unisys ClearPath Enterprise Servers Remote Database Backup Planning and Operations Guide ClearPath MCP 14.0 April

Transcription

1 unisys ClearPath Enterprise Servers Remote Database Backup Planning and Operations Guide ClearPath MCP 14.0 April

2 NO WARRANTIES OF ANY NATURE ARE EXTENDED BY THIS DOCUMENT. Any product or related information described herein is only furnished pursuant and subject to the terms and conditions of a duly executed agreement to purchase or lease equipment or to license software. The only warranties made by Unisys, if any, with respect to the products described in this document are set forth in such agreement. Unisys cannot accept any financial or other responsibility that may be the result of your use of the information in this document or software material, including direct, special, or consequential damages. You should be very careful to ensure that the use of this information and/or software material complies with the laws, rules, and regulations of the jurisdictions with respect to which it is used. The information contained herein is subject to change without notice. Revisions may be issued to advise of such changes and/or additions. Notice to U.S. Government End Users: This is commercial computer software or hardware documentation developed at private expense. Use, reproduction, or disclosure by the Government is subject to the terms of Unisys standard commercial license for the products, and where applicable, the restricted/limited rights provisions of the contract data rights clauses. Unisys and ClearPath are registered trademarks of Unisys Corporation in the United States and other countries. All other brands and products referenced in this document are acknowledged to be the trademarks or registered trademarks of their respective holders.

3 Contents Section 1. Overview of the Remote Database Backup System Documentation Updates What s New? What Remote Database Backup Can Do for You Roles of Databases and Hosts in a Remote Database Backup System Configurations of Remote Database Backup Systems Basic Remote Database Backup Hardware and Software Requirements Audit Trail Synchronization The Next Step More About Audit Transmission Modes Section 2. Understanding Audit Transmission Modes Audit Block (ABW) Transmission Mode Error-Handling Options for the ABW Mode Drop Error-Handling Option Operator Error-Handling Option Audit File Mirror (AFM) Transmission Mode Audit Transmission Modes (AFS, SCA, and NSC) Audit File Switch (AFS) Mode Server Capable (SCA) Mode Not Server Capable (NSC) Mode Audit Transmission Mode Options Impact of the Block Transmission Mode on Resources Impact of the File Transmission Modes on Resources Impact of the AFS Mode on Resources Impact of the SCA and NSC Modes on Resources The Next Step Selecting Options and System Resources for Your Goals Section 3. Selecting Remote Database Backup Options and System Resources for Your Goals Overview of the Process Identifying Your Goals for Remote Database Backup Clarifying Your Disaster Recovery Goals Considerations About the Use of the Primary Host Establishing Performance Requirements Selecting Audit Transmission Modes to Meet Your Goals Describing Your Resources Introduction to Gathering Data to Calculate Utilization iii

4 Contents A Two-Step Process General Impact of Remote Database Backup on Existing Resource Utilization Gathering Data on Existing Network Utilization Gathering Data on Future Network Utilization with Remote Database Backup Preliminary Measurements for the ABW Mode Preliminary Measurements for the AFS, SCA, and NSC Modes Obtaining Communications Processor Utilization Statistics Gathering Data on Host Processor Utilization Calculating the Total Secondary Host Processor Utilization The Next Step Preparing to Configure a Remote Database Backup System Section 4. Preparing to Configure a Remote Database Backup System Overview of Preparation Tasks Checking on the Remote Database Backup Installation Preparations for Using a Nonusercoded Database Understanding Remote Database Backup Software Understanding Other Remote Database Backup Software Automating Some Remote Database Backup Operations Understanding How Remote Database Backup Uses Port Files Understanding More About the ABW Mode Automatic Audit Synchronization Process of the ABW Mode Integrating Remote Database Backup into Your Security Setup Setting Up Guard Files for the Secondary Host Preparing Personnel to Run the Remote Database Backup System Reviewing DASDL Source Files Designating Usercodes and Packs Ensuring Database File Availability on the Secondary Host I/O Timeout Value for the Ports Responding to a Port-I/O Timeout Error Influencing Tracker Performance Affecting the Speed of Tracker Performance Manipulating the Frequency of Restart Points Section 5. Configuring a Remote Database Backup System Configuration Tasks Defining Your Remote Database Backup System Initializing and Defining the Primary and Secondary Hosts Enabling the Remote Database Backup System iv

