configuring-oracle-managed-disaster-recovery-solution-oracle-integration-3
configuring-oracle-managed-disaster-recovery-solution-oracle-integration-3
G10051-10
March 2025
Oracle Cloud Configuring an Oracle-Managed Disaster Recovery Solution for Oracle Integration 3,
G10051-10
This software and related documentation are provided under a license agreement containing restrictions on use and
disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or
allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit,
perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation
of this software, unless required by law for interoperability, is prohibited.
The information contained herein is subject to change without notice and is not warranted to be error-free. If you find
any errors, please report them to us in writing.
If this is software, software documentation, data (as defined in the Federal Acquisition Regulation), or related
documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then
the following notice is applicable:
U.S. GOVERNMENT END USERS: Oracle programs (including any operating system, integrated software, any
programs embedded, installed, or activated on delivered hardware, and modifications of such programs) and Oracle
computer documentation or other Oracle data delivered to or accessed by U.S. Government end users are "commercial
computer software," "commercial computer software documentation," or "limited rights data" pursuant to the applicable
Federal Acquisition Regulation and agency-specific supplemental regulations. As such, the use, reproduction,
duplication, release, display, disclosure, modification, preparation of derivative works, and/or adaptation of i) Oracle
programs (including any operating system, integrated software, any programs embedded, installed, or activated on
delivered hardware, and modifications of such programs), ii) Oracle computer documentation and/or iii) other Oracle
data, is subject to the rights and limitations specified in the license contained in the applicable contract. The terms
governing the U.S. Government's use of Oracle cloud services are defined by the applicable contract for such services.
No other rights are granted to the U.S. Government.
This software or hardware is developed for general use in a variety of information management applications. It is not
developed or intended for use in any inherently dangerous applications, including applications that may create a risk of
personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all
appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its
affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.
Oracle®, Java, MySQL, and NetSuite are registered trademarks of Oracle and/or its affiliates. Other names may be
trademarks of their respective owners.
Intel and Intel Inside are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used
under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Epyc, and the AMD logo
are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open
Group.
This software or hardware and documentation may provide access to or information about content, products, and
services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all
warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an
applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss,
costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth
in an applicable agreement between you and Oracle.
Contents
Preface
Audience iv
Documentation Accessibility iv
Diversity and Inclusion iv
Related Resources iv
Conventions v
iii
Preface
Preface
This document describes how to configure a disaster recovery solution for Oracle Integration.
Topics:
• Audience
• Documentation Accessibility
• Diversity and Inclusion
• Related Resources
• Conventions
Audience
This document is intended for personnel who are responsible for configuring a disaster
recovery solution for Oracle Integration.
Documentation Accessibility
For information about Oracle's commitment to accessibility, visit the Oracle Accessibility
Program website at https://www.oracle.com/corporate/accessibility/.
Related Resources
For more information, see the Oracle Integration documentation in the Oracle Cloud Library on
the Oracle Help Center.
iv
Preface
Conventions
The following text conventions are used in this document.
Convention Meaning
boldface Boldface type indicates graphical user interface elements associated with an
action, or terms defined in text or the glossary.
italic Italic type indicates book titles, emphasis, or placeholder variables for which
you supply particular values.
monospace Monospace type indicates commands within a paragraph, URLs, code in
examples, text that appears on the screen, or text that you enter.
v
1
Introduction to an Oracle-Managed Disaster
Recovery Solution
Oracle Integration is available in an Oracle Cloud Infrastructure region governed by service-
level agreements (SLAs). This guide details the procedure to install and use a cross-region,
Oracle-managed disaster recovery solution for Oracle Integration, specifically for the
Integrations and File Server features in Oracle Integration.
Topics:
• Introduction to Oracle-Managed Disaster Recovery
• What’s Supported?
• What’s Not Supported?
Note:
Oracle-managed disaster recovery is a paid feature. Consult with your sales
representative for details.
You don't need to worry about managing DNS changes, load balancing, design-time data
synchronization between instances, object storage buckets, and other responsibilities. All
message traffic is automatically forwarded to the correct instance. All messaging is
bidirectional, meaning you can fail over from one instance to another, and back. Data
synchronization between the two instances occurs automatically in near real time to minimize
data loss.
1-1
Chapter 1
Introduction to Oracle-Managed Disaster Recovery
1-2
Chapter 1
Introduction to Oracle-Managed Disaster Recovery
6. Once failover completes, you are prompted to log in to the instance in the Ashburn
instance (which once again becomes the primary instance) and resume work. Because of
data synchronization in near real time between the two instances, the data changes you
made in the Phoenix instance are visible in the restored Ashburn primary instance.
User Responsibilities
Because Oracle handles nearly all disaster recovery management tasks, your responsibilities
as an administer are kept to a minimum. You only have several major responsibilities in an
Oracle-managed disaster recovery environment:
1-3
Chapter 1
What’s Supported?
