01 · Executive Summary
Before migrating to Oracle Autonomous Database, let's test one assumption: is your environment actually ready for it? Many organizations begin by evaluating features — automatic tuning, built-in security, reduced administration. Those capabilities are valuable, but they don't guarantee a successful migration.
Success depends on decisions made long before the first database is created: application compatibility, networking, licensing, security, operational processes, and workload design. Some organizations finish in weeks; others spend months fixing issues they never evaluated during planning. Every enterprise should answer eight questions first.
1) Is the workload suitable for ADB? 2) Is the application compatible? 3) Is networking and connectivity planned? 4) Are security and compliance designed? 5) Do you understand licensing, pricing, and costs? 6) Are performance expectations realistic? 7) Is the operations team ready for the new DBA model? 8) Do you have a migration and rollback strategy?
02 · Q1: Is Your Workload Actually Suitable for ADB?
Assuming every Oracle workload can be dropped into an autonomous container is an architectural misstep. Oracle provides distinct flavors of ADB tailored to specific access patterns — matching your workload to the correct deployment model is the baseline for success.
| Workload Profile | Target Deployment |
|---|---|
| High-concurrency OLTP, ERP, SaaS | Autonomous Transaction Processing (ATP) |
| Analytics, data warehouse, BI | Autonomous Data Warehouse (ADW) |
| Document store, JSON-centric apps | Autonomous JSON Database (AJD) |
| Low-touch microservices, dev/test | Autonomous Database Serverless (Shared) |
| Strict isolation, regulated corporates | Autonomous Database Dedicated |
- OLTP and SaaS — ATP optimizes row-level operations, index lookups, and rapid commits, configuring Exadata storage cells to prioritize IOPS and low-latency single-block reads with aggressive Smart Flash Cache use.
- Warehousing and analytics — ADW prefers columnar formats in flash and leverages Smart Scan to offload processing to the storage tier, minimizing data movement.
- AI and vector workloads — integrated AI Vector Search runs LLM embeddings alongside relational tables, eliminating the need to sync data out to fragmented vector databases.
- Legacy and unsupported workloads — applications relying on OS access, local file-system reads/writes via UTL_FILE to non-object-storage paths, or third-party binaries installed on the host will hit roadblocks. Oracle locks down the OS to protect automation integrity; such workloads belong on Exadata Cloud@Customer or OCI Co-managed Exadata services.
03 · Q2: Have You Evaluated Application Compatibility?
ADB is a highly standardized database profile. Oracle guarantees upward compatibility for standard PL/SQL and SQL, but the operational strictures place guardrails around available features:
- Feature restrictions — manual tablespace management, custom control-file manipulation, and low-level ALTER SYSTEM hardware initializations are blocked. Legacy database links to unencrypted external endpoints will be rejected by the security framework.
- Client and integration hurdles — old Oracle clients (11g, early 12c) may fail to connect; ADB mandates modern client libraries capable of TLS 1.3 / mutual TLS wallet connectivity.
- Pre-migration assessments — run the Oracle Cloud Assessment Tool and the structural checks inside Zero Downtime Migration (ZDM) to scan schemas for unsupported data types, deprecated packages, and restricted privilege grants — before committing a single byte to migration pipelines.
Figure 1 · The structured migration assessment workflow
04 · Q3: Have You Planned Networking and Connectivity?
The most frequent point of failure in enterprise migrations isn't the database — it's network topology. Moving a core database to the cloud without a resilient, low-latency path breaks application connections and degrades user experience.
OCI networking architecture
Two primary models: Public Endpoints (secured by access control lists) and Private Endpoints. For production, Private Endpoints are the gold standard — a virtual network interface (VNIC) inside your VCN gives the database an internal, non-routable private IP so traffic never touches the public internet and obeys standard Network Security Groups.
Figure 2 · Hybrid network topology — on-premises to a Private Endpoint inside the OCI VCN
Hybrid connectivity and name resolution
Size your FastConnect line speed or fallback VPN tunnels appropriately. If application servers stay on-premises while the database moves to OCI, latency becomes a critical driver: chatty frameworks executing thousands of small sequential SQL statements per page will degrade if round-trip time jumps from 1ms to 20ms. And design DNS up front — on-premises servers must resolve OCI private FQDNs, which requires conditional forwarders or hybrid private zones via OCI Core DNS to prevent resolution errors during failover events.
05 · Q4: Have You Planned Security and Compliance?