5 Contents Cloning the Database on the Secondary Host Making the Required Database Files Available on the Secondary Host Specifying Dump Information and Pack Names for Database Structures on the Secondary Host Identifying Pack Names for Database Software Files on the Secondary Host Specifying Pack Names for Database Guard Files on the Secondary Host Providing the Titles of the DMCONTROL and DMUTILITY Code Files on the Secondary Host Selecting a Method of Running the Clone Operation Verifying the Remote Database Backup System Starting the Secondary Database After a Clone Operation Synchronizing the Databases After Cloning with an Online Dump Section 6. Performing Takeovers Overview of a Takeover Performing Takeover Tasks Terminating Update Programs Transferring and Applying Audit Images Estimating Lost Transactions Establishing the New Primary Host Establishing the New Secondary Host Managing the Transaction Server Synchronized Recovery Section 7. Monitoring Your Remote Database Backup System Overview of Remote Database Backup Monitoring Accessing Messages Accessing the Current State of Audit Transfers Accessing Cumulative Remote Database Backup Statistics Interpreting Remote Database Backup Statistics Accessing Database Statistics on Remote Database Backup Performance Section 8. Managing a Remote Database Backup Environment Interdependencies in the Remote Database Backup Environment Audit File Accumulation Acknowledgment of Audit Files Viewing and Updating Host Information Records Viewing a Host Information Record Modifying a Host Information Record Deleting the Host Information Record for the Secondary Host v

6 Contents Changing the Audit File Transmission Mode Cloning the Database on the Secondary Host Disabling Tracker Performing an Offline Dump of the Secondary Database Performing Replication of the Secondary Database Disabling the Remote Database Backup System Reenabling the Remote Database Backup System Using Visible DBS Commands in the Remote Database Backup Environment Section 9. Updating and Reorganizing an Enterprise Database Server Database in the Remote Database Backup Environment DASDL Updates in the Remote Database Backup Environment Processing Updates Under the ABW or AFM Mode Processing Updates Under the AFS, SCA, or NSC Mode Changing Code File or Guard File Names and Pack Locations Adding New Structures Tracker and the Reinitialization of an Existing Structure Reorganizations in the Remote Database Backup Environment Minimizing the Consequences of an Aborted Reorganization Deciding Whether to Perform Tasks Manually or Automatically Effects of Reorganization Open Options Availability of Database Structures During a Reorganization Handling Nonusercoded and Usercoded Databases Auditing During Reorganizations Performing a Structure Clone Operation Handling the Effects of an Extensive Online Reorganization Section 10. Recovering a Database in the Remote Database Backup Environment Types of Recovery in the Remote Database Backup Environment Rebuild Recovery Rollback Recovery Halt/Load and Abort Recovery Reconstruct Recovery Copying Database Structures from an Offline Dump Restoring Lost or Corrupt Database Files vi

7 Contents Section 11. Using an Enterprise Application Environment in a Remote Database Backup Environment Finding the Information You Need Secondary Database Functions Hints for Successful Enterprise Application Environment Operations Section 12. Troubleshooting Minimizing Problems Resolving Operational Problems with Database Operations Center Enable Operation Clone Operation Mode Change Resolving Takeover Problems Resolving Primary Database Problems Resolving Secondary Database Problems Reestablishing Synchronization Resolving Catchup Problems Resolving Tracker Problems Resolving Miscellaneous Problems Resolving Port-I/O Timeout Errors Resolving Updating and Reorganization Problems Resolving Tape Audit Failures Section 13. Programmatic Interfaces Establishing the Link to the RDB Support Library Using the Takeover Entry Point Example Takeover Entry Point ALGOL Program Using the RDB_INFO Entry Point Using the GET_PRIMARY_MODE Entry Point Example GET_PRIMARY_MODE Application Program Text Using the SET_RDB_MODE Entry Point Using the GET_RDB_MESSAGE Entry Point Section 14. SYSTEM/RDBOPS Running RDBOPS Appendix A. Sample Clone WFL Job Sample Full Clone WFL Job... A vii

