Oracle Data Protection - 2. část

Oracle’s Data Protection Solutions Will
Help You Protect Your Business Interests
Oracle Data Protection
Josef Šlahůnek
Principal Cloud Systems Solution Engineer
Duben 2021
Josef.Slahunek@oracle.com
Telefon: +420 602 731 728

Copyright © 2021 Oracle and/or its affiliates.
2
Safe Harbor Statement
The following is intended to outline our general product direction. It is intended for information purposes only,
and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or
functionality, and should not be relied upon in making purchasing decisions. The development, release,
timing, and pricing of any features or functionality described for Oracle’s products may change and remains at
the sole discretion of Oracle Corporation.
Statements in this presentation relating to Oracle’s future plans, expectations, beliefs, intentions and prospects
are “forward-looking statements” and are subject to material risks and uncertainties. A detailed discussion of
these factors and other risks that affect our business is contained in Oracle’s Securities and Exchange
Commission (SEC) filings, including our most recent reports on Form 10-K and Form 10-Q under the heading
“Risk Factors.” These filings are available on the SEC’s website or on Oracle’s website
at http://www.oracle.com/investor. All information in this presentation is current as of March 2021 and Oracle
undertakes no duty to update any statement in light of new information or future events.

3
“A clever person solves a problem.
A wise person avoids it.”
― Albert Einstein

Not database aware
▪ Cannot validate
recoverability
▪ Cannot recover to any
point in time
▪ Inefficient use of resources
▪ Potential application
performance impacts
Not cloud-ready
▪ No compatible cloud
capabilities
Not database aware
▪ Increased operational
effort
▪ Slower backups and
recoveries
▪ Longer multi-vendor
problem resolution
Critical challenges with generic data protection
Copyright © 2021, Oracle and/or its affiliates. All rights reserved.
4

What is MAA?
▪ Oracle Maximum Availability Architecture
▪ Oracle’s best practices for protecting Oracle databases:
design, implementation and operations
▪ Uses Oracle products and technologies
▪ Established, proven and differentiated, validated by
thousands of demanding customers
▪ Complements and extends Exadata value proposition
https://www.oracle.com/uk/database/technologies/high-
availability/maa.html
5

Outage Matrix
Unplanned Outage RTO/RPO*
Recoverable node or instance failure Seconds
Disasters: corruptions and site failures Seconds. RPO zero or seconds
Planned Maintenance
Software/hardware updates Zero
Major database upgrade Seconds
Primary Region Secondary Region
Local
backup
Remote
Standby
Primary
Local
Standby
Local
backup
AD2 AD1
Mission Critical
Silver +
• Active Data Guard
• Comprehensive Data Protection
MAA Architecture:
• At least one standby required
across AD or region.
• Primary in one data center(or AD)
replicated to a Standby in another
data center
• Local backups on both primary and
standby
GOLD
* RPO=0 unless explicitly specified 6

Oracle Backup & Recovery Solutions Portfolio
Oracle Cloud
Protected Files
ExaCS
DBCS
Instantiate
into
DBCS/ExaCS
DB Backup Cloud Service
Secure Backup
On-Premises
Oracle Cloud
Storage
Compression
& Encryption
Backup to and Recover from On-Premises or Oracle Cloud
Protected Databases
Cloud @ Customer
Filesystem
RMAN: Built-in backup &
recovery engine for the Oracle
database which provides
performant, efficient
and dependable protection.
Recovery Appliance:
Engineered System purpose-
built for data center-wide Oracle
database protection which
ensures zero data loss, verifies
backup integrity, and reduces
data protection overhead by
eliminating repeated full
backups.
DB Backup Cloud Service:
Secure & scalable Oracle Cloud
Service providing cost effective
storage for long-term retention
& compliance of RMAN
backups.
Secure Backup: Centralized
disk, tape and cloud backup
management which provides
heterogeneous filesystem
protection.
1
1
2
2
3
3
4
4
Archive Storage*

8 Copyright © 2021 Oracle and/or it’s affiliates.
The Only Data Protection Extension Of The Database
Oracle
Recovery
Appliance
ZDLRA offers
Continuous Data Protection
Sub second Recovery Point Objective
Longer retention with less capacity
Shorter restore time for better RTO
Recovery Appliance

