This session shows an overview of the features and architecture of SQL Server on Linux and Containers. It covers install, config, performance, security, HADR, Docker containers, and tools. Find the demos on http://aka.ms/bobwardms

2. Agenda
• Features and Architecture
• Installation and Configuration
• Performance
• Security
• HADR
• Docker
• Tools

3. End-to-end mobile BI
on any device
Choice of platform
and language
Most secure
over the last 7 years
0
20
40
60
80
100
120
140
160
180
200
Vulnerabilities(2010-2016)
A fraction of the cost
Self-serviceBIperuser
Only commercial DB
with AI built-in
Microsoft Tableau Oracle
$120
$480
$2,230
Industry-leading
performance
1/10
Most consistent data platform
#1 OLTP performance
#1 DW performance
#1 price/performance
T-SQL
Java
C/C++
C#/VB.NET
PHP
Node.js
Python
Ruby
R
R and Python +
in-memory at massive scale
Native T-SQL scoring
S Q L S E R V E R 2 0 1 7
I N D U S T R Y - L E A D I N G P E R F O R M A N C E A N D S E C U R I T Y N O W O N L I N U X A N D D O C K E R
Private cloud Public cloud
In-memory across all workloads
1/10th the cost of Oracle

4. SQL Server 2017
Supported platforms and Linux requirements
Linux Containers
Windows
Windows Server
• RedHat Enterprise Linux (RHEL) 7.3+
• SUSE Enterprise Linux (SLES) v12 SP2
• Ubuntu 16.04, 16.10
• Docker: Windows & Linux containers
• Windows Server / Windows 10
Memory 2 GB
File System XFS or EXT4 (and NFS)
Disk space 6 GB
Speed 2 GHz
Cores 2 cores
CPU Type x64-compatible only

5. Windows Linux
Developer, Express, Web, Standard, Enterprise  
Database Engine  
Integration Services  
Analysis Services, Reporting Services, MDS, DQS 
Maximum number of cores Unlimited Unlimited
Maximum memory utilized per instance 12 TB 12 TB
Maximum database size 524 PB 524 PB
Basic OLTP (Basic In-Memory OLTP, Basic operational analytics)  
Advanced OLTP (Advanced In-Memory OLTP, Advanced operational analytics)  
Basic high availability (2-node single database failover, non-readable secondary)  
Advanced HA (Always On - multi-node, multi-db failover, readable secondaries)  
Security
Basic security (Basic auditing, Row-level security, Data masking, Always Encrypted)  
Advanced security (Transparent Data Encryption)  
HADR
Always On Availability Groups
Failover Clustering
 
Replication 
Data
warehousing
PolyBase2 
Basic data warehousing/data marts (Basic In-Memory ColumnStore, Partitioning, Compression)  
Advanced data warehousing (Advanced In-Memory ColumnStore)  
Tools
Windows ecosystem: Full-fidelity Management & Dev Tool (SSMS & SSDT), command line tools  
Linux/OSX/Windows ecosystem: Dev tools (VS Code), DB Admin GUI tool, command line tools  
Developer Programmability (T-SQL, CLR, Data Types, JSON)  
BI & Advanced Analytics
Basic Corporate Business Intelligence (Multi-dimensional models, Basic tabular model) 
Basic “R” integration (Connectivity to R Open, Limited parallelism for ScaleR) 
Advanced “R” integration (Full parallelism for ScaleR) 
Hybrid cloud Stretch Database 
What’s in SQL Server On Linux?

6. Linux software loves packages
• Major Linux distributions follow the
pattern of using a package manager.
• RHEL: RPM and yum.
• Ubuntu: Debian and apt-get
• SUSE: RPM and zypper.
• Package: binaries + instructions to install.
• Benefits: dependency management,
automatic versioning, one-tool-to-rule-
them-all, architecture control.
mssql-server mssql-tools
mssql-
server-agent
mssql-
server-fts
mssql-
server-ha
mssql-
server-is

7. mssql-conf
• mssql-conf is a configuration script that installs with SQL
Server 2017 on RHEL, SUSE, and Ubuntu. This utility can be
used to set:
• TCP port
• Default data directory
• Default log directory
• Default dump directory
• Default backup directory
• Core dump type
• HA
• Set traceflags
• Set collation

8. Offline simple and
easy
Go for the complete
unattended
experience with
SQLCAT
Simple update to
the latest release
Rollback to a
previous update
Uninstall easy
The Installation suite
Updates based on CU
or GDR repositories
rm –r /var/opt/mssql