8 Contents Appendix B. Resource Assessment Forms System Resource Description Form... B 2 Database Description Form... B 3 Primary Host Database Applications List Form... B 4 Primary Host Nondatabase Applications List Form... B 5 Secondary Host Applications List Form... B 6 Network Description Form... B 7 Audit Generation Rate Form... B 8 Applications Activity Form... B 9 Appendix C. Methods of Measuring Resource Utilization Tools to Measure Database Activity... C 2 Tools to Obtain an Audit Generation Rate... C 7 Tools to Obtain an Audit Block Size... C 9 Appendix D. Operational Considerations for Mirrored Audit Remote Database Backup System Environment... D 2 Setting Up Shared Disks on ClearPath Hosts for EMC Mirrored Disks... D 4 Recovering from a Corrupted Pack Label on Target Packs... D 6 Changing Audit File Transmission Modes... D 6 Disabling the Remote Database Backup System... D 8 Performing a Planned Takeover in AFM Mode... D 9 Restoring the Original Remote Database Backup Configuration Following a Planned Takeover... D 10 Performing an Unplanned Takeover in AFM Mode... D 13 Restoring the Original Remote Database Backup Configuration Following an Unplanned Takeover... D 14 Index... 1 viii

9 Figures 4 1. How Remote Database Backup Components Work Together for the ABW Mode Normal Flow of Audit Blocks in ABW Mode Catchup Process Flow of Audit Blocks in ABW Mode Sample Output from the Visible DBS STATUS Command Relation of Restart Points to Control Points Sample Report from the AUDIT ANALYZE AFN Command Sample Report Including AUDIT PROCESSOR TIMES Command Information Sample Output from the LIBS Command Sample image of the TEMPLATE/RDB/CONFIG file C 1. Sample Output from the AUDIT ANALYZE AFN Command (Part 1)... C 4 C 1. Sample Output from the AUDIT ANALYZE AFN Command (Part 2)... C 5 D 1. Remote Database Backup System Environment and How It Works with Disk Subsystems... D ix

10 Figures x

11 Tables 1 1. Audit Transmission Modes Effects of the Open Options on Database Availability xi

12 Tables xii

13 Section 1 Overview of the Remote Database Backup System Purpose Audience Prerequisites Conventions This guide provides the information necessary to understand the Remote Database Backup capability. The primary audience for this guide is the database personnel responsible for administrative and supervisory day-to-day database operations. System administrators and computer operators are a secondary audience. Anyone using this guide should be familiar with basic Enterprise Database Server concepts. You should have extensive experience in using Enterprise Database Server utilities. Lastly, you should have experience with creating and updating an Enterprise Database Server database. References to additional information contained in other books or sections of this guide are listed at the end of each subsection under the heading Related Information Topics. All screens referred to in this document are part of Database Operations Center. This document uses the following abbreviations: Kbps (kilobits per second) KBps (kilobytes per second) Mbps (megabits per second) MBps (megabytes per second)

14 Documentation Updates Remote Database Backup Overview This section contains overview information about the Remote Database Backup system, including What Remote Database Backup can do for you Roles of databases and hosts in a Remote Database Backup system Configurations of Remote Database Backup systems Basic Remote Database Backup hardware and software requirements Audit trail synchronization Documentation Updates This document contains all the information that was available at the time of publication. Changes identified after release of this document are included in problem list entry (PLE) To obtain a copy of the PLE, contact your Unisys representative or access the current PLE from the Unisys Product Support Web site: Note: If you are not logged into the Product Support site, you will be asked to do so

