From the course: Oracle Base Database Services Professional Workshop

Oracle Base Database Service overview

(mellow instrumental music) - Welcome friends to the Oracle University module on Oracle Base Database Service in Oracle Cloud infrastructure. I'm your host, Tshego. Let's get started. Over the next few minutes we'll highlight some of the key features of the service. We'll look into the fundamentals, the shapes and architectures for virtual machines, as well as describe some of the availability aspects of the service. We'll then finish off by providing some insight into security. Oracle offers a range of database services in Oracle Cloud. In general, we can break them down by the performance, scale and performance requirements for the system, where the systems will reside, Oracle Public Cloud versus customer data center, and who manages the infrastructure and database. Base Database Service is built on standard compute and storage options, offers both Oracle Database Standard and Enterprise Edition, and is typically for workloads of smaller processing and storage requirements. Exadata Database Service on Dedicated Infrastructure in the public cloud and Exadata Cloud@Customer are both built on the Exadata platform, and as a result offer the highest performance, scale, and availability, along with all the database options and functionality of Oracle Database Enterprise Edition. Exadata Cloud@Customer offers the same cloud economics and cloud automation as Exadata Database Service on Dedicated Infrastructure in Oracle Public Cloud, but is deployed in customer data centers. Autonomous database is fully autonomous and managed by Oracle, and is available in Oracle Public Cloud on Oracle Cloud Infrastructure or in customer data centers on the Exadata Cloud@Customer. Oracle Base Database Service provides you the ability to deploy full-featured Oracle Databases in the cloud. Oracle Base Database Service is available in Oracle Cloud Infrastructure regions all around the world. You can deploy Enterprise Edition or Standard Edition 2 and Database version 11gR2, 12c, 19c, and 21c and later using virtual machines, which are referred to as DB systems in Oracle Cloud Infrastructure. DBCS allows you to run and manage workloads on single-instance or two-node RAC virtual machine DB system shapes. With Oracle Base Database Service you manage the database instance, including provisioning, patching, backup, and disaster recovery using cloud automation tools, such as the Oracle Cloud Infrastructure Console, CLI, or API. Oracle Base Database Service provides a license-included Oracle Database Consumption option. The four licensing tiers of functionality to meet application-specific requirements. Standard Edition 2, features included with the service are multitenant for three or less pluggable databases per container database, machine learning, and spatial and graph. Enterprise Edition adds additional database features, such as Data Guard and the enterprise management packs, the data masking and subsetting, tuning and diagnostics. Enterprise Edition High Performance, in addition to the base Enterprise Edition features, this option adds life cycle and cloud management packs as well as partitioning, advanced compression and advanced security. And if you need a multitenant with more than three PDBs you'll need Enterprise Edition High Performance as well. And finally, Enterprise Edition Extreme Performance has all the previously discussed features plus Active Data Guard, RAC, and database in-memory. Note that all of the licensing tiers include Oracle Database transparent data encryption. You also have an option to bring your own license, or BYOL, to the Oracle Base Database Service, which means you can use your organization's existing Oracle Database software licenses with the service to best maximize existing investments. Oracle Base Database Service on virtual machines is a database service offering that enables customers to build, scale, and manage full-featured Oracle Databases on virtual machines. The key benefits in running databases on VMs are ease of getting started, durable and scalable storage, and the ability to run real application clusters to improve availability. With Database Cloud Service you can run single-instance shapes or two-node RAC shapes. The virtual machines share computing resources, but provide secure isolation for your database environments. Only you have root access to your VMs. When you launch a virtual machine DB system you select the Oracle Database edition and version that applies to the database that is created on that virtual machine DB system. A single database is created in the virtual machine with the database version you selected. You can choose the appropriate number of OCPUs and corresponding memory size that meet your workload requirements. With Database Cloud Service OCPU usage is built by the second based on the license selection that you make. Oracle Base Database Service uses block volumes that are attached to the virtual machines for data storage. Database Cloud Service uses object storage and Oracle Cloud Infrastructure for backups. The associated block storage used for storing data and object storage used for storing backups are based on monthly prices and prorated to full hour of consumption for partial month usage. Virtual machine database systems offer a choice of AMD Flex or Intel Shapes. Virtual machine database systems are available as single instance or two-node RAC DB systems on virtual machines. A single instance, or one-node virtual machine DB system, consists of one virtual machine. A two-node virtual machine DB system consists of two virtual machines on separate servers running real application clusters. Two-node Oracle RAC DB systems require the Oracle Enterprise Edition Extreme Performance license type. The maximum number of OCPUs, memory, and storage for your database on a virtual machine depends on the shape that you choose. After creating a virtual machine database system you can scale the usable block volume storage online up to 80 terabytes. OCPU scaling is also available. For Intel Shapes, which have fixed CPU counts per shape, you will need to change the shape of the virtual machine DB system, which requires a brief outage. For AMD shapes with flexible OCPU counts you can use the OCPU slider in the console to adjust the desired OCPU count for the VM shape in increments of one OCPU up to 64 OCPUs. OCPU scaling with two-node RAC virtual machine DB systems is done in a rolling manner across the two virtual machines in the cluster, one virtual machine at a time. Note that when you're changing your VM shapes you cannot scale your existing VM from a single-node VM to a two-node VM. Note that memory scales with number of OCPUs, and that the available IO performance scales with the amount of storage. Virtual machine database systems offer compute shapes with one to 64 cores to support customers with small to large database requirements. Since a virtual machine DB system uses Oracle Cloud Infrastructure block storage you specify the storage size when you launch the system, and you can scale up the storage as needed at any time. Note that with fixed VM shapes that OCPU shapes are available from one to 24 OCPUs, and that the memory