14 Using Whole Server Migration and Service Migration in an Enterprise Deployment
The Oracle WebLogic Server migration framework supports Whole Server Migration and Service Migration. The following sections explain how these features can be used in an Oracle Fusion Middleware enterprise topology.
- About Whole Server Migration and Automatic Service Migration in an Enterprise Deployment
Oracle WebLogic Server provides a migration framework that is an integral part of any highly available environment. The following sections provide more information about how this framework can be used effectively in an enterprise deployment. - Creating a GridLink Data Source for Leasing
Whole Server Migration and Automatic Service Migration require a data source for the leasing table, which is a tablespace created automatically as part of the Oracle WebLogic Server schemas by the Repository Creation Utility (RCU). - Configuring Whole Server Migration for an Enterprise Deployment
After you have prepared your domain for whole server migration or automatic service migration, you can configure Whole Server Migration for specific Managed Servers within a cluster. - Configuring Automatic Service Migration in an Enterprise Deployment
You may need to configure automatic service migration for specific services in an enterprise deployment.
About Whole Server Migration and Automatic Service Migration in an Enterprise Deployment
Oracle WebLogic Server provides a migration framework that is an integral part of any highly available environment. The following sections provide more information about how this framework can be used effectively in an enterprise deployment.
Understanding the Difference between Whole Server and Service Migration
The Oracle WebLogic Server migration framework supports two distinct types of automatic migration:
-
Whole Server Migration, where the Managed Server instance is migrated to a different physical system upon failure.
Whole server migration provides for the automatic restart of a server instance, with all its services, on a different physical machine. When a failure occurs in a server that is part of a cluster which is configured with server migration, the server is restarted on any of the other machines that host members of the cluster.
For this to happen, the servers must use a floating IP as listen address and the required resources (transactions logs and JMS persistent stores) must be available on the candidate machines.
See Whole Server Migration in Administering Clusters for Oracle WebLogic Server.
-
Service Migration, where specific services are moved to a different Managed Server within the cluster.
To understand service migration, it's important to understand pinned services.
In a WebLogic Server cluster, most subsystem services are hosted homogeneously on all server instances in the cluster, enabling transparent failover from one server to another. In contrast, pinned services, such as JMS-related services, the JTA Transaction Recovery Service, and user-defined singleton services, are hosted on individual server instances within a cluster—for these services, the WebLogic Server migration framework supports failure recovery with service migration, as opposed to failover.
See Understanding the Service Migration Framework in Administering Clusters for Oracle WebLogic Server.
Implications of Using Whole Server Migration or Service Migration in an Enterprise Deployment
Using Whole Server Migration (WSM) or Automatic Service Migration (ASM) in an Enterprise Deployment has implications in the infrastructure and configuration requirements.
The implications are:
-
The resources used by servers must be accessible to both the original and failover system
In its initial status, resources are accessed by the original server or service. When a server or service is failed over/restarted in another system, the same resources (such as external resources, databases, and stores) must be available in the failover system. Otherwise, the service cannot resume the same operations. It is for this reason, that both whole server and service migration require that all members of a WebLogic cluster have access to the same transaction and JMS persistent stores (whether the persistent store is file-based or database-based).
Oracle allows you to use JDBC stores, which leverage the consistency, data protection, and high availability features of an oracle database and makes resources available for all the servers in the cluster. Alternatively, you can use shared storage. When you configure persistent stores properly in the database or in shared storage, you must ensure that if a failover occurs (whole server migration or service migration), the failover system is able to access the same stores without any manual intervention.
-
Leasing Datasource
Both server migration and service migration (whether in static or dynamic clusters) require the configuration of a leasing datasource that is used by servers to store alive timestamps. These timestamps are used to determine the health of a server or service, and are key to the correct behavior of server and service migration (they are used to marks servers or services as failed and trigger failover).Note:
Oracle does not recommend that you use consensus leasing for HA purposes.
-
Virtual IP address
In addition to shared storage, Whole Server Migration requires the procurement and assignment of a virtual IP address (VIP) for each individual server and the corresponding Virtual Host Name which is mapped to this IP and used as the listen address for the involved server. When a Managed Server fails over to another machine, the VIP is enabled in the failover node by Node Manager. Service migration does not require a VIP.
