Database Technology powered by Oracle now with 12C. Vishwanathan Vaidyanathan Senior Technical Lead, smartshift Technologies

Transcription

1 Database Technlgy pwered by Oracle nw with 12C Webinar Presenter: Vishwanathan Vaidyanathan Senir Technical Lead, smartshift Technlgies

2 Agenda 1. Intrductin smartshift Technlgies 2. Migratin 3. Database Security 4. Database High Availability & Disaster Recvery 5. Oracle Database 12c New Features 6. Q & A

3 1 Intrductin smartshift Technlgies

4 Abut smartshift Technlgies Funded in 1992 Glbal sftware and services cmpany 500+ emplyees in Germany, India and USA Mre than 19 years experience in the IT-Mdernizatin market Patented and prven autmatin sftware and methdlgies Sftware and services fr migratin and mdernizatin f cmplex systems smartshift value: Much Faster, Higher Quality, Reduced Risk & Lwer Cst! 11/26/2013 4

5 Selected Custmers 11/26/2013 5

6 2 Migratin

7 WHAT IS MIGRATION (UPGRADATION) Upgradatin Cllectin f prcess t change the versin f Database frm existing versin t Higher Versin / Release n same Operating System n existing Hardware is called Upgradatin Migratin Changing the underlying Operating System and/r Hardware Mving the database frm ne RDBMS t any ther RDBMS is called Migratin (ex. Frm MySQL t Oracle) Mving the database frm nn-asm (Oracle database files) t ASM (Autmatic Strage Management) File System r Standalne database t RAC (Real Applicatin Cluster) database r vice versa 11/26/2013 7

8 NEED OF MIGRATION New & Enhanced Features and HA Handle mre Lad & User base Bug Fixtures, OEM Vendr Supprt Database Migratin Handle Bigger DB size & Strage Capacity Enhanced Data Security Data Encryptin, Database Vault and Audit Vault DB Rerganizatin, Easier Management 11/26/2013 8

9 MIGRATION DEPENDENCIES Applicatin Cmpatibility Backup & Cntingency plans prir t Migratin 11/26/2013 9

10 MIGRATION METHODS DBUA MANUAL METHOD EXP / IMP Upgradatin will be dne n the same server with the same existing Operating System Upgrading nly Oracle Sftware and data dictinary in the database Minimize the Database server dwntime Upgradatin will be dne using scripts. Same as DBUA but will be executed using SQL cmmand prmpt Dne n same DB server & same O/S Minimizes the dwntime. Upgradatin will be dne using Lgical backups (Data pump r EXP/IMP). Upgradatin can be dne t higher versin n same DB server r different server Requires mre Dwntime time as we need t take backup n existing DB server and restre it n target DB server RMAN Upgrading using RMAN backups Clning database frm Prductin t Staging, Testing and Develpment activities 11/26/

11 11g NEW FEATURES The selected new features in 11g / 12c that yu can benefit after up-gradatin: Database Replay Partitining Database Replay is the new tl that captures SQL statements and lets yu replay them. Referential, Internal, and Virtual Clumn partitining; new sub-partitining ptins; and mre. Schema Management Add clumns with a default value easily and explre invisible indexes, virtual clumns, and read nly tables. Patching and Upgrades, RAC One Nde, and Clusterware Enables a single name (SCAN) fr the cluster, enable HA fr a single-instance database, place OCR and vting disks n ASM, and mre (in Release 2 nly). PL/SQL Perfrmance Explre in-lining f cde, "real" native cmpilatin, PLS timer, use f simple integer, and mre. 11/26/

12 11g NEW FEATURES Security Tablespace Encryptin, case-sensitive passwrds, data masking, and ther features. Caching and Pling SQL Result Cache, PL/SQL Functin Cache, and Database Resident Cnnectin Pling. SecureFiles Next-generatin LOBs: LOB encryptin, cmpressin, de-duplicatin, and asynchrnicity. Cmpressin Supprt fr data cmpressin, 11g takes the cncept t a new level with Advanced and Hybrid Clumnar Cmpressin. Backup and Recvery Explre Data Recvery Advisr, d parallel backup f the same file, create and manage virtual catalgs, and undrp tablespaces. Transactin Management Flashback Data Archive and explre Enterprise Manager's LgMiner interface. 11/26/

