Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) •...

69
Oracle Maximum Availability Architecture (MAA) Blueprints for reduced planned and unplanned downtime for the On-Premises, Exadata-based or Cloud-base Oracle Database May, 2020

Transcript of Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) •...

Page 1: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Oracle Maximum Availability Architecture (MAA)Blueprints for reduced planned and unplanned downtime for the On-Premises, Exadata-based or Cloud-base Oracle Database

May, 2020

Page 2: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Safe harbor statement

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, timing, and pricing of any features or functionality described for Oracle’s products may change and remains at the sole discretion of Oracle Corporation.

2 Copyright © 2020, Oracle and/or its affiliates | Confidential: Public

Page 3: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Program Agenda

Why Availability is Important

MAA Blueprint for Oracle On-Premise

Summary and Resources

1

2

3

3 Copyright © 2020, Oracle and/or its affiliates | Confidential: Public

Page 4: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Maximum Availability Architecture (MAA)

Why Availability is Important

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public4

Page 5: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

5

MAA Solutions: On-Premises to Cloud

On-Premises

On-Premises Exadata and Recovery Appliance

DBCS/ExaCS/ExaCC

Autonomous Database

MAA Reference Architectures and Best Practices

MAA integrated Engineered Systems(config practices, exachk, lowest brownouts, HA QoS, data protection)

Adding MAA Config and Life Cycle Operations, Shifting Admin

Ownership to Oracle with MAA SLAs

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public

Page 6: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

40%

of businesses fail to reopen after experiencing a disaster

Downtime is Prevalent and Businesses are at Risk

75%

of small to medium sized business don’t have a disaster recovery plan in place

91%

of companies have experienced unplanned data center outages in the past 24 months

7

Source: https://informationprotected.com/study-40-percent-businesses-fail-reopen-disaster/

Source: http://gazette.com/7-shocking-disaster-recovery-stats-for-small-business-owners/article/1590436

Source: https://www.healthitoutcomes.com/doc/beware-the-high-cost-of-data-center-outages-0001

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public6

Page 7: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Oracle Maximum Availability Architecture (MAA)

Applying 30+ years of lessons learned in solving toughest HA problems around the worldSolutions to reduce downtime for planned & unplanned outages for Enterprise customers with most demanding workloads and requirementsService level oriented MAA reference architecturesBooks, white papers, blueprints MAA integrated Engineered SystemsContinuous feedback into products

High Availability, Disaster Recovery and Data Protection

Production Copy

DatabaseReplication

R

https://oracle.com/goto/maa

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public7

Page 8: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Meet Downtime (RTO) and Data Loss (RPO) SLAsMAA Reference Architectures

Dow

ntim

e &

Dat

a Lo

ssBRONZE Single Instance + Backup Dev, Test, Prod

SILVER HA Clustering + Backup Prod/Departmental

GOLD HA Clustering + Disaster Recovery +

Backup

Mission Critical

PLATINUM Zero Data Loss & Zero Downtime Extreme Critical

MAA Reference Architectures Topology Suitable Databases

Addresses SLAs for Data Loss and Downtime during Planned & Unplanned Outages

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public8

Page 9: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Oracle MAA – Proven at Thousands of Customers

9 Copyright © 2020, Oracle and/or its affiliates | Confidential: Public

Page 10: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Oracle Maximum Availability Architecture (MAA)

Reference Architecture

s

Deployment Choices

HA Features,Configurations &

OperationalPractices

Customer Insights & Expert

Recommendations

Production Site Replicated Site

Platinum

Gold

Silver

Bronze

Replication

Data Protection

Flashback RMAN + ZDLRA

Continuous Availability

Application Continuity

Global Data Services

Generic Systems

Engineered Systems

DBCSExaCS/ExaCC

Autonomous DB

Active Replication

Active Data Guard GoldenGate

Scale Out

RAC ShardingASM

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public10

Page 11: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Designed to Address the Complete Range of Business RequirementsOracle MAA