ADB operates on a Shared Responsibility Model: Oracle automates physical security, infrastructure patching, hypervisor hardening, and firmware validation — you own identity access management, network ingress rules, data classification, and application-level auditing.
| Oracle's Responsibility (Automated) | Customer's Responsibility (Configured) |
|---|---|
| Physical data center & grid security | IAM user provisioning & federation |
| Firmware, OS, and hypervisor patching | Network Security Group (NSG) ingress rules |
| TDE infrastructure & wallet rotation | Encryption key lifecycle management (OCI Vault) |
| Automated database backups & retention | Fine-grained auditing (FGA) policy design |
| Automated storage-layer erasure checks | Data classification & masking rules |
Cryptographic and identity baselines
Security is on by default: TDE at rest with Oracle-managed or customer-managed keys in OCI Vault; TLS 1.3 / mTLS in transit with secure credential wallets. Federate identity through OCI IAM with Azure AD, Okta, or Ping Identity for centralized role-based access control rather than local database accounts.
Audit and compliance operations
Under PCI-DSS, HIPAA, or GDPR, stream database logs into OCI Audit and Oracle Data Safe — an integrated dashboard for security assessments, user risk analyses, sensitive-data discovery, and targeted masking across non-production environments.
06 · Q5: Do You Understand Licensing, Pricing, and Costs?
Cloud shifts spend from CapEx to OpEx — and calculating impact purely from baseline storage and compute metrics leads to budget variances.
Two consumption pathways
- License Included — ideal without existing Oracle footprints or when retiring legacy on-premises agreements; software rights and OCI infrastructure bundled.
- Bring Your Own License (BYOL) — applies active Enterprise/Standard Edition Processor or NUP licenses (with current support) to significantly lower the per-hour OCI infrastructure cost.
| Cost Dimension | Operational Sizing Impact & Optimization |
|---|---|
| Compute (ECPU) | Billed hourly per active ECPU; size on peak concurrency profiles |
| Auto Scaling | Compute scales up to 3x dynamically — avoids permanent over-specification |
| Storage allocation | Billed per terabyte allocated, including Exadata NVMe structures |
| Backup retention | First 60 days included; long-term archival incurs Object Storage costs |
ECPU sizing and the economics of Auto Scaling
Oracle transitioned its primary sizing metric to the ECPU (Elastic Compute Unit), replacing the older OCPU with a more granular scale. Size against actual CPU usage profiles, not historical server allocations — a database running at 15% utilization on a 64-core on-premises machine does not need an identical mapping in the cloud. With Auto Scaling enabled, compute expands up to 3x baseline during spikes and contracts afterward — ending the legacy practice of permanently provisioning hardware for Black Friday peaks.
07 · Q6: Are Your Performance Expectations Realistic?
A common misconception: moving to an autonomous model eliminates the need for proper design and query tuning. ADB runs on Exadata, but bad code and poorly structured data models will still consume excessive resources.
What the platform fixes automatically
| Underlying Issue | Autonomous Remediation & Developer Countermeasure |
|---|---|
| Unoptimized join logic | Real-time optimizer generates statistics — but code still needs refactoring |
| Missing query indexes | Auto-Indexing validates and deploys indexes automatically |
| Star-schema scan delays | Smart Scan shifts filtering to the storage cell layer |
| Runaway workload queries | Resource Manager throttles sessions via connection services |
The limits of automation
A query with seven nested subqueries, un-indexed string comparisons, and circular cross-joins will still run inefficiently. And ADB's predefined service names (HIGH, MEDIUM, LOW, TP, TPURGENT) govern resource allocation: connect an analytics reporting tool to TPURGENT — reserved for low-latency transactions — and it can starve operational OLTP tasks of CPU. Aligning application modules with the correct connection service profiles is a production prerequisite.
08 · Q7: Is Your Operations Team Ready for the New DBA Model?
ADB doesn't eliminate the DBA role — it shifts focus from low-value repetitive tasks toward high-value data architecture. In traditional deployments, DBAs spend up to 70% of their time on keep-the-lights-on activity: patch sets, OS kernels, disk capacity, RAC interconnects, overnight backups. The autonomous engine absorbs all of that.
Figure 3 · The operational shift from infrastructure maintenance to architecture and governance
The operations team transitions into Cloud Data Architects and Governance Specialists, focusing on:
- End-to-end governance — data classification policies and tracking access to sensitive columns.
- Cost management — monitoring OCI consumption, tuning Auto Scaling rules, avoiding over-provisioning.
- Performance engineering — optimizing application code with developers and leveraging AI Vector Search.
