představení oracle sparc miniclusteru

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. |

MiniCluster S7-2 Petr Slačík 21.09.2016


Safe Harbor Statement

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

Customer Presentation


Extends the SuperCluster Family to the Mid-range Run the widest range of workloads with less effort, less hardware and less software

• 100% application and database compatibility with SuperCluster M7 – Key differences: Smaller scale, single-tenant

• Much easier to deploy and operate – Customer-installable with no ACS services required

• Lower entry price than SuperCluster M7 – Lower hardware cost, no Exadata Storage Server

software to license

• Test/Dev • Production



MiniCluster

Simple

Efficient

Secure

Cloud MiniCluster S7-2

Database and Application Machine


Database & Applications Runs Your Existing

and New Applications

Virtualization

Operating System

Compute & Storage

Virtual Assistant

Turn-key Database and Application Machine

Customer Presentation 6

Open platform for 1000’s of Oracle and 3rd party applications, tools and frameworks

MiniCluster S7-2

Copyright © 2016, Oracle and/or its affiliates. All rights reserved. | Customer Presentation

Remote/Branch Office

• High Availability design with push-button operation is ideal for remote or branch offices with limited local IT staff

Secure Environments

• Financial transaction processing, legal records, medical records, secure communications, and more…

DevOps

• Setup, maintenance and management automation designed for software developers and DBAs

Real-time Analytics

• Run queries on production OLTP applications at will using Oracle 12c In-memory and the S7 processor

MiniCluster S7-2 Satisfies a Wide Range of Needs

7


No Training Required


Average users get expert results with no special skills or error-prone manual procedures

Straightforward Simplicity

Virtual Assistant automates basic administration, dramatically reducing operational effort, training and risk.


Increase Operational Efficiency With Existing Staff & Skills


Powerful, automated system administration, security and compliance verification

Up to

90% Less system administration time and effort required


Database & Apps.

Virtualization

Operating System

Compute & Storage

Dramatically Reduce the Need for OS Skills and Training

Security & compliance controls

Full-system patching

Oracle RAC and Single Instance Oracle Database deployment

Application VM provisioning

Automatic performance tuning

System health checks


Introducing the MiniCluster Virtual Assistant

Virtual Assistant


Operate at Maximum Velocity

• Browser-based UI

• Command line UI

• Oracle Cloud REST Application Programming Interface


Hundreds of complex administrative tasks hidden behind easy-to-use controls

Getting Started Wizard will guide you through the steps to get MiniCluster up and running.

By the end of this wizard you will:

Next >

Welcome to the MiniCluster Virtual Assistant

Welcome System Setup DB Profile DB VM Group DB Home DB Instance App Profile App VM Gr… Summary

1. Finish Initial Install

2. Create Database Virtual Machine Group

3. Create Database Home

4. Create Database Instance

5. Create Application Virtual Machine Group

6. Review Configuration Summary

MiniCluster Virtual Assistant


Easily Deploy System Patches and Updates

• Pre-tested and verified full-system patches

• Upload and apply patches in 2 hours with 2 mouse clicks


Execute pre-tested and verified full-system patches and updates faster with less risk

Check Status

Apply

Component Current Level Action

MCMU

Patches and Updates

Latest Level

1.1.7

mc1-n1.us.oracle.com:1.1.6.6.9

mc1-n2.us.oracle.com:1.1.6.6.9

mc1ss01.us.oracle.com:1.1.6.6.9

mc1ss02.us.oracle.com:1.1.6.6.9

Note: Patching components with * marker may cause system downtime.

1. Download latest patch from My Oracle Support 2. Move patch binaries to /var/opt/oracle.minicluster/patch directory 3. Once steps 1 and 2 are finished, click "Confirm" to start upload

Cancel Confirm

Ready to upload?



Never Have to Explain Why Your Systems Weren’t Secure


Extremely Strong Security, Simple to Manage and Verify

Effortless Security

Set security levels, manage encryption and execute audits with the push of a button.