Common Platform – On Premises, Cloud, and Hybrid CloudBig Differentiator

On Premises On Cloud

OracleDatabase

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public11

Page 12: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Configuration, Monitoring, Alerting and Management Oracle Enterprise Manager Cloud Control (OEM)

• Data Guard / Active Data Guard• Multitenant• Zero Data Loss Recovery Appliance (ZDLRA)• Recovery Manager (RMAN)• Real Application Clusters (RAC)• Edition Based Redefinition (EBR)• Oracle Sharding• Oracle GoldenGate (OGG) – Monitoring and Alerting Only

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public12

Page 13: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Maximum Availability Architecture (MAA)

MAA Blueprint for Oracle On-Premise

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public13

Page 14: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Reference Architectures – Level Set

• Blueprints developed and certified by Oracle• Validated by 10,000s of Oracle Customers • Capabilities carry forward as you progress from one tier to the next• Achieving stated service levels requires:

• Utilization of prescribed features and capabilities• Utilization of prescribed configuration and operational best practices• Due diligence during pre-production testing• Due diligence on all life cycle operations• Maintaining recommended patch levels and versions

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public14

Page 15: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Outage Matrix

SingleInstance Database

Primary Availability Domain Secondary Availability Domain

Local Backup

Replicated Backups

Dev, Test, Prod - Single Instance or Multitenant Database with Backups

• Single Instance with ClusterwareRestart

• Advanced backup/restore with RMAN

• Optional ZDLRA with incremental forever and near zero RPO

• Storage redundancy and validation with ASM

• Multitenant Database/Resource Management with PDB features

• Online Maintenance

• Some corruption protection

• Flashback technologies

BRONZE

Unplanned Outage RTO / RPO Service Level Objectives (f1)

Recoverable node or instance failure Minutes (f2)

Disasters: corruptions and site failures Hours to days. RPO since last backup or near zero with ZDLRA

Planned Maintenance

Software/hardware updates Minutes (f2)

Major database upgrade Minutes to hour

f1 : RPO=0 unless explicitly specifiedf2 : Exadata systems has RAC but Bronze Exadata configuration with Single Instance database running with Oracle Clusterware has highest consolidation density to reduce costs

15Copyright © 2020, Oracle and/or its affiliates | Confidential: Public15

Page 16: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Oracle Clusterware for Automatic Restart

1. Oracle Clusterware is available for all Oracle Databases2. Enables HA capabilities and resource management:

• Automatic Restart of database instances, listeners and other resources• Fleet patching• Service management including restarting service after failure• Automatic Storage Management (ASM) for HA, data protection and ease of use

• Trade off: additional software maintenance for Grid Infrastructure

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public16

Page 17: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Architecture for consolidating databases and simplifying operationsOracle Multitenant

GL OE

AP • Self-contained PDB for each application

• Portability (via pluggability)• Rapid provisioning (via clones)• Applications run unchanged• PDB upgrades via plug/unplug

• Common operations performed at CDB level

• Manage many as one (upgrade, backups, HA)

• Granular control when appropriate• Simple DR

• Shared memory and background processes

• MAA and Multitenant• Solutions for planned / unplanned

outages

PDBs

Root

CDB

MAA Best Practice Paper: Database Consolidation with Oracle Multitenant

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public17

Page 18: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Pluggable Database Backup, Restore and Recovery

• Backup and restore pluggable database …• Create Restore Point ‘before_event’ for pluggable database…

• Normal or Guaranteed Restore Point• Clean Restore Point

• Flashback Pluggable Database• Complete ZDLRA support

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public18

Page 19: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Database Integrated Backup and RecoveryOracle Recovery Manager - RMAN

19

• Unique knowledge of database file formats and recovery procedures• Oracle block validation• Online block-level recovery• Native encryption, compression• Table/partition-level recovery• Oracle Multitenant support

• Tape and cloud backups• Unified Management

RMAN

Data FilesFast Recovery

Area (FRA) Cloud

Tape

Disk Tape

Copyright © 2019 Oracle and/or its affiliates.

