Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
SlideShare a Scribd company logo
© 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon Relational Database Service
(Amazon RDS)
Joyjeet Banerjee
Enterprise Solutions Architect
• Multi-engine support
– Aurora, MySQL, MariaDB, PostgreSQL, Oracle, SQL Server
• Automated provisioning, Scaling, Patching,
Backup/Restore
• High availability with RDS Multi-AZ, Auto-Failover
– 99.95% SLA for Multi-AZ deployments
• Security
• Monitoring
Amazon RDS
If you host your databases on-premises
Power, HVAC, net
Rack & stack
Server maintenance
OS patches
DB s/w patches
Database backups
Scaling
High availability
DB s/w installs
OS installation
App optimization
you
If you host your databases in Amazon EC2
Power, HVAC, net
Rack & stack
Server maintenance
OS patches
DB s/w patches
Database backups
Scaling
High availability
DB s/w installs
OS installation
App optimization
you
If you host your databases in Amazon RDS
Power, HVAC, net
Rack & stack
Server maintenance
OS patches
DB s/w patches
Database backups
App optimization
High availability
DB s/w installs
OS installation
Scaling
you
No infrastructure
management
Scale up/down
Cost-effective
Instant provisioning
Application
compatibility
Why use Amazon RDS
• Lower TCO because we manage the muck
• Get more leverage from your teams
• Focus on the things that differentiate you
• Built-in high availability and cross region replication
across multiple data centers
• Available on all engines, including base/standard
editions, not just for enterprise editions
• Now even a small startup can leverage multiple data
centers to design highly available apps with over
99.95% availability.
We Made Things Cheaper, Easier, and Better
Provisioning and Effortless Scaling
• Handle higher load or lower usage
• Naturally grow over time
• Control costs
Read Replicas
Bring data close to your customer’s
applications in different regions
Relieve pressure on your master
node for supporting reads and
writes
Promote a Read Replica to a
master for faster recovery in the
event of disaster
Enterprise-grade fault tolerance
solution for production
databases
Automatic failover
Synchronous replication
Inexpensive & enabled with one click
High Availability Multi-AZ Deployments
Security and Compliance
• Network Isolation
• Database instance IP firewall protection
• AWS IAM based resource-level
permission controls
• Encryption at rest using AWS KMS or
Oracle/Microsoft TDE
• SSL protection for data in transit
• Assurance programs for finance,
healthcare, government and more
Amazon Virtual Private Cloud (Amazon VPC)
Securely control network configuration
Availability Zone
AWS Region
10.1.0.0/16
10.1.1.0/24
Manage connectivity
VPN
connection
VPC
peering
Internet
gateway
MAWS Direct
Connect
Routing
rules
Security groups
Database IP firewall protection
Protocol Port Range Source
TCP 3306 172.31.0.0/16
TCP 3306 “Application
security group”
Corporate address admins
Application tier
M
IAM governed access
You can use AWS Identity and Access Management (IAM)
to control who can perform actions on RDS
Users and DBAApplications DBA and Ops
Your database RDS
Controlled with IAMControlled with database grants
M
At Rest Encryption for all RDS Engines
AWS Key Management Service (KMS)
Two-tiered key hierarchy using envelope encryption:
• Unique data key encrypts customer data
• AWS KMS master keys encrypt data keys
• Available for ALL RDS engines
Benefits:
• Limits risk of compromised data key
• Better performance for encrypting large data
• Easier to manage small number of master keys
than millions of data keys
• Centralized access and audit of key activity
Data key 1 Data key 2 Data key 3 Data key 4
Custom
application
Customer master
key(s)
Amazon
RDS
instance 3
Amazon
RDS
instance 2
Amazon
RDS
instance 1
Compliance
Singapore MTCS
27001/9001
27017/27018
Compliance
Aurora
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
HIPAA BAA
MySQL
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
FedRamp
HIPAA BAA
UK Gov. Programs
Singapore MTCS
Oracle
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
FedRamp
HIPAA BAA
UK Gov. Programs
Singapore MTCS
MariaDB
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
PostgreSQL
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
FedRamp
HIPAA BAA
UK Gov. Programs
Singapore MTCS
SQL Server
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
UK Gov.
Programs
Singapore MTCS
Standard monitoring
Amazon CloudWatch
metrics for Amazon RDS
l CPU utilization
l Storage
l Memory
l Swap usage
l DB connections
l I/O (read and write)
l Latency (read and write)
l Throughput (read and write)
l Replica lag
l Many more
Amazon CloudWatch Alarms
l Similar to on-premises custom
monitoring tools
Enhanced Monitoring
Access to over 50
new CPU, memory,
file system, and disk
I/O metrics as low as
1 second intervals
Amazon RDS Customers
• Airbnb moved its main MySQL database to Amazon RDS
with only 15 minutes of downtime
• RDS simplifies much of the time-consuming administrative
tasks associated with databases so engineers can spend
more time on features
• Uses asynchronous master-slave replication to improve
website performance launched via the RDS console or an
API call
• Leverages multi-Availability Zone (Multi-AZ) for high
availability
Airbnb – Amazon RDS for MySQL
Reinventing the Relational Database
Key Questions We Asked
• What if we started from a clean sheet of paper with only constraint being that the
database was a relational database?
