1. Announcing Oracle Secure Backup 10.3: Fastest, Most Cost-Effective Oracle Backup Donna Cooksey Principal Product Manager Richard McClain Senior Oracle

1

Announcing Oracle Secure Backup 10.3: Fastest, Most Cost-Effective Oracle Backup

Donna CookseyPrincipal Product Manager

Richard McClainSenior Oracle DBACSX Technology

3

<Insert Picture Here>

Program Agenda

• Introducing Oracle Secure Backup• Oracle Secure Backup Functionality– Oracle Integrated Solution– Data Protection– Device Utilization– Advanced Media Management

• Summary• Success Story: CSX Technology• Q & A

4

Oracle Secure Backup (OSB) Enterprise Tape Backup Management

Oracle Enterprise Manager

Oracle DatabaseOracle Database

RMAN Integration

Oracle Secure Backup

Tape Library

Virtual Tape

Library (VTL)

Protects Entire IT Environment

•Oracle Database 11g Release 2 to Oracle9i

•25 – 40% faster tape backup

•Heterogeneous file systems (UNIX/ Linux / Windows) and NAS devices

•Built-in Oracle Integration

•Centralized management in distributed environments

•Over 75% less expensive than comparable products

File System DataFile System Data

5

Oracle Secure Backup Centralized Tape Backup Software

LANAdministrative

Server

Clients

Media Server(s)

Virtual Tape Library (VTL)Tape Library

NAS

UNIX / Linux / Windows

Storage

Client / Server Architecture• Data protection for heterogeneous, distributed

servers managed from a central console, Administrative Server

• Media servers may be direct-attached or SAN-attached to tape devices

• OSB communicates directly with the client host to backup mounted file systems and storage

• Oracle database(s) may be located on any client or media server within the backup domain

6

Oracle Secure Backup 10.3 Key New Features

• Advanced tape management– Server-less tape duplication for Virtual Tape Libraries (VTL)– Improved tape vaulting automation and management

• Expanded backup encryption options:– Support LTO-4 tape drive encryption– Seamless key management between host-based or LTO-4 encryption

• IPv6 support• Improved manageability:– Ability to enable / disable user-defined schedules– Device configuration accuracy checks– New monitoring integrations with Enterprise Manager Grid Control– Ability to extend expiration date of tapes– And much, much more…..

Advanced Functionality at NO Extra Cost!

7

IT Data Protection Requirements Oracle Secure Backup

Centralized backup management of heterogeneous, distributed environments with web interface (GUI) or unified command line

Integration with RMAN for Oracle database backup / restore

File system data protection of mixed-platforms and NAS devices

Sharing of tape devices in Storage Area Networks (SAN) among multiple servers

Backup encryption and key management

Automated management of tape duplication and rotation between multiple locations

Leverages advanced capabilities of physical and virtual tape devices for optimal hardware utilization

Ease of management allowing user fine-grained control over the backup domain

Reliable, scalable and affordable

Enterprise Backup RequirementsOracle Secure Backup Delivers…

8

IT Cost Savings… 75%+Migration to Oracle Secure Backup

Imagine how much annual maintenance you’ll save!!!

Oracle Secure Backup is licensed at $3500 per tape drive.

9

Oracle Integrated Solution

10

Oracle EM 10g Grid Control Release 5 OSB Domain Management

Grid Control

Manage OSB Environment utilizing EM:

• Define recurring schedules or perform immediate backup operations

• Restore to same or alternate location

• Media management from start to finish:

• Retention, rotation, duplication and reporting

• Browse host files to select all or some for file system backup

• Restore by backup or selected files within the backup


RMAN Integration

Oracle Secure Backup


OSB Administrative Server

Monitored by EM with EM alerting and notifications

11

Complete Oracle Solution from Disk to TapeBackup and Recovery


UNIX Linux

Windows NAS

Oracle DatabasesOracle Databases

• Oracle backup and recovery for your entire IT environment• Multiple media options available to meet the most stringent SLAs– Local disk, remote Cloud storage, physical and virtual tape