Page 20: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

RMAN Enhancements for Table Recovery

1) Check Auxiliary Instance Disk Space • Automated Table Recovery requires disk space for

SYSTEM, SYSAUX, UNDO and User Tablespace(s)• Pre-check for space in the Auxiliary Instance disk

space to avoid failures in the middle of the process

2) Recovery Across Schema• Enables Table level recovery under different schema• Provide OLD: NEW Schema(s) under REMAP TABLE

PrimaryInstance

RMAN Backups

RECOVER TABLE hr.department, sales.productUNTIL SCN 1234 AUXILIARY DESTINATION ’/tmp/’ REMAP TABLE hr.department:dev.testdepartment, sales.product:mkt.newproduct;

AuxiliaryInstance Space

RMAN Restore

Data PumpImport

Different Schema

1

2

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public20

Page 21: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Recovery Appliance Recommended

CloudStorage

Remote Replica

Tape

End-to-End Oracle Recovery ValidationNear Zero Data Loss for DR

Day 1 Full

a

Day 2 Changes

Day N Changes

Virtual Full Backup

EM Real-Time Protection Status

& Space Monitoring

Day 1 StateDay 2 StateDay N State

Databases

Transactional Block Changes

No More Full Backups,Incremental Forever

Oracle DB 12c-19c on Any Platform

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public21

Page 22: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

MAA Score Card• MAA architectural

readiness and configuration practices

Database and Exadata Health Checks

Assessment Report• Health Score,

Summary, Findings

Findings & Recommendations

• How to Solve the problem?

Note: Automated Orachk/Exachk Healthcheck MOS 107954.1 updated frequentlyCopyright © 2020, Oracle and/or its affiliates | Confidential: Public22

Page 23: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Online Operations

DBMS_REDEFINITION allows you to reorganize and redefine tables online• Add/drop/rename/reorder columns• Switch physical storage structures• Reorganize & transform data while online

Additional Benefits of using DBMS_REDEFINITION• Fault Tolerant (resume at point of failure) and track changes to enable fast rollback to prior

definition• Entire redefinition process runs without acquiring Exclusive DDL lock• Monitor reorganization using V$online_redef

Online Redefinition Improvements

Source Table

Update Tracking

Transform CopyTable

TransformUpdates

Result Table

Continuous Queries & Updates

Store Updates

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public23

Page 24: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Online Operations

11.2 & Prior Create index online, rebuild index online, rebuild index partition onlineAdd Column, Add Constraint enable novalidate

12.1 Online move partitionDrop index onlineSet unused column online, alter column visible/invisible, alter index unusable online, alter index visible/invisible alter index parallel/noparallel

12.2 Alter table move online for non-partitioned tablesAlter table from non-partitioned to partitioned onlineAlter table split partition onlineCreate table for exchange (usable for online partition exchange)Move/merge/split partition maintenance operations can now do data filtering

18.1, 19c Alter table modify partitioned table to a different partitioning method (e.g., hash to range)Alter table merge partition/sub-partition online

All Partition Maintenance Operations are now Online

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public24

Page 25: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Flashback Technologies

• Fast point-in-time recovery (PITR) without expensive restore operation

• Error investigation • View data as of previous point in time

• Error correction• Back-out a transaction• Incorrect table updates• Rewind the entire database

Rewind Button for Oracle Databases

@T2 Col-1 Col-.. Col-n

Row-1 tom 1234 vp

Row-2 ben 8834 vp

Row-3 charlie 9837 vp

Row-n tom 8793 vp

@T1 Col-1 Col-.. Col-n

Row-1 abby 1234 officer

Row-2 ben 8834 mgr

Row-3 Charlie 9837 officer

Row-n tom 8793 vp Wrong Update

Flashback Table

DB @ T1 DB @ T2

Batch Update

Flashback Database

Wrong Update

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public25

Page 26: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

f1: RPO=0 unless explicitly specifiedf2: To achieve zero downtime or lowest impact, apply application checklist best practices

Prod/Departmental

SILVER

Bronze +• Real Application Clustering (RAC)• Application Continuity

Outage Matrix

RAC Database

Primary Availability Domain Secondary Availability Domain

Local Backup

Replicated Backups

Checklist found in MAA OTN https://www.oracle.com/technetwork/database/options/clustering/applicationcontinuity/adb-continuousavailability-5169724.pdf

