Oracle MAA (Maximum Availability Architecture) 18c - An Overview
1 like1,730 views
The document discusses Oracle Maximum Availability Architecture (MAA). It provides an overview of MAA and how it has evolved from on-premises to cloud environments. MAA includes best practices blueprints and reference architectures to help customers achieve optimal high availability at lowest cost and complexity using Oracle technologies.
![Copyright © 2018, Oracle and/or its affiliates. All rights reserved. |
Oracle Pools – Drain and Rebalance
Applications using …
Oracle – WebLogic Active GridLink, ICC, UCP, ODP.NET
managed and unmanaged, OCI Session Pool, Tuxedo,
(New) CMAN Database Traffic Manager
3rd party App Servers using UCP: IBM WebSphere, Apache
Tomcat, NEC WebOTX, Red Hat JBoss, Spring
DBA Step srvctl [relocate|stop] service -drain_timeout
Sessions Drain
Immediately new work is redirected
Gradually
Active sessions are released when returned to pools
Drain &
rebalance
26
FAN Planned](https://image.slidesharecdn.com/maaoverviewsangam18-181212125427/85/Oracle-MAA-Maximum-Availability-Architecture-18c-An-Overview-26-320.jpg)
Oracle MAA (Maximum Availability Architecture) 18c - An Overview
- 3. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Oracle Maximum Availability Architecture Best Practices Blueprints for High Availability Oracle Maximum Availability Architecture (MAA) is Oracle's best practices blueprint • based on proven Oracle high availability technologies, • expert recommendations • and customer experiences. The goal of MAA is to achieve optimal high availability for Oracle customers at the lowest cost and complexity.
- 5. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | MAA On Third-Party Clouds 5 On-Premises On-Premises Exadata and Recovery Appliance Database / Exadata Cloud Autonomous Database MAA Blueprints and Best Practices MAA integrated Engineered Systems (config practices, Exachk, lowest brownouts, HA QoS, data protection) On Third-Party Clouds • Most on-premises MAA Blueprints and Best Practices can be applied manually • You need to consider the cloud architecture • No Exadata or RAC are available • No MAA optimizations can be performed You lose most of the benefits
- 6. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | MAA Reference Architectures 6 Meet Downtime (RTO) and Data Loss (RPO) SLAs Downtime & Data Loss BRONZE Single Instance + Backup Dev, Test, Prod SILVER HA Clustering + Backup Prod/Departmental GOLD HA Clustering + Disaster Recovery + Backup Mission Critical PLATINUM Zero Data Loss & Zero Downtime Extreme Critical MAA Reference Architectures Topology Suitable Databases Addresses SLAs for Data Loss and Downtime during Planned & Unplanned Outages
- 13. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Single Instance Database Bronze : Single Instance Database 13 Replicated backup Bronze Summary • Single instance database with backups & auto-restart • Optional replication of backup data to remote site • Restore from backup to resume service following unrecoverable outages Features • Oracle Restart • Multitenant Database • Online Maintenance • Corruption Protection • Flashback Technologies • Recovery Manager • Recovery Appliance / ZFS / Tape or Cloud Archive Primary Datacenter Remote Datacenter Local backup R Z R
- 14. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Online Operations • DBMS_REDEFINITION allows you to reorganize and redefine tables online – Add/drop/rename columns, switch physical storage structures, reorg table, transform data … online • DBMS_REDEFINITION enhanced in 12.2 for even the largest, busiest databases: – Full restartability (resume at point of failure) – Entire redefinition process runs without acquiring Exclusive DDL lock – Optionally track changes to enable fast rollback to table as it was before the redef – Maintain dependent MVs during redefinition – V$online_redef for progress monitoring – Support for Binary XML storage changes, BFILE, invisible columns Online Redefinition Improvements Source Table Update Tracking Transform Copy Table Transform Updates Result Table Continuous Queries & Updates Store Updates
- 15. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Online Operations All Partition Maintenance Operations are now Online 11.2 & Prior Create index online, rebuild index online, rebuild index partition online Add Column, Add Constraint enable novalidate 12.1 Online move partition Drop index online Set unused column online, alter column visible/invisible, alter index unusable online, alter index visible/invisible alter index parallel/noparallel 12.2 Alter table move online for non-partitioned tables Alter table from non-partitioned to partitioned online Alter table split partition online Create table for exchange (usable for online partition exchange) Move/merge/split partition maintenance operations can now do data filtering 18.1 Alter table modify partitioned table to a different partitioning method (e.g., hash to range) Alter table merge partition/subpartition online