Security in Silicon is More Efficient than Security in Software Security-in-Silicon makes enterprise-wide encryption practical

Silicon Secured Memory

Near-zero-overhead

Cryptographic Acceleration

• Protection from attacks against data in memory, on media or transmitted over the network with virtually no performance impact



Nightmare Scenarios: Famous Memory Intrusion Exploits Silicon Secured Memory protects against memory read and write attacks

Buffer Over-read Attack

Heartbleed Buffer Over-write Attack

Venom



Protect Vulnerable Data Where it’s Most at Risk: In Memory

• Protects data in memory

• Secret “color” bits added to pointers (key), and content (lock)

• Pointer color (key) must match content color or program is aborted

• Set on memory allocation, changed on memory free’

• Protects against access off end of structure, stale pointer access and malicious attacks

Silicon Secured Memory stops attackers from exploiting undiscovered software defects

Applications Memory

Pointer “Y”

Pointer “R”

GO

Pointer “B” GO

S7 Processor



Clear Data In

Encrypted Data Out

Broadest Set Of Ciphers For All Your Apps at Silicon Speed Cryptographic accelerators off-load CPU cores so encryption costs are negligible

Cryptographic Accelerator S7 Processor

1 2

3 4

5 6

7 8



STRONG ENCRYPTION

14,121.46 EjOps

14,389.83 EjOps

NO ENCRYPTION

BENCHMARKED PERFORMANCE

End-to-End Strong Encryption is Now Practical


Standard Java Application & Database Application Benchmark (SPECjEnterprise2015)

2% Typical Application Performance Impact of Activating Strong Encryption


Deploy the Strongest Security, no Training Required A vast array of unique and standard security technologies under one master control

• System and OS security configuration

• White-listing of essential system services

• Hardening and minimization of services

• Data encryption & key management

• OS kernel and network security policies

• User account, RBAC and audit policies

• Host & network firewall policies

• Compliance rules checks and verification

• Package integrity checks

• Integrated Identity management and approval

workflows for security sensitive operations

Integrated security controls

225 MiniCluster Virtual Assistant

MiniCluster S7-2



Enable PCI-DSS Compliance With a Single Selection

• Pre-tested and verified security, from hardware and firmware to OS, Database and storage


Achieving strong application security does not require a security expert



Safely Manage and Verify System-wide Encryption

• Security dashboard makes tracking security keys simple

• Check VM or volume encryption status at a glance


Take full advantage of the S7 Cryptographic Acceleration for the strongest security

Node

Encryption Key Information Encryption keys for all the Virtual Machines and Volumes

VM Name ZFS Pool Key Label Encryption Key Encryption Statu

Node 1

mc9-n1 rpool/common gz_mc9-n1_zw;pinfile aes-256-ccm ON

mc9-n1 rpool/audit_pool gz_mc9-n1_zw;pinfile aes-256-ccm ON

mc9ss01 rpool/common gz_mc9-n1_zw;pinfile aes-256-ccm ON

mc9ss01 rpool/audit_pool gz_mc9-n1_zw;pinfile aes-256-ccm ON

mc9ss01 rpool/u01 gz_mc9-n1_zw;pinfile aes-256-ccm ON

Node 2

mc9-n2 rpool/common gz_mc9-n1_zw;pinfile aes-256-ccm ON

mc9-n2 rpool/audit_pool gz_mc9-n1_zw;pinfile aes-256-ccm ON



Convenient, Comprehensive Security Auditing


Extensible compliance framework with out-of-the-box standard profiles



Extreme Efficiency for Higher Productivity & Reduced Costs Run the widest range of workloads with less effort, less hardware and less software

Breakthrough Efficiency

Run application, database and analytics workloads much faster with less hardware and software.