Oracle Recovery Manager (RMAN) Fast Recovery Area

Tape Backup

Amazon S3Cloud Storage

Oracle Secure Backup (OSB)

Oracle Secure Backup (OSB) Cloud Module

12

Oracle Recovery Manager (RMAN)Oracle-integrated Backup & Recovery Engine

Oracle Enterprise Manager

RMAN

Database

Fast Recovery Area

Tape Drive

Oracle Secure Backup • Intrinsic knowledge of database file

formats and recovery procedures• Block validation• Online block-level recovery• Tablespace/data file recovery• Online, multi-streamed backup• Unused block compression• Native encryption• Data Recovery Advisor (11g)

• Oracle’s Integrated Backup & Recovery solution

• Integrated disk, tape & cloud backup leveraging the Fast Recovery Area and Oracle Secure BackupCloud

13

Amazon S3

Oracle Secure Backup Cloud ModuleOffsite Database Backups in the Cloud

• Oracle Secure Backup Cloud module: Backup databases to Amazon Cloud– Complements local disk and/or tape backup– Eliminates IT management overhead of a disaster recovery site– Backed by Amazon S3 uptime SLAs

• $3,500 per RMAN channel • More information: http://www.oracle.com/technology/tech/cloud

Oracle Secure Backup Cloud

Module

Database Files / Fast Recovery Area

RMAN RMAN

Compression / Encryption

14

Data Protection

15

File System Protection UNIX / Linux / Windows and NAS Devices


• File system backup / restore management

– EM 10g Grid Control Release 5, OSB web tool or unified command line

• Recurring backup schedule or “Backup Now”

– Full, incremental, and offsite backup levels

• Backup / restore of Network Attached Storage (NAS) devices using Network Data Management Protocol (NDMP)

• Standards-compliant tape format: extended TAR or NDMP dump

• Tree-style catalog browsing for restoration to original or alternate location• Automatic recall of tapes located offsite to perform the restore operation

• Refer to the certification matrix on metalink.oracle.com for list of supported platforms, operating systems and NAS devices

16

Oracle Database ProtectionRMAN and OSB Integration

• Oracle database backup / recovery management– Utilize RMAN or Oracle EM (DB Control or Grid Control) restoring to original or alternate location

• Oracle Secure Backup provides the media management layer for RMAN– Exclusive performance optimizations achieving 25 – 40% faster backup

• Unused block compression • Eliminate backup of committed undo

– Vaulting integrations identifying and recalling offsite tape for restore– Encrypted backups using either OSB encryption (host-based or LTO-4) or RMAN encryption capabilities

• Metadata regarding RMAN backup pieces is maintained within OSB catalog– Volumes may be queried for list of backup pieces contained by volume

• User-defined tape retention methodology for Oracle database backups – Leverage RMAN retention parameters (content-managed tapes)

• RMAN delete obsolete command updates OSB catalog– Expiration time associated with the tape and defined via OSB (time-managed tapes)


RMAN Integration

OSB Differentiator

17

Backup Encryption and Key Management Host-based and Hardware Encryption Options

OSB Host-based Encryption:• Encryption performed on the

host• AES126, AES192 or AES256

algorithms

Seamless Encryption Key ManagementLTO-4 Tape Drive Encryption:

• Encryption performed by the LTO-4 tape drive

• AES256 algorithm• Backups from NAS hosts

may be encrypted

New In OSB 10.3

• Encryption policies defined at global or host level

• Encryption keys stored centrally on OSB Administrative Server

• Encrypted backup are automatically decrypted during restoration within the same backup domain