- Security oversight — fine-grained auditing in Data Safe and OCI IAM configuration management.
09 · Q8: Do You Have a Migration and Rollback Strategy?
A migration plan is only as good as its rollback strategy. Moving enterprise data into OCI requires the right tools, validated data integrity, and a fallback plan for unexpected cutover issues.
| Tool | Downtime Class | Best Suited Scenario |
|---|---|---|
| Oracle ZDM | Near-zero downtime | Mission-critical enterprise cutovers |
| Oracle GoldenGate | Zero downtime | Active-active replication, heterogeneous environments |
| Oracle Data Pump | Moderate downtime | Small-to-medium databases, schema moves |
- Zero Downtime Migration (ZDM) — Oracle's premier migration engine: automates the end-to-end lifecycle, orchestrating transfers via Data Pump or GoldenGate while validating source-target compatibility.
- Data Pump — for smaller databases with acceptable maintenance windows; exports schemas into logical packages via OCI Object Storage.
- GoldenGate — the gold standard for zero-downtime moves: real-time logical replication between on-premises and cloud, syncing continuously until cutover.
Validation and rollback planning
Validate consistency with automated row-count checks, primary-key verification, and checksums between source and target. Then answer the hard question: if you cut over and discover an application compatibility issue two hours later, how do you move back? For mission-critical deployments, configure reverse replication with GoldenGate — streaming cloud transactions back to the on-premises database in real time — so a rollback repoints the application tier without data loss.
Figure 4 · The enterprise lifecycle roadmap for a production migration
10 · Common Migration Mistakes
- Assuming every workload belongs on ADB.Legacy applications needing OS root customization or deprecated cartridges will stall the project. Assess characteristics before defining the cloud target.
- Ignoring application compatibility.Skipping ZDM or Cloud Assessment Tool analysis means discovering a restricted system privilege after the production maintenance window starts.
- Not designing OCI networking early.Postponing Private Endpoints, NSG rules, and DNS paths guarantees connection errors and latency surprises during testing.
- Underestimating licensing and cloud costs.Sizing compute on physical allocations instead of utilization profiles leads to over-provisioning and budget overruns.
- Assuming automation removes operational responsibility.Oracle handles physical maintenance; you still govern IAM access, security parameters, and application performance.
- Skipping performance testing.Exadata won't fix poorly written code. Run a realistic load test to catch unoptimized SQL before going live.
- Forgetting rollback planning.Cutting over without a validation and rollback strategy is a major risk — you need a defined path back without data loss.
- Treating migration as pure infrastructure work.The transition is an opportunity to modernize development workflows, security governance, and the DBA operating model — not just a lift-and-shift.
11 · Enterprise Migration Best Practices
- Perform comprehensive workload assessments.Run automated assessment utilities across the entire estate; categorize by suitability, resource utilization, and dependency complexity.
- Execute proof-of-concept deployments.Build a sandbox with a copy of production data and test real application workflows against performance and compatibility assumptions.
- Establish network infrastructure early.Design the VCN, private endpoints, security rules, and hybrid DNS before provisioning any database.
- Implement security guardrails from day one.Integrate with OCI IAM, use customer-managed keys via OCI Vault, deploy Data Safe for continuous monitoring.
- Right-size compute from utilization data.No 1:1 hardware mapping — analyze real historical usage for baseline ECPUs and let Auto Scaling handle spikes.
- Develop a resilient migration and rollback plan.Automate the lifecycle with ZDM and configure reverse transactional replication for high-availability systems.
- Prepare the DBA team for the shift.Train on cloud-native monitoring, security governance, data architecture, and cost optimization.