9. SQL Server Linux Architecture
LibOS (Win API and
Kernel)
Host Extension mapping to OS system calls
(IO, Memory, CPU scheduling)
SQLOS (SQLPAL)
SQL PAL
Everything else
System Resource &
Latency Sensitive Code
Paths
SQL Platform
Abstraction Layer (SQLPAL)
Linux Kernel
SQLSERVRSQLAGENT
ABI
API
Linux APIs (mmap, pthread_create, …)
Linux
Process
(Ring 3)
Ring 0
Based on Microsoft
Research
Drawbridge Project
Parent “Watchdog” processfork

11. Does it Perform?
#1 TPC-H Benchmark1 at 1,009,065 QphH with price/performance of $0.47 USD per QphH
World’s First Enterprise Class Diskless Database
Columnstore Indexes and In-Memory OLTP full capabilities
180 Billon Rows scanned in < 20 secs with 480 CPUs
Adaptive Query Processing and Automatic Tuning
Linux Performance Best Practice Guidance
1 #1 non-clustered 1TB TPC-H (http://www.tpc.org/3331)
Go read what our
customers say

12. S Q L S E R V E R 2 0 1 7 : I N D U S T R Y - L E A D I N G S E C U R I T Y
SECURITY
Comprehensive, easy-to-use security to implement enterprise-grade protection
(Getting started: https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-security-get-started)



Information Protection
Access Management
Threat Protection
0
20
40
60
80
100
120
140
160
180
200
Vulnerabilities(2010-2016)
+
Database access SQL Server Logins
Active Directory Authentication
Roles and permissions
Schemas
Application access Row-Level Security
Dynamic Data Masking
Encryption-at-rest Transparent data encryption (TDE)
Backup encryption
Cell-level encryption
Encryption in transit Transport Layer Security (TLS 1.2)
Client-side encryption Always Encrypted
Tracking & investigation Fine-grained audit
openssl and
linux config

13. AD Authentication on Linux
• Setup + Config requires Linux specifics (e.g. realm to join the domain)
• Built on Kerberos and GSSAPI
• The steps are….
Join SQL Server host to AD domain
Create AD user for SQL Server and set SPN
Configure SQL Server service keytab
Create AD-based logins in Transact-SQL
Connect to SQL Server using AD Authentication

14. CLUSTER_TYPE = EXTERNAL
Auto failover
Pacemaker
SQL resource agent (mssql-server-ha)
3 replicas required
Configuration only replica
for metadata
Full AG capabilities
Pacemaker and Corosync
Single SQL Server instance
SQL resource agent (mssql-server-ha)
Shared Storage
ISCI, NFS, SMB
CLUSTER_TYPE=NONE
No clustering required
Manual or forced failover
Sync or async replicas
Read scale routing
Failover Cluster
Instance
High Availability
Availability Group
Read-Scale
Availability Group

15. Solution
Distributed Availability Group
AG2 AG1
Migration/Testing

17. Docker Containers: What and why?
• Docker: Multi-platform container engine based on
Linux and Windows Containers.
• NOT virtualization
• Image
• lightweight, stand-alone, executable package that
includes everything needed to run a piece of software,
including the code, a runtime, libraries, environment
variables, and config files
• Container
• runtime instance of an image—what the image
becomes in memory when actually executed
• Imagine a world of “database containers”
• What is all this talk about DevOps?

18. How to run SQL Server in Docker?
• In a manner of minutes…
On Linux:
Connect:
> “Fire Away” like any other SQL Server
$ docker pull microsoft/mssql-server-linux:2017-latest
$ sudo docker run -e 'ACCEPT_EULA=Y' -e 'MSSQL_SA_PASSWORD=<YourStrong!Passw0rd>'
-p 1401:1433 --name sql3
-d microsoft/mssql-server-linux:2017-latest
$ sudo docker exec -it sql3 "bash"
$ /opt/mssql-tools/bin/sqlcmd -S localhost -U SA -P '<YourStrong!Passw0rd>'

