Tuesday, September 17, 2019

Enable Elastic IP Address for AWS EC2 instance

When we create an EC2 instance, we should get a public IP address(which is dynamic) and one private address which is static in nature. Public ip address is used to broadcast your internet connected device to the internet and private ip address is the address of the machine which uniquely identifies it.

Now the problem here is, when we reboot the instance, the public IP address keeps on changing. Thus it will be a problematic situation for your applications to work. There is a way through which you can make the public IP4 address as static. This is achieved  via Elastic ip address.

Below are the steps through which we can associate an Elastic IP address to an EC2 instance.



now if we reboot the ec2 instance, the public ip address will change. Note:Private ip address remain static.

From the above ip address, once we are connected to instance via public ip address, we should be able to see the address of the machine which is the private address.



In order to prevent the public ip address from changing, associate it with the elastic ip address.












Now associate the elastic address to the ec2 instance





Click on actions:-




Now if we go to the ec2 console, we will have a new public ipv4 address



This ip address will not change even if we reboot the instance.


Happy learning..............




EBS 12.2 and 12.1.3 is now certified with Oracle Database 19.3

Well, Well, Well time to upgrade my EBS Database 12.1.0.2 to 19.3. Finally the time has come just before the OOW 19 and it cannot be more exciting.

Check out the Oracle blog from Elke Phleps EBS 12.2 is now certified with oracle Db 19.3


The main features are as follows:-

EBS 12.2 is now certified for 19.3 on-premise.
- CDB with Single Plugable PDB (single tenant)
- CDB with multiple PDB is not yet certified.
- Non-CDB is not certified in case of 19c
- Supported Platform - Linux, Solaris (SPARC)
- Special Consideration for VPD deployment with EBS DB.
- RAC and TDE certified
- SSO with OAM integrations certified

𝐈𝐧 𝐏𝐫𝐨𝐠𝐫𝐞𝐬𝐬 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧𝐬 : 
- Platforms : IBM , Windows, HP-UX
- Active Data guard, Data guard, Masking, Transportable DB migrations.
- GG integrations
- ISG and AMP certifications


Time to get your hands dirty. You can get the complete step by step on how to upgrade EBS 12c Database to 19c in my blog https://samappsdba.blogspot.com/2020/12/upgrade-EBS-12.2-database-12c12.1.0.2-to-19c19.3-Part-1.html

Sunday, September 15, 2019

How to connect to AWS EC2 instance using putty

During the creation of EC2 instance in AWS, it will prompt us to create a new keypar/use an existing key pair. If we don't have any existing key pair, then in that case, we will create a new one and keep it safe in our repository.

The keypair format will be .pem format. Now putty only intercepts .ppk format. It doesn't recognize .pem format. To convert an .pem format to .ppk format, we will use puttygen.exe.



Click on load and navigate to the repository where .pem keypair is saved.


Now click on "Save Private key" and then "Save Public Key".

Once the keys are saved, open putty and then select the options as mentioned below.




If all goes all, we should get the login screen





Happy learning

Saturday, June 29, 2019

Create users in Oracle Cloud OCI

The first time when you sign in for OCI services, Oracle setup up a default administrator for you and credentials will be shared with you in an email. This user will be the first IAM user and this user can access all the OCI services. This means they can create and manage IAM resources such as, groups, policies, and compartments. And they can create and manage the cloud resources such as virtual cloud networks (VCNs), instances, block storage volumes, and any other new types of Oracle Cloud Infrastructure resources that become available in the future.In an enterprise environment, you will need more users and these users will be created by the default administrator user. A good example of this distinction is provided in https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/overview.htm


In this post, we are going to setup a new user which will be a federated user. We will create a separate compartment for this user and it will not have any access to the root compartment.


Create a new compartment:-





Create a new group



sandbox group has been created.

Now, we will create a policy. Please note that the container to be choosen should be root.






As per the above statement, users added to the group Sandbox will be able to create resource only in compartment Sandbox. If we try to create any resource such as VCN in any other compartment, we will get error.


Let's proceed with creating the federation of the user.






As of now, we only have the default identity provider. Click on the default OracleIdentityprovider.



Click on groups and create a new group.



