MySQL Enterprise Cloud

Copyright © 2016, Oracle and/or its aﬃliates. All rights reserved. |
MySQL Enterprise
+ MySQL Cloud Service
Mark Swarbrick
Copyright © 2016, Oracle and/or its aﬃliates. All rights reserved.

Safe Harbor Statement
The following is intended to outline our general product direcMon. It is intended for
informaMon purposes only, and may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or funcMonality, and should not be relied upon
in making purchasing decisions. The development, release, and Mming of any features or
funcMonality described for Oracle’s products remains at the sole discreMon of Oracle.
3

Copyright © 2016, Oracle and/or its aﬃliates. All rights reserved. | ConﬁdenMal – Oracle Internal/Restricted/Highly Restricted 4
Topics PaaS
•  MySQL Enterprise Edi2on Overview
•  Technical Overview of MySQL Cloud Service
•  How MySQL Cloud compares to AWS RDS + EC2
•  Summary

Management Tools Advanced Features Support
• Scalability
• High Availability
• AuthenMcaMon
• Audit
• EncrypMon + TDE
• Firewall
• Monitoring
• Backup
• Development
• AdministraMon
• MigraMon
• Technical Support
• ConsultaMve Support
• Oracle CerMﬁcaMons
MySQL Enterprise EdiMon
The Highest Levels of MySQL Performance, Security & Up2me
5

•  MySQL Enterprise Firewall
–  Block SQL InjecMon AZacks
–  Intrusion DetecMon
•  MySQL Enterprise EncrypMon
–  Public/Private Key Cryptography
–  Asymmetric EncrypMon
–  Digital Signatures, Data ValidaMon
•  MySQL Enterprise AuthenMcaMon
–  External AuthenMcaMon Modules
•  Microso_ AD, Linux PAMs
•  MySQL Enterprise Audit
–  User AcMvity AudiMng, Regulatory Compliance
6
•  MySQL Enterprise Monitor
–  Changes in Database ConﬁguraMons, Users
Permissions, Database Schema, Passwords
•  MySQL Enterprise Backup
–  Physical backup ideal for larger databases
–  Veriﬁes data as it copies
•  MySQL Thread Pool
–  Improves performance on
high concurrency workloads
More informaMon available at : hZp://www.mysql.com/products/enterprise/

•  Provides 20x beZer scalability
•  Plugin improves sustained
performance as user connecMons
grow
MySQL Enterprise Scalability : Thread Pool

MySQL Enterprise Scalability : Thread Pool
Performance
Security
Availability
Internal Clients
Connec2on Execu2on Threads
External Clients
Thread Pool
Thread Group 1
Threads 1 - 4096
Thread Group 2
Threads 4097 - 8193
Thread Group N
Threads 8194 - N
Thread Group 1
Thread Group 2
Thread Group N
•  Contains conﬁgurable number of thread groups (default = 16)
– Each group manages up to 4096 re-usable threads
•  Each connecMon assigned to thread group via round robin
•  Threads are prioriMzed and statements queued
– Improves scalability as concurrent connecMons grow, protecMon from DOS aZacks

Security: A Major Concern
Over 430 M new unique
pieces of malware in 2015,
up 36% from previous year.
Over Half a Billion Personal
Records Were Stolen or Lost in
2015.
A New Zero-Day
Vulnerability Was
Discovered on Average Each
Week in 2015, a 125%
increase from 2014.
Spear-Phishing Campaigns
TargeMng Employees
Increased 55 Percent in
2015.
Source: Internet Security Threat Report 2016, Symantec

Regulatory Compliance: Top Trends Worldwide in 2016
Source: hZps://risk.thomsonreuters.com/content/dam/openweb/documents/pdf/risk/infographic/top-5-compliance-trends-around-globe-2016-infographic.pdf

MySQL Enterprise EncrypMon
•  MySQL encrypMon libraries
– Symmetric encrypMon AES256
– Public-key / asymmetric cryptography
•  Key management
– Generate public and private keys
– Key exchange methods: RSA, DSA, DH
•  Sign and verify data
– Cryptographic hashing for digital signing, veriﬁcaMon, & validaMon

