Frequently Asked Questions about Data Gateway

Here're the answers to some frequently asked questions about Data Gateway.

What operating systems does Data Gateway support?

For a server deployment, you can use Oracle Universal Installer to install on Linux. For a personal deployment, you can copy the binary files onto MacOS or Windows.

What is the Data Gateway Architecture?

See Overview to Connecting to On-premises Data Sources.

What is the difference between Remote Data Connector and Data Gateway?

Data Gateway replaces the Remote Data Connector utility that was used in earlier releases. Although you can still use Remote Data Connector, we recommend moving to Data Gateway, unless you're connecting to Essbase. Using Data Gateway has many advantages over using Remote Data Connector:

  • You can deploy multiple Data Gateway agents to query the same database. This provides failover and a highly-available architecture.
  • In Remote Data Connector, the communication is initiated by Oracle Analytics Cloud. In Data Gateway, the communication is initiated by Data Gateway. As a result:
    • You don't need to install anything in a network demilitarized zone (DMZ).
    • You don't have to open ports for ingress traffic in the on-premises firewall.
    • You don't have to whitelist Oracle Analytics Cloud.

Where do I install Data gateway?

You install Data Gateway in a subnet that gives visibility to both Oracle Analytics Cloud and the target data sources. Your network needs to allow outgoing (egress) traffic from the node where Data Gateway is installed to the public internet on port 443 so that Data Gateway can communicate with Oracle Analytics Cloud. In addition, the network needs to allow outgoing (egress) traffic from the Data Gateway agent to the data source. For example, you might test the network by opening a browser on the node where Data Gateway is installed and connect to Oracle Analytics Cloud. You might also test the connection from the same node to the data source using a generic JDBC tool.

Can I deploy multiple Data Gateway agents?

Yes. You can configure multiple Data Gateway agents to service the same Oracle Analytics Cloud service instance. However, all of these agents must be capable of servicing all remote queries (that is, you cannot configure one agent to service queries for one data source only, and another agent to service queries for a different data source). In addition, in server deployments you can have multiple Data Gateway agents on each node (physical or virtual). For High Availability, Oracle recommends at least two Data Gateways (that is, two VMs) per Oracle Analytics Cloud instance.

How do I configure High Availability for Data Gateway?

On the Oracle Analytics Cloud side, high availability is provided natively. On the Data Gateway side, you set up high availability by deploying two Data Gateways for each Oracle Analytics Cloud instance.

Why is Data Gateway traffic egress only?

Data Gateway regularly communicates with Oracle Analytics Cloud to see whether Oracle Analytics Cloud has queries that need processing, a process known as long-polling. Data Gateway makes a long-running TLS-encrypted HTTP request to Oracle Analytics Cloud and waits until Oracle Analytics Cloud has a query to process. If there're no queries from Oracle Analytics Cloud after two minutes, Data Gateway terminates and re-issues the request in order to avoid the request being identified and terminated as an idle or stale connection by the network.

How does Data Gateway manage SSL certificates?

The HTTPS communication between Data Gateway and Oracle Analytics Cloud leverages the SSL certificate of your Oracle Analytics Cloud service instance. The same certificate is used to encrypt your browser connections to Oracle Analytics Cloud.

How do I size Data Gateway?

To size the server that hosts Data Gateway, use Remote Data Connector sizing guidelines, which are based on 100Mbps bandwidth, 5000 result set rows, and 35ms latency. Data Gateway's performance and resource usage is similar to that of Remote Data Connector.

Where is Data Gateway running? Do I install it on a virtual machine (VM)?

  • At the Oracle Analytics Cloud end, Oracle Analytics Cloud manages the Data Gateway queue, therefore there's nothing additional to install.
  • At the data source end, the Data Gateway agent typically runs on a server or Virtual Machine next to the data source. You can also run Data Gateway from a laptop or a compute instance in the cloud, as long as Data Gateway can connect to the data source.

Can I use Data Gateway and Remote Data Connector with my Oracle Analytics Cloud instance at the same time?

No.

How is Data Gateway network traffic secured?

When you install and set up Data Gateway, you generate a public key. This public key is used in conjunction with the private key for Oracle Analytics Cloud to encrypt all communication between Oracle Analytics Cloud and Data Gateway. Data Gateway's security features prevent "replay attacks" and "man-in-the-middle" attacks. The TLS1.2 encryption deployed by the HTTPS connection provides a further layer of encryption.

Can Data Gateway limit queries that affect performance or security?

Data Gateway doesn't limit the query row size. The query row size limit is determined by the number of Oracle Compute Units (OCPUs) that your Oracle Analytics Cloud service has.

What is the timeout setting for Data Gateway?

Data Gateway uses the timeout setting applied by the Oracle Analytics Cloud query engine. If for any reason a query timeout isn't enforced by Oracle Analytics Cloud, Data Gateway queries apply a 15 minute timeout.