Copyright © 2021 Oracle and/or its affiliates | Confidential – Authorized OPN Partner Only.
Full Suite of Unique Co-Engineered Capabilities
Recovery Appliance Innovations
Oracle
Database
Innovations
Oracle
Exadata
Database
Machine
Innovations
Multitenant
In-Memory DB
Real Application
Clusters
Active Data
Guard
Partitioning
Advanced
Compression
Advanced Security,
Label Security, DB Vault
Real Application
Testing
Advanced Analytics,
Spatial and Graph
Automatic
Storage Manager
RoCE 2 100GbE
Fabric
Columnar Flash Cache
HCC
10:1
I/O I/O I/O
Storage
Indexes
Hybrid Columnar
Compression
I/O Resource
Management
Exafusion
Direct-to-Wire Protocol
Offload SQL to Storage
Network Resource
Management
In-Memory Fault
Tolerance
PCI Flash
Smart Flash Cache, Log
Validation
Offload
Zero Data
Loss
Incremental
Forever Backup
Virtual Full
Backups
Recoverability
Monitoring & Alerts

Recovery Appliance
Centralized Data Protection For Oracle Databases
Delta Push
• DBs access and send only changes
• Minimal impact on production
• Real-time redo transport instantly
protects ongoing transactions
Protected Databases
Protects all DBs in Data Center
• Petabytes of data
• Oracle 10.2-19c, any platform
• No expensive DB backup agents
Delta Store
• Stores validated, compressed DB changes on disk
• Fast restores to any point-in-time using deltas
• Built on Exadata scaling and resilience
• Enterprise Manager end-to-end control
Recovery Appliance
Replicates to
Remote Recovery
Appliance
Offloads
Tape Backup
Offloads to
Oracle Cloud

Recovery Appliance
Time Machine For Your Oracle Databases
Day 0
Full
Day 1
incremental
Day N
incremental
Day N Virtual Full
Day 1 Virtual Full
Real time redo log transfer
Real time logs
Space & Time
Efficient Backups
Incident at
25 Feb 12:32 55
Restore Full Backup
@ 25 February 01:00
Recover to 12:32 55

Every Restore Is Not Equal
Inconsistency Across DB’s Can Amplify The Damage
Incident at
25 Feb 12:32 55
Incident at
25 Feb 12:32 55
Restore to 11:51 22
Restore to 12:05 45
Restore to 11:35 05
Restore to 12:32 55
Restore to 12:32 55
Restore to 12:32 55
Exact time to restore on RA depends several parameters. RA can restore to latest transaction it received from the DB.
Generic
Appliance
Recovery
Appliance
Recover to last archive log backup
Data loss is inherently bad but data inconsistency is even
worse and does amplify problems.
There will be inconsistency between the restored DB’s and
also between restored and healthy DB’s.
It can take hours to days to bring back consistency,
damaging business in multiple ways.
Restoring successfully is good but restoring to any point of
time is even better.
There will be no or very little inconsistency across DB’s
It will take a lot less time to get back online thanks to RA
Recover to last transaction on RA

ZDLRA For Cyber Security
Your Last Line Of Defense
Risks ZDLRA Features ZDLRA Benefits
Cyber
Attack
Data Loss
Downtime
Automated Validation & Retention & Copy Management
• Backups are always validated and checked for recoverability
• Replicated systems are isolated from primary ones
• Backup archive copy can be sent to cloud or existing backup
infrastructure for further isolation
✓ Isolation from attacked databases
✓ Validated and secured data can be
recovered from replicated system or
off-site copies too
Separation of Duties
• Strict separation of duty between DBA, backup administrator and
appliance administrator roles
✓ Data cannot be intentionally deleted
✓ No user can backup, recover, or modify
protected databases
Limited Network access
• Appliance can not be mounted as a file system
✓ Further protected from coordinated
attacks deleting backups
Superior Resiliency
• Resilient architecture for reducing surface of attack
✓ Ultimate risk reduction against attacks
Ransom
ware
Ransom
request
ZDLRA features:
• Backup data can be recovered to any server
• Real-time redo transport allows recovery to the very last transaction
prior to the attack occurrence
✓ With Recovery Appliance, don’t pay the
ransom – just recover at Any Point In
Time the database to a separate, safe
location with no data loss

Data Protection As A Service
Gold Policy
Customer Critical
Disk: 35 days
Tape: 90 days
Silver Policy
Internal Critical
Disk: 10 days
Tape: 45 days
Bronze Policy
Dev/Test
Disk: 3 days
Tape: 30 days
Cloud
Storage
Tape
Replica
Replica Recovery Appliance
also Policy-based

Amazingly fast restore
performance 15-432TB/hr
Due to re-hydrating and slower
hardware performance is limited
to 1-2TB/hr
Several manual operations may
be needed to minimize data loss
Before going online you will
need to analyze how much
data lost!
Inconsistency needs to be
fixed before onlining systems.
Realtime redo log transfer
enables fast recovery to anytime
No data lost, so no time needed
for damage assessment
No time wasted to detect and
fix inconsistencies
Time Pressure During Recovery
Let ZDLRA Help You
Generic
Appliance
2
Tue 1
Mon
Recovery
Appliance
1
Mon
01:2038:00