Next, you need to map the Oracle Identity Cloud Service group to the Oracle Cloud Infrastructuregroup you created so that members of the IDCS group will have the permissions you granted to the OCI group.




Click on edit mapping and +ADD mapping.




Users that are members of the Oracle Identity Cloud Service groups mapped to the Oracle Cloud Infrastructure groups are now listed in the Console on the Users page

Click on create IDC User




Copy paste the link and open it in a new browser to reset the password


Once password has been reset, login to the OCI using the console.





When this user signs in they can see the compartments they have access to and they can only view, create, and manage resources in the Sandbox compartment. This user cannot create compartments or create other users. Ensure to let the user know which compartments they have access to.



Hope this helps someone...


Reference:https://docs.cloud.oracle.com/iaas/Content/GSG/Tasks/addingusers.htm?TocPath=Getting%20Started%7C_____8

https://docs.cloud.oracle.com/iaas/Content/Identity/Tasks/managingusersfederated.htm










Saturday, June 22, 2019

Tips to pass Oracle Cloud Infrastructure (1Z0-932)

I was bit  offline for few months as i was preparing for my Oracle Cloud Exam. After burning the midnight oil for 5 months, finally i am able to pass the exam. Hence, here i am sharing the tips which will help the aspirants to clear the exam. Also, in the coming days, i will be posting on how to create and use various services in Oracle Cloud Infrastructure.


Now coming to the certification, the first step will be to visit the official oracle website https://education.oracle.com/oracle-cloud-infrastructure-2018-architect-associate/pexam_1Z0-932. The exam pattern keeps on changing and thus this website will give all those details. As of now the exam contains 66 questions and the passing score is 65%.

How to achieve this certification:

1. Go through the Oracle learning YouTube videos. This will give you the overview of various OCI modules.

https://www.youtube.com/playlist?list=PLKCk3OyNwIzvn8dpgrIKNdBOHT7AoMZlw

 OCI Level 100 – Getting Started
 OCI Level 100 – Identity and Access Management
 OCI Level 100 – Virtual Cloud Network
 OCI Level 100 – Connectivity
 OCI Level 100 – Compute
 OCI Level 100 – Block Volume
 OCI Level 100 – File Storage
 OCI Level 100 – Object Storage
 OCI Level 100 – Load Balancer
 OCI Level 100 – Database
 OCI Level 100 – Autonomous Database
 OCI Level 100 – DNS

You can also browse through the advanced modules which is part 200. https://www.youtube.com/playlist?list=PLKCk3OyNwIzuBQ13lwsZpqO4__rLrO1eA

Although i think, part 100 is much better than the part 200.

2. Once you grasp the basic concepts from the videos above, now go through these FAQs to get some in-depth understanding on your concepts of OCI resources:

https://cloud.oracle.com/load-balancing/faq

https://cloud.oracle.com/database/faq

https://cloud.oracle.com/edge/dns/faq

https://cloud.oracle.com/storage/object-storage/faq

https://cloud.oracle.com/storage/block-volume/faq

https://cloud.oracle.com/compute/faq

https://cloud.oracle.com/cloud-security/identity/faq


3. Now it is the time to get your hands dirty and at this moment, you should get the free 30 days trial for OCI and practice whatever you have learnt. Make sure you plan it accordingly as the trial is only for 30 days.

4. Next i would recommend to download the latest OCI study guide and go through the concepts. https://learn.oracle.com/education/downloads/OracleCloudInfrastructurestudyguide.pdf

5. Now at this stage you are ready for the exam, so attempt this Practice Exam:
http://oukc.oracle.com/static12/opn/login/?t=checkusercookies|r=-1|c=2164389233

6. There are some good practice tests available in Udemy for this exam.I would prefer going though the mock test series from Deepak Brahmbatt.

Also, i am sharing some of my notes, which i had prepared for this exam. Hope it helps someone.

*********************************


Boot volumes:

They can be cloned
they can be preserved while terminating the instance
they cannot be detached from the running instance
Boot volume is associated with AD.

