Professional Documents
Culture Documents
Exadata
Best Practices Workshop
March 2019
• MOS Documentation
• Installation Process
Key points:
1. Planned maintenance and likely unplanned outages are hidden from applications
2. There is neither data loss nor data inconsistency
3. Majority of work (% varies by customer) completes within recovery time SLA
4. May appear as a slightly delayed execution
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 7
What kinds of outages?
S#@$%
• It’s cheaper
Many DBs in
• Typically plenty of CPU, memory, IO bandwidth One Server
Inter-Database Inter-PDB
CPU
Instance Caging CDB Resource
CPU Configured on CDB
Plan Flash
Configured on CDB
Disk
Inter-Database Memory Resource
Storage Node 1 Flash & Disk IORM Management
Configured on Storage Cell
Configured on PDB
MEM
Storage Node 3
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 13
Security
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | Public 14
How Hackers Attack the Database?
Exploit
Exploit Database
Application
Attack Application
Users
Target
Data Copies
Attack Bypass
Admins Database
Apps
Data Masking
Transparent 010-11-5100
Data 022-22-5001
Database Encryption
Privilege Vault
Analysis
Oracle
10g, 11g,
Oracle Database 12c
DB4
DB1 RHEL, Database 12c
OS HP-UX
…
DB3 Solaris AIX DB1 DB3 OS
DB2 Dell Servers Oracle Servers
HP Oracle
Cisco Network DB4 Infrastructure
DB2 Network
stack
Hitachi Storage Storage
DB5
Sep 2008 Sep 2009 Sep 2010 Sep 2012 Nov 2013 Dec 2014 Apr 2016 Oct 2017
Xeon E5430 Xeon E5540 Xeon X5670 Xeon E5-2690 Xeon E5-2697 v2 Xeon E5-2699 v3 Xeon E5-2699 v4 Xeon 8160
Harpertown Nehalem Westmere Sandy Bridge Ivy Bridge Haswell Broadwell Skylake V1 – X7
Growth
168 336 504 504 672 1344 1344 1.68 PB 10 X
0 5.3 5.3 22.4 44.8 89.6 179.2 358 TB 64 X
64 64 96 128 192 288 352 384 cores 6 X
256 576 1152 2048 4096 6144 12288 12 TB 48 X
8 24 184 400 400 400 400 800 Gb/s 100 X
14 50 75 100 100 263 301 350 GB/s 25 X
.05 1 1.5 1.5 2.66 4.14 5.6 5.97 M 120 X
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
2027
11.2 EXTENDED
12.1 EXTENDED
12.2 EXTENDED
12.2.0.1
18c (12.2.0.2)
Oracle 19Or
19c (12.2.0.3)
Oracle 19 EXTENDED*
20c
*Oracle Database 19c is the long term support release
Always check MOS Note 742060.1 for the latest schedule
Premier Waived Extended Support Fee Paid Extended Support
InfiniBand
Offload to Storage
Storage Indexes
PCI Flash
Flash Caching
HCC
Resource Management
In-Memory Database Technology
ib1 ib0
eth4 eth3
X7-2 Eighth Rack Quarter Rack Full Rack X7-8 Elastic Configuration
sales_e_svc sales_e_svc_pc
15
salesrpt_svc salesrpt_svc_pc 45 15
PROD DB
25
shipping_svc shipping_svc_pc
Web PDB
OS –Oracle Enterprise Linux web_east_svc web_east_svc_pc
45
15
15
Ship PDB
webrpt_svc webrpt_svc_pc 25
+ WEB DB
Grid Infrastructure Ditributed all Nodes
web_west_svc web_west_svc_pc
GOLD Pool
One Cluster for a set of physical nodes inventory_svc inventory_svc_pc
erp_svc erp_svc_pc 15
15
ERP PDB
45
WEB DB
+
acct_rpt_svc acct_rpt_svc_pc 25
hcm_rpt_svc hcm_rpt_svc_pc 25
50 HCM DB
25
hcm_mgr_svc hcm_mgr_svc_pc
CMS PDB
publish_svc publish_svc_pc 25
50 MKTNG PDB
25 CONTENT DB
collab_svc collab_svc_pc
GENERIC Pool
mktng_svc mktng_svc_pc
DB 11.2 and higher • Combine with Exadata network and I/O prioritization
to achieve unique full stack isolation
SUPPLY
CHAIN • Trusted Partitions allow licensing by virtual machine
• DomU local space can be extended after initial deployment by adding local disk images
– Additionally, domU space can be extended with shared storage (e.g. ACFS, DBFS, external NFS) for user / app files
– Avoid shared storage for Oracle/Linux binaries/config files. Access/network issues may cause system crash or hang.
