AMIS Oracle OpenWorld 2015 Review – part 2- Hardware & IaaS and PaaS Cloud Foundation (JCS, WLS)
1. Team AMIS
Twitter Tag: #OOWReview
12th November 2015
Review Oracle OpenWorld 2015
Infrastructure [as a Service]
2. 2
Agenda
• Always-On Security in Silicon
• Exadata – Exadata Cloud Service
• ExaLogic - On-Premise Cloud Service
• PCA – Compute Cloud Service
• Storage Cloud
• OVM
• Linux
– KSplice
• Docker
3. 3
Always-On Security in Silicon
Always-On Memory Protection and Encryption pushed down the stack into Silicon
Most Advanced
Security Platform
Always-On Memory Intrusion
Protection & wide key encryption
First Converged
Infrastructure in Silicon
Hardware SQL acceleration,
Compression, Encryption
World’s Fastest
Microprocessor
More cores, threads, memory
& IO Bandwith w/lower latency
4. 4
Sparc M7 Microprocessor
World’s First implementation of software features in Silicon
• Always-On Security in Silicon
– Memory intrusion detection
• High-Speed Encryption
– Near zero performance impact
• SQL in Silicon
– High-Speed Memory Decompression …
– Accelerates In-Memory Database
• 32 cores
– with up to 256 threads (eight per core)
5. 5
M7 Silicon Secured Memory
(SSM)
Always-On Memory Protection in Hardware
• First ever hardware-based memory intrusion protection of its kind
• Always-On hardware approach has near zero performance impact
• Stops programs from accessing other applications memory
– Stops malicious programs like Venom and Heartbleed
– Helps developers find difficult bugs
6. 6
M7 Silicon Secured Memory
(SSM): How it Works
Always-On Memory Intrusion Detection
• Terabytes of data in highly vulnerable servers main memory
• Hidden memory color key and lock set on memory allocation
• Hidden color bits added to pointers (key), and content (lock)
• Pointer color key matches content color lock or program
aborted
• Key changed when the memory is freed
• Prevents access off end of structure, stale pointer access,
malicious attacks
7. Broadest set of Ciphers for all your Apps
9
Encryption in Silicon
8. 10
SQL in Silicon
Database In-Memory Acceleration Engines
• Sparc M7 chip has 32 optimized database
acceleration engines(DAX) build on chip
• Independently process streams of columns
– Up to 170 Billion rows per second!
• Like adding 32 additional specialized cores to
the chip
– Using less than 1% of chip space
14. 16
Oracle Cloud on Premise
Public Private
IaaS
PaaS
Compute Storage
Integration
Java
Mobile Developer
DocumentsProcess Identity
Messaging
Same software
Your Choice – Oracle Cloud
On and Off Premise
15. 17
Oracle Cloud on Premise
• Major New Release - Exalogic Elastic Cloud Software 12c
• Run Oracle Cloud Services on Premise
– Oracle Compute Service (IaaS)
– Java Cloud Service
– Integration Cloud Service
– Other PaaS services to follow soon
• Oracle Cloud Engineered on Premise with Oracle Exalogic for high
reliability, high performance, lowest business risk
• Single Pane Of Hybrid Cloud Management
• Modernized platform to run Oracle Applications, ISV applications, 3rd
party apps
16. 18
Oracle Cloud on Premise
Management
• Single Pane of Glass for Hybrid Cloud Management
Comprehensive Simple Reliable
CONTROL THE CLOUD MOVE TO ORACLE CLOUD MONITOR ORACLE CLOUD
Leverage single pane of glass
for private & public cloud
Migratie workloads to Oracle
Cloud and back with one click
Ensure quality of service for
Oracle Cloud services
21. 29
Oracle Private Cloud Appliance
• Formerly named - Virtual Compute Appliance
• X86 servers, Storage and Networking for Oracle &
Non-Oracle
• Highly Virtualized Private Cloud Environments
• Integrated Application Provisioning with Pre-Built
Templates
• Linux, Windows, or Oracle Solaris
22. 30
Oracle VM
• Oracle Public Cloud runs on Oracle VM
• Ready for OpenStack - Users can also install the Oracle OpenStack for
Oracle Linux with Oracle VM
• Full Stack Management with Oracle Enterprise Manager
• Oracle VM 3.4 expected to be released later this year
– Several performance improvements
– Virtual Machines can be exported as OVA file
– Online snapshot backups?!
