talk it_ oracle_임기성_110907

25
<Insert Picture Here> Introducing Oracle Unified Directory 11g

Upload: cana-ko

Post on 29-Nov-2014

651 views

Category:

Education


2 download

DESCRIPTION

 

TRANSCRIPT

Page 1: Talk IT_ Oracle_임기성_110907

<Insert Picture Here>

Introducing Oracle Unified Directory 11g

Page 2: Talk IT_ Oracle_임기성_110907

<Insert Picture Here>

Agenda

• Changing Landscape

• Introducing Oracle Unified Directory

• Interoperability and Upgrade

• Comparison and Contrast

• Summary

• Q&A

2

Page 3: Talk IT_ Oracle_임기성_110907

Directory Landscape Is Changing

Identity as a Service

Cloud Applications

Mobile Access

Personalization

Social Networking

Federated Sign-on Scale

Performance

3

Page 4: Talk IT_ Oracle_임기성_110907

Demand for Write Operations is Increasing

Host Access

Enterprise/

Extranet

Cloud and

Social

NetworkingMobile

Reads:70%

Writes:30%

Reads:60%

Writes:40%

Reads:80%

Writes:20%

Reads:90%

Writes:10%

“Percentage of Writes Increasing”

• Personalization data

• Location data

• Mobile applications

Thousands

Millions

Billions

10s Billions

“Read Performance Still Important”

• Billions of users and devices

• Millions of operations per second

• Elastic growth

4

Page 5: Talk IT_ Oracle_임기성_110907

A Trend Towards Unification

Virtual

SynchStorage

Corporate

LDAP

Extranet

LDAP

Customer

LDAP

LOB

More Directory Convergence• More RFP’s Require Integrated Capability

• Expansion Shared Services vs. LOB IT

• Compliance and Security Requirements

“Convergence drives Unification”• Lower TCO

• Lower Administration Effort

• Improved User Experience

Employees/Partners/Customers

Business Affiliates/Subsidiaries

5

Page 6: Talk IT_ Oracle_임기성_110907

Introducing Oracle Unified Directory 11g

Extreme Scale

Next Generation

Integrated and Interoperable

• Scale to 10’s of Billions

• Convergence of directories

• Integrated with ODSM for

configuration and Enterprise

Manager

• Inter-operable with all certified

ODSEE ISV software

• Integrated with ODS+

Optimized for cloud, mobile and social

6

Page 7: Talk IT_ Oracle_임기성_110907

Extreme Scale

Synch

Proxy

3XRead

Performance

5XWrite

Performance

Compared to ODSEE

Oracle

Unified

Directory

• Built on OpenDS

• Convergence of directories

• Advanced Replication

• Flexible Deployment

• Horizontal data vs. Monolithic

data scale approach

Highlights

Will continue to enhance and maintain existing directory offerings

• Directory Server

• Proxy Server

• Replication Server

Core Components

7

Page 8: Talk IT_ Oracle_임기성_110907

Next Generation

Unified Directory

Mobile Devices

Social

Application

Location Based

Application

8

Page 9: Talk IT_ Oracle_임기성_110907

Interoperable and Compatible

• Fully Compatible With

ODSEE

• Bi-directional replication

with ODSEE

• Run mixed OUD and DSEE

environment

• Zero down time upgrade

from ODSEE to OUD

Simplified Deployment

OUD

Replication

Topology

ODSEE

Replication

Topology

OUD Directory Server 1

OUD Directory Server 2

ODSEE Directory Server 1

ODSEE Directory Server 2

OUD Replication Gateway

OUD Replication Gateway

9

Page 10: Talk IT_ Oracle_임기성_110907

OUD is Included in ODS Plus Suite

• Oracle Internet Directory

• Oracle Unified Directory

• Oracle Virtual Directory

• Oracle Directory Server Enterprise Edition

ODSEE OVD

OIDOUD

• New Architecture

Industry first 100 % Java

directory service solution

• New Scale Approach

Horizontal vs. Monolithic data

scale approach

• Certification

Will be certified with Oracle

technology that requires OID

ODS +

ODS Plus Customers get OUD included in license

10

Page 11: Talk IT_ Oracle_임기성_110907

Oracle Unified Directory 11gR1

• Core directory functions

• A directory server, equivalent of DSEE directory server

• A directory proxy server for fail-over, load-balancing, data distribution and

security

• Dedicated replication server and replication gateway modes

• Full compatibility with ODSEE

• What works with ODSEE will work with OUD

• Replication gateway for ODSEE and OUD co-existence

• Complete Java directory services solution with OVD and DIP

• OVD for identity virtualization

• Directory Integration platform (DIP) for synchronization

• OUD is a J2SE app that runs in a JVM which does not require a J2EE

container

11

Page 12: Talk IT_ Oracle_임기성_110907

Oracle Unified Directory 11gR1

• Elastic scalability

• Global index for high performance and data distribution

• Advanced replication

• Fractional replication, priority replication, and assured replication

• Flexible deployment options

• Multiple algorithms for proxy load-balancing

• Proportional, saturation, failover, optimal

• Multiple algorithms for proxy data distribution/ partition

• Numeric, lexicographic, DN pattern, and capacity based

• ODSM Admin UI

• J2EE app that is certified for WLS

• Enterprise Manager Grid Control monitoring

• Certified as identity store for IDM product as well as FMW through

OPSS

12

Page 13: Talk IT_ Oracle_임기성_110907

Deployment in two Data Centers with

DS and Proxy

13

Page 14: Talk IT_ Oracle_임기성_110907

Deployment in two Data Centers with

Distribution DS and Proxy with Global

Index

14

Page 15: Talk IT_ Oracle_임기성_110907

Architecture

Oracle Unified Directory

Naming Context

Directory Service

Front End

Local

Back-End

Load Balancing

Distribution

Local DB backend

Schema BE

Protocol Handling

(LDAP, LDAPS, JMX, …)