• Could we offer much better performance by leveraging the massive scale of our
cloud?
• Could we give you a database with designed durability indistinguishable from 100%
and availability of 99.99%?
• …And could we be better and cheaper than the 30-year old commercial databases in
use today?
Amazon RDS for Aurora
• MySQL compatible with up to 5x better performance on the
same hardware: 100,000 writes/sec & 500,000 reads/sec
• Scalable with up to 64 TB in single database, up to 15 read
replicas
• Highly available, durable, and fault-tolerant custom SSD
storage layer: 6-way replicated across 3 Availability Zones
• Transparent encryption for data at rest using AWS KMS
• Stored procedures in Amazon Aurora can invoke AWS
Lambda functions
Fastest growing service
in AWS history
A new relational database engine, built from the ground up to leverage AWS
Amazon Aurora Customers
Use case: Near real-time analytics and reporting
Master
Read
Replica
Read
Replica
Read
Replica
Shared distributed storage volume
Reader end-point
A customer in the travel industry migrated to Aurora for
their core reporting application accessed by ~1,000
internal users.
§ Replicas can be created, deleted and scaled within
minutes based on load.
§ Read-only queries are load balanced across replica
fleet through a DNS endpoint – no application
configuration needed when replicas are added or
removed.
§ Low replication lag allows mining for fresh data with
no delays, immediately after the data is loaded.
§ Significant performance gains for core analytics
queries - some of the queries executing in 1/100th
the original time.
► Up to 15 promotable read replicas
► Low replica lag – typically < 10ms
► Reader end-point with load balancing
Amazon Aurora is now PostgreSQL-compatible
• PostgreSQL 9.6 compatibility with support for PostGIS
• All the features you expect from Amazon Aurora including
15 read replicas with <10ms lag, shared storage, failover
without data loss, 6-way replication across 3 Availability
Zones, encryption with AWS KMS
• Available now in preview
Simplify monitoring from the
AWS Management Console
l Database load: Identifies
database bottlenecks
l Easy
l Powerful
l Identifies source of bottlenecks
l Top SQL
l Adjustable time frame
l Hour, day, week, and longer
Max CPU
Performance Insights for Amazon RDS
Feature Aurora MySQL MariaDB PostgreSQL Oracle SQL Server
VPC ü ü ü ü ü ü
High availability ü ü ü ü ü ü
Instance Scaling ü ü ü ü ü ü
Automated Backups ü ü ü ü ü ü
Encryption ü ü ü ü ü ü
Read replicas ü ü ü ü Oracle
Golden Gate
/ DMS
DMS
Cross region replicas ü ü ü ü
Max Storage 64 TB 6 TB 6 TB 6 TB 6 TB 4 TB
Scale Storage Auto scaling ü ü ü ü
Provisioned IOPS NA 30,000 30,000 30,000 30,000 20,000
Largest Instance R3.8XL
R3.8XL
M4.10XL
R3.8XL
M4.10XL
R3.8XL
M4.10XL
R3.8XL
M4.10XL
R3.8XL
M4.10XL
RDS Engine Capability Matrix
AWS Database Migration Service
• Fully managed service for migration from on-premises to the
AWS Cloud with minimal downtime
• Migrates data to and from all widely used commercial and
open source DBs
• Schema Conversion Tool that converts source DB schemas,
stored procedures and application code to a different target
format
• Supports homogenous and heterogeneous data replication
• A terabyte-sized DB can be migrated for as little as $3
Database Conversion Capabilities in SCT
Source Database Target Database
Microsoft SQL Server è Amazon Aurora, MySQL, PostgreSQL
MySQL è Amazon Aurora, PostgreSQL
Oracle è Amazon Aurora, MySQL, PostgreSQL
Oracle Data Warehouse è Amazon Redshift
PostgreSQL è Amazon Aurora, MySQL
Teradata, Netezza, Greenplum è Amazon Redshift
AWS Database Migration Service Customers
Heterogeneous Migration
• Oracle private DC to RDS PostgreSQL migration
• Used the AWS Schema Conversion Tool to convert their
database schema
• Used on-going replication (CDC) to keep databases in sync
until they reached the cutover window
• Benefits:
• Improved reliability of the cloud environment
• Savings on Oracle licensing costs
• SCT Assessment Report let them understand the scope of the
migration
Thank you!
aws.amazon.com/rds
Learn more..

