Upcoming: Oracle Database 12.1 Support Update for Linux on System z

Upcoming: Oracle Database 12.1 Support Update for Linux on System z

International zseries Oracle SIG Webcast Series The International zseries Oracle Special Interest Group (SIG) is an organization of companies licensed for Oracle on z/linux and/or the z/os operating systems on IBM System z hardware. There are no membership fees or obligations. Communications are done through Oracle mailings, emails, website www.zseriesoraclesig.org and annual user conference. Please: Visit their website at the www.zseriesoraclesig.org and sign up to be on the mailing list. 2

Upcoming Advisor Webcast Schedule Check out Note ID : 740966.1 Select your Product Area Scan through the list of Current Topics Register for the session of your interest Upcoming: Oracle Database 12.1 Support Update for Linux on System z 3

ATTENTION AUDIO Options Option 1: Voice Streaming Audio Broadcast No need to dial in on a telephone Questions can be asked in the WebEx Q&A panel Option 2: Teleconference (Dial In) Requires telephone to dial in Questions can be asked over the phone or in the WebEx Chat Details Conference ID: 11561479 International dial in: +44 (0) 1452 562 665 US Free call: 1866 230 1938 List with national toll free numbers is available in Doc ID: 1148600.1 View anytime during the conference using Communicate > Teleconference > Join Teleconference from your WebEx menu Upcoming: Oracle Database 12.1 Support Update for Linux on System z 4

Oracle Advisor Webcast Oracle Database 12.1 Support Update for Linux on System z Sandra Skehin,Principal Support Engineer, Oracle David Simpson, Oracle Technical Specialist, IBM November 20, 2014 5

Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle. 6

Oracle Advisor Webcast Oracle Database 12.1 Support Update for Linux on System z Sandra Skehin,Principal Support Engineer, Oracle David Simpson, Oracle Technical Specialist, IBM November 20, 2014 7

International zseries Oracle SIG Webcast Series The International zseries Oracle Special Interest Group (SIG) is an organization of companies licensed for Oracle on z/linux and/or the z/os operating systems on IBM System z hardware. There are no membership fees or obligations. Communications are done through Oracle mailings, emails, website www.zseriesoraclesig.org and annual user conference. Please: Visit their website at the www.zseriesoraclesig.org and sign up to be on the mailing list. 8

Objectives To provide an update on the current support status for Oracle Datatabase. To support the zseries Oracle SIG in their request for 12c advice. To provide guidance on security procedures. 9

Agenda 1 2 3 4 Oracle Database 12c System z Support Status Oracle Database 12.1.0.2 In Memory Column Store Oracle Database 12c Security Performance 10

Oracle Database 12.1 Linux on System z OS Info Support Status 11.2.0.4 Terminal Release Premier Support Jan 2015 (EXS fees waived 1 year) 12.1.0.1 Released Jan 2014 12.1.0.2 Patch 17694377 2HCY14 Opatch 12.1.0.1.5 Patch 6880880 Redhat 6 Doc ID 1574413.1 Redhat 6 update 3 Recommend RH 6.4 or later Oracle RPM Checker ora-val-rpm-el6-db-12.1.0.1-1.s390x.rpm Only set ORACLE_BASE Disable ASLR SLES 11 Doc Id 1574414.1 SLES11 SP3 Oracle RPM Checker ora-val-rpm-s11-db-12.1.0.1-1.s390x.rpm Only set ORACLE_BASE 11

Oracle Database 12.1 Support Update for Linux on System z Linux on System z specifics It s Fast Built using PDF New Features less resources EM agent 12.1. enabled OEM Cloud Control 12cR3 or 12cR4 IBM Redbook Experiences with Oracle Database 12c Release 1 on Linux on System z SG248159 http://www.redbooks.ibm.com/abstracts/sg248159.html?open 12