Unplanned Outage RTO/RPO Service Level Objectives(f1)

Recoverable node or instance failure Single digit seconds (f2)

Disasters: corruptions and site failures Hours to days. RPO since last backup or near zero with ZDLRA

Planned Maintenance

Software/Hardware updates Zero (f2)

Major database upgrade Minutes to hour

26Copyright © 2020, Oracle and/or its affiliates | Confidential: Public26

Page 27: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Oracle Real Application Clusters (Oracle RAC)

• Utilizes two or more instances of an Oracle Database concurrently

• Very Scalable• All instances active; Add capacity online; Ideal for

database consolidation

• Highly Available• Auto-failover of services to an already running

instance; Outage is transparent to user, in-flight transactions succeed; Zero downtime rolling maintenance

Database Tier

ApplicationTier

Database Services

Primary Database

Node Failure, Instance Failure, Rolling Maintenance

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public27

Page 28: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Application does not see errors during outages

Transparent Application Continuity (TAC)

• Uses Application Continuity and Oracle Real Application Clusters

• Transparently tracks and records session information in case there is a failure

• Built inside of the database, so it works without any application changes

• Rebuilds session state and replays in-flight transactions upon unplanned failure

• Planned maintenance can be handled by TAC to drain sessions from one or more nodes

• Adapts as applications change: protected for the future

Request

Errors/Timeouts hidden

Transparent Application Continuity

28Copyright © 2020, Oracle and/or its affiliates | Confidential: Public28

Page 29: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Planned Maintenance

3

1

4

6

5

Planned Maintenance (without Outages!):1. Database Service is relocated or stopped

2. Service starts on another RAC instance

3. Sessions connected to the service are drained

4. New sessions connect to Service on another instance

5. Results from Database Request returned to user

6. Maintenance activities can start on first node (rolling)2

RAC Cluster29

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public29

Page 30: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Unplanned Outages, without Impact

Primary

1 2

3

Outage or Interruption at Database:

1. Database Request interrupted by an Outage or timeout

2. Session reconnects to the RAC Cluster and

3. Database Request replays automatically

4. Result from Database Request returned to user

4

30Copyright © 2020, Oracle and/or its affiliates | Confidential: Public30

Page 31: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Checklist for Achieving Zero Application Downtime

1. Use Oracle Clusterware Service (never use default service)2. Use Recommended Connection String3. Configure FAN for Connection Pool4. Drain your service 5. Use Application Continuity or Transparent Application Continuity

1) MAA Whitepaper: Application Checklist for Continuous Service for MAA Solutions2) Using RHPhelper to Minimize Downtime During Planned Maintenance on Exadata

(MOS 2385790.1)3. Fleet Patch and Provisioning incorporates MAA practices

31Copyright © 2020, Oracle and/or its affiliates | Confidential: Public31

Page 32: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

f1: RPO=0 unless explicitly specifiedf2: To achieve zero downtime or lowest impact, apply application checklist best practices

Outage Matrix

Primary Region Secondary Region

Local backup

Remote StandbyPrimaryLocal

StandbyLocal

backup

AD2 AD1

Mission Critical

Silver +• Active Data Guard

• Comprehensive Data ProtectionMAA Architecture: • At least one standby required

across AD or region. • Primary in one data center(or AD)

replicated to a Standby in another data center

• Active Data Guard Fast-Start Failover (FSFO)

• Local backups on both primary and standby

GOLD DG FSFO

Unplanned Outage RTO/RPO Service Level Objectives (f1)

Recoverable node or instance failure Single digit seconds (f2)

Disasters: corruptions and site failures Seconds to 2 minutes. RPO zero or seconds

Planned Maintenance

Software/Hardware updates Zero (f2)

Major database upgrade Less than 30 seconds

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public32

Page 33: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Storage Remote Mirroring Architecture

Generic - Must Transmit Writes to All Files …. INCLUDING CORRUPTED BLOCKS OR BAD DATA