18

Backup Encryption To TapePolicy-Based Key Management

• OSB encrypted backups will utilize host encryption settings except:– “Transient” backup encryption

explicitly defined during “Backup Now” operation

• OSB backup encryption configured:– Scheduled or “Backup Now” file

system backup – RMAN backup using

OB_ENCRYPTION parameter• If RMAN encrypts the backup it will

not be re-encrypted using OSB encryption Encryption

Key Policies

Backup Encryption

Policies

19

Device Utilization

20

Broad Tape Device Support Physical and Virtual Devices

• Support for over 200 new and legacy devices• SCSI, Fibre, SAS and iSCSI connectivity

Partners:

ADIC Copan Systems Data Domain

Dell EMC FalconStor

HP IBM Overland Storage

Quantum Qualstar Sepaton

Sony Spectra Logic Sun / StorageTek

21

Automated Tape Duplication

Traditional Tape Duplication

Media Server

Administrative Server

VTL

Physical Tape Library

Duplicated backup data

Metadata, control messages

Server-less Tape Duplication

Media Server

VTL

Physical Tape Library

New In OSB 10.3

Server-less Tape Duplication

• Increased duplication performance• Eliminates data movement

through media server• OSB catalog updated with

metadata of duplicate tape• VTL must support NDMP

tape copy functionality

22

Device Configuration - AccuracyVerify Utility and Policy

• OSB vfylibs command verifies accuracy of configuration

• Device policy, checkserialnumbers, identifies drive changes alerting possible mis-configuration

____________________________________________________________________________________

____________________________________________________________________________________________________________

DTE1

DTE2

DTE3

Tape Library

Storage Elements

Media Server

New In OSB 10.3

Attach points

•Vfylibs utility should be run after any device updates

• Serial number checking policy proactively queries for device changes

“Houston, we have a problem”

23

Advanced Media Management

24

The Life of Backup TapesMedia Lifecycle Management – Typical Scenario

Typical Media Requirements

• Backup to same tape(s) for up to 1 week then close tape(s) so it can’t be further appended

• Once tapes are closed to further update; duplicate them for on and offsite storage requirements

• Retention for on and offsite set of tapes:– Onsite tapes retained for 2 months

• Retain within the tape library for 1 week, then move to storage cabinet for 7 weeks

– Offsite tapes sent to alternate location to be stored for 3 years– Once tape retention period expires, return to a tape device for reuse

• For restoration needs:– Use available onsite tapes during 2 month retain time; afterwards,

recall tapes from offsite location for restoration

25

Media Management:Retention, Duplication and Vaulting

• Tapes managed from first write to reuse based on user-defined media families, duplication and rotation policies

26

Tape ManagementAs Easy as 1,2,3,4,5….

Define tape pools, storage locations, policies and schedules:

Media Family(s)

11

Association: Map policy(s) to media family

44

Schedules: Vaulting, duplication

-NEW vaulting schedule granularity by media family and/or location in OSB 10.3

55

Policies: Vaulting, Duplication

33

Storage* Location(s)

22

*OSB automatically defines active locations(tape devices) for all configured devices.

27

Managing Tape Vaulting

• Vaulting scan generates a media movement job– “Vault Now”, one-off scan outside of regular schedule – New in OSB 10.3– Based on triggers associated with Vaulting Scan Schedules

• Media Movement job includes all tapes eligible for rotation per policy– This job can run automatically or have pending status until run by user– Each media movement job has associated pick and distribution report

• Vaulted tapes have “in transit” location status until user confirms arrival at vault location – New in OSB 10.3• Reporting– Pick and distribution reports– Location, schedule, exception and missing reports

28

Automated Tape Duplication

• Tape duplication may occur per policy or on one-off, on-demand basis– Migrate option copies the tape then deletes the original

• Commonly used to reclaim space on VTL for backup jobs• Seamlessly restore from original or duplicate tape– OSB will automatically choose tape in closest physical proximity

• Original and duplicate tapes uniquely identified within OSB catalog• Duplicate tapes may have the same or different retention and rotation schedule

Original : “X”Media Family

Duplicate – “X” Media Family

Duplicate – “Y” Media Family

29

Policy-Based Media Management…In Action

• Tapes duplicated to another media family may have different retention and rotation schedule than original tape