is allocated at 15 gigabytes per OCPU. For the Flex VM shapes the OCPUs can be assigned from one to 64 in increments of one, and the memory is allocated at 16 gigabytes per OCPU. As you increase the allocated OCPUs the available network throughput for your VM configuration will be displayed in the console. When planning for all CPU scaling you should note that you cannot scale the VM OCPU by changing the shape from a single-instance VM DB system to a two-node RAC VM DB system. One-node virtual machine DB systems provide a fast provisioning option that allows you to create your system using Logical Volume Manager as your storage management software. You also have a choice to select ASM storage management as well. You'll select Oracle Grid Infrastructure when you provision your virtual machine DB system to use ASM. This is required for two-node RAC virtual machine DB system deployments. ASM uses DATA and RECO disk groups by default when you create a virtual machine DB system, and since the block storage already provides triple mirroring of the data the ASM redundancy is set to external. DB System clones are also supported for both LVM and ASM storage management. Database Cloud Service uses fault domains, availability domains, and regions in Oracle Cloud Infrastructure to provide high availability and disaster recovery. To improve availability the individual virtual machines in a two-node RAC configuration are deployed on separate physical servers with isolated power. This is done by using separate fault domains. This isolates each RAC database instance so they both won't be impacted by the same server failure, power failure, or infrastructure maintenance window. Data Guard can also be deployed with virtual machine DB systems across availability domains for high availability to protect against availability domain outages and across regions to protect against disasters. For more information on fault domains, availability domains, and regions in Oracle Cloud Infrastructure refer to the OCI training courses and documentation. Cloud automation simplifies most life cycle and management tasks, including scaling OCPUs up and down by changing the virtual machine shape, scaling up storage performing backup and recovery operations, and even enabling disaster recovery protections through Data Guard, conducting updates for the DB system and databases, conducting backup and recovery operations. This is just a sampling of the available cloud automation functions. A key feature of Database Cloud Service is Oracle Best Practices are built in. You no longer need to comb over technical briefs and documentation to figure out how to best deploy your database for both performance, availability and security. Just deploy using the cloud automation and your system will be optimally configured. You have the option to deploy Oracle RAC to provide a scalable, highly available database. Oracle RAC protects from unplanned failures by spreading work across multiple database instances. In addition, system and database updates are rolling to maintain system availability. Also, backups and replication with Data Guard can easily be configured for disaster recovery using the cloud automation. In fact, Database Cloud Service supports all the Oracle Maximum Availability technologies, which form the High-Availability Blueprint for Oracle Databases in the cloud. This table is a quick reference to the MAA components and the different software additions. Virtual machine DB systems offer flashback, backup and recovery, multitenant, RAC and Data Guard. Flashback, as well as backup and recovery, are available with all license-included editions. Data Guard is available with Enterprise Edition, and if you need benefits of Active Data Guard Enterprise Edition Extreme Performance is required. RAC also requires Enterprise Edition Extreme Performance. Finally, application continuity is only available in Enterprise Edition Extreme Performance because it requires Active Data Guard and or RAC. Ensure that the license-included edition you select when provisioning the virtual machine DB system aligns with your availability requirements. Defense in Depth is Oracle's strategy to control IT systems to permit authorized work and prevent, detect, and respond to unauthorized work. Defense in Depth works by implementing controls throughout the Oracle stack to strike the prudent balance of risk mitigation and operational efficiency. The bubble drawing shows the concentric circles that protect data expanded out so that you can see how each ring adds to the Defense in Depth posture. The Database Cloud Service security posture starts by securing the data in the Oracle Database. Oracle Database security features lead the industry to help prevent unauthorized data access and include the following, transparent data encryption to encrypt user data at rest, data redaction, masking and subsetting to permit users to only see the relevant data to do their job, OCI Vault to separate the control of TDE keys from control of the infrastructure, customer VMs, and databases, Database Vault to control DBA access so that the DBAs are prevented from accessing user data with SQL queries, Database Firewall to control what SQL statements can be executed against database, Data Safe to automatically detect sensitive data and access risks so that you can better secure your database. The Oracle Base Database Service compute and storage resources leverage the Defense in Depth approach and include using minimum sets of packages to minimize software security risk, using token-based SSH access for secure login to service accounts, implementing the networking with OCI virtual cloud networks to isolate access to your databases, providing Oracle Native Network Encryption to encrypt connections from database clients and applications to the Oracle Database to further protect database user and application connections. Oracle Cloud Infrastructure provides compliance with the infrastructure and offers robust identity and access management. By integrating the security features throughout the stack Oracle's engineered systems approach, Defense in Depth security, provides you the control you need to govern how your cloud services can be created, accessed, used, maintained, and destroyed. Oracle Data Safe provides a database security control center and is included with Database Cloud Service. It is one integrated security service to identify configuration drift through overall security assessments. This helps you identify gaps and then fix the issues, flag risky users or behavior and see if they're all well controlled, audit user activity, track risky actions, raise alerts and streamline compliance checks, discover sensitive data, know where it is and how much you have, and mask sensitive data. Three out of four DB instances are copies for dev or test. This lets you remove that risk. We've made it very useful to use with a full central dashboard with all key aspects of security, giving you insight and guidance. It's also easy to implement. In most cases, you're up and running in less than an hour. Thanks for hanging with me for Oracle Database Cloud Service Running on Virtual Machine DB Systems in Oracle Cloud Infrastructure. I hope you've learned something new.

Contents