• Failover is a one instance-to-one instance replication, meaning you can only fail over to a
second instance. You cannot fail over to multiple instances.
• When a failover is performed, the secondary instance takes over the responsibility of
providing all features of the primary instance.
• The primary instance goes into standby mode and becomes a passive listener when the
secondary instance becomes active.
• All traffic that was originally sent to the initial primary instance is forwarded to the new
primary instance.
• The life cycle operations in the standby instance are disabled in the Oracle Cloud
Infrastructure Console with the exception of performing a failover.
• There are no changes in OAuth credentials after failover.
• Only design-time metadata is synchronized. Runtime tracking data such as that shown in
the activity stream, Instance page, and other observability pages is not synchronized with
the secondary instance.
• You log in to primary and secondary instances with a global URL that does not include a
region name.
• If you delete the primary instance, the secondary instance is also deleted.
• If you start and stop the primary instance, this has no impact on the secondary instance,
which simply remains a passive listener.
What’s Supported?
The Oracle-managed disaster recovery solution provides support for the following:
• The Integrations and File Server components.
• The Enterprise edition and Healthcare edition. See Install and Configure Oracle Integration
for Disaster Recovery.
• Active-passive topologies. Only one instance of the disaster recovery configuration can be
active and processing transactions at a time.
Active-passive topologies mean that only one instance processes all the load even though
both instances are expected to be up and running. An active instance is determined by
which instance the traffic is directed to and is enabled to execute all functions, and not by
its start or stop status. It is recommended that you not turn off your disaster recovery
instance.
• Oracle-managed synchronization (replication) of design-time metadata only.
• Support for disaster recovery instances in the following regions. Each region is paired for
failover with another region.
• Support for new instances only. You cannot configure a disaster recovery solution for an
existing instance.
1-4
Chapter 1
What’s Not Supported?
• A recovery point objective (RPO) period of one hour. The RPO is the period after a disaster
occurs during which the service can tolerate lost data before the disaster begins to affect
the business.
• A recovery time objective (RTO) period of one hour. The RTO is the target time within
which your service must be restored to the secondary system after a failover request.
• Support for user-initiated failover (not automatic). When your current primary instance
becomes unreachable, you manually select the Start failover option in the Oracle Cloud
Infrastructure Console of the secondary instance to fail over to that instance. See Fail Over
to the Other Instance.
• Extended data retention.
If you have data retention set to more than 30 days on the primary instance and then fail
over to the secondary instance, those settings are retained on the secondary instance.
Note:
Integrations with polling triggers require special handling. See Deactivate and
Reactivate Integrations with Polling Triggers.
1-5
2
Set Up and Perform Disaster Recovery
This section describes how to set up and perform disaster recovery.
Topics:
• Perform Preinstallation Tasks
• Install and Configure Oracle Integration for Disaster Recovery
• Perform Failover Prerequisite Tasks
• Fail Over to the Other Instance
• Configure Email Notification Settings After Failover
2-1
Chapter 2
Install and Configure Oracle Integration for Disaster Recovery
a. If there is only a default domain, add a tag-based policy in the default domain:
b. If there is a secondary domain, add a tag policy in the secondary region domain to
allow the use of defined tags:
2. Open the navigation menu and click Developer Services. Under Application Integration,
click Integration.
3. From the Compartment list, click through the hierarchy of compartments and select the
one in which to create the instance. You may need to expand the + icon to find the
compartment to use. Compartments can contain other compartments.
2-2
Chapter 2
Install and Configure Oracle Integration for Disaster Recovery
Field Description
Display Name Enter the display name for the instance.
Edition Select from the following supported editions for disaster
recovery.
• Enterprise
• Healthcare
Note: If you select the Standard edition, an error is displayed
when you click Create.
See Oracle Integration Editions in Provisioning and
Administering Oracle Integration 3 to see what's licensed in
each supported edition.
Shape Only the Production shape is available for disaster recovery
instances.
Note: The Development shape is not supported.
License Type Select the license type. See Choose a License Type in
Provisioning and Administering Oracle Integration 3.
Message Packs Enter the message pack number. See Choose a Message Pack
Number in Provisioning and Administering Oracle Integration 3.
The Use advanced options link appears at the bottom of the Create instance page.
6. Click Use advanced options and select the Disaster recovery tab.
7. Select the Enable disaster recovery toggle.
A message is displayed.
Note:
Do not select to configure the options under the Network access tab. This
feature is not supported in disaster recovery-enabled environments.
2-3
Chapter 2
Install and Configure Oracle Integration for Disaster Recovery
8. Click Create.
The Work requests section shows installation progress. As installation progresses, the %
Complete value changes.
Note:
Creation of the primary and secondary instances can take time to complete due
to DNS configuration.
9. Click Create integration instance to view details about installation progress. When
creation of the primary and secondary instances in different regions completes
successfully, the Finished field is updated. You do not receive a popup message when
installation completes.
The installed primary instance includes a green circle with the label ACTIVE. The word
Primary appears below the instance name to indicate that this is the primary instance.