2-Month Retention For Original Tapes

3-Year Retention For Duplicated Tapes

30

OSB Summary Features & Benefits

31

Feature Benefit

Centralized backup management Centralizes backup operations of distributed servers to one or more tape devices using common management console across spectrum of servers

Built-in RMAN integration Delivers the fastest, most efficient Oracle database backup to tape at no additional licensing cost

File system data protection Protects entire IT environment

Dynamic Tape Drive Sharing Improves tape drive utilization in Storage Area Networks (SAN)

Backup encryption and key management

1) Protects backup data even if tapes are lost

2) Leverages native, host-based or LTO-4 drive encryption

Tape Vaulting: OnDemand or per schedule

1) Automates tape rotation for disaster recovery and long-term storage requirements

2) Reports list location of tapes for ease of management

Tape Duplication: OnDemand or per schedule

1) Creates safety net having multiple copies

2) Duplicates tapes per user directive to have same or different retention and vaulting policy then that of the original tape

Migration from Virtual Tape Library (VTL) to tape using NDMP direct copy

Leverages disk appliance for fast backup/restore then automated migration to tape for long-term storage

Policy Based media management Provides consistency across the backup domain

Unique, low-cost licensing model 1) Saves IT costs and simplifies licensing management

2) Backup unlimited servers and Oracle databases without additional fees

Benefits - Oracle Secure Backup

32

Success Story: CSX Technology

33

HA Sessions, Labs, & Demos by Oracle Development

Sunday, 11 October – Hilton Hotel Imperial Ballroom B

3:45p Online Application Upgrade

Monday, 12 October – Marriott Hotel Golden Gate B1

11:30a Introducing Oracle GoldenGate Products

Monday, 12 October – Moscone South

1:00p Oracle’s HA Vision: What’s New in 11.2, Room 103

4:00p Database 11g: Performance Innovations, Room 103

5:30p Comparing Data Protection Solutions, Room 102

Tuesday, 13 October – Moscone South

11:30a Oracle Streams: Replication Made Easy, Room 308

11:30a Backup & Recovery on the Database Machine, Room 307

11:30a Next-Generation Database Grid Overview, Room 103

1:00p Oracle Data Guard: What’s New in 11.2, Room 104

2:30p Oracle Streams: What's New in 11.2, Room 308

2:30p Backup & Recovery Best Practices, Room 104

2:30p Single-Instance RAC, Room 300

4:00p Enterprise Manager HA Best Practices, Room 303

Tuesday, 13 October – Marriott Hotel Golden Gate B1

11:30a GoldenGate Zero-Downtime Application Upgrades

1:00p GoldenGate Deep Dive: Architecture for Real-Time

Wednesday, 14 October – Moscone South

10:15a Announcing OSB 10.3, Room 300

11:45a Active Data Guard, Room 103

5:00p Exadata Storage & Database Machine, Room 104

Thursday, 15 October – Moscone South

9:00a Empowering Availability for Apps, Room 300

12:00p Exadata Technical Deep Dive, Room 307

1:30p Zero-Downtime DB Maintenance, Room 103

Hands-on Labs Marriott Hotel Golden Gate B2

Monday 11:30a-2:00p Oracle Active Data Guard, Parts I & II

Thursday 9:00a-11:30a Oracle Active Data Guard, Parts I & II

Demos Moscone West DEMOGrounds

Mon & Tue 10:30a - 6:30p; Wed 9:15a - 5:15p

Maximum Availability Architecture (MAA), W-045

Oracle Streams: Replication & Advanced Queuing, W-043

Oracle Active Data Guard, W-048

Oracle Secure Backup, W-044

Oracle Recovery Manager & Flashback, W-046

Oracle GoldenGate, 3709

34

CSX CONFIDENTIAL Draft Version 1.1 3535

Enterprise Backup Architecture

April 18, 2023

Richard McClainSenior Oracle DBA


CSX Corporation Overview

• CSX Corporation is a transportation company providing rail, intermodal and rail-to-truck transload services