23. 31
Linux
• Linux on Sparc
– Will run on the new M7 Sparc microprocessor
• Ksplice
– Can now patch user space libraries, starting with OpenSSL library and Glibc
– Ksplice will not patch into upgrade kernel
– Future features? Maybe patching other applications like MySQL, etc…?
26. 34
Weblogic Docker Images
• Base Image
– Oracle Linux or RedHat (available on Docker Hub)
• Install Image
– Download Weblogic Installers and JDK
– Weblogic Dockerfiles to extend base image with Oracle
Linux 7, JDK 8, and the WebLogic Server 12.2.1
installation (Full or Developer installation)
• Domain image
– Edit sample Dockerfile posted on GitHub to extend WLS
install image to create a domain configuration
28. 39
Known Issues with Docker
(latest versions)
Networking
• No Multi-Host support
• IP addresses change after a container restart
– Container restart will leave servers not being able to communicate to each other
– DNS server configured in the container
– Rebuild configuration
• No multicast support
• Unicast clustering is recommended
29. 41
Docker Futures
• Oracle Weblogic Server
– Multi-host support
– Docker data volume support
– Dynamic network addressing
– Publish images on Docker Hub
– Docker image signing
– Environment variable support
– Weblogic profiles
– Cloud service integration
• Oracle SOA
– SOA 12.2.1 certification
– Topologies and recommendation
• Oracle Enterprise Manager
– Enterprise Manager 13.1 certification
– Docker container management
– Support EM agent at Host level
• Oracle HTTP Server
– OHS 12.2.1 on Docker
– Load balancing for Weblogic on Docker
30. Team AMIS
Twitter Tag: #OOWreview
12th November 2015
Review Oracle OpenWorld 2015
PaaS Foundation & WebLogic
31. 44
PaaS – Platform as a Service
Application Container CS
Java CS
Oracle Messaging CS
Bitnami
Weblogic
Coherence
32. 45
Application Container CS
Java SE Cloud Service
– Run Java code that doesn’t require full Java Enterprise Edition (non WLS workloads)
– Can run for example Tomcat, Jetty, Spring and JVM-based languages like Jython ,
JRuby and Closure.
Node Cloud Service
– Run JavaScript-based server side functionality using Node JS platform
– Support installing popular Node frameworks and npm modules like Express.
41. 54
Java Cloud Service
What is it?
WebLogic Servers running in Oracle Cloud
Optional features
Coherence
Oracle Traffic Director (software load balancer)
Platform service offering for developing and
deploying new or existing Java EE applications.
quickly create and configure an Oracle WebLogic Server domain
Connects to:
Oracle Database Cloud Service
Oracle Storage Cloud Service
(prerequisite, priced separately)
42. 55
Java Cloud Service
offerings
Two offerings
1. Java Cloud Service
Purpose-built for environments with higher availability needs, such
as user acceptance testing, staging and production.
2. Java Cloud Service – Virtual Image
Designed with development and test environment in mind.
Future
3. Java Cloud Service – SaaS Extension
Designed for building extensions to one of the Oracle Software as a
Service offerings like Oracle Sales Cloud, Oracle Service Cloud,
Oracle Marketing Cloud, and so on,
43. 56
Java Cloud Service
Use Cases
What use cases are supported by Java Cloud Service?
