This blog provides an easy way to understand how to deploy VPN Connect. It is divided in 2 parts.
Introduction Web applications rely on load balancers for high availability, fail-over, and scaling. Client to application communication happens via a load...
Introduction Web applications rely on load balancers for high availability, fail-over, and scaling. Client to application communication happens via a load balancer over HTTP/S which is inherently stateless however many times applications require the client state to be maintained throughout a session or for a period of time till a multi-step transaction is completed. In load balanced environment with multiple application servers in a cluster, maintaining a client state is...
Introduction Web applications rely on load balancers for high availability, fail-over, and scaling. Client to application communication happens via a load balancer over HTTP/S which is inherently...
Oracle recently introduced a Web Application Firewall (WAF) service to further enhance and secure its Oracle Cloud Infrastructure offerings. The Oracle Cloud...
Oracle recently introduced a Web Application Firewall (WAF) service to further enhance and secure its Oracle Cloud Infrastructure offerings. The Oracle Cloud Infrastructure WAF is based on Oracle Zenedge and Oracle Dyn technologies. It inspects all traffic destined to your web application origin and identifies and blocks all malicious traffic. WAF offers the following tools, which can be used on any website, regardless of where it is being hosted: Origin management. Bot...
Oracle recently introduced a Web Application Firewall (WAF) service to further enhance and secure its Oracle Cloud Infrastructure offerings. The Oracle Cloud Infrastructure WAF is based on...
There are times when we need to encapsulate certain traffic flows in an overlay network. Hopefully it's a rare need, as it adds additional header overhead,...
There are times when we need to encapsulate certain traffic flows in an overlay network. Hopefully it's a rare need, as it adds additional header overhead, processing requirements and complexity to an environment. Drawbacks aside, the ability to create overlay networks is a valuable necessity sometimes and is a good tool to have in your tool belt! Generic Routing Encapsulation (GRE) is a common tunneling protocol, allowing for encapsulating both IP and non-IP protocols...
There are times when we need to encapsulate certain traffic flows in an overlay network. Hopefully it's a rare need, as it adds additional header overhead, processing requirements and complexity to...
OCI provides a load balancing service which can be leveraged to distribute incoming traffic from clients amongst a set of servers. A simple example can...
OCI provides a load balancing service which can be leveraged to distribute incoming traffic from clients amongst a set of servers. A simple example can illustrate this feature. I have two compute instances in OCI running Apache HTTP Server. The Apaches are listening on port 80 for incoming requests. I have defined a Load Balancer in OCI which routes traffic to these two Backend servers. The Load Balancer accepts http requests over port 80 as shown in the figure above. From...
OCI provides a load balancing service which can be leveraged to distribute incoming traffic from clients amongst a set of servers. A simple example can illustrate this feature. I have two compute...
Identity is the new perimeter. Sounds familiar? In a traditional on-prem world, all the workload had one thing in common. They were all part of a large private...
Identity is the new perimeter. Sounds familiar? In a traditional on-prem world, all the workload had one thing in common. They were all part of a large private network. You could shield that common attack vector (network) with strong security policies using both Web Application Firewall (WAF) and network firewall. As the workload moved to cloud, it moved to a lot of different cloud providers some SaaS and some Iaas_PaaS. In such a distributed world, the network is no more...
Identity is the new perimeter. Sounds familiar? In a traditional on-prem world, all the workload had one thing in common. They were all part of a large private network. You could shield that...
It's a common scenario to have DNS name resolution between FQDNs in OCI and your on-prem... or between multiple OCI VCNs. How do we make this happen today? By...
It's a common scenario to have DNS name resolution between FQDNs in OCI and your on-prem... or between multiple OCI VCNs. How do we make this happen today? By using a hybrid DNS solution, of course! What is a hybrid DNS solution? It's essentially a DNS overlay on top of the built-in OCI VCN DNS. It would be great if it were integrated into OCI as a whole, but it's not... so knowing that, it's actually very easy to set this up and be happily working in a short period of...
It's a common scenario to have DNS name resolution between FQDNs in OCI and your on-prem... or between multiple OCI VCNs. How do we make this happen today? By using a hybrid DNS solution, of course!...
Recently a colleague of mine (Kumar) and myself were facing a scenario where we needed to provide a solution providing disaster recovery (DR) functionality...
Recently a colleague of mine (Kumar) and myself were facing a scenario where we needed to provide a solution providing disaster recovery (DR) functionality between two OCI regions. It is a fairly common requirement to support some sort of disaster recovery (DR) between different geographical locations. It has been a common practice in traditional enterprise data centers for years and has not changed with the adoption of cloud technologies. Indeed, as cloud consumption has...
Recently a colleague of mine (Kumar) and myself were facing a scenario where we needed to provide a solution providing disaster recovery (DR) functionality between two OCI regions. It is a fairly...
OCI offers a very robust and high-performance network firewall that's integrated into the very core of the Virtual Cloud Network (VCN). For some customers,...
OCI offers a very robust and high-performance network firewall that's integrated into the very core of the Virtual Cloud Network (VCN). For some customers, this is sufficient, while other customers need more from their cloud security than is provided natively with the OCI VCN. Some environments need application-level inspection (such as URL filtering, malware inspection, etc.) while others just need the ability to view traffic flows for traffic traversing their cloud...
OCI offers a very robust and high-performance network firewall that's integrated into the very core of the Virtual Cloud Network (VCN). For some customers, this is sufficient, while other customers...
