Oracle GoldenGate Database Replication over NetWall USG
This document is a guide for implementation of configuration steps needed to perform Oracle GoldenGate Database replication from OT (BLUE zone) to IT (RED zone) using NetWall USG appliance.
The document assumes the reader is familiar with Oracle Database and Oracle GoldenGate products. The document assumes the reader is familiar with the tasks associated with creating Oracle GoldenGate EXTRACT and Oracle GoldenGate REPLICAT as well as configuring the Oracle Databases for successful replication via Oracle GoldenGate. It provides guideline on the extra tasks needed to configure NetWall product family to provide transport services for Oracle GoldenGate.
The NetWall USG appliance is simply a delivery mechanism, that is used to copy cross domain trail files produced on the source network (OT) by Oracle GoldenGate to the destination network (IT).
You will need to know the IP address/port of the Oracle GoldenGate Server(s). You will need to know the IP addresses of the NetWall USG BLUE and NetWall USG RED. You will also need to be able to make changes to both NetWall USG appliances’ configuration. In addition, you will need to know the folder locations of the pre-configured EXTRACT (BLUE zone) and REPLICAT (RED zone) Oracle GoldenGate elements and credentials for accessing these locations on each zone.
The locations of the trail files are defined when creating EXTRACT / REPLICAT services during Oracle GoldenGate configuration. Record these locations so these can be used later by NetWall USG.
Example of the environment
Tasks associated with Source/Destination preparation
When performing Oracle GoldenGate replication NetWall USG is simply transport mechanism. In a sense, a replacement for the Oracle GoldenGate MGR service. Thus, there are various ways to transfer the files across the domain. The choices are: FTP/FTPS, SFTP or Windows File Share. For each of these methods, credentials will be needed as well as preparing the source/destination (e.g. Share Path). The steps to make these accessible are responsibility of the corresponding system administrators.
In addition, if you choose FTP/FTPS as a transport protocol, the FTP service on the corresponding servers needs to be tuned up in order to accommodate the NetWall product family requirements.
Configuring your OT Oracle Database/Oracle GoldenGate (BLUE)
Follow the steps defined by Oracle to configure the replication of the database of your choice. Follow the steps defined by Oracle GoldenGate to configure EXTRACT of your choice. Note the location to which your EXTRACT will dump the files. In this example – these are the parameters:
- IP address of the Oracle Database/Oracle GoldenGate server: 192.168.101.252
- EXTRACT extopsw: /u01/app/goldengate/21.3.0.0/dirdat
- User: oracle
- Password: <your chosen password>
Configuring your NetWall USG BLUE for FTPS transfers
- Connect to NetWall USG (BLUE) and login.
- Select File Transfers -> FTP -> Add FTP Share - for example:
- Fill-in the required fields.
- Ensure “Delete Files on Share after transfer” is unchecked.
- Ensure “Preserve file timestamp” is checked.
- Save the configuration and proceed to RED.
This concludes NetWall USG (BLUE) configuration.
Configuring your IT Oracle Database/Oracle GoldenGate (RED)
Follow the steps defined by Oracle to configure the replication of the database of your choice. Follow the steps defined by Oracle GoldenGate to configure REPLICAT of your choice. Note the location to which your REPLICAT will dump the files. In this example, these are the parameters:
- IP address of the Oracle Database/Oracle GoldenGate server: 192.168.222.252
- REPLICAT repopsw: /u01/app/goldengate/21.3.0.0/dirdat
- User: oracle
- Password: <your chosen password>
Configuring your NetWall USG RED
- Connect to NetWall USG (RED) and login.
- Select File Transfers -> FTP -> Add FTP Share - for example:
- Fill-in the required fields.
- Ensure “Preserver file timestamp” checkbox is checked.
- Save the configuration.
This concludes NetWall USG (RED) configuration.