HA Architecture for Exceptional Reliability & Versatility


Fully redundant hardware design with all-flash database performance

• S7-2 Compute Nodes (2x) – 16 processor cores ea. (32 total) with 512 GB

memory (1 TB total), on-chip Software-in-Silicon Cryptographic and Analytics Accelerators

• All-flash Database Storage – 17.6TB raw enterprise flash storage for Oracle DB

• High Capacity Application Storage – 48TB of raw storage for VMs, applications and ETLs

MiniCluster S7-2


• Redundant Storage Connectivity

SAS3

• Dedicated Cluster Interconnect

10GbE

• Redundant Network Connectivity

10GbE

Maximum Availability with Minimum Risk & Effort Fully redundant, high availability architecture out-of-the-box

• Rolling upgrades for zero downtime

Compute Node #2

Disk Array

Compute Node #1



Do More Work With Less Software and Less Hardware Baseline assumption for predicting real-world application performance per-core

Intel Xeon E5 v4

SPARC S7

1.5x

Baseline per-core Performance



Get More Out of Your Oracle Database Investment TPC-C Database OLTP Benchmark

110k

173k

S7-2

x86 E5 v4

TPC-C Database OLTP Benchmark

57% More per Core



Dramatically Improve Java Application Efficiency SPECjbb2015 MultiJVM Java Benchmark

SPECjbb2015 MultiJVM Java Benchmark

3387 Max+Crit

6348 Max+Crit

S7-2

x86 E5 v4

HP DL360 G9

87% More per Core



Take Advantage of On-demand, Real-time Analytics Run analytics on production applications, on demand with in-memory performance

Analytics Acceleration

On-chip Analytics Accelerators (DAX)

• On-chip query acceleration and memory decompression

• Frees compute cores and greatly increases performance



Simultaneously active with transactional consistency

• up to 10x SQL acceleration • up to 6x memory efficiency

• Analytics & reporting use new in-memory column format

• BOTH row and column formats for same table are stored in memory

• OLTP uses proven row format

Memory

SALES

Column Format

Transform From Batch Jobs to Continuous Insight


Get extraordinary efficiency from Oracle Database 12c In-memory

Memory

SALES

Row Format

Memory

SALES

Compressed Column Format


Control Costs With Zero-Overhead Virtualization


Lower software licensing costs and higher hardware utilization for greater efficiency

Virtual

Machines Let you license and use

only the cores required

by the software

workload you’re running

1 Core

Zero-overhead virtualization for

database and applications


Master the Cloud


Built-in integration with Oracle Cloud and the widest range of private cloud tools

Cloud Ready

Seamless cloud integration, cloud-based software development and out-of-the-box backup and disaster recovery.


Easily Build and Integrate With Private Clouds


Leverage preferred private cloud orchestration and management systems

Oracle Cloud REST API

Virtualization

Operating System

Database & Apps.

Compute & Storage

Virtual Assistant


Never Worry About Off-site Backups Again


Transparent database backup to the Oracle Cloud

• Secure • Strong data protection and privacy

• Reliable • Choice of redundancy policies

• Scalable • Capacity on demand

• Simple • Transparent backup and restore

Database Backup Cloud Service


MiniCluster S7-2

HP DL 360 Gen 9 3PAR 8200

DIY Generic Computing Falls Short, MiniCluster Exceeds Dramatically Lower Hardware and Software List Price and Year-1 Total Cost

Yes No Factory tested HA compute and storage configuration


$ 129,000 $ 220,000 List Price

Yes No Software in Silicon

Security and Analytics Acceleration

Yes No Push-button lifecycle management

Yes No End-to-end automated security

Yes No From box to production in 1 day


Hyperconverged Systems

Hyper-convergence Done Right Dramatically Lower Hardware and Software List Price and Year-1 Total Cost

Yes No End-to-end Security Automation


Yes No Extreme S7 Processor Performance

Yes No Silicon Secured Memory

Yes No Push-button Compliance Reporting

Yes No On-chip Analytics Acceleration

Yes No Lowest Cost MiniCluster

S7-2


MiniCluster Hardware Architecture


10GbE (Base-T or Fibre, 2 ports per node)