Time To Stop Wasting Resources For Backup
Disk / Tape /
Dedupe Backup Agents
Backup Operations: Merge,
Compress, Validate, Delete,
Full/Tape Backups
Disk / Tape /
Dedupe Backup Agents
Backup Operations: Merge,
Compress, Validate,
Delete, Full/Tape Backups
Performance degrades with backups
Database server today Database server with Oracle Recovery Appliance
Performance improves with backup offload
Delta Push

Cryptic monitoring tools. No relation to business need. No real time status monitoring.
What Would You Like To Monitor?
Backup Jobs or Realtime Recoverability Status
Database aware monitoring. Related to business needs. Real time status monitoring.
Goals vs
Achievement
Realtime Data Loss Exposure
Storage Efficiency
Goals vs
Achievement
Copy Status

Excellent Integration With Exadata Cloud @ Customer
DB As A Service Meets Protection As A Service

Separation Of Duties
Database Administrator vs ZDLRA Administrator
Separation
of Duty
Database Administrator:
• Backup, Restore, Read-only Access to Backup and
Recovery Status Information
• Cannot delete backups at-will
• Cannot modify appliance configuration
Recovery Appliance Administrator:
• Create Protection Policies, Enroll /
Un-enroll Databases, Perform Appliance Administrative
Functions,
Monitor System Activities and Health
• No Database / Backup / Restore Access
• Cannot restore backups and open database for access

Recovery Appliance X8M
Configurations and Scaling
Add Storage
As Needed
Add Racks
As Needed
Base Rack
2 Compute Servers, 3 Storage Servers
155 TB Usable / 1.55 PB Virtual
15 TB/Hr Restore
Full Rack
949 TB Usable / 9.5 PB Virtual
24 TB/Hr Restore
18 Racks
17 PB Usable / 170 PB Virtual
432 TB/Hr Restore

Recovery Focused Architecture vs Generic Appliance
Business Requirements
Generic
Appliance
Recovery
Appliance Oracle’s New Recovery Focused Architecture
Known recovery status No Yes Real-time recovery status for all databases under management
Recovery Point Objective (RPO) < 1 Second No Yes Continuous Data Protection (CDP) protects ongoing transactions
Predictable restore performance No Yes Same performance for backup and restore with published data rates
Alerts based on data loss exposure No Yes ABSOLUTELY—that’s all that matters!
Storage allocated based on recovery goals No Yes Dynamic storage allocation based on recovery window goals with added
benefit of eliminating over-provisioning
Oracle-aware validation No Yes Oracle-aware validation at every touch point and periodically for backup blocks
at rest. An added benefit is NO impact to production Oracle Database servers
Source-side Deduplication without impact to
database servers
No Yes Only changed blocks sent from servers (Delta Push) and stored on the Recovery
Appliance. An added benefit is reduced network traffic
Reporting by database on current Recovery
Window and Data Loss Exposure
No Yes ABSOLUTELY—that’s all that matters!
Linear performance with scale No Yes Scale with linear performance and NO Single Point of Failure Architecture

Value Of A True Engineered System
Cost Of ZDLRA
Generic Data
Protection
Cost Of HW
Backup
Software
Backup
Servers
Additional
Infrastructure
Additional
Integration
Work
Unnecessary
CPU&IO on
Host
Archive
log
backups
on Tier 1
storage
Oversized
Upgrades
Additional
Administration
Cost of
Additional
Risk

Options For Integrating ZDLRA To your Environment
FC
Oracle
Secure
Backup
Direct Attached Tape Library
Managed by onboard OSB, accessed using
FC. Fastest performance, requires dedicated
resources.
FC
Oracle
Secure
Backup
ZDLRA
Partition
Partitioned Library
Managed by onboard OSB, accessed using
FC. High performance. Rest of the library
can be used by backup software.
Ethernet
Backup
Software
Backup Server
FC or Ethernet
Connected To Backup Environment
Backup SW agent is installed on RA and it’s
used to stream backups to media/master
server which can push to data to any end
device supported by backup software.