Oracle Database 12.1 Support Update for Linux on System z Key 12.1 New Features 12.1.0.1 Multitenant Database Manage many as one Shared Resources Add on Licence Over 500 New Features for 12.1 Oracle Database New Features Guide 12c Release 1 (12.1) E49322-08 12.1.0.2 In Memory Column Store Goals x 4 Improve Speed of OLTP Speed up ad-hoc queries Simple to implement No changes to existing applications Support for FIPS 140-2 13

12.1.0.2: Dual Format Database Normal Buffer Cache SALES Row Format New In-Memory Format SALES Column Format BOTH row and column formats for same table Simultaneously active and transactionally consistent Analytics & reporting use new in-memory Column format OLTP uses proven row format SALES 14

Oracle In-Memory Columnar Technology Pure In-Memory Columnar SALES Pure in-memory column format Not persistent, and no logging Quick to change data: fast OLTP 2x to 20x compression typical Enabled at table or partition Just active data in-memory 15

Populating : In-Memory Column Store ALTER TABLE sales INMEMORY; ALTER TABLE sales NO INMEMORY; CREATE TABLE customers PARTITION BY LIST (PARTITION p1 INMEMORY, (PARTITION p2 NO INMEMORY); New INMEMORY ATTRIBUTE Following segment types are eligible Tables Partitions Subpartition Materialized views Following segment types not eligible IOTs Hash clusters Out of line LOBs Pure OLTP Features

Populating : In-Memory Column Store ALTER TABLE sales INMEMORY NO INMEMORY (PROD_ID); CREATE TABLE orders (c1 number, c2 varchar(20), c3 number) INMEMORY PRIORITY CRITICAL NO INMEMORY (c1); Possible to populate only certain columns from a table or partition Order in which objects are populated controlled by PRIORITY subclause Critical, high, medium, low Default none (populate on first access) Does not control the speed of population

Populating : In-Memory Column Store CREATE TABLE ORDERS PARTITION BY RANGE (PARTITION p1 INMEMORY NO MEMCOMPRESS PARTITION p2 INMEMORY MEMCOMPRESS FOR DML, PARTITION p3 INMEMORY MEMCOMPRESS FOR QUERY, : PARTITION p200 INMEMORY MEMCOMPRESS FOR CAPACITY ); Different levels FOR DML Use on tables or partitions with very active DML activity FOR QUERY Default mode for most tables FOR CAPACITY For less frequently accessed segments Easy to switch levels as part of ILM strategy

Oracle Compression Advisor And In-Memory Easy way to determine memory requirements Use DBMS_COMPRESSION Applies MEMCOMPRESS to sample set of data from a table Returns estimated compression ratio

OLTP is Slowed Down by Analytic Indexes Insert rate decreases as number of indexes increases # of Fully Cached Indexes (Disk Indexes are much slower) 20

Demonstration 21

Top Articles and Community Links Link to previous zseries Oracle SIG 12c presentations:- www.zseriesoraclesig.org MOS Article: 1574412.1 Getting Started with 12c https://community.oracle.com/thread/3621739 22

Linux on System z Oracle SIG Update November 20, 2014 David Simpson - Oracle Technical Specialist, IBM (simpson.dave@us.ibm.com) Sandra Skehin - Principal Support Engineer, Oracle 2014 IBM Corporation

Copyright and Trademark Information For IBM can be found at http://www.ibm.com/legal/us/en/copytrade.shtml For Oracle can be found at http://www.oracle.com/us/legal/index.html 2014 IBM Corporation

Oracle 12c Security with Linux on System z Layers of Security is Key! 1) Keep up to date with Oracle and Linux security patches. 2) FIPS 140-2 Government Compliances - Statement of Direction from Oracle s Advanced Security Team 3) Oracle Encryption (SSL, TDE) 4) Data Redaction new in 12c 25 2014 IBM Corporation