Used disk per domU at deployment (based on OEDA
Actual allocated space for domU disk images initially much lower due to sparseness and shareable reflinks, but will
templates)
grow with domU use as shared space diverges and becomes less sparse, hence budget for these values when
sizing.
Physical Cluster
Storage Servers
3
RECO
DBFS
DATA
4
1
5
RECO2
DBFS2
2
RECO1
DBFS1
DATA1 DATA2 6
3
7
OVM Cluster
Dom U1 Dom U1 1 Dom U1 Dom U1
OVM Cluster
Dom U2 Dom U2 2 Dom U2 Dom U2
Dom 0 Dom 0
Dom 0 Dom 0
Storage Servers
2
DBFS1 (Optional)
DBFS2 (Optional)
3
RECO1
RECO2
DATA1 DATA2 4
Client
DB Server 1 (Virtual) DB Server 2 (Virtual) DB Server 3 (Virtual) DB Server 4 (Virtual)
VLAN OVM
Cluster 1 Dom U1 Dom U1 Cluster 1 Dom U1 Dom U1
OVM VLAN
Dom U2 Dom U2 Cluster 2 Dom U2 Dom U2 Cluster 2
Dom 0 Dom 0 Dom 0 Dom 0
Storage Servers
1 Client
2
DBFS1 (Optional)
DBFS2 (Optional)
3
RECO1
RECO2
DATA1 DATA2 4
Client
DB Server 1 (Virtual) DB Server 2 (Virtual) DB Server 3 (Virtual) DB Server 4 (Virtual)
VLAN OVM
(Cluster 1) Dom U1 Dom U1 Cluster 1 Dom U1 Dom U1
OVM VLAN
Dom U2 Dom U2 Cluster 2 Dom U2 Dom U2 (Cluster 2
Dom 0 Dom 0 Dom 0 Dom 0
Storage Servers
PKEY Cluster 1 Storage Servers Client
PKEY Cluster 2
1
5
RECO2
DBFS2
2
RECO1
DBFS1
DATA1 DATA2 6
3
7
If Capacity-on-Demand is
chosen, the customer uses
this slider to pick # of active
cores per db server. By
default, all db servers will
get this number.
Customer Customer
Oracle Rep
Submit
Software
Order
Order
1.
2. Or run exachk utility and search o_cpuinfo_<hostname>.out in the
outputfiles directory (see slide notes)
Periodic
• Performance:
Buffer Drain
Temp – 2x faster throughput than conventional
Readings
EVENT
AQ MSG AQ MSG
ANALYTICS RETURNS CROSS PDB
QUERIES
• Registry
• Images
• Containers
• Docker daemon/
engine
Source: https://docs.docker.com/engine/docker-overview/
Quarantine
• Because the DoD C&A STIG process requires vulnerability assessment and
remediation, Oracle will make commercially reasonable efforts to work
with the customer through the Oracle Support service request process to
meet the DoD C&A STIG remediation requirement or to enable customers
to make the necessary changes to the Oracle Exadata Database Machine in
order to do so, provided that the customer is officially supported by Oracle
Exadata Database Machine product development organization.
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 98
Doc ID 1291766.1 How to change OS user password for Cell Node,
Database Node , ILOM, KVM , Infiniband Switch , GigaBit Ethernet Switch
and PDU on Exadata Database Machine
• This note explains how to change the user password for cell node,
database node, ILOM, KVM, InfiniBand Switch and Cisco 4948 Ethernet
Switch
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 100
Deployment
Pre requisites and
OEDA-OECA
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 102
The Original Deployment Tools …
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 103
OEDA Configuration Tool
Advanced Network Configuration
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 105
OEDA Configuration Tool
Define Clusters
• Decide
– Number of VM clusters to create
– Dbnodes and Cells that will make
up those VM clusters
• Recommend using all cells
• What is a “VM cluster?”
– 1 or more user domains on
different database servers running
Oracle GI/RAC, each accessing the
same shared Exadata storage
managed by ASM.