19. Docker in the real world
• Run in production (Use the docker store)
• To run multiple containers on the same host, use different ports.
• Pull a specific version
$ docker run --name sqlenterprise
-e 'ACCEPT_EULA=Y' -e 'SA_PASSWORD=<YourStrong!Passw0rd>'
-e 'MSSQL_PID=Enterprise' -p 1401:1433
-d store/microsoft/mssql-server-linux:2017-latest
$ docker run -e 'ACCEPT_EULA=Y' -e 'SA_PASSWORD=<YourStrong!Passw0rd>' -p 1401:1433 -d microsoft/mssql-server-linux
$ docker run -e 'ACCEPT_EULA=Y' -e 'SA_PASSWORD=<YourStrong!Passw0rd>' -p 1402:1433 -d microsoft/mssql-server-linux
$ docker pull microsoft/mssql-server-linux:<version>
docker hub image
includes: SQL
Server Engine and
tools
Licensing is the
same
Supports
Availability Groups
Docker files for
CentOS and RHEL
mssql-tools docker
image

20. Data Persistence
• Mount the drive on the location
of the SQL on Linux data.
Default: /var/opt/mssql
• Docker Engine copies the data
over to the container once docker
run is executed. SQL Server
restores data files.
• Host data location is locked by
Docker process -> Multiple
containers can’t access the same
drive.
Docker Engine
mssql
data
data
Host
$ docker run -e … -e … –v /your/location:/var/opt/mssql -p … -d microsoft/mssql-server-linux

21. SQL Server 2017 on Linux
Tools and programmability
• Windows SQL Server Management
Studio (SSMS)
• Windows SQL Server Data Tools (SSDT)
• 3rd party tools continue to work
• Native Linux command tools
• sqlcmd, bcp, sqlpackage
• Visual Studio Code mssql extension
• Existing drivers/frameworks supported
• SQL Operations Studio
• mssql-cli New
New

22. Introducing SQL Operations Studio
Free lightweight modern data operations tool for SQL everywhere
Cross-Platform
Based on VS Code.
Available on Windows,
Linux and macOS
Modern
Rich SQL editor,
customizable dashboards,
modern code workflow,
monitoring +
troubleshooting
Open
Source code on Github for
Community + Partners to contributehttps://aka.ms/sqlopsstudio

23. APP-DEV SCENARIOS
• Connect to SQL running anywhere, Azure SQL
DB and Azure SQL DW
• Connection management (secret store, profiles)
• Edit T-SQL with rich language services
(IntelliSense, syntax colorization, auto-complete,
T-SQL error validations, T-SQL snippets)
• Run T-SQL queries and see results
• Export results to CSV, JSON
https://aka.ms/mssql-marketplace

24. Available on Linux, macOS, Windows Available on Linux Preview
sqlcmd bcp mssql-scripter DBFS mssql-cli
Akin to psql & mysql
- Connect to SQL
anywhere
- Run ad-hoc T-SQL
- View results
Akin to pg_dump but
for bulk data loading
- Connect to SQL
anywhere
- Bulk load/export
data
Akin to pg_dump &
mysqldump
- Connect to SQL
anywhere
- Generate CREATE
scripts for schema
- Generate INSERT
scripts for data
- Save scripts as .sql
files
- Pipe to native *nix
tools
- Connect to SQL
anywhere
- Monitor live data
from SQL Server
DMVs as virtual files
in a virtual directory
“Next Gen” sqlcmd
- Connect to SQL
anywhere
- Get results as raw
text, formatted CSV
or JSON
- CLI 'tab completion'
(T-SQL keywords,
statements, tables,
views, …)
- Platform-native
piping with awk,
sed, grep, jq, cut,
JMESPath

27. FAQ
What Linux platforms are supported?
SQL Server is currently supported on Red Hat Enterprise Server, SUSE Linux Enterprise Server, and
Ubuntu. For the latest information about the supported versions, see Supported platforms.
Can I install SQL Server on the Linux Subsystem for Windows 10?
No. Linux running on Windows 10 is currently not a supported platform for SQL Server and related
tools.
How do I get SQL Server installed on my Linux servers?
Microsoft maintains package repositories for installing SQL Server and supports installation via native
package managers such as yum, zypper, and apt. To quickly install, see one of the quick start tutorials.
Which Linux file systems can SQL Server 2017 use for data files?
Currently SQL Server on Linux supports ext4 and XFS. Support for other file systems will be added as
needed in the future.
Can I download the installation packages to install SQL Server offline?
Yes. For more information, see the package download links are in the Release notes. Also, review the
instructions for offline installations.