MySQL Enterprise Transparent Data EncrypMon
Encrypted
Tablespace Files
Tablespace Key
Malicious OS User / Hacker
Accesses Files Directly
InformaMon Access Blocked
By EncrypMon
Master Key

Key Vault
MySQL Enterprise Transparent Data EncrypMon
2 Tier Architecture
MySQL Database
Tablespace Keys

MySQL
Server
Plugin &
Services
Infrastructure
InnoDB
Client
Keyring
plugins

•  Master Key
•  Stored outside the database
•  Oracle Key Vault
•  KMIP 1.2 Compliant Key Vault
•  Tablesapce Key
•  Protected by master key
Master Key
Plain Text
Encrypted 2
Encrypted 1

MySQL Enterprise Audit
•  Out-of-the-box logging of connecMons, logins, and query
•  Simple to ﬁne grained policies for ﬁltering, and log rotaMon
•  Dynamically enabled, disabled: no server restart
•  XML-based audit stream
– Send data to a remote server / audit data vault
•  Oracle Audit Vault
•  Splunk, etc.
Adds regulatory compliance to
MySQL applicaMons
(HIPAA, Sarbanes-Oxley, PCI, etc.)

MySQL Enterprise Audit - Work Flow
1.  Enables the Audit plugin
•  INSTALL PLUGIN audit_log soname
‘audit_log.so’;
2.  Defines Filters and OpMons
•  who, what, from where, etc to audit
3.  Reviews Local Audit Events
•  Directly
•  Using MySQL EE Workbench

DBA USER
1.  Joe
•  Connects from a host
•  AuthenMcates with a username
•  Run a select
•  Alters a table; etc
1.  MySQL Audit
•  Inspects ALL Joe is doing
•  Audit Filter defines
audiMng required
•  Writes to the audit file
IT
SEC
1.  Archives
•  Copy to an Audit “Vault”
•  E.g. Oracle Audit Vault, Splunk, …
2.  Globally Assess & Maintains Audit Trail

MySQL Enterprise AuthenMcaMon
•  PAM (Pluggable AuthenMcaMon Modules)
– Access external authenMcaMon methods
– Standard interface (Unix, LDAP, Kerberos, others)
– Proxied and non-proxied users
•  Windows
– Access naMve Windows services
– AuthenMcate users already logged into Windows
(Windows AcMve Directory)
•  Pluggable AuthenMcaMon API Integrates MySQL with exisMng
security infrastructures and SOPs

MySQL Enterprise Firewall
•  Real Time ProtecMon
– Queries analyzed and matched against White List
•  Blocks SQL InjecMon AZacks
– PosiMve Security Model
•  Block Suspicious Traﬃc
– Out of Policy TransacMons detected & blocked
•  Learns White List
– Automated creaMon of approved list of SQL command paZerns on a per user basis
•  Transparent
– No changes to applicaMon required
MySQL Enterprise Firewall monitoring

MySQL Enterprise High Availability
•  MySQL InnoDB clusters
– NaMve Client HA with MySQL Router
– NaMve Database HA with MySQL Group ReplicaMon
•  HA with Shared Storage SoluMons
– HA with Oracle VM
– HA with Solaris Clustering
– HA with Oracle Clusterware Plugin

Range of opMons to make your
MySQL applicaMon deployments
Highly Available

MySQL Router
•  Transparent client connecMon rouMng
– Load balancing
– ApplicaMon connecMon failover
•  Stateless design oﬀers easy HA client rouMng
– A local Router becomes part of the applicaMn stack
”MySQL Router allows you to easily migrate your standalone
MySQL instances to na;vely distributed and highly available
InnoDB clusters without aﬀec;ng exis;ng applica;ons!”
Transparent access to HA databases for MySQL Applica2ons
App Servers with
MySQL Router
MySQL InnoDB cluster

•  AcMve/AcMve Update Anywhere
–  AutomaMc conﬂict detecMon and resoluMon
–  AutomaMc distributed recovery
•  AutomaMc group membership management and failure
detecMon
–  No need for server fail-over
–  ElasMc scale out/in
–  No single point of failure
–  AutomaMc reconﬁguraMon
•  Well integrated
–  InnoDB
–  GTID-based replicaMon
–  PERFORMANCE_SCHEMA
ApplicaMon
MySQL Nodes ReplicaMon
Plugin
API
MySQL
Server
Group Comms
Release Candidate
MySQL Group ReplicaMon
The Building Block for InnoDB Clusters