Provide access to…

Naming Context, request filtering policy, resource limits

List of accessible

naming context

Distribution

algorithms

Proxy

(Load-balancing algorithms)

Default data store

(Oracle BDB JE, ACID)

15

Page 16: Talk IT_ Oracle_임기성_110907

Zero Down-time Upgrade

• Follow the documented upgrade process

Upgrade to ODSEE 11gR1

• Each Server can be done one at a time

Upgrade ODSEE Servers to OUD

• Use the built in OUD replication gateway

Replication between OUD and ODSEE

• Upgrade with Zero down-time

Continue Upgrading Additional Servers

16

Page 17: Talk IT_ Oracle_임기성_110907

Upgrade from DSEE 5.2 to OUDDSEE5.2 to OUD

DSEE 11gR1

DS Master 3

DSEE 11gR1

DS Master 4

DSEE 11gR1

DS Master 1

DSEE 11gR1

DS Master 2

DSEE 11gR1

DSEE 5.2

DS Master 3

DSEE 5.2

DS Master 4

DSEE 5.2

DS Master 1

DSEE 5.2

DS Master 2

Initial deployment

• All masters are upgraded to ODSEE 11gR1

• Change password policy from old 5.2 compatibility mode to 11gR1 mode

17

Page 18: Talk IT_ Oracle_임기성_110907

Upgrade from DSEE 5.2 to OUDDSEE5.2 to OUD

DSEE 11gR1

DS Master 3

DSEE 11gR1

DS Master 4

DSEE 11gR1

DS Master 1

DSEE 11gR1

DS Master 2

DSEE 11gR1

OUD Replication

Server 1

OUD Directory Server 1

OUD Replication

Server 2OUD

Directory Server 2

• Install an OUD topology

• Initialize OUD topology by exporting data from ODSEE 11gR1 and importing in

OUD

OUD topology

18

Page 19: Talk IT_ Oracle_임기성_110907

Upgrade from DSEE 5.2 to OUDDSEE5.2 to OUD

DSEE 11gR1

DS Master 3

DSEE 11gR1

DS Master 4

DSEE 11gR1

DS Master 1

DSEE 11gR1

DS Master 2

DSEE 11gR1

OUD Replication

Server 1

OUD Directory Server 1

OUD Replication

Server 2OUD

Directory Server 2

OUD Replication Gateway

OUD Replication Gateway

• Install Replication Gateway

OUD topology

19

Page 20: Talk IT_ Oracle_임기성_110907

Upgrade from DSEE 6.x/7.0 to OUDDSEE 6.x/7.0 to OUD

DSEE 11gR1

DS Master 3

DSEE 11gR1

DS Master 4

DSEE 6.x/7.0 DS Master 1

DSEE 6.x/7.0

DS Master 2

DSEE6.x/7.0 &

DSEE 11gR1

DSEE 6.x/7.0

DS Master 3

DSEE 6.x/7.0

DS Master 4

DSEE 6.x/7.0

DS Master 1

DSEE 6.x/7.0

DS Master 2

Initial deployment

• Master 3, 4 are upgraded to ODSEE 11gR1

• Change password policy from old 6.x/7.0 compatibility mode to 11gR1 mode

20

Page 21: Talk IT_ Oracle_임기성_110907

Upgrade from DSEE 6.x/7.0 to OUDDSEE 6.x/7.0 to OUD

DSEE 11gR1

DS Master 3

DSEE 11gR1

DS Master 4

DSEE 6.x/7.0 DS Master 1

DSEE 6.x/7.0

DS Master 2

OUD Replication

Server 1

OUD Directory Server 1

OUD Replication

Server 2OUD

Directory Server 2

• Install an OUD topology

• Initialize OUD topology by exporting data from ODSEE 11gR1 and importing in

OUD

OUD topologyDSEE6.x/7.0 &

DSEE 11gR1

21

Page 22: Talk IT_ Oracle_임기성_110907

Upgrade from DSEE 6.x/7.0 to OUDDSEE 6.x/7.0 to OUD

DSEE 11gR1

DS Master 3

DSEE 11gR1

DS Master 4

DSEE 6.x/7.0 DS Master 1

DSEE 6.x/7.0

DS Master 2

OUD Replication

Server 1

OUD Directory Server 1

OUD Replication

Server 2OUD

Directory Server 2

OUD Replication Gateway

OUD Replication Gateway

• Install Replication Gateway

OUD topologyDSEE6.x/7.0 &

DSEE 11gR1

22

Page 23: Talk IT_ Oracle_임기성_110907

Comparing OUD to Existing Oracle Directories

Oracle Virtual Directory

Oracle Internet Directory

Oracle Directory Server Enterprise

Edition

• Embedded Berkley

DB vs. external

Oracle DB

• Horizontal partition

vs. monolithic

• Will certify with all

technologies requiring

OID

• Not a substitute for

OVD

• Works with OVD

• OUD provides better

performance 5x write

and 3x read

• OUD provides elastic

scale

• OUD provides better

administration ODSM

23

Page 24: Talk IT_ Oracle_임기성_110907

Summary

• Extreme Scale

• Next Generation

• Integrated and Inter-operable

• Market demands higher scale

• 5x Write Performance

• 3x Read Performance

• Elastic scalability

• Unified Directory reduces TCO

• Lower admin cost

• Lower deployment cost

24

Page 25: Talk IT_ Oracle_임기성_110907