Best Practices from Oracle Development's A‑Team

Deploying GoldenGate Marketplace in a Private Subnet

Validated April 16, 2021 for GG 19.1


Oracle GoldenGate can be deployed in a private subnet via Oracle Cloud Infrastructure Marketplace. This provides increased security by prohibiting direct access from the internet.

Oracle GoldenGate is a comprehensive software package for enabling the replication of data in heterogeneous data environments. The product set enables high availability solutions, real-time data integration, transactional change data capture, data replication, transformations, and verification between operational and analytical enterprise systems.

Refer here for the official documentation.

This post is a step-by-step guide for deploying Oracle GoldenGate Marketplace Microservices Edition in a private subnet.


April 16, 2021 for GG 19.1


Before You Begin

Deploying Oracle GoldenGate Marketplace

Validating the Deployment


 Before You Begin and Assumptions ℘


GG Oracle GoldenGate
VCN Virtual Cloud Network
OCI Oracle Cloud Infrastructure
FQDN Fully Qualified Domain Name


Existing Components

The Marketplace deployment wizard allows you to create a VCN if necessary. A new one can be created using a QuickStart documented here. This post assumes an existing VCN with public and private subnets, internet and NAT gateways, route tables and a security list rule attached to the subnet allowing TCP access to port 22 for SSH.


A user account in an OCI tenancy for managing compute, marketplace and network resources

Initial State



 Deploying Oracle GoldenGate Marketplace 


From the OCI menu, navigate to Marketplace > All Applications. Search for GoldenGate and click Oracle GoldenGate for Oracle.

Accept the default Microservices Version
Select the appropriate Compartment
Review and check the Agreement box
Click Launch Stack

Stack Information

Accept the defaults and click Next

Configure Variables

The following depicts the settings I used. Use Oracle 19c for the Deployment Databases as a subsequent post builds on this to replicate private autonomous databases. Click Next after entering the variables.

Review and Create the Stack

Review and click Save Changes. 
Click Create.

Apply the Stack

From the OCI menu navigate to Resource Manager > Stacks

Click the stack Name just created
From the Terraform Actions dropdown select Apply
Wait for the apply job to reach the Succeeded status


 Validating the Deployment 

SSH into the GG compute instance and run a CURL command to validate the deployment.

Ensure Access to the GG Instance

From the OCI menu navigate to Compute > Instances and select the Compartment.

Click on the instance Name just created
Make a note of the Private IP Address and the Internal FQDN.

If the network you are using is not connected to the OCI VCN hosting GG then deploy a public Linux instance as a bastion to act as a SSH proxy. Here is an example and stop after 2 Validating the SSH Tunnel

Access the GG Instance

SSH to the GG instance using and entry in the SSH config file e.g. prv-gg

Run the following cURL command to ensure GG is listening on port 443


You see

About to connect() to localhost port 443 (#0)
*   Trying
* Connected to localhost ( port 443 (#0)

Deployed State


This post provided a step-by-step guide for deploying Oracle GoldenGate Marketplace Microservices Edition in a private subnet.

For other posts relating to analytics and data integration visit http://www.ateam-oracle.com/dayne-carley

Be the first to comment

Comments ( 0 )
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.Captcha