10GbE (Redundant, Base –T)

SAS3 (12 Gb/s, redundant)

Compute Node #2

Disk Array

Compute Node #1


MiniCluster S7-2 Compute Node

• Compute – Sonoma Sockets, 8 Cores each @ 4.27GHz, 130W TDP

(Total 32 Cores)

– 512GB RAM per Server

• Network – Dual port 10Gb (Fibre) PCIe card

– Integrated Quad-Port 10GBase-T Network

– Support for LACP and IPMP

– Support for VLAN Tagging

• Storage – Internal 12Gb SAS HBA for local disks

– Two dual port 12Gb SAS cards for external disk

• Integrated ILOM Management


Front and Rear View

6x1.2TB HDD

PCIE3 x8

12Gb SAS Ext

PCIE2 x8/x16

ESTES-EXT

PCIE1 x8/x16

10Gb Fibre

PCIE4 (not seen) is an internal slot for the 12Gb

SAS-Int HBA

S7-2 Compute Node Front

S7-2 Compute Node Rear


MiniCluster S7-2 Storage

– (4x) 200GB SSDs for write intensive database Logs

– (14x) 1.2 TB SSDs = 16.8 TB RAW for Database Storage • 4.5 TB Usable HIGH Redundancy

• 7.2 TB Usable NORMAL Redundancy

– (6x) 8 TB High capacity Disks • Shared Files

• Application Data

– Dual IO modules each connecting to all 24 storage array disks

– Dual power supplies

– Estimated 500k IOPS (8k, 50%R/50%W)


S7-2 Storage Array Front

S7-2 Storage Array Rear


Database Only

• Support for 11gR2 and 12c Databases

– Single Instance, RAC One Node and RAC EE

– Choice of CDB or non-CDB 12.1.0.2 databases

• Databases are created on 14 x 1.2 TB SSDs only

• Choice of Normal or High Redundancy

• 4 x 200 GB SSDs are for REDO logs only

• Shared storage is accessible from database VMs

Database + Application Environment

•All database features are valid

•Number of Application VMs are dependent on available resources

– Support for dedicated and shared VMs • Up to 16 dedicated VMs

– Shared storage for Application Files • 6 x 8TB HDDs

• Highly Available


MiniCluster Provisioning Database and Applications


MiniCluster: System Software Architecture

DB VM Group

App VM Group 1

DB VM Group

App VM Group 1

Service VM (Kernel Zone)

(HA-NFS+ACFS)

Admin VM (Global Zone) Solaris

Admin VM (Global Zone)

Solaris

• Oracle Database • Grid Infrastructure

• Clusterware • ASM

• Oracle Solaris

Solaris

• Oracle Database • Grid Infrastructure

• Clusterware • ASM

• Oracle Solaris

Solaris

Pri

vate

Inte

rco

nn

ect

(10

Gb

Bas

e T)

Public Interconnect (10GbE Fibre/Base T) Datacenter

Connectivity

(14) 1.2 TB SSDs for DATA + RECO (4) 200GB SSDs for REDO (6) 8 TB HDDs – Shared Storage

6 x 1

.2 TB

local H

DD

s for O

S and

Zon

e Bo

ot 6

x 1

.2 T

B lo

cal H

DD

s fo

r O

S an

d Z

on

e B

oo

t

S7-2 Node 1 S7-2 Node 2

NFSv4 (ACFS)

Service VM (Kernel Zone)

(HA-NFS+ACFS)

DB VM1

DB VM2

DB VM3

DB VM4

DB VM5

DB VM6

DB VM7

DB VM8

App VM Group N

Solaris

App VM Group N

Solaris



MiniCluster: Security Overview



MiniCluster Security Controls – Out of box*

21

28

58

10

15

8

15 7 3

System and OS Security Configuration

Whitelisting essential services

Hardening and Minimization services

Data Encryption & Key management

OS Kernel and Network Security Policies

User account, RBAC and Audit Policies

Host & Network firewall policies

Compliance rules checks and verification

Package integrity checks


225

* Configuration based on Compliance rule sets defined by PCI-DSS, CIS and STIG standards