15 What s New? What s New? This guide provides changes and information specific to the current release as shown in the following table: Section 2 Section 3 Section 8 Section 12 Section 13 Section 14 Location New Or Revised Information Updated text for ABW and AFM Transmission Mode References to Network Control Facility (NCF) removed Note added to Full Clone Tasks subheading to address NSC New topic added: STRUCTURECLONE Required Following Successful STRUCTURECLONE Update to Catchup Does Not Run After Mode Change from SCA to ABW subsection to include NSC Update to GET_RDB_MESSAGE Application Program Text example New RDBOPS section added

16 What Remote Database Backup Can Do for You What Remote Database Backup Can Do for You What Is Remote Database Backup? Remote Database Backup is a database recovery system. Remote Database Backup can be a key component of any disaster recovery plan because it minimizes the amount of time needed to recover from a loss of database access. Remote Database Backup also minimizes loss of productivity, loss of revenue, and loss of business because of interruptions in the ability to access your database. Remote Database Backup works with Enterprise Database Server databases. Components of a Remote Database Backup System The Remote Database Backup system consists of a database and a copy of the database. One database is update capable and the other can be used for inquiry purposes only. The update-capable database is called the primary database. The host on which this database resides is called the primary host. The current online remote database copy, called the secondary database, is inquiry capable only. The host on which this database resides is called the secondary host. The configuration of the primary and secondary databases on their separate hosts is called a Remote Database Backup system. A single host can participate in multiple Remote Database Backup systems. What Remote Database Backup Does Remote Database Backup enables you to maintain a current online inquiry-only copy of a database on an enterprise server separate from the enterprise server on which the update-capable database resides. The host locations can be at the same site or at two geographically distant sites. Remote Database Backup keeps the database copy up-to-date by applying the audit images from the audited database to the database copy. A choice of four audit transmission modes enables you to choose the means of audit transfer between hosts that best suits your needs. If the primary database or primary host fails, you can quickly switch the primary database operations to the secondary database on the secondary host. Related Information Topics For information about... Refer to... Audit transmission modes Sections 2, 3, and 4 Resource assessment for using Remote Database Backup Section

17 Roles of Databases and Hosts in a Remote Database Backup System Roles of Databases and Hosts in a Remote Database Backup System Roles of the Databases In the Remote Database Backup system, the terms primary and secondary indicate the intended function of each copy of the database and the host on which it resides. The following table shows the functions of the primary and secondary databases. Database Primary Secondary Function Database inquiry and update Database inquiry only The secondary database Cannot be updated by application programs The secondary database is modified only by the application of audit images of transactions performed on the primary database. Can assume the role of the primary database if the primary database becomes unavailable Roles of the Hosts One complete Remote Database Backup system is made up of one database the primary database on one host, and one copy of that database the secondary database on another host. A host is the system on which a primary or secondary database resides. A host can function as a primary host in one Remote Database Backup system and concurrently function as a secondary host for another Remote Database Backup system. In addition, one host can function as a secondary host (or primary host) for multiple Remote Database Backup systems. When you first initialize Remote Database Backup for a database, by default, the primary host is the host upon which the database resides. The other host you define for that database is designated as the secondary host. It remains a secondary host until a takeover is performed or until the Remote Database Backup capability is disabled. The primary and secondary hosts must have sufficient resources to support your Remote Database Backup system and your application environment

18 Roles of Databases and Hosts in a Remote Database Backup System A Scenario of How the Databases Work Together The following scenario demonstrates how the primary database on a system called Host1 and the secondary database on a system called Host2 work together in response to, or possibly in anticipation of, an interruption on the primary host. In this scenario, the application normally runs against the primary database, with Remote Database Backup transferring audit images to the secondary database. Inquiry programs can be running against the secondary database. Then in response to, or possibly in anticipation of, an interruption on the primary database, you decide that the secondary database should assume responsibility for transaction processing. A designated person at your site, such as a database administrator (DBA), issues a command to tell the secondary database to take over the role of the primary database. Before the takeover command is issued, the primary database, if it is still available, should be brought down. After the takeover command is issued, the DBA transfers all update processing to Host2. When the takeover process completes, Host2 becomes the primary database for all transaction processing. If Host1 is still available, the DBA at the site has the option of running inquiry programs against the copy of the database on Host1. As you can see, the roles of the two databases are reversed and audit images are now transferred from Host2 to Host

