Now that we have designed and installed our OCI Network Firewall we’re ready to allow some traffic through the firewall. What you’ll end up doing is to modifying policies which are applied to the firewall. How it works is that there’s always a single policy attached to the firewall, if you need to update the…
Installing OCI Network Firewall – Provisioning and Configuration
Now we’re going to follow the initial design I laid out here. We already have networking provisioned, so next step will be to use OCI Console and provision our OCI Network Firewall. Once we’ve provisioned it, I’ll see what happens with traffic when it hits the firewall. Final post of this series will be then…
Installing OCI Network Firewall – Design
One of the cool things Oracle has brought to OCI is managed network firewall service which is based on Palo Alto. Before OCI Network Firewall I saw constant requirement to provision self-managed firewall such as Palo Alto, Fortinet, Check Point etc. This is still a requirement as OCI Network Firewall might not provide all the…
Getting VCN Flow Logs to Streaming
Many times after you’ve enabled the VCN Flow Logs (or any logs what so ever!) there will be a requirement to get those logs out to some other system. VCN Flow Logs is one, I’ve also configured Cloud Guard logs/alerts in similar way that I will show here. Key point is to get the logs…
Helping to troubleshoot with OCI VCN Flow Logs
I’m a huge fan of using tools available to help troubleshoot any issues there are. Luckily OCI has many free tools available such as Network Path Analyzer, which I’ve touched in the past. This time we’re going to look on VCN Flow Logs, I think as a starting point we should be looking on enabling…
OCI Routing checklist when using 3rd party firewall
This post will be checklist for items you’ll need when you have Firewall (or Hub) VCN where you route traffic to and have 3rd party firewall appliance (such as Palo Alto) inspecting traffic. You have to understand different route tables which are associated and which routes you have to set to them. What this post…
OCI ExaCS Database Upgrade Rollback
Recently I was testing OCI database upgrade from 12c to 19c and ran into an issue I wanted to fix. I was doing this via dbaascli (on Exadata) and the upgrade hit Bug 34455245 – db12c upgrade to 19c fails with ORA-600 [kxhfmgetextent.1] (Doc ID 34455245.8). I tried few things as with dbaascli you can…
Issues with OCI ExaCS PDB cloning
This is mostly just to document if you hit similar issues and how to get past them. I had to perform some remote cloning in ExaCS (from one CDB to another CDB) within same VM cluster, but hit few issues which I had to resolve first before getting it to work. [DBT-05514] Failed to connect…
OCI Tips and Tricks – Managed MySQL Database in OCI (and trying out Heatwave)
Here I’m looking on how to provision MySQL DB on OCI, see how read replicas work and how to add Heatwave Cluster to your DB. After that, I’m running some test queries to try out Heatwave, interesting results!
OCI Tips and Tricks: Create 19c Oracle Database (and manage it)
This time I go over on how to create 19c Oracle Database on OCI (hint: It’s super easy!). But what I feel is more important, where to find relevant log files after you’ve provisioned the database and how to use dbcli to manage your database and debug issues. Hope you enjoy the video!