Simplify, Enhance, Reduce Costs
Forever Incremental
Realtime redolog shipping
OLTP
Databases
Data
Warehouse
Non-Oracle
Forever Incremental
Image Backups
Backup Server
Backup
Backup
Longterm
archiving*
(Plannned
feature)
* Integration between ZDLRA and ZFS is being evaluated for feasibility and supportability. Oracle can decide not to implement this feature.
Tape
Library
Simplified architecture, critical OLTP Oracle
Databases benefit from ZDLRA’s realtime
redolog shipping capabilities.
DWH systems and Non-Oracle backups are
directed to existing ZFS storage. ZFS
storage also hosts dev/test environments
and can be utilized for inplace recovery by
backup SW thanks to it’s primary storage
capabilities.
Oracle DB’s are backed up by RMAN,
significantly reducing SW cost, increasing
performance adding new capabilities.
Planned* integration between ZFS and
ZDLRA can further help protect investment
and reduce costs.

Oracle
Recovery
Appliance
Výhody ZDLRA
- Průběžně zálohuje všechny Oracle DB na jakékoliv platformě
- Odstranění týdenních plných záloh a znatelné snížení zatížení firemní sítě,
méně portů
- Menší nároky na diskový prostor pro zálohy
- Plná průběžná validace všech dat z hlediska Oracle DB, administrátor
okamžitě vidí jestli je možná obnova dat z pohledu Oracle DB
- RPO pod jednu sekundu a znatelně rychlejší RTO
- Jedná se o zálohovací rozšíření Oracle DB díky plné podpoře od Oracle a
plné integraci s Oracle RMAN, RMAN má přímo od Oraclu plugin
- Umožňuje zálohovat a zároveň kopírovat dřívější zálohu na několik dalších
serverů
- Umožňuje stanovit politiky pro zálohy data-retention, kdy se má záloha
přesunout na pásky a kdy se má smazat
- Integruje vlastní backup SW a není nutná žádná další backup licence
- Umožňuje obnovu dat z pásek i pokud ZDLRA není dostupná
- Zálohy nelze jednoduše smazat z pozice Oracle DB administrátora
- Plná integrace i s Oracle Advance Securitou, tedy pokud se používá šifrování
dat, nesníží se významně kapacita úložiště
- Umožňuje cross platform migraci, ulehčuje migraci mezi UNIX-Linux s
minimálním výpadkem
- Plně zdvojené části systému a integrovaná SQL logika
- Možnost propojení s Oracle cloudem místo pásky

APPLICATIONS
• DBaaS Cloud Hosting
for Enterprises
• OLTP, DW, Mixed
Workloads
• Backup/Recovery
• Disaster Recovery
DB OPTIONS
• RAC
• Multitenant
• Adv Security
10 Exadata Systems, 6 Recovery Appliances
26
Swisscom Transforms Backups for Managed Oracle DB
Service with Zero Data Loss Recovery Appliance
Swisscom is Switzerland’s leading telecom provider and one of its
foremost IT companies. Swisscom offers mobile
telecommunications, fixed network, Internet and digital TV
solutions for business and residential customers.
Result
Backups configured in 5 minutes (from 2 weeks).
40% reduction in backup storage. Eliminated
manual backup validations via continuous
background validation. Fast, point-in-time
restores.
Swisscom Objective
Faster, end-to-end automation of new database
backup configurations. Backups that are highly
available, consume less storage and restore
faster than conventional backups.
Industry: Telecommunications
Headquarters: Switzerland
SWISSCOM DC 1 DC 2
Data Guard
Replication
(Non Data Guard DBs)
Backup Backup

Data protection
with Oracle ZFS
Storage Appliance
27 Copyright © 2021, Oracle and/or its affiliates. All rights reserved.

28
Data protection needs in
modern IT
▪ High performance
▪ High capacity
▪ High availability
▪ Database co-engineering
▪ Management simplicity
▪ High value and low TCO

High performance and capacity for data protection
▪ Extreme speed backup & restore
• Up to 54TB/hour backups
• Up to 66TB/hour restores
▪ High capacity and efficiency
• Up to 16 PB of raw disk capacity
• Built-in deduplication and compression
▪ Appliance-style automated management
• Automated database IO tuning accelerates backup & recovery
• In-place recovery and reuse of database backups for
development and testing
• Simple snapshot and replication

Universal data protection with Oracle ZFS Storage Appliance
30
Any
Database
▪ Oracle
▪ SQL Server
▪ mongoDB
▪ Cassandra Any
Application
▪ PeopleSoft
▪ E-Business Suite
▪ SAP
▪ Exchange
Any
Virtual Machine
▪ Oracle VM
▪ KVM
▪ VMware
▪ Citrix
Any
Backup Software
▪ RMAN
▪ Commvault
▪ Veritas
▪ Veeam