Block volumes can be restored from their backups any region but clone can be done only in the same availability domain and their size can also be changed.
default size is 1 tb

You can attach up to 32 volumes per compute instance, resulting in up to 32 TB*32=1 PB


File systems storage

It can be mounted and multiple file systems can be exposed.
it can be created in a single subnet and can be accessed in any AD in a region
No two File systems associated with the same mount target can have overlapping export paths (e.g. FS
paths like /example and /example/path are not allowed)


Subnets can span a region or can exist in single availability domain. Now it is a regional service
Load balancer is also no AD specific.



Object Storage

Multipart uploads can accommodate objects that are too large for a single upload operation.
Oracle recommends that you perform a multipart upload to upload objects larger than 100
MiB. The maximum size for an uploaded object is 10 TiB. Object parts must be no larger than
50 GiB. For very large uploads performed through the API, you have the flexibility of pausing
between the uploads of individual parts, and resuming the upload as your schedule and
resources allow.




Autonomous Database:-

After provisioning, you can scale the number of CPU cores or the storage
capacity of the database at any time without impacting availability or performance.
Autonomous Database handles creating the database, as well as the following maintenance
tasks:
l Backing up the database
l Patching the database
l Upgrading the database
l Tuning the database


DBaaS

While considering the migration of on premise database


Data Pump Conventional Export/Import
This method can be used regardless of the endian format and database character set of
the on-premises database.
For the steps this method entails, see Data Pump Conventional Export/Import.
l Data Pump Transportable Tablespace
This method can be used only if the on-premises platform is little endian, and the
database character sets of your on-premises database and the Oracle Cloud
Infrastructure Database database are compatible.
For the steps this method entails, see Data Pump Transportable Tablespace.
l RMAN Transportable Tablespace with Data Pump
This method can be used only if the on-premises platform is little endian, and the
database character sets of your on-premises database and the Oracle Cloud
Infrastructure Database database are compatible.
For the steps this method entails, see RMAN Transportable Tablespace with Data Pump.
l RMAN CONVERT Transportable Tablespace with Data Pump
This method can be used only if the database character sets of your on-premises
database and the Oracle Cloud Infrastructure Database database are compatible.
This method is similar to the Data Pump Transportable Tablespace method, with the
addition of the RMAN CONVERT command to enable transport between platforms with
different endianness. Query V$TRANSPORTABLE_PLATFORM to determine if the onpremises
database platform supports cross-platform tablespace transport and to
determine the endian format of the platform. The Database service platform is littleendian
format.
For the steps this method entails, see RMAN CONVERT Transportable Tablespace with
Data Pump.


Load balancers Faq:-

load balancers cant have a private subnet. It needs public ip address and private ip adress.

Oracle recommends that you distribute your backend servers across all availability domains
within the region.

It is a specific to AD

There are two type of checks tcp level checks and http level checks

health status

ok-no attention
warning(yellow);resoruce needs some attanetion
critical(red)-require immediate attention
unknown(gray)-health status is unavailabe.the resource is not responding


scenario:-if listener is working and requests are not passing through it, then check the security lists.
All entity health status indicators report OK, but traffic does not flow (as with misconfigured listeners). If the listener is not at fault, check the security list configuration.
All entity health statuses report as unhealthy. You have checked your health check configuration and your services run properly on your backend servers.
In this case, your security lists might not include the IP range for the source of the health check requests. You can find the health check source IP on the Details page for each backend server. You can also use the API to find the IP in the sourceIpAddress field of the HealthCheckResult object.

Load Balancer currently only supports IPv4 traffic.

Can I change the shape of my load balancer?
Currently, you cannot change the shape of your load balancer once you created the load balancer. To change the shape of your load balancer (e.g. to increase or decrease the pre-provisioned bandwidth for ingress plus egress traffic), you can use the Console or API to create another load balancer with the new shape and update the DNS A-record associated with you load balancer’s IP address

The Load Balancing service handles requests asynchronously

You can confirm the availability of your backend servers via request or connection attempts based on a time-interval you specify. Currently, we support the following TCP-level or HTTP-level health checks for your backend servers:
TCP-level health checks attempt to make a TCP connection with the backend servers and validate the response based on the connection status.
HTTP-level health checks send requests to the backend servers at a specific URI and validate the response based on the status code or entity data (body) returned

Storage:-

What are the core components of the Oracle Object Storage service?
Objects: All data, regardless of content type, is stored as objects in Oracle Object Storage. For example, log files, video files, and audio files are all stored as objects.