MySQL Enterprise Backup
•  Online, non-locking backup and recovery
–  Complete MySQL instance backup (data and conﬁg)
–  ParMal backup and restore
•  Direct Cloud storage backups
–  Oracle Storage Cloud, S3, etc.
•  Incremental backups
•  Point-in-Mme recovery
•  Advanced compressed and encrypMon
•  Backup to tape (SBT)
•  OpMmisMc backups
•  Cross-Playorm (Windows, Linux, Unix)

MySQL DBA Checklist

1. Ensure your producMon databases are available ✔
2. Monitor MySQL performance throughout the day ✔
3. Verify that MySQL replicaMon is working properly ✔
4. Conﬁrm that backups have completed successfully ✔
5. Monitor disk space to ensure MySQL won’t run out of space ✔
6. Regularly monitor and idenMfy blocking issues ✔
7. Verify there have been no changes to database schema ✔
8. Check OS metrics for unusual events ✔
9. Check for security vulnerabiliMes ✔
10. Monitor and analyze memory usage ✔
22

MySQL DBA Challenges
•  “The database is slow. What needs tuning?”
•  “What are my most expensive queries?”
•  “Are indexes opMmized?”
•  “Is replicaMon lag a problem?”
•  “Did my last backup succeed?”
•  “When will my disk ﬁll up?”
•  “When will I need more hardware to scale-out?”
•  “Has my database schema changed?”
•  “Are there security vulnerabiliMes that I need to be concerned about?”
23

MySQL Enterprise Monitor
24
•  Start monitoring MySQL in 10 minutes
•  Real-Mme MySQL performance and
availability monitoring
•  Visually find & fix problem queries
•  Disk monitoring for capacity planning
•  Cloud friendly architecture
– No agents required
– Policy driven configuraMon
– Easy integraMon with DevOps tools

Cloud Friendly Architecture
•  MySQL
– Performance Schema provides Query Analyzer data
– Provides all MySQL related metrics
•  Service Manager
– Collects all MySQL related metrics
– Collects all OS/Host related metrics
•  Repository
– Stores all historical data
•  Agent (opMonal)
– Only required for OS/Host metrics
25
MySQL Enterprise
Dashboard
Service Manager
Repository
HTTPS
Data Center Public Cloud Private Cloud

InstallaMon & ConfiguraMon
•  Install the Service Manager
– shell> ./mysqlmonitor-3.X.X.XXXX-…-installer.bin
•  Up and Running in 10 minutes
– Auto-discovery of MySQL servers
– Advisors are pre-configured
– Advisors are pre-scheduled
•  CustomizaMon
– Centralized configuraMon dashboard
– Advisors
– Event handling
26

MySQL Enterprise Dashboard
27
"The MySQL Enterprise Monitor is an absolute
must for any DBA who takes his work seriously.”

Adrian Baumann
System Specialist
Federal Oﬃce of InformaMon Technology &
TelecommunicaMons
•  SLA monitoring
•  Real-Mme performance monitoring
•  Alerts & noMﬁcaMons
•  MySQL best pracMce advisors