Oracle October 2014 PSU s and BASH Security Patches Critical Patch Update Oct 2014 (contains 154 new security fixes) p19121550_121010_linux-zser.zip (DB PSU) p19392451_121010_linux-zser.zip (GI PSU) p6880880_121010_linux-zser.zip (Opatch) p19380115_112040_linux-zser.zip (11.2.0.4.4 Grid Patch) Bash Shell Code Injection Vulnerability Command to test -> env x='() { :;}; echo vulnerable' bash -c "echo this is a test vulnerable this is a test Apply bash rpm s -> bash-3.2-147.22.1.s390x.rpm (SLES 11 SP3) -> bash-4.1.2-29.el6.s390x.rpm (Red Hat 6.5) 26 2014 IBM Corporation

Oracle FIPS 140-2 Security Compliance NIST US Government Organization for Security Compliance certifications Statement of Direction from Oracle s Advanced Security Team Included in 12.1.0.2 release 11.2.0.4 -> Patch 19207156: MES BUNDLE ON TOP OF RDBMS 11.2.0.4.2 needed for 11gR2 Activated with the following Oracle parameter: ALTER SYSTEM SET DBFIPS_140 = TRUE; h 27 2014 IBM Corporation

Oracle 12c Advanced Security Encrypting Data SSL - Encrypt traffic between Application servers and Database Servers Transparent Data Encryption (TDE) Encrypt entire tablesspaces New in 12c Oracle s Transparent Data Encryption TDE now works with U.S. FIPS 140-2 mode Managing Oracle Wallets is easier with Storage in ASM, automatic backup, AES256 wallet 28 2014 IBM Corporation

Utilizing Cryptographic functions with Linux on System z Oracle Advanced Security on System z Can leverage hardware crypto module for SSL, https & java traffic network traffic TDE is currently only supported to either an ASM or file system. Use icastats to verify HW accelerator is being utilized when configured. 29 2014 IBM Corporation

Oracle 12c Advanced Security Data Redaction Support staff can see sensitive data SQL> EMPNO ENAME SALARY HIRE_DATE EMAIL_ID ---------- -------- ---------- --------- ------------------------------ 1 John 2010 12-NOV-14 John@us.ibm.com 2 Joe 1580 10-NOV-14 Joe@us.ibm.com 3 Dave 1490 09-NOV-14 simpson.dave@us.ibm.com Setup a redaction policy on Salary column SQL> begin dbms_redact.add_policy ( object_schema=>user, object_name=>'emp', policy_name=>'emp_redact', column_name=>'salary', function_type=>dbms_redact.full, expression=> q' sys_context('userenv','current_user')!= 'HR' ' ); end; Sensitive data masked 30 SQL> select * from hr.emp; EMPNO ENAME SALARY HIRE_DATE EMAIL_ID ---------- -------- ---------- --------- ------------------------------ 1 John 0 12-NOV-14 John@us.ibm.com 2 Joe 0 10-NOV-14 Joe@us.ibm.com 3 Dave 0 09-NOV-14 simpson.dave@us.ibm.com 2014 IBM Corporation

Oracle 12c Advanced Security Data Redaction 12c Data Redaction is transparent for Applications as well! 31 2014 IBM Corporation

Oracle System z Performance Update Recent Support Issues: 1) Oracle Data Pump parallelization. 2) Node evictions during dbca creation 32 2014 IBM Corporation

Oracle DataPump EXPORT lessons learned Customer environment: Oracle 11.2.0.4 Two Node RAC 1.4 TB Database size Multiple lob tablespaces RHEL 6.4 Database export using datapump with parallel=6 Exported dump size was around 370 GB Exported 19 files of each around 20 GB Export job took 34 hours to complete Why so many hours??? 33 2014 IBM Corporation

