Oracle International Corporation

Lakshminarayanan Luxi Chidambaran

Srinath Krishnaswamy

Sreenivas Gollapudi

Debashis Saha

Debashish Chatterjee

Mehul Dilip Bastawala

James William Stamos

Bipul Sinha

Kapil Laxmikant Surlaker

Sanjay Kaluskar

Amit Ganesh

Christopher Angel Kantarjiev

Juan R Loaiza

Tirthankar Lahiri

Srinivas Vemuri

Nancy Reiko Ikeda

Rajendra Pingte

Edwina Lu

Anindo Roy

Krishna Mohan Itikarlapalli

Santanu Datta

Lik Wong

Peter Povinec

Shailendra Mishra

Carol L Colrain

Nimar Singh Arora

Rajesh Kumar

Krishnan Meiyyappan

Kevin S Neel

Ravi Shankar Thammaiah

Joyo Wijaya

David Brower

Benny Souder

Thuvan Hoang

Chao Liang

Ramkumar Venkatesan

Mahesh Subramaniam

Jonathan Giloni

Haobo Xu

Byron Wang

Archna Kalra Johnson

John R Ciminski

Daniel Semler

Sumit Sahu

Sreekumar K Seshadri

Ashwinder Singh Ahluwalia

Sreenivas Gollupudi

M Shoaib Lari

Scot McKinley

Techniques described herein improve database security by reducing network attack surface area in conjunction with deep input validation. In an embodiment, a database session receives one or more network packets sent via a network, the database session including a database session state that specifies one or more database privileges. The database session reads said one or more network packets into one or more request-packet-buffers, wherein said one or more request-packet-buffers include an RPC op code for a database operation. Based on the one or more database privileges associated with the user associated with the database session, the database session determines whether the RPC op code may be executed. In response to determining that the RPC op code may be executed by said database session, the RPC op code is executed. In response to determining that the op code may not be executed by said database session, the execution of the RPC op code is prevented.

Reducing network attack surface area for a database using deep input validation

Disclosed are methods and apparatuses that implement automatic resizing of statement caches in response to cache metrics. One embodiment provides an approach for periodically calculating a session eligibility index for each session cache, wherein the session eligibility index indicates the priority level of the session cache for resizing, and selecting and resizing one or more cache sessions based at least in part on the session eligibility index.

Statement cache auto-tuning

A method, system, and computer program product is disclosed for interacting with a client supported by a client-side cache. Embodiments of a method, a system, and a computer program product are disclosed that retrieve a first snapshot, indicating a state of the database after a last database request by the client, associated with the client, determine any number of invalid cached results for the client based on the first snapshot, and transmit the any number of invalid cached results and a second snapshot, an update for the first snapshot.

Server supporting a consistent client-side cache

A method, system, and computer program product is disclosed for caching results in a client-side cache. Embodiments of a method, a system, and a computer program product are disclosed that associate a first snapshot of a database with a client that indicates a state of the database after a last database request by the client, and indicate any number of invalid cached results in the client cache for the client based upon the first snapshot. In some embodiments, the method further includes receiving a second snapshot that indicates a state of the database upon receipt of a database server request by the client, and updating the first snapshot with the second snapshot.

Consistent client-side cache

Some embodiments are directed to a method and apparatus for implementing an automatic failover mechanism for a resource. A client accesses a source through a first server using a first session. During the session, the client stores checksum information corresponding to data received via the session with the first server. When it is detected that the session between the first server and the client has failed, the client is automatically connected with second server that has access to the resource. The checksum information is transmitted from the client to the second server, where it is compared with checksum information calculated at the second server, so that a determination can be made as to whether the client can continue processing where it left off when connected to the second server.

Method and system for automatic failover for clients accessing a resource through a server using hybrid checksum location

Techniques for replicating data in database systems are described. In an example embodiment, a set of changes is received at a destination database, where the set of changes has been applied at a source database and is being replicated from the source database to the destination database. The set of changes is analyzed and it is determined that the set of changes includes two or more of: a subset of row-level changes, a subset of statement-level changes, and a subset of procedure-level changes. A set of dependencies is determined at least between the changes that are included in the subsets of changes. The changes, in the subsets of changes, are assigned to two or more processing elements. The set of changes is applied to the destination database by executing the two or more processing elements in parallel to each other and based on the set of dependencies.

