Introduction I frequently come across the situation, where I find OCI Instances that have numerous well-known ports exposed to the public internet - VNC with...
Introduction I frequently come across the situation, where I find OCI Instances that have numerous well-known ports exposed to the public internet - VNC with Port 5901 being one of the common offenders. I have even come across OCI Instances where VNC was active with a logged in root session waiting to be used on the VNC without a password... This article will show in easy steps how to avoid this situation and walks through the secure use of VNC via an SSH tunnel. The second...
Introduction I frequently come across the situation, where I find OCI Instances that have numerous well-known ports exposed to the public internet - VNC with Port 5901 being one of the...
Overview The purpose of this document is to help with troubleshooting different network services running on top of OCI. We will start with a short introduction...
Overview The purpose of this document is to help with troubleshooting different network services running on top of OCI. We will start with a short introduction of the OSI Model that will help to understand the network architecture and at what layer an issue might occur. Next, we will cover basic tools that will help with the following: Discover host availability Discover packet loss Discover delay or latency Discover MTU size limitations Network path discovery Path MTU...
Overview The purpose of this document is to help with troubleshooting different network services running on top of OCI. We will start with a short introduction of the OSI Model that will help to...
As enterprises start adopting cloud, the most prevalent approach is to use cloud as an extension of their on-premises infrastructure. OCI facilitates this...
As enterprises start adopting cloud, the most prevalent approach is to use cloud as an extension of their on-premises infrastructure. OCI facilitates this hybrid approach by providing various networking constructs such as IPSec, FastConnect, DRG, etc. Once connectivity between on-premises datacenter and OCI is established, resources such as compute hosts or instances can be deployed on OCI and accessed from on-premises. Since in this scenario OCI has been used as an extension...
As enterprises start adopting cloud, the most prevalent approach is to use cloud as an extension of their on-premises infrastructure. OCI facilitates this hybrid approach by providing various...
How to deploy Palo Alto VM-Series Firewalls in HA mode in OCI
Overview The purpose of this document is to help in configuring Palo Alto for a Hub & Spoke architecture on Oracle Cloud Infrastructure (OCI). Basic OCI and...
Overview The purpose of this document is to help in configuring Palo Alto for a Hub & Spoke architecture on Oracle Cloud Infrastructure (OCI). Basic OCI and Palo Alto experience is recommended. This document will not cover how to install Palo Alto from OCI Marketplace. This document contains the second part of the Palo Alto - Hub & Spoke architecture document. This configuration was validated using Palo Alto version 9.1.1-c25. For more details on how to use Palo Alto...
Overview The purpose of this document is to help in configuring Palo Alto for a Hub & Spoke architecture on Oracle Cloud Infrastructure (OCI). Basic OCI and Palo Alto experience is recommended. This...
Palo Alto - Hub & Spoke architecture - Part 1/2 Overview The purpose of this document is to help in configuring Palo Alto for a Hub & Spoke architecture on...
Palo Alto - Hub & Spoke architecture - Part 1/2 Overview The purpose of this document is to help in configuring Palo Alto for a Hub & Spoke architecture on Oracle Cloud Infrastructure (OCI). Basic OCI and Palo Alto experience is recommended. This document will not cover how to install Palo Alto from OCI Marketplace. This document will contain 2 parts. This configuration was validated using Palo Alto version 9.1.1. For more details on how to use Palo Alto products, please...
Palo Alto - Hub & Spoke architecture - Part 1/2 Overview The purpose of this document is to help in configuring Palo Alto for a Hub & Spoke architecture on Oracle Cloud Infrastructure (OCI). Basic...
table td th { border-width: 1px; border-color: black; border-style: solid; border-spacing: 1px 1px; padding: 10px; background-color: white; text-align: left;...
table td th { border-width: 1px; border-color: black; border-style: solid; border-spacing: 1px 1px; padding: 10px; background-color: white; text-align: left; vertical-align: top; } .cb11w1 ul li, .cb11w1 ol li { line-height: 1.4em; color: #404040 } This is the 3rd blog, (Part 3B), in a series of blogs regarding the ISV Validated Design. This blog series will contain the following topics ISV Home Page ISV Architecture Validated Design Requirements, Design, Solution Life of a...
table td th { border-width: 1px; border-color: black; border-style: solid; border-spacing: 1px 1px; padding: 10px; background-color: white; text-align: left; vertical-align: top; } .cb11w1 ul...
Oracle recently introduced IKEv2 support for IPSec connections. IKEv2 is available for both Commercial and Gov regions:...
Oracle recently introduced IKEv2 support for IPSec connections. IKEv2 is available for both Commercial and Gov regions: https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/govinfo.htm. IKE stands for Internet Key Exchange and in this blog we will discuss about the latest version, IKEv2 which can replace IKEv1 (IKEv1 is still used on many VPN appliances). IKEv2 is explained in depth in the following RFC: https://tools.ietf.org/html/rfc7296. We will focus on the...
ISV Architecture - Routing and Security details
