Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Destacado
Destacado (20)
Similar a MySQL Enterprise Cloud
Similar a MySQL Enterprise Cloud (20)
Más de Mark Swarbrick
Más de Mark Swarbrick (10)
Último
Último (20)
MySQL Enterprise Cloud
- 4. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | ConfidenMal – Oracle Internal/Restricted/Highly Restricted 4 Topics PaaS • MySQL Enterprise Edi2on Overview • Technical Overview of MySQL Cloud Service • How MySQL Cloud compares to AWS RDS + EC2 • Summary
- 6. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise EdiMon • MySQL Enterprise Firewall – Block SQL InjecMon AZacks – Intrusion DetecMon • MySQL Enterprise EncrypMon – Public/Private Key Cryptography – Asymmetric EncrypMon – Digital Signatures, Data ValidaMon • MySQL Enterprise AuthenMcaMon – External AuthenMcaMon Modules • Microso_ AD, Linux PAMs • MySQL Enterprise Audit – User AcMvity AudiMng, Regulatory Compliance 6 • MySQL Enterprise Monitor – Changes in Database ConfiguraMons, Users Permissions, Database Schema, Passwords • MySQL Enterprise Backup – Physical backup ideal for larger databases – Verifies data as it copies • MySQL Thread Pool – Improves performance on high concurrency workloads More informaMon available at : hZp://www.mysql.com/products/enterprise/
- 8. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Scalability : Thread Pool Performance Security Availability Internal Clients Connec2on Execu2on Threads External Clients Thread Pool Thread Group 1 Threads 1 - 4096 Thread Group 2 Threads 4097 - 8193 Thread Group N Threads 8194 - N Thread Group 1 Thread Group 2 Thread Group N • Contains configurable number of thread groups (default = 16) – Each group manages up to 4096 re-usable threads • Each connecMon assigned to thread group via round robin • Threads are prioriMzed and statements queued – Improves scalability as concurrent connecMons grow, protecMon from DOS aZacks
- 11. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise EncrypMon • MySQL encrypMon libraries – Symmetric encrypMon AES256 – Public-key / asymmetric cryptography • Key management – Generate public and private keys – Key exchange methods: RSA, DSA, DH • Sign and verify data – Cryptographic hashing for digital signing, verificaMon, & validaMon
- 13. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Key Vault MySQL Enterprise Transparent Data EncrypMon 2 Tier Architecture MySQL Database Tablespace Keys MySQL Server Plugin & Services Infrastructure InnoDB Client Keyring plugins • Master Key • Stored outside the database • Oracle Key Vault • KMIP 1.2 Compliant Key Vault • Tablesapce Key • Protected by master key Master Key Plain Text Encrypted 2 Encrypted 1
- 14. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Audit • Out-of-the-box logging of connecMons, logins, and query • Simple to fine grained policies for filtering, and log rotaMon • Dynamically enabled, disabled: no server restart • XML-based audit stream – Send data to a remote server / audit data vault • Oracle Audit Vault • Splunk, etc. Adds regulatory compliance to MySQL applicaMons (HIPAA, Sarbanes-Oxley, PCI, etc.)
- 15. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Audit - Work Flow 1. Enables the Audit plugin • INSTALL PLUGIN audit_log soname ‘audit_log.so’; 2. Defines Filters and OpMons • who, what, from where, etc to audit 3. Reviews Local Audit Events • Directly • Using MySQL EE Workbench DBA USER 1. Joe • Connects from a host • AuthenMcates with a username • Run a select • Alters a table; etc 1. MySQL Audit • Inspects ALL Joe is doing • Audit Filter defines audiMng required • Writes to the audit file IT SEC 1. Archives • Copy to an Audit “Vault” • E.g. Oracle Audit Vault, Splunk, … 2. Globally Assess & Maintains Audit Trail
- 16. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise AuthenMcaMon • PAM (Pluggable AuthenMcaMon Modules) – Access external authenMcaMon methods – Standard interface (Unix, LDAP, Kerberos, others) – Proxied and non-proxied users • Windows – Access naMve Windows services – AuthenMcate users already logged into Windows (Windows AcMve Directory) • Pluggable AuthenMcaMon API Integrates MySQL with exisMng security infrastructures and SOPs
- 17. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Firewall • Real Time ProtecMon – Queries analyzed and matched against White List • Blocks SQL InjecMon AZacks – PosiMve Security Model • Block Suspicious Traffic – Out of Policy TransacMons detected & blocked • Learns White List – Automated creaMon of approved list of SQL command paZerns on a per user basis • Transparent – No changes to applicaMon required MySQL Enterprise Firewall monitoring