Bucket: A bucket is a logical container that stores objects. Buckets can serve as a grouping mechanism to store related objects together.

Namespace: A namespace is the logical entity that lets you control a personal bucket namespace. Oracle Cloud Infrastructure Object Storage bucket names are not global.

Bucket names need to be unique within the context of a namespace, but can be repeated across namespaces. Each tenant is associated with one default namespace (tenant name) that spans all compartments.



Oracle Object Storage is a regional service:-

You can access Oracle Object Storage from anywhere as long as you have access to an internet connection and the required permissions to access the service.

Block Volume:-

If the compute instance terminates, you can attach the volume to another compute instance and regain access to the persistent data in that volume.

Your operating system accesses block volumes using iSCSI protocol

To provide the highest performance, block volumes are optimized to attach to any compute instance within the same Availability Domain.
You can detach a volume from one compute instance, and then attach the block volume to another compute instance without rebooting your compute servers.


resize a block volume

Expand the size of existing boot and block volumes offline up to 32 TB.
Restore from a backup of boot or block volume to a larger size volume up to 32 TB.
Clone an existing block or boot volume to a larger size volume up to 32 TB.

Two types of volume attachment:-
iSCSI or Paravirtualized. Paravirtualized volume attachment is supported for VM instances only.

Block volumes backup copies the existing block volume  backups to another region.

Can I clone a volume from one Availability Domain (AD) to another?
No. Block volumes are AD-local. You can clone volumes only within the same AD.

block volumes backup can be cloned from one region to another region
block volumes backup can be restored in any availability domain in same region.
You can only create a clone for a volume within the same region, availability domain and tenant.
You can share custom images across tenancies and regions



Can I delete a boot volume?
Yes, you can delete an unattached boot volume by using the console or API/CLI. Additionally, you can optionally chose to automatically delete the boot volume when 'Terminating' an instance by selecting the checkbox in the delete confirmation dialog.
Oracle Cloud Infrastructure does not allow you to delete the boot volume currently attached to an instance.
You can stop an instance, detach its boot volume, and delete the detached boot volume. The stopped instance cannot be started after its boot volume is deleted. You can only terminate that instance.

What happens to my data when I terminate my instance?
After you terminate your compute instance, you have the option to keep its boot volume for later reuse

What is a volume group backup? How does it work?
A coordinated point-in-time crash consistent backup of the entire set of volumes that are in a volume group. This operation creates a volume group backup. There is no impact to the source volume group and volumes during the backup process.

Volume group backups are replicated across all Availability Domains within the region where the source volume group resides. A volume group backup can then be used to create a new volume group to any Availability Domain within the region the backup resides, by restoring all the volumes data that are in the volume group.




Fast Connect

Connectivity models
it is not encrypted

Oracle Provider:-
Third party provider
Colocation with Oracle in an Oracle Cloud inffrastructure Fastconnect location

How many VPN tunnels can I have from a single CPE device?
You can have a maximum of eight tunnels from a unique CPE IP address per region. If you want more than eight tunnels, either use a different IP address for the additional ones, or use a different CPE device (recommended).



Data transfer utility

TRANSFER JOB
A transfer job is the logical representation of a data migration to Oracle Cloud
Infrastructure. A transfer job consists of one or more transfer packages that each contain
one or more transfer disks.
TRANSFER DISK
A transfer disk is an HDD that is specially prepared to copy and upload data to Oracle
Cloud Infrastructure. You copy your data to one or more of these disks and ship the disks
in a parcel to Oracle to upload your data.
The following transfer disks are supported:
l SATA II/III 2.5" or 3.5" HDDs
l External USB 2.0/3.0 HDDs


DATA TRANSFER UTILITY
The Data Transfer Utility is the command-line software that Oracle provides for you to
prepare transfer disks for your data and for shipment to Oracle. In addition, you can use
this software to manage transfer jobs and packages.
HOST
The computer at your site on which you download the Data Transfer Utility to perform
Data Transfer Service tasks.

TRANSFER PACKAGE
A transfer package is the logical representation of the parcel containing the transfer disks
that you ship to Oracle to upload to Oracle Cloud Infrastructure.



