24 Copyright and Trademark Information For IBM can be found at For Oracle can be found at IBM Corporation

25 Oracle 12c Security with Linux on System z Layers of Security is Key! 1) Keep up to date with Oracle and Linux security patches. 2) FIPS Government Compliances - Statement of Direction from Oracle s Advanced Security Team 3) Oracle Encryption (SSL, TDE) 4) Data Redaction new in 12c IBM Corporation

26 Oracle October 2014 PSU s and BASH Security Patches Critical Patch Update Oct 2014 (contains 154 new security fixes) p _121010_linux-zser.zip (DB PSU) p _121010_linux-zser.zip (GI PSU) p _121010_linux-zser.zip (Opatch) p _112040_linux-zser.zip ( Grid Patch) Bash Shell Code Injection Vulnerability Command to test -> env x='() { :;}; echo vulnerable' bash -c "echo this is a test vulnerable this is a test Apply bash rpm s -> bash s390x.rpm (SLES 11 SP3) -> bash el6.s390x.rpm (Red Hat 6.5) IBM Corporation

27 Oracle FIPS Security Compliance NIST US Government Organization for Security Compliance certifications Statement of Direction from Oracle s Advanced Security Team Included in release > Patch : MES BUNDLE ON TOP OF RDBMS needed for 11gR2 Activated with the following Oracle parameter: ALTER SYSTEM SET DBFIPS_140 = TRUE; h IBM Corporation

28 Oracle 12c Advanced Security Encrypting Data SSL - Encrypt traffic between Application servers and Database Servers Transparent Data Encryption (TDE) Encrypt entire tablesspaces New in 12c Oracle s Transparent Data Encryption TDE now works with U.S. FIPS mode Managing Oracle Wallets is easier with Storage in ASM, automatic backup, AES256 wallet IBM Corporation

29 Utilizing Cryptographic functions with Linux on System z Oracle Advanced Security on System z Can leverage hardware crypto module for SSL, https & java traffic network traffic TDE is currently only supported to either an ASM or file system. Use icastats to verify HW accelerator is being utilized when configured IBM Corporation

30 Oracle 12c Advanced Security Data Redaction Support staff can see sensitive data SQL> EMPNO ENAME SALARY HIRE_DATE _ID John NOV-14 John@us.ibm.com 2 Joe NOV-14 Joe@us.ibm.com 3 Dave NOV-14 simpson.dave@us.ibm.com Setup a redaction policy on Salary column SQL> begin dbms_redact.add_policy ( object_schema=>user, object_name=>'emp', policy_name=>'emp_redact', column_name=>'salary', function_type=>dbms_redact.full, expression=> q' sys_context('userenv','current_user')!= 'HR' ' ); end; Sensitive data masked 30 SQL> select * from hr.emp; EMPNO ENAME SALARY HIRE_DATE _ID John 0 12-NOV-14 John@us.ibm.com 2 Joe 0 10-NOV-14 Joe@us.ibm.com 3 Dave 0 09-NOV-14 simpson.dave@us.ibm.com 2014 IBM Corporation

31 Oracle 12c Advanced Security Data Redaction 12c Data Redaction is transparent for Applications as well! IBM Corporation

32 Oracle System z Performance Update Recent Support Issues: 1) Oracle Data Pump parallelization. 2) Node evictions during dbca creation IBM Corporation

33 Oracle DataPump EXPORT lessons learned Customer environment: Oracle Two Node RAC 1.4 TB Database size Multiple lob tablespaces RHEL 6.4 Database export using datapump with parallel=6 Exported dump size was around 370 GB Exported 19 files of each around 20 GB Export job took 34 hours to complete Why so many hours??? IBM Corporation

34 Oracle DataPump EXPORT lessons learned Actions performed: Changed the export file location from nfs location to local lvm file system (34 hours to 31 hours) Changed storage from SAN/FCP to ECKD (31 to 29 hours) Opened Oracle SR Enabled trace Parallel Capabilities of Oracle Data Pump ( Doc ID ) Applied patch Patch Conclusions: After analyzing trace file outputs it was determined: The Datapump PARALLEL parameter needed to be tuned. Changed PARALLEL=8 and the export job completed in 5 hours!!! In doing export process tune the parallelism according to number of files created, number of virtual CPUs and the cpu utilization of the Linux guest IBM Corporation

35 Node Evictions During DBCA Environment: Oracle 12c, four node RAC (16GB Linux guests each). Sporadic node evictions observed when RAC dbca was ran. Why the node Evictions? IBM Corporation

36 Oracle DataPump EXPORT lessons learned Actions performed: Team suspected memory issue -> increased virtual Linux guest sizes from 16GB -> 32GB ocssd.trc files showed: CSSD: : clssnmpollingthread: node xxxx (2) at 90% heartbeat fatal, removal in seconds Engaged IBM / Oracle System z support teams VM paging space was observed in the % range. Resolution: Added additional page space on z/vm. This helped reduce usage as well as give more paths to the paging subsystem. Reduced virtual memory of Linux guests to what was needed. Shutdown and logged off any non essential Linux systems to help reduce page space. Web based z/vm monitoring setup for the DBA s to monitor paging. Re-enforced plans for a z/vm 5.4 -> 6.3 upgrade with improved memory management features IBM Corporation

37 Summary What we covered today 12c New Features and prerequisites. Update on the current support Status for Oracle Database. Guidance on security procedures. 37

38 International zseries Oracle SIG Overview The International zseries Oracle Special Interest Group (SIG) is an organization of companies and individuals licensed for Oracle on IBM System z Series hardware. Mike Zechman User Group SIG President No membership fees or obligations to become a member. Visit SIG website at the and sign up for the mailing list. Planning next SIG user conference (28 th Annual) as well as future webinars. Topics of interest? Want to present? Conference Preference? send us an - contact@zseriesoraclesig.org Next Conference When: Next Conference Location: Late April or Early May 2015?? New York or Washington DC?? IBM Corporation

39 Q & A To ask a question on the phone line, select *1 on your phone. To ask a question online, use the Q&A area at the top. Your question will be read aloud in the order received. Question can also be asked on the My Oracle Support Communities 39

40 Question and Answer Instructions Q&A panel 2 Ask: ALL PANELLIST leave default! 3 Send your question 1 type your question here

41 Oracle Advisor Webcast Program Locating Current Schedule & Archived Recordings From Note ID : drill down to your area of interest Select your Product Area 41

42 Oracle Advisor Webcast Program Locating Current Schedule & Archived Recordings For DB Note: Click column headings to sort Hover on Webcast Title for more information Recordings available within 48 hours Advisor Webcast Questions on a webcast or ask questions via the Questions? link 42

43 Learn More Available References and Resources to Get Proactive My Oracle Support Essentials Webcast Series oracle.com Doc ID: My Oracle Support Blog Get Proactive in My Oracle Support oracle.com Doc ID: Ask the Get Proactive Team 43

44 Accessing My Oracle Support Community 1. Via My Oracle Support -> Community Tab 2. Directly 44

45 Where Can I Get Slides and Recording From This Session? 1. PDF link and recording link from Doc ID (within 48 hours) 2. Oracle Database > Rdb on Open VMS, IBM zseries and Oracle on OpenVMS > Content Tab > Documents (within 24 hours) 45

46 Session Related Community Links The following thread will have a copy of the presentation and can be used for additional questions or discussions on this topic

47 THANK YOU 47