- 16. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Rewind Button for Oracle Databases Flashback Technologies • Fast point-in-time recovery (PITR) without expensive restore operation • Error investigation – View data as of previous point in time • Error correction – Back-out a transaction – Incorrect table updates – Rewind the entire database • Also used by database rolling upgrades and Data Guard Snapshot Standby @T2 Col-1 Col-.. Col-n Row-1 tom 1234 vp Row-2 ben 8834 vp Row-3 charlie 9837 vp Row-n tom 8793 vp @T1 Col-1 Col-.. Col-n Row-1 abby 1234 officer Row-2 ben 8834 mgr Row-3 Charlie 9837 officer Row-n tom 8793 vp Wrong Update Flashback Table DB @ T1 DB @ T2 Batch Update Flashback Database Wrong Update 16
- 17. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Bronze - Single Instance Oracle Database Unplanned Outages and Planned Maintenance Events Downtime (RTO) Data Loss Potential (RPO) Database instance failure Minutes Zero Recoverable server failure Minutes to hour Zero Data corruptions, unrecoverable server failure, database or site failures Hours to days Since last backup or Near Zero with RA Online file move, reorganization/redefinition, and certain patches Zero Zero Hardware or operating system maintenance and database patches that cannot be done online Minutes to hours Zero Database upgrades: patch sets and full database releases Minutes to hours Zero Platform migrations Hours to a day Zero Application upgrades that modify back-end database objects Hours to days Zero Planned Maintenance Unplanned Outages 17
- 19. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | RAC / RAC One Database Database Files Local backup Silver : Active/Active Database Clustering 19 Replicated backup Silver Summary • RAC or RAC One with remote backups • Fast Instance failovers for planned/unplanned outages • Backups replicated to remote site for DR • Restore from backup to resume service following unrecoverable outages Features • Multitenant • Online Maintenance • Exadata & Basic Corruption Protection • Flashback Technologies • Recovery Manager • Recovery Appliance / ZFS / Tape or Cloud Archive • Real Application Cluster / RAC One Primary Datacenter Remote Datacenter R Z R
- 20. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Scalable Sequences Continuous Application Availability Oracle RAC Sharding Cluster Domains Cluster Health Advisor (CHA) RAC Reader Nodes Application Continuity (AC) Oracle Flex ASM & Flex Clusters Rapid Home Provisioning (RHP) Cluster Health Monitor (CHM) Oracle Quality of Service Management (QoS) Policy-Based Cluster Management Oracle RAC One Node & RACcheck Oracle ASM Cluster File System (ACFS) Oracle Grid Infrastructure (GI) UCP and OCI Load Balancing Support for RAC Cluster Verification Utility (CVU) Cluster-Managed Services Oracle Clusterware Oracle Automatic Storage Management (ASM) Oracle Real Application Clusters (RAC) Oracle 9i MAA has Tested & Improved Many Oracle RAC Features Oracle 18c 20
- 22. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Online Patching Improvements • OJVM patching will be RAC rolling – Non-Java service available all time (at least one instance) – Java service available all time, except ~10 sec brown-out • No error reported during brown-out • Zero Impact Oracle Grid Infrastructure Patching – Patch Oracle Grid Infrastructure without interrupting database operations. – Patches applied out-of-place and in a rolling fashion with one node being patched at a time while the database instance(s) on that node remain up and running. – Supported on clusters with two or more nodes. 22
- 23. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Silver – High Availability with Fast Failover Unplanned Outages and Planned Maintenance Events Downtime Data Loss Potential Database instance failure Seconds if RAC Zero Recoverable server failure Seconds if RAC Zero Data corruptions, database unable to restart, site failure Hours to days Since last backup, or Near-zero with ZDLRA redo transport Online file move, reorganization/redefinition, and patching Zero Zero Hardware or O.S. maintenance and database patches that can’t be done online but qualified for RAC rolling install Near Zero Zero Database upgrades: patch sets and full database releases Minutes to hours Zero Platform migrations Hours to a day Zero App upgrades that modify back-end database objects Hours to days Zero Planned Maintenance Unplanned Outages
- 24. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Application Continuity – Coming to the Silver Level • Application Continuity (AC) shields end users and applications from interruptions due to instance failures. – Sessions are automatically reconnected to surviving instances. – Queries are replayed and appear to resume from the point of failure. – Inflight transactions are replayed and it is ensured that they are either committed exactly once or rolled back completely. • In most cases applications will only experience a higher response time without being made aware of the failure. – Avoids cascading outages due to application servers and middle tier components restarting as a mislead reaction to database failures. • AC is available with an Oracle RAC and Active Data Guard License: – Failover to another RAC instance or a Data Guard standby database. Inst 1 Inst 2 write
