Tech Talk about DBaaS architecture, requirements, benefits. By ScaleChamp.

1. DBaaS at Scale

2. Agenda
1. What is DBaaS?
2. DBaaS Benefits
3. DBaaS Requirements
4. DBaaS Market
5. DBaaS Architecture
6. DBaaS Comparison
7. Demo

3. 1. What is DBaaS?

4. What is DBaaS?
• Database as a Service
• Managed Databases
• Managed DBaaS
• Cloud Databases
• Automated Databases

5. What is DBaaS?

6. What is DBaaS?
1. Node setup - Linux tuning, file permissions, fs encryption, firewall;
2. Database installation - get database package from known source;
3. Database configuration - based on node setup, TLS, etc;
4. Monitoring configuration - to check database health and metrics;
5. Backups configuration - backup encryption, PITR, logical, cron, etc;
6. Incident response - events handling to failover in case of db failure;
7. Upgrades - database version, disk, memory, nodes, etc.

7. 2. DBaaS Benefits

8. DBaaS Benefits
• Reduce time to install database (one time);
• Reduce time to operate and failover database (continuous task 1/m);
• Reduce time to upgrade database (continuous task 1/q);
• Reduce time to setup monitoring (one time, 1/scale);
• Reduce time to setup automated backups (one time, 1/scale);
• Reduce time to setup security and E2E encryption (one time);
• Reduce time for tuning (one time, 1/scale);
• Reduce human error factor (sh*t happens).

9. DBaaS Benefits
• Essentially even developer can bootstrap production grade database
via DBaaS self-service control panel, based on requirements of data
storage (in-memory/disk) in a few minutes;
• Scale database in case of almost no disk space left, etc.

10. 3. DBaaS Requirements

11. DBaaS Requirements
• ISO 27001
• SOC2
• GDPR
• HIPAA
• CCPA

12. DBaaS Requirements
• All database connections should be encrypted;
• All DBaaS customer’s secrets should be encrypted (not hashed, TDE);
• LUKS disk encryption;
• Backup encryption (OpenPGP, etc);
• Periodic secrets rotation;
• SLA 99% uptime and higher;
• Time to provision in a few minutes (< 5min);
• Ability to access from anywhere and from nowhere (VPC).

13. DBaaS Requirements
• Multi-AZ deployments;
• Simple to use;
• No vendor lock;

14. 4. DBaaS Market

16. 5. DBaaS Architecture

17. DBaaS Architecture
Proxy Based DNS Based

18. DBaaS Architecture
Global Proxy Based

19. DBaaS Architecture
Proxy Based DNS Based
• Scaleway
• Compose
• Heroku
• CockroachDB Cloud (partially)
• ScaleChamp
• ScaleGrid
• Aiven
• Trove
• Ambari

20. DBaaS Architecture
Global Proxy Based
• CockroachDB Cloud (partially)

21. OpenStack Trove Architecture

22. OpenStack Trove Architecture

23. Ambari Architecture

24. Scaleway Architecture

25. Yandex.Architecture

26. 6. DBaaS Comparison

27. DBaaS Comparison
• ScaleChamp – Largest by clouds coverage;
• ScaleGrid – BYOC + Full SSH access;
• Compose – Largest by provided services, smallest by clouds coverage;
• ObjectRocket – Alternative MongoDB hosting with a few clouds.
• Aiven – In the the middle by provided services, clouds and
integrations between them, VPC peering included.
• 84Codes (CloudAMQP, CloudElephant, CloudKarafka) - 4 clouds
coverage.

29. ScaleChamp
• Web Site
• Control Panel
• SDK
• Terraform

30. Useful Links
• ScaleChamp – https://www.scalechamp.com/
• Scaleway – https://blog.scaleway.com/dbaas-behind-the-scenes/
• Yandex.Cloud – https://habr.com/ru/company/yandex/blog/477860/
• OpenStack Trove – https://wiki.openstack.org/wiki/Trove
• Globocom DBaaS – https://github.com/globocom/database-as-a-service

31. Thanks!
info@scalechamp.com