13 11g NEW FEATURES DataGuard (Active) The Oracle 11g Active DataGuard allws a physical standby database t be pen fr read nly access. Instead f having an idle physical standby database fr nly disaster recvery (DR) it can be used fr reprting and backups while cntinuusly applying the redlgs frm Primary database. RAC (Real Applicatin Cluster) Dramatic imprvements in the manageability f RAC. This feature enables users t deply a database r databases acrss a cluster f servers, which act as a single lgical envirnment, with the servers transparently sharing strage. If ne nde fails, the thers carry n and the wrklad f the failed nde is distributed acrss the thers ndes. End-t-End Cmpressin The Advanced Cmpressin ptin enables the data t be transparently cmpressed n disk, "in mtin, and in memry. This cmpressin feature nt nly saves space n disk and in memry but als make the database run faster. It can reduces disk and memry space usage as much as 75%. OLTP Table Cmpressin, reduces the assciated cmpressin verhead f write peratins, making it suitable fr transactinal r OLTP envirnments as well. 11/26/

14 UPGRADE PATHS The fllwing are the Upgrade Paths frm lwer versins t Oracle 11g Surce Database Upgrade Path Destinatin Database (r lwer) => => => 11.2.x (r lwer) => x => => 11.2.x (r lwer) => => => 11.2.x (r lwer) => => => 11.2.x (r lwer) => => 11.2.x 11/26/

15 BUSINESS BENEFITS OF MIGRATION Faster Perfrmance New & Enhanced Features OEM Vendr Supprt High Availability / Maximum Availability Enhanced Security Reduced Cst in terms f - Hardware Strage Sftware Man Pwer (DBA Resurces) 11/26/

16 3 Database Security

17 ESSENTIALS OF DATABASE SECURITY What t Secure The Cnfidential and Sensitive Infrmatin (data) is always needs t be secured. The infrmatin, ranging frm trade secrets t financial and privacy data has becme the target f sphisticated inside / utside attacks. Why t Secure The safe-guard f critical & cnfidential infrmatin is always challenging due t the fllwing threats- Eavesdrpping and Data Theft Data Tampering Falsifying critical infrmatin Passwrd related Threats Data crruptin due t Hardware Failures / Human mistakes Data Lss due t Natural Calamities like Fire, Building cllapse, Earthquake 11/26/

18 ESSENTIALS OF DATABASE SECURITY Hw t Secure The rganizatins have t deply with multi layered security system which include firewall, intrusin detectin and anti-spam technlgies. Prtecting data nw requires a defense-in-depth, inside-ut security strategy at applicatin & database level. By adpting right Security Strategy, rganizatins can better safeguard their data, address statutry regulatins and securely, achieve new business initiatives such as data cnslidatin (centralizing) and clud cmputing. 11/26/

19 SECURITY LAYERS 11/26/

20 SECURITY LAYERS Database Level Database Level Security can be implemented by using Passwrd Management Auditing & Data Masking Rles & Privileges Data Encryptin Applicatin Level Authenticatin Applicatin Level Rles & Privileges Cnnectin & Data Access Cntrl Hardware, Operating System & Strage Level O/S and Server Authenticatin Restrict t access OS & Devices Anti-virus and Spam Prtectin Netwrk / Internet Level Netwrk Authenticatin Firewall Internet Plicies 11/26/

21 SECURITY LEVELS Netwrk, Hardware & Operating System Level Security Applicatin Level Authenticatin Data Redactin / Masking Secured Data Data Access Cntrl, Mnitring & Intrusin Detectin Fault Tlerance & Disaster Recvery Sites Data Encryptin (Database & Backup) 11/26/