- 25. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | • Advance Continuously Request Boundaries • Automatically Restored and Verified Initial State • Tracked and Recorded Session State • Detected and Disabled Side Effects • Grant KEEP Mutating Functions • JDBC Concrete Classes Old Calls Supported • Always know your protection level Statistics 25 Confidential – Oracle Internal Transparent Application Continuity (TAC) Easy to standardize on TAC using CMAN Database Traffic Manager
- 27. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | MAA Silver: Next Steps • All Practices of Bronze Plus • Key guidelines: – Follow Application Checklist for Continuous Service for RAC https://www.oracle.com/technetwork/database/options/clustering/applicationcontinuity/adb-continuousavailability-5169724.pdf – If you want lower downtime for instance and server failures • Evaluate lower FAST_START_MTTR_TARGET setting • Operational Practices – One test system should be identical or similar to production 27
- 29. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Local backup Gold: Physical Replication, Zero Data Loss, Fast Failovers 29 Gold Summary • RAC cluster provides HA within the primary data center • Active Data Guard replication to remote data center for DR and comprehensive data protection. Optional replication to a local standby in another availability domain for automatic database and application role transitions. Read-only workloads are offloaded to the remote copy. Features • Multitenant • Online Maintenance • Exadata & Basic Corruption Protection • Flashback Technologies • Real Application Cluster • Recovery Manager • Recovery Appliance / ZFS / Tape or Cloud Archive • Active Data Guard with optional Far Sync Remote Standby Local backup Primary Datacenter Remote Datacenter Primary Local Standby * Local standby or remote standby or both is required for Gold Z Z R R
- 30. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Active Data Guard Primary Open Read-Write Standby Open Read-Only 30 Active Data Guard Far Sync Zero Data Loss at any Distance Automatic Block Repair Offload read-only workloads to the standby database Offload fast-incremental backups at standby • Synchronous zero data loss replication • Continuous Oracle validation provides best isolation from corruption • Database rolling upgrade to reduce downtime for planned maintenance • Automatic failover for HA
- 31. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Primary Database Far Sync Instance Active Standby Database • Oracle control file and log files • No database files • No media recovery • Offload transport compression • Zero data loss failover target • Database open read-only • Continuous Oracle validation • Manual or automatic failover SYNC Limited distance ASYNC Any distance transport compression over WAN Active Data Guard Far Sync Zero Data Loss Protection at Any Distance • Production copy Zero Data Loss Failover 31
- 32. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Update-like capabilities on Active Data Guard • CREATE GLOBAL TEMPORARY TABLE on Active Data Guard – Automatically creates the GTT on the Primary – Waits for the GTT to be replicated and applied to the Active Data Guard standby – Return control to the user • DML Redirection preview – For “Mostly Read, Occasional Updates” applications – Enabled by _enable_proxy_adg_redirect=TRUE – Updates on Active Data Guard will be redirected to the primary – Active Data Guard session then waits for updates to show up via redo apply • Redirected update only visible to session before commit; visible to all sessions after commit – Preserves ACID properties for ADG session 32 Update X Active Data Guard Primary
- 34. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | Gold: Key Takeaways • Active Data Guard and MAA superior to 3rd party storage replication – More utilization of standby and better ROI. • Reduce failover and switchover times (hour to seconds). • Better Data Protection and Auto Block “Corruption” Repair. • Reduced network traffic. Confidential – Oracle Internal/Restricted/Highly Restricted 34
- 36. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. | MAA Evolution: Autonomous Database On-Premises On-Premises Exadata Database / Exadata Cloud Autonomous Database 36 • Architecture • Database Management (Tooling) • Configuration, Tuning • Lifecycle Operations (Tooling) • Application Performance • Choosing the SLA policy • Application performance • Infrastructure Management • Architecture • Database Management • Configuration, Tuning • Lifecycle operations • Application Performance • Infrastructure Management • Architecture • Configuration, Tuning • Database Management • Lifecycle Operations • Application Performance • Blueprints • Feedback to products & features • Blueprints • Exadata is the best integrated MAA DB platform • Oracle owns and manages the best integrated MAA DB platform • Cloud automation for provisioning and life cycle operations • Oracle owns and manages Infrastructure • Policy driven deployments • MAA Integrated cloud • Fully automated Self- Driving, Self-Securing, Self-Repairing Database Customer Oracle Confidential – Oracle Internal/Restricted/Highly Restricted