12 · The Production Readiness Checklist
| Area | Verify Before Production Cutover |
|---|---|
| Workload | Workload profile matches the correct target model (ATP, ADW, or AJD) |
| No dependencies on host OS access or custom binary server extensions | |
| Database size and annual growth rates calculated for baseline storage | |
| Compatibility | Schema scans completed via ZDM or the Oracle Cloud Assessment Tool |
| PL/SQL packages and database links validated against ADB restrictions | |
| Client versions updated for modern mTLS 1.3 wallet connectivity | |
| Networking | VCN topology, private subnets, and NSGs defined |
| Private Endpoints configured — database uses an internal IP | |
| FastConnect or IPSec VPN sized for latency and throughput | |
| Hybrid DNS conditional forwarders resolve OCI endpoints from on-premises | |
| Security | Database access integrated with OCI IAM or corporate identity federation |
| TDE key management policies (Oracle-managed or OCI Vault) established | |
| Data Safe deployed with fine-grained auditing policies defined | |
| Cost | BYOL vs License Included financially evaluated |
| Baseline ECPUs calculated from utilization data, not physical allocations | |
| Auto Scaling limits and cost parameters budgeted | |
| Performance | Source performance benchmarks documented for comparison |
| Connection strings mapped to the right service profiles (HIGH/MEDIUM/LOW/TP/TPURGENT) | |
| Load testing executed in staging on Exadata infrastructure | |
| Operations | Runbooks updated for automated patching and backup schedules |
| DBAs trained on cloud architecture, governance, and optimization in OCI | |
| Monitoring dashboards and OCI alarms configured for resource tracking | |
| Migration | Migration method (ZDM, Data Pump, GoldenGate) selected per downtime needs |
| Data validation scripts (row counts, checksums) tested and approved | |
| Cutover sequence and rollback plan documented and simulated |
13 · The Short Version — 8 Questions, 8 Answers
- Is the workload suitable?ADB is ideal for many enterprise workloads — but not every legacy application is a good candidate.
- Is the application compatible?Validate features, integrations, and dependencies before migration, not after.
- Is networking ready?Design VCNs, Private Endpoints, DNS, and hybrid connectivity before deployment.
- Is security planned?Configure OCI IAM, encryption, auditing, and compliance controls — and understand the shared responsibility model.
- Do you understand costs?Evaluate BYOL vs License Included, ECPU sizing, storage, and long-term operational expenses.
- Are performance expectations realistic?Exadata and automation deliver — but efficient application design and SQL optimization still matter.
- Is the operations team prepared?DBAs move from routine maintenance to architecture, governance, security, and performance oversight.
- Is the migration strategy complete?Define tools, testing, validation, rollback procedures, and cutover plans before going live.
Successful Autonomous Database projects don't begin with clicking "Create Database." They begin with asking the right questions.
14 · Frequently Asked Questions
1. Can I use standard Oracle Data Guard with ADB Serverless?
No. Oracle automates HA and DR behind the scenes. You enable Autonomous Data Guard with a click, but Oracle handles standby creation, synchronization, and failover — manual broker configuration is not supported.
2. How are patches applied — will they disrupt my application?
Patches apply automatically during defined maintenance windows, rolling through Exadata nodes sequentially. Connections redirect to active nodes, so applications with connection retry logic see minimal disruption.
3. Can legacy 11g/12c applications run against ADB?
Yes, if the SQL and PL/SQL is compatible with modern releases — but the client software must be updated (typically 19c or higher) for modern TLS wallet connectivity.
4. What's the difference between ECPU and OCPU pricing?
ECPU is based on modern x86 cores with more granular billing increments; OCPU is the older definition. ECPUs are now the default standard for better price-performance scaling.
5. Does Auto Scaling cover storage too?
No — it applies to compute (up to 3x baseline). Storage is provisioned to expected capacity but can be expanded manually or via OCI CLI without downtime.
6. Can I access the underlying operating system?
No. OS access is restricted to preserve automation integrity. Applications needing host access should use OCI Co-managed Exadata Database Services.
7. How are long-term backups handled?
60 days of automated, encrypted backups are included in OCI Object Storage. For longer compliance retention (e.g., 7 years), configure long-term retention policies that archive automatically.
8. What happens when an unoptimized query runs in ADB?
Automatic Indexing and real-time statistics mitigate what they can — but a structurally flawed query still consumes significant compute and may require code refactoring.
9. Are database links supported to on-premises environments?
Yes, but they must navigate OCI Private Endpoints, use secure network routing, and include valid credentials encryption — ADB enforces strict security standards.
10. Can ADB run inside my own data center?
Yes — via Oracle Dedicated Region Cloud@Customer or Autonomous Database on Exadata Cloud@Customer: the full autonomous experience on hardware inside your own facility.
11. What about network latency if my app servers stay on-premises?
Latency is a key hybrid consideration. Applications making many sequential round-trips per user request suffer as latency grows — optimize connection patterns or move application tiers closer to the database.
Plan your migration with ExaGuru
These eight questions are exactly the ones we drill in our migration training — with real ZDM runs, GoldenGate replication labs, and rollback simulations rather than theory.
- DB Migration course — ZDM and GoldenGate end-to-end, including reverse replication rollback design.
- OCI Architect program — the networking, IAM, and cost design that migrations live or die on.
- Exadata Expert course — the platform knowledge underneath every Autonomous deployment.
Explore DB Migration, OCI Architect, and Exadata Expert.