22 HOW TO WIN BATTLE OF BREACH Step 3: Prepare yur respnse t the inevitable: a sphisticated attack Step 2: Prtect yur Organizatin with a practive security plan Step 1. Priritize yur business bjectives and set yur risk tlerance 11/26/

23 ORACLE SECURITY FEATURES Oracle is prviding varius features n Securing the valuable Data. While creating a database, Database Cnfiguratin Assistant (DBCA) is autmatically create a mre secured Oracle Database. The fllwing are the few Oracle Database Security Features: Oracle Database Vault Oracle Database Vault practively prtects applicatin data frm being accessed by privileged database users (Access Cntrl and Analysis). Restrict adhc access t applicatin data by preventing applicatin bypass Certified default plicies fr Oracle E-Business Suite; Oracle s PepleSft and Siebel CRM; and SAP applicatins Database auditing Database mnitrs and recrds activity that ccurs in the database. Auditing has been enhanced and prvides highly custmizable auditing that can be fine tuned t specific security requirements. Oracle intrduced the Fine Grained Auditing (FGA) feature, The Secure Sckets Layer (SSL) and Kerbers strng authenticatin methds t authenticate users wh have the SYSDBA and SYSOPER Privileges. 11/26/

24 ORACLE SECURITY FEATURES Virtual Private Database (VPD) Database access n the rw and clumn level using Virtual Private Database. A Virtual Private Database plicy dynamically imbeds a WHERE predicate int SQL statements the user issues. Passwrd Prtected & Case sensitive Passwrd Easy ability t find default passwrds Passwrd cmplexity verificatin Strnger passwrd hashing algrithm SYSDBA and SYSOPER Strng Authenticatin The Secure Sckets Layer (SSL) and Kerbers strng authenticatin methds t authenticate users wh have the SYSDBA and SYSOPER Privileges SYSASM Privilege fr Autmatic Strage Management The SYSASM system privilege has been added t Oracle Database 11g R1 t be used exclusively t administer Autmatic Strage Management (ASM). 11/26/

25 ORACLE SECURITY FEATURES Encryptin Disguise data n the netwrk t prevent unauthrized access t that data. Encryptin Enhancements Intelligent LOB Cmpressin, Deduplicatin, and Encryptin with SecureFiles Cmpressed and Encrypted Dump File Sets Transparent Data Encryptin with Hardware Security Mdule Integratin Transparent Tablespace Encryptin Fine-Grained Access Cntrl n Netwrk Services n the Database Oracle Database prvides a set f PL/SQL utility packages, such as UTL_TCP, UTL_SMTP, UTL_MAIL, UTL_HTTP, and UTL_INADDR, that are designed t enable database users t access netwrk services n the database. Auditing database activities Audit the database activities such as auditing all SQL statements, SQL privileges, schema bjects, and netwrk activity. Or yu can audit in a granular manner, such as when the IP addresses frm utside the crprate netwrk is being used. 11/26/

26 ORACLE SECURITY FEATURES Cmpressed and Encrypted Dump File Sets Oracle Data Pump t cmpress and encrypt an entire dump file set. Yu can ptinally cmpress and encrypt the data, metadata, r cmplete dump file set during an Oracle Data Pump exprt. User accunts. When yu create user accunts, yu can secure them in a variety f ways. And als create passwrd prfiles t better secure passwrd plicies fr yur site. Authenticatin methds Oracle Database prvides several ways t cnfigure authenticatin fr users and database administratrs. Fr example, authenticate users n the database level, frm the perating system, and n the netwrk. Privileges and rles Use apprpriate privileges and rles t restrict users t access data. 11/26/

27 BUSINESS BENEFITS OF SECURITY Secured Sensitive & Cnfidential Data Reduced Business Risks Un-interrupted Business Data Prtectin frm - Malfunctining Unauthrized Access/Users Natural Calamities like fire, earth-quake 11/26/