19 Configurations of Remote Database Backup Systems Configurations of Remote Database Backup Systems Introduction You can configure the hosts and databases within the Remote Database Backup environment in many different ways. The choices range from the simple to the complex: A simple configuration would be one Remote Database Backup system two hosts with one database on each host. A complex configuration could involve multiple Remote Database Backup systems many hosts and databases configured on several hosts. Although there are many possible configurations, the most typical configurations are described in the following text. One Remote Database Backup System The following figure illustrates a single primary database and a single secondary database configuration. The primary payroll database on one host is backed up by a secondary payroll database on the other host

20 Configurations of Remote Database Backup Systems Reciprocal Backup Hosts for Two Remote Database Backup Systems The following figure illustrates the configuration of two Remote Database Backup systems in which each host acts as a reciprocal backup host for the other. Both hosts support a primary database and a secondary database

21 Configurations of Remote Database Backup Systems Multiple Primary Hosts with a Single Backup Host The following figure illustrates a configuration with multiple primary hosts and a single backup host. One host contains all the secondary databases for primary databases on several other hosts. This configuration illustrates a centralized corporate and division strategy in which three division hosts each contain a primary database that is backed up on the corporate host. The corporate host allows you to inquire against each of the secondary databases. Each primary database on a division host is both inquiry and update capable

22 Configurations of Remote Database Backup Systems Multiple Remote Database Backup Systems with Multiple Backup Hosts The following figure illustrates a configuration with multiple databases on one corporate host and multiple backup databases on several other hosts. The corporate host contains multiple primary databases that are backed up by secondary databases on other hosts. This configuration illustrates three primary databases running on the corporate host. This host allows inquiry against and update to each primary database payroll, accounting, and billing. Each of these databases is backed up by a secondary database on one division host. Each secondary database on a division host allows only inquiry users

23 Configurations of Remote Database Backup Systems Two Remote Database Backup Systems Sharing Primary and Secondary Hosts The following figure illustrates the configuration of two Remote Database Backup systems that share a common primary host and secondary host. The primary payroll and accounting databases on one host are backed up by secondary payroll and accounting databases on another host. The host containing the primary databases can be used for both update and inquiry purposes, while the host containing the secondary databases can be used for inquiry purposes only

24 Basic Remote Database Backup Hardware and Software Requirements Basic Remote Database Backup Hardware and Software Requirements The following table lists the basic hardware and software requirements for the Remote Database Backup system. For additional details on any item of hardware or software, contact your account manager. Hardware/Software Hardware Memory MCP/AS Remote Database Backup product Enterprise Database Server data management software Network Disk Requirement Two enterprise servers. The two systems do not need to be the same model, but extremes should be avoided, for example, pairing servers of widely varying available performance and capacity. Refer to the Enterprise Database Server Getting Started and Installation Guide. The primary and secondary hosts can run on different software release levels. The same software release level must be installed on both the primary and secondary hosts. The same software release level must be installed on both the primary and secondary hosts. Hardware and software sufficient to handle Remote Database Backup traffic and other traffic between the primary and secondary hosts and BNA services. If audit files will be transferred manually only under NSC mode, a network is not required. Enough storage capacity on both hosts to accommodate system software, application software, and your database and audit files. Audited Database Requirement Because Remote Database Backup uses the audit images from the primary database to update the secondary database, any database that is a candidate for Remote Database Backup must be audited. You can use single or duplicate audit files. Compatible Databases Remote Database Backup works with any database that uses the Enterprise Database Server for physical file management