More Related Content

Introduction to Amazon Relational Database Service

  • 1. © 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Relational Database Service (Amazon RDS) Joyjeet Banerjee Enterprise Solutions Architect
  • 2. • Multi-engine support – Aurora, MySQL, MariaDB, PostgreSQL, Oracle, SQL Server • Automated provisioning, Scaling, Patching, Backup/Restore • High availability with RDS Multi-AZ, Auto-Failover – 99.95% SLA for Multi-AZ deployments • Security • Monitoring Amazon RDS
  • 3. If you host your databases on-premises Power, HVAC, net Rack & stack Server maintenance OS patches DB s/w patches Database backups Scaling High availability DB s/w installs OS installation App optimization you
  • 4. If you host your databases in Amazon EC2 Power, HVAC, net Rack & stack Server maintenance OS patches DB s/w patches Database backups Scaling High availability DB s/w installs OS installation App optimization you
  • 5. If you host your databases in Amazon RDS Power, HVAC, net Rack & stack Server maintenance OS patches DB s/w patches Database backups App optimization High availability DB s/w installs OS installation Scaling you
  • 6. No infrastructure management Scale up/down Cost-effective Instant provisioning Application compatibility Why use Amazon RDS
  • 7. • Lower TCO because we manage the muck • Get more leverage from your teams • Focus on the things that differentiate you • Built-in high availability and cross region replication across multiple data centers • Available on all engines, including base/standard editions, not just for enterprise editions • Now even a small startup can leverage multiple data centers to design highly available apps with over 99.95% availability. We Made Things Cheaper, Easier, and Better
  • 8. Provisioning and Effortless Scaling • Handle higher load or lower usage • Naturally grow over time • Control costs
  • 9. Read Replicas Bring data close to your customer’s applications in different regions Relieve pressure on your master node for supporting reads and writes Promote a Read Replica to a master for faster recovery in the event of disaster
  • 10. Enterprise-grade fault tolerance solution for production databases Automatic failover Synchronous replication Inexpensive & enabled with one click High Availability Multi-AZ Deployments
  • 11. Security and Compliance • Network Isolation • Database instance IP firewall protection • AWS IAM based resource-level permission controls • Encryption at rest using AWS KMS or Oracle/Microsoft TDE • SSL protection for data in transit • Assurance programs for finance, healthcare, government and more
  • 12. Amazon Virtual Private Cloud (Amazon VPC) Securely control network configuration Availability Zone AWS Region 10.1.0.0/16 10.1.1.0/24 Manage connectivity VPN connection VPC peering Internet gateway MAWS Direct Connect Routing rules
  • 13. Security groups Database IP firewall protection Protocol Port Range Source TCP 3306 172.31.0.0/16 TCP 3306 “Application security group” Corporate address admins Application tier M
  • 14. IAM governed access You can use AWS Identity and Access Management (IAM) to control who can perform actions on RDS Users and DBAApplications DBA and Ops Your database RDS Controlled with IAMControlled with database grants M
  • 15. At Rest Encryption for all RDS Engines AWS Key Management Service (KMS) Two-tiered key hierarchy using envelope encryption: • Unique data key encrypts customer data • AWS KMS master keys encrypt data keys • Available for ALL RDS engines Benefits: • Limits risk of compromised data key • Better performance for encrypting large data • Easier to manage small number of master keys than millions of data keys • Centralized access and audit of key activity Data key 1 Data key 2 Data key 3 Data key 4 Custom application Customer master key(s) Amazon RDS instance 3 Amazon RDS instance 2 Amazon RDS instance 1
  • 17. Compliance Aurora SOC 1, 2, 3 ISO 20001/9001 ISO 27107/27018 PCI HIPAA BAA MySQL SOC 1, 2, 3 ISO 20001/9001 ISO 27107/27018 PCI FedRamp HIPAA BAA UK Gov. Programs Singapore MTCS Oracle SOC 1, 2, 3 ISO 20001/9001 ISO 27107/27018 PCI FedRamp HIPAA BAA UK Gov. Programs Singapore MTCS MariaDB SOC 1, 2, 3 ISO 20001/9001 ISO 27107/27018 PCI PostgreSQL SOC 1, 2, 3 ISO 20001/9001 ISO 27107/27018 PCI FedRamp HIPAA BAA UK Gov. Programs Singapore MTCS SQL Server SOC 1, 2, 3 ISO 20001/9001 ISO 27107/27018 PCI UK Gov. Programs Singapore MTCS
  • 18. Standard monitoring Amazon CloudWatch metrics for Amazon RDS l CPU utilization l Storage l Memory l Swap usage l DB connections l I/O (read and write) l Latency (read and write) l Throughput (read and write) l Replica lag l Many more Amazon CloudWatch Alarms l Similar to on-premises custom monitoring tools
  • 19. Enhanced Monitoring Access to over 50 new CPU, memory, file system, and disk I/O metrics as low as 1 second intervals
  • 21. • Airbnb moved its main MySQL database to Amazon RDS with only 15 minutes of downtime • RDS simplifies much of the time-consuming administrative tasks associated with databases so engineers can spend more time on features • Uses asynchronous master-slave replication to improve website performance launched via the RDS console or an API call • Leverages multi-Availability Zone (Multi-AZ) for high availability Airbnb – Amazon RDS for MySQL
  • 23. Key Questions We Asked • What if we started from a clean sheet of paper with only constraint being that the database was a relational database? • Could we offer much better performance by leveraging the massive scale of our cloud? • Could we give you a database with designed durability indistinguishable from 100% and availability of 99.99%? • …And could we be better and cheaper than the 30-year old commercial databases in use today?