Oracle Instance (in memory)

Primary Database Mirrored Volumes

SYNC or ASYNCblock replication

• Zero Oracle validation• 7x network volume• 27x network i/o

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public33

Page 34: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Inadequate isolation, zero application-level validationData Guard Addresses Shortcomings of Storage Replication

“…when something happens in the I/O stack and a database write is malformed Symmetrix A happily replicates the faulty data to site B and the corruption goes undetected”

EMC BLOG with Integrity

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public34

Page 35: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Capability Physical Block Corruption Logical Block CorruptionDbverify, Analyze Physical block checks Logical checks for intra-block and

inter-object consistency

RMAN, ASM Physical block checks Intra-block logical checks

Active Data Guard

• Continuous physical block checking at standby• Strong isolation to prevent single point of failure• Automatic repair of physical corruptions• Automatic database failover (option for lost writes)

• Detect lost write corruption, auto shutdown and failover

• Intra-block logical checks at standby

Database In-memory block and redo checksum In-memory intra-block checks, shadow lost write protection

ASM Automatic corruption detection and repair using extent pairs

Exadata HARD checks on write, automatic disk scrub and repair HARD checks on write

Gold – Comprehensive Data ProtectionOracle Data Protection

Run

tim

eM

anua

l

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public35

Page 36: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Active Data Guard Overview

PrimaryOpen Read-Write

Standby Open Read-Only

Zero Data Loss at any Distance

Automatic Block Repair

Offload read only or read mostly workloads to the

standby database

• Synchronous zero data loss replication

• Database rolling upgrade to reduce downtime for planned maintenance

• Automatic failover for High Availability

DML Redirection

Multi-instance Redo Apply for RAC

(In Memory supported)

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public36

Page 37: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Primary DatabaseFar Sync Instance

Active Standby Database• Oracle control file and log files• No database files• No media recovery• Offload transport compression and/or

encryption

• Zero data loss failover target• Database open read-only• Continuous Oracle validation• Manual or automatic failover

SYNCLimited distance

ASYNCAny distance

Redo compressed over WAN

Zero Data Loss Protection at Any Distance

Active Data Guard Far Sync

• Production copy

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public37

Page 38: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Unplanned Outages, without Impact expanded to the Standby

Primary Active Data Guard Standby

1 2

3

Outage or Interruption at Database:

1. Database Request interrupted by an Outage or timeout

2. Session reconnects to the RAC Cluster (or Standby) and

3. Database Request replays automatically

4. Result from Database Request returned to user

4

2

3

38Copyright © 2020, Oracle and/or its affiliates | Confidential: Public38

Page 39: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Extend Footprint of ADG Applications

• DML Re-direction is automatically performed from an Active Data Guard standby to the primary (ACID uncompromised)

• New parameter ADG_REDIRECT_DML controls DML Redirection• New ADG_REDIRECT_DML and ADG_REDIRECT_PLSQL

• “Read-Mostly, Occasional Updates” applications

supported for Oracle Database 19c

Support for DML Re-direction

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public39

Page 40: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Preserve Buffer Cache During Role Change

Read/Write

Read/Write Read

Active Data GuardStandby

PrimaryFailed Primary

Primary

The database buffer cache state is preserved on an ADG standby during a role change.

Automatically enabled• Configure services so that users can stay

connected on a service that is valid in both PHYSICAL_STANDBY and PRIMARY roles.

Supported versions:• Oracle Database 18c – Single Instance• Oracle Database 19c – Oracle RAC Support

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public40

Page 41: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Lower Latency Active Data Guard Standby DatabasesMulti-Instance Redo Apply Performance

190 380 7401480700

1400

2752

5000

0

1000

2000

3000

4000

5000

6000

7000

1 Instance 2 Instances 4 Instances 8 Instances

Batch

OLTP

• Utilizes all RAC nodes on the Standby database to parallelize recovery• OLTP workloads on Exadata show great scalability

StandbyApplyRate

MB/sec

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public41

Page 42: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Database Rolling Upgrade to 19c

