User Responsibilities
Because Oracle handles nearly all disaster recovery management tasks, your responsibilities as an administer are kept to a minimum. You only have several major responsibilities in an Oracle-managed disaster recovery environment:
User Responsibilities
Task | Description | See.. |
---|---|---|
Subscribe to and configure the secondary region | Subscribe to the secondary region to ensure that secondary instance creation is successful, add a policy to manage integration instances, and configure the necessary policies for any default or defined tags you are using. | Perform Preinstallation Tasks |
Install primary and secondary instances | Select the Enable disaster
recovery toggle when installing an instance in
the Oracle Cloud
Infrastructure Console.
This action creates primary and secondary instances in separate, predetermined regions. Data synchronization between the two instances is automatically configured and occurs in near real time. |
Install and Configure Oracle Integration for Disaster Recovery |
Perform prerequisites prior to failover | Review the following prerequisites to determine
if they apply to your setup:
|
Perform Failover Prerequisite Tasks |
Fail over and fail back between instances in different regions | Two types of failover are supported:
|
Fail Over to the Other Instance |
Configure email notification settings after failover (if using your own email tenancy) | After failover occurs, you must configure email notification settings on the Notifications page of the new primary instance. | Configure Email Notification Settings After Failover |
Understand Failover Behavior
- Bidirectional data synchronization (replication) is regularly performed in near real time between the two instances to reduce the chance of data loss after failover.
- Failover is a one instance-to-one instance replication, meaning you can only fail over to a second instance. You cannot fail over to multiple instances.
- When a failover is performed, the secondary instance takes over the responsibility of providing all features of the primary instance.
- The primary instance goes into standby mode and becomes a passive listener when the secondary instance becomes active.
- All traffic that was originally sent to the initial primary instance is forwarded to the new primary instance.
- The life cycle operations in the standby instance are disabled in the Oracle Cloud Infrastructure Console with the exception of performing a failover.
- There are no changes in OAuth credentials after failover.
- Only design-time metadata is synchronized. Runtime tracking data such as that shown in the activity stream, Instance page, and other observability pages is not synchronized with the secondary instance.
- You log in to primary and secondary instances with a global URL that does not include a region name.
- If you delete the primary instance, the secondary instance is also deleted.
- If you start and stop the primary instance, this has no impact on the secondary instance, which simply remains a passive listener.