The dm-crypt software generates a master AES-256 bit encryption key that is used for
all data written to or read from the disk

Create the required IAM Users / Groups / Policies; create the required Object Storage
Bucket; Install the Data Transfer Utility on the host machine that will be used to load
data.

Preparing for and copying your data
1. Create a transfer job.
2. Request a transfer appliance.
3. Monitor your transfer appliance request.
4. Set up your host machine.
CHAPTER 8 Data Transfer
Oracle Cloud Infrastructure User Guide 638
5. Unpack and prepare your transfer appliance.
6. Configure networking on your transfer appliance.
7. Write data to your transfer appliance.
Preparing your appliances for shipment
1. Finalize your transfer appliance.
2. Package and ship the transfer appliance to Oracle.
Post shipment tasks
1. Optionally, cancel a transfer appliance if you don't want Oracle to upload your data.
2. Monitor your transfer appliance return shipment.
3. Review transfer appliance log files.
4. Close the transfer job.
Secure Appliance Data Transfer to Oracle Cloud Infrastructure



two types of transfer utility

1. Data transfer appliance
2. Data transfer Disk--disks is being purchased by customer. These are feasible for transferring relatively small amount of data.


DNS Zones:-global in nature

Zone file uploads are limited to 1
megabyte (MB) in size per zone file. If your zone file is larger than 1 MB, you will need to split
the zone file into smaller batches to upload all of the zone information

DNS Resource Record Types
A
An address record used to point a hostname to an IPv4 address. For more information
about A records, see RFC 1035.
AAAA
An address record used point a hostname at an IPv6 address. For more information about
AAAA records, see RFC 3596.
ALIAS
A private pseudo-record that allows CNAME functionality at the apex of a zone. You can
view and read ALIAS records in Oracle Cloud Infrastructure DNS, but you cannot create
them.
CHAPTER 10 Edge Services
Oracle Cloud Infrastructure User Guide 1230
CAA
A Certification Authority Authorization record allows a domain name holder to specify one
or more Certification Authorities authorized to issue certificates for that domain. For more
information about CAA records, see RFC 6844.
CDNSKEY
A Child DNSKEY moves a CDNSSEC key from a child zone to a parent zone. The
information provided in this record must match the CDNSKEY information for your domain
at your other DNS provider. This record is automatically created if you enable DNSSEC on
a primary zone in Oracle Cloud Infrastructure DNS



CDS
A Child Delegation Signer record is a child copy of a DS record, for transfer to a parent
zone. For more information about CDS records, see RFC 7344.
CERT
A Certificate record stores public key certificates and related certificate revocation lists in
the DNS. For more information about CERT records, see RFC 2538 and RFC 4398.
CNAME
A Canonical Name record identifies the canonical name for a domain. For more
information about CNAME records
CSYNC
A Child-to-Parent Synchronization record syncs records from a child zone to a parent
zone. For more information about CNAME records, see RFC 7477.
DHCID
A DHCP identifier record provides a way to store DHCP client identifiers in the DNS to
eliminate potential hostname conflicts within a zone


IPSec connection:-

Overall Process
Here's the overall process for setting up an IPSec VPN:

Complete the tasks listed in Before You Get Started.
Set up the IPSec VPN components (instructions in Example: Setting Up a Proof of Concept IPSec VPN):
Create your VCN.
Create a DRG.
Attach the DRG to your VCN.
Create a route table and route rule for the DRG.
Create a security list and required rules.
Create a subnet in the VCN.
Create a CPE object and provide your CPE device's public IP address.
Create an IPSec connection to the CPE object and provide required routing information.

Fast Connect:-
Oracle Provider
List of Oracle Cloud Infrastructure FastConnect providers
Port speeds in 1-Gbps and 10-Gbps increments
Instructions for integrating: FastConnect: With an Oracle Provider
Third-Party Provider
Port speed of 10 Gbps per cross-connect
Instructions for integrating: FastConnect: With a Third-Party Provider
Colocation with Oracle in an Oracle Cloud Infrastructure FastConnect Location
List of Oracle Cloud InfrastructureFastConnect locations (see the FAQ for specific addresses)
Port speed of 10 Gbps per cross-connect

autonomous database

These services map to the LOW, MEDIUM, and HIGH consumer groups. For example, if you provision an Autonomous Data Warehouse service with the name ADW1, your service names are:

adw1_high

adw1_medium

adw1_low

For example, a user connecting with the adw1_low service uses the consumer group LOW.