Database Rolling Upgrade with DBMS_ROLLING• Pre-checks and early problem detection• Fault tolerant, resumable and rollback capabilities• Three Role Transition Steps: Start, Switchover, Finish• Potential Maintenance Window: Hours • Potential Database and Application Downtime: Seconds

Automated Database Upgrades using Oracle Active Data Guard and DBMS_ROLLING

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public42

Page 43: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Architecture for consolidating databases and simplifying operationsOracle Multitenant

GL OE

AP Self-contained PDB for each application• Portability (via pluggability)• Rapid provisioning (via clones)• Applications run unchanged• PDB upgrades via plug/unplug

Shared memory and background processes• More applications per server

Common operations performed at CDB level• Manage many as one (upgrade, backups,

HA)• Granular control• Simple DR

PDBs

Root

CDB

MAA and Multitenant• Solutions for planned / unplanned

outagesCopyright © 2020, Oracle and/or its affiliates | Confidential: Public43

Page 44: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

PDB Failover: Normal Runtime

PDB1 PDB2CDB 1

Read-WriteCDB 1StandbyRead- OnlyData Guard

CDB 2Read-Write

PDB4

PDB2 PDB3PDB1 PDB3

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public44

Page 45: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Unplug/plug PDB2 from CDB1 standby to CDB2 and failover application connectionsPDB Failover after PDB 2 Outage

PDB1

CDB 1Read-Write

CDB 1StandbyRead- OnlyData Guard

CDB 2Read-Write

PDB4

PDB2PDB1 PDB2 PDB3 PDB3

PDB2

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public45

Page 46: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Multitenant “Gold” MAA Strategy

Unplanned Outages Key Features for Solution RTO RPO

Recoverable node or instance failure Real Application Cluster (RAC)Application Continuity (AC/TAC)

Secs Zero

Disasters: corruptions and site failures Active Data Guard Fast-Start Failover

< 2 mins Zero or Secs

PDB unrecoverable failure or “sick” PDB PDB Failover (unplug/plug)Another target CDB on the same cluster required (MOS 2088201.1)

< 2 mins Zero or Secs

Planned Maintenance Solution RTO

Software and hardware updates RAC, AC or TAC Zero

Major database upgrade Active Data Guard DBMS_ROLLING Secs

Migration to remote CDB PDB Relocate Mins

Migration to remote CDB (logical migration) Data Pump and GoldenGate Potentially Zero

Migration plus upgrade PDB Relocate + Upgrade Mins

Updated MAA Best Practices Papers: Best Practices For Database Consolidation On Oracle Exadata Database Machine

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public46

Page 47: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Refreshable PDB SwitchoverPer-PDB replica with only two CDBs to manage!

Server1

CDB1

CDB2

Server2

1. create pluggable database Red;4. create pluggable database Brown;6. create pluggable database Grey

from Grey@CDB2_Linkrefresh mode every 2 minutes;

2. create pluggable database Redfrom Red@CDB1_Linkrefresh mode every 2 minutes;

3. create pluggable database Gold;5. create pluggable database Grey;

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public47

Page 48: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Refreshable PDB SwitchoverPlanned switchover

Server1

CDB1

CDB2

Server2

1. alter pluggable database Greyrefresh mode every 2 minutesfrom Grey@dblink switchover;

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public48

Page 49: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Refreshable PDB SwitchoverUnplanned switchover

Server1

CDB1

CDB2

Server2 1. alter pluggable database Greyrefresh;

2. alter pluggable database Greyrefresh mode none;

3. alter pluggable database Greyopen read write;

Does not interoperate with Data Guard Fast-Start Failover, auto-block repair, DB rolling upgrade so NOT part of Gold MAA

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public49

Page 50: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

f1: RPO=0 unless explicitly specified f2: To achieve zero downtime or lowest impact, apply application checklist best practices f3: Application failover is custom or with Global Data Services

Gold +• GoldenGate Active/Active

Replication• Optional Sharding & Editions Based

Redefinition MAA Architecture: • Each GoldenGate “primary” replica

protected by Exadata, RAC and Active Data Guard

• Primary in one data center (or AD) replicated to another Primary in remote data center (or AD)