Since server migration requires a full restart of a managed server, it involves a higher failover latency than service migration. Table 14-1 summarizes the different aspects.
Table 14-1 Different Aspects of WSM and ASM
Cluster Protection | Failover Time | Capacity Planning | Reliability | Shared Storage/DB | VIP per Managed Server |
---|---|---|---|---|---|
WSM |
4–5 mins |
Full Server running |
DB Leasing |
Yes |
Yes |
ASM |
30 secs |
Mem/CPU of services |
DB Leasing |
Yes |
No |
Understanding Which Products and Components Require Whole Server Migration and Service Migration
Note that the table lists the recommended best practice. It does not preclude you from using Whole Server or Automatic Server Migration for those components that support it.
Component | Whole Server Migration (WSM) | Automatic Service Migration (ASM) |
---|---|---|
Oracle Analytics Publisher |
YES |
NO |
Creating a GridLink Data Source for Leasing
Whole Server Migration and Automatic Service Migration require a data source for the leasing table, which is a tablespace created automatically as part of the Oracle WebLogic Server schemas by the Repository Creation Utility (RCU).
Note:
To accomplish data source consolidation and connection usage reduction, you can reuse the WLSSchemaDatasource
as is for database leasing. This datasource is already configured with the FMW1221_WLS_RUNTIME
schema, where the leasing table is stored.
For an enterprise deployment, you should create a GridLink data source:
Configuring Whole Server Migration for an Enterprise Deployment
After you have prepared your domain for whole server migration or automatic service migration, you can configure Whole Server Migration for specific Managed Servers within a cluster.
Note:
As mentioned earlier, for migration to work, servers must use a virtual hostname that matches a floating IP, as the listen address. You can specify the listen address directly in the Configuration Wizard or update it in the administration console.
Editing the Node Manager's Properties File to Enable Whole Server Migration
Use the section to edit the Node Manager properties file on the two nodes where the servers are running.
Setting Environment and Superuser Privileges for the wlsifconfig.sh Script
Use this section to set the environment and superuser privileges for the wlsifconfig.sh
script, which is used to transfer IP addresses from one machine to another during migration. It must be able to run ifconfig
, which is generally only available to superusers.
For more information about the wlsifconfig.sh
script, see Configuring Automatic Whole Server Migration in Administering Clusters for Oracle WebLogic Server.
Refer to the following sections for instructions on preparing your system to run the wlsifconfig.sh
script.
Setting the PATH Environment Variable for the wlsifconfig.sh Script
Ensure that the commands listed in the following table are included in the PATH environment variable for each host computers.
File | Directory Location |
---|---|
|
MSERVER_HOME/bin/server_migration |
|
WL_HOME/common/bin |
|
MSERVER_HOME/nodemanager |
Granting Privileges to the wlsifconfig.sh Script
Grant sudo privilege to the operating system user (for example, oracle
) with no password restriction, and grant execute privilege on the /sbin/ifconfig
and /sbin/arping
binaries.
Note:
For security reasons, sudo
should be restricted to the subset of commands required to run the wlsifconfig.sh
script.
Ask the system administrator for the sudo and system rights as appropriate to perform this required configuration task.
The following is an example of an entry inside /etc/sudoers granting sudo execution privilege for oracle
to run ifconfig
and arping
:
Defaults:oracle !requiretty oracle ALL=NOPASSWD: /sbin/ifconfig,/sbin/arping
Configuring Server Migration Targets
To configure migration in a cluster:
-
Sign in to the Oracle WebLogic Server Administration Console.
-
In the Domain Structure window, expand Environment and select Clusters. The Summary of Clusters page is displayed.
-
Click the cluster for which you want to configure migration in the Name column of the table.
-
Click the Migration tab.
-
Click Lock & Edit.
-
Select Database as Migration Basis. From the drop-down list, select Leasing as Data Source For Automatic Migration.
-
Under Candidate Machines For Migratable Server, in the Available filed, select the Managed Servers in the cluster and click the right arrow to move them to Chosen.
-
Click Save.
-
Set the Candidate Machines for Server Migration. You must perform this task for all of the managed servers as follows:
-
In Domain Structure window of the Oracle WebLogic Server Administration Console, expand Environment and select Servers.