28 4 Database High Availability & Disaster Recvery

29 ESSENTIALS OF HA & DR Why need f HA & DR Business Enterprises always lking t gain cmpetitive advantages, reduce peratinal csts, enhance cmmunicatin with custmers and increase management insight int their business prcesses. As the use f IT enabled services becmes prevalent, mdern enterprises becme increasingly mre and mre dependent n their IT infrastructure and its cntinuus availability. Applicatin dwntime and unavailability f data(base) directly translate int lss f prductivity and revenue, als resulted in dissatisfied custmers and tarnished crprate image. Need t prtect Data frm lss due t Hardware Failures / Human mistakes r natural calamities like Fire, Earthquake. 11/26/

30 ESSENTIALS OF HA & DR Hw t achieve HA The traditinal apprach t building a High Availability (HA) infrastructure and Disaster Recvery (DR) slutins has a challenge due t cmplex setup, skilled resurces and expensive hardware frm varius vendrs, technlgical limitatins and administrative cmplexities. Oracle addresses these challenges by prviding a cmprehensive slutins n High Availability with reliable pre-integrated technlgy which can be implemented at a minimal cst and skilled resurces. 11/26/

31 HA CONFIGURATION LEVELS Database Level Database Level HA can be implemented using Real Applicatin Cluster (RAC) Data Guard Glden Gate Oracle Streams / Replicatin RMAN, Data Pump (Backups) Hardware / OS Server Level Operating System Level Replica Fail-ver Cluster Third party Replicatin Slutins Strage Level Strage Level Replica ASM (Autmatic Strage Management) Data Center Level Establishing the Disaster Recvery (DR) sites at gegraphically distant place(s) 11/26/

32 HA CONFIGURATION TYPES DataGuard (Standby Database) GldenGate RAC ( Real Applicatin Cluster ) Oracle Database HA & DR Slutins Strage Level Replicatin / Mirrring Streams / Replicatins Fail-ver Cluster 11/26/

33 HA & DR FEATURES The fllwing are the technlgy ptins t avail the HA & DR at Oracle Database level: Real Applicatin Cluster ( RAC ) DataGuard GldenGate Oracle FailSafe / Cluster Fail-ver Autmatic Strage Management ( ASM ) 11/26/

34 HA & DR FEATURES Real Applicatin Cluster (RAC) Oracle RAC is a cluster database with a shared cache architecture t prvide highly scalable and available database slutins with fllwing features: Scalability RAC allws custmers t take advantage f lwer cst cmmdity hardware and prvide a hrizntal scalable cmputing envirnment when their business needs by adding / remving ndes. Maximum Availability Architecture (MAA) Oracle s Maximum Availability Architecture (MAA) which ensures the highest availability fr applicatins. Cnnectin Lad-balancing acrss the Ndes Net Services prvide cnnectin lad balancing fr database cnnectins. Client-side lad balancing, which balances cnnectin requests acrss the RAC ndes. 11/26/

35 HA & DR FEATURES Real Applicatin Cluster (RAC) Rlling Release Upgrade RAC supprts rlling upgrades which prvides the ability t upgrade Clusterware withut taking the entire cluster dwn and therefre enables 24x7 peratin f business. Rlling Patch Applicatin Supprts the applicatin f patches t the ndes f RAC database in a rlling fashin with n dwntime. Patches are applied ne nde at a time while the ther ndes in the Oracle RAC system are up and peratinal. File Strage Optin RAC Supprts fllwing file systems: Autmatic Strage Management (ASM) OCFS2 (fr Linux) and Oracle Cluster File System (OCFS) (fr Windws) A netwrk file system Raw devices 11/26/

36 HA & DR FEATURES RAC - Blck Diagram 11/26/

37 HA & DR FEATURES DataGuard (DG) DataGuard is the data prtectin and availability slutin fr Oracle Databases. DG cnfiguratin enables Standby Database that is exact replica f Primary Database by shipping archives lgs autmatically frm Primary database & applying at Standby database. DG prvides the management, mnitring, and autmatin sftware t create and maintain ne r mre synchrnized standby databases that prtect data frm failures, disasters, errrs and crruptins. Users can easily Fail-ver t Standby site when Primary site ges dwn with zer r minimal data lss. 11/26/