• Oracle GG & Editions Based Redefinition for zero downtime application upgrade

• Sharding for scalability and fault isolation

• Local backups on both sites• Achieve zero downtime through

custom failover to GG replica

Extreme Critical

PLATINUM Primary Region Secondary Region

Local backup

Local backup

AD2 AD1

GG Replication

AD1 AD2

Standby StandbyPrimary Primary

Outage MatrixUnplanned Outage RTO/RPO Service Level Objectives

(f1)

Recoverable node or instance failure Zero or single digit seconds (f2/f3)

Disasters including corruptions and site failures Zero (f3)

Planned Maintenance

Most common software/hardware updates Zero (f2)

Major database upgrade, application upgrade Zero (f3)

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public50

Page 51: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Use Edition-based Redefinition Use Oracle Sharding

GoldenGate plus 2 Optional Approaches to Further Protect Your Applications

Use Oracle Golden GateRequired Optional Alternative

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public51

Page 52: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

AlternativeUse Oracle Sharding

Optional

Use Edition-based Redefinition

GoldenGate plus 2 Optional Approaches to Further Protect Your Applications

Use Oracle Golden GateRequired

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public52

Page 53: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Oracle GoldenGate Microservices Architecture

SourceOracle & Non-OracleDatabase(s)

TargetOracle & Non-Oracle

Database(s)

Capture: committed transactions are captured (and can be filtered) as they occur by reading the transaction logs.

Trail: stages and queues data for routing.

Distribution Server/Receiver: distributes data for routing to target(s).

Route: data is compressed, encrypted for routing to target(s).

Capture

Delivery

TrailFiles Dist.

Service

TrailFiles

Delivery

Capture

Bi-directional

LAN / WAN / InternetOver TCP/IP

TrailFiles

TrailFiles

Delivery: applies data with transaction integrity.

Dist. Service

Receiver Service

Receiver Service

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public53

Page 54: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Key GoldenGate Improvements Simplify Platinum

1. GoldenGate Hub simplifies migration and administration by offloading work from source and target

• New GoldenGate cloud market place automates GG hub deployment• Cross endianness capture enables cross platform migration• Upcoming Zero Downtime Migration integration with GoldenGate

2. GoldenGate Microservices simplifies administration and management

Oracle Database Migration with an Oracle GoldenGate Hub Configuration

Oracle GoldenGate Microservices Architecture with Oracle Real Application Clusters Configuration Best Practices

Future: Zero Downtime Migrationwww.oracle.com/goto/zdm

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public54

Page 55: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Oracle GoldenGate

• Transparent Role Transitions in Data Guard Configurations• No manual intervention required with FSFO and DG Broker

• Configuration makes use of:• Oracle Grid Infrastructure Bundled Agent (XAG)• DBFS or ACFS for shared GoldenGate files (trails and checkpoint files)• Role based services• Integrated Extract (with HANDLEDLFAILOVER option for ASYNC DG)• Microservices Architecture for simpler administration

MAA Best Practices

Updated: MAA Best Practice Paper: Transparent Role

Transitions with Data Guard and Oracle GoldenGate

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public55

Page 56: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Data Center Architecture & Requirements

• A minimum of 2 Regions for Disaster Recovery Failover• Region is a localized geographic area• West Coast NAS – Primary example• East Coast NAS – Secondary example

• Each Region should have a minimum of 2 Availability Domains (AD)

• Availability Domain Characteristics• AD’s are isolated from each other & fault

tolerant• AD’s do not share infrastructure such as power,

cooling or AD Network• A failure of one AD does not effect other AD’s.• AD’s within a Region are connected via high

speed network within same geographical area.

