Infrastructure for DBAs
- 1. Infrastructure for the DBA: An Introduction Peter Shore SQL Saturday Pittsburgh
- 2. About Me ▪ SQL Server Database Administrator – ThirtyOne Gifts ▪ Intentionally Accidental DBA ▪ Over 25 years IT experience – Server Engineer – Desktop Engineer – Network Infrastructure – Desk side support ▪ President CBusPASS ▪ Co-Organizer SQL Saturday Columbus ▪ How to find me – Twitter: @pshore73 – E-mail: pshore73@outlook.com
- 3. What do these have in common?
- 4. Motherboard
- 5. NUMA ▪ Non-Uniform Memory Access (NUMA)
- 6. Local Storage ▪ Controller in server ▪ Disk in server ▪ Configured at server level ▪ Typically in Redundant Array of Inexpensive Disks (RAID) – RAID 0 – striping no parity – RAID 1 – mirror – RAID 5 – striping with parity – RAID 10 – mirror of stripes
- 7. Attached Server Storage ▪ External to physical server ▪ Used to augment local storage ▪ Direct attached storage – Chassis – Physical connection – Typically used with traditional servers (tower or rackmount) ▪ Network Attached Storage (NAS) – Connection to NAS Server (aka NAS head) – Server connects to disk array – Used with blade or traditional servers ▪ Storage Attached Network (SAN) – Connection to storage via Host Bus Adapter – Fibre channel dedicated hardware – iSCSI over LAN – Behaves more like on-board attached storage – Used with blade or traditional servers ▪ Latency is a critical metric
- 8. Local Storage Interface ▪ SATA (Serial ATA or Serial AT Attachment) – HDD or SSD – Up to 6.0 Gbit/s ▪ NVMe (non-volatile memory express) – Controller interface (PCIe) – Developed for SSD ▪ NVRAM (non-volatile RAM) – Originally like a flash drive – NVDIMM ▪ Storage on RAM ▪ Order of magnitude faster than NVMe ▪ Capacity still small
- 9. Virtualization ▪ Almost all SQL Server work loads can be virtualized – Biggest factor is hardware – Must be properly configured ▪ Creates abstraction layer between Windows Server and hardware – Virtualization layer controls access to physical hardware ▪ Host level memory pressure may require minimum memory setting ▪ Viable part of High Availability solution, but not the whole solution ▪ Backup approach can be an issue
- 10. Virtual Machine vs. Containers https://www.backblaze.com/blog/vm-vs-containers/
- 11. Cloud ▪ Infrastructure as a Service (IaaS) – “Instant infrastructure provisioned and managed via internet” – Virtualized servers – Can replace most or all infrastructure ▪ Platform as a Service (PaaS) – Backend systems – Minimize complexity of managing infrastructure – Does not replace on-site infrastructure ▪ Software as a Service (SaaS) – Productivity software
- 13. As A Service
- 14. Network Terms ▪ LAN – Local Area Network ▪ Computer network connecting computers in a limited area – House – School – Office ▪ WAN – Wide Area Network ▪ Communication network extended over a wide area – Multiple data centers – Internet ▪ VPN – Virtual Private Network – Tunnel through WAN ▪ VLAN – Virtual Local Area Network ▪ Not limited to hypervisor environments ▪ Partition traffic ▪ Partition security ▪ Allows for Quality of Service (QoS) ▪ Does not expand bandwidth ▪ Bandwidth vs. Latency – Bandwidth – maximum throughput – Latency – delay from input to outcome
- 15. Network Devices ▪ Switch – “Switches build networks” – Cisco – LAN centric – Connect devices at a site to other devices at that site ▪ PC to servers and internet ▪ WiFi access points to servers and internet ▪ Servers to servers, storage, and internet ▪ Firewall – Device to block unauthorized access while facilitating outward communication – Several different types (packet filtering, stateful inspection, next-gen firewall) ▪ Routers – “Routers connect networks” – Cisco – LAN orWAN – Discovers neighbors – Forwards packets
- 18. TCP/IP ▪ Born in the Department of Defense – Defense Advanced Research Projects Agency (DARPA) – Late 1960’s ▪ IPV4 – Production in ARPANET 1983 – 32-bit, 4,294,967,296 (232) addresses – 4 8-bit octets, usually written in dotted decimal notation ▪ IPV6 – 128-bit, approximately 3.4×1038 addresses – Not interoperable with IPV4 – 8 groups of 4 hexadecimal digits
- 21. Network Applications ▪ Dynamic Host Configuration Protocol (DHCP) – Delivers TCP/IP configuration ▪ Automatic assignment of address to end-points ▪ TCP/IP Address ▪ Subnet Mask ▪ Default Gateway – Allocated by time, known as a lease ▪ Domain Name Services (DNS) – “Phonebook” of Names to TCP/IP addresses – Address Records (A Records) ▪ Record linking address to name – Canonical Name (C Name) ▪ Reference or redirection – Mail Exchanger (MX Record) ▪ Identifies a mail server
- 22. Wires vs. Radios • Wired ▪ Pros – Tier by tier higher speed – More secure – Better for data centers ▪ Cons – Lacks flexibility – Installation cost • Wireless ▪ Pros – Flexible – Enables BYOD – Relatively lower installation cost ▪ Cons – Tier by tier speeds lower – Security weaknesses – Susceptible to interference
- 23. Windows Server ▪ TCP Chimney Offload – Transfers workload from CPU to NIC during data transmission – Disable it – Can cause connectivity problems – Designed for short lived connections ▪ Local Policies – Lock pages in memory – Perform Volume Maintenance ▪ Group Policies in affect – GPResult /r
- 24. Active Directory ▪ Microsoft implementation of Lightweight Directory Access Protocol (LDAP) ▪ Hierarchical database ▪ Objects organized by Organization Units – SQL Servers separated out – Service accounts separated out & grouped ▪ Group Policy – “Group Policy is an infrastructure that allows you to implement specific configurations for users and computers. Group Policy settings are contained in Group Policy objects (GPOs), which are linked to the following Active Directory service containers: sites, domains, or organizational units (OUs).” (http://tinyurl.com/k368u74)
- 25. Active Directory ▪ Managed Service Accounts – Complex passwords known only to account and Active Directory – Maintain Kerberos Service Principal Names (registering SPN http://tinyurl.com/zepmxpd) – Computer specific – Server 2008r2 with Active Directory Functional Level 2008r2 or higher ▪ Group Managed Service Accounts – Used on multiple hosts – Now supported in SQL 2016+
- 26. Active Directory & The Cloud ▪ Active Directory can be extended to the cloud – Azure – Amazon Web Service ▪ Active Directory Federation Services (AD FS) – Provides Single Sign On access across organizational boundaries ▪ Azure Active Directory ▪ Azure IaaS, PaaS and SaaS – PaaS means Azure SQL DB, Azure Managed Instance – Active Directory Groups you are used to
- 27. Anti-Virus ▪ Valid arguments to both sides ▪ If implemented use Microsoft recommendations for exceptions ▪ http://social.technet.microsoft.com/wiki/contents/articles/953.mi crosoft-anti-virus-exclusion-list.aspx
- 28. Questions?