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 106
OEDA Configuration Tool
Cluster Configuration
• Each VM cluster has its own
configuration page
– VM size (memory, CPU)
– Exadata software version
– Networking config
– OS users and groups
– GI/DB version and location
– Starter database config
– ASM disk group config
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 107
OEDA Configuration Tool
Cluster Configuration
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 108
OEDA Configuration Tool
Cluster Configuration
• Grid infrastructure installed in
each VM (grid disks “owned” by
a VM cluster)
– Cluster 1 - DATAC1 / RECOC1 across all cells
– Cluster 2 - DATAC2 / RECOC2 across all cells
– Consider future clusters when sizing
– DBFS not configured
– ASM-Scoped Security permits a cluster to
access only its own grid disks. Available
with Advanced button.
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 109
OEDA Configuration Tool
Cluster Advanced Network Configuration
• Ethernet VLAN ID and IP details
– To separate Ethernet traffic across VMs,
use distinct VLAN ID and IP info for each
cluster
• InfiniBand PKEY and IP details
– Typically just use OEDA defaults
– Compute Cluster network for dbnode-to-
dbnode RAC traffic. Separates IB traffic by using
distinct Cluster PKEY and IP subnet for each
cluster.
– Storage network for dbnode-to-cell or cell-to-
cell traffic - same PKEY/subnet for all clusters
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 110
OEDA Configuration Tool
Review and Edit
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 111
OEDA Configuration Tool
Installation Template
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 112
OEDA Configuration Tool
Network Requirements
Component Domain Network Example hostname
dom0 Mgmt eth0 dm01dbadm01
(one per database server) Mgmt ILOM dm01dbadm01-ilom
Mgmt eth0 dm01dbadm01vm01
Database servers domU Client bondeth0 dm01client01vm01
(one or more per Client VIP dm01client01vm01-vip
database server) Client SCAN dm01vm01-scan
Private ib dm01dbadm01vm01-priv1
Mgmt eth0 dm01celadm01
Storage servers (same as physical) Mgmt ILOM dm01celadm01-ilom
Private ib dm01celadm01-priv1
Switches (same as physical) Mgmt eth0 dm01sw-*
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 113
OECA for Exadata Overview X5-2 In-Memory X5-2 EF OLTP
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 114
Introducing OECA – Simplifying the Elastic Configuration Planning Process
• OECA is an “Excel” Based Visual Basic
application that will allow the user to
rapidly plan Exadata Elastic Configuration
Scenarios
• Release Notes
– Requires Microsoft Excel
– Must enable Macros in Excel
– Windows Only Support for Now
– These training slides reflect a recent version of
the tool but may appear differently than the
latest version of the tool
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 115
Creating a Workload Optimized Configuration
• The following demonstration supports a planned DB In-Memory Machine
Exadata Database In-Memory Deployment
• OECA for Exadata will produce a “visual”
representation of the intended configuration
• The tool will also produce the Performance and
Environmental Characteristics for this
configuration
– Similar to what is done in the Exadata Datasheet for Full,
Half, Quarter, Eighth Racks etc.
16 Database Servers
+
5 High Capacity Storage Servers
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 116
Creating a Workload Optimized Configuration
• Step 1 – Launch Application DB In-Memory Machine
– The Following Screen Appears
16 Database Servers
+
5 High Capacity Storage Servers
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 117
Creating a Workload Optimized Configuration
• Step 2 – Select X5-2 in the “Selection” Dropdown DB In-Memory Machine
16 Database Servers
+
5 High Capacity Storage Servers
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 118
Creating a Workload Optimized Configuration
• Step 3 – Increment the X5-2 DB to 16 DB In-Memory Machine
16 Database Servers
+
5 High Capacity Storage Servers
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 119
Creating a Workload Optimized Configuration
• Step 4 – Increment X5-2L HC to 5 DB In-Memory Machine
Memory, Storage and Number of
Cores are calculated here
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 120
Creating a Workload Optimized Configuration
• Step 5 – Note the Environmental Report DB In-Memory Machine
16 Database Servers
+
5 High Capacity Storage Servers
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 121
Creating a Workload Optimized Configuration
• Step 6 – Scroll to See the Performance Report DB In-Memory Machine
16 Database Servers
+
5 High Capacity Storage Servers
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 122
OECA for Exadata Summary X5-2 In-Memory X5-2 EF OLTP
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 123
The Evolution …
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 124
• Download and Unzip the OEDA Tool
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 125
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 126
• Access via web browser
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 127
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 128
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 129
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 130
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 131
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 132
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 133
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 134
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 135
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 136
Installation Process