  • 24. Amazon RDS for Aurora • MySQL compatible with up to 5x better performance on the same hardware: 100,000 writes/sec & 500,000 reads/sec • Scalable with up to 64 TB in single database, up to 15 read replicas • Highly available, durable, and fault-tolerant custom SSD storage layer: 6-way replicated across 3 Availability Zones • Transparent encryption for data at rest using AWS KMS • Stored procedures in Amazon Aurora can invoke AWS Lambda functions Fastest growing service in AWS history A new relational database engine, built from the ground up to leverage AWS
  • 26. Use case: Near real-time analytics and reporting Master Read Replica Read Replica Read Replica Shared distributed storage volume Reader end-point A customer in the travel industry migrated to Aurora for their core reporting application accessed by ~1,000 internal users. § Replicas can be created, deleted and scaled within minutes based on load. § Read-only queries are load balanced across replica fleet through a DNS endpoint – no application configuration needed when replicas are added or removed. § Low replication lag allows mining for fresh data with no delays, immediately after the data is loaded. § Significant performance gains for core analytics queries - some of the queries executing in 1/100th the original time. ► Up to 15 promotable read replicas ► Low replica lag – typically < 10ms ► Reader end-point with load balancing
  • 27. Amazon Aurora is now PostgreSQL-compatible • PostgreSQL 9.6 compatibility with support for PostGIS • All the features you expect from Amazon Aurora including 15 read replicas with <10ms lag, shared storage, failover without data loss, 6-way replication across 3 Availability Zones, encryption with AWS KMS • Available now in preview
  • 28. Simplify monitoring from the AWS Management Console l Database load: Identifies database bottlenecks l Easy l Powerful l Identifies source of bottlenecks l Top SQL l Adjustable time frame l Hour, day, week, and longer Max CPU Performance Insights for Amazon RDS
  • 29. Feature Aurora MySQL MariaDB PostgreSQL Oracle SQL Server VPC ü ü ü ü ü ü High availability ü ü ü ü ü ü Instance Scaling ü ü ü ü ü ü Automated Backups ü ü ü ü ü ü Encryption ü ü ü ü ü ü Read replicas ü ü ü ü Oracle Golden Gate / DMS DMS Cross region replicas ü ü ü ü Max Storage 64 TB 6 TB 6 TB 6 TB 6 TB 4 TB Scale Storage Auto scaling ü ü ü ü Provisioned IOPS NA 30,000 30,000 30,000 30,000 20,000 Largest Instance R3.8XL R3.8XL M4.10XL R3.8XL M4.10XL R3.8XL M4.10XL R3.8XL M4.10XL R3.8XL M4.10XL RDS Engine Capability Matrix
  • 30. AWS Database Migration Service • Fully managed service for migration from on-premises to the AWS Cloud with minimal downtime • Migrates data to and from all widely used commercial and open source DBs • Schema Conversion Tool that converts source DB schemas, stored procedures and application code to a different target format • Supports homogenous and heterogeneous data replication • A terabyte-sized DB can be migrated for as little as $3
  • 31. Database Conversion Capabilities in SCT Source Database Target Database Microsoft SQL Server è Amazon Aurora, MySQL, PostgreSQL MySQL è Amazon Aurora, PostgreSQL Oracle è Amazon Aurora, MySQL, PostgreSQL Oracle Data Warehouse è Amazon Redshift PostgreSQL è Amazon Aurora, MySQL Teradata, Netezza, Greenplum è Amazon Redshift
  • 32. AWS Database Migration Service Customers
  • 33. Heterogeneous Migration • Oracle private DC to RDS PostgreSQL migration • Used the AWS Schema Conversion Tool to convert their database schema • Used on-going replication (CDC) to keep databases in sync until they reached the cutover window • Benefits: • Improved reliability of the cloud environment • Savings on Oracle licensing costs • SCT Assessment Report let them understand the scope of the migration