28. FAQ
Can I use the SQL Server Management Studio client on Windows to access SQL Server on Linux?
Yes, you can use all your existing tools that run on Windows to access SQL Server on Linux. These include tools from Microsoft such as SQL
Server Management Studio (SSMS), SQL Server Data Tools (SSDT), and OSS and third-party tools.
Is there a tool like SSMS that runs on Linux?
The new Microsoft SQL Operations Studio (preview) is a cross-platform tool for managing SQL Server. For more information, see What is
Microsoft SQL Operations Studio (preview)?.
Are commands like sqlcmd and bcp available on Linux?
Yes, sqlcmd and bcp are natively available on Linux, macOS, and Windows. In addition, use the new mssql-scripter command line tool on Linux,
macOS, or Windows to generate T-SQL scripts for your SQL database running anywhere.
Is it possible to view Activity Monitor when connected through SSMS on Windows for an instance running on Linux?
Yes, you can use SSMS on Windows to connect remotely, and use tools/ features such as Activity Monitor commands on a Linux instance.
What tools are available to monitor SQL Server performance on Linux?
You can use system dynamic management views to collect various types of information about SQL Server, including Linux process information.

29. FAQ
Has Microsoft created an app like the SQL Server Configuration Manager on Linux?
Yes, there is a configuration tool for SQL Server on Linux: mssql-conf.
Does SQL Server on Linux support multiple instances on the same host?
We recommend running multiple containers on a host to have multiple distinct instances running on a host. Each container will need to listen on a
different port. For more information, see Run multiple SQL Server containers.
Are Always On and clustering supported in Linux?
Failover clustering and high availability on Linux are achieved with Pacemaker on Linux. For more information, see Business continuity and
database recovery - SQL Server on Linux.
Is it possible to configure replication from Linux to Windows and vice versa?
Read-scale replicas can be used between Windows and Linux to replicate data one-way.
Is it possible to migrate existing databases in older versions of SQL Server from Windows to Linux?
Yes, there are several methods of achieving this.
Can I migrate my data from Oracle and other database engines to SQL Server on Linux?
Yes. SSMA supports migration from several types of database engines: Microsoft Access, DB2, MySQL, Oracle, and SAP ASE (formerly SAP Sybase
ASE). For an example of how to use SSMA, see Migrate an Oracle schema to SQL Server 2017 on Linux with the SQL Server Migration Assistant.
Can I change the ownership of SQL Server files and directories from the installed mssql account and group?
We do not support changing the ownership of SQL Server directory and files from the default installation. The mssql account and group is
specifically used for SQL Server and has no interactive login access.

30. Modern BI
Big Data
&
Data Warehousing
Database
Modernization
Data Science & AI
Migrate to SQL
Server or Azure
IoT
6 ways to get value data.
Apply for complimentary workshop, assessment or PoC
Application link: www.aka.ms/data6offers

31. Resources
docs
blog
blog posts on linux
SQL Server on Linux
resources
SUSE website
SQL Operations Studio
mssql-cli

32. http://aka.ms/ts/Toronto

35. Offer: Data Platform Modernization
Are you still running applications on SQL Server 2005 or 2008? It’s time to move your data infrastructure to the new level.
Upgrading to SQL Server 2017 or moving to Azure SQL DB can help your organization to stay compliant, improve performance,
reliability, security and achieve higher flexibility.
Microsoft partners can help you to learn about the latest version of SQL Server and Azure Data Services, get familiar with the
benefits of modernizing your Data Infrastructure, assess implementation & test drive new solution with a Proof of Concept project.
Ready to upgrade your data infrastructure?
Apply for complimentary workshop, assessment or PoC: www.aka.ms/Data6Offers
* Apply your Software Assurance benefits (SQL Server Deployment Planning Services days) to cover the engagement cost.
Your organization also might be eligible for subsidized deployment services. Please contact your Microsoft Account Manager or
Partner for details.
www.aka.ms/Data6Offers

36. Offer: Migrate to SQL Server & Azure
Why Migrate? Oracle customers have many concerns about moving forward on their Oracle platforms, with one of the risks being
getting locked into a single vendor with high licensing costs. Oracle licenses for the same workload could cost up to 10-12 times
more than SQL Server. By migrating to SQL Server your organization can save money and achieve the performance, scale, and
security your mission-critical applications need.
Microsoft partners can help you to assess your current environment, review architectural considerations, create a detailed
migration plan to SQL Server and pilot a future solution with Proof of Concept project.
Review architectural
considerations and create a
migration plan
Dive into key features of SQL
Server and Azure SQL DB
through hands-on labs and
instructor-led demos.
Ready to migrate to SQL Server or Azure?
Apply for complimentary workshop, assessment or PoC: www.aka.ms/Data6Offers
* Apply your Software Assurance benefits (SQL Server Deployment Planning Services days) to cover the engagement cost.
Your organization also might be eligible for subsidized deployment services. Please contact your Microsoft Account Manager or
Partner for details. www.aka.ms/Data6Offers

37. Buying a SQL Server license gives
you the option to use it on
Windows Server, Linux, or Docker.
Regardless of where you run it—
VM, Docker, physical, cloud, on-
premises—the licensing model is
the same; available features depend
on which edition of SQL Server you
use.
LICENSE
Same license, new choice
Check out the SQL
Server on Linux with
RedHat Offer

38. Linux packages: the result
• Install and upgrade with a single
command.
• Remove with a single command.
• 3rd party software: First-time install by
adding repository and running install
command.
• Fully-scriptable/automatable.