• Over $11 billion in annual operating revenue, employing 30,000+ employees

• Owns largest rail network in the eastern United States

• One of the nation’s largest coast-to-coast intermodal transportation providers linking customers to railroads via trucks and terminals

• CSX Technology, a CSX Corporation business unit, provides a wide range of information technology applications and support services

April 18, 2023


Oracle Database Infrastructure

• Oracle databases provide the backbone for mission critical train movement, customer service, and data warehouse decision support applications

• Using advanced Oracle Database options and features

• Large number of Oracle databases at Version 10gR2

– 350 Oracle Databases version 10.2.0.4.0 – 120 Production databases with 17TB – 230 Test / Development databases with 15TB

• Hosted primarily on commodity Intel-based servers

April 18, 2023


Challenges - Backup Infrastructure

Business Drivers• Increase tape device resource utilization

• Reduce overall backup footprint by eliminating redundancy

• Eliminate shipping of tapes between data center and business continuity site

• Implement an automated backup infrastructure at our business continuity site for sustained operations

• Reduce backup infrastructure costs

April 18, 2023


Challenges Addressed

Infrastructure Changes

• Utilize a Virtual Tape Library (VTL) as primary backup target versus physical tape device

• Deploy Oracle Secure Backup (OSB) for Oracle database backup/restore

• Leverage RMAN binary compression of backup set

April 18, 2023


Oracle Database Backup Strategy

• Oracle databases are backed up to a Virtual Tape Library (VTL) using Oracle Secure Backup (OSB) and Recovery Manager (RMAN)

• Backup Strategy– Archive log mode for all production databases

– Incremental backups for databases > 200Gb in size

– Nightly full backups for all other production

– RMAN binary compression for all backups

• Metrics– Approx 12 TB backed per week / 1.7TB per day compressed

– Backup compression ratios averages between 4 - 7 times

• Production database backups are replicated by the VTL to business continuity site daily

April 18, 2023


Oracle Secure Backup Domain

April 18, 2023


OSB: Configuration Details

• OSB catalog backed up daily

– Mirrored via hardware to the business continuity site

– Utilize pre-defined OSB-Catalog-MF media family

• OSB media families and tape labeling– One for dev/test and one for production– Pre-label virtual tapes with media family

• Retention policy– Time managed vs content managed

• VTL Capacity – 500 virtual tape slots capacity– 300 dev/test– 200 production

April 18, 2023


Virtual Tape Library Architecture

April 18, 2023

Data Center DR Site


Business Continuity Site

• Backup Infrastructure– Similar hardware / network as primary Data Center– VTL dedicated to OSB / 500 tapes / 12 virtual drives– OSB admin/media server / hardware mirrored

• Configure OSB Infrastructure– Update OSB configuration with any device changes– Replicated volumes moved to the OSB VTL slots– Evoke OSB inventory of the VTL library to recognize the

replicated volumes

• Recover server OS and file systems

• Recover Databases using OSB and RMAN

April 18, 2023


Summary – Backup Architecture

• Migrated to Oracle Secure Backup for data protection of Oracle databases to VTL

• Virtual tape library partitioning allows improved device utilization

• Reduced backup footprint

• Automated transition to business continuity site in event of disaster

April 18, 2023


Why Oracle Secure Backup?

• Who better to backup up the Oracle database than Oracle?

• DBAs manage Oracle database backup / recovery from end-to-end

• Single technical support contact --- Oracle

• Highly integrated with RMAN for maximum backup performance to tape --- or in our case virtual tape

• Cost effective data protection for our environment

April 18, 2023

Documents

1. Announcing Oracle Secure Backup 10.3: Fastest, Most Cost-Effective Oracle Backup Donna Cooksey Principal Product Manager Richard McClain Senior Oracle