- 20. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | • AcMve/AcMve Update Anywhere – AutomaMc conflict detecMon and resoluMon – AutomaMc distributed recovery • AutomaMc group membership management and failure detecMon – No need for server fail-over – ElasMc scale out/in – No single point of failure – AutomaMc reconfiguraMon • Well integrated – InnoDB – GTID-based replicaMon – PERFORMANCE_SCHEMA ApplicaMon MySQL Nodes ReplicaMon Plugin API MySQL Server Group Comms Release Candidate MySQL Group ReplicaMon The Building Block for InnoDB Clusters
- 21. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Backup • Online, non-locking backup and recovery – Complete MySQL instance backup (data and config) – ParMal backup and restore • Direct Cloud storage backups – Oracle Storage Cloud, S3, etc. • Incremental backups • Point-in-Mme recovery • Advanced compressed and encrypMon • Backup to tape (SBT) • OpMmisMc backups • Cross-Playorm (Windows, Linux, Unix)
- 22. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL DBA Checklist 1. Ensure your producMon databases are available ✔ 2. Monitor MySQL performance throughout the day ✔ 3. Verify that MySQL replicaMon is working properly ✔ 4. Confirm that backups have completed successfully ✔ 5. Monitor disk space to ensure MySQL won’t run out of space ✔ 6. Regularly monitor and idenMfy blocking issues ✔ 7. Verify there have been no changes to database schema ✔ 8. Check OS metrics for unusual events ✔ 9. Check for security vulnerabiliMes ✔ 10. Monitor and analyze memory usage ✔ 22
- 23. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL DBA Challenges • “The database is slow. What needs tuning?” • “What are my most expensive queries?” • “Are indexes opMmized?” • “Is replicaMon lag a problem?” • “Did my last backup succeed?” • “When will my disk fill up?” • “When will I need more hardware to scale-out?” • “Has my database schema changed?” • “Are there security vulnerabiliMes that I need to be concerned about?” 23
- 24. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Monitor 24 • Start monitoring MySQL in 10 minutes • Real-Mme MySQL performance and availability monitoring • Visually find & fix problem queries • Disk monitoring for capacity planning • Cloud friendly architecture – No agents required – Policy driven configuraMon – Easy integraMon with DevOps tools
- 25. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Cloud Friendly Architecture • MySQL – Performance Schema provides Query Analyzer data – Provides all MySQL related metrics • Service Manager – Collects all MySQL related metrics – Collects all OS/Host related metrics • Repository – Stores all historical data • Agent (opMonal) – Only required for OS/Host metrics 25 MySQL Enterprise Dashboard Service Manager Repository HTTPS Data Center Public Cloud Private Cloud
- 26. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | InstallaMon & ConfiguraMon • Install the Service Manager – shell> ./mysqlmonitor-3.X.X.XXXX-…-installer.bin • Up and Running in 10 minutes – Auto-discovery of MySQL servers – Advisors are pre-configured – Advisors are pre-scheduled • CustomizaMon – Centralized configuraMon dashboard – Advisors – Event handling 26
- 27. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Dashboard 27 "The MySQL Enterprise Monitor is an absolute must for any DBA who takes his work seriously.” Adrian Baumann System Specialist Federal Office of InformaMon Technology & TelecommunicaMons • SLA monitoring • Real-Mme performance monitoring • Alerts & noMficaMons • MySQL best pracMce advisors
- 29. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Performance Schema • IdenMfy performance boZlenecks • IdenMfy problemaMc queries • Get real Mme insight into locks • See exactly what is happening within MySQL • Get real Mme insight into MySQL internals • Get real Mme insight into query execuMons 29 mysql> select * from host_summary_by_stages; +------+--------------------------------+-------+-----------+-----------+ | host | event_name | total | wait_sum | wait_avg | +------+--------------------------------+-------+-----------+-----------+ | hal | stage/sql/Opening tables | 889 | 1.97 ms | 2.22 us | | hal | stage/sql/Creating sort index | 4 | 1.79 ms | 446.30 us | | hal | stage/sql/init | 10 | 312.27 us | 31.23 us | | hal | stage/sql/checking permissions | 10 | 300.62 us | 30.06 us | | hal | stage/sql/freeing items | 5 | 85.89 us | 17.18 us | | hal | stage/sql/statistics | 5 | 79.15 us | 15.83 us | | hal | stage/sql/preparing | 5 | 69.12 us | 13.82 us | | hal | stage/sql/optimizing | 5 | 53.11 us | 10.62 us | | hal | stage/sql/Sending data | 5 | 44.66 us | 8.93 us | | hal | stage/sql/closing tables | 5 | 37.54 us | 7.51 us | | hal | stage/sql/System lock | 5 | 34.28 us | 6.86 us | | hal | stage/sql/query end | 5 | 24.37 us | 4.87 us | | hal | stage/sql/end | 5 | 8.60 us | 1.72 us | | hal | stage/sql/Sorting result | 5 | 8.33 us | 1.67 us | | hal | stage/sql/executing | 5 | 5.37 us | 1.07 us | | hal | stage/sql/cleaning up | 5 | 4.60 us | 919.00 ns | +------+--------------------------------+-------+-----------+-----------+