-
Select the server for which you want to configure migration.
-
Click the Migration tab.
-
Select Automatic Server Migration Enabled and click Save.
This enables the Node Manager to start a failed server on the target node automatically.
For information on targeting applications and resources, see Using Multi Data Sources with Oracle RAC.
-
In the Available field, located in the Migration Configuration section, select the machines to which to allow migration and click the right arrow.
In this step, you are identifying the host to which the Managed Server should failover if the current host is unavailable. For example, for the Managed Server on the HOST1, select HOST2; for the Managed Server on HOST2, select HOST1.
Tip:
Click Customize this table in the Summary of Servers page, move Current Machine from the Available Window to the Chosen window to view the machine on which the server is running. This is different from the configuration if the server is migrated automatically.
-
-
Click Activate Changes.
-
Restart the Administration Server and the servers for which server migration has been configured.
Testing Whole Server Migration
Perform the steps in this section to verify that automatic whole server migration is working properly.
To test from Node 1:
-
Stop the managed server process.
kill -9 pid
pid specifies the process ID of the managed server. You can identify the pid in the node by running this command:
-
Watch the Node Manager console (the terminal window where you performed the kill command): you should see a message indicating that the managed server's floating IP has been disabled.
-
Wait for the Node Manager to try a second restart of the Managed Server. Node Manager waits for a period of 30 seconds before trying this restart.
-
After node manager restarts the server and before it reaches Running state, end the associated process again.
Node Manager should log a message indicating that the server will not be restarted again locally.
Note:
The number of restarts required is determined by the
RestartMax
parameter in the following configuration file:The default value is
RestartMax=2
.
To test from Node 2:
-
Watch the local Node Manager console. After 30 seconds since the last try to restart the managed server on Node 1, Node Manager on Node 2 should prompt that the floating IP for the managed server is being brought up and that the server is being restarted in this node.
-
Access a product URL by using the same IP address. If the URL is successful, then the migration was successful.
Verification From the Administration Console
You can also verify migration using the Oracle WebLogic Server Administration Console:
Note:
After a server is migrated, to fail it back to its original machine, stop the managed server from the Oracle WebLogic Administration Console and then start it again. The appropriate Node Manager starts the managed server on the machine to which it was originally assigned.
Configuring Automatic Service Migration in an Enterprise Deployment
You may need to configure automatic service migration for specific services in an enterprise deployment.
Note:
Oracle Analytics Server currently does not support automatic service migration. The information is included here for users who are deploying other Fusion Middleware products that do support automatic service migration.
Setting the Leasing Mechanism and Data Source for an Enterprise Deployment Cluster
Note:
To accomplish data source consolidation and connection usage reduction, you can reuse the WLSSchemaDatasource
datasource as is for database leasing. This datasource is already configured with the FMW1221_WLS_RUNTIME
schema, where the leasing table is stored.
The following procedure assumes that you have configured the Leasing data source either by reusing the WLSSChemaDatasource
or a custom datasource that you created as described in Creating a GridLink Data Source for Leasing.
After you complete the database leasing configuration, continue with the configuration of the service migration, with static or dynamic cluster:
Configuring Automatic Service Migration for Static Clusters
After you have configured the leasing for the cluster as described in Setting the Leasing Mechanism and Data Source for an Enterprise Deployment Cluster, you can configure automatic service migration for specific services in an enterprise deployment. The following sections explain how to configure and validate Automatic Service Migration for static clusters.
- Changing the Migration Settings for the Managed Servers in the Cluster
- About Selecting a Service Migration Policy
- Setting the Service Migration Policy for Each Managed Server in the Cluster
- Validating Automatic Service Migration in Static Clusters
- Failing Back Services After Automatic Service Migration
Changing the Migration Settings for the Managed Servers in the Cluster
After you set the leasing mechanism and data source for the cluster, you can then enable automatic JTA migration for the Managed Servers that you want to configure for service migration. Note that this topic applies only if you are deploying JTA services as part of your enterprise deployment.
About Selecting a Service Migration Policy
When you configure Automatic Service Migration, you select a Service Migration Policy for each cluster. This topic provides guidelines and considerations when selecting the Service Migration Policy.