Statement-level and procedural-level replication

A server side connection pool provides pooling of server connections. Thus, client side processes do not create groups of dedicated resources. Clients are provided the capability to communicate to a server side connection broker process to GET a pooled server connection comprising connection state plus a thread of execution for doing some work, whereby requesting the work can bypass the connection broker process and go directly to the assigned pooled connection. Once the client issues a RELEASE to release the pooled connection back to the pool, a completely different client process on potentially a different client middle tier machine can reuse the same pooled connection. The server-side connection pool can be logically partitioned into sub-pools that correspond to connection classes that typically correspond to respective applications. A client process can request a pooled connection having a particular state, where a stored procedure can be executed to generate such state.

Server-side connection resource pooling

An approach provides for recovery of message driven directors responsible for dynamically allocating resources within a multi-node database system. The receipt of a message, the action taken in response to it, and other messages sent in furtherance of the action, are performed within a single transaction. In this way, the messages and other data are left in a state consistent with the message and action taken in response being fully processed or not processed at all. A standby director, stepping in for a crashed director, inherits a state consistent with where a crashed director last successfully completed an action. The approach insulates directors from the special perils of performing high latency actions by delegating the performance of such actions to a job, (i.e. another process).

Recoverable asynchronous message driven processing in a multi-node system

Techniques for authenticating users when an operation requested by a user in one of the systems of a distributed system is redirected to another system of the distributed system. The user is authenticated in the usual way to the one system but is authenticated to the other system for the redirected operation by an authentication proxy in the first system. The fact that the authentication proxy is providing a redirected operation means that the user who requested the operation has been authenticated to the one system. The other system is thus able to authenticate the user for the redirected operation with different authentication information than would otherwise be required. An example of how the techniques are used is a distributed database system where one of the database systems in the distributed system is a cache for another of the database systems.

Authenticating sessions in queryable caches

An approach migrates database sessions from a database server on which performance and resource availability requirements are not being met to another database server. Because workload is removed from the database server not meeting these requirements, improved performance there is promoted. Furthermore, the approach switches the users in a way that attempts to keep performance and resource availability levels at the database server receiving the database sessions within goals for performance and resource availability.

Incremental run-time session balancing in a multi-node system

A system, method, computer program and system for suspending a result set and continuing from a suspended result set for a scrollable cursor is disclosed. The rows from a row source corresponding to the scrollable cursor result set are suspended into storage so that when a fetch is requested the data can be sent (continued) from the suspended storage and does not depend on the original scrollable cursor row source or session to be available.

Suspending a result set and continuing from a suspended result set for scrollable cursors

A method and apparatus for asynchronously storing transaction information related to a transaction is provided. A client process executing on a client may initiate a transaction request with a server. The server processes the transaction, commits the transaction, and writes transaction information associated with the transaction to memory without durably storing the transaction information. Thereafter, the server processing the transaction returns a message to the client that the transaction has been committed. A server process, which performed the transaction, may be reassigned to commit new work. Additional information that may be useful for the client about the result of the transaction may be contained in the message. Next, transaction information stored in memory is durably stored. A log writer may be used to durably store the transaction information to a log file. The client is subsequently notified that the transaction information has been durably stored at a client listening process.

Asynchronously storing transaction information from memory to a persistent storage

A system, method, computer program and system for suspending a result set and continuing from a suspended result set for a cursor is disclosed. The rows from a row source corresponding to the cursor result set are suspended into storage so that when a fetch is requested the data can be sent (continued) from the suspended storage and does not depend on the original cursor row source or session to be available.

Suspending a result set and continuing from a suspended result set

A method and mechanism for implementing pipelined prefetching in a computer system is disclosed. Data prefetching is utilized to predictably retrieve information between multiple levels of nodes in the computer system, in which a first server may receive prefetched data from a second server, the second server receives prefetched data from a third server, with the chain of prefetching extending as long as needed/desired to effect efficient data transfers between the nodes.

Method and mechanism for pipelined prefetching

A system, method, computer program and system for suspending a result set and continuing from a suspended result set for transparent session migration is disclosed. The rows from a row source are suspended into storage, so that after session migration, the client fetches can transparently continue from the suspended result set.

Suspending a result set and continuing from a suspended result set for transparent session migration

Growing community of inventors

San Jose, CA, United States of America

Lakshminarayanan Luxi Chidambaran