DBaaS at Scale
Agenda
1. What is DBaaS?
2. DBaaS Benefits
3. DBaaS Requirements
4. DBaaS Market
5. DBaaS Architecture
6. DBaaS Comparison
7. Demo
1. What is DBaaS?
What is DBaaS?
• Database as a Service
• Managed Databases
• Managed DBaaS
• Cloud Databases
• Automated Databases
What is DBaaS?
What is DBaaS?
1. Node setup - Linux tuning, file permissions, fs encryption, firewall;
2. Database installation - get database package from known source;
3. Database configuration - based on node setup, TLS, etc;
4. Monitoring configuration - to check database health and metrics;
5. Backups configuration - backup encryption, PITR, logical, cron, etc;
6. Incident response - events handling to failover in case of db failure;
7. Upgrades - database version, disk, memory, nodes, etc.
2. DBaaS Benefits
DBaaS Benefits
• Reduce time to install database (one time);
• Reduce time to operate and failover database (continuous task 1/m);
• Reduce time to upgrade database (continuous task 1/q);
• Reduce time to setup monitoring (one time, 1/scale);
• Reduce time to setup automated backups (one time, 1/scale);
• Reduce time to setup security and E2E encryption (one time);
• Reduce time for tuning (one time, 1/scale);
• Reduce human error factor (sh*t happens).
DBaaS Benefits
• Essentially even developer can bootstrap production grade database
via DBaaS self-service control panel, based on requirements of data
storage (in-memory/disk) in a few minutes;
• Scale database in case of almost no disk space left, etc.
3. DBaaS Requirements
DBaaS Requirements
• ISO 27001
• SOC2
• GDPR
• HIPAA
• CCPA
DBaaS Requirements
• All database connections should be encrypted;
• All DBaaS customer’s secrets should be encrypted (not hashed, TDE);
• LUKS disk encryption;
• Backup encryption (OpenPGP, etc);
• Periodic secrets rotation;
• SLA 99% uptime and higher;
• Time to provision in a few minutes (< 5min);
• Ability to access from anywhere and from nowhere (VPC).
DBaaS Requirements
• Multi-AZ deployments;
• Simple to use;
• No vendor lock;
4. DBaaS Market
5. DBaaS Architecture
DBaaS Architecture
Proxy Based DNS Based
DBaaS Architecture
Global Proxy Based
DBaaS Architecture
Proxy Based DNS Based
• Scaleway
• Compose
• Heroku
• CockroachDB Cloud (partially)
• ScaleChamp
• ScaleGrid
• Aiven
• Trove
• Ambari
DBaaS Architecture
Global Proxy Based
• CockroachDB Cloud (partially)
OpenStack Trove Architecture
OpenStack Trove Architecture
Ambari Architecture
Scaleway Architecture
Yandex.Architecture
6. DBaaS Comparison
DBaaS Comparison
• ScaleChamp – Largest by clouds coverage;
• ScaleGrid – BYOC + Full SSH access;
• Compose – Largest by provided services, smallest by clouds coverage;
• ObjectRocket – Alternative MongoDB hosting with a few clouds.
• Aiven – In the the middle by provided services, clouds and
integrations between them, VPC peering included.
• 84Codes (CloudAMQP, CloudElephant, CloudKarafka) - 4 clouds
coverage.
ScaleChamp
• Web Site
• Control Panel
• SDK
• Terraform
Useful Links
• ScaleChamp – https://www.scalechamp.com/
• Scaleway – https://blog.scaleway.com/dbaas-behind-the-scenes/
• Yandex.Cloud – https://habr.com/ru/company/yandex/blog/477860/
• OpenStack Trove – https://wiki.openstack.org/wiki/Trove
• Globocom DBaaS – https://github.com/globocom/database-as-a-service
Thanks!
info@scalechamp.com

DBaaS at Scale

  • 1.
  • 2.
    Agenda 1. What isDBaaS? 2. DBaaS Benefits 3. DBaaS Requirements 4. DBaaS Market 5. DBaaS Architecture 6. DBaaS Comparison 7. Demo
  • 3.
    1. What isDBaaS?
  • 4.
    What is DBaaS? •Database as a Service • Managed Databases • Managed DBaaS • Cloud Databases • Automated Databases
  • 5.
  • 6.
    What is DBaaS? 1.Node setup - Linux tuning, file permissions, fs encryption, firewall; 2. Database installation - get database package from known source; 3. Database configuration - based on node setup, TLS, etc; 4. Monitoring configuration - to check database health and metrics; 5. Backups configuration - backup encryption, PITR, logical, cron, etc; 6. Incident response - events handling to failover in case of db failure; 7. Upgrades - database version, disk, memory, nodes, etc.
  • 7.
  • 8.
    DBaaS Benefits • Reducetime to install database (one time); • Reduce time to operate and failover database (continuous task 1/m); • Reduce time to upgrade database (continuous task 1/q); • Reduce time to setup monitoring (one time, 1/scale); • Reduce time to setup automated backups (one time, 1/scale); • Reduce time to setup security and E2E encryption (one time); • Reduce time for tuning (one time, 1/scale); • Reduce human error factor (sh*t happens).
  • 9.
    DBaaS Benefits • Essentiallyeven developer can bootstrap production grade database via DBaaS self-service control panel, based on requirements of data storage (in-memory/disk) in a few minutes; • Scale database in case of almost no disk space left, etc.
  • 10.
  • 11.
    DBaaS Requirements • ISO27001 • SOC2 • GDPR • HIPAA • CCPA
  • 12.
    DBaaS Requirements • Alldatabase connections should be encrypted; • All DBaaS customer’s secrets should be encrypted (not hashed, TDE); • LUKS disk encryption; • Backup encryption (OpenPGP, etc); • Periodic secrets rotation; • SLA 99% uptime and higher; • Time to provision in a few minutes (< 5min); • Ability to access from anywhere and from nowhere (VPC).
  • 13.
    DBaaS Requirements • Multi-AZdeployments; • Simple to use; • No vendor lock;
  • 14.
  • 16.
  • 17.
  • 18.
  • 19.
    DBaaS Architecture Proxy BasedDNS Based • Scaleway • Compose • Heroku • CockroachDB Cloud (partially) • ScaleChamp • ScaleGrid • Aiven • Trove • Ambari
  • 20.
    DBaaS Architecture Global ProxyBased • CockroachDB Cloud (partially)
  • 21.
  • 22.
  • 23.
  • 24.
  • 25.
  • 26.
  • 27.
    DBaaS Comparison • ScaleChamp– Largest by clouds coverage; • ScaleGrid – BYOC + Full SSH access; • Compose – Largest by provided services, smallest by clouds coverage; • ObjectRocket – Alternative MongoDB hosting with a few clouds. • Aiven – In the the middle by provided services, clouds and integrations between them, VPC peering included. • 84Codes (CloudAMQP, CloudElephant, CloudKarafka) - 4 clouds coverage.
  • 29.
    ScaleChamp • Web Site •Control Panel • SDK • Terraform
  • 30.
    Useful Links • ScaleChamp– https://www.scalechamp.com/ • Scaleway – https://blog.scaleway.com/dbaas-behind-the-scenes/ • Yandex.Cloud – https://habr.com/ru/company/yandex/blog/477860/ • OpenStack Trove – https://wiki.openstack.org/wiki/Trove • Globocom DBaaS – https://github.com/globocom/database-as-a-service
  • 31.