- 30. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Performance Monitoring • Monitor MySQL performance • Monitor OS performance • Monitor query performance • Advice on index usage • Alerts on performance problems 30
- 31. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Enterprise Query Analyzer • Real-Mme query performance • Visual correlaMon graphs • Find & fix expensive queries • Detailed query staMsMcs • Query Response Time index (QRTi) 31 “With the MySQL Query Analyzer, we were able to iden;fy and analyze problema;c SQL code, and triple our database performance. More importantly, we were able to accomplish this in three days, rather than taking weeks.” Keith Souhrada So_ware Development Engineer Big Fish Games
- 32. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Monitor + Backup • Monitor backup results • Monitor backup performance • Ensure backups are up to date
- 33. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Workbench EE • Database migraMons – From Microso_ SQL Server, PostgreSQL, Sybase ASE, Sybase SQL Anywhere, SQLite, Microso_ Access, and more • Manage migraMon projects • Source and target selecMon • Object migraMon • Data migraMon • MySQL version upgrades Database MigraMon Wizard for SQL Server, Sybase, SQLite, SQL Anywhere & PostgreSQL
- 36. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Support • Provided by the experts, straight from the source • Backed by the MySQL developers • World-class support, in 29 languages • Hot fixes & maintenance releases • 24x7x365 • Unlimited incidents • ConsultaMve support • Global scale and reach Get immediate help for any MySQL issue, plus expert advice
- 37. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL ConsultaMve Support Make the Most of your Deployments • Remote troubleshooMng • ReplicaMon review • ParMMoning review • Schema review • Query review • Performance tuning • ...and more
- 38. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Work Directly with MySQL Engineering • A direct relaMonship with the MySQL team • The ability to parMcipate in: – Product roadmaps – Product betas – Customer advisory boards • Work closely with Support Engineers – Resolve issues faster – Request bug and feature request escalaMons
- 39. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise Oracle CerMficaMons • Oracle Enterprise Manager • Oracle Linux & Oracle VM • Oracle Solaris • Oracle Solaris Clustering • Oracle Clusterware • Oracle OpenStack • My Oracle Support • Oracle Fusion Middleware • Oracle GoldenGate • Oracle Audit Vault • Oracle Database Firewall • Oracle Secure Backup MySQL integrates into your Oracle environment
- 42. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | ConfidenMal – Oracle Internal/Restricted/Highly Restricted 42 In Short • Oracle Public Cloud • Database as a Service (PaaS) • MySQL with the annoying bits managed for you: – Backups – Patches – Monitoring – etc. PaaS
- 43. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | ConfidenMal – Oracle Internal/Restricted/Highly Restricted 43 What version of MySQL is it? • Powered by MySQL 5.7 Enterprise EdiMon • Same so_ware used in cloud as on premise – You will be able to migrate workloads in both direcMons • OpMmized configuraMon – In my.cnf file – In compute and storage
- 45. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | • InnoDB IO ConfiguraMon opMmized – Number of IO threads – O_DIRECT – Redo log size and buffer – Plus more… • Thread Pool Enabled By Default • Scalable Auto Increment • Memory opMmized to compute shape – Buffer Pool • Plus more… ConfidenMal – Oracle Internal/Restricted/Highly Restricted 45 OpMmized ConfiguraMon of MySQL
- 46. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | • Oracle Linux 6 – UEK – MySQL task priority – Memlock – ext4 Filesytstem • Storage is powered by ZFS Appliances • OpMmized for latency: – Binary Logs – Redo Logs • OpMmized for throughput: – Data files ConfidenMal – Oracle Internal/Restricted/Highly Restricted 46 OpMmized Compute and Storage
- 48. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | • Fully Managed: – On Demand – Scheduled – Incremental • Powered by MySQL Enterprise Backup • Default – Weekly full backup – Daily incremental backup – 30 day retenMon (in Cloud Storage) – 7 day retenMon (locally) • Access to Raw Backup Files ConfidenMal – Oracle Internal/Restricted/Highly Restricted 48 Backup
- 49. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | ConfidenMal – Oracle Internal/Restricted/Highly Restricted 49 User IniMated Patching • Time maintenance to opportune Mme • Click of a BuZon • Delay upgrade if desired – Very occasionally patches need to change behavior – Security being example • AutomaMc backup before patching • Rollback opMon if required