Oracle DataPump EXPORT lessons learned Actions performed: Changed the export file location from nfs location to local lvm file system (34 hours to 31 hours) Changed storage from SAN/FCP to ECKD (31 to 29 hours) Opened Oracle SR Enabled 10046 trace Parallel Capabilities of Oracle Data Pump ( Doc ID 365459.1 ) Applied patch Patch 16038089 Conclusions: After analyzing trace file outputs it was determined: The Datapump PARALLEL parameter needed to be tuned. Changed PARALLEL=8 and the export job completed in 5 hours!!! In doing export process tune the parallelism according to number of files created, number of virtual CPUs and the cpu utilization of the Linux guest. 34 2014 IBM Corporation

Node Evictions During DBCA Environment: Oracle 12c, four node RAC (16GB Linux guests each). Sporadic node evictions observed when RAC dbca was ran. Why the node Evictions? 35 2014 IBM Corporation

Oracle DataPump EXPORT lessons learned Actions performed: Team suspected memory issue -> increased virtual Linux guest sizes from 16GB -> 32GB ocssd.trc files showed: CSSD:3840645392: clssnmpollingthread: node xxxx (2) at 90% heartbeat fatal, removal in 2.542 seconds Engaged IBM / Oracle System z support teams VM paging space was observed in the 90-100% range. Resolution: Added additional page space on z/vm. This helped reduce usage as well as give more paths to the paging subsystem. Reduced virtual memory of Linux guests to what was needed. Shutdown and logged off any non essential Linux systems to help reduce page space. Web based z/vm monitoring setup for the DBA s to monitor paging. Re-enforced plans for a z/vm 5.4 -> 6.3 upgrade with improved memory management features. 36 2014 IBM Corporation

Summary What we covered today 12c New Features and prerequisites. Update on the current support Status for Oracle Database. Guidance on security procedures. 37

International zseries Oracle SIG Overview The International zseries Oracle Special Interest Group (SIG) is an organization of companies and individuals licensed for Oracle on IBM System z Series hardware. Mike Zechman User Group SIG President No membership fees or obligations to become a member. Visit SIG website at the www.zseriesoraclesig.org and sign up for the mailing list. Planning next SIG user conference (28 th Annual) as well as future webinars. Topics of interest? Want to present? Conference Preference? send us an email - contact@zseriesoraclesig.org Next Conference When: Next Conference Location: Late April or Early May 2015?? New York or Washington DC?? 38 38 2014 IBM Corporation

Q & A To ask a question on the phone line, select *1 on your phone. To ask a question online, use the Q&A area at the top. Your question will be read aloud in the order received. Question can also be asked on the My Oracle Support Communities 39

Question and Answer Instructions Q&A panel 2 Ask: ALL PANELLIST leave default! 3 Send your question 1 type your question here

Oracle Advisor Webcast Program Locating Current Schedule & Archived Recordings From Note ID : 740966.1 drill down to your area of interest Select your Product Area 41

Oracle Advisor Webcast Program Locating Current Schedule & Archived Recordings For DB Note: Click column headings to sort Hover on Webcast Title for more information Recordings available within 48 hours Advisor Webcast Questions on a webcast or ask questions via the Questions? link 42

Learn More Available References and Resources to Get Proactive My Oracle Support Essentials Webcast Series https://support. oracle.com Doc ID: 553747.1 My Oracle Support Blog https://blogs.oracle.com/supportportal/ Get Proactive in My Oracle Support https://support. oracle.com Doc ID: 432.1 Ask the Get Proactive Team get-proactive_ww@oracle.com 43

Accessing My Oracle Support Community 1. Via My Oracle Support -> Community Tab 2. Directly https://communities.oracle.com 44

Where Can I Get Slides and Recording From This Session? 1. PDF link and recording link from Doc ID 740966.1 (within 48 hours) 2. Oracle Database > Rdb on Open VMS, IBM zseries and Oracle on OpenVMS > Content Tab > Documents (within 24 hours) 45

Session Related Community Links The following thread will have a copy of the presentation and can be used for additional questions or discussions on this topic. https://community.oracle.com/thread/ 3621739 46

THANK YOU 47