38 HA & DR FEATURES DataGuard (Return On Investment) The Active DataGuard (real time replicatin) enables Standby databases pen in read-nly while being synchrnized with the primary database. This will reduces the burden f heavy lad n Primary site by running, reprts & backups at Standby site. Snapsht Standby enables a standby database t be pen readwrite fr testing. A Snapsht Standby cntinues t receive, but nt apply, updates generated by the primary. When testing is cmplete, the Snapsht Standby is cnverted back int a synchrnized physical standby. This feature avids the additinal hardware resurce required fr testing the Applicatin. 11/26/

39 HA & DR FEATURES DataGuard - Blck Diagram 11/26/

40 HA & DR FEATURES GldenGate Oracle GldenGate is a cmprehensive sftware package fr realtime data integratin and faster replicatin in hetergeneus IT envirnments. The prduct set enables high availability slutins, real-time data integratin, transactinal change data capture, data replicatin, transfrmatins and verificatin between peratinal and analytical enterprise systems. Oracle GldenGate 12c gives high perfrmance with simplified cnfiguratin and management, tighter integratin with Oracle Database, supprt fr clud envirnments, expanded hetergeneity, and enhanced security. Transactin integrity: Data cmpleteness and accuracy is ensured as it is mved between systems. 11/26/

41 HA & DR FEATURES GldenGate Features Zer-dwntime peratins: Enable uninterrupted business peratins during system upgrade, migratin, and maintenance activities. Disaster recvery and data prtectin: Create and maintain an immediate failver with up-t-the-minute data t minimize recvery time fr missin-critical systems-deply with Oracle Database acrss database versins r perating systems r in nn-oracle envirnments. Data distributin: Synchrnize data fr distributed applicatins in real time acrss gegraphies fr reliable access t timely data. Query fflading: Ensure high perfrmance fr prductin systems while still supprting necessary read-nly activities by replicating data between hetergeneus surces and targets 11/26/

42 HA & DR FEATURES GldenGate - Blck Diagram 11/26/

43 HA & DR FEATURES GldenGate Replicatin Types 11/26/

44 HA & DR FEATURES Oracle Fail-safe using MSCS / Fail-ver cluster Oracle Fail Safe is a sftware that wrks with Micrsft Cluster Server (MSCS) t prvide high availability benefit n Micrsft clusters. A cluster is a cnfiguratin f tw r mre MS Windws systems that makes them appear t netwrk users as a single, highly available system. Each system in a cluster is referred t as a cluster nde. When a cluster nde fails, the cluster sftware mves its wrklad t the surviving nde (failver) based n the set parameters. Fr nn-windws systems, the third party cluster sftware can be used t cnfigure Fail-safe. 11/26/

45 HA & DR FEATURES Oracle Fail-safe / Fail-ver cluster - Blck Diagram 11/26/

46 HA & DR FEATURES Autmatic Strage Management (ASM) Oracle ASM is a vlume manager and a file system fr Oracle database files that supprts bth single-instance Database as well as RAC cnfiguratins wit n additinal cst. ASM is Oracle's recmmended strage management slutin that prvides an alternative t cnventinal vlume managers, file systems, and raw devices. This avids the requirement f third party sftware. ASM prvides autmatic lad balancing ver all the available disks, thus reducing ht spts in the file system. ASM prevents fragmentatin f disks, s yu dn't need t manually relcate data t tune I/O perfrmance Yu can add / remve disks n fly, ASM autmatically perfrms nline disk rerganizatin when yu add r remve strage. ASM strage system can stre all types f database files & ACFS. ASM prvides stripping and mirrring. 11/26/

