Oracle FAQ Your Portal to the Oracle Knowledge Grid

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Disaster recovery question

Re: Disaster recovery question

From: Carel-Jan Engel <>
Date: Mon, 17 Oct 2005 20:15:03 +0200
Message-Id: <>


Look at Note:225633.1 at Metalink.

It is possible to set up a secure connection, using ssh. Data Guard use this.
Your network people might be willing to configure this for you.

In fact, I have quite some customers that provide ssh-access from outside, for remote support. I can easily tunnel port 1521 (or what other port needed) through ssh and logon (through SQL*Net) to their databases from my own system, using my own tools.

I once ran the Oracle installer on a system on Curacao, (Dutch Antilles, Caribbean) from The Netherlands, tunneling X through ssh.

If your network people won't consider this, the availability of your system will suffer. Scripted 'pull' of archived logs will always leave you with a potential data loss of at least the current online redo log file, and possibly more. It will result in a configuration that will be hard to manage.

Does the business accept that? IMHO SA's, DBA's and Network people have to cooperate to provide service, and not to fight each other to prevent service to be delivered.

ssh can be your friend on this. Show the note to your collegues.

Best regards,

Carel-Jan Engel

If you think education is expensive, try ignorance. (Derek Bok) ===

On Mon, 2005-10-17 at 13:48 -0400, Sandeep Dubey wrote:

> Our network is setup as front office and back office. Any type of
> connection can only come to front office. From there it is moved to
> back office where all or databases are. I am not a network person so I
> don't understand much the security issues involved.
> I am told by the security folks to pull the files from primary(
> outside the network) to fron office servers, move it to back office
> servers and apply to database.
> Thanks
> Sandeep
> On 10/17/05, Reidy, Ron <> wrote:
> > Can't you push through a ssh tunnel?
> >
> > -----Original Message-----
> > From:
> > [] On Behalf Of Sandeep Dubey
> > Sent: Monday, October 17, 2005 11:22 AM
> > To:
> > Subject: Disaster recovery question
> >
> >
> > Hi,
> >
> > I have to implement DR solution from primary database A to secondary
> > database B, both on Linux and Oracle 9.2.
> >
> > The primary database A is out of the firewall and archive logs can not
> > be pushed to server B holding secondary database because of security
> > issues. In such scenario I understand that I cann't implement Data
> > gaurd. Or is there a way to use data gaurd when the primary database is
> > out of the firewall?
> >
> > Other option I am thinking is to pull the archive logs from primary and
> > apply to secondary. Are there any issues, points to take care of with
> > such implementation?
> >
> > Thanks
> >
> > Sandeep

Received on Mon Oct 17 2005 - 13:18:23 CDT

Original text of this message