Fully-Automated Security Controls

• Zero Manual Intervention

• 225 Proactive Security controls integrated ground-up – Covers most critical security domains

– Non-intrusive and Non-disruptive to applications and databases

– Readily hardens and minimizes VMs

– Meets industry stringent security requirements and compliance obligations

– Review security controls using a simple “Verification Log” on first boot.


• Disable vulnerable protocols • Boot time security – Verified boot • Package integrity checks • Kernel services hardening • Network services hardening • Filesystem checks • File permissions/ownerships • Role based access control • Root as a role • SSH hardening • Password policy configuration • Roles provisioning • Audit policy configuration • Firewall policies • IPSec policies • ..and more

Example Security Controls


Patching and Updates

• Quarterly patch bundle that contains OS, server firmware, storage firmware, ILOM, Oracle grid infrastructure software

– SRUs supported if Oracle support recommends it

– Database bundle patches also supported – Last two BPs at time of launch


Download QSFDP from My Oracle

Support

Transfer patch bundle to pre

defined repository

Select the latest patch

Patch desired components from

BUI


MiniCluster SuperCluster

Very low acquisition and startup costs Push-button Installation, Run & Maintain, Backup Small form factor designed to fit in any standard datacenter rack infrastructure Factory assembled, configured and tested system Runs both mission critical applications and database workloads Zero overhead virtualization and VM template workload deployment End-to-end security and built-in compliance audit tools SPARC M7 Software-in-Silicon technology Highly scalable multi-tenant system Exadata Storage with Smart Flash Cache, HCC, Intelligent Query Offload Full-featured general-purpose storage: analytics, snapshots, cloning, replication Ultra-fast, scalable and secure InfiniBand I/O backplane

SuperCluster M7 Product Family Differentiation


Choosing the Right Database Machine Different Database Machines Optimized for Different Deployment Types

Database Appliance X6

Database Appliance X5-2

MiniCluster S7-2

Exadata X6-2

SuperCluster M7

Push-button easy lifecycle automation Yes Yes Yes No No Combined OLTP, DW & DB consolidation Limited Good Good Excellent Excellent In-memory DB & Analytics Acceleration No No Yes No Yes Database versions supported 11g/12c 11g/12c 11g/12c 10g¥/11g/12c 9i/10g/11g/12c

Runs both applications and database Yes Yes Yes Limited Yes Mandatory software license minimums Yes Yes No Yes Yes SAN connectivity (Fibre Channel) No No No No Yes Comprehensive security automation No No Yes No Limited Silicon Secured Memory No No Yes No Yes Entry level sizing One Node Very Small Very Small Small Medium Secure ‘Legal Entity’ multi-tenancy No No No No Yes Hardware Scalability Limited Limited No Extreme Extreme

¥ Oracle Database 10g is supported with limitations on the Exadata Storage Grid, SuperCluster configurations allow use of the internal ZFS storage as well


Required Benchmark Disclosure Statement

• Additional Info: http://blogs.oracle.com/bestperf

• Copyright 2016, Oracle &/or its affiliates. All rights reserved. Oracle & Java are registered trademarks of Oracle &/or its affiliates. Other names may be trademarks of their respective owners

• SPEC and the benchmark name SPECjEnterprise are registered trademarks of the Standard Performance Evaluation Corporation. Results from www.spec.org as of 10/25/2016. SPARC T7-1, 25,818.85 SPECjEnterprise2010 EjOPS (unsecure); SPARC T7-1, 25,093.06 SPECjEnterprise2010 EjOPS (secure); Oracle Server X5-2, 21,504.30 SPECjEnterprise2010 EjOPS (unsecure); IBM Power S824, 22,543.34 SPECjEnterprise2010 EjOPS (unsecure); IBM x3650 M5, 19,282.14 SPECjEnterprise2010 EjOPS (unsecure).