Up to 13X faster and 12X more scalable that other PBBAs
31
54
66
12
31
5
1
Native backup throughput (TB/hr)
Native restore throughput (TB/hr)*
Max Usable Capacity (PB)
Oracle ZFS Storage Appliance versus Dell EMC Data Domain
Data Domain 9800 ZFS Storage Appliance ZS7-2
* Dell EMC does not report restore performance, 5TB/hour is from customer testing reported to Oracle

Save 40% on Oracle Database storage with Hybrid
Columnar Compression
▪ 10X to 50X data reduction for query
and historic data
▪ Up to 8X query acceleration
▪ Works with encryption
▪ Policy-driven incremental HCC levels with
Automatic Data Optimization
▪ Maintain efficiency advantage in
analytics, development and testing
Oracle’s maximum data
compression solution
10X Up to 50X

Oracle Intelligent Storage Protocol accelerates database
performance and simplifies management
▪ Exclusive communication between Oracle
Database and Oracle ZFS Storage Appliance
▪ Auto-configure and auto-tune Oracle
Database storage
▪ Increases throughput and efficiency for
transactions and data protection
▪ Simplifies up to 90% of management tasks
OISP

Unique database IO optimizations increase performance
with no manual tuning
▪ Each database IO is identified by type
▪ Latency-sensitive database operations are
dynamically prioritized
▪ Critical latencies are reduced by up to 13X
▪ Applications run up to 19% faster
▪ RMAN throughput increases by up to 33%
Control File
Latency
2.1ms
27.9ms
13.5X Faster
Log File
Latency
7.3ms
28.9ms
3.9X Faster
OLTP
TRXN’s/Minute
197,274
TPM
235,549
TPM
19% Faster
RMAN
Throughput
33% More IO
90 mins
60.3 mins

Backup to Oracle Cloud
Copyright © 2021, Oracle and/or its affiliates
35
▪ Adds a layer of off-premises data protection
in the Oracle Cloud
▪ Leverages ZFS Storage Appliance’s snap,
clone, and send/receive technologies
▪ Stores snapshots directly in Oracle Cloud
Infrastructure object storage
▪ Supports:
• Full and incremental snapshot backups
• Multiple cloud regions
• Standard and archive tiers
▪ Encrypts data automatically

Oracle ZFS Storage Appliance
Unified storage optimized
for all your datacenter
needs
Optimized for demanding
applications, databases, & VMs
Optimized for
high-throughput
data protection
2X performance
at ½ the cost
Up to 10X more
performance
at ½ the cost
4:1 unified storage
consolidation
3:1 backup
consolidation
Tight integration with
Oracle Engineered Systems
Single-vendor solution with cloud
scale and complementary services

Scale, Simplify, and Save
Oracle’s StorageTek SL150 Modular Tape Library
• Base Module:
3RU,2 drive
bays, 30 slots
• Expansion
Module: 2RU,
2 drive bays,
30 slots
Size
• 30-450 Slots
in a single
system
Scale
• Up to 360
TB (native)
per module
• Up to 5.4 PB
(native) in a
single
system
Capacity
• 1-30
drives
• Half-height
LTO drives
Drives
37

38
Library design optimized for customer ease of use and serviceability
Oracle’s StorageTek SL150 Modular Tape Library
MailSlot
Operator Panel
Base
Expansion
Magazines

39
Scalability, Reliability, High Availability, Performance
Oracle StorageTek Enterprise Tape Libraries
StorageTek SL4000
– 300 to 9,004 Slots
▪ 108 PB uncompressed
– 1 to 120 tape drives
▪ 123GB/sec uncompressed
– Up to 2 robots
▪ Active/active
– 24x7 design

40
Reliable, Economical Storage For Data Protection & Archive
StorageTek Tape Storage Software
Oracle Key Manager
(OKM 3)
Simple, Secure, Scalable the
Oracle Key Manager 3 is
designed with an emphasis on
simplicity, security, and
scalability. Designed to meet
stringent enterprise
requirements for compliance
with legal, financial, and
regulatory requirements.
StorageTek Tape
Analytics
Simplify tape storage
management with a proactive
approach to eliminate library,
drive, and media errors
through intelligent
monitoring software available
exclusively for Oracle’s
StorageTek tape libraries.
StorageTek
ACSLS
Automated Cartridge
System Library Software
from Oracle centralizes the
management of multiple
tape libraries for easier
administration, increased
utilization, and a lower total
cost of ownership.

Oracle Data Protection - 2. část

Recommended

More Related Content

What's hot (20)

Similar to Oracle Data Protection - 2. část (20)

More from MarketingArrowECS_CZ (20)

Recently uploaded (20)

Oracle Data Protection - 2. část