The basic characteristics of these consumer groups are:

HIGH: Highest resources, lowest concurrency. Queries run in parallel.

MEDIUM: Less resources, higher concurrency. Queries run in parallel.

LOW: Least resources, highest concurrency. Queries run serially.



Autonomous Data Warehouse has predefined idle time limits for sessions so that idle sessions do not hold system resources for a long time.

A session may be terminated if it stays idle for more than five (5) minutes and the resources it consumes are needed by other users. This allows other active sessions to proceed without waiting for the idle session.

Concurrency

The concurrency level of these consumer groups changes based on the number of OCPUs you subscribe to. The HIGH consumer group’s concurrency is fixed and does not change based on the number of OCPUs. The MEDIUM and LOW consumer groups can run more concurrent SQL statements if you scale up the compute capacity of your service.

Note:

The HIGH consumer group is configured for low concurrency, even a single query in this consumer group can use all resources in your database. If your workload has concurrent queries Oracle recommends using the MEDIUM consumer group. If your concurrency requirements are not met with the MEDIUM consumer group, you can use the LOW consumer group or you can scale up your compute capacity and continue using the MEDIUM consumer group.
For example, for an Autonomous Data Warehouse with 16 OCPUs, the HIGH consumer group will be able to run 3 concurrent SQL statements when the MEDIUM consumer group is not running any statements. The MEDIUM consumer group will be able to run 20 concurrent SQL statements when the HIGH consumer group is not running any statements. The LOW consumer group will be able to run 1600 concurrent SQL statements. The HIGH consumer group can run at least 1 SQL statement when the MEDIUM consumer group is also running statements. When these concurrency levels are reached for a consumer group new SQL statements in that consumer group will be queued until one or more running statements finish.


If you want to start using the Autonomous Data Warehouse service without creating your own tables, the service provides the read-only Sales History and Star Schema Benchmark data sets. These data sets are provided as Oracle Database schemas SH and SSB, respectively


Concurrency is dependent on OCPU only in medium and low consumer groups



Predefined Database Service Names for Autonomous Transaction Processing
The tnsnames.ora file provided with the credentials zip file contains five database service names identifiable as tpurgent, tp, high, medium, and low. The predefined service names provide different levels of performance and concurrency for Autonomous Transaction Processing.

tpurgent: The highest priority application connection service for time critical transaction processing operations. This connection service supports manual parallelism.

tp: A typical application connection service for transaction processing operations. This connection service does not run with parallelism.

high: A high priority application connection service for reporting and batch operations. All operations run in parallel and are subject to queuing.

medium: A typical application connection service for reporting and batch operations. All operations run in parallel and are subject to queuing. Using this service the degree of parallelism is limited to four (4).

low: A lowest priority application connection service for reporting or batch processing operations. This connection service does not run with parallelism



File Storage:-

AD local specific. Load balancer is not. for same subnet IAM plicies control the mounting of target.

Zone:-

A zone is a portion of the DNS namespace. A Start of Authority record (SOA) defines a zone. A zone contains all labels underneath itself in the tree, unless otherwise specified. Child zones are independent subdomains with their own Start of Authority and Name Server (NS) records. The parent zone of a child zone must contain NS records that refer DNS queries to the name servers responsible for the child zone. Each subsequent child zone creates another link in the delegation chain



fast connect

private fast connect extends your on premise private networks to oracle cloud.
public fast connect enables us to access oci resoures without using the internet

public fast connect dosen't use DRG.

Remote vcn peering uses drg

high level steps

1. setup the drg and attach it to the vcn
2. update rules in the existing vcn
3. set up cross connects groups

Oracle provides three components to help you implement highly available connections:

Multiple Oracle FastConnect locations within each region (data center redundancy)
Multiple providers in each Oracle FastConnect location (provider redundancy)
Multiple physical circuits in each Oracle FastConnect location (circuit redundancy)


And once you pass the exam, feel free to transfer $1 to my account.:).Just kidding
All the best.


Thanks...............................