AD1 AD2

Primary Region – West NAS

AD1 AD2

Secondary Region – East NAS

High Speed with < 1ms Latency

56Copyright © 2020, Oracle and/or its affiliates | Confidential: Public56

Page 57: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Sample Deployment

Observer

Primary Database Standby Database

ADG Redo Transport(SYNC or ASYNC)

Integrated Extract

LogMiningServer

Trail and other OGG FilesIn DBFS

Redo Transport

OCI Connection

File I/OWarehouse

BidirectionalGoldenGate Replication

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public57

Page 58: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Sample Deployment – Post Role Transition

Observer

(OLD) Primary Database (NEW) Primary Database

ADG Redo Transport(SYNC or ASYNC)

Integrated Extract

LogMiningServer

Trail/Checkpoint/BR FilesIn DBFS

LogMiningServer

Warehouse

BidirectionalGoldenGate Replication

Redo Transport

OCI Connection

File I/O

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public58

Page 59: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

AlternativeUse Oracle Sharding

Optional

Use Edition-based Redefinition

GoldenGate plus 2 Optional Approaches to Further Protect Your Applications

Use Oracle Golden GateRequired

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public59

Page 60: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Edition-Based Redefinition

• Enables application upgrades to be performed online• Code changes installed in the privacy of a new edition• Data changes are made safely by writing only to new columns or new tables

not seen by the old edition• An editioning view exposes a different projection of a table into each

edition to allow each to see just its own columns• A cross-edition trigger propagates data changes made by the old edition

into the new edition’s columns, or (in hot-rollover) vice-versa

Online Application Upgrade

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public60

Page 61: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

AlternativeUse Oracle Sharding

Optional

Use Edition-based Redefinition

GoldenGate plus 2 Optional Approaches to Further Protect Your Applications

Use Oracle Golden GateRequired

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public61

Page 62: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Alternate Platinum Option: ShardingHighly scalable, fault tolerant architecture for Internet Applications

• Custom Built Application optimized to use shard keys

• Horizontal partitioning of data across independent databases (shards)– Each shard holds a subset of the data– Can be single-node or RAC or PDB– Replicated for high availability

• Shared-nothing architecture:– Shards don’t share any hardware (CPU,

memory, disk), or software (Clusterware)

A single logical DB sharded into N physical Databases

Server1

Database

Table1Shard1

Server2

Table1Shard2

Server3

Table1Shard3

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public62

Page 63: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Clients

Data GuardFast-Start Failover

RegionAvailabilty_Domain1

Shard Catalogshardcat_stdby

Shard Directorshdir3,4

RegionAvailability_Domain2

Shardgroupshgrp2

Shardgroupshgrp1

Shard Directorshdir1,2

Shard Catalogshardcat

Connection Pools

Connection Pools

Primaries

HA Standbys

Deployment of a System-Managed SDB with Active Data Guard

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public63

Page 64: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Use Sharding with Active Data Guard, RAC or Oracle GoldenGateSharding Configuration Options

Active Data Guard with Fast-Start Failover

GoldenGate ‘chunk-level’ active-active replicationwith automatic conflict detection/resolution

Optionally – complement replication with Oracle RAC for server HA

https://www.oracle.com/database/technologies/high-availability/sharding.htmlCopyright © 2020, Oracle and/or its affiliates | Confidential: Public64

Page 65: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Maximum Availability Architecture (MAA)

Summary & Resources

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public65

Page 66: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

External Resources

Maximum Availability Architecture • MAA Home:

• http://oracle.com/goto/maa• On-Premise MAA:

• https://www.oracle.com/database/technologies/high-availability/oracle-database-maa-best-practices.html

• Exadata MAA: • https://www.oracle.com/database/technologies/high-availability/exadata-maa-best-

practices.html• Cloud MAA:

• https://www.oracle.com/database/technologies/high-availability/oracle-cloud-maa.html

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public66

Page 67: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Provide the best HA, DR and data protection solution for Oracle databases

Continue to enhance validated MAA solutions

Your success is truly our success!!!

Copyright © 2020, Oracle and/or its affiliates | Confidential: Public67

Page 68: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable
Page 69: Oracle Maximum Availability Architecture (MAA) · Oracle Real Application Clusters (Oracle RAC) • Utilizes two or more instances of an Oracle Database concurrently • Very Scalable

Our mission is to help peoplesee data in new ways, discover insights,unlock endless possibilities.