Hardware
Schema Changes
Data Growth
Indexes
SQL
90% of
Performance Problems

Source of Database Performance Problems
28

MySQL Performance Schema
•  IdenMfy performance boZlenecks
•  IdenMfy problemaMc queries
•  Get real Mme insight into locks
•  See exactly what is happening
within MySQL
•  Get real Mme insight into MySQL
internals
•  Get real Mme insight into query
execuMons
29
mysql> select * from host_summary_by_stages;
+------+--------------------------------+-------+-----------+-----------+
| host | event_name | total | wait_sum | wait_avg |
+------+--------------------------------+-------+-----------+-----------+
| hal | stage/sql/Opening tables | 889 | 1.97 ms | 2.22 us |
| hal | stage/sql/Creating sort index | 4 | 1.79 ms | 446.30 us |
| hal | stage/sql/init | 10 | 312.27 us | 31.23 us |
| hal | stage/sql/checking permissions | 10 | 300.62 us | 30.06 us |
| hal | stage/sql/freeing items | 5 | 85.89 us | 17.18 us |
| hal | stage/sql/statistics | 5 | 79.15 us | 15.83 us |
| hal | stage/sql/preparing | 5 | 69.12 us | 13.82 us |
| hal | stage/sql/optimizing | 5 | 53.11 us | 10.62 us |
| hal | stage/sql/Sending data | 5 | 44.66 us | 8.93 us |
| hal | stage/sql/closing tables | 5 | 37.54 us | 7.51 us |
| hal | stage/sql/System lock | 5 | 34.28 us | 6.86 us |
| hal | stage/sql/query end | 5 | 24.37 us | 4.87 us |
| hal | stage/sql/end | 5 | 8.60 us | 1.72 us |
| hal | stage/sql/Sorting result | 5 | 8.33 us | 1.67 us |
| hal | stage/sql/executing | 5 | 5.37 us | 1.07 us |
| hal | stage/sql/cleaning up | 5 | 4.60 us | 919.00 ns |
+------+--------------------------------+-------+-----------+-----------+

Performance Monitoring
•  Monitor MySQL performance
•  Monitor OS performance
•  Monitor query performance
•  Advice on index usage
•  Alerts on performance problems
30

Enterprise Query Analyzer
•  Real-Mme query performance
•  Visual correlaMon graphs
•  Find & ﬁx expensive queries
•  Detailed query staMsMcs
•  Query Response Time index (QRTi)
31
“With the MySQL Query Analyzer, we were able to iden;fy
and analyze problema;c SQL code, and triple our database
performance. More importantly, we were able to
accomplish this in three days, rather than taking weeks.”

Keith Souhrada
So_ware Development Engineer
Big Fish Games

MySQL Enterprise Monitor + Backup
•  Monitor backup results
•  Monitor backup performance
•  Ensure backups are up to date

MySQL Workbench EE
•  Database migraMons
– From Microso_ SQL Server,
PostgreSQL, Sybase ASE, Sybase SQL
Anywhere, SQLite, Microso_ Access,
and more
•  Manage migraMon projects
•  Source and target selecMon
•  Object migraMon
•  Data migraMon
•  MySQL version upgrades
Database MigraMon Wizard
for SQL Server, Sybase, SQLite, SQL Anywhere & PostgreSQL

MySQL Workbench EE + Audit
•  Fast and easy access to Audit
events
•  Indexed searches
– Event type
– User account
– Date range
– Text match

MySQL Workbench EE + Backup
•  Create and manage backup jobs
– Create new backup jobs
– Schedule backup jobs to run
automaMcally
– View current backup jobs
– View recent backup acMvity
•  Restore backups
– Full, parMal, incremental …

MySQL Enterprise Support
•  Provided by the experts, straight from the source
•  Backed by the MySQL developers
•  World-class support, in 29 languages
•  Hot ﬁxes & maintenance releases
•  24x7x365
•  Unlimited incidents
•  ConsultaMve support
•  Global scale and reach
Get immediate help for any MySQL
issue, plus expert advice

MySQL ConsultaMve Support
Make the Most of your Deployments
•  Remote troubleshooMng
•  ReplicaMon review
•  ParMMoning review
•  Schema review
•  Query review
•  Performance tuning
•  ...and more

Work Directly with MySQL Engineering
•  A direct relaMonship with the MySQL team
•  The ability to parMcipate in:
– Product roadmaps
– Product betas
– Customer advisory boards
•  Work closely with Support Engineers
– Resolve issues faster
– Request bug and feature request escalaMons

MySQL Enterprise Oracle CerMﬁcaMons
• Oracle Enterprise Manager
• Oracle Linux & Oracle VM
• Oracle Solaris
•  Oracle Solaris Clustering
•  Oracle Clusterware
•  Oracle OpenStack
• My Oracle Support
• Oracle Fusion Middleware
• Oracle GoldenGate
• Oracle Audit Vault
• Oracle Database Firewall
• Oracle Secure Backup
MySQL integrates into your Oracle environment