47 BUSINESS BENEFITS OF HA & DR FEATURES Business Cntinuity Slutin Maximum Prtectin & Availability f Data Reduced Business Risks Faster Respnse, Satisfied clients Bifurcates Prductin lad t DR site Minimizes Planned & Unplanned Outages Data Prtectin frm - Users Transactin Mistakes Hardware / Disk Failures Natural Calamities like Fire, Earthquake 11/26/

48 5 Oracle Database 12c New Features

49 ORACLE 12c NEW FEATURES The fllwing are the few selected features f 12c: Multitenant Architecture & Pluggable databases Online migratin f an active data file Online table partitin r sub-partitin migratin Invisible clumns Multiple (duplicate) Indexes n the same clumn DDL Lgging PL/SQL Unit Security Execute SQL statement in RMAN New backup user privilege Table level recvery in RMAN Restricting PGA size 11/26/

50 ORACLE 12c NEW FEATURES Multitenant Architecture & Pluggable databases (PDB) Multiple Databases share a single instance f resurces aiming fr different purpses n the same Server. This Oracle database which is built n Multitenant fundatin is called Cntainer Database (CDB), and each cntainer (tenant) residing inside is called Pluggable Database (PDB, Cntainer). Cst reductin in terms f Prduct licensing and Hardware prcurement as we require less number f prcessrs and less memry cmpare t a Nn-CDB envirnment. Easier database maintenance, PDBs can easily be mved r cpied lcally r remtely acrss Physical machines in the netwrk, Upgrading Operating System, Upgrading r Patching Database itself is a lt easier and "ften" a ne sht prcess, that greatly imprves the availability. Perfrmance tuning becmes a lt easier as all PDBs in a CDB envirnment share same Hardware / Platfrm / Netwrk resurces like CPUs / Memry / OS / Bandwidth etc., similar t tune ne single piece f SGA/PGA n ne single instance rather tuning each SGA n each physical machine. 11/26/

51 ORACLE 12c NEW FEATURES Online migratin f an active data file Yu can nline rename r relcate an active data files. Online table partitin r sub-partitin migratin Online migrate a table partitin r sub-partitin t a different tablespace. Invisible clumns Yu can create invisible indexes and virtual clumns t hide imprtant data/clumns frm being displayed in the generic queries. Multiple (duplicate) Indexes n the same clumn Yu can create multiple indexes either n the same clumn r set f clumns. DDL Lgging Yu can nw lg the DDL actin int xml and lg files. This will be very useful t knw when the drp r create cmmand was executed and by wh. New backup user privilege RMAN backup and recvery tasks specific privilege SYSBACKUP has been intrduced t execute backup and recvery cmmands Execute SQL statement in RMAN Execute SQL cmmands in RMAN prmpt withut the need f a SQL prefix. 11/26/

52 ORACLE 12c NEW FEATURES Rw Level Cmpressin It prvides the ability t specify ADO (Autmatic Data Optimizatin) plicies t implement cmpressin at the rw level within each table in a database. Segment-Level Cmpressin This feature prvides the ability t specify ADO plicies t implement cmpressin at the segment level within each table in a database. In-Database Archiving Allws users t set the archive state fr individual rws. Rws that marked as archived will nt be visible unless the sessin is enabled t see archived data. With In-Database Archiving, mre data can be stred in databases fr a lnger perid withut cmprmising applicatin perfrmance. It help t imprve query and backup perfrmance. Cascade fr TRUNCATE The TRUNCATE can be executed with CASCADE ptin which will als delete the child recrds. DDL lgging By using the ENABLE_DDL_LOGGING initiatin parameter, we can nw lg the DDL actin int xml and lg files t capture when the drp r create cmmand was executed and by whm. 11/26/

53 6 Q & A

54 Questins & Answers D yu have any questins? Enter them in the chat pane! 11/26/

55 Cntact Us Punraj Karthikeyan Senir Accunt Manager - Sales pkarthikeyan@smartshifttech.cm Request a Database Assessment Call 11/26/

56 Thank yu!