2-4
Chapter 2
Install and Configure Oracle Integration for Disaster Recovery
10. Under Resources in the left navigation pane, click Disaster recovery.
The details page for the secondary instance in the other region is displayed.
• The word _Recovery is appended to the end of the secondary instance name. The
_Recovery word always appears as part of this instance name, even when the
secondary instance becomes the primary instance after a failover.
• The word Secondary appears below the instance name. When you fail over from the
initial instance to the secondary instance, Secondary is replaced with Primary.
• A status of STANDBY appears below the circle labeled OIC.
• The Start failover button is enabled for use. This is the only life cycle action that can
be performed from the secondary instance.
2-5
Chapter 2
Perform Failover Prerequisite Tasks
12. Start designing integrations in your primary instance. As soon as you start, the
synchronization of design-time metadata begins between the primary and secondary
instances in near real time. This reduces the chance for data loss when a failover is
required.
Topics:
• Understand Your Connectivity Agent Responsibilities During a Failover
• Configure Email Delivery If Using Your Own Email Tenancy
• Configure File Server for Disaster Recovery
2-6
Chapter 2
Fail Over to the Other Instance
must perform these tasks prior to failover. These tasks are not required if you are using the
default Oracle Integration email tenancy.
The configuration pages for email domains, approved sender email addresses, and
suppression list are visible in the Email Delivery section of the Oracle Cloud Infrastructure
Console. For configuration details, see Email Delivery.
The approved (default) sender and other email addresses must match with those specified on
the Notifications page of the Oracle Integration instance. See Configure Notification Emails in
Using Integrations in Oracle Integration 3.
2-7
Chapter 2
Fail Over to the Other Instance
Perform a Failover
Note:
No notification is sent by Oracle Integration when an instance fails. However, Oracle
Cloud Infrastructure provides functionality for setting alarms when issues occur. See
Managing Alarms.
1. Go to the primary instance in the Oracle Cloud Infrastructure Console. For this example,
failover is performed from the primary instance in one region to the secondary instance in a
different region. The steps are the same when performing a failover from the secondary
instance.
2. Click Start failover.
3. Click Failover when prompted to fail over to the secondary instance in the other region.
The process to fail over to the instance in the other region begins. A second tab opens in
your browser for failover status about the secondary instance.
Because data synchronization between the two instances has occurred in near real time
since the completion of disaster recovery installation, the failover process takes
approximately the same amount of time regardless of the amount of design-time metadata
data in your instance.
4. Follow failover progress in the Work Requests section.
5. When failover completes, the previous primary instance goes into standby mode. The word
Secondary now appears below the instance name. The status changes to STANDBY
below the circle labeled OIC.
6. Click the tab in your browser to access the new primary instance. The status is shown as
ACTIVE below the circle labeled OIC and the word Primary now appears below the
instance name. The word _Recovery remains appended to the end of the new primary
name.
2-8
Chapter 2
Fail Over to the Other Instance
If you were logged in to the primary instance of Oracle Integration during failover, you
receive the following message indicating that the primary instance is now in a standby
state.
7. Click the global (regionless) URL specified in the message to log in to the new primary
instance. The global URL does not mention any region name.
8. Continue working as you were prior to receiving this message. Activated integrations in the
original primary instance are displayed as activated in the new primary instance. As you
work in the new primary instance, your changes to data are synchronized with the original
primary instance automatically.
9. When the original primary instance is restored, click Failover in the Oracle Cloud
Infrastructure Console of either instance if you want to fail back to the original primary
instance.
Change the Built-in API Calls to Reflect the New Hostname and Integration Instance
Name
If you use the Oracle Integration built-in APIs, the hostname and integration instance name
change in the API call after failover completes.
For example:
• Pre-failover API call:
https://mydesign-pp-integration-prod-gen3.integration.us-
ashburn-1.ocp.oraclecloud.com/ic/api/integration/v1/integrations/
?integrationInstance=sysqa-drtest-cgs-inst2-bxffubagcv29-to-pp
https://mydesign-pp-integration-prod-gen3.integration.us-
phoenix-1.ocp.oraclecloud.com/ic/api/integration/v1/integrations/
?integrationInstance=sysqa-drtest-cgs-inst2-remote-bxffubagcv29-yu-pp
2-9
Chapter 2
Configure Email Notification Settings After Failover
This is expected behavior because the global (regionless) URL is used only for runtime. You
must change the design-time hostname and integration instance name in the API call to reflect
the post-failover values.
Note:
If you are using the default Oracle Integration email tenancy, no manual configuration
is necessary. Configuration is automatic after failover.
3. In the SMTP configuration section, click to enable the customer tenancy mode.
4. Specify the SMTP user name and password and the default sender email address (that is,
the from address). These three fields are required. You can also optionally specify a
default address for system notifications. The settings you enter must match those settings
entered prior to failover in Configure Email Delivery If Using Your Own Email Tenancy.
2-10