MySQL Enterprise EdiMon Take Aways
On-Premises: Achieve the highest levels of MySQL Performance, security
& upMme
In Oracle Cloud: AddiMonally increase business agility, accelerate
innovaMon & reduce costs
Hybrid: Flexibility to move workloads between on-premises & the
cloud and to implement hybrid architectures

MySQL Cloud Service: Product Overview
ConﬁdenMal – Oracle Internal/Restricted/Highly Restricted 41
PaaS
Compute
Database
Administra2on
Automated
Provisioning
Push BuZon
Patching
1-Click Instance
Management
Enterprise
Monitoring
Backup &
Recovery
Automated
Backup
Point-in-Mme
Recovery
On-demand
Snapshot
Scalability
ElasMc Compute
ElasMc Storage
Enterprise Thread
Pool
ElasMc
ReplicaMon*
High
Availability
ReplicaMon
ReplicaMon
Monitor
MulM-AD Support*
Security
Network Access
Control
Enterprise Firewall
Enterprise
AuthenMcaMon
Enterprise
EncrypMon & TDE*
Enterprise Audit
Management
Access
Data
Access
CLI
REST API
Oracle Cloud Console
MySQL Tools
On-premise
ApplicaMons
Oracle Premier Support
Oracle Infrastructure Cloud Services

In Short
•  Oracle Public Cloud
•  Database as a Service (PaaS)
•  MySQL with the annoying bits managed for you:
– Backups
– Patches
– Monitoring
– etc.
PaaS

What version of MySQL is it?
•  Powered by MySQL 5.7 Enterprise EdiMon
•  Same so_ware used in cloud as on premise
– You will be able to migrate workloads in both direcMons
•  OpMmized conﬁguraMon
– In my.cnf ﬁle
– In compute and storage

Under the Hood
44

•  InnoDB IO ConfiguraMon opMmized
– Number of IO threads
– O_DIRECT
– Redo log size and buffer
– Plus more…
•  Thread Pool Enabled By Default
•  Scalable Auto Increment
•  Memory opMmized to compute
shape
– Buffer Pool
•  Plus more…

OpMmized ConfiguraMon of MySQL

•  Oracle Linux 6
– UEK
– MySQL task priority
– Memlock
– ext4 Filesytstem
•  Storage is powered by ZFS
Appliances
•  OpMmized for latency:
– Binary Logs
– Redo Logs
•  OpMmized for throughput:
– Data ﬁles
OpMmized Compute and Storage

•  Fully Managed:
– On Demand
– Scheduled
– Incremental
•  Powered by MySQL Enterprise
Backup
•  Default
– Weekly full backup
– Daily incremental backup
– 30 day retenMon (in Cloud Storage)
– 7 day retenMon (locally)
•  Access to Raw Backup Files
Backup

User IniMated Patching
•  Time maintenance to opportune Mme
•  Click of a BuZon
•  Delay upgrade if desired
– Very occasionally patches need to change behavior
– Security being example
•  AutomaMc backup before patching
•  Rollback opMon if required

•  MySQL Enterprise Firewall
–  Block SQL InjecMon AZacks
–  Intrusion DetecMon
•  MySQL Enterprise EncrypMon
–  Public/Private Key Cryptography
–  Asymmetric EncrypMon
–  Digital Signatures, Data ValidaMon
•  MySQL Enterprise AuthenMcaMon
–  External AuthenMcaMon Modules
•  Microso_ AD, Linux PAMs
•  MySQL Enterprise Audit
–  User AcMvity AudiMng, Regulatory Compliance
50
•  MySQL Enterprise Monitor
–  Changes in Database ConﬁguraMons, Users
Permissions, Database Schema, Passwords
•  MySQL Enterprise Backup
–  Physical backup ideal for larger databases
–  Veriﬁes data as it copies
•  MySQL Thread Pool
–  Improves performance on
high concurrency workloads
More informaMon available at : hZp://www.mysql.com/products/enterprise/

Moving Data In and Out
51

Oracle Public Cloud Exclusive Feature
SSH Access
•  Log into your MySQL Cloud Service Instance
•  Works well with MySQL Workbench
– SSH Tunnel direct from Workbench to Cloud Service
– Port 3306 does not need to be exposed