For example, products or components running singletons or using Path services can benefit from the Auto-Migrate Exactly-Once policy. With this policy, if at least one Managed Server in the candidate server list is running, the services hosted by this migratable target are active somewhere in the cluster if servers fail or are administratively shut down (either gracefully or forcibly). This can cause multiple homogenous services to end up in one server on startup.
When you use this policy, you should monitor the cluster startup to identify what servers are running on each server. You can then perform a manual failback, if necessary, to place the system in a balanced configuration.
Other Fusion Middleware components are better suited for the Auto-Migrate Failure-Recovery Services policy.
For Oracle Analytics Publisher, select the Manual Service Migration Only policy.
See Policies for Manual and Automatic Service Migration in Administering Clusters for Oracle WebLogic Server.
Setting the Service Migration Policy for Each Managed Server in the Cluster
Validating Automatic Service Migration in Static Clusters
Failing Back Services After Automatic Service Migration
When Automatic Service Migration occurs, Oracle WebLogic Server does not support failing back services to their original server when a server is back online and rejoins the cluster.
As a result, after the Automatic Service Migration migrates specific JMS services to a backup server during a fail-over, it does not migrate the services back to the original server after the original server is back online. Instead, you must migrate the services back to the original server manually.
To fail back a service to its original server, follow these steps:
-
If you have not already done so, in the Change Center of the Administration Console, click Lock & Edit.
-
In the Domain Structure tree, expand Environment, expand Clusters, and then select Migratable Targets.
-
To migrate one or more migratable targets at once, on the Summary of Migratable Targets page:
-
Click the Control tab.
-
Use the check boxes to select one or more migratable targets to migrate.
-
Click Migrate.
-
Use the New hosting server drop-down to select the original Managed Server.
-
Click OK.
A request is submitted to migrate the JMS-related service. In the Migratable Targets table, the Status of Last Migration column indicates whether the requested migration has succeeded or failed.
-
Release the edit lock after the migration is successful.
-
Configuring Automatic Service Migration for Dynamic Clusters
After you have configured the leasing for the cluster as described in Setting the Leasing Mechanism and Data Source for an Enterprise Deployment Cluster, you can continue with the Service Migration configuration.
Dynamic Clusters simplify the configuration for service migration because the services are targeted to the entire cluster. However, you still have to configure the migration policy at the custom persistent store level and for the JTA service. These policies determine the migration behavior of JMS and JTA services, respectively.
About Selecting a Service Migration Policy for Dynamic Clusters
When you configure service migration for dynamic clusters, you select a Service Migration Policy for each persistent store. This topic provides guidelines and considerations when you select the Service Migration Policy. The following options are available:
-
Off: Disables migration and restart support for cluster-targeted JMS service objects, including the ability to restart a failed persistent store instance and its associated services. You cannot combine this policy with the Singleton Migration Policy.
-
On-Failure: Enables automatic migration and restart of instances on the failure of a subsystem Service or the WebLogic Server instance, including automatic fail-back and load balancing of instances.
-
Always: Provides the same behavior as On-Failure and automatically migrates instances even if a graceful shutdown or a partial cluster start occurs.
Products or components that run singletons or use Path services can benefit from the Always policy. With this policy, if at least one Managed Server is running, the instances remain active somewhere in the cluster if servers fail or are administratively shut down (either gracefully or forcibly). This type of failure or shutdown can cause multiple homogenous services to end up in one server on startup.
Other Fusion Middleware components are better suited for the On-Failure policy.
Based on these guidelines, the following policies are recommended for an Oracle SOA Suite enterprise topology:
-
SOA_Cluster: On-Failure
-
OSB_Cluster: On-Failure
-
MFT_Cluster: On-Failure
For information about the JMS configuration for high availability, see Simplified JMS Cluster and High Availability Configuration.
Changing the Migration Settings for the Persistent Stores
Changing the Migration Settings for the JTA Service
Validating Automatic Service Migration in Dynamic Clusters
Failing Back Services After Automatic Service Migration
With dynamic clustering, when a distributed instance is migrated from its preferred server, it tries to fail back when the preferred server is restarted. Therefore, after the service migration process migrates specific persistent store services to a backup server during a failover, it migrates the services back to the original server after the original server is back online.