• SPEC and the benchmark name SPECvirt_sc are registered trademarks of the Standard Performance Evaluation Corporation. Results from www.spec.org as of 10/25/2016. SPARC T7-2, SPECvirt_sc2013 3026@168 VMs; HP DL580 Gen9, SPECvirt_sc2013 3020@168 VMs; Lenovo x3850 X6; SPECvirt_sc2013 2655@147 VMs; Huawei FusionServer RH2288H V3, SPECvirt_sc2013 1616@95 VMs; HP ProLiant DL360 Gen9, SPECvirt_sc2013 1614@95 VMs; IBM Power S824, SPECvirt_sc2013 1371@79 VMs.

• SPEC and the benchmark names SPECfp and SPECint are registered trademarks of the Standard Performance Evaluation Corporation. Results as of October 25, 2016 from www.spec.org and this report. 1 chip results SPARC T7-1: 1200 SPECint_rate2006, 1120 SPECint_rate_base2006, 832 SPECfp_rate2006, 801 SPECfp_rate_base2006; SPARC T5-1B: 489 SPECint_rate2006, 440 SPECint_rate_base2006, 369 SPECfp_rate2006, 350 SPECfp_rate_base2006; Fujitsu SPARC M10-4S: 546 SPECint_rate2006, 479 SPECint_rate_base2006, 462 SPECfp_rate2006, 418 SPECfp_rate_base2006. IBM Power 710 Express: 289 SPECint_rate2006, 255 SPECint_rate_base2006, 248 SPECfp_rate2006, 229 SPECfp_rate_base2006; Fujitsu CELSIUS C740: 715 SPECint_rate2006, 693 SPECint_rate_base2006; NEC Express5800/R120f-1M: 474 SPECfp_rate2006, 460 SPECfp_rate_base2006.

• SPEC and the benchmark name SPEC OMP are registered trademarks of the Standard Performance Evaluation Corporation. Results as of October 25, 2016 from www.spec.org and this report. SPARC T7-4 (4 chips, 128 cores, 1024 threads): 27.9 SPECompG_peak2012, 26.4 SPECompG_base2012; HP ProLiant DL580 Gen9 (4 chips, 72 cores, 144 threads): 21.5 SPECompG_peak2012, 20.4 SPECompG_base2012; Cisco UCS C460 M7 (4 chips, 72 cores, 144 threads): 20.8 SPECompG_base2012.

• Two-tier SAP Sales and Distribution (SD) standard application benchmarks, SAP Enhancement Package 5 for SAP ERP 6.0 as of 10/23/15: SPARC T7-2 (2 processors, 64 cores, 512 threads) 30,800 SAP SD users, 2 x 4.13 GHz SPARC M7, 1 TB memory, Oracle Database 12c, Oracle Solaris 11, Cert# 2016050. IBM Power System S824 (4 processors, 24 cores, 192 threads) 21,212 SAP SD users, 4 x 3.52 GHz POWER8, 512 GB memory, DB2 10.5, AIX 7, Cert#201601. Dell PowerEdge R730 (2 processors, 36 cores, 72 threads) 16,500 SAP SD users, 2 x 2.3 GHz Intel Xeon Processor E5-2699 v3 256 GB memory, SAP ASE 16, RHEL 7, Cert#2016033. HP ProLiant DL380 Gen9 (2 processors, 36 cores, 72 threads) 16,101 SAP SD users, 2 x 2.3 GHz Intel Xeon Processor E5-2699 v3 256 GB memory, SAP ASE 16, RHEL 6.5, Cert#2016032. SAP, R/3, reg TM of SAP AG in Germany and other countries. More info www.sap.com/benchmark


Must be in SPARC S7 or M7 Presentations with Benchmark Results

představení oracle sparc miniclusteru

Technology