Current Challenge Customer Engineer responsible for provisioning cloud resources might not be aware or not well trained for how to use the best security configuration as part of their cloud implementation. If the security is not follow during the starting phase then it always become very difficult to address later during the the cloud go live and often it became the reactive approach. The proactive approach to address the security from starting were missing in many CSP providers. Oracle is helping to shift more of the security responsibilities from the customer to the cloud provider.  Ora ..read more

Organization Challenges We all know that customer infrastructure should not be publicly accessible to the Internet… But at the same time, Any operator who is an authenticated operator are regulated operator, should be able to access that infrastructure. Today. The customers who have their target resources in Cloud, There are certain the customers are forced to use certain access networking patterns because of the absence of a native accessors !!! So either customers go for in a private subnet or they launched a jump box in the public subnet… Then they have to muck with the security rules, rout ..read more

Most of the industry have compliance and regulations from Government or Standard authority that very from industry to industry for maintain the security standard as part of their application services delivery to the end user and so the Security is the crucial decision factor before go live the application in most of the industry today. I have seen the customers to validate the security issues in their app server image and application packages or build before they go live for production, Traditionally customer relaying on security scanning tools like Nessus, OpenVAS, OpenSCAP, Nmap, Wireshark ..read more

In this article we will focus on the overview of service – OCI Vault, the types of offering based on the use case, key capabilities and how to use the Vault with various OCI services. The Vault service helps you centrally manage the encryption keys that protect your data and the secret credentials that you use to access resources. Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code. It lets you to centrally manage and control use of keys and secrets across a wide range of OCI services and applications. OCI Vault is a secure ..read more

DRG functionality has been expanded to include the following capabilities: You can attach a DRG to more than one VCN to provide inter-VCN network connectivity. VCNs can be in the same or different tenancies.  You can now assign a different route table and policy to each network resource attached to your DRG enabling granular routing control.  For instance, by connecting all your VCNs and on-premises networks to a single DRG used as a “Hub,” you have a single central gateway to configure traffic routing and Layer 3 isolation.  One possible use case of routing policy is directing ..read more

Special thanks to Oracle ACE Fred Denis for sharing his experience https://unknowndba.blogspot.com/ I would like to share my experience in this article which covers the modified and latest scenarios and hands-on for upgrade and patching the On-premises Exadata to 18c and 19c. 3/ The patching procedure 3.1/ Patching the Cells (aka Storage Servers) 3.1.0/ Information All actions have to be executed as root Patching a cell takes around 1h30 (it may take longer in the event of heavy I/O activity, we experienced some 3 hours per cell patching sessions on an heavy I/O loaded Exadata) You ..read more

I got a chance to explore and involve in this DBMA Task. In this article, I will summarize and walk through a procedure about adding a new cell to an existing Exadata Database Machine. Most of us knew the capabilities that Exadata Database Machine delivers. It’s a known fact that Exadata comes in different fixed rack size capacity: 1/8 rack (2 db nodes, 3 cells), quarter rack (2 db nodes, 3 cells), half rack (4 db nodes, 7 cells) and full rack (8 db nodes, 14 cells).  When you want to expand the capacity, it must be in fixed size as well, like, 1/8 to quarter, quarter to half and half ..read more

DBMA has to collect the ILOM snapshot as per the request from oracle support, As many of you might be asked by Oracle support to provide ILOM snapshot to troubleshoot Exadata Hardware issues. I had to diagnose a hardware issue recently and was not able to use web interface because for firewall issue. Fortunately, you can generate ILOM snapshot using following CLI method. [1] let’s connect and set the snapshot type to normal Step 1 : Login to ILOM using root user. [root@myclusterdb01 ~]# ssh myclustercel05-ilom Password: Oracle(R) Integrated Lights Out Manager Version 3.2.7.30.a r112904 Copy ..read more

The base on the requirement this will be a DBMA Task We will be using its ILOM which is the administration console each Exadata component has. Be sure to have : The database server ILOM IP (usually <dbserver-name>-ilom like <mycluster>db02-ilom) The ILOM root’s password (in case of, the default password is welcome1) [root@myclusterdb01 ~]# ssh myclusterdb01-ilom Warning: Permanently added the RSA host key for IP address '10.191.84.24' to the list of known hosts. Password Oracle(R ..read more

The base on the requirement this will be a DBMA Task Do NOT reboot both Exadata Switches at the same time — you’ll get into lots of trouble An IB Switch ILOM is embedded within the Switch itself and has to be accessed using the ILOM shell with the “spsh” command and then use the “reset /SP” command to reboot the Switch as shown below # ssh myclustersw-ib3 # spsh -> reset /SP Are you sure you want to reset /SP (y/n)? y [root@myclusterdb01 ~]# ssh myclustersw-ib3 Last login: Wed Dec 20 17:58:46 2017 from myclusterdb01.mydomain.com You are now logged in to the root shell. It is recommend ..read more