Customers have done things like:
• Allow their own users to access a Software as a Service offering built on
Java platform
• Create internal/departmental websites, or portals used by employees,
partners, or customers
• Create e-commerce websites
• Build mobile back-end applications hosting APIs and services
• Launch ad-hoc projects that require quick time-to-market, such as
campaigns, promotions, and proof-of-concepts
• Create environments for development and testing
46. 59
Oracle Messaging Cloud
Service
Lightweight cloud-based messaging solution
• Enables reliable communication between Internet-connected software
components. Cloud <> On-premises <> Hybrid
• Span multiple machines and even multiple data centers
• Pull, Push, Filter
• Standards-Based, send and receive messages through JMS and RESTful
Web Services.
• Maximum message size is 512kb, max persist on destinations up to 2 wk.
• Message patterns
– point-to-point (queues) message sent to a queue is received by only 1 of the connected consumers
– publish/subscribe (topics). message sent to a topic is received by all connected consumers.
49. 62
Bitnami
Supports Oracle Cloud
Popular images, provided by Bitnami, ready to launch on Oracle Cloud
Platform
https://oracle.bitnami.com/ 130+ apps to choose from
53. 68
Oracle WebLogic Server 12.2.1
Multitenancy Concepts
• Key new concept is the domain partition
• Apps and resources deployed for each partition
– No application changes required
• Partitions are isolated
• Weblogic infrastructure shared among partitions
• Partitions can span clusters
• Partitions can be started/stopped independently
• Partitions can be exported and imported
• Partitions support live migration
54. 69
Oracle WebLogic Server 12.2.1
Multitenancy - Partition Isolation
• Memory and CPU isolation at the JVM level
– Resource Consumption Management (RCM)
– Oracle JDK 8u51
• Virtual Host per partition for application access
• Dedicated JNDI tree for resource isolation
• Workmanager per partition for thread
management
• Security realm per partition
• Data can be segregated with PDB’s
– PDB’s are not required!
• Per-partition management
55. 70
Oracle WebLogic Server 12.2.1
Multitenancy - Tools
• FMW Control – Primary Multitenancy Console
– Recommended for single- and multi-partition domains
• Weblogic Console
– Recommended for single-partition domains only
• Enterprise Manager Cloud Control 13.1
– Supports Webogic 12.2.1, partition monitoring/lifecycle
• WLST online, JMX, REST
– Config Wizard, WLST offline not yet partition-aware
• Partition export/import tool
58. 74
Oracle WebLogic Server
Multitenant
• Details
– WebLogic Server MT – enable consolidation of applications into fewer domains (i.e.
partitions within domains) while maintaining secure isolation
– WebLogic MT Extensions to Java SE Advanced – enables memory, CPU and I/O
isolation, monitoring, and management for applications within a JVM
– Coherence EE to GE Upgrade – enable consolidation of caches into fewer
Coherence clusters while maintaining secure isolation
– Traffic Director: WLS-MT-aware and fully integrated tenant--aware local load
balancing
• Prerequisites
– WebLogic Server EE or WebLogic Suite
• Note
– WebLogic Server EE and Suite includes a single user-created WebLogic Multitenant
partition
– Upgrade to Coherence Grid Edition only available to Coherence Enterprise Edition or
WebLogic Suite licensees
63. 79
WebLogic Continuous
Availability
• Details
– WebLogic HA features - Cross-Domain Transaction Recovery, Zero Downtime
Patching, Live Partition Migration
– Coherence EE to GE Upgrade – Federated Caching
– Traffic Director: High-performance/HA load balancer, integrated with Zero Downtime
Patching and Live Partition Migration
– Oracle Site Guard: Automated disaster recovery operation for failover and failback
operations
• Prerequisites
– WebLogic Server Enterprise Edition, WebLogic Suite
• Note
– Upgrade to Coherence Grid Edition only available to Coherence Enterprise Edition or
WebLogic Suite licensees
– Live partition migration only available to WebLogic Multitenant Licensees
64. 80
Automated Elasticity for
Dynamic Clusters
• Administration APIs for Dynamic Clusters
– Start/stop a specified number of servers
– Expand/shrink the size of the cluster
– Manage server lifecycle, quiescence
• Simple/automated scale up/down or tune
• Rules-based decisions based on
capacity, demand or schedule
• Watches, Notifications become Policies,
Actions
– Policies: SmartRules, Calendar-based
policies
– Actions: scaleUp, scaleDown, REST, script
• Peak Loads, Geographic Paxerns,
Adding Parttions, Batch Processing,
Rebalancing
65. 81
REST Management
• Comprehensive
– Dynamically generated interfaces
• Lightweight
– No Java client required
• Additional integration option
– Mobile clients and 3rd-party
• Performance and Scalability
– Bulk access and local processing
– Faster response Dmes (5x-10x)
– Applicable to MT environments
66. 82
Coherence Federated Caching
Multi‐Datacenter Deployment
• Multiple distribution strategies
– Active/Passive
– Read-only operations or off-site backup in the
passive site.