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 138
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 139
Preparation for Installation
Security starts early
• Get educated
– Review Product Documentation Oracle® Exadata Database Machine Security Guide
– Review MOS note 1068804.1: Guidelines for enhancing the security for an Oracle
Database Machine deployment
– Review MOS 1405320.1: Responses to common Exadata security findings
– Subscribe to security alerts - http://is.gd/orasec
• Collect security-related requirements from all stakeholders
• Determine whether role-separated installation is required
• Plan network layout
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 140
Installation and Deployment
Implement the available features and security plan
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 141
Default Security Features
Implement the available features and security plan
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 142
Oracle Exadata Deployment
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 143
Documents ID
InfiniBand Switches
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 145
Architecture Recommendation for Re-Image
Conectado Puerto 1
Cisco Switch PXE VM
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 146
Doc ID for PXE
• Setting up a PXE server with Exadata image in a local notebook (Doc ID
2224935.1)
• How to setup a PXE Boot Server to Re-Image an Exadata Compute Node
(Doc ID 1577323.1)
• Bare Metal Restore Procedure for Compute Nodes on an Exadata
Environment (Doc ID 1084360.1)
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 147
PXE Environment
• IP 10.81.32.254
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 148
Download the PXE Guest VM
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 149
PXE Internal Services
SERVICES
service dhcpd restart
service nfs restart
showmount –e
tail -100f /var/log/messages
/etc/exports
EXPORTFS
/u01/exadata 192.168.0.0/22(rw,no_acl,sync,no_root_squash)
/u01/exadata 10.81.0.0/16(rw,no_acl,sync,no_root_squash)
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 150
PXE DHCP /etc/dhcp/dhcpd.conf
# DHCP Server Configuration file.
# see /usr/share/doc/dhcp*/dhcpd.conf.sample
#
ddns-update-style none;
allow booting;
allow bootp;
default-lease-time 43200;
max-lease-time 43200;
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 151
PXE Network
[root@exa-nfsreimage-server ~]# ifconfig
eth6 Link encap:Ethernet HWaddr 08:00:27:AE:71:3F
inet addr:192.168.1.250 Bcast:192.168.3.255 Mask:255.255.252.0
inet6 addr: fe80::a00:27ff:feae:713f/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:20432332 errors:0 dropped:0 overruns:0 frame:0
TX packets:25052876 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:11651176490 (10.8 GiB) TX bytes:36880548240 (34.3 GiB)
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 152
Reimage Compute Node ILOM
set /SP/services/kvms/host_storage_device/ mode=disabled
set /SP/services/kvms/host_storage_device/remote/
server_URI=nfs://10.81.32.254:/u01/exadata/
compute_19.1.0.0.0_LINUX.X64_181016.2-1.x86_64.iso
set /SP/services/kvms/host_storage_device/ mode=remote
set /HOST boot_device=cdrom
show /SP/services/kvms/host_storage_device/ status
reset /SYS
start /SP/console
After completed
set /SP/services/kvms/host_storage_device/ mode=disabled
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 153
Reimage Cell Server ILOM
set /SP/services/kvms/host_storage_device/ mode=disabled
set /SP/services/kvms/host_storage_device/remote/
server_URI=nfs://10.81.32.254:/u01/exadata/
cell_19.1.0.0.0_LINUX.X64_181016.2-1.x86_64.iso
set /SP/services/kvms/host_storage_device/remote/
server_URI=nfs://10.81.32.254:/u01/exadata/
cell_18.1.5.0.0_LINUX.X64_180506-1.x86_64.iso
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 158
Start Oracle Exadata Deployment Assistant (OEDA)
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 159
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 160
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 161
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 162
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 163
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 164
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 165
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 166
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 167
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 168
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 169
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 170
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 171
Post-Deployment Configuration
Address site-specific requirements
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 172
Post-Deployment Configuration
Cell Lockdown & ExaCli
• *New* in 12.1.2.2.0
• Cells can have remote access disabled – no direct SSH access to OS
• Must enable temporarily for maintenance (upgrades)
• New cell attributes: remoteAccessPerm, remoteAccessTemp
• Use exacli/exadcli from DB nodes for cell commands
• *Upcoming!* Exadata All-Inclusive Secure Erase with a single command
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 173
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 174
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 175
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 176
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 177
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 178
Exadata Security (ASM, Griddisks)
Consolidation: sharing without peeking
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 179
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 180
Copyright © 2019, Oracle and/or its affiliates. All rights reserved. | 181