- 50. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | MySQL Enterprise EdiMon • MySQL Enterprise Firewall – Block SQL InjecMon AZacks – Intrusion DetecMon • MySQL Enterprise EncrypMon – Public/Private Key Cryptography – Asymmetric EncrypMon – Digital Signatures, Data ValidaMon • MySQL Enterprise AuthenMcaMon – External AuthenMcaMon Modules • Microso_ AD, Linux PAMs • MySQL Enterprise Audit – User AcMvity AudiMng, Regulatory Compliance 50 • MySQL Enterprise Monitor – Changes in Database ConfiguraMons, Users Permissions, Database Schema, Passwords • MySQL Enterprise Backup – Physical backup ideal for larger databases – Verifies data as it copies • MySQL Thread Pool – Improves performance on high concurrency workloads More informaMon available at : hZp://www.mysql.com/products/enterprise/
- 53. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | ConfidenMal – Oracle Internal/Restricted/Highly Restricted 53 Oracle Public Cloud Exclusive Feature SSH Access • Log into your MySQL Cloud Service Instance • Works well with MySQL Workbench – SSH Tunnel direct from Workbench to Cloud Service – Port 3306 does not need to be exposed
- 54. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | ConfidenMal – Oracle Internal/Restricted/Highly Restricted 54 MySQL Root Access • Connect via Command Line or Workbench • Perform AdministraMon tasks as MySQL root: – Set offline mode, read only
- 55. Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | ConfidenMal – Oracle Internal/Restricted/Highly Restricted 55 ReplicaMon • Binary log already enabled – Service already fully configured to be a master – Binary log defaults to 90 day retenMon • Can replicate to/from on premise – Restricted only by firewall rules • Can replicate to other instances of MySQL Cloud Service
- 59. Complete • Spanning all layers of the cloud: IaaS, PaaS, SaaS • Every layer…integrated • Based on our foundaMonal infrastructure playorms • Reduces complexity • Every category and stakeholder • ConsumpMon models for all
- 60. Open • An open, standards-based playorm • Supports all workloads, applicaMons, languages, open source, OS playorms, data types • For everyone to build on, customers & partners • Integrated with Oracle apps and the applicaMon ecosystem
- 61. Secure • Offers protecMon for every layer • Physical datacenter access • EncrypMon of data at rest, in moMon • App access; privileged users controls • Masking, redacMng sensiMve data • IdenMty management
- 62. Choice • Deployment opportuniMes–private cloud, public cloud, public cloud on premises (OCM) & hybrid cloud • Same environments preserve exisMng IT investments, skills • MigraMon and adopMon paths– infrastructure, workloads, apps, integraMons, extensions • Broad ecosystem of partners
- 64. DemysMfying Amazon RDS for MySQL • AWS offers Public Cloud only • AWS is a ‘one way street’; no portability from cloud to on-premises • No hybrid cloud opportunity • No ability to implement hybrid architectures No support for hybrid cloud or on-premises environments
- 65. • No MySQL Enterprise Firewall • No MySQL Enterprise EncrypMon & TDE • No MySQL Enterprise Audit • No MySQL Enterprise AuthenMcaMon No Advanced Security Features DemysMfying Amazon RDS for MySQL
- 66. • No connecMon with MySQL Engineering • Runs older MySQL versions that don’t have the latest bug fixes and security features • MySQL Technical Support not included • No Access to Expert Technical Support, backed by MySQL developers Not from the Source DemysMfying Amazon RDS for MySQL
- 67. • Not integrated with Oracle Environment for easy development & deployment • No pre-configured & opMmized MySQL versions • No access to MySQL Enterprise Monitor & Query Analyzer • No Access to MySQL Thread Pool No integraMons, No opMmizaMons DemysMfying Amazon RDS for MySQL
- 68. • Aurora is NOT MySQL • Designed for compaMbility with MySQL 5.6, not with MySQL 5.7 (GA since Oct 2015) • NOT Open Source • UlMmate Lock-in: Only available from AWS • Not available on-premises or anywhere else • Not popular: ranks #73 vs #2 for MySQL* Not MySQL Not Open Source What About Amazon Aurora? *Source: hZp://db-engines.com/en/ranking
- 69. Oracle MySQL Cloud Service Simple, Automated, Integrated & Enterprise-Ready • The #1 Open Source Database in Oracle Cloud • Only public cloud integraMng MySQL Enterprise EdiMon • Rapidly, securely and cost-effecMvely develop & deploy modern MySQL-based applicaMons
- 71. • Increase Business Agility: Focus your resources on innovaMon and rapidly deliver new modern applicaMons. • Ensure Security, Performance & Up2me: relying on the most comprehensive MySQL cloud playorm – straight from the source . • Reduce Total Cost of Ownership: Saving on infrastructure and database management operaMons costs while improving upMme. Oracle MySQL Cloud Service: Business Benefits