25 Basic Remote Database Backup Hardware and Software Requirements Incompatible Databases Remote Database Backup is not qualified and not supported to work with the Transaction Processing System (TPS). Remote Database Backup also does not work with flat files, for example, KEYEDIO or KEYEDIOII files. Open Distributed Transaction Processing and Remote Database Backup You can use Remote Database Backup with databases that participate in Open Distributed Transaction Processing operations. However, in the event of a takeover, the synchronization between all databases in the Open Distributed Transaction Processing global transaction cannot be guaranteed. Related Information Topics For information about... Refer to... Compatible MCP release levels Configuring a Remote Database Backup system Open Distributed Transaction Processing and Remote Database Backup ClearPath MCP Migration Guide Section 5 Section

26 Audit Trail Synchronization Audit Trail Synchronization Importance You need to decide on the level of audit trail synchronization you want for your Remote Database Backup system. This means answering the question, How closely must the backup database match its source? Or, in Remote Database Backup terms, How closely synchronized should the secondary database audit trail be to the primary database audit trail? Your answer to these questions impacts the Remote Database Backup configuration options you choose and therefore the resources you need to meet your requirements. Modes of Audit Transmission Remote Database Backup provides five specific audit transmission modes that enable you to regulate Whether the transmission of audit images is automatic or manual Whether the transmission of audit images is as individual audit blocks or whole audit files Whether the transmission of audit images can be interrupted (that is, suspended) The degree of audit trail synchronization between the primary and secondary hosts Audit Block Write (ABW) The secondary audit trail is constantly and automatically kept synchronized with the primary database audit trail on a block-by-block basis. The ABW mode enables this close synchronization level by Handling interruptions to audit transmissions through one of two error-handling options Initiating a catch-up process for audit block transfer whenever the usual synchronization level is disrupted When the system detects a need for a Catchup process, you can specify the time synchronization restart interval on the Host screen before the Catchup process begins. Audit File Mirror (AFM) The secondary audit trail is constantly and automatically kept synchronized with the primary database audit trail on a block-by-block basis. The AFM mode enables this close synchronization level by supporting the remote mirrored disk environment and the shared disk feature. The physical mirroring of the audit disk is external to a Remote Database Backup system. At the secondary host, the RDB-agent task monitors audit activity occurring at the primary host. This monitoring cycle also includes re-initiation of Tracker if it is not

27 Audit Trail Synchronization running. As long as the RDBSUPPORT library is active, the RDB-agent task re-initiates Tracker and attempts to monitor audit activity. This monitoring cycle occurs at 20 second intervals unless communication has been disrupted, in which case the interval is increased to 60 seconds. When communication is resumed, the interval is returned to 20 seconds. If the audit transfer mode from the secondary host to he primary host is NSC mode, then the audit monitoring activity at the secondary host cannot be accomplished. Refer to the System Administration Guide and the System Commands Reference Manual for additional information about the shared disk feature. Audit File Switch (AFS), Server Capable (SCA), and Not Server Capable (NSC) The secondary database audit trail can be kept periodically synchronized with the primary database audit trail through Automatic update, audit file by audit file Remote Database Backup enables this synchronization level with the audit file switch (AFS) audit transmission mode. Compatible file transfer products are Native File Transfer (NFT) and FTRapid. If a transmission does not complete, Remote Database Backup automatically retries it at the next audit file switch. Operator-initiated update through a manual transfer of audit files Remote Database Backup allows the operator to choose a level of audit trail synchronization with the following audit transmission modes: Server capable (SCA) mode that can employ either the network or tape to transfer audits Not server capable (NSC) mode that can also employ either the network or tape to transfer audits, but does not perform any Remote Database Backup network-related services such as reporting information from the remote host on the View Remote Auditing Status screen or automatically copying files during the enable operation In the manual method, you transfer all audit images as individual audit files by using whatever means available. For example, you could transfer the files through a physical tape or a network. Remote Database Backup has no knowledge of or control over the transfer of the audit files, and you must inform Remote Database Backup of the presence of the audit files on the secondary host. Table 1 1 briefly describes the five Remote Database Backup audit transmission modes and identifies the degree of audit trail synchronization that you can expect with each mode