39. Features not currently supported on Linux

40. E N C R Y P T D A T A A T R E S T A N D I N M O T I O N
SECURITY
Always Encrypted
Query
Client side Server side
Data set
Enhanced
SQL Server
Library
CIPHERTEXT
Search for single
customer record
Sensitive data
remains encrypted
inside SQL Server
Result set with
unencrypted data
Column master key Column encryption key
Customer Credit card # Exp.
Denny Usher 0x7ff654ae6d 5/174949-8003-8473-1930
Customer Credit card # Exp.
Tim Irish 4839-2939-1919-3987 7/19
Denny Usher 4949-8003-8473-1930 5/17
Alicia Hodge 9000-4899-1600-1324 4/18
Credit card #
1x7fg655se2e
0x7ff654ae6d
0y8fj754ea2c

41. Environment Variables
These variables can be used to silently configure SQL Server on Linux:
ACCEPT_EULA Accept the SQL Server license agreement when set to any value (for example, 'Y'). Used on
first install only.
SA_PASSWORD Configure the SA user password. Used on first install only.
MSSQL_TCP_PORT Configure the TCP port that SQL Server listens on (default 1433).
MSSQL_IP_ADDRESS Set the IP address. Currently, the IP address must be IPv4 style (0.0.0.0).
MSSQL_BACKUP_DIR Sets the Default backup directory location.
MSSQL_DATA_DIR Change the directory where the new SQL Server database data files (.mdf) are created.
MSSQL_LOG_DIR Changes the directory where the new SQL Server database log (.ldf) files are created.
MSSQL_DUMP_DIR Change the directory where SQL Server will deposit the memory dumps and other
troubleshooting files by default.
MSSQL_ENABLE_HADR Enable Availability Groups.

42. Encrypt connections on Linux using TLS 1.2
• TLS 1.0, 1.1 and 1.2 supported
• TLS is used to encrypt connections from a client application
to SQL Server
• Specify "Encrypt=True" and "TrustServerCertificate=False" in
their connection strings.
• FIPS compliance
• Recently moved to openssl stack

43. Use of openssl Crypto
• SQL Server on Linux uses openssl crypto instead of the
Windows crypto
• Use certificates from the Linux file system
• This allows customers to run in FIPS mode.

44. Failover cluster
Instance-level protection
Seconds to minutes RTO
Basic availability groups
AG with 2 replicas
Log shipping
Warm standbys for DR
VM failover
Resilience against guest
and OS-level failures
Minutes RTO
Backup and restore
DR
Minutes to hours RTO
Always-on availability
groups
• Database level protection
• Seconds to minutes RTO
Distributed availability
groups
• DR
• Seconds to minutes RTO
Simple Standard Mission critical

45. Enterprise building a mission critical app
Scenario Solution
Backups
Reports
HA
DR
Async Log
Synchronization
Sync Log
Synchronization

46. Scenario Solution

47. Scale with read only secondary replicas
Async Log Synchronization
OLTP workload

48. Async Log
Synchronization
Distributed availability group
AG2
AG1

49. Best Practices
• Change the SA password.
• To run multiple containers on the same host, use different ports.
• Upgrade SQL Server frequently
• Data persistence
$ docker exec -it <ContainerID> /opt/mssql-tools/bin/sqlcmd -S localhost -U SA -P '<Old Password>'
-Q 'ALTER LOGIN SA WITH PASSWORD="<New Password>";'
$ docker run -e 'ACCEPT_EULA=Y' -e 'SA_PASSWORD=<YourStrong!Passw0rd>' -p 1401:1433 -d microsoft/mssql-server-linux
$ docker run -e 'ACCEPT_EULA=Y' -e 'SA_PASSWORD=<YourStrong!Passw0rd>' -p 1402:1433 -d microsoft/mssql-server-linux
$ docker pull microsoft/mssql-server-linux