MySQL Root Access
•  Connect via Command Line or Workbench
•  Perform AdministraMon tasks as MySQL root:
– Set oﬄine mode, read only

ReplicaMon
•  Binary log already enabled
– Service already fully conﬁgured to be a master
– Binary log defaults to 90 day retenMon
•  Can replicate to/from on premise
– Restricted only by ﬁrewall rules
•  Can replicate to other instances of MySQL Cloud Service

Scaling Up / Down
56

Open Secure
Choice
Complete

Complete
•  Spanning all layers of the cloud:
IaaS, PaaS, SaaS
•  Every layer…integrated
•  Based on our foundaMonal
infrastructure playorms
•  Reduces complexity
•  Every category and stakeholder
•  ConsumpMon models for all

Open
•  An open, standards-based playorm
•  Supports all workloads,
applicaMons, languages, open
source, OS playorms, data types
•  For everyone to build on,
customers & partners
•  Integrated with Oracle apps and
the applicaMon ecosystem

Secure
•  Oﬀers protecMon for every layer
•  Physical datacenter access
•  EncrypMon of data at rest, in moMon
•  App access; privileged users controls
•  Masking, redacMng sensiMve data
•  IdenMty management

Choice
• Deployment opportuniMes–private
cloud, public cloud, public cloud on
premises (OCM) & hybrid cloud
•  Same environments preserve
exisMng IT investments, skills
•  MigraMon and adopMon paths–
infrastructure, workloads, apps,
integraMons, extensions
•  Broad ecosystem of partners

DemysMfying Amazon
RDS for MySQL

DemysMfying Amazon RDS for MySQL
•  AWS oﬀers Public Cloud only
•  AWS is a ‘one way street’; no portability
from cloud to on-premises
•  No hybrid cloud opportunity
•  No ability to implement hybrid
architectures
No support for
hybrid cloud or
on-premises
environments

•  No MySQL Enterprise Firewall
•  No MySQL Enterprise EncrypMon & TDE
•  No MySQL Enterprise Audit
•  No MySQL Enterprise AuthenMcaMon
No Advanced
Security Features

•  No connecMon with MySQL Engineering
•  Runs older MySQL versions that don’t have the
latest bug ﬁxes and security features
•  MySQL Technical Support not included
•  No Access to Expert Technical Support, backed
by MySQL developers
Not from the
Source

•  Not integrated with Oracle Environment for
easy development & deployment
•  No pre-conﬁgured & opMmized MySQL
versions
•  No access to MySQL Enterprise Monitor &
Query Analyzer
•  No Access to MySQL Thread Pool
No integraMons,
No opMmizaMons

•  Aurora is NOT MySQL
•  Designed for compaMbility with MySQL 5.6, not
with MySQL 5.7 (GA since Oct 2015)
•  NOT Open Source
•  UlMmate Lock-in: Only available from AWS
•  Not available on-premises or anywhere else
•  Not popular: ranks #73 vs #2 for MySQL*
Not MySQL
Not Open Source
What About Amazon Aurora?
*Source: hZp://db-engines.com/en/ranking

Oracle MySQL Cloud Service
Simple, Automated, Integrated & Enterprise-Ready
•  The #1 Open Source Database in Oracle Cloud
•  Only public cloud integraMng MySQL Enterprise EdiMon
•  Rapidly, securely and cost-eﬀecMvely develop & deploy
modern MySQL-based applicaMons

Highest Levels of Security Scalability & Availability
Expert MySQL
Technical Support
Integra2on into Oracle
Cloud Environment
Hybrid deployments across
cloud & on-premises Lower TCO

•  Increase Business Agility: Focus your resources
on innovaMon and rapidly deliver new modern
applicaMons.
•  Ensure Security, Performance & Up2me: relying
on the most comprehensive MySQL cloud
playorm – straight from the source .
•  Reduce Total Cost of Ownership: Saving on
infrastructure and database management
operaMons costs while improving upMme.
Oracle MySQL Cloud Service: Business Beneﬁts

MySQL Enterprise Cloud

Recommended

More Related Content

What's hot (20)

Similar to MySQL Enterprise Cloud (20)

More from Mark Swarbrick (14)

Recently uploaded (20)

MySQL Enterprise Cloud