Posts

Showing posts with the label #backup

RMAN in Oracle Database 26ai: What Has Changed and Why It Matters

A practitioner's guide to the new encryption defaults, backup mobility, recovery catalog enhancements, and the features Oracle has quietly retired. Executive Overview Oracle Database 26ai delivers one of the most substantial refreshes to Recovery Manager (RMAN) in recent memory. The release strengthens encryption defaults, makes backups significantly more portable across storage classes, modernizes recovery catalog operations, and removes several long-standing features from the supported toolkit. Most of these enhancements directly improve operational flexibility and security posture. A few, however, introduce subtle behavioral inconsistencies between the documentation and runtime metadata that administrators should verify in their own environments before relying on them in production. This article distills the most consequential RMAN changes in 26ai — what is new, what is gone, what to validate, and how to adapt your operational playbooks accordingly. Contents Summary of RMAN Chan...

Building Immutable Backups on Oracle Cloud Infrastructure (OCI)

Image
A deep-dive architectural guide to ransomware-resilient, tamper-proof, and compliance-ready backup design on OCI. 1. Introduction In today's ransomware-driven threat landscape, traditional backup strategies are no longer sufficient. Modern attackers no longer stop at encrypting production systems — they actively hunt for backup repositories, encrypt or delete recovery points, and disable scheduled jobs to maximize leverage during extortion. The result is a brutal reality: organizations with otherwise mature backup programs still pay ransoms because their last line of defense was reachable from the same blast radius as production. This is precisely the problem immutable backups are designed to solve. By enforcing write-once, read-many (WORM) semantics with a time-bound retention lock, immutability removes the ability of any identity — including a compromised administrator — to alter or delete a recovery point during its protection window. Oracle Cloud Infrastructure (OCI) provides...