• Active/Active
– Cached data is always replicated between clusters.
Applications in different sites have access to a
local cluster instance.
• Hub & Spoke
– The hub cluster can only send data and spoke
clusters can only receive data. Require multiple
geographically dispersed copies of a cluster.
For Exalogic, EECS 12c is a significant new release that delivers Oracle Cloud on Premise. This capability will offer customers the flexibility to deploy Oracle Cloud in their own datacenter and get the same cloud services and user-experience as in Oracle public cloud.
EECS 12c will introduce platform-as-a-service (PaaS) cloud services with support for initial set of PaaS services such as Java Cloud Service (JCS) and Integration Cloud Service (ICS) with other PaaS services to follow soon. There will also be support for a robust infrastructure-as-a-service (IaaS) cloud service with Enterprise Manager Cloud Control (EMCC) providing singe pane of management and monitoring for IaaS, PaaS, Applications, Oracle Exalogic hardware.
Oracle Cloud engineered on premise from ground-up with Oracle Exalogic with design guidelines from Oracle public cloud to provide high reliability and high performance at the lowest business risk.
Single pane of hybrid cloud management via EMCC for full workload portability between public and private cloud.
For Oracle apps customers, EECS 12c will enable applications running on Oracle Exalogic to be modernized with integration with PaaS and SaaS cloud services.
• elastic compute can run Oracle enterprise Linux, Windows, Ubuntu, Red Hat
• wholesale computing: you get dedicated hardware not multitenant
• Exa data as a service
• cloud watch: real-time monitoring of metrics and auto scale up/Scale down also called orchestration
object
Archival - very cheap one dollar per terabyte per month or 10 $/ TB per year
File and database backup - either a database backup created with RMAN or Symantec Net
Backup; we provide an open stack Swift API and also S3 API;
the latter means that anyone that can talk to the Amazon S3 service can also talk to our file and database backup service
Oracle VM
Infiniband
Koppeling met S1 Flash Storage System mogelijk voor extreme storage uitbreding.
Oracle SDN software: Oracle SDN dynamically connects servers to networks and storage. It eliminates the physical storage and networking cards found in every server and replaces them with virtual network interface cards (vNICs) and virtual host bus adapters (vHBAs) that can be deployed on the fly
Oracle Private Cloud Appliance controller software: The controller software allows users to manage and monitor the systems hardware, perform software upgrades, create and manage virtual resources (virtual servers, virtual networks, and storage), and monitor utilization of all system resources in real-time. The controller software runs on two dedicated management nodes that are configured for high availability with automatic failover in the event of a failure. It is accessible via a GUI dashboard.
performance improvements are the major aspect of this release especially in the manager the discovery of servers takes far too long.
This has been brought down to an acceptable level
virtual machines can be exported as OVA file .
This file can then be imported into another OVM environment into for example VirtualBox